Key takeaways
- Vincenzo Palazzo's Landfall derives an OCEAN payout address from one 24-word phrase using BIP-84 on the user's machine.
- Landfall signs OCEAN's verification message verbatim with BIP-322 and shows exactly what was signed and by which address.
- Palazzo says Landfall gets no security audit, no release schedule and no support, so users should not park large balances.
Developer Vincenzo Palazzo released Landfall, a showcase wallet for OCEAN Lightning payouts built around one 24-word recovery phrase. Landfall only works with OCEAN, and Palazzo presents it as a showcase, not a production product.
Palazzo describes himself as having been tech lead of OCEAN's Lightning team, but the repository sits under the developer's personal GitHub account as a side project. His guidance is to use Landfall to receive and spend OCEAN payouts, not to park a large balance in it.
One Phrase, Three Jobs
The payout address is derived from the phrase on the user's machine with BIP-84, so the key that signs is provably the key that owns the address. The same phrase is the root seed of a Lexe Lightning node, which, Palazzo says, runs in a secure enclave and creates a payable BOLT12 offer.
Palazzo summed up the split between the node operator and the user in his post:
"Lexe runs the node and handles the liquidity. You keep the keys."
The last step is the OCEAN verification message. The miner pastes in the verification message OCEAN provides, and Landfall signs it verbatim with BIP-322, showing exactly what was signed and by which address. That ties the address that receives OCEAN payouts to the key that signs for it, in a form the miner can check.
Read the Warnings First
Palazzo does not oversell the showcase. Do not restore the recovery phrase of a wallet you care about into Landfall, he wrote, because a showcase gets no security audit, no release schedule and no support.
The README also discloses that the recovery phrase is kept in a plaintext file with owner-only permissions on the machine running it, and that Landfall runs on mainnet only. The secure enclave and liquidity descriptions come from Palazzo and the project, with no independent audit.
Palazzo also left the door open. If people want Landfall to become a real product, he wrote, they should open an issue, tip, or tell OCEAN, and with enough interest OCEAN may consider picking it up and maintaining it properly. Neither Palazzo's post nor the README carries a statement from OCEAN itself about maintaining Landfall.
Why It Matters
Landfall derives the payout address from one recovery phrase the miner controls and signs OCEAN's verification message with BIP-322, so a miner can verify exactly what was signed without trusting a pool dashboard. We think that is the right shape for Bitcoin mining payouts, because pools that pay into custodial balances become gatekeepers over hashers' sats, while self-custody at the payout layer keeps the incentive with the people securing the network. Palazzo is honest about the catch, with no security audit, a plaintext phrase file and Lexe running the node, so Landfall is a payout pipe, not a vault. If miners want it hardened, the cheapest vote is an issue or a tip.
