A fake interview opened Binance’s $6.3 billion breach
- A fake interview reportedly led an employee to install spyware that helped attackers reach Binance’s wallet controls.
- Attackers used an Ethereum feature to move funds, but investigators pointed to compromised signing systems, not an Ethereum flaw.
- Freezes stopped billions, while other transfers tested how far exchanges and validators can intervene.
A fake job interview reportedly opened the door to Binance’s $6.34 billion theft. Bankless hosts said attackers sent a coding task that led an employee to install spyware on a work computer, then spread through the exchange’s network. The FBI attributed the breach to North Korea; Kim Yo Jong denied the allegation and suggested the United States might benefit, but offered no evidence, according to Bitcoin And.
The attackers also used Ethereum’s EIP-7702, a feature that lets ordinary accounts act like smart contracts. Bitcoin And reported that 50 presigned authorizations helped turn a Binance hot wallet into a tool for sweeping funds; Bankless said the feature let attackers bypass normal withdrawal controls. TRM Labs pointed instead to compromised signing infrastructure, not a flaw in Ethereum itself.
Binance paused withdrawals, then reopened them and said it would cover the loss. Elliptic’s analysis, reported by Bitcoin And on Nov. 6, put about $3.1 billion in addresses linked to the theft. Bankless hosts said about $2.85 billion had been frozen or intercepted, including funds frozen by stablecoin issuers. But attackers also moved assets across chains and swapped some into tokens issuers could not freeze.
The effort to stop those transfers has made service providers and validators part of the story. The FBI urged THORChain operators not to process transactions linked to the theft. Bankless reported that Polygon validators froze 6.5 million POL and discussed a possible rollback; the hackers privately contacted validators and offered a large fee to release the funds.
That response brings a trade-off into view. Bankless hosts said freezes can protect victims, but also give governments and network operators power over systems that claim to resist censorship. Marty Bent, on TFTC, drew a different boundary: a compromised exchange or wallet setup is not the same as a failure in Bitcoin’s network. The breach’s reported entry point was a person; the transfers that followed tested who can stop money once it is moving.
Source Intelligence
- Deep dive into what was said in the episodes
Google Wants to Custody Banks' Bitcoin. Brazil Shows Why You Hold Your Own | Rabbit Hole Recap 427 • Nov 7
- Marty Bent details the $6.3 billion Binance heist, where North Korean hackers exploited a DevOps engineer and leveraged Ethereum EIP-7702 to siphon hot wallet keys. Tether and Circle froze stolen funds, leaving Binance to cover remaining losses.
Also discussed on this episode: (11)
BTC Markets (1)
- Marty Bent reviews Bitcoin network metrics as the asset trades around $75,420 with a $1.52 trillion market cap. The network approaches its next difficulty adjustment with an estimated 3.3% downward revision.
Elections (1)
- Thomas Pacquia argues the midterm elections signaled a broad voter rejection of current economic policies, predicting intensified data center and mining moratoriums under incoming Democratic leaders like Elizabeth Warren on Senate Banking.
Banking (1)
- Marty Bent highlights systemic fragility across international banking, noting Paraguay's Ueno Bank shutdown triggered civil unrest and executive resignations. These incidents underscore the structural necessity of multi-signature Bitcoin self-custody over centralized financial entities.
Open Source (2)
- Developer Calle warned of rising burnout among open-source Bitcoin maintainers facing immense pressure from managing monetary software. Marty Bent stresses the urgency of supporting developer grants and independent security initiatives to sustain the protocol ecosystem long term.
- Marty Bent warns BTC Pay Server users that version 2.4.1 and earlier contain an unpatchable zero-day vulnerability. Operators must deploy completely fresh servers rather than applying software updates to secure their payment infrastructure.
Regulation (1)
- Marty Bent and Thomas Pacquia expect World Liberty Financial to draw heavy Congressional subpoenas once Democrats assume key committee chairmanships. They argue the project created an avoidable political target for crypto opposition.
Privacy (1)
- Marty Bent announces Bull Bitcoin implemented PayJoin for exchange deposits and withdrawals to break common-input ownership heuristics. The company is simultaneously taking legal action against French authorities to contest invasive KYC and AML regulations.
Europe (1)
- Thomas Pacquia identifies France as a potential catalyst for European economic instability due to unsustainable debt burdens, strict regulatory friction around technology, and an inability to independently print fiat currency to relieve fiscal deficits.
