Episode notes
AOB
- Prime Time reminder (FTF + Week 3)
- Vegas coming up
- Roman Storm Acquittal?? - The Rage
- Rule 29 hearing in SDNY. Retrial dates floated: Oct, Nov, Jan 2027.
- Gov theory: running Tornado Cash was criminal, but mixers aren't illegal and it wasn't criminal at inception. Failla: so when did liability start?
- Gov collapsed UI and protocol. Claimed Tornado Cash itself transferred funds — user wallets as "instrumentalities."
- Only 15% of volume was illicit across the charged period.
- Failla to prosecutor: "I might argue you were doing better before you started talking."
- BIP-361 - Link
- New proposal from Jameson Lopp and others (submitted 14 April) to protect Bitcoin from future quantum computers.
- Quantum computers could one day crack the cryptography Bitcoin uses today (ECDSA/Schnorr). BIP-361 forces everyone to move to new quantum-safe address types before that happens.
- Two phases: first, you can't send to old-style addresses. Five years later, old-style coins can't be spent at all. If you haven't moved your coins by then, they're frozen.
- Controversial because it means coins that don't migrate get effectively confiscated — including Satoshi's ~1M BTC and anything on lost seeds. Breaks Bitcoin's "your coins are yours forever" promise.
- BitMEX pushed back with a "wait and see" alternative: only freeze coins if quantum is actually proven to exist.
- Foundation angle: if you hold your own keys, you just migrate when new address types ship. The people at risk are exchange users, lost-seed holders, and very old wallets.
- Bitcoin Depot Hacked - 50.9 BTC ($3.7M) Stolen - Bitcoin Magazine / SecurityWeek
- Published: Breach detected March 23, disclosed April 8-9, 2026
- Bitcoin Depot, the largest crypto ATM operator in the US (9,000+ machines, 47 states), lost 50.9 BTC after attackers gained control of credentials for digital asset settlement accounts. Customer data was not affected. SEC disclosure filed April 8.
- Talking points: Centralised custodians are honeypots. One set of credentials = nearly $4M gone. The 16-day gap between detection and disclosure is worth noting. Compare with self-custody where there is no single point of failure.
- Kraken Insider Extortion - Support Staff Recruited by Criminal Groups - CoinDesk
- Published: April 13, 2026
- A criminal group is extorting Kraken after two insider incidents where support staff inappropriately accessed data from ~2,000 client accounts. No funds were at risk. Kraken warned of coordinated insider recruitment campaigns targeting crypto, gaming, and telecom firms.
- Talking points: Your exchange account is only as secure as the lowest-paid support worker with access to your data. This is organised, coordinated insider recruitment across multiple industries. Self-custody eliminates this counterparty risk entirely. Credit to Kraken for transparency and refusing to pay.
- Fake Ledger Live app on Mac App Store - Coindesk
- $9.5M drained from 50+ victims between 7–13 April via fake Ledger Live macOS app on Apple's App Store.
- Hits across BTC, ETH, Tron, Solana, XRP. Three seven-figure losses — largest $3.23M USDT. Musician G. Love lost 5.9 BTC.
- Attack vector: app prompted users to enter recovery phrase. Game over.
- Published under "Leva Heal Limited." Faked version history 1.0 to 5.0 in two weeks to look legit. Passed App Review.
- Funds laundered through 150+ KuCoin deposit addresses tied to "AudiA6" mixer. KuCoin froze accounts until 20 April only.
UPDATES/RELEASES
- Aqua v0.4.2 - April 11
- Adds transaction notes (BIP329), fiat amount entry for Lightning payments, Sats display unit option, improved animations, GDK upgrade to 0.76.3.
- https://github.com/AquaWallet/aqua-wallet/releases/tag/v0.4.2
- BTCPay Server v2.3.7 - April 2 (BORDERLINE)
- First release using .NET 10. Transaction comments in Send view, admin-editable subscription dates, amount-less BOLT11 invoices for top-ups, RTL language support (Arabic, Hebrew, Farsi), subscriber management API.
- https://github.com/btcpayserver/btcpayserver/releases/tag/v2.3.7
- BULL Wallet v6.8.2-fss-hybrid - April 10
- Hybrid flutter_secure_storage implementation with fallback to v9 for incompatible devices. Appears to be internal/hybrid build rather than public consumer release.
- https://github.com/SatoshiPortal/bullbitcoin-mobile/releases/tag/6.8.2-fss-hybrid
- Cake Wallet v6.1.0 - April 18
- "Smoother Performance & USDT Bridging" release. Native USDT bridging between chains, performance optimizations, wallet stability improvements, Lightning and EVM bug fixes.
- https://github.com/cake-tech/cake_wallet/releases/tag/v6.1.0
- Envoy v2.2.13 - April 9
- Maintenance release addressing Passport Prime onboarding issues, iOS share sheet bug, and a security-related dependency update.
- https://github.com/Foundation-Devices/envoy/releases/tag/v2.2.13
- KeyOS v1.2.1 - April 16
- Users can now decide whether they want to perform a manual or magic backup, regardless of Envoy Magic Backup status. Before initiating the magic backup, tap Advanced in the top right corner to change to manual.
