Show Notes
A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q.
AOB
First live show! Ungovernable.network updates KeyOS 1.4 is out
NEWS
Liquid exploit: roughly 4,000 BTC withdrawn; return discussions ongoing-- TFTC, CoinDesk, Stacker News | Updates: OrangeSurf, Samson Mow
Orionx Exchange Collapses in Chile: $7M Missing, 100K Users Affected -- TFTC
Coinbase/Better Bitcoin-Backed Mortgages Can Reuse Borrowers' Collateral -- CoinDesk
House Cancels Late-September Votes, Squeezing CLARITY Act Window -- Roll Call, CoinDesk
Trezor Breach Worse Than Reported: 67,000 More US Customers Exposed -- Bitcoin Magazine
Pocket Bitcoin Breach Links 291 Users' Identities to Bitcoin Addresses -- Pocket Bitcoin Blog
Coldcard Wave 3 Attacker Moves Stolen BTC Through THORChain -- TFTC
Tether Froze $42.4M USDT on a Verbal Homeland Security Request, No Warrant -- CoinDesk
RELEASES
Highlights
KeyOS v1.4.0 -- 2026-09-04 Major release for Passport Prime with a redesigned launcher, app sideloading with granular permissions, multisig exports for Unchained and Casa, new wallet connections (Bitcoin Safe, Coconut Wallet), authenticator imports from Aegis and Proton, and PIN-before-seed-reveal. Includes security fixes: P2WSH/P2SH-P2WSH change output validation, enhanced ATECC608 entropy, and a PSBT trust_witness_utxo toggle addressing CVE-2020-14199. Cake Wallet 6.4.4 -- 2026-09-04 Adds native Trezor hardware wallet support for Bitcoin cold storage and offline signing. Fixes a security vulnerability (GHSA-695v-fhpj-fv8x) where a malicious deep-link could cause EVM assets to be sent on an incorrect network. Also includes improved Monero sync visibility. Nunchuk Android 2.8.5 -- 2026-09-03 Adds BitBox02 connectivity over Bluetooth and USB, integrates Krux hardware wallet support, and introduces emergency push notifications with home-screen alerts. RoboSats v0.8.7-alpha -- 2026-08-31 Major update adding three new coordinators (Eleuteria, Freeport, Ammanaya), a federation consensus mechanism, and end-to-end encrypted image uploads in order chat via Blossom. Coordinators are now ranked live by DevFund donation value. Multiple security fixes including PGP verification. Everything else
Aqua Wallet v0.5.3 -- 2026-09-01
BasicSwap DEX v0.18.6 -- 2026-09-06
BitBox02 Firmware v9.27.1 -- 2026-09-04
Bitcoin Knots v29.4.1 -- 2026-09-02
Blockstream Green Desktop 3.5.4 -- 2026-09-04
Bull Bitcoin Mobile 6.13.4 -- 2026-09-04
Cashu CDK v0.18.0 -- 2026-09-02
Cashu TS v5.0.0-rc.9 -- 2026-09-04
Coldcard Firmware v5.6.2 and v1.5.2Q -- 2026-09-03
Flint v1.0.4 -- 2026-09-02
JoinMarket-NG v0.39.1 -- 2026-09-06
LDK v0.3-rc1 -- 2026-09-04
Lightning Terminal v0.17.4-alpha -- 2026-09-03
LND v0.21.3-beta -- 2026-09-02
Mostro v0.18.7 -- 2026-09-05
Specter-DIY v1.10.5 -- 2026-09-06
Tails 7.12 -- 2026-09-05
Zeus v13.2.1 -- 2026-09-02
EDUCATION
Liquid explainer: cached validation versus key compromise Use OrangeSurf's technical notes alongside the DeFi Prime explainer. Treat early reporting as provisional, not a completed postmortem. The reported flaw lets an invalid proof receive a cached pass; confidential amounts do not make validity unknowable. OrangeSurf reports one explorer rejected the transaction, with the cause of divergence unresolved. Do not describe this as cryptographically bypassing federation signatures, or assert that Confidential Transactions hid issuance from every observer. Liquid trust model: validation, custody and recovery The SpendNode discussion can frame key compromise versus invalid issuance, but its incident details need the qualifications above. Holding an L-BTC wallet key still leaves the underlying BTC dependent on the federation and the system's validation rules. Mainchain self-custody avoids that particular peg exposure; it does not eliminate all software or consensus risk. Pair with Mow's on-chain message chronology: an offer to return most funds is not completed recove
More from UNGOVERNABLE
A weekly live show covering all things Freedom Tech with Max, Q and Seth.
In this Confab, Max sat down with Rick (@rmessitt on Twitter) to talk about the fight for financial privacy, why the Samourai case matters, and how he helped raise over 10,000,000 sats through a provably fair lottery to support the Samourai developers. They got into the cypherpunk roots of Bitcoin, the dangers of KYC, paper Bitcoin, and the creeping surveillance state, as well as why privacy tools are essential if Bitcoin is ever going to be genuinely useful as freedom money. Rick also shared his perspective on why so many people in Bitcoin have lost sight of the bigger picture, and why supporting people like Keonne and Bill matters far beyond just one legal case.
A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q.
A weekly live show covering all things Freedom Tech with Max, Q and Seth.
A weekly news show informing you on the latest in Bitcoin, privacy and open source tech, hosted by Ungovernables, Max and Q.