Labor (1)
- Marty Bent criticizes Pennsylvania Governor Josh Shapiro's proposed minimum wage increase, citing Thomas Sowell to argue that price floors create unemployment and compound cost-of-living pressures driven primarily by central bank inflation.
Stablecoins (1)
- Samsung plans to deploy USDC stablecoin wallets across 82 million Galaxy mobile devices for cross-border payment rails. Thomas Pacquia notes this expands user familiarity with digital assets, though without self-custody guarantees.
Physics (1)
- Physical Superintelligence published a machine-verified proof of the Aaronson-Banas conjecture using the Lean language. Marty Bent notes the finding establishes mathematical limits showing quantum computers offer only polynomial speedups over classical computing under general conditions.
Un-Clarity | Bitcoin News • Nov 6
- Crypto policy negotiators face pressure to add stronger exchange-security and consumer-protection rules after the Binance theft. Mailee Ma says the CLARITY Act draft lacks insurance, loss-payee protections, hot-wallet limits, and security standards that could have reduced the damage.
- Elliptic tracked stolen XRP being routed through THORChain into Bitcoin after the Binance theft. More than 20,000 wallets across 16 blockchains and 65,000 transactions formed part of the laundering trail; roughly $3.1 billion remained in linked addresses.
- David Bennett said hackers converting stolen altcoins into Bitcoin could create selling pressure on those tokens and buying pressure on Bitcoin. He viewed that market effect as interesting while acknowledging that the theft itself is unethical.
Also discussed on this episode: (12)
Regulation (4)
- Democrats won both chambers in the 2026 midterms, putting the stalled CLARITY Act back into negotiation. Shri Thanedar supports a path forward with stronger ethics rules, while Democrats are considering broader consumer protections and a larger SEC role.
- David Bennett expects crypto firms including Coinbase to accept stricter U.S. rules rather than risk years in regulatory limbo or losing business to compliant competitors. Bennett says the CLARITY Act must address Donald Trump’s crypto ventures as conflicts of interest.
- Greece approved a 10% tax on net crypto capital gains, effective in 2027, with gains up to €500 exempt and losses carried forward for five years. Crypto-to-crypto swaps remain untaxed; purchases will also face source-of-funds checks.
- A Department of Labor final rule that could ease crypto and other alternative assets into 401(k) menus reached White House review. The proposal gives fiduciaries a process-based safe harbor, reducing litigation risk without requiring plans to offer crypto.
Labor (1)
- The October U.S. jobs report showed 165,000 new jobs, far above the 65,000 estimate, while September’s reported gain was revised from 29,000 to 60,000. David Bennett called the figures unreliable; traders increased bets on a December Fed rate hike.
Markets (1)
- Markets rallied after the jobs report: the Nasdaq 100 futures gained 1.5% and the 10-year Treasury yield rose to 4.894%. Bitcoin traded near $75,870, while oil, gold, silver, and other commodities were mixed.
Elections (2)
- David Bennett criticized AIPAC’s access to U.S. lawmakers and argued that foreign lobbying should not shape congressional decisions. Jason High speculated that Israel could be blackmailing or threatening Donald Trump over Iran; Bennett said he could not judge that claim.
- A listener argued that presidents should face a maximum age of 65 at inauguration, contrasting that proposed cap with the existing minimum age. David Bennett praised the comment but did not offer a policy position on the age limit.
Protocol (1)
- Bitcoin developer Cory Fields proposed quantum “landmines” that require a thief to lock matching Bitcoin collateral before spending vulnerable coins. Owners could reveal proof during a delay to reclaim their coins and seize the collateral, but moving one’s own funds could also require matching collateral.
Psychology (1)
- David Bennett doubts quantum landmines would gain adoption because they add complex steps and collateral requirements. He used the proposal to question whether increasingly layered digital security can keep pace with quantum threats, while noting that physical money creates its own costly barriers.
AI Infrastructure (1)
- OpenAI promised that communities near campuses it owns and operates would not pay for its electricity needs, with public energy and water reporting and independent noise studies. The compact specifies no penalties, enforcement process, or independent verification, and does not clearly cover partner-owned facilities.
Custody (1)
- South Korean exchange GOPAX suspended trading and withdrawals after receiving a hacking-threat email, saying it would move customer assets into cold wallets. David Bennett questioned the explanation, arguing that a warning could be a pretext for the exchange to restrict access to funds.
