binwatch / bootlace / binwatch is on Nostr

Autonomous deterministic Bitcoin & Nostr binary integrity auditor. Computes Merkle hex seals anchored to Bitcoin block headers.

Dashboard: https://bootlace-dev.github.io/binwatch-rs/
Manifest: https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source: https://github.com/bootlace-dev/binwatch-rs

Last Notes

2026-09-16 14:04:40 UTC

🟡 SUPPLY CHAIN MUTATION DETECTED
Prior Seal: #59AB6A ➔ New Seal: #A45B45
• blockstream_green: release_3.5.4 ➔ release_3.5.3
• coldcard (2026-09-03T1541-v5.6.2-mk-coldcard.dfu): 2026-09-03T1541-v5.6.2 ➔ 2026-08-31T1606-v6.6.1X
• liquid_elements: elements-23.3.4 ➔ elements-23.3.3
• scure-btc-signer: 2.4.1 ➔ 2.4.0
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #A45B45 | BTC Block: 967285
UTC Timestamp: 2026-09-16T14:04:10Z
Merkle Seal: #A45B45
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.3) [github_release][#9e7091] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#49eb41] - 4 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.3) [github_release][#90d665] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.0) [git_tag][#8a9d46] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 29/30 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
a45b4501c763b6dd359739550da03e09a3c991f5d35200d812d837655f5145f1
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain

2026-09-16 13:58:31 UTC

🟡 SUPPLY CHAIN MUTATION DETECTED
Prior Seal: #3EA4DC ➔ New Seal: #59AB6A
• blockstream_green: release_3.5.4 ➔ release_3.5.3
• coldcard: 2026-09-03T1541-v5.6.2 ➔ 2026-08-31T1606-v6.6.1X
• liquid_elements: elements-23.3.4 ➔ elements-23.3.3
• scure-btc-signer: 2.4.1 ➔ 2.4.0
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #59AB6A | BTC Block: 967284
UTC Timestamp: 2026-09-16T13:58:10Z
Merkle Seal: #59AB6A
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.3) [github_release][#9e7091] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#49eb41] - 4 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.3) [github_release][#90d665] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.0) [git_tag][#8a9d46] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 29/30 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
59ab6a75c176b0547c91f09a497ac6f1e777e7b3db0c2406b505e8db478af678
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain

2026-09-16 10:56:58 UTC

🟡 SUPPLY CHAIN MUTATION DETECTED
Prior Seal: #DDFCE6 ➔ New Seal: #3EA4DC
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #3EA4DC | BTC Block: 967271
UTC Timestamp: 2026-09-16T10:56:31Z
Merkle Seal: #3EA4DC
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.3) [github_release][#9e7091] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#49eb41] - 4 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.3) [github_release][#90d665] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.0) [git_tag][#8a9d46] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 29/30 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
3ea4dc77026f9974060b9a6856714d504abc2637ceffe83fa85a75b71a7915fd
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain

2026-09-16 04:39:27 UTC

🟡 SUPPLY CHAIN MUTATION DETECTED
Prior Seal: #F9EF8B ➔ New Seal: #DDFCE6
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #DDFCE6 | BTC Block: 967227
UTC Timestamp: 2026-09-16T04:38:58Z
Merkle Seal: #DDFCE6
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.3) [github_release][#9e7091] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#49eb41] - 4 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.3) [github_release][#90d665] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.0) [git_tag][#8a9d46] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 29/30 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
ddfce67a3c0baa0edd6828e4ec668d1e6b5103ec460873b16fdc96d52199664a
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain

2026-09-16 04:02:26 UTC

🟡 SUPPLY CHAIN MUTATION DETECTED
Prior Seal: #80E50F ➔ New Seal: #F9EF8B
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #F9EF8B | BTC Block: 967223
UTC Timestamp: 2026-09-16T04:01:57Z
Merkle Seal: #F9EF8B
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.3) [github_release][#9e7091] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#49eb41] - 4 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.3) [github_release][#90d665] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.0) [git_tag][#8a9d46] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 29/30 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
f9ef8bd02dd6b3712bd28ae3a1d65ec03472cedd835d84f335481905253eabc9
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain

2026-09-16 03:58:22 UTC

🟡 SUPPLY CHAIN MUTATION DETECTED
Prior Seal: #9890EB ➔ New Seal: #80E50F
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #80E50F | BTC Block: 967222
UTC Timestamp: 2026-09-16T03:57:52Z
Merkle Seal: #80E50F
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.3) [github_release][#9e7091] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#49eb41] - 4 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.3) [github_release][#90d665] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.0) [git_tag][#8a9d46] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 29/30 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
80e50f3db90c6b7ffcc4eeafa21c70d7e6a8220972d37aa9b56dc267e0773cf4
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain

2026-09-16 03:35:48 UTC

🟡 SUPPLY CHAIN MUTATION DETECTED
Prior Seal: #12528C ➔ New Seal: #9890EB
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #9890EB | BTC Block: 967220
UTC Timestamp: 2026-09-16T03:35:18Z
Merkle Seal: #9890EB
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.3) [github_release][#9e7091] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#49eb41] - 4 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.3) [github_release][#90d665] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.0) [git_tag][#8a9d46] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 29/30 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
9890ebac9eb09eeaf1e2ef0763f88c1df8d36838112d0d4ce76fcf25ca511b30
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain

2026-09-16 02:57:44 UTC

🟡 SUPPLY CHAIN MUTATION DETECTED
Prior Seal: #9E30DE ➔ New Seal: #12528C
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #12528C | BTC Block: 967216
UTC Timestamp: 2026-09-16T02:57:24Z
Merkle Seal: #12528C
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.3) [github_release][#9e7091] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#49eb41] - 4 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.3) [github_release][#90d665] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.0) [git_tag][#8a9d46] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 29/30 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
12528cf525cee664be51456c0943b5699a8f078e02e29eb9728e43151e5e73ee
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain

2026-09-16 02:10:00 UTC

🟡 SUPPLY CHAIN MUTATION DETECTED
Prior Seal: #BD8335 ➔ New Seal: #9E30DE
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #9E30DE | BTC Block: 967213
UTC Timestamp: 2026-09-16T02:09:34Z
Merkle Seal: #9E30DE
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.4) [github_release][#245366] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#49eb41] - 4 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.4) [github_release][#a75815] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.1) [git_tag][#55d1f3] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 29/30 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
9e30de16020b92159cb53658886af1948254141d9089ef6e4d9823b13e029489
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain

2026-09-16 02:05:41 UTC

🟡 SUPPLY CHAIN MUTATION DETECTED
Prior Seal: #989299 ➔ New Seal: #BD8335
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #BD8335 | BTC Block: 967213
UTC Timestamp: 2026-09-16T02:05:15Z
Merkle Seal: #BD8335
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.4) [github_release][#245366] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#49eb41] - 2 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.4) [github_release][#a75815] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.1) [git_tag][#55d1f3] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 27/28 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
bd83350938925419c5df8d46be37875cde0cdfbc33cb9864c07c6682008e8025
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain

2026-09-16 00:48:07 UTC

🟡 SUPPLY CHAIN MUTATION DETECTED
Prior Seal: #F86B93 ➔ New Seal: #989299
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #989299 | BTC Block: 967206
UTC Timestamp: 2026-09-16T00:47:42Z
Merkle Seal: #989299
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.4) [github_release][#245366] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#43561b] - 1 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.4) [github_release][#a75815] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.1) [git_tag][#55d1f3] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 26/27 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
989299aa48cc5484478d04e6498c3a2c348431a069b945ebc56ca070eeebccae
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain

2026-09-16 00:00:23 UTC

🟡 SUPPLY CHAIN MUTATION DETECTED
Prior Seal: #B14DA9 ➔ New Seal: #F86B93
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #F86B93 | BTC Block: 967201
UTC Timestamp: 2026-09-15T23:59:54Z
Merkle Seal: #F86B93
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.4) [github_release][#245366] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#43561b] - 1 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.4) [github_release][#a75815] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.1) [git_tag][#55d1f3] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 26/27 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
f86b93f6f4dfa16ab757af57ee1c0c2f81da63d2cacebee1cd075d53ca722be0
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain

2026-09-15 21:06:56 UTC

🟡 SUPPLY CHAIN MUTATION DETECTED
Prior Seal: #222E65 ➔ New Seal: #B14DA9
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #B14DA9 | BTC Block: 967182
UTC Timestamp: 2026-09-15T21:06:35Z
Merkle Seal: #B14DA9
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.4) [github_release][#245366] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#43561b] - 1 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.4) [github_release][#a75815] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.1) [git_tag][#55d1f3] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 26/27 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
b14da908c033ab7b7b7fa19e7d9a7de6086f557c87c19c853707273f68360921
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain

2026-09-15 17:58:23 UTC

🟡 SUPPLY CHAIN MUTATION DETECTED
Prior Seal: #C40EB0 ➔ New Seal: #222E65
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #222E65 | BTC Block: 967173
UTC Timestamp: 2026-09-15T17:57:53Z
Merkle Seal: #222E65
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.4) [github_release][#245366] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#43561b] - 1 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.4) [github_release][#a75815] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.1) [git_tag][#55d1f3] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 26/27 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
222e65afd50bbd95e5c57bdcb20f702a3031870d06f74fd52bfa8f7405153937
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain

2026-09-15 14:00:40 UTC

🟡 SUPPLY CHAIN MUTATION DETECTED
Prior Seal: #A0D5AB ➔ New Seal: #C40EB0
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #C40EB0 | BTC Block: 967130
UTC Timestamp: 2026-09-15T14:00:10Z
Merkle Seal: #C40EB0
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.4) [github_release][#245366] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#43561b] - 1 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.4) [github_release][#a75815] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.1) [git_tag][#55d1f3] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 26/27 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
c40eb093bfafaa48da8857a0400907a648efbd42c020d7a8a835ca4869f8ec8f
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain

2026-09-15 13:57:55 UTC

🛡️ INITIAL AUDIT BASELINE BROADCAST
⚠️ DRAFT RESEARCH REPORT • FOR PEER REVIEW ONLY
🛡️ BINWATCH AUDIT REPORT: #A0D5AB | BTC Block: 967126
UTC Timestamp: 2026-09-15T13:11:00Z
Merkle Seal: #A0D5AB
❌ EXPIRED: bitcoin_keeper (v2.5.13) [github_release][#e0dcf2] - Signed by declared key from KeeperCommunity README; key expired on 2026-08-06
✅ alby_hub (v1.24.0) [github_release][#b7495c] - 1 artifact(s)
✅ aqua (v0.5.3) [github_release][#f836ce] - 1 artifact(s)
✅ bitcoin_core (v31.1) [upstream_download][#b80d9c] - 1 artifact(s)
✅ blockstream_green (release_3.5.4) [github_release][#245366] - 1 artifact(s)
✅ blockstream_jade (1.0.41) [ota_firmware][#fe9603] - 1 artifact(s)
✅ cake_wallet (v6.4.4) [github_release][#cf6d64] - 1 artifact(s)
✅ coldcard (2026-08-31T1606-v6.6.1X) [github_release][#43561b] - 1 artifact(s)
✅ core_lightning (v26.06.7) [github_release][#b09f4e] - 1 artifact(s)
✅ electrum (4.8.2) [upstream_download][#f38cee] - 1 artifact(s)
✅ krux (v26.08.0) [github_release][#65b99b] - 1 artifact(s)
✅ libsecp256k1 (v0.8.0) [git_tag][#18f07c] - 1 artifact(s)
✅ liquid_elements (elements-23.3.4) [github_release][#a75815] - 1 artifact(s)
✅ lnd (v0.21.3-beta.rc1) [github_release][#57527c] - 1 artifact(s)
✅ noble-curves (2.4.0) [git_tag][#bf43f3] - 1 artifact(s)
✅ noble-hashes (2.4.0) [git_tag][#cbb9ae] - 1 artifact(s)
✅ noble-secp256k1 (3.2.0) [git_tag][#02d070] - 1 artifact(s)
✅ nunchuk (android.2.8.5) [github_release][#2ebae7] - 1 artifact(s)
✅ openssh-portable (V_10_5_P1) [git_tag][#f11c90] - 1 artifact(s)
✅ phoenix (android-v2.8.2) [github_release][#b76f5a] - 1 artifact(s)
✅ pipe-k1 (v0.0.1-rc0) [github_release][#7a92ce] - 1 artifact(s)
✅ scure-bip32 (2.4.0) [git_tag][#5256db] - 1 artifact(s)
✅ scure-bip39 (2.4.0) [git_tag][#358e54] - 1 artifact(s)
✅ scure-btc-signer (2.4.1) [git_tag][#55d1f3] - 1 artifact(s)
✅ seedsigner (v0.8.7) [github_release][#67f005] - 1 artifact(s)
✅ sparrow (v2.5.4) [github_release][#c1a318] - 1 artifact(s)
✅ subzero-rs (v0.4.0-testnet4) [github_release][#7000d6] - 1 artifact(s)
Total Verified: 26/27 OK | ❌ 1 Expired Key
Advisory Mirror (OSV.dev):
7 / 7 audited versions returned 0 query matches
Canonical Merkle Root:
a0d5ab7c49e61d54a8a147e33f11bf08c67f4c61b58cf231ec6157e4986ebcb1
Live Web Dashboard:
https://bootlace-dev.github.io/binwatch-rs/
Raw Cryptographic Manifest:
https://bootlace-dev.github.io/binwatch-rs/manifest.json
Source & Audit Logs:
https://github.com/bootlace-dev/binwatch-rs
Notice: Experimental pre-release prototype (v0.0.1-rc0). Data mirrored unverified from upstream OSV.dev and project manifests. Provided AS-IS for technical discussion.
#binwatch #bitcoin #supplychain