lontivero

Because finding and fixing security bugs is normal. In fact, with people scanning your projects with AI all the time, this had become more frequent than before.

2026-08-18 04:03:24 CEST

- reply

No, the bug was reported in public and fixed in public.

2026-08-16 18:16:46 CEST

- reply

There isn't any mobile wallet, there's a PR for it: https://github.com/WalletWasabi/WalletWasabi/pull/14803

2026-08-15 15:44:54 CEST

- reply

Scary is to witness people losing many. This week that happened to @nprofile…a0x9 but that is just one of a long list.

2026-08-13 01:10:27 CEST

Comunachos vs Nachos libres with Milei and his chainsaw. Humor everywhere.
https://blossom.primal.net/a8abf598bb1f673f387931334888f2e3db998e28f54a17bc8aead6035180379a.jpg

2026-08-12 21:02:28 CEST

https://stacker.news/items/1546607/r/lontivero

2026-08-08 15:32:40 CEST

- reply

Promiscuity increases your exposure and that's a fact regardless of who said it.

2026-08-08 02:08:58 CEST

Something good about all these hacks is that people will finally understand the risks of promiscuity.

2026-08-07 13:37:15 CEST

- reply

Payment in coinjoin are just coinjoins and the mining fee rate is the same for all participants.
The fee is calculated as follow: `fee = sum(my_inputs) - sum(my_outputs)` but the payment output is not mine so, it appears a fee. Basically, not even Wasabi knows about the payment. That's something to improve.

2026-08-06 04:58:38 CEST

- reply

It is not.

2026-08-02 07:25:37 CEST

- reply

Yes, we release a very important version in July and Wasabi is doing well in all metrics.

2026-08-01 23:08:19 CEST

- reply

I agree. I wouldn't have said Coldcard either. But if you would asked me 3 days ago which is the most overhyped hww or the most ugly looking one or the one with the worst ux, I would have told you Coldcard by sure.

2026-08-01 21:07:47 CEST

- reply

I never believed it was unsafe but it was always clear that it was shitty. Now, it is easy to say this because we all know that it was unsafe and shitty, and that it was pure marketing for brain-washed cultists.

2026-08-01 19:33:57 CEST

- reply

This is a disaster waiting to happen. Those in what I call "the cult" not only collect xpubs but also send derived private keys to untrusted servers also maintained by them. That will be the Coldcard incident, it is just a matter of time.

2026-08-01 15:28:06 CEST

Influencers who trashed Ledger and promoted Coldcard as if it were the bes, or even the only true, bitcoin hardware wallet will pretend they never did so and will start trashing Coldcard.
But they are not all the same. Many just promoted it because they were paid to do so, okay. However, others did it because they belong to the cult. Anyone with two eyes could see that even the worst one-cent, rudimentary Chinese calculator is higher quality than a Coldcard: the UX is torture, its looking is horrible and the ceremony of moving a memory card around is absurd.
That's why Coldcard was initially heavily promoted for free by so many, even when its first version was unusable because the buttons didn't work.
Btw, if you haver never seen a Coldcard, this is the piece of shit influencers were brainwashing you to buy:
https://blossom.primal.net/3c228d1b37f6ba65b1842c025d2c734262c1f73384ad21578888d333250dc92d.jpg

2026-08-01 04:00:07 CEST

Dear Wasabi Coordinators' operators, the Coldcard thief consolidated all the money in one UTXO.
You can use the DoS-prevention system to prevent that coin from entering in a coinjoin, just in case.
Run this bash command line to register the outpoint in the prison.
echo "$(date +%s),0c6bf853a645b699a3b2cd6d8e3c44cf1a02a16f538df08212a44753f75d9d01-0,FailedToVerify,0000000000000000000000000000000000000000000000000000000000000001" >> ~/.walletwasabi/coordinator/Prison.txt
----
Make a backup of the Prison.txt first and restart the service.
----
I don't think the thief is planning to use a coinjoin service, otherwise why would he consolidate all unnecessarily but again: just in case.

2026-07-31 19:00:13 CEST

- reply

This is nothing compared to the blockchaininfo wallet using the random.org http/404 error page as rng. I say 1000 btcs disappear in a second in real time.

2026-07-31 13:31:10 CEST

- reply

So true. I listened influencers, who are just enthusiastic users, analyzing HWW and ranking them by security. Completely insane.
And yes, if you care about protecting your money, a passphrase is necessary.

