Privacy (7)

• Q and A says attackers exploited two linked flaws in Foundation’s self-hosted Cal.com and credential-management software, then sent more than 23,000 branded phishing emails to 21,500 addresses on October 25.
• The breach exposed names, email addresses, order details, and archived support conversations; some records also contained postal addresses, phone numbers, and partial card details. Foundation says Passport and Envoy devices, software, and customer funds were unaffected.
• Q and A says old WooCommerce records remained in database copies despite appearing redacted in the admin panel, while Shopify data had not yet been redacted. Foundation accepted responsibility for retaining data it believed was gone.
• Max argues that customers should share as little personal information as possible, even while expecting companies to protect data they collect. He recommends using a P.O. box or buying in person when practical, rather than giving vendors a home address.
• Q and A recommends Have I Been Pwned to check whether an email appears in known breaches, while noting it only checks email addresses. For changing contact details, he suggests listing accounts, using carrier forwarding where available, and updating services directly.
• Max says Chainalysis disclosed that an outside attacker accessed user IDs, names, email addresses, and organization roles, then later found that usernames, password hashes, and live tokens were exposed. Its screening products went offline temporarily; the company said investigation content was not accessed.
• Max says Bull Bitcoin made Payjoin the default for on-chain buys and sells through its wallet exchange. Payjoin breaks the assumption that every transaction input belongs to one sender, though the exchange still knows the transaction and a first purchase into an empty wallet cannot use it.

Safety (3)

• Q and A says companies must test their systems as attackers would and check how connected software can be exploited together. Foundation is reviewing old software and considering less self-hosting, since running more code itself also increased maintenance and attack exposure.
• Max says a 23-year-old crypto holder in France, targeted for a second time since 2022, was sentenced after firing at attempted kidnappers who were fleeing his father’s home. Max condemns the sentence and warns that public displays of wealth can expose holders to physical attacks.
• Max reports that Russian police arrested five men accused of holding a programmer in a garage for five hours and forcing him to send 10.4 BTC. The attackers allegedly chose him after seeing luxury cars in his social-media photos.

Custody (4)

• Max and Q and A favor separating Bitcoin activity from experimental AI use. Max suggests keeping Sparrow and a Bitcoin node off an AI-running computer; Q and A prefers a dedicated Bitcoin device and isolating AI access to other personal data.
• Q and A says meeting Bitcoin builders at BTC Amsterdam eased his pessimism; he gave a talk on human-authority hardware. Max argues continued work matters because Bitcoin tools can help people resist growing financial control and leave more freedom to their children.
• Max says Cake Wallet 6.5.3 adds Bluetooth support for the BitBox02 Nova on iPhone and iPad, including a pairing-code check, and adds BTC Map support.
• Max says Liana 16 makes Taproot the installer’s recommended default, changes encrypted descriptor backups to BIP-138 format, and adds a privacy mode. The upgrade migrates the wallet database irreversibly, so users must back up the descriptor before updating.

Lightning (3)

• Max reports that the LNbits team told operators to shut down after attacks on its paywall extension, then took hosted my.lnbits.com offline. BitTipBot reported 2.2 million sats withdrawn; LNbits said patches would follow, but no official release was available.
• Max says Electrum 4.8.4 drops incoming onion messages to prevent malformed messages from disconnecting Lightning peers, rejects channel announcements with identical node IDs, and fixes restoration of older seeds. He urges users to install the security release.
• Max says Core Lightning 26.06.10 fixes reported vulnerabilities involving dual funding, splicing, and peer signature checks. He urges node operators to update and avoid keeping more funds hot than necessary.

Payments (1)

• Max says attackers exploited an older BTCPay Server vulnerability to drain hot wallets; servers on version 2.4.2 or later were unaffected, as were wallets whose keys stayed off-server. He advises taking outdated servers offline and keeping only necessary funds hot.