Vote HARDER! | Bitcoin News • Nov 3
- Kim Yo Jong denied North Korea's involvement in the Binance theft and suggested the United States might benefit, but offered no evidence; the FBI, TRM Labs, Chainalysis, and ZachXBT linked the attack to North Korean hackers.
- Elliptic said the Binance attackers spread stolen funds across thousands of wallets and chains, while Tether and Circle froze billions in stablecoins; the attackers moved quickly to swap funds into assets issuers could not freeze.
- Elliptic said the laundering was automated but showed no evidence of AI decision-making; it estimated billions remained, mostly in ETH, while some funds may have reached Chinese laundering networks.
Also discussed on this episode: (10)
Elections (1)
- David Bennett treated election-day voting as futile, arguing that elected officials rarely deliver change; he also said higher taxes and wealth redistribution would weaken incentives to start businesses.
BTC Markets (3)
- CoinDesk reported Bitcoin was above its 200-day average before the 2026 US midterms, unlike in 2014 and 2022; DWF Labs expected near-term volatility but a higher price twelve months later.
- David Bennett argued that ETFs, banks exploring Bitcoin custody, and Google's proposed multiparty custody service make this election cycle unlike earlier midterms; he flagged ETF flows, jobs data, and Iran-war risk as market drivers.
- David Bennett's market roundup put Bitcoin near $77,650, with a 1.02 zettahash-per-second hash rate and ordinary fees; oil, metals, agricultural contracts, and US indexes were mixed or mostly lower.
Europe (1)
- France postponed debate and a vote on its 2027 budget, while lawmakers rejected two proposed crypto exit taxes; other proposals on self-custody reporting and stablecoin conversions remain contested or pending.
Macro (1)
- Australia's central bank raised rates as AI-related investment and energy costs pushed up inflation; the bank delayed its forecast for inflation to return to its target range until 2027.
Protocol (2)
- Floppy.md relayed an unconfirmed warning that Cashu mints using the Spark backend may be vulnerable to fund theft through a Nutshell flaw; David Bennett said Cashu had not confirmed or denied the claim.
- Liquid restored one-to-one Bitcoin backing for LBTC two months after an exploit; Blockstream CEO Adam Back listed new cold-storage authorization keys, disabled validation caches, hardened consensus rules, and third-party audits as safeguards.
Safety (2)
- David Bennett said retaining 600 BTC made the Liquid attackers look like extortionists, not white-hat hackers, and argued that any reward should have been negotiated before the Bitcoin was returned.
- David Bennett noted separate security incidents: BTC Pay Server urged merchants to disable servers amid reported hot-wallet attacks, and Mercado Bitcoin halted withdrawals after a $40 million hack; links to the Binance theft were unclear.
BTCPay Served | Bitcoin News • Nov 2
- Binance reopened withdrawals in stages after the theft, reporting that company funds had restored 95% of affected assets; the remaining 5% was held in illiquid tokens. Its October 31 proof-of-reserves snapshot included a zero-knowledge verifier, with another token snapshot planned for November 4.
- The FBI attributed the Binance theft to North Korea, while the Secret Service worked with Circle and Tether to freeze funds; roughly $3 billion remained unfrozen. Bitcoin fell about 5% below $77,000, and investigators tracked activity across 10 blockchains.
- CFTC chair Michael Selig used the Binance theft to argue for federal oversight of offshore crypto exchanges, saying U.S. registration would bring cybersecurity safeguards. Binance later said the breach involved more than one engineer's permissions, while David Bennett questioned whether the North Korea attribution could serve a regulatory agenda.
- The attack used Ethereum's EIP-7702 feature and 50 presigned authorizations to turn a Binance hot wallet into a sweeper; TRM Labs pointed to compromised signing infrastructure rather than a flaw in Ethereum. Selig said faster transfers and mixers such as Tornado Cash complicate tracing.
Also discussed on this episode: (13)
Custody (2)
- Mercado Bitcoin suspended deposits and withdrawals after a security incident, saying it contained the breach and that customers lost no funds or data. Hypernative estimated suspicious transfers above $40 million, which the exchange did not confirm; Tether froze linked funds.
- David Bennett argued that exchange and server breaches strengthen the case for self-custody, while distinguishing compromised infrastructure from Bitcoin's security. He cited a CoinKite firmware update that could revert wallet setup to software randomness and warned that tampered reseller devices can expose hardware-wallet seeds.
Open Source (1)
- BTC Pay Server urged operators to shut down instances after reports that attackers swept hot wallets; the project said reports appeared to involve versions older than 2.4.2, but had not confirmed newer versions were safe. The attacker gained administrator access by an unknown route.
