Learn Crypto Podcast

A fast-moving security incident affecting Binance-linked wallets was still developing when this episode was recorded. Peter walks through reports of multi-chain outflows, Binance's public updates, and its statement that roughly US$3 billion had been frozen while the estimated impact had risen to about US$6.3 billion.

The episode reconstructs the reported timeline, explains why Tether and Circle freezes mattered, and separates Binance's initial DevOps-laptop explanation from facts that still require a full technical post-mortem. It also covers practical phishing precautions and the risks of concentrating assets with one exchange or wallet provider.

Figures and causes in this episode reflect the sources available during recording and may change as Binance, issuers and investigators publish verified updates. Check official Binance channels before acting on any message or security claim.

Chapters:
0:00 Binance Hacked
0:55 Polymarket and Tampered Ledger Wallets
1:31 The Timeline of the Hack
2:27 Tether and Circle Freeze Funds
2:55 What's Moving Out
3:25 Binance's Official Response
4:13 Watch Out for Phishing Emails
4:47 About $3 Billion Frozen
5:09 Yi He: Binance Will Cover All Losses
5:19 Remember FTX?
5:54 Can Binance Cover It?
7:06 Update: A Compromised DevOps Laptop
8:17 Wrap Up
8:30 Spreading the Risk: OneKey and Tangem

What you'll learn:
- Binance said its initial investigation suggested a compromised DevOps engineer's laptop may have enabled unauthorised withdrawal transactions, while stressing that the investigation was not complete.
- Binance's update put the estimated impact at about US$6.3 billion and said roughly US$3 billion had been frozen on-chain at the time of recording.
- Tether and Circle were reported to have frozen substantial USDT and USDC amounts as issuers and investigators traced affected assets.
- Binance said it would cover losses using the SAFU fund and company funds, but those assurances still require verification against the promised post-mortem and updated proof of reserves.
- Users should verify urgent security messages against official Binance channels and avoid clicking unexpected email links during a high-profile incident.
- The episode discusses spreading custody risk across suitable providers rather than assuming any exchange, software wallet or hardware wallet is immune from compromise.
- OneKey supplied the Classic wallet mentioned near the end of the episode; Peter says any later comparison will be a detailed, honest review.

References:
- X trending context: Binance incident — https://link.learncardano.io/U0tzv6
- X trending context: related security reports — https://link.learncardano.io/lLRanR
- X trending context: incident updates — https://link.learncardano.io/2Bf9Qw
- Initial incident timeline shared on X — https://link.learncardano.io/PJUqfI
- Watcher.Guru asset-flow report — https://link.learncardano.io/zI0rtR
- Binance official incident statement — https://link.learncardano.io/MHcMNx
- Binance official frozen-funds update — https://link.learncardano.io/Q889j0
- Yi He statement on covering losses — https://link.learncardano.io/q77ocX
- Community discussion and solvency questions — https://link.learncardano.io/okNg2k
- Binance initial investigation update — https://link.learncardano.io/40siSn

OneKey supplied the Classic wallet mentioned in the episode. No claim of paid sponsorship is made.

Figures and causes were developing at recording time. Verify updates through official Binance channels. This content is educational only and is not financial advice.

Learn more: https://link.learncardano.io/bQ68Rc
Subscribe: https://link.learncardano.io/u6BDgr

DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.

🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k

Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/

Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano

Critical PHP2Shell and Node.js vulnerabilities arrived alongside reported Fortinet exploitation, Railway and LiteLLM incidents, weak certificate keys and emergency Ruby fixes, creating a week that online discussions dubbed “Black October”. The internet is not ending, but AI-assisted discovery and exploitation are compressing the time defenders have to patch exposed systems.

Peter breaks down how unauthenticated code execution, leaked credentials and compromised trust infrastructure can affect websites, business networks, developer tools and crypto users. He also explains why some services were taken offline as a precaution and why disclosure timing matters when attackers can rapidly adapt public research.

The practical response is straightforward: apply current security updates, confirm hosted PHP versions, protect sites at the network edge, rotate exposed credentials, use saved bookmarks for crypto services and treat urgent security emails as potential phishing attempts.

Chapters:
0:00 Is the Internet Ending?
1:07 Black October
2:08 PHP2Shell
2:46 Governments Take Sites Offline
3:43 Cloudflare and the NSA
4:22 Fortinet Under Attack
6:22 Node.js and the Brotli Bug
7:19 Patches Before Details
8:03 eMudhra's Private Key of 4
10:07 LiteLLM and Stolen AI Keys
10:40 Railway Breach
11:29 So, Is the Internet Ending?
13:11 What to Do This Week
14:25 Crypto Safety Tips
15:44 Wrap Up

What you'll learn:
- Why PHP2Shell reports put PHP and WordPress operators on alert
- What the Node.js Brotli security issue means for developers
- Why Fortinet, Railway and LiteLLM incidents raise credential concerns
- How weak certificate keys can undermine website trust
- How AI is accelerating both vulnerability discovery and exploitation
- What website operators, developers and crypto users should check now

Links & References:
- PHP vulnerability overview: https://link.learncardano.io/pTtf71
- Black October incident overview: https://link.learncardano.io/aKvkVy
- Websites taken offline: https://link.learncardano.io/h31cFK
- OpenAI security tools report: https://link.learncardano.io/puj8I4
- FBI Cyber Division PHP warning: https://link.learncardano.io/fgdWdD
- European agency shutdown report: https://link.learncardano.io/Ch69Ec
- Cloudflare PHP2Shell response: https://link.learncardano.io/TGImTp
- Node.js October 2026 security release: https://link.learncardano.io/262z3H
- Weak certificate private key: https://link.learncardano.io/R4HEcP
- GitLab vulnerability report: https://link.learncardano.io/OGGcGZ
- Railway environment-variable warning: https://link.learncardano.io/r17mL8
- Node.js Brotli discussion: https://link.learncardano.io/urhifT
- Exposed certificate keys report: https://link.learncardano.io/1yj3sA
- Brotli dependency warning: https://link.learncardano.io/5e6kw1
- Ruby emergency patches overview: https://link.learncardano.io/Hz5WvY

Website: https://learncardano.io
X/Twitter: https://x.com/LearnCardano

Disclaimer: This content is for educational purposes only and is not financial, legal or cybersecurity advice. Verify current vendor advisories and follow the remediation provided by the relevant maintainer or qualified professional.

DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.

🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k

Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/

Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano

Hardware wallets have long been treated as the gold standard for crypto self-custody. Recent incidents involving device authenticity, seed generation, supply chains and leaked customer records show that keeping keys offline is only one part of staying secure.

Peter reviews the risks highlighted around Ledger, Keystone, Coldcard, Foundation and Trezor, explains why personal-data leaks can create physical security threats, and explores alternative approaches including Off Wallet on a Game Boy and carefully generated paper wallets. This is an educational security overview—not a recommendation to use any particular wallet or storage method.

Chapters:
0:00 Intro
0:24 Hardware Wallets Under Attack
1:18 This Year's Breaches
1:38 Keystone's Customer Data Leak
2:45 Coldcard: 594 BTC Drained
3:58 Foundation's Cloudflare Breach
4:14 Ledger's Supply Chain Attack
6:25 Your Data and Wrench Attacks
7:03 Ledger's 2020 Data Leak
7:38 Trezor's Shipping Partner Breach
8:01 Wrench Attacks Around the World
8:49 Keep Your Details Private
9:16 Off Wallet: A Bitcoin Wallet on a Game Boy
11:48 Paper Wallets
13:01 Wrap Up

What you'll learn:
- Cold storage reduces online exposure, but hardware, firmware, supply-chain and customer-data risks still matter.
- Customer shipping records can turn a digital security incident into phishing, fake-device or physical-security risk.
- Buying directly, checking device authenticity and limiting the personal details shared with vendors can reduce exposure.
- Off Wallet demonstrates air-gapped Bitcoin transaction signing on a Game Boy without introducing a new hardware supply chain.
- Paper wallets remove vendor data exposure but require careful offline generation, backup and physical storage practices.
- No storage method is automatically safe; verify the threat model and recovery process before moving valuable assets.

Links & References:
Hardware Wallets This Year:
- https://link.learncardano.io/9mu8Jl
Keystone:
- https://link.learncardano.io/90SeYa
- https://link.learncardano.io/fdeGxB
ColdCard Wallet:
- https://link.learncardano.io/ergL0G
- https://link.learncardano.io/gLwxwG
Smaller Hacks:
- https://link.learncardano.io/hzXsdK
- https://link.learncardano.io/mnHNzf
- https://link.learncardano.io/nFfciW
Ledger Compromise:
- https://link.learncardano.io/2VBTs9
- https://link.learncardano.io/iPuro8
- https://link.learncardano.io/CPIk8u
Wrench Attacks:
- https://link.learncardano.io/cn7ZLs
- https://link.learncardano.io/pg4f7O
- https://link.learncardano.io/hgxENc
- https://link.learncardano.io/Jdin1s
- https://link.learncardano.io/SbgjVW
- https://link.learncardano.io/QlZsSy
Off Wallet:
- https://link.learncardano.io/N72CKu
- https://link.learncardano.io/zvv32F
Gameboy Colour:
- https://link.learncardano.io/PA0LF5
Bitcoin Paper Wallet:
- https://link.learncardano.io/BxgDy6

Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv

Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice.

DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.

🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k

Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/

Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano

Originally recorded in April 2026, this Builders Bench conversation with Raul from FluidTokens examines Bifrost, a proposed route for bringing native Bitcoin liquidity into Cardano without relying on a conventional custodial bridge. Raul explains how Bitcoin can be held through a flexible multisignature controlled by participating Cardano stake pool operators, with signing power weighted by delegated stake.

Peter and Raul discuss the 67% stake threshold, how stake pool operators join the network, what an attack would require, and why Bitcoin holders may be interested in borrowing against BTC rather than selling it. The conversation also covers atomic swaps, Cardano’s UTXO model, one-click DeFi experiences and a walkthrough of the Bifrost testnet flow.

Chapters:
0:00 Intro
1:19 What Is Bifrost?
4:20 How Bifrost Secures Bitcoin
8:44 Stake Pool Operators Run the Bridge
10:04 Could Someone Attack It?
11:44 Can Bitcoin Fix Cardano DeFi?
14:57 What Bitcoiners Want
17:44 One-Click Bitcoin DeFi
19:08 Bifrost Testnet Walkthrough

What you’ll learn:
• FluidTokens designed Bifrost to connect native Bitcoin with Cardano while avoiding custody by a single company or bridge operator.
• Bifrost’s Bitcoin multisignature is intended to be controlled by participating Cardano stake pool operators, with signing power weighted by delegated stake.
• The stated signing threshold is 67% of total participating Cardano stake rather than a simple count of stake pool operators.
• FluidTokens’ atomic swaps allow native BTC to be exchanged for Cardano assets without handing custody to a third party.
• Bitcoin-backed borrowing is presented as an early DeFi use case for holders who do not want to sell their BTC.
• Cardano’s UTXO model could help combine borrowing, stablecoin and liquidity actions into a more approachable one-click experience.
• The Bifrost testnet flow uses a redeemable Bitcoin Taproot deposit so users retain a recovery path if the bridge does not process the transaction.

References:
• Raul: https://link.learncardano.io/plOyrH
• FluidTokens: https://link.learncardano.io/I2TCAy
• FluidTokens Bitcoin: https://link.learncardano.io/XTulqm
• FluidTokens app: https://link.learncardano.io/6LpZan
• FluidTokens docs: https://link.learncardano.io/V0BtsW

Educational content only; not financial or legal advice. Do your own research.

DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.

🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k

Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/

Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano

Cardano faces a busy week of regulation, governance and real-world adoption. The Cardano Foundation has responded to the European Commission’s MiCA review, joined a cross-chain call for clearer US treatment of digital commodities, and highlighted why Cardano’s non-custodial staking model should not be treated like custodial staking services.

