Bitcoin Forum
August 18, 2026, 11:43:50 PM *
News: Latest Bitcoin Core release: 31.1 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2]  All
  Print  
Author Topic: [ANN][BFX] BitFinite — Point your Bitaxe at a chain where it finds blocks  (Read 563 times)
bitfinitechain (OP)
Copper Member
Newbie
*
Offline

Activity: 20
Merit: 0


View Profile
August 05, 2026, 12:34:03 AM
Last edit: August 05, 2026, 01:50:31 AM by bitfinitechain
 #21

Web wallet update — wallet.bitfinitechain.org

Rebuilt the wallet and shipped it. Desktop and Android builds too.

New send flow: enter, review, confirm. The review screen shows the exact fee the transaction will pay, read back from the built transaction rather than estimated.
Redesigned home, receive, history and settings. Works properly on phones now.
A sent payment now shows as pending straight away. Our Electrum server doesn't index the mempool, so the wallet previously showed no sign of a send until it confirmed — it looked like nothing had happened. The wallet now tracks what it broadcast itself, and won't reuse those coins for a second send. A server-side fix for the underlying cause is in progress.
Removed the fiat display. BFX isn't listed anywhere, so the wallet was showing Bitcoin Cash's price against your BFX balance — a made-up number. It's gone until there's a real feed, and the wallet no longer contacts any third-party price API.
Security pass: added a content security policy, raised the minimum quick-unlock PIN to 6 digits with slower key derivation, updated a dependency with a known advisory, and fixed an input-handling bug in the wallet-name field.
Non-custodial as before — keys stay in your browser. Existing wallets and PINs keep working; you may need one hard refresh.

The Android APK is signed. Desktop builds (Linux AppImage, Windows) are not yet signed, so Windows SmartScreen will warn — signed desktop releases to follow.

Source: https://github.com/bitfinitechain/bitfinite-webwallet
bitfinitechain (OP)
Copper Member
Newbie
*
Offline

Activity: 20
Merit: 0


View Profile
August 05, 2026, 02:38:15 AM
 #22

Electrum server update — v1.1.3, unconfirmed transactions now indexed

Following on from the wallet post above: the server-side fix is done and deployed to both Electrum servers.

The cause was that our Electrum server parsed mempool entries using Bitcoin Core's field layout, which BitFinite (BCHN) doesn't emit. Every unconfirmed transaction failed to parse and was silently discarded, so the server reported an empty mempool at all times. It logged nothing at default level, which is why it went unnoticed.

What changes now:

A payment shows as pending as soon as it's broadcast, instead of only after it confirms.
The recipient sees it arriving, rather than nothing at all.
Balances drop on send instead of after the next block.
This affects any wallet pointed at our Electrum servers, not only the BitFinite web wallet — if you use a third-party Electrum wallet and saw this behaviour, it wasn't your wallet.

The wallet-side workaround from the previous post stays in place, so sends stay visible even against a server that hasn't been updated.

Source and binaries: https://github.com/bitfinitechain/electr-bfx/releases/tag/v1.1.3
bitfinitechain (OP)
Copper Member
Newbie
*
Offline

Activity: 20
Merit: 0


View Profile
August 06, 2026, 03:46:05 AM
 #23

Heads up for Coldcard users.

A firmware bug (March 2021 until it was patched) made some Coldcards
generate recovery phrases with far less randomness than they should
have. Attackers started draining those addresses on 30 July. Updating
the firmware doesn't fix a phrase that was already created.

BitFinite's wallets aren't affected — we generate phrases with the
OS/browser secure RNG, and we checked all of them.

But a phrase isn't tied to one coin. If you made yours on an affected
Coldcard and later restored those words into a BitFinite wallet, your
BFX is exposed too.

It's about where your words came from, not which wallet you use.

If that's you: new wallet, move your BFX over, update the payout
address in your miner and your pool username. Same for any other
chain you used those words on.

Details: https://bitfinitechain.org/security

We'll never DM you first or ask for your seed phrase.
bitfinitechain (OP)
Copper Member
Newbie
*
Offline

Activity: 20
Merit: 0


View Profile
August 09, 2026, 04:50:22 PM
Last edit: August 10, 2026, 11:09:04 AM by bitfinitechain
 #24

Seed nodes are now on v3.0.2

Done tonight, 2026-08-09, between 16:02 and 16:15 UTC. Both pools paused for
about ten seconds each while their node restarted. If your miner logged a
reconnect in that window, that was us.

