Open-Source Bitcoin Banking Infrastructure

The Privacy-First
Bitcoin Bank Stack

MyBankBTC is the first open-source infrastructure for running a custodial Lightning bank where users hold Chaumian e-cash — blind bearer tokens the operator cannot surveil — secured by FROST threshold keys and Nostr-native wallet connectivity.

10+
Protocols Implemented
13
Microservices Running
100%
Open Source (MIT/Apache)
Live
Deployed on Bitcoin Signet

Custodial Lightning wallets
are surveillance machines

Over a billion people need fast, cheap Bitcoin payments — and most of them will use custodial wallets. But every existing custodial Lightning service can see every payment, link every balance to an identity, and build a complete financial graph of its users.

👁️

Operators see everything

Today's custodial Lightning wallets store named balances. The bank knows exactly who sent what to whom and when — no different from a traditional bank.

🔑

Single key = single point of failure

Most custodial operators hold funds in hot wallets or simple multisig. One compromised key, one rogue employee, or one regulatory order and all user funds are at risk.

🔒

No open-source reference

There is no auditable, deployable open-source stack for a privacy-preserving Lightning bank. Every serious operator builds proprietary infrastructure from scratch.

Fragmented protocol ecosystem

Cashu, FROST, VLS, NWC, LNURL, and Bolt Card all exist independently. No project has assembled them into a coherent custodial banking architecture.

Custodial convenience.
Self-custody privacy.

MyBankBTC assembles the best of Bitcoin's privacy and security stack into a single deployable open-source infrastructure.

🪙

Chaumian E-Cash (Cashu)

Users hold blind bearer tokens. The mint cannot link issuance to redemption. The operator learns nothing about who owns what.

🔐

FROST Threshold Custody

3-of-5 threshold Schnorr signatures across HSMs and air-gapped devices. No single party can move funds unilaterally.

📡

Nostr Wallet Connect (NWC)

Any NWC-compatible wallet connects natively. Ephemeral relays leave no financial metadata. Payments route through encrypted Nostr events.

🛡️

VLS Policy Enforcement

Validating Lightning Signer runs in a TEE and enforces velocity limits, HTLC caps, and output allowlists before signing any transaction.

Payment Flow

User
LNURL-Auth
Session Cookie
Passwordless login via secp256k1
Wallet
NWC Relay
NIP-47 Bridge
Encrypted Nostr events
Payment
Cashu Mint
Blind Token
Unlinkable e-cash issuance
Core Lightning
VLS TEE
FROST 3-of-5
Policy-enforced threshold signing

Every major Bitcoin protocol,
in one deployable stack

Built entirely in Rust and Go, deployed on Kubernetes. Every component is independently useful and MIT/Apache 2.0 licensed.

🪙
Privacy

Cashu (CDK)

Chaumian e-cash mint via cdk-mintd. Blind BDHKE signatures over secp256k1. NUT-00/04/05/08/12/13 protocol suite.

✂️
Key Security

FROST / ROAST

3-of-5 threshold Schnorr signatures. Asynchronous ROAST coordinator for signing ceremonies. Single on-chain signature.

🛡️
Policy

VLS Signer

Validating Lightning Signer in a Trusted Execution Environment. Enforces velocity, HTLC, and output policies before any signing.

📡
Connectivity

NWC / Nostr

NIP-47 Wallet Connect bridge. NIP-44 ChaCha20-Poly1305 encryption. NIP-98 signed HTTP auth. Ephemeral relay with Redis pub/sub.

Lightning

LNURL Suite

LUD-04 (Auth), LUD-06 (Pay), LUD-16 (Addresses), LUD-03/17 (Withdraw). Full Lightning Address support at user@mybankbtc.xyz.

📲
Hardware

Bolt Card (NFC)

NTAG 424 DNA SUN verification. AES-128 PICCData decryption, CMAC validation, monotonic counter. Tap to pay at any merchant.

🔵
Lightning

BOLT-12 Offers

Blinded paths for destination privacy. Reusable offers. Experimental route blinding so the custodial node cannot see the final recipient.

☁️
Infrastructure

Cloud-Native IaC

Full Terraform on GCP: GKE, Cloud Run, Cloud SQL, Cloud KMS HSM (secp256k1), Cloud Armor WAF, GitHub Actions CI/CD.

Why this matters for Bitcoin,
Lightning, and sovereignty

1B+

Unbanked users deserve privacy

Custodial Lightning wallets are the realistic on-ramp for the next billion Bitcoin users. This is the first open-source stack that gives them financial privacy even within a custodial relationship — using the same blind signature cryptography as physical cash.

0

No single party controls the keys

FROST 3-of-5 threshold means no rogue employee, no regulatory seizure, and no single server breach can drain user funds. This is the key management model the industry should adopt, and we are making it open source and deployable.

Any operator can fork and deploy

Every component — the Rust LNURL server, NWC bridge, Bolt Card server, ROAST coordinator — is MIT/Apache 2.0. Any Lightning service provider, Bitcoin bank, or community node can deploy this stack instead of building proprietary surveillance infrastructure.

All the pieces are ready.
We are assembling them.

The individual technologies have reached production maturity. No one has combined them into a coherent banking stack — until now.

2020

Cashu protocol designed

Chaumian e-cash for Bitcoin Lightning reaches mainnet viability. CDK (Cashu Development Kit) provides a production Rust implementation.

2022

FROST and ROAST published

FROST threshold Schnorr and ROAST (asynchronous robustness) are published and implemented. Single Schnorr signature on-chain — chain-private and fee-efficient.

2023

NWC and BOLT-12 mature

Nostr Wallet Connect (NIP-47) becomes the standard for wallet connectivity. BOLT-12 blinded paths land in Core Lightning. VLS ships production policy enforcement.

2025

MyBankBTC: first complete stack

We are the first project to combine all of these into a single deployable open-source Bitcoin bank. Running on signet today. Mainnet hardening in progress.

Live on Bitcoin signet today

Built, deployed, and running — not a whitepaper.

13
Microservices on GKE
6
Rust Services (LNURL, NWC, Boltcard, ROAST...)
5
Cloud HSM Keys (FROST + Cashu)
10+
Bitcoin/Lightning Protocols
6
GitHub Actions CI/CD Workflows
100%
Infrastructure as Code (Terraform)
# Core Lightning node — running on Bitcoin Signet
node_id: 02b8dfffc670023f3be5abfcd2aebb5396d05473f2fb1231ff0b3804bc93232dc0
alias: GREENFIRE
network: signet
status: synced & running
gke: bitcoin-bank-gke (us-central1) · 3 nodes · 13 pods Running
repo: github.com/defiuniversity-xyz/bitcoin-bank-custodial-wallet

Fund the future of
Bitcoin banking privacy

We are seeking $158,000 in grant funding to complete mainnet hardening, conduct a security audit, and deliver the first production-ready open-source Bitcoin bank stack. Custodial does not have to mean surveillance.

Questions? Reach us at hello@defiuniversity.xyz