Sun, May 17, 2026
A quiet Sunday. Five items, four maintenance releases, one Summer of Bitcoin vulnerability disclosure. The Core Lightning DoS found last summer is now public—assertion triggered by a crafted remote message. The rest: Cashu TS adds unit-aware arithmetic for multi-mint wallets, Amethyst ships AppImage packaging changes, DAVx5 refactors push notification handling, and Venice MCP Server hits general availability. No protocol work. No Lightning spec activity. No Bitcoin Core. No model releases.
Nostr
- Amethyst 1.10.0. What’s Changed ci: remove macos-13 x64 build legs by @vitorpamplona in https://github.com/vitorpamplona/amethyst/pull/2939 Replace linuxdeploy with appimagetool for AppImage packaging by @vitorpamplona in https://gith…
Packaging and CI changes; no functional update for Android users.
Privacy
- Cashu TS 4.4.0. This release adds AmountWithUnit , a unit-aware sibling to Amount , so multi-unit consumers (wallets aggregating across sat/usd or multiple mints) can do arithmetic and comparisons without silently mixing units.
- DAVx5 4.5.12-ose. What’s Changed Refactoring Rename NOTIFY LICENSE to more generic NOTIFY VALIDATION by @sunkup in https://github.com/bitfireAT/davx5-ose/pull/2115 Split SyncValidator by @sunkup in https://github.com/bitfireAT/davx5-os…
Refactoring release. No user-facing changes indicated.
AI
- Venice MCP Server 0.2.0. GA release Venice MCP Server is now generally available.
Other
- Vulnerability Disclosure: Assertion DoS in Core Lightning. Summary During my Summer of Bitcoin 2025 internship, I discovered a Denial-of-Service (DoS) vulnerability in Core Lightning (CLN) that allowed a remote peer to crash a node by sending a specifically crafted message.
Check CLN version. The disclosure is public; patch status and affected versions are not stated in the summary.
Read this brief on the web: https://freedomtech.news/posts/2026-05-17-bitcoin-daily-brief/
No comments yet.
Write a comment