Peter also examines Toto Finance’s 22 million ADA treasury proposal for a tokenised copper reserve, CIP-23 min-margin changes expected with the Dijkstra hard fork, 100,000 farms registered through 5am.earth, Lovelace Land’s 3D ecosystem map and RealFi’s reported $2.7 million tokenised fund. The update closes with Bitwater, a proposed screw-in water-heater element that uses Bitcoin-mining heat, including Peter’s practical questions about the product and its claimed utility.

The episode begins with a cybersecurity warning and keeps uncertain points clearly framed: Peter has not completed a detailed assessment of the Toto proposal, and his Bitwater discussion is editorial rather than an endorsement.

Chapters:
0:00 Intro and a Word of Warning
1:17 Cardano Foundation Responds to MiCA
2:03 Non-Custodial Staking on Cardano
3:03 What About Australian Regulation?
4:32 ADA as a Digital Commodity
6:14 How Stake Pool Operators Get Paid
7:26 Toto Finance Copper Reserve Proposal
9:56 Treasury Season and Funding
10:32 CIP-23 Min Margin in the Dijkstra Hard Fork
10:54 5am.earth: 100,000 Farms on Cardano
11:55 Lovelace Land: Cardano Ecosystem in 3D
13:30 RealFi Tokenised Fund Hits $2.7M
14:06 Token Terminal Data in Claude
15:07 Bitwater: Heat Water, Mine Bitcoin
17:18 Putting Bitcoin Mining Heat to Use
18:39 Wrap Up

What you’ll learn:
• The Cardano Foundation’s MiCA response argues for rules that distinguish decentralised networks and Cardano’s non-custodial staking from custodial financial services.
• The Cardano Foundation and five other blockchain organisations want US rules to state clearly that digital commodities such as ADA are non-securities.
• Toto Finance is seeking 22 million ADA from the Cardano treasury for a strategic copper reserve, while Peter cautions that he has not yet completed a detailed proposal review.
• CIP-23 min-margin changes are expected to be included in the Dijkstra hard fork, with the aim of helping smaller stake pool operators compete.
• 5am.earth reports 100,000 farm lands in India registered on Cardano, providing a concrete example of on-chain agricultural records.
• Lovelace Land presents Cardano projects and dependencies as a navigable 3D ecosystem map built from public and on-chain data.
• Token Terminal reports a $2.7 million market cap for RealFi’s Cardano-native sUSDrf tokenised fund.
• Heatbit’s Bitwater concept aims to reuse Bitcoin-mining heat in an existing electric water tank; Peter discusses it as an unendorsed product idea and says he was not paid by the company.

References:
• Cardano Foundation and digital commodities letter: https://link.learncardano.io/WovuDk
• Peter’s digital commodities summary: https://link.learncardano.io/1rQT1f
• Cardano Foundation MiCA consultation response: https://link.learncardano.io/25MKLv
• Peter’s MiCA summary: https://link.learncardano.io/YBjvoH
• Toto Finance copper reserve overview: https://link.learncardano.io/EfNrMI
• Toto Finance proposal announcement: https://link.learncardano.io/FOgaaT
• Toto Finance follow-up thread: https://link.learncardano.io/XtlRWb
• GovTool proposal: https://link.learncardano.io/CNXTzT
• CIP-23 min-margin update: https://link.learncardano.io/ylYw8p
• 5am.earth 100,000 farms milestone: https://link.learncardano.io/wk8S1a
• Lovelace Land announcement: https://link.learncardano.io/EWKeRp
• Lovelace Land: https://link.learncardano.io/9lqiJJ
• RealFi and Token Terminal summary: https://link.learncardano.io/aQPb8J
• Bitwater announcement: https://link.learncardano.io/msUyV8
• Heatbit on X: https://link.learncardano.io/wbOFWD
• Bitwater product page: https://link.learncardano.io/M5F1Bf

Disclosure: The Bitwater segment is editorial commentary, not an endorsement. Peter states in the episode that Heatbit did not pay him.

Website: https://learncardano.io
X: https://x.com/LearnCryptoPod

Educational content only; not financial or legal advice.

DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.

🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k

Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/

Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano