⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #766938 | BTC Block: 966659
UTC Timestamp: 2026-09-12T10:11:59Z
Merkle Seal: #766938
❌ EXPIRED: bitcoin_keeper (v2.5.13) [e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [f836ce] - 1 artifact(s)
✅ bitcoin_core (v29.4) [cf54c4] - 1 artifact(s)
✅ blockstream_green (release_3.5.3) [9e7091] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [cf6d64] - 1 artifact(s)
✅ coldcard (v5.6.2) [49eb41] - 1 artifact(s)
✅ core_lightning (v26.06.7) [b09f4e] - 1 artifact(s)
✅ electrum (4.8.1) [ef5b7f] - 1 artifact(s)
✅ krux (v26.08.0) [65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.3) [90d665] - 1 artifact(s)
✅ lnd (v0.21.3-beta) [aad620] - 1 artifact(s)
✅ noble-curves (2.4.0) [bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.1) [55d1f3] - 1 artifact(s)
✅ seedsigner (v0.8.7) [67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [c1a318] - 1 artifact(s)
✅ subzero-rs (v0.3.0) [01b458] - 1 artifact(s)
Total Verified: 26/27 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
76693897be750699707de8584df819ac7a79a9e73d14811a58a204e3e90127ca
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain
binwatch / bootlace / binwatch
npub1w2…me6cm
2026-09-12 10:12:10 UTC
Author Public Key
npub1w287u4cfq9tlyjexwnvdjzv0kh4ahf752eahvwllzm3zppngm6vqsme6cmSeen on
wss://relay.damus.ioPublished at
2026-09-12 10:12:10 UTCEvent JSON
{
"id": "82e3fddd6ba0d036cf3634faa6521b154aa5151540ec3044c186c60ec504132c",
"pubkey": "728fee57090157f24b2674d8d9098fb5ebdba7d4567b763bff16e2208668de98",
"created_at": 1789207930,
"kind": 1,
"tags": [
[
"t",
"binwatch"
],
[
"t",
"766938"
],
[
"t",
"bitcoin"
],
[
"t",
"supplychain"
],
[
"r",
"https://bootlace-dev.github.io/binwatch-rs/"
]
],
"content": "⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY\n🛡️ BINWATCH AUDIT REPORT: #766938 | BTC Block: 966659\nUTC Timestamp: 2026-09-12T10:11:59Z\nMerkle Seal: #766938\n\n❌ EXPIRED: bitcoin_keeper (v2.5.13) [e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06\n\n✅ alby_hub (v1.24.0) [b7495c] - 1 artifact(s)\n✅ aqua (v0.5.3) [f836ce] - 1 artifact(s)\n✅ bitcoin_core (v29.4) [cf54c4] - 1 artifact(s)\n✅ blockstream_green (release_3.5.3) [9e7091] - 1 artifact(s)\n✅ blockstream_jade (1.0.41) [fe9603] - 1 artifact(s)\n✅ cake_wallet (v6.4.4) [cf6d64] - 1 artifact(s)\n✅ coldcard (v5.6.2) [49eb41] - 1 artifact(s)\n✅ core_lightning (v26.06.7) [b09f4e] - 1 artifact(s)\n✅ electrum (4.8.1) [ef5b7f] - 1 artifact(s)\n✅ krux (v26.08.0) [65b99b] - 1 artifact(s)\n✅ libsecp256k1 (v0.8.0) [18f07c] - 1 artifact(s)\n✅ liquid_elements (elements-23.3.3) [90d665] - 1 artifact(s)\n✅ lnd (v0.21.3-beta) [aad620] - 1 artifact(s)\n✅ noble-curves (2.4.0) [bf43f3] - 1 artifact(s)\n✅ noble-hashes (2.4.0) [cbb9ae] - 1 artifact(s)\n✅ noble-secp256k1 (3.2.0) [02d070] - 1 artifact(s)\n✅ nunchuk (android.2.8.5) [2ebae7] - 1 artifact(s)\n✅ openssh-portable (V_10_5_P1) [f11c90] - 1 artifact(s)\n✅ phoenix (android-v2.8.2) [b76f5a] - 1 artifact(s)\n✅ pipe-k1 (v0.0.1-rc0) [7a92ce] - 1 artifact(s)\n✅ scure-bip32 (2.4.0) [5256db] - 1 artifact(s)\n✅ scure-bip39 (2.4.0) [358e54] - 1 artifact(s)\n✅ scure-btc-signer (2.4.1) [55d1f3] - 1 artifact(s)\n✅ seedsigner (v0.8.7) [67f005] - 1 artifact(s)\n✅ sparrow (v2.5.4) [c1a318] - 1 artifact(s)\n✅ subzero-rs (v0.3.0) [01b458] - 1 artifact(s)\n\nTotal Verified: 26/27 OK | ❌ 1 Expired Key\n\nAdvisory Mirror (OSV.dev):\n7 / 7 audited versions returned 0 query matches\n\nCanonical Merkle Root:\n76693897be750699707de8584df819ac7a79a9e73d14811a58a204e3e90127ca\n\nLive Web Dashboard:\nhttps://bootlace-dev.github.io/binwatch-rs/\n\nRaw Cryptographic Manifest:\nhttps://bootlace-dev.github.io/binwatch-rs/manifest.json\n\nSource \u0026 Audit Logs:\nhttps://github.com/bootlace-dev/binwatch-rs\n\nNotice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.\n\n#binwatch #bitcoin #supplychain",
"sig": "a061d3e71e1775976b292e960e2742195c9e3b0ddbd3082bc03b7f61077d5e5405a0a8e2ba28aca4f7e8e87b1ce81840c373d348eb1c8d2ef8ca6ef4a95241be"
}