Regulation (1)

• Max says FinCEN and the Federal Reserve withdrew a proposal to lower the cross-border travel-rule recordkeeping threshold and explicitly include crypto. The existing $3,000 threshold remains; Coin Center also noted earlier hosted-wallet and mixing proposals had been dropped.

Banking (1)

• Max says ZachXBT flagged about $133 million stolen from French bank Crédit Mutuel Arkéa; the bank later said attackers compromised a service provider, wired money through bank accounts, then converted it to crypto. Max speculates some crypto hacks could be state-sponsored efforts to promote regulation and centrally controlled stablecoins.

Energy (2)

• A listener pointed to Edison Motors’ diesel-electric trucks, which use available parts and are described as having electric operation with diesel range for remote areas. Max said he was unfamiliar with the design and did not endorse the claim.
• Max preferred a new analog, manual Porsche over a Tesla, describing it as a higher-end model above the 911 and saying he expected a flat-eight engine. The discussion contrasted its simple, low-screen interior with newer tech-heavy cars.

BTC Markets (1)

• Marty Bent reviews Bitcoin network metrics as the asset trades around $75,420 with a $1.52 trillion market cap. The network approaches its next difficulty adjustment with an estimated 3.3% downward revision.

Elections (1)

• Thomas Pacquia argues the midterm elections signaled a broad voter rejection of current economic policies, predicting intensified data center and mining moratoriums under incoming Democratic leaders like Elizabeth Warren on Senate Banking.

Banking (1)

• Marty Bent highlights systemic fragility across international banking, noting Paraguay's Ueno Bank shutdown triggered civil unrest and executive resignations. These incidents underscore the structural necessity of multi-signature Bitcoin self-custody over centralized financial entities.

Open Source (2)

• Developer Calle warned of rising burnout among open-source Bitcoin maintainers facing immense pressure from managing monetary software. Marty Bent stresses the urgency of supporting developer grants and independent security initiatives to sustain the protocol ecosystem long term.
• Marty Bent warns BTC Pay Server users that version 2.4.1 and earlier contain an unpatchable zero-day vulnerability. Operators must deploy completely fresh servers rather than applying software updates to secure their payment infrastructure.

Regulation (1)

• Marty Bent and Thomas Pacquia expect World Liberty Financial to draw heavy Congressional subpoenas once Democrats assume key committee chairmanships. They argue the project created an avoidable political target for crypto opposition.

Privacy (1)

• Marty Bent announces Bull Bitcoin implemented PayJoin for exchange deposits and withdrawals to break common-input ownership heuristics. The company is simultaneously taking legal action against French authorities to contest invasive KYC and AML regulations.

Europe (1)

• Thomas Pacquia identifies France as a potential catalyst for European economic instability due to unsustainable debt burdens, strict regulatory friction around technology, and an inability to independently print fiat currency to relieve fiscal deficits.

Labor (1)

• Marty Bent criticizes Pennsylvania Governor Josh Shapiro's proposed minimum wage increase, citing Thomas Sowell to argue that price floors create unemployment and compound cost-of-living pressures driven primarily by central bank inflation.

Stablecoins (1)

• Samsung plans to deploy USDC stablecoin wallets across 82 million Galaxy mobile devices for cross-border payment rails. Thomas Pacquia notes this expands user familiarity with digital assets, though without self-custody guarantees.

Physics (1)

• Physical Superintelligence published a machine-verified proof of the Aaronson-Banas conjecture using the Lean language. Marty Bent notes the finding establishes mathematical limits showing quantum computers offer only polynomial speedups over classical computing under general conditions.

Regulation (4)

• Democrats won both chambers in the 2026 midterms, putting the stalled CLARITY Act back into negotiation. Shri Thanedar supports a path forward with stronger ethics rules, while Democrats are considering broader consumer protections and a larger SEC role.
• David Bennett expects crypto firms including Coinbase to accept stricter U.S. rules rather than risk years in regulatory limbo or losing business to compliant competitors. Bennett says the CLARITY Act must address Donald Trump’s crypto ventures as conflicts of interest.
• Greece approved a 10% tax on net crypto capital gains, effective in 2027, with gains up to €500 exempt and losses carried forward for five years. Crypto-to-crypto swaps remain untaxed; purchases will also face source-of-funds checks.
• A Department of Labor final rule that could ease crypto and other alternative assets into 401(k) menus reached White House review. The proposal gives fiduciaries a process-based safe harbor, reducing litigation risk without requiring plans to offer crypto.

