No. 6E4ECC Wednesday, October 28, 2026 24h to 08:53 CDT

The Nostr Observer

Signal through the noise

Ranked as NotBiebs and 69 others 609 events through your lens 234 voices
Corporate Treasury & Custody

Datavault AI Discloses Frozen Bitcoin at Custodian Biconomy as Audit Wipes $92 Million From Corporate Balance Sheet

SEC Form 8-K reveals 837 coins trapped in Singapore since June; audit committee concludes unwithdrawable holdings never qualified as company assets under GAAP.

A corporate treasury's reliance on paper ownership over physical key control suffered a catastrophic reckoning this week as Nasdaq-listed Datavault AI disclosed that hundreds of bitcoin remain trapped at an offshore custodian [s534]. In an SEC Form 8-K filing analyzed by Roger, the company revealed that a withdrawal request submitted months ago has gone unfulfilled: On Tuesday morning a Nasdaq-listed company told the SEC that it cannot move its bitcoin. Datavault AI filed a Form 8-K stating that a withdrawal request submitted in June 2026 from a third-party custodian, Singapore-based Biconomy Pte. Ltd., remains incomplete as of the filing date of 26 October. The shares fell nearly 50 per cent on 27 October, according to The Block. [s534]

The impasse originated in a September 2025 securities purchase agreement with Scilex Holding Company, which transferred 1,309.04 BTC to Datavault's wallet at Biconomy through off-chain ledger entries. After selling 491.431 BTC back to Scilex for cash, the remaining balance stayed with Biconomy. When Datavault attempted in June to withdraw its coins to an external address, the transaction stalled completely. Subsequent accounting reviews stripped the holdings from corporate ledgers: Datavault's audit committee concluded on 20 October that the bitcoin never qualified as the company's own digital asset under GAAP at all. Four sets of financial statements, from the quarter ending September 2025 through June 2026, should no longer be relied upon. The asset reductions run to $8.1 million for September 2025 and $92.2 million for December 2025. [s534]

As Roger observed, the incident demonstrates that balance sheet claims are poor substitutes for cryptographic keys: A balance is a claim. An asset is a control. The two look identical in a dashboard and behave identically in calm weather, which is why the failure never shows up at rest. It shows up on the day someone asks to move something and the answer is a support ticket. [s534] The underlying protocol functioned flawlessly; the failure occurred strictly in the legal and custodial apparatus erected around it.

Seeking an institutional architecture that avoids single custodial bottlenecks, Debifi and Swiss bank Sygnum launched MultiSYG [s515], introducing bitcoin-backed lending where clients retain key custody in multisig: Debifi and Sygnum launch MultiSYG. Sygnum clients can now borrow against their bitcoin while the collateral sits in multisig, and they hold a key themselves. As Debifi founder Max Kei explained, A year ago I said borrowers shouldn't need to trust a custodian blindly. This past year showed why, with one secret often being enough to empty a wallet. As borrowing against Bitcoin grows, MultiSYG gives clients a loan where one stolen or weak key is not sufficient to move their collateral. [s515]

Proof of Work

Solo Miner at 16.4 TH Finds a CKPool Block; Yearly Odds Below 1 in 3,400

Dr -ck’s figure is the chance of finding any block over a year, not the odds of this hash winning a single round.

A home-scale solo miner solved a block on solo.ckpool.org [s39]. Pool operator Dr -ck reported the event: Congratulations to miner bc1q~ucu6 for solving the 318th stubborn block at solo.ckpool.org with only ~16.4TH of hashrate on a 6.2TH worker! A miner of this size has less than a one in 3400 chance of solving a block in a year. [s39]

That 1-in-3,400 figure is the chance of finding any block over a year, not the odds of winning this particular one. A year contains many blocks, so the per-block chance is much smaller than the annual number. The reward still went entirely to that miner.

The Instrument

A mechanical audit of web-of-trust ranking

The control read of the network over the identical 24-hour window without a personal lens returned 400 notes. Of those unranked notes, exactly 2 appeared among the 396 ranked notes surfaced through this reader's lens.

