Security at bc1q21

Security is an ongoing process. bc1q21 maintains a record of significant security review, remediation and verification work performed on the project.

August 2026 — Independent Security Scanning and Reporting

bc1q21 engaged sovtech.pro (Sovereign Technology S.A.S. de C.V.) to perform independent security scanning and reporting on the project.

The findings from that review were used to inform a comprehensive internal remediation process to harden the application.

August–September 2026 — Remediation

Following the independent review, bc1q21 systematically worked through the reported findings and undertook a broader internal security remediation process across the application and supporting infrastructure.

September 2026 — Production Infrastructure Inspection

bc1q21 subsequently performed additional inspection of the production environment, including server configuration, deployment controls, nginx configuration, firewall and network exposure, Bitcoin Core RPC access, service configuration and related production security controls.

September 2026 — Bitcoin Lifecycle Verification

bc1q21 also performed end-to-end Bitcoin lifecycle testing, exercising the gift and claim process through funding, time-lock maturity, transaction construction and signing, broadcast, mempool acceptance, mining and confirmation of the recipient output.

Independent Review vs. Subsequent Remediation

Sovereign Technology's role was limited to the independent security scanning and reporting phase.

The subsequent remediation, production infrastructure inspection and Bitcoin lifecycle verification described above were performed by the bc1q21 project and were not reviewed or verified by Sovereign Technology.

Acknowledgement of Sovereign Technology's past security review services does not constitute an endorsement, certification, or verification of the current security posture of bc1q21 by sovtech.pro.