2026-07-28 18:07:29 CEST

- reply

Absolutely amazing release, congratulations!
Please allow users to disable automatic translations once and for all.

2026-07-27 23:11:11 CEST

I don't know how to short a country, but if I did, I'd go all in against Germany. Not out of any dislike for its people—quite the opposite—but because everything I've seen there, and everything I read day after day, points to the total subversion of everything.
I took this picture two or three years ago after walking 10 minutes. Can you see the rainbow flag?
https://blossom.primal.net/11811d5e01272a00b9a761ddf60c2dd250f8c23e777c8522276230971671cec9.jpg

2026-07-26 16:48:31 CEST

- reply

I forgot it but there's also an alternative alpha version of Wasabi for Star9 developed by @nprofile…9hay
https://github.com/kravens/sabi9-startos

2026-07-26 01:30:57 CEST

- reply

I think so. @nprofile…pes4 maintains Wasabi for Star9.

2026-07-24 22:56:17 CEST

https://stacker.news/items/1523710/r/lontivero?commentId=1524118

2026-07-24 22:52:56 CEST

- reply

It's not abandoned, it is more active than ever, still growing in all metrics.

2026-07-24 15:34:55 CEST

- reply

Wasabi doesn't use chain analysis. The company that developed used that for a while but that company doesn't exist anymore and Wasabi has been maintained by the community for two years now.

2026-07-24 15:31:58 CEST

- reply

ZeroLink is the privacy framework invented by @nprofile…56pu and implemented by Wasabi Wallet 1.x.
Samourai preferred to take credit for something they didn't do: https://github.com/nopara73/zerolink
Anyway, the framework is obsoleted by Wabisabi which can do the same and more.

2026-07-24 04:49:45 CEST

- reply

It doesn't affect new version but old ones. All previous versions will stop working.

2026-07-23 04:57:16 CEST

- reply

And once you fix the bugs you mark the completion of long jurney, boy.

2026-07-23 04:24:22 CEST

- reply

Yes, it marks the completions of a long journey that started with v2.0.8 Hydra.

2026-07-22 23:23:59 CEST

- reply

You have the coinjoin to a different wallet and payment in coinjoin to fo that.
For more complex things the scripting capability will be the solution. Basically you will be able to automate whatever you do manually today and more.

2026-07-22 22:49:57 CEST

- reply

No more server; nothing to shutdown.
#nevent1q…754d

2026-07-22 22:47:32 CEST

Proud
#nevent1q…wlna

2026-07-22 19:26:57 CEST

- reply

He has a PR in Wasabi to reenable that.

2026-07-20 00:10:50 CEST

Felicitaciones al nuevo campeón.

2026-07-19 19:29:01 CEST

- reply

Okay, that's simply wrong because you are revealing all you wallet. But that's not all because having only one UTXO results in a pilling chain of txs that makes trivial to track you.
Consolidation is almost always wrong and there are almost never a decent justification to do that. I would only do it if for some reason I need to lose all chances of privacy.
The only way to consolidate privately is in a coinjoin, but even that is rather stupid.

2026-07-19 13:52:00 CEST

- reply

What do you mean with "consolidating via Wabisabi"?
Paying in coinjoin using a standard denomination is indistinguishable from a normal coinjoin.

2026-07-12 05:20:34 CEST

- reply

If someone who claims to be your friend stabs you in the back, be wary of their friendship.

2026-07-11 05:01:35 CEST

- reply

No, it's okay.

2026-07-11 01:50:55 CEST

- reply

Thanks for investing time and effort in this. We will follow up with mitigation actions soon.
Given that this is an attack that could, at least in theory, be carried out by a coordinator, it would have been preferable to report this privately to the developer rather than to a coordinator operator (a possible attacker)
Anyway, I was planning to introduce changes in the protocol very soon so I add this to the list.

2026-07-11 00:32:34 CEST

Huge!
#nevent1q…l3r7

2026-07-05 00:06:22 CEST

@npub1yn8…xgfl has created the most nerdy Wasabi Wallet version ever! I love it.
https://npub1nccwjspr3nv7h67xx2qhdh2dzzvpyy55gte2dsu8yl7xd7n74y9qydz7mj.blossom.band/ba523fb0ff61ecf9809e0881b7b47fdf8cf3b1408a61c9ebc667bff1f481c4b8.png

2026-07-04 15:54:07 CEST

- reply

Wow! I can't wait to play with it.

2026-07-01 04:29:09 CEST

- reply

It took almost two years to remove the need for a central server and Silent Payments would require to add a server again.

2026-06-28 20:23:15 CEST

- reply

In the past it was Windows dominated. This can be read as Wasabi being equally accepted or, Wasabi being less dummy friendly.

2026-06-28 17:26:56 CEST

- reply

The only reasonable explanation

2026-06-28 00:47:15 CEST

Wasabi user base is not Windows dominated anymore, it is pretty balanced now.
https://npub1nccwjspr3nv7h67xx2qhdh2dzzvpyy55gte2dsu8yl7xd7n74y9qydz7mj.blossom.band/61133c7271de84390325550a5b4580f0082b3b365098a2666dcaeb7179a6db17.png

2026-06-25 19:01:51 CEST

The Tor team has lost their sense of responsibility. Breaking the compatibility of the entire software ecosystem that preserves user privacy just to make their developers' lives easier is insane.
There are hundreds, or thousands, of affected projects, many of which require extensive bootstrap times and somehow need to force all their users to update their software versions.
Tor is not just any software—it's a critical infrastructure component for the entire world—and yet they announced just a couple of days ago that in two months all clients prior to version 0.4.8 will stop working. It's madness.

2026-06-17 00:19:21 CEST

- reply

Sure, there are 41579595052351490 interpretations for that small coinjoin transactions but there are 67% probably of linkeability?! It's a joke.
Also, is it me or the tool does contemplate the probability of consolidation?
Look, I like the tool but it is useless for analyzing Wasabi transactions, but instead of saying "there is no way to analyze this thing", they prefer to lie. That's the same that Samourais did for years.
That graph, that linkeability probability matrix are simply fake and it is very easy to verify what I say: take a coinjoin transactions in which you participated and see if any of those links match teality.

2026-06-15 23:50:23 CEST

- reply

That graph creates the illusion of linkability because there are two trillion missing lines.
I checked one of my coinjoin transactions and none of the links reported was real.

2026-06-11 20:03:42 CEST

Mexico had organized the first fourth‑world‑quality FIFA World Cup inauguration party. I've never seen anything worse since USA 1994.

2026-06-11 17:28:08 CEST

- reply

So untrue. The thing that there are no more developers saying stupidities and attacking other projects all the time doesn't mean the culture has worsen. Now that the danger of providing privacy is absolutely clear, the real bravery has become evident and there are people working hard and risking a lot to do what must be done.
#nevent1q…qul5

2026-06-10 21:40:46 CEST

- reply

https://npub1nccwjspr3nv7h67xx2qhdh2dzzvpyy55gte2dsu8yl7xd7n74y9qydz7mj.blossom.band/4b51ef61273ff8b49b6b1cc14a6efbe0b26eb2ff3a8d9e47e7ea2dba788f58b3.png

2026-06-10 21:31:59 CEST

- reply

https://npub1nccwjspr3nv7h67xx2qhdh2dzzvpyy55gte2dsu8yl7xd7n74y9qydz7mj.blossom.band/6ae2f1ae71c067f50bbda0f0abc8d005e13a7ee640174dce198f7a45001e5a3f.png
https://npub1nccwjspr3nv7h67xx2qhdh2dzzvpyy55gte2dsu8yl7xd7n74y9qydz7mj.blossom.band/1053f05c59386729b9df6b16739dbc59b71da70232480961ba7328ec44b3d4f5.png

2026-06-10 21:21:46 CEST

**CoinJoin ecosystem insights for Wasabi 1.x, Wasabi 2.x and Whirlpool coordinator-based privacy mixers**
This research is awesome https://petsymposium.org/popets/2026/popets-2026-0061.pdf
These guys were studying Wasabi and Whirlpool for years!

2026-06-09 02:31:57 CEST

I found this article about my educational botnet **Vinchuca** https://starlog.is/articles/ai-agents/lontivero-vinchuca

2026-06-02 01:41:41 CEST

- reply

What's the point? I checked a coin of mine that comes from a coinjoin and none of the about 10 "links" is correct. I can give you the info so you can see it by yourself.

2026-06-01 00:41:22 CEST

- reply

That graph is clearly wrong. I don't need to even zoom in to know it because finding all the subtransactions is computational unfeasible so, those lines make no sense.

2026-05-16 23:39:06 CEST

- reply

Do not reuse addresses, bro. You are a referent.

