A scam mining pool is a pool that advertises itself as a Bitcoin (BTC) mining service but secretly redirects your hashrate to mine a different blockchain, typically Bitcoin Cash (BCH), while keeping 100% of the rewards. Your miner does real work. The pool operator pockets all the profit. You get nothing.
This is not a theoretical risk. In February 2026, community researcher mweinberg published definitive proof on GitHub that two popular solo mining pools, LuckyMonster (luckymonster.pro) and zsolo.bid, were mining Bitcoin Cash while advertising BTC solo mining to their users. The evidence was collected by monitoring 16 mining pools simultaneously over an 11-minute window and comparing the prevhash (the hash of the previous block) each pool was working on.
As open-source home mining grows, so does the incentive for bad actors to target this community. These small desktop mining devices have won over $1 million in documented block rewards using legitimate pools. Every stolen hash directed to a scam pool is a stolen lottery ticket.
How Were LuckyMonster and zsolo.bid Proven to Be Scams?
The prevhash timeline analysis, published on GitHub by mweinberg (AtlasPool.io operator who also contributed to the AxeOS v2.13.0 release), monitored 16 Bitcoin mining pools in real time. The results were unambiguous:
- All 13 legitimate pools (including Solo CKPool, Public Pool, OCEAN, Braiins, and others) shared the same prevhash at every observation point.
- All 13 legitimate pools updated their prevhash simultaneously when a new Bitcoin block was found on the network.
- All 3 scam pool endpoints (LuckyMonster US, LuckyMonster EU, and zsolo.bid) were stuck on a completely different prevhash that never updated.
- When the scam pool prevhash was converted to big-endian format and searched on blockchain explorers, it was found on the Bitcoin Cash (BCH) blockchain, not Bitcoin (BTC).
This proves these pools were mining BCH while telling users they were mining Bitcoin. Every share submitted by a home miner to these pools contributed to someone else’s BCH block rewards. The miner received nothing in return.
Why Home Miners Are Prime Targets for Pool Scams
The explosion of affordable open-source Bitcoin miners like the Bitaxe Gamma 602 and NerdQaxe++ has brought tens of thousands of new miners online since 2024. That growth creates a large pool of potential victims for two reasons.
First, many new home miners are beginners. They set up their device, enter a pool URL they found on social media or a forum, and trust that the pool does what it claims. The stratum protocol (the communication standard between miners and pools) provides no built-in way for the miner to verify what blockchain it is actually contributing work to. Until now.
Second, the economics make scam pools attractive to operate. A Bitaxe Gamma 602 hashes at approximately 1.2 TH/s. A NerdQaxe++ Rev 6.1 delivers over 6 TH/s at approximately 100 watts. A scam pool operator collecting hashrate from hundreds or thousands of these devices accumulates meaningful BCH mining power at zero cost, because the miners pay their own electricity.
How AxeOS v2.13.0 Fights Back: The Coinbase Transaction Parser
On February 20, 2026, the AxeOS development team released firmware version 2.13.0 for all Bitaxe and compatible devices. Among many improvements (TLS support, new device support for the Bitaxe 801 and 650, and fan controller upgrades), the standout security feature is the coinbase transaction parser, introduced in pull request #1391 by developer mutatrum.
This feature works by decoding the coinbase transaction data embedded in the stratum mining.notify messages that a pool sends to your miner. The coinbase transaction is the first transaction in every Bitcoin block. It contains the payout addresses where the block reward will be sent. By parsing this data, AxeOS can now display:
- The actual payout address(es) embedded in the pool’s work.
- Whether the address format matches known Bitcoin address prefixes (
1,3,bc1q,bc1p). - A warning flag if the decoded addresses do not match valid Bitcoin formats.
If you see a warning in your AxeOS dashboard that reads “You don’t have a share in the coinbase reward“ (visible as the yellow banner in the dashboard), this is the coinbase transaction parser alerting you that the pool’s work does not include a recognizable Bitcoin payout to your configured address. This could indicate that:
- The pool is mining a chain other than Bitcoin (scam pool behavior).
