Learn Cardano Podcast

This Cardano news update covers a difficult run of ecosystem security incidents alongside several important signs of progress. Peter walks through the compromised IOG YouTube channel, the SecondFi recovery process, the Splash ADA/OADA breach, and why better security practices still matter for users and builders.

The episode then shifts into the constructive side of the update: Cardano Foundation joining Mastercard’s Crypto Partner Program, Midgard Labs taking over Plutus engineering, Bifrost testing with SPOs, browser-based Cardano node work, x402 support for Cardano payments, AlphaGrowth’s PRIME RFPs, DraperU reflections, and upcoming TOKEN2049 events.

Chapters:
0:00 Intro and market context
1:05 IOG YouTube channel compromise
2:03 SecondFi recovery progress
4:14 Dano and Splash incidents
6:05 Mastercard partner program
7:08 Midgard Labs takes on Plutus
9:04 Bifrost Bitcoin DeFi testing
12:07 USDM DeFi coalition
13:39 Cardano node in browser
15:39 x402 payments on Cardano
17:34 AlphaGrowth PRIME RFPs
20:50 DraperU product lessons
25:23 TOKEN2049 and wrap up

What you'll learn:
- Several recent security incidents show why users still need to be cautious, including the compromised IOG YouTube channel and the Splash ADA/OADA pool breach.
- SecondFi’s asset recovery work is progressing through audits, with a zero-knowledge proof flow designed to let affected users reclaim assets into a new wallet.
- The Cardano Foundation joining Mastercard’s Crypto Partner Program creates another bridge into mainstream payments and stablecoin conversations.
- Midgard Labs taking over Plutus engineering, Bifrost testing with SPOs, and Cardano node work in the browser all point to practical infrastructure progress.
- Cardano’s x402 implementation has moved into the official repository, giving agent-to-agent payment builders a clearer standard to work from.
- AlphaGrowth’s PRIME RFP process and DraperU reflections highlight the need to build Cardano DeFi products that solve clear market problems.

Links & References:
The Bad:
- https://link.learncardano.io/oq7n7y
- https://link.learncardano.io/SUDXox
- https://link.learncardano.io/Cy6MqK
- https://link.learncardano.io/BibrNH
- https://link.learncardano.io/ebJBtr
- https://link.learncardano.io/HP5zAR
The Good:
- https://link.learncardano.io/3SwoVK
- https://link.learncardano.io/QBbGpB
- https://link.learncardano.io/AyZuo6
- https://link.learncardano.io/b4W5YS
- https://link.learncardano.io/fG94f4
- https://link.learncardano.io/0I9If5
Cardano Node in the Browser:
- https://link.learncardano.io/yi8bqr
- https://link.learncardano.io/nBaxlQ
Agentic x402:
- https://link.learncardano.io/V763Zt
- https://link.learncardano.io/luqjAA
DeFi and Real Growth:
- https://link.learncardano.io/O5RYjq
- https://link.learncardano.io/T8hRSr
Token2049:
- https://link.learncardano.io/C2CRVZ
- https://link.learncardano.io/uENuuB
- https://link.learncardano.io/IOvEgW
- https://link.learncardano.io/eK5tDE
Content Schedule:
- https://link.learncardano.io/3N3rAx

Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv

Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice.

DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.

🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k

Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/

Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano

The introduction of AUSTRAC's travel rule has significant implications for cryptocurrency transactions in Australia. From 1 July, AUSTRAC's travel rule means that all transactions through regulated exchanges require identifying information from both the sender and receiver, regardless of the amount. This creates challenges for individuals like Troy Hunt, who faced difficulties when a small crypto donation required extensive reporting, highlighting the complexities of compliance in the current landscape.

In this episode, Peter sits down with Mena, the CEO of CoinStash, to discuss the nuances of the travel rule and its impact on users engaging in staking and crypto transactions. They explore the challenges faced by those receiving staking rewards and the implications of reporting requirements, particularly for amounts as low as $6. Peter provides practical steps for viewers to navigate these changes, emphasising the importance of self-custody wallets and compliance with upcoming regulations.

Chapters:
0:00 The $6 Crypto Problem
0:22 AUSTRAC Travel Rule
0:39 No Minimum Threshold
1:55 Self-Custody Wallets
2:17 Staking Rewards Edge Case
4:34 What Users Can Do
9:15 Self-Hosted Wallet Deadline
9:39 Wrap Up

What you'll learn:
- AUSTRAC's travel rule requires identifying information for all cryptocurrency transactions, regardless of the amount, creating compliance challenges for users.
- Troy Hunt's experience with a $6 crypto donation illustrates the burdensome reporting requirements imposed by the travel rule.
- CoinStash CEO Mena highlights the need for clarity in the reporting process, especially for staking rewards and transactions involving third parties.
- Users are encouraged to set up self-custody wallets to streamline compliance and reduce friction in transactions.
- The travel rule's implementation means that exchanges with robust compliance measures will have a competitive advantage over smaller exchanges.
- Reporting on transfers involving unverified self-hosted wallets will begin on March 31, 2029, providing a limited window for users to adapt.
- The current regulatory environment necessitates a proactive approach to crypto management, including whitelisting wallets and understanding self-custody.
- Staking rewards remain a grey area under the travel rule, with no clear guidance on how to report them effectively.

Links & References:
Troy Hunt X Post on Donation:
- https://link.learncardano.io/EBnk6R
Have I Been Pwned:
- https://link.learncardano.io/PwTOrO
The travel rule:
- https://link.learncardano.io/Z6geXE
Travel rule overview:
- https://link.learncardano.io/XJEeTq
Why am I being asked for additional verification when depositing and withdrawing crypto? (Travel Rule):
- https://link.learncardano.io/p8slOx
How to manually verify a crypto deposit with screenshots:
- https://link.learncardano.io/6YXcp9
Previous Video about the Travel Rule:
- https://link.learncardano.io/HcACJn

Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv

Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice.

DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.

🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k

Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/

Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano

The episode highlights the launch of the Web3 Bounty platform, a new initiative aimed at attracting talent and projects to the Cardano ecosystem. This platform, inspired by successful models in other ecosystems, seeks to incentivise community members to participate in various tasks, from content creation to bug reporting, thereby enhancing engagement and development within Cardano. With the backing of the $80 million Orion Fund and participation in the Draper Dragon Genesis program, this initiative is timely and crucial for fostering growth in the Cardano community.

Peter breaks down the concept behind the Web3 Bounty platform, sharing insights from his experiences with similar initiatives. He explains how this platform will operate on a testnet, allowing users to contribute and earn rewards for their efforts. Viewers will gain an understanding of the platform's goals, the potential benefits for the Cardano ecosystem, and Peter's personal journey as he refines this project during his time in San Francisco. This episode serves as an invitation to the community to engage with and support the development of the Web3 Bounty platform.

Chapters:
0:00 Orion Fund And Good News
0:35 Web3 Bounties Idea
1:16 Superteam Inspiration
2:04 Platform On Testnet
2:37 How Bounties Work
3:07 San Francisco Build Plans
3:54 Wrap Up

What you'll learn:
- Peter introduces the Web3 Bounty platform, designed to attract talent and projects to the Cardano ecosystem.
- The platform allows community members to earn rewards for completing tasks such as content creation and bug reporting.
- Inspired by successful bounty systems in other ecosystems, the Web3 Bounty platform aims to enhance engagement and development on Cardano.
- The initiative is supported by the $80 million Orion Fund and participation in the Draper Dragon Genesis program.
- Peter shares his personal experiences with bounty platforms, highlighting their value in fostering community involvement.
- The Web3 Bounty platform is currently in testnet phase, inviting users to provide feedback and report issues.
- Peter plans to document his journey of refining the platform while in San Francisco, encouraging community engagement.
- The episode emphasises the importance of community support in building a robust ecosystem for Cardano.

Links & References:
It's Official I'm Going to San Francisco:
- https://link.learncardano.io/y7s3hZ
The Genesis Program:
- https://link.learncardano.io/3gQ2oZ
Web3 Bounties on Testnet:
- https://link.learncardano.io/SwmbTC

Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv

Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice.

DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.

🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k

Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/

Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano

The Australian government is exploring the use of superannuation funds for local investment, sparking significant debate about the future of retirement savings. Prime Minister Anthony Albanese has suggested that instead of investing heavily overseas, these funds could be directed towards Australian infrastructure and projects, which could potentially benefit the economy. This shift raises concerns about the government's role in managing private retirement funds and the implications for individual investors.

