Skip to main content

Yuval Kogman Joins Payjoin Foundation as Advisor

· 3 min read

Spiral Bitcoin Wizard and longtime Bitcoin privacy developer Yuval Kogman joins Payjoin Foundation as the first Advisory Board member. He draws on more than two decades of programming experience. Few others can boast Yuval's dedication to the Bitcoin privacy niche. He is perhaps best known for his work developing the WabiSabi DoS prevention protocol. His subsequent whistleblowing of privacy vulnerabilities in CoinJoin implementations, including those touting WabiSabi integration, demonstrates his commitment to the underlying principles.

Announcing Payjoin Foundation

· 2 min read

Commercial attempts to solve Bitcoin’s privacy problems have faced tremendous barriers. Short-term profit motives have delivered partial and temporary solutions, but transacting privately on Bitcoin remains a challenge.

We formed Payjoin Foundation to pursue the long-term mission of addressing Bitcoin’s privacy problems. Our non-profit exists to develop open-source protocols that align economic incentives with network-wide privacy protection. We believe that users have a right to choose whether or not to reveal their on-chain activity, and that such protocols can even offer a more convenient and delightful experience than those that don't respect this choice.

Automatically Refresh Liana Inheritance Timelocks with Payjoin

· 4 min read

Liana secures bitcoin such that after time passes, if and only if you haven't yet spent your coins, your heirs can spend them. This condition is called a "timelock" contract. To prevent unintentional activation of this inheritance policy, these timelocked coins require periodic refreshing by being spent into a new timelock. Liana's Payjoin integration automates timelock refresh as payments are received, boosting privacy and cutting costs.

Payjo.in Directory Security Incident: Misconfiguration May Have Exposed Some Payjoin v1 Messages

· 4 min read

Due to a docker misconfiguration, the payjo.in directory server had an open redis database, allowing unauthorized parties to observe exchanges between pairs of senders which only support BIP 78 and receivers which support BIP 77.

Some payjoins which used the backwards compatibility of BIP 77 receivers with BIP 78 senders during this period may thus not have the common input ownership heuristic protection they otherwise would, but the unauthorized access does not change the nature of the risk regarding the user custody of funds.

Payjoin Probing Attacks: Facts, Mitigations, and Why Payjoin Still Wins for Privacy

· 5 min read

The following is a conclusive address of concerns around UTXO probing attacks on Payjoin, clarification of why current mitigations are effective, and definitive argument for Payjoin adoption. Payjoin, the fundamental interactive transaction batching protocol, saves fees by reducing the effective size of transfers and improves privacy by disrupting common blockchain surveillance heuristics. While probing attacks exist in theory, they're costly to pull off, mitigated in practice, and are not a meaningful barrier to adoption.

PDK: A Payjoin SDK

· 7 min read

PDK is here to make Payjoin a drop in upgrade for all software touching Bitcoin. I cover the project's history, why you should consider it to add Payjoin to your stack, and some of the project's priorities moving forward. The PDK team will be updating this new blog with development updates, feature forecasts and the details of releases.