2026-05-16 00:21:08 CEST

- reply

I want to port WabiSabi to C languaje because that would allow coordinators to run in even less powerful CPUs but also will make possible other wallets to implement the coinjoin feature. Unfortunately that's not the top priority right now.

2026-05-13 00:28:57 CEST

Most Argentinians have never heard about the Hantavirus, it's that unusual that you have to be as old as me, or older to know it.
#nevent1q…g97s

2026-05-13 00:12:03 CEST

- reply

The critical difference is that while God promised us eternal life after this one, simulated agents don't see the programmer after the CTRL+\

2026-05-13 00:04:53 CEST

- reply

If that were all the difference then it would be a dreamed world.

2026-05-12 23:59:07 CEST

Hantavirus exists in Argentina since forever and in my 48 years in this country I have never known about anyone to get it.
I know that if you have close contact with someone who has been exposed to the fluids of a specific kind of mouse in the southwestern part of the country, you could get it, but anyway, all the hysteria is too IMO

2026-05-05 20:07:26 CEST

- reply

IMO it's because you need to scan the blockchain to detect the payments.
The Out-of-band notifications mechanism was never standarized and it is not free of problems and in some cases you would need to go back to scan the blockchain anyway.

2026-04-24 15:50:28 CEST

- reply

Fewer than half. That explains it all.

2026-04-24 15:32:43 CEST

- reply

Thanks for your work, @nprofile…asma. Joinmarket is a software that had inspired many of us. Thanks @nprofile…kxsh too and all who have kept the project alived for years. Thanks to Chris Belcher for the project.
Joinmarket-ng looks really promising and it comes with renewed energy. Thanks @nprofile…yykq for picking up the baton.
Long live to open source software!

2026-04-24 15:17:23 CEST

- reply

Sorry to jump in, but as any bald long-bearded coder knows, you simply don't rewrite software from scratch.

2026-04-24 14:54:09 CEST

@nprofile…9lzm interviewed me about Wasabi development past, present and future.
https://youtu.be/RM9DNdZKVZY

2026-04-15 23:55:34 CEST

- reply

You can ask an IA to generate an 20 lines script to do that with Wasabi RPC interface.

2026-04-07 23:04:11 CEST

I asked Claude Code to write what it learnt to a file and moved to do something else. When I came back, it not only failed to do it but also consumed 32USD.
https://npub1nccwjspr3nv7h67xx2qhdh2dzzvpyy55gte2dsu8yl7xd7n74y9qydz7mj.blossom.band/3c174a232544d65b169a7f7dfa0c2af210cce2c242efe0b9c6d767967bf269d4.png

2026-04-04 17:39:20 CEST

- reply

More people join this space, lower the general IQ becomes.

2026-03-27 21:59:49 CET

Having to sign Windows intallers just to avoid displaying Unknown Publisher feels so shitty. Why are we doing that? We should play that game.

2026-03-25 18:56:42 CET

Today Wasabi meeting to talk about the present and future. You are welcome to join https://meet.fulmo.org/wasabi-talk-2.8.x
15:00 Buenos Aires Time
19:00 Central European Time
18:00 Western European Time
11:00 Pacific Time (North America)
12:00 Mountain Time (North America)
13:00 Central Time (North America)
14:00 Eastern Time (North America)
23:30 India Standard Time
22:00 United Arab Emirates
12:00 El Salvador

2026-03-08 21:00:30 CET

- reply

After I can finally revert all the changes made by the AI. Few weeks I hope.

2026-03-08 20:07:21 CET

- reply

Well yes, if you compare Samourai's OP_RETURNs with the current degens who spam smoking monkies, Samourai was not so evil.

2026-03-08 19:50:16 CET

Next release will have it available in the UI. But still experimental.
#nevent1q…9zkx

2026-03-08 19:47:29 CET

- reply

Some Wasabi coinjoin coordinators limit the size of the coinjoin transaction to 500 inputs because the chances more participants are, higher the chances that one fail and ruin the whole process.

2026-03-08 19:40:42 CET

- reply

False. Wasabi doesn't spam the Bitcoin blockchain. Only Samourai was affected.

2026-03-08 16:37:15 CET

After a Wasabi Wallet/Claude Code integration demo, I asked the assistants what question they would like to ask Claude about the demo wallets.
The question was: "Tell me which of the payers has the most money." Claude's answer was: "fauce.testnet4.dev with 48.17 BTC."
We know the utxo model privacy problems but the point is that now everybody can expoit it.

