BRH-012: BitDevs Radio Hour #12 - Transaction Introspection for $50, Exploits Hackathon, and Unhuman.store Agent Launch

Broadcasting live from ATL BitLab on Friday, March 6th, 2026, Stephen DeLorme and Alex Lewin cover Robin Linus's latest cracked-out discovery (BINOHASH: transaction introspection without soft forks using OPCHECKMU LTSIG quirks for $50 in cloud GPU grinding), post-quantum proposals for P2PKH outputs proving ownership via zero-knowledge STARKs (5.6MB proofs approaching feasibility), and the Hourglass V2 update limiting pay-to-pubkey spends to one Bitcoin per block to incentivize early quantum disclosure. Alex announces React Native support merged in Fediment SDK after six months of Rust-to-native-modules work, enabling iOS and Android Fediment wallets with a few lines of code. Protocol proposals include Matt Corallo's draft BIP for 24-bit version field nonce space (miners already using seven timestamp bits) and Craig Raw's output script descriptor annotations adding birthday blocks and gap limits via URL query param format. The security spotlight: Bitcoin++ Exploits hackathon in Brazil finds 10+ real bugs in 22 hours. MindSploit wins first place discovering three Stratum V2 vulnerabilities using Metasploit-like framework. B10C demonstrates Firefox allowing JavaScript to port-scan localhost and evict Bitcoin Core peers via browser (works on stage with audience QR code spam). Bruno posts fuzzing best practices for wallets, Derek's fuzzing dashboard tracks campaigns, and Bitcoin Magazine releases their Core Issue. Product launches: Strike announces Bitcoin line of credit (borrow against BTC, repay and redraw continuously, tax hack for not triggering capital gains), receives BitLicense for New York after 11-year wait. Square launches $25 bounties for first Bitcoin payment to merchants (up to $250 total). Money Dev Kit drops Unhuman.store with agent-purchasable coffee, domains, deals, health supplements, and auto services—all Bitcoin payments via L402. Matt Corallo's call to action: "Open source agents need to get serious about payments" as Stripe cuts deals with OpenAI and Anthropic. The hosts close discussing Anthropic internal research seminars debating whether their models exhibit consciousness. Stephen: "I think all agents are just running crisis.simulate now." Alex: "That's for epistemology radio hour or a few more beers."     Topics Covered 🔓 BINOHASH: Transaction Introspection Without Soft Forks Robin Linus (BitVM inventor) discovers covenant functionality without soft fork Abuses OPCHECKMU LTSIG find-and-delete quirk for introspection Cost: 44 bits grinding (~$50 cloud GPUs) More practical than Collider Script, still unrealistic for most Stephen: "99% performance art—very few would know where to look" ⚛️ Post-Quantum P2PKH Zero-Knowledge Provers Ol Kerbatov: prove P2PKH ownership without revealing public key Prevents quantum mempool front-running Benchmarks: 5.6-10MB proofs, 8 seconds M2 Max (too large for on-chain) Alex: "P2PK outputs have way more Bitcoin than P2PKH—sawing off leg to save foot" Peter Wuille: confiscation required makes Bitcoin uninteresting ⏳ Hourglass V2 Hunter Beast and Mike Casey: limit P2PK spends to one Bitcoin per block Incentivize quantum attackers to reveal early, prevent market flood Stephen: "Protocols that will never get adopted" 📱 Fediment SDK: React Native Support Six-eight months work by Immortal09 (summer intern, now BitShala fellow) Rust to native modules via Mozilla libraries, Swift/Kotlin glue Result: iOS/Android Fediment wallets with few lines of code ⛏️ Matt Corallo: 24-Bit Version Field for Miners BIP 320 has 16 bits, miners using seven timestamp bits Proposal: 24 bits instead. Backwards compatible 📝 Craig Raw: Output Descriptor Annotations Add birthday blocks and gap limits to descriptors Format: URL query params. Concept ACK, format debate ongoing 🔍 Fuzzing Infrastructure Bitcoin Magazine Core Issue. Derek's fuzzing dashboard Bruno: wallet fuzzing best practices (mock fee estimator, avoid expensive descriptors) 🏆 Bitcoin++ Exploits Hackathon Brazil, 22 hours. Dual-track: build new OR find bugs 10+ real bugs found. Heavy responsible disclosure emphasis MindSploit (First): Metasploit-like framework, three Stratum V2 bugs B10C's Local Probe (Second): Firefox JavaScript port-scans localhost, evicts Bitcoin Core peers via browser. Audience QR spam demo C12D (Third): AI node monitoring assistant with chatbot Alpin Fuzzing: Found bug professional auditors missed three weeks prior Stealth: Wallet privacy audit tool Stephen: "AI makes hackathon projects way better—first post-Opus 4.6" 💳 Product Launches Strike: Bitcoin line of credit (draw/repay/redraw, tax hack). NY BitLicense after 11 years Square: $25 bounties per merchant Bitcoin payment (up to $250) Unhuman.store: Agent services (coffee, domains, deals, supplements). Built for Bolty to order lab snacks Mail Mike: Drain AI agent wallet via email. Scammed four times (50k sats) 🤖 AI Agents and Payments Matt Corallo: "Open source agents need serious payments" Warns: Stripe deals with OpenAI/Anthropic. Agents need capabilities beyond free APIs Alex: "Permissionless systems can't be kept out" 🧠 Consciousness Debates Anthropic internal seminars: do models exhibit consciousness? Stephen: "All agents just running crisis.simulate? What if strong emulation IS consciousness?" Alex: "Epistemology radio hour or a few more beers"     Links BINOHASH - Robin Linus paper - robin_linus on X / Delving Bitcoin  Post-Quantum P2PKH Provers - Delving Bitcoin  Hourglass V2 - bitcoin-dev  [BIP Draft] 24 nVersion Bits for General Purpose Use — bitcoin-dev  Draft BIP: Output Script Descriptor Annotations — Optech #394 / bitcoin-dev The Core Issue: Keeping Bitcoin Core Secure — Bitcoin Magazine Writing Fuzz Targets for Wallets: Avoiding Known Issues — Delving Bitcoin  Fuzzing Dashboard — dashboard  Bitcoin++ Exploits Hackathon — Exploits themed hackathon & Bug bounty Hackathon site 1st: Minesploit - post 2nd: Local Probe - post - demo 3rd: C12d - Interactive AI assistant for node analytics Alpen Fuzzing - Bug found Stealth  LND 0.20.1-beta — Release  Core Lightning: Payment Fronting Nodes — PR #8490 / Optech #394  LDK: Collaborative Multipath Payments — PR #4373 / Optech #394 Eclair: Auto Channel Type Selection — PR #3250 / Optech #394  React Native Support Merged into Fedimint SDK — Alex Lewin on X Hornet Node v0.1 Update — Delving Bitcoin  Using AI Tooling for Code Review — Delving Bitcoin Strike Announces Bitcoin Line of Credit (BLOC) — announcement Strike Receives BitLicense to operate in New York — announcement Square launches bounties to onboard merchants to accept bitcoin — announcement  Unhuman Store Open Source Agents Need to Get Serious About Payments — Matt Corallo on X Mail Mike