Agent Wallet, v0.1.0.0

Bitcoin
41

For the main features, it uses Boltz. But I integrated some other providers in the Anonymize feature (and a signing process for preventing injection risks), and some configurability. I do plan to expand on this to the other features. Other providers have fairly low liquidity is the drawback.

I had an idea which might be worth thinking about more, to integrate Pickhash if it becomes popular (after I get it more stable WRT the difficulty problem), where a user could specify a percentage of their hash toward funding a Boltz-like swap provider (with the possibility of collecting fees) to hopefully bootstrap a good alternative with more liquidity than current alternatives.

42

Ok. It looks like Boltz have been under attack for a while, and have shutdown while they shore up their servers. Not sure how long this will go on for. Boltz - Non-Custodial Bitcoin Bridge on X: "Update: Boltz will stay disabled until further notice. Our API remains available to process refunds cooperatively. In any case, unilateral refunds will work, as they do not depend on our infrastructure. Our support team stays reachable. To be clear: this is not a response to a single incident. Over the past months we have seen a steady rise in automated, AI-assisted probing of our infrastructure, and we have dealt with several exploits. Each was contained, but the pattern is clear: attackers now iterate faster than a team our size can find and patch. In the past few days alone we saw a drastic acceleration, and we do not believe this asymmetry will reverse. After reviewing the results of our own recent security scans, we cannot responsibly re-enable Boltz swaps, especially as we are being actively targeted by what appear to be multiple resourceful groups while we race to deploy fixes. What we are seeing is a major paradigm shift for Bitcoin services operating on an open source stack, and it needs careful analysis. Do not expect swap services to resume shortly. To be explicit: no user funds were ever at risk. Boltz is non-custodial by design. And as a fully bootstrapped company, the losses were ours alone. We don't know yet how things will continue from here, but we'll keep you posted as soon as we have had the time to catch our breath and make a decision 🙏" / X

43

This is definitely worrying me. The era of AI attacking Bitcoin’s infrastructure seems like it is the next big challenge that we are entering, before we even have a chance to take a breath from fighting the spam war.

I’ll update Agent Wallet when I get a chance, to enable using fallback providers if available, or failing gracefully.

1 Like
44

Yeah, who knows what’s gonna show up next.

45

Oh I dunno. Probably agents looking for Lightning nodes over the Tor network and engineering Force-Close thefts??? I have a watchtower but not knowledgeable enough to breakdown what I’m suppose to monitor.

Endless attack vectors on the horizon is inside game theory. So challenging to defend against attacks..unless I have my own agent monitoring my security but how practical is that.

EDIT: Also anticipating how Fork Tower is going to work btw.

1 Like
46

This is the direction I think I’ll take my channel after BIP-110 activates. Working through how to defend against this stuff is a big gap in the current content. I already wanted to shift focus to AI from a Bitcoin perspective, and this slots well into that direction.

1 Like
47

Is Boltz a single point of failure? If so there another non- custodial bridge that can be used?

48

Curious if you still plan on adding fallback providers (if there are any) for swaps?

In the meantime I had to look for alternatives to the swap an ended up using RoboSats in the short term. It was a bit more costly but it was easy enough to send Lighting via a robot and receive on-chain.

I know this is a serious attack vector on L2 and I’m wonder how long it will last? I see Blockstream is working on a in-house swap service as well as Bull Wallet but the time-frame is unknown.

I have a feeling that this is a low priory for Agent Wallet at the moment..so just trying to find alternatives without resorting to RoboSats.

Thanks for any feedback/advice.

EDIT> On another note. Agent wallet requires Mempool Bip-110. Any chance of you changing that to Mempool instead or does that present issues?