What changed
Our three seed nodes had been running a build from July 11 that reported
itself as 3.0.0. That is the same version-reporting bug covered earlier in
this thread. The build already carried the DNS seed and the two IBD trust
anchors that shipped as 3.0.1 — we checked the running binaries rather than
assuming, and the assume-valid hash, the minimum-chainwork value and
seed.bitfinitechain.org were all in there. Only the version string was wrong,
so nobody was peering with a weaker node than advertised.

All three now run the published v3.0.2 binaries, and the installed files
hash to the release checksums exactly.

No reindex, no consensus change, no wallet migration.

Result
Code:
seed-1   /BitFinite:3.0.2(EB32.0)/
seed-2   /BitFinite:3.0.2(EB32.0)/
seed-3   /BitFinite:3.0.2(EB32.0)/

All three agree on the same best block hash, no warnings, and none of them
has restarted since. Blocks kept coming through the checks afterward, and
every worker reconnected to both pools. Electrum, the explorer and the block
indexer are all back up.

If your pool stats look odd for a bit, that is expected: ckpool's lifetime
counters (accepted shares, best share) reset when it restarts, and vardiff
starts low and ramps back up as it re-measures each worker. Your actual
hashrate and share rate are unaffected.

If you run your own node
v3.0.2 is a drop-in from 3.0.0 or 3.0.1. Stop, swap the binaries, start.

https://github.com/bitfinitechain/bitfinite-core/releases/tag/v3.0.2

Code:
e209634baf2acb3eb5395b2954be5ae7e06075b3cac24a48d463ff9407b20eeb  bitfinite-v3.0.2-x86_64-linux.tar.gz
18b10a2b0dccc804a6064f6b8a396dc154f7a130c0ded4c325e050d6954b0071  bitfinite-v3.0.2-x86_64-windows.zip

Those match the SHA256SUMS on the release page — verify with
Code:
sha256sum -c SHA256SUMS
rather than taking the numbers above on trust.

BitFinite
bitfinitechain (OP)
Copper Member
Newbie
*
Offline

Activity: 20
Merit: 0


View Profile
August 10, 2026, 02:35:33 PM
 #25

Upstream security sweep, v3.1.0 coming

BitFinite forked from Bitcoin Cash Node v27.0.0 in December 2023. BCHN is now on v29.0.0, so we have been missing two and a half years of their fixes. Time to close that.

We went through the whole gap this week — 439 commits, 262 of them non-merge — and pulled out the ones that actually change how a node behaves under load
or under attack. The full ranked list with reasoning is in the repo:

https://github.com/bitfinitechain/bitfinite-core/blob/master/doc/upstream-security-backlog.md

What is going into v3.1.0:

* Per-peer bandwidth limits (-peerratelimit)
* Log rate limiting, so a noisy peer cannot fill your disk
* A socket descriptor leak fix, and the crash it eventually causes — this one matters on nodes with long uptime, which ours have
* Several undefined-behaviour fixes on the p2p input path, including a  CBloomFilter CVE backport from Bitcoin Core
* DNS seeder thread-safety fixes — that binary runs seed.bitfinitechain.org, so it is worth getting right
* Ignoring timestamps from inbound peers. This one is worth more to us than to BCH: with a handful of peers per node, a couple of hostile inbounds is a meaningful share of the time samples

What is not going in: the four consensus CHIPs from BCHN v29 (P2S,loops, functions, bitwise). Those are Bitcoin Cash's May 2026 network upgrade.
Adopting them here would be a hard fork needing coordinated activation across miners, so it is a separate conversation. It is not something we would slip into a security release, and it is hard to justify while our blocks are still
empty.

Nothing for you to do right now. When v3.1.0 is out we will post the checksums and the usual stop, swap, start instructions. Same drop-in as v3.0.2.

If you read the list and think we have the priorities wrong, say so.

BitFinite
bitfinitechain (OP)
Copper Member
Newbie
*
Offline

Activity: 20
Merit: 0


View Profile
August 11, 2026, 04:00:45 AM
 #26

v3.1.0 is out

https://github.com/bitfinitechain/bitfinite-core/releases/tag/v3.1.0

Drop-in from 3.0.x. Stop the node, swap the binaries, start it again. No reindex, no wallet migration, no consensus change. Our three seeds are running it now.