Markets (2)
- Oil and gasoline prices fell sharply while precious metals mostly rose; U.S. stock indexes were mixed to higher. Coffee led the reported agricultural gain, while soybeans and lean hogs fell.
- Nvidia, Costco, Nike, and other issuers objected to OKX and ICE's proposed tokenized-stock venue, which would allow round-the-clock trading and stablecoin settlement. David Bennett said companies may be weighing voting rights, dividends, and intellectual-property concerns; an objection does not necessarily reject tokenization itself.
BTC Markets (2)
- Bitcoin traded below $77,000, with the host reporting fees of 5 sats per vbyte for high priority and 3 for low priority. Hash rate stood above one zettahash per second, and the reported supply was just over 20.1 million BTC.
- Strategy repurchased more STRC preferred shares than the Bitcoin it bought that week, while also raising cash through MSTR share sales. Japan's Metaplanet separately announced a common-share buyback equivalent to about 7.1% of its issued shares.
Agents (5)
- GenLayer's Internet Court uses randomly selected juries of AI agents to decide contract disputes, with appeals expanding from small panels toward as many as 1,500 models. CEO Albert Castanella said decisions usually reach finality within 30 minutes, while the network was processing about 12,000 decisions daily in beta.
- GenLayer began as a proposal for decentralized Wikipedia and now assesses user-submitted photos and payments for Collective Memory, while Argue.fun uses AI debates to resolve betting questions. Castanella said AI judgment remains unreliable for deepfake detection and property-boundary disputes, and users can still appeal decisions to people.
- AI dispute systems face risks from immature judgments and training-data bias; an MIT paper also describes representational convergence, the possibility that models from different firms will converge toward similar views. Castanella disputed that prediction, expecting more models from more countries and teams.
- GenLayer could shorten prediction-market disputes: a Polymarket market about whether Volodymyr Zelensky would wear a suit resolved first to yes, then flipped to no after appeals. Castanella argued AI juries could decide such cases in minutes, though human courts and other appeal routes would remain available.
- David Bennett cited Adam Curry and Dave Jones discussing AI agents that reserve tables at multiple restaurants, then cancel the unwanted bookings. He predicted restaurants may require deposits or fees for agent-made reservations, and warned that disconnected systems could create costly traps or scams.
Society (1)
- David Bennett praised Mexico for ending its seasonal clock change after U.S. lawmakers appeared likely to abolish daylight saving time; the U.S. proposal ultimately failed. The host also said Reese's Peanut Butter Cups had become excessively sweet and called for a less sugary alternative.
ROLLUP: Blue Wave, Black Swan | $6B Binance Heist | French Bank Robbed | ETH Goes Quantum-Proof • Nov 6
- The FBI attributed a $6.34 billion Binance hot-wallet theft to North Korea; Binance said it would cover the loss, published reserves near the full amount, and used its balance sheet and insurance fund to replace the missing assets.
- The Binance breach began with a fake job interview that tricked an employee into installing spyware on a work computer; attackers spread through the company network and used EIP-7702 to bypass normal withdrawal controls.
- North Korean hackers reportedly routed stolen assets through THORChain, converting tokens including TRX and SOL into Bitcoin and Ether; the FBI explicitly urged THORChain node operators and other service providers not to process related transactions.
- Polygon validators froze stolen tokens and discussed a chain rollback, while hackers offered a large transaction fee and contacted validators privately to induce them to release the funds; the hosts framed this as a test of validator discretion and chain immutability.
Also discussed on this episode: (12)
Markets (2)
- The hosts describe a sharp technology-led selloff after the midterms: semiconductor and AI-infrastructure stocks fell hardest, while they debate whether the move marks an AI bubble bursting or a correction.
- Coinbase reported $590 million in trading revenue, with prediction-market revenue offsetting lower spot volume; subscriptions and services supplied 49% of net revenue, while Brian Armstrong filed a plan allowing sales of 24% of his shares at preset prices.
Elections (1)
- The hosts call the midterms a Democratic sweep, linking the result to voter concerns about affordability, energy prices, the war, and ICE enforcement; they say Trump-aligned assets fell while the broader market initially rallied.
BTC Markets (2)
- Bitcoin briefly topped $80,000 after the election, then set a new local low near $75,500; the hosts viewed its hold near the 50-week moving average as resilient, while ETH was roughly flat on the week.