- https://github.com/Foundation-Devices/KeyOS/releases/tag/v1.2.1
- Liana v14.0 - April 17
- Major UI rework: redesigned home page, menu, payment history, sidebar. Adds xpub import from Coldcard ccxp files, BitBox pairing code display for taproot devices, reduced dust output limit from 5,000 to 500 sats. Default fiat price source changed to mempool.space.
- https://github.com/wizardsardine/liana/releases/tag/v14.0
- LNBits v1.5.4-rc1 - April 16 (RC only)
- Release candidate, minimal notes. Latest stable remains v1.5.3.
- https://github.com/lnbits/lnbits/releases/tag/v1.5.4-rc1
- Mempool v3.3.0 - April 14
- Major release: coinbase transaction previews from Stratum jobs, Taproot script tree visualization, sighash icons, stale block comparisons, sub-1-sat/vB support, ephemeral dust support, PSBT signature display, Simplicity support (Liquid), Angular 16-to-20 upgrade, decimal fee recommendations.
- https://github.com/mempool/mempool/releases/tag/v3.3.0
- Mostro v0.17.3 - April 13
- Fixes bug in v0.17.2 blocking range orders. v0.17.2 (Apr 11) added interactive setup wizard and fixed validation issues preventing duplicate payments.
- https://github.com/MostroP2P/mostro/releases/tag/v0.17.3
- Nunchuk v2.4.0 - April 8
- Adds Nunchuk API support with bug fixes and improvements.
- https://github.com/nunchuk-io/nunchuk-android/releases/tag/2.4.0
- Peach Bitcoin v0.69.0 - April 10
- UniqueID Hash saved in iOS keychain for identity persistence. Fixes: percentage placeholder, PGP key registration timing, Telegram URL, seed restoration error handling.
- https://github.com/Peach2Peach/peach-app/releases/tag/v0.69.0-343
- Start9 v0.4.0-beta.5 - April 11 (beta)
- Complete StartOS rewrite: redesigned UI, new networking stack with WireGuard VPN gateways and Let's Encrypt, LXC container runtime, improved differential backups, i18n support, TypeScript SDK, SMTP notifications.
- https://github.com/Start9Labs/start-os/releases/tag/v0.4.0-beta.5
- Zeus v13.0.0-beta2 - April 17 (beta)
- Major v13 cycle: LDK Node as new embedded node option, updated onboarding, Cashu improvements with offline mode, embedded LND v0.20.1-beta, enhanced payment UI, Android stealth mode.
- https://github.com/ZeusLN/zeus/releases/tag/v13.0.0-beta2
TO DONATE TO ROMAN'S DEFENSE FUND: https://freeromanstorm.com/donate
HELP GET SAMOURAI A PARDON
- SIGN THE PETITION ----> https://www.change.org/p/stand-up-for-freedom-pardon-the-innocent-coders-jailed-for-building-privacy-tools
- DONATE TO THE FAMILIES ----> https://www.givesendgo.com/billandkeonne
- SUPPORT ON SOCIAL MEDIA ---> https://billandkeonne.org/
VALUE FOR VALUE
Thanks for listening you Ungovernable Misfits, we appreciate your continued support and hope you enjoy the shows.
You can support this episode using your time, talent or treasure.
TIME:
- create fountain clips for the show
- create a meetup
- help boost the signal on social media
TALENT:
- create ungovernable misfit inspired art, animation or music
- design or implement some software that can make the podcast better
- use whatever talents you have to make a contribution to the show!
TREASURE:
- BOOST IT OR STREAM SATS on the Podcasting 2.0 apps @ https://podcastapps.com
- DONATE via Monero @ https://xmrchat.com/ugmf
- BUY SOME STICKERS @ https://www.ungovernablemisfits.com/shop/
FOUNDATION
https://foundation.xyz/ungovernable
Foundation builds Bitcoin-centric tools that empower you to reclaim your digital sovereignty.
As a sovereign computing company, Foundation is the antithesis of today’s tech conglomerates. Returning to cypherpunk principles, they build open source technology that “can’t be evil”.
Thank you Foundation Devices for sponsoring the show!
Use code: Ungovernable for $10 off of your purchase
CAKE WALLET
https://cakewallet.com
Cake Wallet is an open-source, non-custodial wallet available on Android, iOS, macOS, and Linux.
Features:
- Built-in Exchange: Swap easily between Bitcoin and Monero.
- User-Friendly: Simple interface for all users.
Monero Users:
- Batch Transactions: Send multiple payments at once.
- Faster Syncing: Optimized syncing via specified restore heights
- Proxy Support: Enhance privacy with proxy node options.
Bitcoin Users:
- Coin Control: Manage your transactions effectively.
- Silent Payments: Static bitcoin addresses
- Batch Transactions: Streamline your payment process.
Thank you Cake Wallet for sponsoring the show!
MYNYMBOX
https://mynymbox.io
Your go-to for anonymous server hosting solutions, featuring: virtual private & dedicated servers, domain registration and DNS parking. We don't require any of your personal information, and you can purchase using Bitcoin, Lightning, Monero and many other cryptos.
Explore benefits such as No KYC, complete privacy & security, and human support.
(00:00:00) INTRO
(00:00:57) THANK YOU FOUNDATION
(00:01:38) THANK YOU CAKE WALLET
(00:02:44) More Chapters to Come...
(00:38:14) BOOSTS
(01:00:23) THANK YOU MYNYMBOX
