Bitcoin
A draft BIP would standardise which Bitcoin outputs expose their keys
Published estimates of quantum-exposed supply range from about 25% to over 34%. The author argues the gap is definitional and proposes four levels with a fail-closed rule.
Coin Brief — Crypto news, read from the protocol's own record
XRPL's Batch amendment resets and cannot activate before 9 October
BatchV1_1 briefly fell below 80% validator support, which wipes the accumulated time. The ledger shows the new majority from 25 September; Permission Delegation reset too.
XRPL's closed-ended vault draft is dissolved into patches on XLS-65 and XLS-66
Eight files, 453 lines added and 620 removed. A standalone draft becomes nested patches against the specs it modifies, with Test Plan sections added.
Adopting ZIP-215 verbatim would make Solana's System Program ID a signable key
SIMD-0376 now specifies the cofactored equation from Taming the many EdDSAs plus explicit rejection of non-canonical encodings and small-order A and R - because ZIP-215 alone accepts the all-zero pubkey.
BIP-375's DLEQ challenge was not reduced modulo the group order
A three-line change to bip-0375/deps/dleq.py applies % GE.ORDER to the challenge and adds two lines to proof verification. Small diff, cryptographic surface.
Kusama's new governance coordinator asks what the network is actually for
Referendum #498 made Kusama an experiment-focused peer of Polkadot. The open questions are where it runs, who secures it, and whether the Vision Programme should be capped at two years.
Bitget lost $387.5m without anyone stealing a private key
Attackers spoofed transaction data so that legitimate-looking transfer approvals drained hot and warm wallets. The haul includes about 103 million XRP; the CEO points at North Korea.
Formal verification does not remove trust from a client, it shrinks it
An ethresear.ch post reframes the question as the Trusted Computing Base: everything trusted rather than proven, which is what humans still have to check.
The FCA closes firms that used a UK licence as an offshore badge
Twenty-one CFD firms have closed since 2025 and three are cancelling permissions. The conduct was little UK business plus an authorisation that made linked overseas companies look regulated.
Four of tonight's stories are about trusting an authority you inherited
Bitget's approvals trusted their own request generator. Solana's consensus trusted a library. XRPL trusted a duplicated spec. And 21 CFD firms sold a licence they barely used.
Bitcoin, Ethereum and XRPL all spent today editing specifications that had already shipped
BIP-138 redefines which keys enter its backup derivation, EIP-8298 removes a runtime-only restriction, and five XRPL standards are being synced to their reference implementations.