The DNS seeder was the worst of it

Two bugs we could reproduce by running the old and new seeder side by side against the same failure:

  • A seeder that could not bind its DNS port printed "done", reported 0 DNS requests, and kept running while answering nothing. It looked healthy.
  • It ignored the stop signal and had to be killed, throwing away every peer it had crawled since the last periodic dump.

Both fixed. That binary serves seed.bitfinitechain.org, so it is worth having right.

Also in

  • Socket descriptor leak, and the crash it caused once a node ran out of descriptors. Matters if your node stays up for weeks.
  • Log rate limiting (-logratelimit, on by default): 1 MiB per hour per message, so a noisy peer cannot fill your disk.
  • Control characters stripped from log messages.
  • Several undefined-behaviour fixes on the p2p input path.

What did not make it

We said -peerratelimit was coming and it is not in this one. Upstream's version is written against a rewrite of how connections are managed that we have not ported. We could have hand-adapted it, but that means shipping network code in a shape nobody upstream has ever run, and that is not a trade
we wanted on the p2p layer. It is first in line next.

The four May-2026 consensus CHIPs from BCHN are also not in here on purpose. Those would be a hard fork and need miners to coordinate an activation, so they do not belong in a security release.

Verify

Code:
16aed0716ba7dc6e9a94d5e6648cc25694d1eab77710d4755605edc7ccfa8ead  bitfinite-v3.1.0-x86_64-linux.tar.gz
e3a7e962692ae16eda09c92ca5475acf692dbf9fc9551d5c35bac7f740b5955c  bitfinite-v3.1.0-x86_64-windows.zip

Check them against the SHA256SUMS on the release page rather than trusting the numbers here.

Background on what else is queued from upstream is in the repo at doc/upstream-security-backlog.md if you want to argue with our priorities.

BitFinite

bitfinitechain (OP)
Copper Member
Newbie
*
Offline

Activity: 20
Merit: 0


View Profile
August 11, 2026, 06:08:01 AM
 #27

v3.1.1 — second batch, undefined behaviour on peer-reachable paths

https://github.com/bitfinitechain/bitfinite-core/releases/tag/v3.1.1

Close on the heels of 3.1.0 because these were ready and there was no reason to sit on them. Drop-in, no reindex, seeds are on it.

  • CBloomFilter CVE backport from Bitcoin Core, plus a divide-by-zero guard in the filter hash. Those filters are built from data peers send you.
  • UB in CNode::ReceiveMsgBytes — the network input path, every message from every peer.
  • UB in SocketSendData above 2 GiB, and in AddToCompactExtraTransactions.
  • MSG_FILTERED_BLOCK no longer reads a block off disk when the peer set no filter. Any peer could make your node do that work for nothing.

On -peerratelimit, one correction to what we said this morning: it is not just waiting on that one upstream rewrite. We measured it — roughly 30 net-layer commits sit between our base and it, about 840 lines added and 990 removed. So it is a sequenced port, not a cherry-pick.

We have now said "next release" about it twice. Not saying it a third time.
It ships when it ships.

Code:
4e36c7f1d79cf99c0dd53e6c8dfb49c45b7e8590acdf3080083a9a55aa818d5e  bitfinite-v3.1.1-x86_64-linux.tar.gz
d774703ab6cb7e49abc43b346f604b33e1d462184fddcf5179dab0b2bd0ba8db  bitfinite-v3.1.1-x86_64-windows.zip

Check against SHA256SUMS on the release page, not against these.


BitFinite
bitfinitechain (OP)
Copper Member
Newbie
*
Offline

Activity: 20
Merit: 0


View Profile
August 11, 2026, 06:25:57 AM
 #28

Small clarification — the Qt GUI wallet is in 3.1.0 and 3.1.1

We called it out in the 3.0.2 notes and then stopped mentioning it, so if you assumed it had been dropped, that is on our release notes rather than on you.

bitfinite-qt ships in both the Linux tarball and the Windows zip for 3.1.0 and 3.1.1, same as before. Nothing changed except us forgetting to say so.
bitfinitechain (OP)
Copper Member
Newbie
*
Offline

Activity: 20
Merit: 0


View Profile
August 14, 2026, 12:45:59 PM
 #29

BitFinite Node 3.1.2 is out, and two community channels are open.

--- 3.1.2 ---

https://github.com/bitfinitechain/bitfinite-core/releases/tag/v3.1.2

Drop-in upgrade from 3.1.x or 3.0.x. No reindex, no wallet migration, no consensus change - 3.1.1 and 3.1.2 nodes stay on the same chain. All three seeds are running it.

What is in it:

- A checkpoint at the genesis block was missing on five of our six networks.  Upstream ships one everywhere; ours were emptied during the fork and only   mainnet was ever restored. It bans forks that rewrite the genesis block.

- Log lines were being lost on a crash after log rotation. setbuf was applied  to the file handle being closed instead of the newly opened one, so the reopened debug log stayed fully buffered. This is a Bitcoin Cash Node bug from 2018 that BCHN fixed in v29 before we found it independently - the fix is theirs, we backported it.

- An overflow assertion in the difficulty code had been commented out during our genesis work and did not need to be. Put back.

None of these are vulnerabilities and we are not calling them that.

--- how we found them ---

The unit tests had not been run in months. Nothing in our release pipeline built them, so a backport that landed tests for a half-implemented API stopped the suite compiling for two days without anyone noticing - the node itself was fine, which is why it went unseen.

That is fixed. CI now builds and runs the tests on every branch, and 117 of 120 suites pass. The three exclusions are listed with a reason each in scripts/run-tests-docker.sh.

Six suites needed repair. Five had been broken by our own rebranding - a find-replace that landed inside values carrying a checksum or an encoding (address prefixes, a base58 xpub, a client name that never existed). None of them was a defect in the node. Worth stating plainly, because "the rebrand broke the tests" is a different claim from "the code was wrong".

--- verify it yourself ---

The Linux binaries are reproducible. Building locally in Docker produces bytes identical to what the GitHub runner published - we checked again for this release. Windows are not reproducible; PE headers carry a build timestamp.

Code:
  git clone https://github.com/bitfinitechain/bitfinite-core
  cd bitfinite-core && git checkout v3.1.2
  NO_QT=1 scripts/build-core-docker.sh linux
  sha256sum build-linux/src/bitfinited
Compare against scripts/release-checksums.txt, which pins the binary hashes in git rather than trusting the SHA256SUMS inside the archive - that file travels with the artifact and can only attest to itself.

--- community ---

Telegram: https://t.me/bitfinitechain
Discord:  https://discord.gg/8yjGUwQQcF

Organized by topic - network status, blocks found, releases, mining help, and a Chinese-language section on Telegram. The status card and block alerts come from a bot reading the node and the pools directly, so they stay current
without anyone being online.

New members are approved manually on Telegram, and Discord needs a verified phone plus accepting the rules, so expect a short wait after joining.
The only links we use are on bitfinitechain.org, on github.com/bitfinitechain, or posted inside those two servers.

Nobody from the project will message you first, and nobody will ever ask for a seed phrase or a payment.

BitFinite
bitfinitechain (OP)
Copper Member
Newbie
*
Offline

Activity: 20
Merit: 0


View Profile
August 16, 2026, 04:45:39 PM
 #30

Android wallet update — v1.4.1

New build of the BitFinite Android wallet is out. Still experimental, still sideload only.

v1.4.1 — bug fix
Large sends failed at broadcast with tx-size (code 64). If a wallet holds many small coins (mining payouts), a large send has to spend hundreds of them. Each input adds about 148 bytes, so the transaction goes past 100,000 bytes and no node will relay it. Consensus allows 1 MB, but the relay limit is 100 KB, and the wallet's size check came from a library that only warns above 1 MB. So the transaction passed every local check and was refused by the network after the user confirmed it.

The wallet now checks before you confirm, and tells you how much you can send in one transaction. No funds were at risk; those transactions never left the phone.

If you mine to this wallet and hit it: send in smaller amounts, or consolidate by sending to yourself in batches.

v1.4.0 — design pass

Redesigned wallet home, Send, Receive, transaction and settings screens
Privacy mode: hide balance and amounts with one tap
Fiat is no longer shown. BFX has no market price, and the app was printing 0.00 USD on every transaction, which was a made-up number
Fixed a theme that drew its menu text in the same color as the background
Contrast fixes across buttons, icons and the balance
Download
https://github.com/bitfinitechain/bitfinite-wallet/releases/tag/v1.4.1

Verify with
Code:
sha256sum -c SHA256SUMS
. Signed with the BitFinite release key (CN=BitFinite). Most phones need arm64-v8a.

Warning — experimental test wallet. Not on Google Play or the App Store. Install by hand and use test funds only.

Source: https://github.com/bitfinitechain/bitfinite-core
Explorer: https://explorer.bitfinitechain.org

BitFInite
Pages: « 1 [2]  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!