Chapters:
0:00 Intro
3:08 Australian Superannuation Overview
10:28 Investment in Local Projects
19:40 National Recovery Fund Explained
25:48 Concerns from Financial Experts
32:29 Government's Role in Superannuation
41:00 Future of Superannuation Funds
48:00 Wrap Up

What you'll learn:
- Prime Minister Anthony Albanese proposes using superannuation funds for domestic investment in infrastructure and clean energy.
- Westpac's CEO Anthony Miller warns against government interference in superannuation fund management, stating that funds should operate independently.
- The chairman of Australian Super, Don Russell, emphasises that super funds are not tools of foreign policy and should focus on returns for members.
- While the government cannot dictate super fund investments, it can create policies to encourage investment in Australian projects.
- Concerns exist about ensuring returns on investments made with superannuation funds to avoid mismanagement and losses for members.
- The government is facing a looming retirement funding gap as more Australians retire and rely on pensions, prompting the need for strategic investment solutions.

Links & References:
'Don’t direct it': Westpac chief executive demands Anthony Albanese, Labor avoid dictating superannuation investment:
- https://link.learncardano.io/CXUXSM
Westpac chief tells Labor to stay out of super:
- https://link.learncardano.io/uoPTl1
Super system should evolve without re-engineering by government:
- https://link.learncardano.io/uc18qu
Australia's PM Albanese and Trump sign rare earths deal as US confirms Aukus defence agreement:
- https://link.learncardano.io/d6NyyL
Fact Sheet: President Donald J. Trump Closes Billion-Dollar Deals with Australia:
- https://link.learncardano.io/G5j9kf
Tax Invest Accounting:
- https://link.learncardano.io/THSJ6s

Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv

Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice.

DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.

🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k

Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/

Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano

SecondFi has released more detail on the wallet security incident that saw about 16.1 million ADA, roughly US$2.6 million, withdrawn from 374 wallets between 21 and 23 June. The update includes a public warning about fake recovery emails, findings from Groom Lake's forensic investigation, and a clearer explanation of the cryptographic flaw involved.

Peter breaks down what SecondFi says happened, including the reported external attacker, the possibility of a second separate attacker, the per-transaction signature issue, and why public transaction data may have been enough to derive affected private key material under certain conditions. The episode also covers the wider discussion around cross-chain wallet code, CTRL Wallet, Yoroi migration, EMURGO tooling and the unauthorised publication of relevant code.

The key safety message is simple: use only official SecondFi channels, do not click recovery emails, never share private keys, and wait for audited recovery and migration tooling rather than trusting anyone offering support through emails, comments or direct messages.

Chapters:
0:00 Fake Recovery Email Warning
1:15 Incident Investigation Update
2:18 Second Attacker Identified
2:56 Cryptographic Root Cause
3:45 Signing Formula Breakdown
5:46 Vulnerable Wallet Library
6:37 CTRL Wallet And Yoroi
8:22 Published Code Question
9:14 SecondFi Wind Down
9:34 Recovery And Migration Tools
11:25 Private Key Safety

What you'll learn:
- SecondFi warned users that fake recovery emails are phishing attempts and that official communication is through its X account and technical support channels.
- SecondFi said the June incident involved approximately 16.1 million ADA, about US$2.6 million, stolen from 374 wallets.
- Groom Lake's independent investigation identified an external actor and suggested the primary operation may be linked to the DPRK-linked Lazarus Group.
- The investigation also identified activity from a second separate attacker affecting a different set of wallets during the same window.
- The root cause described by SecondFi was a subtle cryptographic flaw in how wallet software generated per-transaction signatures.
- The signing issue meant data that should have depended on secret information could under some conditions be computed from public blockchain data.
- SecondFi says the flaw has been patched, new wallets created with corrected software are not known to be affected, and the wallet is being wound down.
- SecondFi is preparing safe migration functionality for early August and a zero-knowledge-proof recovery tool targeted for August after specialist third-party audits.

Links & References:
⚠️ Security Alert: FAKE RECOVERY EMAIL:
- https://link.learncardano.io/m7FsGq
Official SecondFi website:
- https://link.learncardano.io/6llK2P
What happened to SecondFi:
- https://link.learncardano.io/fNJfCu
The signing math:
- https://link.learncardano.io/5Pu20K
Vulnerable Library:
- https://link.learncardano.io/cPTJG9
Andrew Westberg's Opinion:
- https://link.learncardano.io/cVwd7C
EMURGO's internal JS framework Dullahan:
- https://link.learncardano.io/0vu7M5
⚠️ Recovery Update: Bounty Offer Made to Attacker:
- https://link.learncardano.io/lG2331

Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv

Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice.

DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.

🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k

Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/

Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano