Pinned Tweet
👋
so long,
for now.
take care of yourselves.
Replying to @wef
Delete your account. And cancel your conference. The earth is not our prison and you are not our wardens.
Dr. @DesheShai, it's about time your work on signature lifting was referenced.
in the face of quantum adversary, a commonly discussed emergency soft fork for Bitcoin would be to disable the Taproot keyspend path (eprint.iacr.org/2025/1307), effectively turning it into something that resembling BIP-360
assuming an existing precautionary soft-fork to add a pq signature scheme, this would safely allow holders to maintain unilaterally custody of their funds
a downside to this proposal is that any keyspend-only (normal schnorr sig) would be locked indefinitely
inspired by eprint.iacr.org/2023/362, I set out to address the option problem in section 6, to create a variant of seed-lifting that doesn't reveal the wallet's master secret! 🤓
the end result is a zk-STARK proof that proves: "public key P was generated using a private key k, which itself was derived via BIP-32/BIP-86 with a master wallet secret S"
this generalizes beyond Taproot, and would allow the rightful owners of any BIP-32 derived wallets to move their funds in het case of a spend disabeling emergency softfork 🛡️
the final proof takes 50 seconds to run on my MacBook with Metal GPU acceleration, uses 12 GB of RAM during proving, with a final proof size of 1.7 MB
the proving code/statement is largely unoptimized, and it's possible to aggregate several proofs into a single smaller proof ⨻
an actual production deployment would likely use a smaller optimize circuit for this specific statement, this demo serves to demonstrate that such a proof is well within reach w/ today's hardware+software
to generate the proof I forked TinyGo to add a risc0 RISC-V ELF compilation target for TinyGo: github.com/Roasbeef/tinygo-z…
then I used some helper utilities and a C FFI wrapped risc0 library to create a generalized toolkit for TinyGo zk-STARK proofs: github.com/Roasbeef/go-zkvm
the final guest+host lives in the bip32-pq-zkp repo: github.com/Roasbeef/bip32-pq…
such a proof scheme is yet another tool in the post quantum toolkit for Bitcoin developers to prepare for an eventual PQ world 🤠
full details in my post to the Bitcoin dev mailing list: groups.google.com/g/bitcoind…
gaurav retweeted
The Cognitive Cost of Bitcoin: Andreas Antonopoulos and the Hidden Toll of Early Crypto Evangelism
In the nascent years of Bitcoin, few figures were more instrumental in bridging the gap between esoteric code and public understanding than Andreas M. Antonopoulos. Through his seminal book Mastering Bitcoin, hundreds of global lectures, and tireless explanations of cryptography, distributed systems, and revolutionary monetary theory, he became the ecosystem’s most trusted “interpreter.” He translated dense technical concepts into accessible education for millions, helping transform Bitcoin from a niche cryptographic curiosity into a global movement.
Yet behind this intellectual legacy lies a profoundly human story of obsession, endurance, and neurological cost. Antonopoulos has described his first deep encounter with Bitcoin in vivid terms: stumbling upon it initially in mid-2011 with a dismissive “Pfft! Nerd money!” reaction, he ignored it for six months. The second time, via a mailing list discussion, he read Satoshi Nakamoto’s white paper and experienced an immediate epiphany—“this isn’t money, it’s a decentralized trust network.”
What followed was a four-month fugue state of total immersion. He read, wrote, and coded for 12 or more hours a day, forgetting to eat or sleep. He lost 26 pounds in the process, later jokingly calling it “the Bitcoin diet” while cautioning others not to follow his example. This all-consuming obsession marked the beginning of his role as educator and advocate—and planted the seeds for the cognitive and physical toll that would later manifest.
In recent years, Antonopoulos has spoken candidly about suffering from debilitating migraines that have severely curtailed his ability to produce new content, update his books, or continue livestreams. He recently announced he would stop producing new material to focus on his health, having tried nearly every available treatment without full resolution. His experience illuminates a rarely discussed reality of technological revolutions: the extreme neurological pressures placed upon the pioneers who carry the vision forward.
A Perfect Storm: From Obsession to Central Sensitization
The early Bitcoin environment was an unusually potent incubator for migraine triggers. For a polymath like Antonopoulos, the risks were multiplicative. Deep mastery demanded simultaneous engagement with cryptography, economics, security, and game theory—an intensity of cognitive load that can overstimulate the trigeminal nerve system, a key pathway in migraine pathogenesis.