- The pool is not including your address in the coinbase payout (possible with some pool configurations).
- You are using a shared/pooled mining setup where payouts are handled separately.
“The coinbase transaction parser automates what some community members were already doing manually by inspecting raw stratum messages,” explained mutatrum in the ESP-Miner GitHub discussion. “This gives every Bitaxe owner an automated verification layer built directly into the firmware.”
What the AxeOS Dashboard Warning Looks Like
After updating to AxeOS v2.13.0, the dashboard displays a yellow warning banner at the top of the screen when the coinbase transaction parser cannot confirm that your configured Bitcoin address is included in the pool’s block reward payout. The warning states: “You don’t have a share in the coinbase reward.“
This is not necessarily a sign that something is wrong. Pools like OCEAN and some shared mining configurations handle payouts through separate mechanisms, so the warning may appear even on legitimate pools. However, if you are pointed at a solo mining pool (where your address should appear directly in the coinbase transaction), this warning is a significant red flag that demands immediate investigation.
The feature can be disabled in the pool configuration settings if you are knowingly mining on a pool where the warning is expected, such as a shared pool with off-chain payouts.
How to Disable the Coinbase Reward Warning in AxeOS
If you are mining on a legitimate shared or pooled mining setup where the warning is expected, you can disable the coinbase transaction decoder to remove the yellow banner.
- Open your Bitaxe’s AxeOS web interface by navigating to its local IP address in your browser.
- Go to Settings.
- Locate the “Decode Coinbase“ checkbox.
- Uncheck the box.
- Click Save.
The warning banner will no longer appear on your dashboard. If you switch to a solo mining pool later, re-enable this setting immediately. On solo pools, the coinbase decoder is your first line of defense against fraudulent pools and should always remain active.
How to Verify Your Mining Pool Is Legitimate
AxeOS v2.13.0 gives you an automated first line of defense, but every home miner should understand how to verify their pool independently. Here is a step-by-step process.
Step 1: Update to AxeOS v2.13.0 or Later
Download the latest firmware from the official ESP-Miner GitHub releases page. Flash your Bitaxe using the AxeOS web interface or USB. For a complete walkthrough, see our How to Flash Your Bitaxe guide.
Step 2: Check the Dashboard Warning
After flashing, navigate to your Bitaxe’s AxeOS dashboard via your browser. If the yellow “You don’t have a share in the coinbase reward” banner appears while you are mining to a solo pool, investigate immediately.
Step 3: Verify on mempool.space
Open mempool.space and check the latest block hash. Compare it with the prevhash your pool is working on (visible in stratum logs). If your pool’s prevhash does not match the current Bitcoin blockchain tip, your pool is likely mining a different chain.
Step 4: Stick to Proven Pools
Use pools with verified track records. The following solo and small-scale pools have been confirmed legitimate by the open-source mining community:
| Pool | Type | Fee | Notable |
|---|---|---|---|
| Solo CKPool (solo.ckpool.org) | Solo | 2% | 22+ solo blocks found in 2025-2026 |
| Public Pool (web.public-pool.io) | Solo | 0% | Open source, self-hostable via Umbrel |
| OCEAN (ocean.xyz) | Pooled (DATUM) | 0-2% | Non-custodial, miner-built blocks |
| Braiins Pool | Pooled (FPPS) | 0-2% | Oldest pool (est. 2010), Stratum V2 |
| AtlasPool.io | Solo | 1.5% | Globally deployed with a focus on low latency |
Red Flags: How to Spot a Scam Mining Pool
Not every scam pool will be caught by the coinbase transaction parser (though it catches the most dangerous ones). Here are additional warning signs every home miner should watch for:
- No verifiable block history. Legitimate pools publish found blocks publicly. If a pool claims to mine Bitcoin but you cannot find any blocks attributed to it on mempool.space or a block explorer, be suspicious.
