Episode notes
AOB
First live show!
Ungovernable.network updates
KeyOS 1.4 is out
NEWS
Liquid exploit: roughly 4,000 BTC withdrawn; return discussions ongoing-- TFTC, CoinDesk, Stacker News | Updates: OrangeSurf, Samson Mow
Orionx Exchange Collapses in Chile: $7M Missing, 100K Users Affected -- TFTC
Coinbase/Better Bitcoin-Backed Mortgages Can Reuse Borrowers' Collateral -- CoinDesk
House Cancels Late-September Votes, Squeezing CLARITY Act Window -- Roll Call, CoinDesk
Trezor Breach Worse Than Reported: 67,000 More US Customers Exposed -- Bitcoin Magazine
Pocket Bitcoin Breach Links 291 Users' Identities to Bitcoin Addresses -- Pocket Bitcoin Blog
Coldcard Wave 3 Attacker Moves Stolen BTC Through THORChain -- TFTC
Tether Froze $42.4M USDT on a Verbal Homeland Security Request, No Warrant -- CoinDesk
RELEASES
Highlights
KeyOS v1.4.0 -- 2026-09-04
- Major release for Passport Prime with a redesigned launcher, app sideloading with granular permissions, multisig exports for Unchained and Casa, new wallet connections (Bitcoin Safe, Coconut Wallet), authenticator imports from Aegis and Proton, and PIN-before-seed-reveal. Includes security fixes: P2WSH/P2SH-P2WSH change output validation, enhanced ATECC608 entropy, and a PSBT trust_witness_utxo toggle addressing CVE-2020-14199.
- Adds native Trezor hardware wallet support for Bitcoin cold storage and offline signing. Fixes a security vulnerability (GHSA-695v-fhpj-fv8x) where a malicious deep-link could cause EVM assets to be sent on an incorrect network. Also includes improved Monero sync visibility.
- Adds BitBox02 connectivity over Bluetooth and USB, integrates Krux hardware wallet support, and introduces emergency push notifications with home-screen alerts.
- Major update adding three new coordinators (Eleuteria, Freeport, Ammanaya), a federation consensus mechanism, and end-to-end encrypted image uploads in order chat via Blossom. Coordinators are now ranked live by DevFund donation value. Multiple security fixes including PGP verification.
Aqua Wallet v0.5.3 -- 2026-09-01
BasicSwap DEX v0.18.6 -- 2026-09-06
BitBox02 Firmware v9.27.1 -- 2026-09-04
Bitcoin Knots v29.4.1 -- 2026-09-02
Blockstream Green Desktop 3.5.4 -- 2026-09-04
Bull Bitcoin Mobile 6.13.4 -- 2026-09-04
Cashu CDK v0.18.0 -- 2026-09-02
Cashu TS v5.0.0-rc.9 -- 2026-09-04
Coldcard Firmware v5.6.2 and v1.5.2Q -- 2026-09-03
Flint v1.0.4 -- 2026-09-02
JoinMarket-NG v0.39.1 -- 2026-09-06
LDK v0.3-rc1 -- 2026-09-04
Lightning Terminal v0.17.4-alpha -- 2026-09-03
LND v0.21.3-beta -- 2026-09-02
Mostro v0.18.7 -- 2026-09-05
Specter-DIY v1.10.5 -- 2026-09-06
Tails 7.12 -- 2026-09-05
Zeus v13.2.1 -- 2026-09-02
EDUCATION
Liquid explainer: cached validation versus key compromise
- Use OrangeSurf's technical notes alongside the DeFi Prime explainer. Treat early reporting as provisional, not a completed postmortem.
- The reported flaw lets an invalid proof receive a cached pass; confidential amounts do not make validity unknowable. OrangeSurf reports one explorer rejected the transaction, with the cause of divergence unresolved.
- Do not describe this as cryptographically bypassing federation signatures, or assert that Confidential Transactions hid issuance from every observer.
- The SpendNode discussion can frame key compromise versus invalid issuance, but its incident details need the qualifications above.
