2 entries tagged lightning. All writing.
SEPTEMBER 10, 2026 A Jar Is Not a Vault: Reading My Friend's Lightning Wallet Before I Recommend It A friend of mine spent six months building a self-custodial Lightning wallet that runs in a browser, and he'd be the first to tell you it has no audit. I trust him — which is exactly why I shouldn't ask you to trust it on my say-so. So I read the code, checked the served binary against the published hashes, and worked out what the trust model really is. Along the way, the thing every Lightning wallet review should say and mostly doesn't: what a Lightning wallet is for, and what it is not. SEPTEMBER 9, 2026 "Not Your Keys, Not Your Coins" Just Grew a Second Half Alby disclosed a critical flaw in Alby Hub, its self-hosted Lightning node software, that could let an attacker who reaches an exposed control panel send your bitcoin out from under you. The twist worth sitting with is the timeline — the fix shipped over a year before the warning did — and what that gap actually tells self-custody Bitcoiners about the setting they should have checked already.