Mercury Layer v0.2.0: Fix for Malicious Backup Transactions Vulnerabilities

Mercury Layer is a Layer 2 protocol for Bitcoin that enables the self-custodial transfer of coins (UTXOs) without on-chain transactions.

We are 100% community-funded. Support our reporting.

"New release of the Mercury Layer client," announced Tom Trevethan, CTO at CommerceBlock.

"This update fixes vulnerabilities (disclosed here) related to malicious backup transactions bypassing receiver verification checks. We've revamped the way backup transaction checks are constructed to ensure robust security."

What's new

Verification of backup transaction construction.
nLocktime checks against current block height.
nSequence set to zero in backup transactions.

Announcement / Archive
Vulnerabilities Report
GitHub Repo
Website

Sats are the greatest form of gratitude.

Author: EZ

No Bullshit Bitcoin Is a Bitcoin News Desk Without Ads, Paywalls, or Clickbait.

No spam. Unsubscribe anytime.

COLDCARD Disaster: Weak Entropy Bug Enables Drain of Funds from Seeds Generated Since 2021

A build error present in COLDCARD firmware for more than five years made seeds generated on affected devices predictable, enabling attackers with no access to the hardware to reconstruct private keys offline and sweep the matching addresses.

03 Aug 2026

7 min read

Ashigaru Whirlpool and Terminal v1.0.0 Released

Ashigaru Whirlpool is a ZeroLink coinjoin implementation designed to sever all deterministic links between inputs and outputs, ensuring enhanced bitcoin transaction privacy.

23 Jun 2025

3 min read