- Holding an L-BTC wallet key still leaves the underlying BTC dependent on the federation and the system's validation rules. Mainchain self-custody avoids that particular peg exposure; it does not eliminate all software or consensus risk.
- Pair with Mow's on-chain message chronology: an offer to return most funds is not completed recovery, and an acknowledgement is not proof of a complete patch.
- Published: 2026-09-04
- Explains how mining pools could use BIP352 silent payment addresses to pay miners directly in coinbase transactions, replacing xpub-based payouts and improving miner privacy. The newsletter also covers the full CLN ping-flood DoS disclosure and post-quantum signature proposals.
- A concrete, actionable application of silent payments moving from theory to real infrastructure. Shows how the protocol can improve miner privacy without new consensus changes. The CLN disclosure detail is also worth mentioning as follow-up to last episode's CLN coverage.
TO DONATE TO ROMAN'S DEFENSE FUND: https://freeromanstorm.com/donate
HELP GET SAMOURAI A PARDON
- SIGN THE PETITION ----> https://www.change.org/p/stand-up-for-freedom-pardon-the-innocent-coders-jailed-for-building-privacy-tools
- DONATE TO THE FAMILIES w/ USD ----> https://www.givesendgo.com/billandkeonne
- DONATE TO THE FAMILIES w/ BTC ----> https://pay.zaprite.com/pl_JpxtkLv95T
- SUPPORT ON SOCIAL MEDIA ---> https://billandkeonne.org/
VALUE FOR VALUE
Thanks for listening you Ungovernable Misfits, we appreciate your continued support and hope you enjoy the shows.
You can support this episode using your time, talent or treasure.
TIME:
- create fountain clips for the show
- create a meetup
- help boost the signal on social media
TALENT:
- create ungovernable misfit inspired art, animation or music
- design or implement some software that can make the podcast better
- use whatever talents you have to make a contribution to the show!
TREASURE:
- BOOST IT OR STREAM SATS on the Podcasting 2.0 apps @ https://podcastapps.com
- DONATE via Monero @ https://xmrchat.com/ungovernable
- BUY SOME STICKERS @ https://ungovernable.network/shop/
FOUNDATION
https://foundation.xyz/ungovernable
Foundation builds Bitcoin-centric tools that empower you to reclaim your digital sovereignty.
As a sovereign computing company, Foundation is the antithesis of today’s tech conglomerates. Returning to cypherpunk principles, they build open source technology that “can’t be evil”.
Thank you Foundation Devices for sponsoring the show!
Use code: Ungovernable for $10 off of your purchase
CAKE WALLET
https://cakewallet.com
Cake Wallet is an open-source, non-custodial wallet available on Android, iOS, macOS, and Linux.
Features:
- Built-in Exchange: Swap easily between Bitcoin and Monero.
- User-Friendly: Simple interface for all users.
Monero Users:
- Batch Transactions: Send multiple payments at once.
- Faster Syncing: Optimized syncing via specified restore heights
- Proxy Support: Enhance privacy with proxy node options.
Bitcoin Users:
- Coin Control: Manage your transactions effectively.
- Silent Payments: Static bitcoin addresses
- Batch Transactions: Streamline your payment process.
Thank you Cake Wallet for sponsoring the show!
MYNYMBOX
https://mynymbox.io
Your go-to for anonymous server hosting solutions, featuring: virtual private & dedicated servers, domain registration and DNS parking. We don't require any of your personal information, and you can purchase using Bitcoin, Lightning, Monero and many other cryptos.
Explore benefits such as No KYC, complete privacy & security, and human support.
(00:00:00) INTRO
(00:00:58) THANK YOU FOUNDATION
(00:01:38) THANK YOU CAKE WALLET
(00:02:44) Not Just Weekly, Live Weekly!
(00:07:44) KeyOS 1.4.0
(00:14:59) NEWS
(00:15:07) The Liquid Exploit
(00:40:02) MORE NEWS
(00:55:05) BOOSTS
(01:05:44) UPDATES & RELEASES
(01:07:29) EDUCATION
(01:09:10) THANK YOU MYNYMBOX
