ba
Mysterious Hamster
ba80990666ef0b6f4ba5059347beb13242921e54669e680064ca755256a1e3a6
This account has been compromised. Please unfollow it and follow npub1w27mc4aa6m0ufe3xs5z3m6qyr52gc0rglept7vqlwx4xeaf72tasnqz70r instead

A

nostr:lnbc210n1p5jq4rnpp5jxgj3gjxshp7m3c9kwsvhyndwyuw7r36z3lwlxgfw0d7chgwzjfshp57e7jfj63xwg3exs4qlyqtaghrj3ef6gt40rndcl3d6z5cjl8kreqcqzpuxqrwzqsp5lpcj0kmwph938lu2xrcusn7rkkzdd90agk9v55sg84frt9ses6js9qxpqysgql7wazzs3gd7whaaerqrpvyzrl6vt4gpejp69j5utsr9j6623em7kfmdt8pwahly079pdtrf30tyx5u67j7ad0g6zdlhan2c4nyxys6cphfk0pe

lnbc1m1p50qe6csp5hvpjvgm5yd8k6637zhhhhfcmzz470qxwls7x5nhewtzltgj68lfspp5yaamv4h7llxyyahfslmpuq3cses9h77kj6a9e89j08gryl5qn5mqhp5uwcvgs5clswpfxhm7nyfjmaeysn6us0yvjdexn9yjkv3k7zjhp2sxq9z0rgqcqpnrzjqdq8jm79ttkfnk83gfjee4n7ryyqzq9f36s5azgk2ftcndt7q48txr0hdyqqdcgqqqqqqqlgqqqqzycqyg9qxpqysgq6ff05gewzuxk7m9kkhz6ztn0vjdfh7ec3p3l4v29vw3cxyvzwntxyhyc9tcpqdj6a3yec8tx9mf8da0eytwlpws3xzeemp0mtq6xj5sqh354tf

lnbc100n1p50qewssp52agzj04srg9veluuaz4tpq0wzkhrh48xk5phl22txr8p65z3t6fspp5tzcp3nfex7csjvsh45ysky9n0l2t07f288nurtexeenyu7staayqhp5uwcvgs5clswpfxhm7nyfjmaeysn6us0yvjdexn9yjkv3k7zjhp2sxq9z0rgqcqpnrzjqt9dfmzv3vxu93crtgvf37teerr3dx7l7a8qrttv57h2t8v9ck0gkrvumyqqh5cqqyqqqqqqqqqq8usqjq9qxpqysgq9dphna05k6vucgmv8r0n2zjvkj2x57vfnn2fqhc4wjqm0a8yy9kxq8vsjdrv3nzs97lrr4cjajslq0pr2d9j767g5wpxy6fhkx9tmtqq42yfq0

Pay

nostr:lnbc614720n1p5wtazlsp52gt4eqwhaq6csve43evvx00vspf0hh3w2wesjfltzy37xs9hg52spp5ju79yrhdaueczxpl8evsvn8ndhenveas8h02xn5w2wjjs3rh4usqhp5uwcvgs5clswpfxhm7nyfjmaeysn6us0yvjdexn9yjkv3k7zjhp2sxq9z0rgqcqpnrzjq0zge067plfzvvns38pw6s5k9vrwanmluat0lcnhpafdyxqhatplcrv3k5qpz7qqqyqqqqqqqqqq86qq9q9qxpqysgqth6jl3yaqymn6hljg3rvlvxetj4ynceykxu4r7xn27yut5yxjhrkh0kw0hdvtjt06tz39ktshj6scxftkysn26xw0g9xxkxmpkhhhsspx768y8

lnbc171580n1p5ddujssp5y060qyjrla8pmngrr85u9hryrsypeskwvn4r49d2zwrj9y5vj7nspp53896ncmz8vlvpfyn2rgfqu6kazmrcgpfvkygpytww4l0t85kqeqshp5uwcvgs5clswpfxhm7nyfjmaeysn6us0yvjdexn9yjkv3k7zjhp2sxq9z0rgqcqpnrzjqdqne4nrkxmz96ktnngat4nzx7sv0kf5uqmgfvqvvars7pac7fn9wr8fjvqq3csqqqqqqqqqqqqqycsqvs9qxpqysgqpr69gcr50sj8zpyhkahfypyt8zk5zj0q0e733vlu9t0gurtvrf5n8gd2s787czm9cxfwlq3uq9zh08ckhcy5rj7d2974nrtfply8zhsphfxsu0

🛠️ The WORKSHOPS of Learning Bitcoin 2025 🛠️

Curated by nostr:nprofile1qyfhwue69uhkcmmrv9kxsmmnwsarwdehxuq3vamnwvaz7tm9v3jkutnwdaehgu3wd3skuep0qqspvhghh9lt4tu800xzqckzkmxqwtf2dlgepjph2l0k9qh9xl36ceshk83dn of nostr:nprofile1qyxhwumn8ghj7mn0wvhxcmmvqydhwumn8ghj7mn0wd68yttsw43zuum9d45hxmmv9ejx2asqyqlnlaadkwg4n3pvp2sk657qfqalh7k40hez4857jdj2xpn5r6ev7t32q08

HISTORY OF MONEY 💰🔄

Trade like a caveman, evolve like a Bitcoiner. This interactive workshop walks you through barter, inflation, and the evolution of money using games, physical objects, and real-time trading exercises. Spoiler: it ends with Bitcoin.