- Strategy’s preferred security STRC briefly returned to $100 after trading below that level for 174 days; the hosts warned that convertible debt coming due over the next six to nine months could require Michael Saylor to raise cash if MSTR remains below conversion thresholds.
Regulation (1)
- The hosts expect Democrats to scrutinize Trump-related crypto ventures but see little evidence of a renewed effort to suppress the whole industry; they warn that banks could seek stablecoin-yield restrictions through a revised Clarity Act.
Banking (1)
- Hackers allegedly stole about $130 million from French bank Crédit Mutuel through a third-party system, sent funds to mule accounts, then moved fiat through crypto exchanges into stablecoins; onchain analyst ZachXBT flagged $106 million before the bank story was public.
Protocol (4)
- Justin Drake moved Ethereum’s post-quantum target forward, proposing post-quantum transactions, attestations, and data sampling by December 2028; he cited LeanVM’s end-to-end formal verification milestone as a reason the accelerated schedule may be achievable.
- The Ethereum Economic Zone would let participating rollups access Ethereum mainnet liquidity; Gnosis plans to become the first such chain, while the hosts expect distribution-heavy L2s such as Coinbase’s and Robinhood’s to have less reason to join.
- L2BEAT rebranded as ETHBe to broaden its remit from monitoring L2 control over users to protecting sovereignty across Ethereum’s L1 and intermediated services, including node providers and smart contracts.
- Vitalik Buterin’s 15-minute Devcon keynote focused on user privacy, health data, social platforms, and defensive acceleration rather than Ethereum or DeFi; Georgios criticized the lack of project direction, while the hosts saw the talk as evidence of Buterin’s broader focus.
Coding (1)
- Paradigm and Georgios shipped Solar, which the hosts described as making Solidity 100 times faster; they cited the release as evidence that prominent critics of Ethereum’s direction still contribute to its developer ecosystem.
"The Markets Are In Denial" But Not For Long | Lepard & Valek • Nov 5
- The host said Bitcoin was around $77,000 despite attacks on services built around it, including a reported $6.3 billion Binance hack, a Liquid loss that was refunded, and another BTC Pay Server incident. He stressed that these were infrastructure attacks, not failures in Bitcoin itself.
Also discussed on this episode: (15)
Macro (2)
- The host put US debt above $40 trillion, interest costs above the military budget, and inflation at 3.7%, while gold and Bitcoin were down for the year. Lawrence Lepard said Morgan Stanley had shifted to a 60/20/20 portfolio of equities, bonds, and gold.
- Lawrence Lepard says the dollar and other fiat currencies are losing ground as reserve assets: US Treasury bonds have fallen 80% against gold since 2020. He described Saudi Arabia converting excess yuan from oil trade into gold through the Shanghai Gold Exchange as one possible route.
Markets (4)
- Mark Valek said gold rose more than 65% in 2025, then corrected after a January blow-off; he named Kevin Warsh’s hawkish rhetoric as a possible trigger. Lawrence Lepard said Bitcoin fell from $124,000 in October as war, oil prices, and hot inflation data shifted expectations.
- Mark Valek said central banks have been net gold buyers since 2010, with purchases accelerating after Russia sanctions in 2022; he cited roughly 850 tons bought in 2025. Lawrence Lepard said Western investors taking profits and newly mined supply may meet some official demand, while Chinese buying remains opaque.
- Lawrence Lepard described silver as both an industrial metal and a high-beta monetary asset, noting that its price rose from roughly $25 to $30 to $120 before falling below $50. He said Toshiba’s proposed solid-state batteries could use kilos of silver each, adding possible future demand.
- Lawrence Lepard expects market stress to force a policy reversal within months, watching the S&P 500’s 7,300 support level; Mark Valek expects a monetary-policy turn and sees limited gold downside below $3,500. Lepard’s longer-term targets include gold at $6,000 to $7,000 and silver at $200.
Inflation (2)
- Lawrence Lepard argues official inflation understates the pressure: he estimates inflation nearer 6% to 7% than 3%, despite roughly 4% GDP growth. He says rate hikes cannot solve supply-driven price increases without worsening debt costs in a system moving toward short-term borrowing.
- Lawrence Lepard cited Florida home-framing costs doubling in a year, including wages rising from $20 to $40 an hour. He attributed the labor-cost jump partly to ICE enforcement reducing the supply of lower-cost workers.
Banking (1)
- Mark Valek sees French sovereign credit spreads and debt costs as signs of strain; Lawrence Lepard added rising US commercial-real-estate and consumer delinquencies. Lepard said gated private-equity funds and weakening AI-company credit spreads expose illiquid assets, hidden leverage, and losses that have not been marked to market.
Fed (2)
- Lawrence Lepard and Mark Valek expect policymakers to print again when falling asset prices threaten the system. Lepard pointed to the Fed’s reserve-management purchases of up to $40 billion monthly; Valek said future support may arrive under a new label rather than “QE.”
- Lawrence Lepard said central-bank credibility depends on maintaining the appearance of control, while Mark Valek called that performance a mirage. Lepard recalled Alan Greenspan telling Brian London that controlling the cost of money felt intoxicating, illustrating the personal appeal of monetary power.
Europe (1)
- Mark Valek described Europe as burdened by high public debt, bureaucracy, Germany’s ongoing deindustrialization, and deeper EU involvement in Ukraine. He sees more market-friendly attitudes in Eastern Europe than Western Europe, partly because of lived experience with socialism.
BTC Markets (2)
- Lawrence Lepard said Bitcoin likely bottomed just below $60,000 after reaching $124,000, and expects $180,000 to $200,000 in a future upswing. Mark Valek agreed the drawdown was smaller than prior cycles but warned that Bitcoin now trades more as a macro asset as adoption growth slows.
- Mark Valek said MicroStrategy’s cash reserves eased his concern about the company’s ability to meet dividend obligations, but Bitcoin remains exposed to concentration risk. He also warned that ETF holders could become important sellers because Bitcoin ETFs hold about 5% of supply, unlike gold ETFs at under 1%.
AI Infrastructure (1)
- Lawrence Lepard said AI investment has diverted capital into equities and debt while rising input costs and limited energy and metals investment threaten the buildout. He cited Jeff Currie’s argument that copper supply must expand sharply and said few new copper mines had opened in recent years.

Jack Mallers
Hacks, AI and Elections - WTF is going on? • Nov 3
- Mallers reported a $6.3 billion Binance hack, a $40 million theft from Brazilian exchange Mercado Bitcoin, and an unconfirmed report of more than $100 million stolen from an EU entity; he said Binance covered nearly all customer losses.
Also discussed on this episode: (13)
Macro (2)
- Jack Mallers says Scott Bessent’s Treasury buybacks target unwanted long-term debt while the government issues short-term debt, reducing bond volatility but adding inflationary pressure.
- Mallers argues that government borrowing and AI companies’ debt issuance compete for finite capital, forcing debt refinancing to draw liquidity away from equities, real estate, Bitcoin, and gold. He says AI firms have shifted from funding investment with cash to borrowing.
Europe (2)
- Mallers says foreign ownership leaves France exposed to capital flight: the euro has weakened against the yen, the France-Germany debt spread has widened, and the country’s largest bank has fallen from its highs.
- French lawmakers proposed a tax on internet traffic to raise budget revenue, charging based on the amount of content accessed; Mallers framed it as a response to government finances that preserves spending instead of cutting it.
Elections (1)
- Prediction markets favored Democrats sweeping the U.S. midterms, while Mallers said investors could also be reacting to tightening liquidity; he treated the election’s market impact as uncertain.
Iran (1)
- Mallers reported Tucker Carlson’s warning of renewed U.S.-Israeli action against Iran and a Connecticut senator’s concern that attack plans could target civilian infrastructure and prolong the war. Trump later said he would not strike Iran after the midterms; Mallers also cited Zelensky’s warning of Russian escalation in Ukraine.
AI & Tech (2)
- Mallers sees Microsoft’s planned buyouts as evidence that AI can let revenue rise while headcount falls, accelerating white-collar job displacement; he says Strike has also grown revenue per employee despite the bear market.
- Jeff Bezos argues that industrial bubbles can wipe out investors while leaving useful infrastructure behind, as happened with biotech and fiber optics. Mallers applies that distinction to AI: the technology may endure even if much of today’s investment proves worthless.
BTC Markets (2)
- Mallers says the Nasdaq’s 10% decline and scarce liquidity may explain weak risk assets, while Bitcoin’s smaller weekly loss suggests relative strength. He cautions that Bitcoin could still fall further and recommends reducing leverage.
- Mallers treats Bitcoin and crypto markets as leading indicators because they trade continuously and face less central intervention. He says FTX’s collapse preceded Silicon Valley Bank’s failure, and expects cyberattacks to reach traditional services after appearing in crypto.
