The Nostr Observer

The Question of Custody: From Hardware Bugs to Taproot Trees

Following weeks of debate surrounding a five-year-old entropy flaw in Coldcard hardware wallets, technical analysis turned toward emerging off-chain settlement architectures. Federico Rivi published an extensive review of the Spark protocol, which is rapidly being integrated across consumer wallets including Blink, Primal, and Glow. Rivi noted that while a unilateral exit technically exists on paper, practical recovery during an operator outage or regulatory freeze remains out of reach for wallets lacking local structure exports.

The operational threshold relies on a 2-of-3 operator signature between Lightspark, Breez, and Flashnet to control the collective key component. Without access to operator databases, a standard seed phrase cannot reconstruct the transaction tree connecting leaf outputs to the root on-chain.

At the same time, Guy Swann of Bitcoin Audible urged the community not to retreat into custodial convenience following recent hardware scares, asserting: Self-custody is not dead. The Coldcard entropy bug was brutal, and I won't sugarcoat the pain people are going through right now. But if you think giving your keys back to a custodian is the safer play, you have forgotten the painful history of Bitcoin wipeouts. Citing Swann's dispatch and Rivi's review, analysts reiterated that systemic robustness requires designing for the worst-case scenario.

Berlin Government Faces 5.8 TB Data Ransom Demand

The Rhysida ransomware group claimed an intrusion into the state network of Berlin, threatening to leak 5.8 terabytes of administrative files across 1.44 million documents unless paid 30 Bitcoin. Governing Mayor Kai Wegner insisted the state would not be extorted. Writing on the incident, Bitcoinlighthouse observed that while media focus fixed upon the cryptocurrency ransom, the genuine peril lies in state databases that collect extensive citizen records without adequate security guarantees. Read the full report.

Peach Abandons Escrow as Regulatory Heat Mounts

Peach Bitcoin announced a mandatory architecture update taking effect today, September 1, 2026, marking a fundamental retreat from custodial mediation. The peer-to-peer bitcoin exchange is removing itself entirely from trade escrows, transitioning all new sell offers to single-signature escrows requiring the seller's signature alone.

Under the revised system, in-app dispute mediation will remain available but will no longer possess the capability to settle disputed funds in favor of the buyer. To mitigate counterparty risk without escrow arbitration, Peach will restrict sell offers exclusively to accounts with established reputations—specifically sellers with verified KYC or those with over 60 completed sales and zero lost disputes. Unverified sellers will be limited to a single active trade at a time, with individual trade volumes capped at 500 CHF.

Explaining the move as an experimental adaptation to recent regulatory pressure, peachbitcoin noted that over the past year, dispute settlement in favor of the buyer using our single signature - 4320 blocks after the escrow being funded - accounted for 0.03% of the total trades. Group Hug transaction batching has also been discontinued under the single-signature model, returning buyers to immediate on-chain settlement upon trade release. See Peach's announcement and technical terms.