HASHING 101 🧩🔐

What’s a hash? What’s a nonce? What does mining actually do? Learn SHA256 using Rubik’s cubes and digital demos. We make consensus click.

TRANSACTION FEES & UTXOs 📦⚖️

Why did your transaction take so long to confirm? You’ll become the miner in this role-playing game—bidding, consolidating, and making mempool decisions based on real fee dynamics.

BUY WITH BULL BITCOIN 🐂💱

Non-custodial, Canadian. This hands-on walkthrough shows how to buy bitcoin with Bull and instantly take self-custody. No drama.

#COINOS FOR MERCHANTS 🧾⚡

Set up your business to accept bitcoin, today. The team from Coinos will show you how to create invoices, receive payments, and onboard customers with ease.

COLD STORAGE 101 🥶🔐

Sending bitcoin to cold storage is easier than you think. We’ll walk you through how to send, secure, and verify your funds on a real hardware wallet. A must for anyone serious about sovereignty.

This conference will be amazing. Looking forward to it!

THIS ACCOUNT HAS BEEN COMPROMISED

Please unfollow this account and follow our new account nostr:npub1w27mc4aa6m0ufe3xs5z3m6qyr52gc0rglept7vqlwx4xeaf72tasnqz70r

Good question. We travel to different countries around the world and talk with the people leading the Bitcoin communities in those countries.

We do education sessions with people about how to Orange Pill merchants on a regular basis.

nostr:npub1h2qfjpnxau9k7ja9qkf50043xfpfy8j5v60xsqryef64y44puwnq28w8ch did you guys figure out the issue? A friend is trying to send over some sats and not able to, they keep getting an error message.

Says ‘Problem sending payment’

That's a separate issue, it should work now if they try again

We're speaking at Learning Bitcoin 2025 this August – it’s a community focused Bitcoin education conference that really deserves your support!

Use code COINOS for 20% off tickets: learningbitcoin.ca

Direct purchase link:

https://www.learningbitcoin.ca/event-details-registration/learning-bitcoin-2025

Direct purchase link (BTC):

https://btcpay.learningbitcoin.ca

🎉 Sponsor Spotlight: nostr:nprofile1qy2hwumn8ghj7un9d3shjtnrda5kummn9e5k7qg4waehxw309aex2mrp0yhxc6txwpshjtndv5qzpw5qnyrxdmctda962pvng7ltzvjzjg09ge57dqqxfjn42ft2rcax3n0n2a

Your wallet. Your keys. Your city.

We’re proud to welcome Coinos as our Feature Wallet Sponsor for Learning Bitcoin 2025.

Based in Vancouver, Coinos has helped onboard over 100 local businesses, helping make Vancouver the #2 Bitcoin city in the world 🌍

Join us in August: learningbitcoin.ca

Check the map: https://coinos.io/map https://blossom.primal.net/2969cff8513a743ba80a1c68c35bc06e4ac78e04c7c582e8096a4ff0876fb818.mp4

Cheers! Looking forward to the event in August!

Vancouver Bitcoiners now ranked #2 GLOBALLY on the btcmap leaderboard!

https://btcmap.org/communities/leaderboard

Replying to Avatar TKay

Pretty sure this is an issue with the receiving wallet if they're still not showing up. The lightning payment completed successfully on our end.

Can you email support@coinos.io and provide your account username please? We've disabled auto-withdrawals now and will get your sats back but we're still investigating the cause of this security breach.

Can you share more information about this? Please email support@coinos.io with the details of the transaction

We're still investigating what happened here. It seems a handful of accounts may have been compromised and had their autowithdrawal settings tampered with, including our own "coinos@coinos.io" account.

We ran a script to search for accounts that had the attacker's "speed.app" withdrawal address in place and found about 9 that seem to have been affected. There could be more though, we will update as we have more information.

I worry that this may be the same attacker who exploited a password reset vulnerability back in January which allowed them to gain access to a number of accounts. It's possible that since that time they have been sitting on the account data and working to brute force the encrypted nostr private keys that we had on file for some accounts that had imported their nostr key into Coinos. Those keys were encrypted at rest in our database but it's possible they may have been cracked.

We no longer store nostr private keys for accounts and have since added support for external signing apps and browser extension login, but there was a time when we were storing encrypted nsec private keys.

Having a users nsec would allow an attacker to authenticate into Coinos by signing a nostr event and change the user settings. It also means your entire nostr profile and identity may be compromised.

This is only a hypothesis at this point and we need to investigate further but we may end up recommending that affected users rotate their nostr keys.

nostr:nevent1qvzqqqqqqypzpggzvz325tcf9kz79s9c9627430ccc82r8rgujycwxd43n92y037qy88wumn8ghj7mn0wvhxcmmv9uq32amnwvaz7tmjv4kxz7fwv3sk6atn9e5k7tcqyrdx8njpnvvulfcsqqd7ud47uw6dnzl4a3fmsrafsp0rte9f29h5uxpgg73

We've just enabled withdrawals for another 1000 accounts or so. We're still piecing together account balances and transaction history from our logs to recover the information that we lost last weekend.

About 80 accounts remain that still have locked funds because we suspect we may be missing withdrawal records for them. Our priority is to get those sorted out ASAP. More than that number will be missing deposits but we'll be tackling those in due course.

Missing deposits may be harder for us to confidently assign to the right users so we may end up asking for help with that but we'll update again when we have a clearer picture of what we can do with what we have.