Labor (1)

• The October U.S. jobs report showed 165,000 new jobs, far above the 65,000 estimate, while September’s reported gain was revised from 29,000 to 60,000. David Bennett called the figures unreliable; traders increased bets on a December Fed rate hike.

Markets (1)

• Markets rallied after the jobs report: the Nasdaq 100 futures gained 1.5% and the 10-year Treasury yield rose to 4.894%. Bitcoin traded near $75,870, while oil, gold, silver, and other commodities were mixed.

Elections (2)

• David Bennett criticized AIPAC’s access to U.S. lawmakers and argued that foreign lobbying should not shape congressional decisions. Jason High speculated that Israel could be blackmailing or threatening Donald Trump over Iran; Bennett said he could not judge that claim.
• A listener argued that presidents should face a maximum age of 65 at inauguration, contrasting that proposed cap with the existing minimum age. David Bennett praised the comment but did not offer a policy position on the age limit.

Protocol (1)

• Bitcoin developer Cory Fields proposed quantum “landmines” that require a thief to lock matching Bitcoin collateral before spending vulnerable coins. Owners could reveal proof during a delay to reclaim their coins and seize the collateral, but moving one’s own funds could also require matching collateral.

Psychology (1)

• David Bennett doubts quantum landmines would gain adoption because they add complex steps and collateral requirements. He used the proposal to question whether increasingly layered digital security can keep pace with quantum threats, while noting that physical money creates its own costly barriers.

AI Infrastructure (1)

• OpenAI promised that communities near campuses it owns and operates would not pay for its electricity needs, with public energy and water reporting and independent noise studies. The compact specifies no penalties, enforcement process, or independent verification, and does not clearly cover partner-owned facilities.

Custody (1)

• South Korean exchange GOPAX suspended trading and withdrawals after receiving a hacking-threat email, saying it would move customer assets into cold wallets. David Bennett questioned the explanation, arguing that a warning could be a pretext for the exchange to restrict access to funds.

Elections (1)

• Tony Greer argues that the midterm result opened a new period of uncertainty around AI data-center construction, chip demand, and possible state-level restrictions; he also expects government-shutdown threats to return within months.

Markets (6)

• Tony Greer and the host see 2018 as a useful midterm parallel: stocks fell after the election through late December, while the current reversal followed a day of broad, crowded-position rallies. Greer warns that hedge roll-offs are not reliable market signals.
• Tony Greer favors gold and gold miners into year-end, arguing that gold held up through equity turmoil and reclaimed ground after a brief breakdown. He sees resource stocks surviving a technology repricing, though he says gold may struggle while the semiconductor bubble unwinds.
• Tony Greer describes the market’s sharp reversals as a leverage washout, not a clean change in index direction. He counted broad sector rallies before the full reversal and said the bond market’s muted response suggested the stress remained concentrated in equities.
• Tony Greer likes homebuilders as a possible refuge from the semiconductor selloff: the sector stayed flat for the year despite high diesel and mortgage costs, and rallied when bonds strengthened. He says the setup merits attention if rates ease.
• Tony Greer builds into wanted trades with three entry paths: a lower bid, a smaller buy-stop above the market, and a time-based commitment if neither triggers. He cited putting on 20% of the position by Friday, then adding and managing risk as the trade develops.
• A host sees the dollar strong overall but the yen holding up against it, alongside firm bonds and a forming gold base. The host treats those moves as signs that defensive assets may lead while high-beta momentum weakens, but offers no specific FX trade.

Fed (1)

• Tony Greer says the bond-market low in October supports a bullish bond view, while a host sees a growth slowdown developing despite rate hikes still priced in. Greer says oil would need a sustained rally above $110 to threaten that bond low.

