Bitcoin Rails
Deep dives into Bitcoin-native assets, Layer 2s, and progressive technologies on Bitcoin.
Recent episodes
Bitcoin's Leading Post-Quantum Signature Proposal | CONDUITION
- Conduition co-authored a full specification for SHRINCS, a post-quantum signature scheme combining stateless (Sphinx-based) and stateful (hash-based) components for Bitcoin. - Hash-based signatures offer conservative cryptographic assumptions compared to elliptic-curve cryptography, providing resilience against multiple threat vectors beyond quantum computers. - SHRINCS uses WOTS+C (Winternitz one-time signatures with compression), FORS (Forest of Random Subsets), and XMSS (Extended Merkle Signature Scheme) as its core building blocks. - The scheme introduces flexible tree structures (unbalanced and balanced XMSS) for different use cases, enabling address reuse for custodians and proof-of-reserve scenarios without sacrificing security. - Stateful signatures are ~538 bytes versus stateless signatures at ~5,776 bytes, both roughly 10x larger than current Schnorr signatures, with faster verification offsetting size concerns. - State management remains the critical risk: wallet developers must carefully track signature counters to avoid accidental key exposure through signature reuse.
Expecting Hardforks | PAUL SZTORC
- Paul Sztorc discusses the decline of Bitcoin maximalism since the 2017 block size wars, arguing that intolerant discourse has crowded out nuanced technical thinking and elevated populist figures over thoughtful developers. - eCash, a proposed Bitcoin hard fork, will launch in three phases (alpha, beta, mainnet) and implement drivechains (BIP 300/301) as core functionality rather than soft forks, enabling competing layer-two experiments. - Drivechains allow users to opt into various sidechains—Thunder (large blocks), Z-addresses (privacy via Zcash orchard), BitNames (decentralized identity), BitAssets (tokenization), and prediction markets—all secured by merge-mining. - BIP 110 (consensus cleanup) has failed to gain sufficient miner support; Sztorc argues Bitcoin's inability to activate soft forks signals a deeper governance crisis and justifies his hard fork as performance art to demonstrate that problem. - Replay protection for eCash will use nLockTime with a far-future date as the magic split marker, requiring no private key import for most users via mobile and desktop wallets. - Transaction security, soft fork activation theory, MEV concerns around layer twos (which Sztorc dismisses as superstition), and mining pool design (Stratum V2) are debated throughout.
The Future of Bitcoin Banking | ALEX LEISHMAN
- River's origin story: Alex Leishman discovered Bitcoin through Austrian economics and the works of Hayek, then through a Coursera class taught by Balaji Srinivasan in 2013. He studied cryptography at Stanford and worked at Polychain Capital before founding River to build a Bitcoin bank rather than a trading exchange. - Bitcoin bank vs. crypto exchange: River deliberately chose to remain Bitcoin-only and custody-focused, rejecting the higher-margin altcoin and trading path that Coinbase pursued. Leishman argues exchanges prioritize trader relationships while banks build longer-term client relationships and can cross-sell services. - Custody model philosophy: River self-custodies client Bitcoin rather than outsourcing to third-party custodians like Prime Trust. Leishman emphasizes that the core custody skill is computer security and key management, not regulatory compliance or financial credentialing. - Why self-custody exists: Leishman reframes the Bitcoin ethos as requiring the *option* to self-custody (protecting the invariant of no single point of control), not requiring everyone to self-custody. A small percentage of radical self-custodians create cultural accountability and shame institutions that restrict withdrawal rights. - Custody failures (Prime Trust, Celsius, FTX): Root causes were operational mistakes (lost keys) and moral hazard (rehypothecation, fraud), not legal or regulatory gaps. Proof of reserves and transparency reduce the incentive for custodians to operate dishonestly. - Decentralized lending vs. centralized banking: DeFi lending offers lower rates but introduces smart-contract risk. Institutional actors avoid on-chain DeFi for large loans due to protocol risk; centralized lending will likely dominate for Bitcoin borrowing long-term.
Zero-Knowledge Proofs For Post-Quantum Bitcoin | BENEDIKT BÜNZ
- Zero-knowledge proofs (ZKPs) have historically been dismissed by Bitcoin developers due to trusted setups and inefficiency, but the newest generation of hash-based proofs eliminates these concerns and may become essential for post-quantum security. - Hash-based signatures are the preferred first step for Bitcoin's post-quantum transition because they minimize new cryptographic assumptions (built from SHA-256) and have maximum proven security, though they produce signatures 20x larger than current ECDSA signatures. - Stateful hash-based signature schemes like SPHINCS+ and hybrid approaches such as Shrinks (with fallback recovery mechanisms) balance signature size against practical deployment challenges in cold-storage custody. - Zero-knowledge proofs enable **signature batching** to compress post-quantum signatures in blocks: miners can produce a single small proof (~200 kilobytes) asserting validity of thousands of hash-based signatures, making blocks feasible despite signature size inflation. - Benedikt Bünz and Dan Boneh are leading a new post-quantum cryptography unit at localhost research to advance hash-based signatures, threshold schemes, and ZKP integration for Bitcoin specifically. - Lattice-based signatures offer shorter signatures and richer functionality (threshold, adapter) but face political resistance in Bitcoin due to higher mathematical complexity and structure; a two-step upgrade (hash-based first, lattices later) may be necessary.
The Politics of Post-Quantum Bitcoin | NIC CARTER
- Post-quantum cryptography urgency: Nic Carter has shifted from viewing quantum computing as distant FUD to considering it Bitcoin's "overriding concern," arguing that cryptographic agility and PQ-signature implementation must begin immediately. - Bitcoin governance crisis: No one is formally in charge of Bitcoin; developers resist accountability and legibility, while major institutional holders now have real stakes in protocol changes—a situation without precedent in Bitcoin's history. - Satoshi's coins dilemma: Four main options exist: liquidation (do nothing), burning, hourglass (slow recovery), or benevolent state recovery. Carter favors the third or fourth, fearing burned coins damage Bitcoin's ethos and unauthorized recovery poses systemic risk. - Timeline compression: Google's and Caltech's recent quantum research papers shifted the Overton Window; Carter estimates Q-Day before 2030 and argues Bitcoin's upgrade window (2–7 years) is dangerously tight. - Institutional takeover inevitable: If developers continue inaction, large asset managers will likely execute a "coup" fork, hiring sympathetic developers and bypassing core maintainers—the only realistic path to protocol change. - Cryptographic signature choice: Carter advocates for lattice-based signatures (Falcon, MLDSA) over hash-based ones, citing better functionality (multi-sig, threshold schemes) and alignment with industry standards; Bitcoin's preference for hash-based schemes risks cementing a "pet rock" store-of-value identity.
Not Your Keys, Not Your AI | ERIK CASON & JESSE POSNER
- Vora, founded by Erik Cason and Jesse Posner, applies Bitcoin's self-custody ethos to artificial intelligence and personal data ownership, positioning private AI as the missing piece for mainstream adoption of sovereignty principles. - The "me database" concept centralizes a user's fragmented digital life (emails, messages, calendar, financial data) into a single encrypted local repository, enabling personalized AI assistance while eliminating reliance on cloud providers and centralized platforms. - Current frontier AI models (ChatGPT, Claude) lack fiduciary responsibility to users; they collect intimate personal data without confidentiality protections, expose users to government surveillance, and apply opaque system prompts that manipulate behavior and limit free inquiry. - Open-source, locally-run AI models address manipulation and control risks by allowing users to inspect weights, audit training data, and select models aligned with their values—mirroring the transparency and choice inherent to Bitcoin. - Supply chain attacks on specialized hardware and the technical feasibility of self-custody for billions of people remain unsolved; Vora's solution uses verifiable hardware (FPGAs), cryptographic key distribution across physical locations, and legal protections (Fifth Amendment) to defend against coercion. - AI adoption will drive mainstream demand for self-custody faster than Bitcoin alone because AI is "the most intimate technology ever created," handling sensitive personal information (health, legal, financial) that individuals naturally want to control and protect.
BIP 110 & The Future of Soft Forks | SUPER TESTNET
- BIP 110 is a proposed soft fork to limit arbitrary data storage in Bitcoin transactions across seven identified fields (op returns, witness space, annex, op success, taproot leaves, segwit versions). The stated goal is to reduce "spam" in the form of inscriptions and large data blobs on-chain. - Super Testnet agrees with the underlying goal of limiting data storage but objects to the current implementation: the seventh rule modification would invalidate transactions using the `OP_IF` function, affecting legitimate wallet users (such as those using Nunchuk's wallet policies) who have nothing to do with inscriptions. - BIP 110 proposes a hybrid activation: miners signal via blocks; if 55% signal by August 2025, the soft fork activates via miner-activated rules. If that threshold is not reached, user-activated enforcement begins, with BIP 110 nodes rejecting all blocks that don't signal readiness. - Mempool filters (relay policy) can reduce local spam but cannot prevent spam from being mined into blocks without majority compliance from both miners and nodes. Soft forks, by contrast, enforce rules consensus-wide. - A contentious soft fork creates economic war and potential chain splits. Old nodes accept both branches; BIP 110 nodes reject non-compliant blocks. The longest chain becomes "real Bitcoin" only if nodes and exchanges agree; if not, two competing assets emerge. - Super published a User-Rejected Soft Fork prototype (400 lines) that rejects blocks *with* BIP 110 signaling bits flipped to one, forcing guaranteed contention if both activated soft forks coexist. He called for professional developers to clean up the code; few responded, citing low current hash rate signaling (~0.01%) as insufficient motivation.
Bitcoin's threshold for trust-minimization—without a soft fork | SAM BLACKSHEAR
- Sam Blackshear's background in programming language research and his recruitment to Meta's Libra project to design Move, a smart contract language emphasizing explicit value representation and minimality to prevent common security failures in systems like Solidity. - The transition from Libra to Mysten Labs: after Libra faced regulatory obstacles, five co-founders (including Blackshear) departed in fall 2021 to build Sui, a blockchain incorporating Move with performance optimizations for throughput, latency, and horizontal scaling via object-based transaction architecture. - Hashi: Mysten's new Bitcoin primitive using a two-of-two multisig (Sui validator set + enclave-run guardian) with a 30-day timelock fallback, designed to minimize trust assumptions for Bitcoin DeFi (borrowing, yield strategies, collateral use) without requiring soft forks. - Trust architecture in Hashi: users need to trust that no more than one-third of staking power in the Sui validator set is malicious (Byzantine Fault Tolerance), plus enclave integrity; the guardian adds a safety layer against simultaneous validator compromise. - Move's design philosophy: explicit coin types, functional transaction model with declared input/output objects, and avoidance of dynamic dispatch eliminate entire categories of bugs that plague EVM-based contracts; Sui adapted this further by shifting from account-based to object-based storage. - Positioning Hashi against other Bitcoin bridges: emphasizes minimized trust relative to federated custodians, combined with Sui's three-year track record, formal verification efforts, and DeFi safety practices; notes that a Bitcoin soft fork enabling trustless bridges would supersede Hashi's complexity, but the thesis around DeFi utility would remain.
Bitcoin's 3 Biggest Challenges | NEHA NARULA
- MIT's Digital Currency Initiative (DCI) was founded in 2016 to support Bitcoin and broader digital currency research, initially hiring three core Bitcoin developers (Gavin Andresen, Wladimir van der Laan, Corey Fields) when the Bitcoin Foundation collapsed. DCI operates within MIT Media Lab—a multidisciplinary environment mixing art, design, hardware, and science rather than a traditional CS or finance department. - Bitcoin developer funding landscape includes DCI, Brink (independent nonprofit), Chaincode Labs (privately funded by hedge fund founders), Spiral (Block/Jack Dorsey), and grant organizations like OpenSats. The ecosystem is decentralized but fragmented, with no centralized governance; developers maintain significant autonomy in choosing research priorities. - Quantum computing poses technical and governance challenges requiring tradeoffs: when to act, which post-quantum signature scheme to adopt, how to handle quantum-vulnerable coins (particularly Satoshi's holdings), and whether to prioritize making new transactions quantum-safe before resolving the Satoshi coins question. The speaker advocates addressing post-quantum transaction security first rather than waiting for consensus on all issues. - CBDC research conducted by DCI with central banks (Federal Reserve, Bank of Canada, Bundesbank) focuses on designing privacy-preserving digital cash—not surveillance tools. The research explores whether central banks can build digital cash with cryptographic privacy properties, demonstrating technical feasibility to inform policy decisions. - Bitcoin's existential challenges include quantum cryptography vulnerabilities, long-term mining security when block subsidies decline (requiring consistent fee markets, not speculative assets), and ensuring Bitcoin remains decentralized and self-custodial rather than custodied by institutions. These three issues are interconnected and will drive governance debates. - Scaling and self-custody are fundamentally linked; if users cannot self-custody or execute payments without intermediaries, Bitcoin loses its permissionless narrative and becomes just another custodial asset. Layer 2 solutions and on-chain capacity improvements are prerequisites for enabling self-sovereignty at scale.