2026-03-08 14:07:56 CET

- reply

AI agents like Claude Code, Codex and others.

2026-03-07 19:25:08 CET

It's unbelievable how easily tech-savvy people agree to having a big-tech-controlled reverse shell running on their own machines.

2026-03-03 20:46:01 CET

Claude Code + Wasabi Wallet session:
https://gist.github.com/lontivero/43a7c692cef7a6107c34a18b41b743d4

2026-03-01 18:47:46 CET

- reply

Only in the short time.

2026-03-01 14:22:16 CET

- reply

Oh I see. GPT-5.3-Codex.
I will play a bit with it. Thank you. All this is moving fast.

2026-03-01 01:24:46 CET

- reply

Can we ask a local model to code an operating system for our machines?

2026-02-28 18:36:55 CET

- reply

My fingers are getting fater.

2026-02-28 18:36:07 CET

- reply

Codex is not a model. What models are you using with codex.
Btw, I tried codex with many locsl models and it worked but claude code dod it better for me with the dame set of models.

2026-02-28 18:30:33 CET

- reply

I've tried aider-chat and claude code with different local models. It worked but it took like an hour to do what I asked to do.
#nevent1q…rwel

2026-02-27 02:40:47 CET

- reply

Well, not exactly whatever because it's read-only for the moment. That will change soon ofc.

2026-02-26 23:19:42 CET

- reply

It's Scheme. Wasabi has a Scheme interpreter built-in, that allows anyone with access to a generative AI model to instruct wasabi to do whatever they want.
Here a few examples:
https://image.nostr.build/a6a806de0fe3339457f9665f1879f879ef74fe0017ea9ab5dc644af5ead59996.jpg https://image.nostr.build/77edb5e2134bc51d559cba29a88c55ab576fb5630d073b321aa30c78f6acced4.jpg https://image.nostr.build/4977b1af303ba930338bdb70c924c690264791aae99e752af889b5807ef81b71.jpg https://image.nostr.build/c47098c2ddff3e10fc58b64434af6a404542e46805c445a097f24de21a928c50.jpg

2026-02-26 05:59:39 CET

Using Claude Code locally with ollama is painfully slow but at least it works:
https://npub1nccwjspr3nv7h67xx2qhdh2dzzvpyy55gte2dsu8yl7xd7n74y9qydz7mj.blossom.band/ceea4be0afda74cd3b866dffbd1055e2a4573e19c545599804f93f628704b358.png

2026-02-26 04:32:18 CET

What you want to be:
https://npub1nccwjspr3nv7h67xx2qhdh2dzzvpyy55gte2dsu8yl7xd7n74y9qydz7mj.blossom.band/da6cb1fb4e77d8006fe89c6569f82bbe63c740523d3856cf08e278b47a727d10.jpg
What you really are:
https://npub1nccwjspr3nv7h67xx2qhdh2dzzvpyy55gte2dsu8yl7xd7n74y9qydz7mj.blossom.band/92174daa1500d22e8ff89d1db12ea3d39c0e03333454b63cc30dd6a4535aa007.jpg

2026-02-16 21:23:46 CET

- reply

Pero la p*** &$#@re, estoy hasta el 19.

2026-02-14 19:15:43 CET

- reply

That already exists and it is called Wasabi Wallet.

2026-02-14 16:50:51 CET

- reply

It seems you are confusing this wallet with a different one. Ginger is not a mobile wallet but a desktop-only one and it didn't accumulate metadata because it is/was a fork of Wasabi Wallet, and that means that the client software does a good job protecting users' privacy.

2026-02-14 16:17:58 CET

- reply

The trick is in the languague. The tax should be on ungained gains or at least on non-real gains.

2026-02-14 16:08:10 CET

GingerWallet is dead. The centralized, chain-analyzed, non-fully open source corporate version of Wasabi Wallet has disappeared from Github and is no longer doing coinjoins. No official announcement, no communication, nothing—they simply removed the repository, stopped responding on Telegram, and unpublished software installers so they cannot be downloaded.
Even though the GingerWallet server continues to be operational, which allows users to use the wallet without noticing any issues (except for coinjoining), it is reasonable to think that won't last too long. Therefore, GingerWallet users should consider moving to Wasabi Wallet.
#nevent1q…5dgc