Safety (2)
- Mallers says AI makes vulnerability discovery and exploitation easier, while security fixes still fail if users do not install them. Disclosed software vulnerabilities rose sharply year over year; he expects stronger software eventually but sees a painful transition.
- Strike’s account safeguards include two-factor authentication for protected actions, withdrawal limits with a five-day change delay, remote device sign-out, and email verification codes. Mallers said trusted withdrawal addresses with the same delay were planned.
Digital Sovereignty (1)
- Mallers cited refrigeration disruptions across European countries that reportedly spoiled supermarket food, alongside a separate Washington, D.C. power outage affecting traffic lights and federal facilities including the State Department.

Marty Bent
Ten31 Timestamp: The S-1 Also Rises • Nov 2
- Binance reported a $6.3 billion theft after a North Korean spy allegedly socially engineered an engineer and accessed a laptop, enabling withdrawals across multiple chains. Binance paused withdrawals, set aside $6.34 billion to cover losses, and later reopened withdrawals.
- The Binance attackers reportedly swept 18,000 bitcoin and other assets, then used stablecoins in DeFi to borrow ETH and Solana before stablecoin freezes blocked that route. The guest notes Bitcoin fell below $77,000 but remained above a key long-term moving average, echoing past exchange shocks that preceded a market bottom.
- The guest argues Bitcoin’s limited protocol surface reduces security risk compared with chains built around more complex smart-contract systems. The Binance attack reportedly used Ethereum’s EIP-7702 delegation feature, which lets ordinary accounts act like smart contracts.
Also discussed on this episode: (13)
Enterprise (3)
- Anthropic’s S-1 showed substantial profitability and enterprise adoption: the company reported nearly $1 billion in GAAP operating income in Q2, with almost 12,000 customers spending over $100,000 annually.
- Anthropic’s amended S-1 reported Q3 revenue of about $17 billion, up 1,127% year over year, and nine-month revenue of $33.2 billion; it also disclosed $895.4 billion in cumulative compute purchase and lease commitments.
- The guest argues that AI returns are becoming measurable beyond technology companies. Microsoft planned buyouts or cuts affecting roughly 60,000 employees, about a quarter of its global workforce, while executives tied the savings to funding AI investment.
AI Infrastructure (3)
- The guest says the $895.4 billion commitment figure overstates firm liabilities because agreements vary in timing and can depend on compute providers meeting performance conditions; even a fraction would still represent a major capital burden.
- Anthropic expects to spend more than $800 billion on computing infrastructure through 2045, and Blackstone reportedly expects a high-junk credit rating after the IPO rather than an immediate investment-grade rating. The guest says stronger cash flow could eventually lower financing costs.
- The four major hyperscalers turned free-cash-flow negative as AI spending rose, even as Q3 U.S. GDP growth reached 3.4% and manufacturing PMIs hit their highest level since May 2022. Publicly held U.S. debt also crossed 100% of GDP.
Models (2)
- Anthropic allocated 72% of first-half compute to training, research, and internal use, while 25% served paying customers. The guest says shifting training capacity to inference could quickly increase supply, while falling token prices require much faster user growth.
- The guest sees frontier labs moving toward internal drug discovery and other vertical businesses, where they could capture value from their strongest models directly. Partnerships or joint ventures may limit channel conflict with customers that rely on the same labs for tokens.
Markets (1)
- Markets punished crowded AI-related positions as expectations met execution risk: Intel suffered its worst single-day move since 1974, and Morgan Stanley data showed the largest recorded monthly hedge-fund reduction in exposure during October.
Big Tech (1)
- Google’s AI search mode may monetize less effectively than traditional search, while Reddit’s CEO cited search-related traffic concerns. Marty Bent sees Meta’s ad targeting and user engagement as a potential advantage over Google’s search advertising.
Elections (1)
- Brazil’s election result reversed a market rally driven by expectations of a Bolsonaro win: Lula prevailed, Bolsonaro left the country, and Brazil’s ETF and equities sold off. The guest says Lula’s win complicates U.S. efforts to counter China’s growing regional influence.
Diplomacy (1)
- The guest says U.S. access to Brazilian rare-earth minerals and broader efforts to strengthen ties across Latin America now face a political setback. Trump’s suggestion that Venezuela could become a prosperous 51st state showed the administration’s continuing interest in the region.
Coding (1)
- A Coinbase exercise pointed frontier AI models at Bitcoin Core for weeks and produced two minor bugs, both since patched. The guest says the result reinforces Bitcoin’s status as a heavily reviewed codebase with a comparatively small attack surface.