- Unrealistic promises. Any pool that guarantees returns or promises higher-than-expected payouts is likely a scam. Bitcoin mining is probabilistic, not guaranteed.
- Anonymous operators with no community presence. Pools run by known developers (Dr. Con Kolivas for CKPool, mutatrum and Skot for AxeOS/OSMU community tools) have reputations to maintain. Anonymous pools with no OSMU Discord presence or GitHub history carry higher risk.
- Mismatched prevhash data. If you or anyone in the community monitors the pool’s prevhash and it does not match the Bitcoin blockchain, the pool is mining something else.
- Requests for personal information beyond a wallet address. Legitimate solo pools require only a Bitcoin address and a stratum connection. Anything beyond that is suspicious.
- Forum and Reddit warnings. Check r/BitAxe, r/SoloSatoshi, and the OSMU Discord before connecting to any new pool.
What Else Is New in AxeOS v2.13.0?
The scam pool detection feature is the headline security upgrade, but AxeOS v2.13.0 is a significant release across the board. Key improvements include:
- New device support: Native firmware support for the Bitaxe Duo 650 (1.63 TH/s, 2x BM1370) and the Bitaxe 801 (2.15 TH/s, 2x BM1370, 12V).
- TLS (encrypted) stratum support: Your miner can now connect to pools over encrypted TLS connections, preventing man-in-the-middle attacks on your stratum traffic.
- Improved fan controller: A dedicated fan controller task replaces the previous implementation, providing smoother and more responsive cooling management.
- Response time graphing: The dashboard now graphs pool response time alongside hashrate and ASIC temperature, giving you visibility into pool latency.
- Default address warning: AxeOS now warns you if you are mining with the default example address still configured, preventing accidental mining to someone else’s wallet.
- Block found notification improvements: Dismissible block-found notifications and a cleared screen feature for better usability.
- BAP Protocol improvements: Enhanced Bitaxe API Protocol with share requests and block-found parameters.
- Queueless hashing: A new hashing architecture that removes the job queue for improved performance.
- IPv6 support: Name resolution for public IPv6 addresses.
- ESP-IDF v5.5.2: Updated to the latest Espressif development framework.
For the complete changelog, visit the official release page on GitHub.
How to Update Your Bitaxe to AxeOS v2.13.0
Updating your firmware is straightforward and takes approximately 5 minutes. For a detailed walkthrough, see our complete Bitaxe flashing guide.
- Go to the ESP-Miner v2.13.0 release page.
- Download the correct
.binfile for your Bitaxe model. - Open your Bitaxe’s AxeOS web interface in your browser (navigate to its local IP address).
- Go to the Settings or System section.
- Upload the firmware file using the OTA (Over-the-Air) update option.
- Wait for the device to reboot. Your settings will be preserved.
After updating, check your dashboard for the new coinbase reward warning feature and verify that your pool connection is functioning correctly.
The Bigger Picture: Open-Source Firmware Protects Home Miners
The AxeOS coinbase transaction parser is a direct result of open-source development. The vulnerability was identified by community members. The proof was collected and published openly on GitHub. The firmware fix was coded, reviewed, and released by volunteer developers who care about Bitcoin’s decentralization and the safety of home miners.
This is exactly the kind of protection that closed-source mining hardware cannot offer. When your firmware is proprietary, you have no way to verify what your miner is doing, what data it sends, or whether the pool is legitimate. Open-source miners like the Bitaxe and NerdQaxe++ give you full transparency from the silicon to the stratum message.
“This is why we sell open-source mining hardware.” said Hunter, co-founder of Solo Satoshi. “Our customers deserve to verify, not trust. The AxeOS community just proved why that matters.”
Solo Satoshi is a verified seller on bitaxe.org and ships assembled-in-USA Bitaxe and NerdQaxe++ devices with same-day shipping from Houston, Texas. Every miner comes with a 90-day Solo Satoshi.