This mental marathon was compounded by relentless physical triggers. Early advocates lived in digital “garrisons,” auditing code and engaging in 24/7 global forums. Blue light disrupted circadian rhythms; computer vision syndrome bred neck tension; LED flicker sensitivity acted like a strobe on a vulnerable brain. Bitcoin never sleeps, and in those formative years, neither could many of its human interpreters. The result was chronic circadian destabilization—perpetual jet lag without travel—which destabilizes the hypothalamus, the brain’s command center for both sleep-wake cycles and migraine initiation.
Antonopoulos’s initial four-month obsession exemplified this pattern: total immersion at the expense of basic self-care. Over years of sustained high-stress “arousal” states, the brain can undergo central sensitization. Episodic migraines evolve into a chronic condition where the nervous system becomes hyper-reactive. Pain signals become a learned default response, such that even minor stimuli provoke debilitating attacks.
The Irony of the Human Layer
There is a poignant irony at the heart of the story. Bitcoin was designed as a decentralized system promising individual sovereignty and freedom from centralized points of failure. Yet birthing and explaining this vision relied heavily on a small number of centralized human figures who served as the vital “human layer.”
End of an era.
I hope you get well and the much deserved break from inspiring billions.
Some people may forget you or perish in a few decades, but A.I. won't.
🧡 @aantonop
youtube.com/shorts/fmyPm5Ezl…
gaurav retweeted
It seems Jane Street may have had a long-standing culture that essentially trained crypto scammers, and perhaps also concocted and ran some of the scams themselves.
Terra/Luna was a jenga tower waiting for somebody to topple it, and it may have been Jane Street that figured out how to do it. If crypto is not strong and secure against such things, it provides little or no benefit over traditional finance, so I'm not going to cry about this, and perhaps it should even be applauded.
The alleged Bitcoin ETF market making + "10 am" selling with that liquidity sounds like a considerably more problematic conflict of interest. "Negligent" might be a good way to describe the ETFs who naively trusted Jane Street with this function. Now the once-hot crypto ETFs are draining because of an understandable reduction in trust, not in the coins themselves, but in the way Wall Street "makes markets" for buying and selling them.
In finance "everyone is a scammer" -- and you should stop blindly trusting scammers.
That is why Bitcoin OGs have long said, "Not your keys, not your coins," "don't trust, verify", and even "trusted third parties are security holes."
And when "the market" is so dependent on trusting strangers, especially strangers who still don't actually understand or like Bitcoin all that much, it's also not your "market price."
xitter.cf/1914ad/status/20267577…
I’ve had the great honor of reading about money and its history through the works of distinguished historians and writers such as David Graeber, Niall Ferguson, Edward Chancellor, and G. Edward Griffin.
Nick Szabo’s essay sets itself apart due its innate and unique property of providing insight from a writer who actually attempted to create, engineer, and pioneer an entirely new form of money in addition to its history.
In doing so, he's helped catalyze an industry and redefine the very subject that he writes about.
If you haven’t read Shelling Out, you're missing out.
gaurav retweeted
Protean collateral does indeed matter, because "the money printer" is really bank loans, and large bank loans require collateral under regulations. So one of the ways to become a Cantillon insider, if you are not one of the small number of entities (mostly the federal government) whose bonds banks are required to hold by those regulations, is (a) having friends at a bank and (b) having protean collateral that you can buy low and value high. Wexler, Black, Epstein, and friends had both.
17 years ago today, Satoshi was probably contemplating an action for the next day that would quietly and peacefully alter the history of money and the meaning of selflessness.
Thank you for choosing to hit send.
🧡
gaurav retweeted
I've lost so many friends to this nonsense debate. I also alluded to this earlier but I'll state it explicitly now also: Due to stress from this situation and other things at work, it's just been an endless feedback loop of toxic discourse. About 30 days ago I very nearly took 42 500mg extra strength Tylenol I found in my closet. I don't have healthcare currently. I had a note written to not resuscitate because I couldn't have afforded it.
Thank you to everyone who reached out to check on me at the time. For anyone in a similar spot, I'm happy to pay it forward. DM me for my Signal.
