Salvatore Ingala
@salvatoshi
Followers
2,994
Following
1,238
Media
331
Statuses
3,579
₿uilding. I like off-chain, layer 2 and stuff. Merkle tree maximalist. Bitcoiner and firmware engineer @Ledger
Paris
Joined February 2014
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
Cuba
• 200515 Tweets
Catholic
• 183626 Tweets
Jesus is Lord
• 111092 Tweets
#النصر_الشباب
• 92312 Tweets
Perez
• 80760 Tweets
Peterson
• 68421 Tweets
Franco
• 65449 Tweets
Geoff
• 51520 Tweets
The Mets
• 45158 Tweets
危険運転
• 43390 Tweets
ebony
• 37235 Tweets
Sprint
• 36815 Tweets
gracie
• 33239 Tweets
Duke
• 31635 Tweets
自民党本部
• 29975 Tweets
首相官邸
• 25561 Tweets
Undertaker
• 21194 Tweets
Verstappen
• 19629 Tweets
Florida State
• 16791 Tweets
تاليسكا
• 15774 Tweets
Spider-Man 2
• 14446 Tweets
![[TPwn] jiyuna seishin](https://pbs.twimg.com/profile_images/1628138115755016192/p0k-nc8P.jpg)
Pinned Tweet
Merkleize All The Things!
TL;DR: It's long, but you should read it.
OK, OK: we can soft-fork in arbitrary smart contracts in Bitcoin, and it's not that hard. A relatively simple covenant is the key ingredient.
8
35
121
The Merge is finally coming!
Make sure to upgrade to the latest node software for the best-in-class and most socially scalable consensus algorithm ever invented for a blockchain.
You can download it here:
17
31
239
"Nobody will use Bitcoin because nobody can help you if you make a mistake".
I guess nobody will use Barclays either.
6
43
142
Some early comments on BitVM. 🧵
TL;DR: at this stage, BitVM is a generic "state channel"; that's powerful, but not enough to enable a 2-way peg (trustless sidechains).
I'll also briefly compare it with MATT.
2
21
129
Miniscript is the most important innovation in
#bitcoin
custody since BIP32.
Combining it with taproot and MuSig/FROST will be the cherry on top.
Few. Many, soon.
16
11
118
13
3
107
No, taproot didn't enable NFTs - at most it's slightly easier/cheaper.
No, there's no meaningful way of censoring transactions you don't like.
No, this doesn't mean that taproot broke incentives - only higher demand for block space will price them out.
1
16
103
Once a miner has decided what transactions to include in a block, their order is (mostly) arbitrary.
Therefore, the transaction ordering could be used to store information. For free!
20
8
94
Excited to show the first preview of a side project I've been working on: NanoGPT, the first Large Language Model that runs on your hardware wallet!
9
11
97
I posted a draft for an approach to use fraud proofs to solve the exit problem in layer 2 systems.
TL;DR: a fraud-proof based withdrawal protocol allows parties with small balance to cooperate and perform a single, larger withdrawal.
Read about it here:
7
25
91
When
#Bitcoin
reaches 75000$, then 2 bitcoins will buy 10000 large pepperoni pizzas at Papa John's.
The Bitcoin pizza flippening.
3
16
85
More Script wizardry coming your way
2
11
38
The missed the opportunity of sending it back with a 19 BTC fee.
F2Pool have sent the 19.82108632 BTC fee overpayment back to Paxos
73
78
469
6
6
71
If you want to build consensus on covenant, write code using covenants.
Even if you think that <that guy>'s concerns are stupid/trollish/idiotic, writing code is how you prove them wrong.
2
11
46
Bad news is: we had a quite nasty bug.
Good news is: most probably no user is impacted.
Read more on the
@Ledger
security bulletin:
and also the blog post from
@Wizardsardine
who discovered and reported the bug:
7
21
69
Taproot🥕 activated on 14th November 2021.
So today is the 2nd anniversary of "exchanges still can't send to taproot addresses". 🥳
9
25
61
7
17
63
@MrlamilamiKosch
@SatoshisJournal
50
#bitcoin
− the real question is what to do with the other 4 seconds
2
0
62
9
25
61
TL;DR: Covenants in
#bitcoin
would enable arbitrary fraud proofs, assuming honest miner majority.
Is it well known, or worth writing down formally?
🧵
cc
@SomsenRuben
@JeremyRubin
@roasbeef
@BobMcElrath
7
13
66
MATT is not a covenant proposal; it's an approach to smart contracts enabled by adding some very basic capabilities.
The Great Script Restoration project, unsurprisingly, enables MATT-style contracts in a clean way.
It seems the best path forward to me, and has my full support.
