Partially Signed Bitcoin Transaction (PSBT) Parser & Fee Policy Enforcement
Hardware-level inspection and validation of multi-input, multi-output Bitcoin transactions to prevent blind signing exploits.
Preventing the 'Change Address Hijack' Attack
A critical vulnerability in automated Bitcoin signing systems is change output redirection. BitHSM regenerates the expected change address directly from the internal master seed and derivation path, aborting the signature if the destination address does not strictly match.
Miniscript Compatibility
BitHSM includes a native Miniscript compiler and verification engine, enabling enterprise treasuries to enforce complex timelocks, multi-sig thresholds, and emergency decay paths with mathematical proofs of soundness.
- Full UTXO Validation: Cryptographically verifying previous transaction outputs (prevouts) to eliminate fee exhaustion attacks.
- Change Address Verification: Mathematically proving that change outputs belong to the internal BIP-32 derivation keychain.
- Fee Rate Protection: Enforcing upper bounds on satoshis-per-vbyte to prevent malicious transaction overpayment.
- Miniscript Execution: Formally verifying complex spending policies encoded in Bitcoin Script directly inside the enclave.
Voir les domaines