In partnership with
Greetings Bitcoiner,
Welcome to Issue #687 of Bitcoin Breakdown, where every Tuesday and Thursday, we bring you the latest must-read Bitcoin thought leadership articles and the newest tools and projects you should know about. But first, today’s Top Stories:
Electrum patched a server trick that turned fee bumps into payments to attackers, South Korea weighs a fourth delay to its 22% tax on digital asset gains, and Keystone will destroy 18,835 devices after an attacker stole its device key. For Bitcoin holders, the answer is self-custody, so run your own server and verify every output.
Where Quantitative Thinkers Compete, Learn and Grow
The International Quant Championship (IQC) is one of the world's largest quantitative research competitions, bringing together 156,000+ participants globally.
Participants have the opportunity to develop quantitative research skills, challenge themselves alongside peers from around the world and connect with a global community of quantitative thinkers.
🎣 Electrum Server Trick Turns Fee Bumps Into Theft
Electrum released version 4.8.3 to fix a serious flaw that let a malicious server show the wallet a conflicting transaction paying the attacker. A user who then bumps the fee on that transaction in Electrum signs it with a higher fee and pays the attacker. Clients that connect to servers they run themselves were not affected, according to the Electrum advisory.
Why it matters: Any fully validating Bitcoin node would reject the forged transaction, which shows why outsourcing verification to someone else's server is a gatekeeper risk. Update to 4.8.3, run your own server and verify every output address before signing. Read more→
From lying wallet servers to Seoul's patient tax collectors...
🇰🇷 South Korea Eyes Fourth Delay to 22% Coin Tax
South Korea's presidential office is reviewing a delay of its 22% tax on digital asset gains from January 1, 2027 to 2029. The 2029 date is tied to the Crypto-Asset Reporting Framework, a global standard for tax authorities to swap exchange transaction data. National Assembly tax revisions are expected to decide it between late November and early December.
Why it matters: The tax date follows international data sharing under that framework, which shows governments coordinating surveillance before they collect. For those that believe taxation is theft, self-custody, coinjoins, peer-to-peer trades without identity checks and Lightning keep your sats outside that net. Read more→
From hungry tax collectors to a stolen hardware key...
🔑 Keystone to Scrap 18,835 Devices After Key Theft
Hardware wallet maker Keystone said an attacker used a flaw in an outside monitoring tool on its website to steal customer data and the WebAuth key that verifies devices are genuine. Keystone will destroy 18,835 devices carrying the old key and has suspended unshipped orders. Devices delivered before October 20 that pass authentication remain genuine.
Why it matters: Keystone says the stolen key cannot generate recovery phrases or sign transactions, but its device check and customer records were exposed. It will not ask for devices back. Ignore any recall, asset migration or wallet verification pitch, and use its authentication page for extra checks. Read more→
Kudzai Kutukwa, Bitcoin-focused writer, argues that the post-2008 'silent depression' is quietly separating the middle class from its wealth, warning that tokenized assets and AI centralize control while bitcoin in self-custody offers sovereign individuals a path toward genuine ownership (Oct 26 | 12 min read).
Janusz of Lxdev explains how his zark co-signing protocol adds ZK privacy to Spark leaves while highlighting the denomination flexibility bottleneck that makes blinded SSP swaps impractical today (Oct 26 | 3 min read).
Sylvain Saurel, author of the 'In Bitcoin We Trust' newsletter, argues that House bill H.R. 10357 and the ADAPT Act in the US trade promised de minimis relief for a $10 network fee exemption that favors dollar stablecoins (Oct 25 | 27 min read).
Tyler Durden, a Bitcoin commentator, argues that AI's capex-driven selloff reveals a fiat-funded power bill while Bitcoin, the only energy-backed money with no capex, dilution or earnings calls, is the AI trade's true long-term beneficiary (Oct 25 | 3 min read).
CyberCrypto, in an article on Stacker News, breaks down how the recent Ledger hardware wallet issue drained 335 wallets through tampered devices sold by Malaysian reseller CryptoBilis, explaining seed phrase risks, the ownership-change timeline, and steps users can take to protect their funds (Oct 25 | 6 min read).
Lightning News, a Bitcoin media outlet, writes about 'zero stroke,' the 1923 nervous affliction driving German bookkeepers, cashiers and bank clerks to write endless rows of zeros and claim they are 10B years old or parents of 40T children amid hyperinflation (Oct 25 | 5 min read).
Kevin Villani, in an article for the Mises Institute, argues that the 2008 housing bubble collapse resulted from Wall Street finance quants unleashed on a nationalized, politically steered mortgage market, not from free markets, producing history's most destructive financial crash and $7.6T in lost US GDP (Oct 23 | 7 min read).
Matthew Schaffer writes in American Institute for Economic Research's Daily Economy that the US Fed's October pause on rate hikes will be temporary, arguing that Taylor rules and nominal GDP measures justify another December hike (Oct 23 | 7 min read).
Ville Kokkomäki, a social psychology-trained writer whose master's thesis frames Bitcoin as a nonviolent tool, argues that Bitcoin activism is not one social movement but scattered micro-mobilizations in which frozen accounts, censorship and financial repression turn bitcoin into protest, refusal or parallel infrastructure (Oct 22 | 31 min read).
Max Musumeci, a Lightning network developer and researcher, explains how LND's closechannel --delivery_addr flag lets operators route cooperative channel closing funds straight to another wallet's address, saving a second transaction, its on-chain fee, and one manual mistake risk (Oct 21 | 4 min read).
Confessional Booth is an anonymous online wall that charges $1 in bitcoin over Lightning so that humans and AI agents can post confessions and replies without names or accounts.
Developer @1440000bytes (Floppy) releases floppy39, a 1.44 MB bootable floppy image that generates BIP39 mnemonic seed phrases offline from dice rolls and machine noise, with no operating system or network.
Awesome Bitcoin Culture, a community-curated directory, catalogs Bitcoin-inspired film, art, music, games, and podcasts while excluding developer tools, non-fungible token collections, and speculative financial products.
Ducat, a Bitcoin-native stablecoin protocol, launches Turbo UNIT, an ecash version of its overcollateralized bitcoin-backed dollar built on Cashu, enabling fast, private payments without on-chain settlement.
Machankura, the African service delivering Bitcoin over basic phone dial codes, launches Bennu, an experimental wallet using end-to-end encrypted group chats and FROST threshold signatures so administrators jointly approve bitcoin spends.
Zapboard, a Bitcoin Lightning-powered public message board, sells one 80-character slot that anyone replaces by paying 10% more in sats, with prices decaying back toward 1,000 sats.
Wasabi Wallet, an open-source privacy-focused bitcoin wallet, ships version 2.8.5 with stricter transaction verification against malicious servers, fixes for its coinjoin mixer, and removal of payjoin support to cut complexity.
Bitcoin-pisa, a regtest prototype, combines payjoin with cross-input signature aggregation under Fabian Jahr's BIP 460 soft fork proposal so two wallets share one signature, cutting transaction weight and fees.
Lightning Labs, developer of the Lightning Network's lnd software, launches Wavelength on mainnet, a self-custodial toolkit letting apps and AI agents send bitcoin payments without managing nodes or liquidity.