Finally had time to sit down and finish writing up my thoughts on the Great Script Restoration. I think this is exactly the kind of bold thinking, and honest analysis, that is necessary to move Bitcoin forward:
48
57
150
2
13
61
New consensus protocol just dropped: Proof of Scramble for a day
@salvatoshi
@ercwl
@brian_trollz
If you have an L1 consensus failure, stuff breaks core devs scramble for a day, but eventually things are alright again. With an L2 bug, people could permanently lose lots of money.
109
40
293
6
10
60
Version 2.2.0 of the
@Ledger
Bitcoin app is out.
It brings full
#miniscript
support on taproot 🥕
Your move,
@Wizardsardine
6
10
62
UX has to evolve for the next billions of users; the future is conversational!
Ask questions instead of pressing complicated buttons.
And it can make jokes!
9
11
61
Alright, since you like fake announcements🐟, you might like real ones even more.
Taproot scripts are coming! 🥕
The v2.1.2-rc of the Ledger
#bitcoin
app is ready to download (only on testnet) as a developer preview.
9
12
56
Any developer who wants to try out the upcoming
#miniscript
support for
#bitcoin
on
@Ledger
hardware wallets, please checkout this branch:
You'll need a Nano S or a Nano S+ to load the application, or alternatively you can use the Speculos emulator. 🧵
6
16
56
The Ledger `Bitcoin Test Musig v2.3.0-alpha` app is out.
I hacked together a quick python demo: in 5 minutes you'll be able to play with taproot wallet policies with the new `musig()` key expressions, and sign them with your Ledger Nano (or Stax).
7
18
54
With my first answer on StackExchange, I try to explain the core concepts of MATT with as little technicalities as I could.
Not quite an explanation for your grandma yet, unless you have an exceptionally cool grandma.
3
13
52
If you're using (or planning to use) MuSig2, please help reviewing this PR about the related BIPs:
1
18
50
UTXO sharing schemes can have exit paths that allow multiple users to share the exit cost — making the per-user cost cheaper than a normal on-chain transaction.
Covenants scale bitcoin, among the other things they do.
3
19
52
5+ millions Nano S, X and S+ have now full
#miniscript
support.
That means that you just need to upgrade your
#bitcoin
app if you want to try out Liana:
👋Hey
#Bitcoin
users!
$BTC app v2.1.0 is now available to download in LedgerLive with support for
#miniscript
🔥✍️
Learn more👇
PS:
@electrum
users please continue using the Bitcoin Legacy app available in Developer mode, stay tuned for updates🔊
24
15
95
7
13
50
Doing crazy things like this in bitcoin Script is a great way to show the improvement with new opcodes:
– do you want to replace a 100kb script with a tiny one? ⟹ OP_CAT
– do you want the entire BitVM without presigned transactions? ⟹ OP_CAT + OP_CHECKCONTRACTVERIFY (aka MATT)
We just broadcasted the first mainnet transaction having a Blake3 hash lock implemented in Bitcoin Script.
One small opcode for BitVM, one giant script for Bitcoin.
65
264
990
2
6
48
Just a quick reminder that you're supposed to
Merkleize All The Things
and not to
Merkelize All The Things
Thank you.
5
8
52
That's how it felt like at
@btcplusplus
.
Congrats to
@niftynei
for putting together one of the most exciting gatherings of bitcoiners ever.
2
7
48
Until last year,
#miniscript
was in a technological deadlock: hardware signer support was needed before developers could build wallets (and expect people to use them!).
And demand wasn't quite there for hardware vendors because... there was no software wallet using it!
6
12
48
MATT now has working code and is ready to build on it:
Unlike previous demos, the proposed semantics of the opcodes is now complete with the amount introspection, allowing to force the outputs to preserve the amount of the input(s). 🧵
5
12
49
BIP-0388, "Wallet Policies for Descriptor Wallets" was merged into the bips repository:
It is at the core of the integration of arbitrary scripts (miniscript) in the
@Ledger
bitcoin app, but was also adopted by
@BitBoxSwiss
and
@Blockstream
Jade.
6
13
47
9 months in the making - I'm excited about launching the new
#Bitcoin
application I've been working on.
Let's bring advanced custody to _everyone_!
📣 Ledger is the only Hardware wallets vendor supporting Taproot as of today🎉
@salvatoshi
wrote a great blogpost introducing
#Bitcoin
app 2.0.0 launched right before the
#Taproot
update. But the new app is not only about taproot – there's much more
1/n👇
14
51
240
3
3
46
@paddypisa
@Bitcoin
Someone suggested that
@Bitcoin
should delete all the posts, unfollow everyone except
@halfin
, and only pin a link to the whitepaper, and I strongly support that.
1
3
45
Merkleize All The Hardware Signers! :D
While still experimental, I'm excited to share a project that we're working on.
🧵
I try not to hype things too much, but I strongly believe this will change the way we look at hardware wallet development - - huge congrats to greenknot,
@salvatoshi
and team, the future will be merkleized. Your move
@LarryBitcoin
:)
7
11
52
1
15
43
Seeing again endless, pointless discussions on the false dichotomy of Store of Value vs Medium of Exchange.
High fees price small hodlers out of self-custody, which kills the SoV use case for the majority of humans.
Accessibility matters enormously for a good SoV.
10
3
42
Three new BIP numbers related to MuSig2:
• BIP 328: Derivation Scheme for MuSig2 Aggregate Keys
• BIP 373: MuSig2 PSBT Fields
• BIP 390: musig() Descriptor Key Expression
Review, fellow musig lovers!
1
12
42
Let them taproots sprout! 🥕
Just released an early alpha of the Bitcoin Testnet app with
#taproot
#miniscript
support.
You can find it as "Bitcoin Test" version 2.2.0-alpha, after enabling "Experimental features" ⟹ "Developer tools" in your settings.
3
11
41
Allocating a small fraction of your salary to regularly buy Bitcoin is a noiseless, peaceful and yet revolutionary act.
3
9
37
How to express unspendable keypaths in taproot-based
#miniscript
wallets?
It's not trivial: you want them to be easy to recognize for your wallets and signers, but impossible to distinguish for external observers.
Some brainstorming here:
6
8
24
Does a MuSig2 inside a taproot leaf script make both the
#mpcgang
and the
#teamscript
happy, or both unhappy? 🤔
cc
@Rob1Ham
@rot13maxi
5
7
39
Andrew Poelstra on whether covenants (general, recursive) could be dangerous for bitcoin.
SLP507 Andrew Poelstra of
@blksresearch
For the second part we chat:
-
@Blockstream
Research
- Bulletproofs++
- FROST and MuSig2
- Miniscript
- Simplicity
- Covenants
13
40
105
77
20
36
@VitalikButerin
We should make sure people don't copy and paste javascript code they don't understand into the address bar :-/
1
0
38
I promised
#miniscript
, but that's just too boring.
Instead, the new Bitcoin app will have a way more exciting feature: native NFTs on
#Bitcoin
.
More rare and secure than ever possible before.
Retweet for a chance to win the first
#NFT
minted directly on the Bitcoin blockchain!
5
18
36
Be careful when using screenless signing devices in multisig scenarios.
If a multisig wallet includes devices without a screen, good chance it's closer to a hot wallet than to a viable cold storage solution.
Don't be reckless!
2
9
39
5
5
35
If you want to know more about Sci-Hub, an illegal website enabling illegal access to millions of research papers (the vast majority of which funded with public money), read its wikipedia page:
There's also the link there. Don't click it!
We are warning universities & students about Sci Hub, a series of websites that allows illegal access to millions of research papers.
Sci-Hub obtains the papers through malicious means such as phishing emails to trick users into divulging their logins
👉
276
58
89
0
19
32
I don't normally post travel photos, but man!...
How many sats do we need to pool to buy the island,
@btcazores
? :P
3
4
37
Summing up: I think BitVM is an exciting, unexpected and fun breakthrough in bitcoin research.
It is already getting a lot of people interested into studying an area of protocol design space on bitcoin that is so far little explored. Bullish!
0
4
36
Every single "attack" that I've seen based on covenant constructions is strictly _weaker_ than the same executed with a cosigning server.
That is not surprising: a covenant constrains the attacker's behavior (as it's programmed once for good), while cosigners are fully adaptive.
1
6
36
"I disapprove of what you pay, but I will defend to the death your right to pay it"
@giacomozucco
on
#bitcoin
at
#BH2022
1
6
33
There's some great stuff on
@satoshilabs
repo, but I just don't like searching for it.
cc
@PavolRusnak
5
0
33
Lots of talk about "Bitcoin L2"; but what is an L2?
This thread is a handy manual to assess if the new system you just heard about _really_ is a bitcoin layer 2.
(1/n) 🧵
1
10
33
Not your keys, not your coins.
Unless
@P3b7_
is around.
In that case, just not your coins.
#BreakingBitcoin
0
7
30
Fast hash-based additive accumulators
- Draft of paper:
- Repo with sample code:
- Mailing list post:
2
16
31
By popular demand, an updated roadmap diagram for 2023!
Your roadmap VS the roadmap she tells you not to worry about.
1
1
19
2
7
33
It works for all the things
Its amazing how many times the answer is “throw it in a merkle tree”
9
3
57
2
4
32
Many constructions with MATT do not require fraud proofs.
However, fraud proofs can help scale layer 2 constructions.
But do _fraud proofs_ themselves scale?
I implemented them to know for sure.
A thread.🧵
3
12
33
First of all, bravo
@robin_linus
and the other Script wizards who showed that verification of computation is possible without covenants!
I think very few people would even attempt something so _obviously impossible_.
Luckily, Robin didn't know it, so he did it anyway.
2
0
32
Here are the slides of the talk (not recorded):
3
6
32
Happy whitepaper day!
Did you know that the first page contains the secret to permissionless innovation in
#bitcoin
?
Satoshi truly knew All The Things.
4
2
31
Here's a funny joke: 🐟
Multisig with screenless devices
🤣
6
1
32
Implement
#miniscript
, and devs will come.
Great work
@landabaso
!
This will help a lot JS wallet developers who want to work with complex scripts.
PS: The Ledger Bitcoin app 2.1 with miniscript support is out − on mainnet.
After months of hard work, I'm thrilled to announce the release of a new Typescript library for miniscript descriptors! This library makes it possible to parse, sign, and finalize PSBTs, including using Ledger devices. Check it out on Github: . 1/5
6
26
88
3
8
29
Is there any bitcoin wallet that has the concept of "sign a PSBT with an API endpoint"?
This is the workflow I have in mind:
- you create a PSBT
- the wallet asks (possibly in background) the endpoint to sign it
- you add other sigs as needed
- PSBTs are combined
- broadcast
16
6
32
Entropy is good, right? Entropy keeps your seed secure.
But sometimes, entropy is the enemy.
Come to the dev/hack/day to hear my thoughts on certain 'bad entropy', and why it matters for hardware signers.
dev/hack/day
In ‘Wallet Policies and Entropy’,
@salvatoshi
will dive into the critical aspects of security and randomness in
#bitcoin
.
3
2
19
4
3
31
This is musig to my ears!
The race is on to bring this to hardware signers 😎
🎉 About a year after its creation, it's a BIP!
BIP327: "MuSig2 for BIP340-compatible Multi-Signatures" (authored by
@n1ckler
, me, and
@robot__dreams
) was merged today.
Thanks to everyone who had helpful comments!
PR:
BIP:
53
97
339
2
3
31
I will talk about
#miniscript
, hardware signers and wallet security in the real world.
📢 NEW SPEAKER ANNOUNCEMENT!
Salvatore Ingala (
@salvatoshi
)
Salvatore is a passionate Bitcoiner who works at
@Ledger
to pave the way for next-generation
#Bitcoin
wallets.
3
2
15
0
4
30
How long does it take to run a bitcoin regtest ready to play with most of the newly proposed opcodes for bitcoin?
About 30 seconds:
$ docker pull bigspider/bitcoin_matt
$ docker run -d -p 18443:18443 bigspider/bitcoin_matt
More instructions here:
3
7
30
Are you ready for the sMATT contracts you'll write in 2024?
(TL:DR; like BitVM, but with zero presigned transactions)
1
6
29
You've been lied to. Entropy is bad!
See you at 2pm in Prague West room at
@BTCPrague
dev/hack/day to discuss about entropy, miniscript and hardware signers.
4
4
31
MATT and I wish you joyful holidays with your beloved.
Things are cooking, see you in 2024 🤓
2
5
30
That's right!
However, here's the correct thumbnail of a bitcoiner's Ledger Nano :D
Back again this year to support us is
@Ledger
, with
@salvatoshi
cooking us some epic stuff again I hear.
Last year, he announced his MATT proposal at BTCAzores.
1
1
7
3
2
28
I don't have talented artists memeing for me, but here's is a good place to start if you have questions about MATT:
CatVM: There and Back Again
CatVM is the first permissionless bitcoin bridge, allowing scaling in layers with no liquidity requirements, decentralized trading of ordinals and runes, and much more
CatVM is powered by OP_CAT and Quantum Cats🐱
gmeow!
👉
293
479
2K
3
2
29
If you have been using `short unsigned int` to track bitcoin price, remember to update to `long int`.
3
4
27
Within five years, most people will use miniscript-based wallets.
Most will have no idea about it.
0
2
26
The
#bitcoin
app 2.1.2 is live on mainnet.
It adds initial support for taproot🥕 scripts, limited to the fragments pk, multi_a and sortedmulti_a, and with taptrees of depth at most 3.
Alright, since you like fake announcements🐟, you might like real ones even more.
Taproot scripts are coming! 🥕
The v2.1.2-rc of the Ledger
#bitcoin
app is ready to download (only on testnet) as a developer preview.
9
12
56
7
8
26
@Rob1Ham
...but he was also smart enough to understand that adding hashes of data makes more sense than dumping data into the chain :P
2
1
26