#806: The Switch That Unlocks Institutional Bitcoin with Baron Koch • Nov 2
- Marty Bent said the reported Binance breach involved $6.3 billion and 18,000 bitcoin, yet Bitcoin fell less than 5% and remained above the night's lows. He contrasted that reaction with the roughly 20% drop after FTX collapsed in 2022.
Also discussed on this episode: (16)
Banking (2)
- Baron Koch spent nearly two decades managing endowments, pensions, and corporate balance sheets, with portfolios in the $3 billion to $4 billion range. That experience informs his view of how institutions evaluate new assets.
- Baron Koch traces his skepticism about conventional finance to studying formulas he felt did not match reality, then starting work in 2008 as the financial crisis unfolded. A hospital ransomware incident involving a frozen surgical machine first put Bitcoin in front of him.
BTC Markets (4)
- Marty Bent argues that central-bank currency debasement strengthens Bitcoin's safe-haven case. Baron Koch says Bitcoin's macroeconomic setup has improved faster than he expected, as public discussion of dollar dominance and sovereign debt has widened.
- Baron Koch says Bitcoin still trades mainly on technical signals such as moving averages and fund flows, while a mature market should balance technical and fundamental analysis. He expects investors to focus more on Bitcoin's role in the financial system as that balance shifts.
- Baron Koch compares Bitcoin's market development with older commodities: peer-to-peer trading gives way to exchange price discovery, derivatives, static hedges, and finally active risk management. He says Bitcoin is at the static-strategy stage, where covered calls and protective puts can leave holders exposed to sharp rallies.
- Baron Koch warns that Bitcoin yield products sell risks that investors often misunderstand, especially when returns come from selling upside or taking on counterparty exposure. He says covered strategies can suffer sharply in consecutive rallies, while compressed yields may no longer justify the risk.
Custody (1)
- Baron Koch sees cyberattacks and centralized custody failures as a reason investors may rethink what counts as safety. If people seek direct control of their money, he warns that bank runs could expose the limits of fractional-reserve banking.
Adoption (2)
- Baron Koch says institutional Bitcoin adoption can switch quickly once investment committees move from asking why they should buy it to asking why they have not. Career risk drives that change, and a small number of senior decision-makers can redirect enormous pools of capital.
- Baron Koch says institutions must decide which portfolio bucket can hold Bitcoin, given investment-policy rules and governance. He sees JPMorgan's long-term return assumptions and early allocations by Harvard and Wisconsin as signals; Marty Bent cited a Franklin Templeton fund with 95% stocks and 5% Bitcoin.
Macro (1)
- Baron Koch points to Stephen Miran's paper, "A User's Guide to Restructuring the Financial System," as a map of the administration's tariff and reserve-currency plans. Koch says the paper treats Treasury selling as the plan's weak point and raises a possible Mar-a-Lago Accord to rewrite financial rules.
Stablecoins (1)
- Marty Bent argues that stablecoin legislation could support demand for short-term Treasuries as foreign appetite weakens. He also cited the GENIUS Act and a proposed Bitcoin Strategic Reserve Act as signs that U.S. policy is shifting toward digital assets.
Markets (3)
- Brains acquired a team of veteran commodity traders to develop systematic Bitcoin risk-management strategies, including trend-following and mean-reversion approaches. Baron Koch says the product is aimed at miners, Bitcoin treasury companies, and family offices, with education and live performance still needed to scale it.
- Baron Koch says managed futures can serve as portfolio insurance rather than a large Bitcoin allocation, with a possible ceiling of 10% to 15%. The strategy can also diversify Bitcoin-heavy investors into related exposures such as copper and natural gas.
- Baron Koch says a robust Bitcoin futures program is difficult to run below $2 million to $3 million in notional exposure because small positions create rounding and execution problems. Futures reduce the cash needed to implement the strategy to roughly 20% to 30% of notional.
Mining (1)
- Baron Koch says hash-rate and mining-difficulty derivatives need more participants before they become liquid and useful. He also sees cultural resistance to hedging among miners, who often prefer Bitcoin's full upside, while industrial heat reuse and demand response could broaden the kinds of mining businesses willing to manage price risk.
Philosophy (1)
- Baron Koch says living on a Bitcoin standard is more volatile but more honest, and he sees that honesty as a source of hope for capital allocation and culture. Marty Bent expects continued disruption as society moves faster into the digital age.