Chips (1)

• Tony Greer is bearish semiconductors after the chart broke down, and says there is room for further losses before support. He expects technology to reprice after running too far ahead, while natural resources and basic materials hold up better.

Energy (1)

• Tony Greer sees oil as a high-risk trade because Iran negotiations and U.S. political decisions can quickly reverse prices. He would consider a small long near the 200-day moving average, with $2 of risk, rather than assume peace talks have resolved the supply threat.

AI Infrastructure (1)

• The hosts point to conflicting signals in AI finance: Goldman Sachs initiated a buy rating on CoreWeave credit while a reported portfolio of data-center loans went up for sale. They also question aggressive SpaceX valuation targets and the push to distribute AI-related IPO exposure to retail investors.

Society (1)

• Tony Greer criticizes Scott Galloway’s description of Elon Musk as a traitor and comparison to the Rosenbergs, calling the remarks out of line. The exchange treats the episode as an example of political polarization spilling into public commentary.

Markets (2)

• The hosts describe a sharp technology-led selloff after the midterms: semiconductor and AI-infrastructure stocks fell hardest, while they debate whether the move marks an AI bubble bursting or a correction.
• Coinbase reported $590 million in trading revenue, with prediction-market revenue offsetting lower spot volume; subscriptions and services supplied 49% of net revenue, while Brian Armstrong filed a plan allowing sales of 24% of his shares at preset prices.

Elections (1)

• The hosts call the midterms a Democratic sweep, linking the result to voter concerns about affordability, energy prices, the war, and ICE enforcement; they say Trump-aligned assets fell while the broader market initially rallied.

BTC Markets (2)

• Bitcoin briefly topped $80,000 after the election, then set a new local low near $75,500; the hosts viewed its hold near the 50-week moving average as resilient, while ETH was roughly flat on the week.
• Strategy’s preferred security STRC briefly returned to $100 after trading below that level for 174 days; the hosts warned that convertible debt coming due over the next six to nine months could require Michael Saylor to raise cash if MSTR remains below conversion thresholds.

Regulation (1)

• The hosts expect Democrats to scrutinize Trump-related crypto ventures but see little evidence of a renewed effort to suppress the whole industry; they warn that banks could seek stablecoin-yield restrictions through a revised Clarity Act.

Protocol (5)

• Polygon validators froze stolen tokens and discussed a chain rollback, while hackers offered a large transaction fee and contacted validators privately to induce them to release the funds; the hosts framed this as a test of validator discretion and chain immutability.
• Justin Drake moved Ethereum’s post-quantum target forward, proposing post-quantum transactions, attestations, and data sampling by December 2028; he cited LeanVM’s end-to-end formal verification milestone as a reason the accelerated schedule may be achievable.
• The Ethereum Economic Zone would let participating rollups access Ethereum mainnet liquidity; Gnosis plans to become the first such chain, while the hosts expect distribution-heavy L2s such as Coinbase’s and Robinhood’s to have less reason to join.
• L2BEAT rebranded as ETHBe to broaden its remit from monitoring L2 control over users to protecting sovereignty across Ethereum’s L1 and intermediated services, including node providers and smart contracts.
• Vitalik Buterin’s 15-minute Devcon keynote focused on user privacy, health data, social platforms, and defensive acceleration rather than Ethereum or DeFi; Georgios criticized the lack of project direction, while the hosts saw the talk as evidence of Buterin’s broader focus.

Banking (1)

• Hackers allegedly stole about $130 million from French bank Crédit Mutuel through a third-party system, sent funds to mule accounts, then moved fiat through crypto exchanges into stablecoins; onchain analyst ZachXBT flagged $106 million before the bank story was public.

Coding (1)

• Paradigm and Georgios shipped Solar, which the hosts described as making Solidity 100 times faster; they cited the release as evidence that prominent critics of Ethereum’s direction still contribute to its developer ecosystem.