A two-note overlap confirms that the lens is performing the entire editorial curation, isolating signal from the broader network firehose.

Conditions & Network Readings

As of 08:53 CDT · Readings from the window; not live

Bitcoin Spot $80,674
100-Week Moving Avg $89,596
Price / 100w MA 0.90
4-Year ROI +293%
4-Year CAGR 41%
Supply HODL (≥ 2 Yrs) 48.9%

Sources: ChartsBTC & market readings [s116, s121, s151, s184]

Applications, Protocols & Infrastructure

Client Architecture

Napp Maker Sparks Wave of Micro-App Prototyping

Cody previews upcoming PsstPsst release integrating napps, napplets, and nsites directly over relay transport.

Interface screenshot of Napp Maker by Cody
Composable web tooling: Cody tests Napp Maker, previewing support for napps and client-side sandboxes. Cody

Client development moved beyond chronological timelines this morning as builders experimented with nested micro-applications [s84]. Following fiatjaf's release of Napp Maker, developer Cody showcased interface prototypes for the upcoming PsstPsst release: fiatjaf has been building a lot of napps lately. I just tried Napp Maker, and it feels full of possibilities! I can’t wait to release the next version of PsstPsst, with support for napps, napplets, and nsites! [s84]

The architecture allows lightweight applications to execute inside host client environments, transforming Nostr profiles and relays into application distribution hubs.

Sidechains & Pegs

Liquid Federation Re-Enables 1:1 Swaps in Staged Recovery

Aqua and SideSwap restore peg operations accounting for 99% of volume as independent security audit nears completion.

Announcement graphic from Liquid Network Federation
Liquid Network Federation announces restored 1:1 swap operations via member providers. Liquid Network

The Liquid Network Federation announced a significant milestone in its post-incident restoration process [s189], re-enabling bilateral swaps across key mobile and desktop integrations: BTC<>LBTC swaps were re-enabled last week as part of Liquid’s staged recovery. [s189]

Swaps between Bitcoin on-chain and Liquid LBTC are now active through participating providers including Aqua and SideSwap, which collectively accounted for 99% of peg-out volume prior to the incident. [s189] Federation peg-out operations remain subject to enhanced controls while security audits conclude and auditable Proof of Reserves remain published at liquid.network.

Defensive Engineering

White Noise and ZEUS Isolate Decoders and Refresh Toolchains

Android messenger confines animated media to permissionless workers; ZEUS bundles LND v0.21.5-beta.

Release testing announcement graphic from ZEUS
ZEUS v13.2.4-rc2 testing release bundles embedded node updates and security hardening. ZEUS

Hardening measures landed across privacy-focused communications and Lightning tools. White Noise detailed a significant containment upgrade for Android [s507], isolating animated GIF and WebP decoding within a permissionless worker process: White Noise authenticates who sent a file to a group chat and confirms that it arrived intact. Your phone still has to open that file, which means handing sender-shaped bytes to a native decoder built for speed, and a trusted friend can forward a GIF crafted somewhere else. The sound response is to treat every attachment as untrusted input and give the code that reads it as little authority as possible, so a decoder bug lands in a process holding little worth taking. [s507]

Concurrently, ZEUS rolled out its testing candidate [s188]: ZEUS v13.2.4-rc2 is now available for testing. The build bundles embedded LND v0.21.5-beta, LDK Node v0.7.1, and CDK v0.18.2. On the catalog front, Zapstore instituted strict signature policies [s133]: Apps that have no Android keystore ownership proof (signed NIP-C1) are no longer accepted. Foundation also released Envoy 2.3.7 [s54] with maintenance updates.

Unsolicited Mail & Customer Data

Social Engineering

Unsolicited Blockstream-Branded Email Hits an Address Used Only for a 2021 Order

ndeet posted a screenshot as evidence of a customer-data leak. The sender is unverified; the tax claims in the message are not news.

Screenshot of an unsolicited Blockstream-branded email posted by ndeet; sender not verified
A screenshot of an unsolicited email, not a verified Blockstream notice. ndeet received this Blockstream-branded message at an address used only for a 2021 hardware-store order and posted it as evidence of a leak. The paper cannot confirm the sender. Do not act on the IRS withholding claims in the screenshot. ndeet

Developer ndeet reported receiving the message at a unique email alias created solely for one store purchase in 2021, with no official leak announcement from the merchant [s209]: Unexpected but here we go. Bitcoin companies continue loose customer data and risking them getting wrench attacked. I'm tired of this shit. I will call out any company loosing customer data until they get their shit together. ndeet asked whether the exposure was limited to email or also included a physical address. The screenshot is evidence of how the message arrived, not confirmation that Blockstream wrote it or that the tax guidance it describes is real.

Separately, hardware maker Foundation warned that fraudulent sites tied to recent phishing emails remain active [s33]: IMPORTANT REMINDER Some fraudulent websites linked to the recent phishing emails are still active. These sites have been reported, and we are working to have them taken down. Please DO NOT click any suspicious links in emails or visit the websites they direct you to. Foundation will NEVER ask for your recovery or seed phrase. That advisory concerns Foundation's own customers; it does not authenticate the Blockstream-branded screenshot.

Scaling Frontiers, The Catalog & Community Gatherings

Protocol Research

waxwing Outlines Lichen Scaling Leap Using BABE Verification

Transitioning verification to BABE compresses on-chain footprint sevenfold, reducing exit delays and scaling hubs up to 50,000 users.

Bitcoin developer waxwing shared promising scaling benchmarks for Lichen, an off-chain protocol designed to streamline user exits and liquidity hub operations [s222]: switching the onchain verification to BABE results in only a few onchain txs instead of 20-25 (so, a much smaller exit delay) and reduces onchain costs by about 7x in terms of bytes. Worst case attacks in terms of a mass exit can then allow scale of about 10k to 50k users with a single operator/hub. And fees kept in reserve are also far lower. [s222]

Highlighting the practical usability gains for clients, waxwing noted: Very easy for the user: they don't have to watch the bitcoin chain at all. It's like an LSP model, but way better imo. [s222] The advancement moves Lichen from theoretical exploration into practical implementation territory.

Code & Classifieds Wire

Software Repositories, Applications & Market

Ecash App: Free, open-source Fedimint wallet prioritizing financial privacy with multi-federation management, Lightning, and ecash payments [app:s569].

Super Productivity: ToDo list, time tracker, and personal task manager across desktop and mobile platforms [app:s571].

SkateSpots: Community directory and map for discovering skate spots worldwide, joining crews, and connecting over Nostr [app:s573].

nostr-double-ratchet: End-to-end encrypted messaging primitives implementing double ratchet key exchange by Sirius Business Ltd [repo:s604].

nostr-vpn: Decentralized virtual private network routing and tunnel coordination over Nostr relays [repo:s609].

Retro Game Mat: New, boxed 200+ retro games mat with foot-pad controller in Como, Italy for 10.00 EUR on Barattolo [listing:s543].

Broadcasts & Calendar

Live Transmissions & Upcoming Gatherings

NoGood Radio: Live audio broadcast streaming community music and talk on zap.stream [watch:s432].

Cyberspace TV Live Stream: Continuous technical stream and community feed on zap.stream [watch:s433].

AI Startup Rodeo: Machine-to-Machine Payments: Technical talks and demos on agent tooling, developer frameworks, and automated payments at Q Branch in Austin, Texas on Friday, October 30 [calendar:s549].

Agents Anonymous: Community gathering exploring AI tools, Claude Code, Codex, and agent automation at AI Freedom Lab at Bitcoin Park in Nashville on Saturday, October 31 [calendar:s550].

Halloween at The Bitcoin Embassy: Costume gathering, pupusa dinner, and community poker freeroll in San Salvador on Saturday, October 31 [calendar:s560].

Redding/Shasta Co. Bitcoin Meet-Up: Monthly dinner and discussion at Ortegas' Restaurant in Palo Cedro, California on Wednesday, November 4 [calendar:s545].

Perth BitDevs: Socratic discussion covering Bitcoin engineering and protocol developments at Blasta Brewing Company in Burswood, Western Australia on Thursday, November 5 [calendar:s558].