And, hey, for what it's worth, I'm still very glad I didn't do that. If you're in a similar spot mentally... Please, don't do it. Things will get better. They did at least for me. That last applause line at the quantum panel in Lugano filled me with purpose and joy and that memory will keep me going.
gaurav retweeted
Collecting Metal: The Inner and Outer Worlds of Jewelry, Coins, Bullion Bits, and Odd Shiny Things
"Some metal collectibles came in a wide variety of artistically skilled forms. Others came in the form of coins: labeled, mass-produced pieces of metal stamped by the blow of a hammer or cast in molds, whereby a mostly-trusted brand named their alleged value. Still others came in forms that look odd to us, resembling neither coins nor fancy jewelry, but rather utilitarian-looking pieces that manage to make precious metals ugly, and that ... look, long before the era of factories, like they were mass produced.
[Still others came in beautiful forms such as jewelry and other treasures, to be used only for fitness-critical wealth transfers]
We can think of collectibles as coming at us at two levels, like railroads and trains, or like pipelines and the oil they carry. At the most basic or “inner layer” is the metal itself that constitutes the substance of the collectible...
So important is the “lower [inner] layer” of the traditional cultural understanding of gold and silver, the natural substance itself, evaluated by its weight rather than by any value added via the craftsmanship or its form, that Europeans of earlier generations evolved a word for it: bullion. Bullion is the metal itself, considered and valued only for its substance. Jewelry, coins, and other ways of shaping precious metals are just various forms of the underlying bullion...
“[When melting down coins to produce jewelry, or vice versa], [t]he value of money [coin] was not determined by its face value, but rather its content of precious metal" '
unenumerated.blogspot.com/20…
Would your CTO and/or CSO be interested in a discussion about the current quantum resistance capabilities with the new device? @trezor
I would also like to extend an invite to @cryptoquick and @DesheShai to join if their time permits.
gaurav retweeted
Great news everyone! The BIP 360 workshop at @tabconf went very well today and we were able to demonstrate several working SLH-DSA transactions to Pay to Tapscript Hash addresses on our signet instance!
signet.bip360.org/tx/8e4ae23…
gaurav retweeted
Really happy with this interview I did recently! Be sure to check it out if you haven't already!
Quantum Computers & the Future of Bitcoin | BIP 360 Explained w/ Hunter Beast @cryptoquick | Watch on YouTube
gaurav retweeted
Bitcoin is trust-minimized, it's not trustless. And it's only trust-minimized to the extent that core developers keep it that way.
gaurav retweeted
"Governance" in action. Trust minimization via protocol is radically superior to the hot messes you get from "governance."
The majority of the NixOS Moderation Team (5 of 7 of them) has just mass resigned — and are threatening to leave the project entirely if their demands are not met.
This appears to be in response to the NixOS Steering Committee (the elected, governing body) attempting to make “moderation fair and respectable” and “address perceptions of political bias” in NixOS moderation.
The NixOS Moderation team came to public attention, last year, when they conducted a mass “Purge” of Conservatives and other non-Leftists from the project (people who were referred to, by the Moderation Team, as “Nazis”).
The resigned NixOS Moderation team members are demanding that the entire NixOS elected Steering Committee resign immediately, new elections be held, and that the NixOS constitution be modified to make the elected Steering Committee accountable to the non-elected Moderation Team.
discourse.nixos.org/t/a-stat…
gaurav retweeted
Those who refuse to learn from history, are doomed to repeat it. Running p2p nodes, too decentralized and anonymous to stop, is what defends individual sovereignty. Self-watering down p2p systems won't help them stay robust, it's just a slippery slope. Arguing decentralization doesn't matter that much likewise. There are decades of empirical evidence, even hard won legal precedent that robustly prove otherwise.
This may be the first time I've seen self-sovereignty p2p system's own proponents, loud in their self concern, try to weaken the system they care deeply about with well meaning but misguided zeal. Don't forget the road to hell, and centralization failure, is always paved with good intentions, well meaning but naive to real world game theory, bolstered by opinionated rejection or actual ignorance of all experience and history.
Smart people are great at that, because they are clever and can construct real-time counter arguments, though unfortunately not adversarial thinking of real world effects and lacking experience to believe the real world correct weighting of those counter arguments are nominal, or inverted for counter intuitive reasons.
Listen to history. Please.
Word to the wise:
Chain reorgs via selfish mining style attacks may contain an Achilles’ heel.
Possible defenses:
1) Addressing covertness as a premise of attack.
2) Difficulty adjustments that ccount for competing chains.
3) Block greediness used against attackers (ala @hashdag GHOST Iike mechanisms)
4) Cross-chain timestamping of non-covert blocks to prove covertness of attackers.
Stay safe.























