The Coldcard exploit drained over $100M from wallets that never touched the internet. How a 2021 firmware bug collapsed seed entropy, what to do with your Bitcoin now, and the AI arms race finding holes faster than teams can patch. Plus: Strategy sold again, Storj went bankrupt, and .bitcoin could become a real domain.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• The Coldcard exploit, explained: a 2021 firmware bug silently swapped seed generation to a weak software RNG seeded by the device ID and the clock, cutting entropy from 128 bits to about 40. Over $100M is tracked stolen on-chain. Dice rolls helped. Stop using Coldcard.
• What now? Brandon's 3-2-1 rule: three wallets, mixed hardware and software, one offsite. Multisig via Bitkey, Casa, or Unchained. Prefer custody? River, Fidelity, BitGo, or AnchorWatch, offering 60 days of free custody as a Coldcard safe haven.
• The AI security arms race: Boltz suspended swaps citing AI-assisted probing, Zeus shut down over a security incident, and BTCPay Server disclosed a critical vulnerability under active exploitation. The red team started by Rob Hamilton and led by calle has scanned 425 projects and filed 1,000+ high or critical findings. OpenSats reimburses the researchers.
• Treasury tracker: Strategy sold 1,637 BTC (~$104M) and bought back $81M of STRC (842,138 BTC held, STRC at $95). Strive +20 (20,020), Block +85 (9,117), American Bitcoin +298 (8,300), OranjeBTC +30 (3,948), Capital B +1 (3,140), Smarter Web +12 (2,712). Cipher Digital sold 470 (646 left); Sequans sold 344 (314 left).
• A French tax agent allegedly sold crypto holders' data from government databases to criminals, linked to a violent home invasion. Kate on the KYC honeypot, and why an offsite multisig key defeats the wrench attack.
• Mempool explorer founder Wiz is filing for the .bitcoin TLD in ICANN's first new gTLD window since 2012. Without a community application it goes to auction; he needs written support from Bitcoin projects.
• Stacks users: POX unstacked every STX position. Restake by around August 12 or miss a cycle of Bitcoin rewards. Leather pools, Xverse, StackingDAO, or the Ryder One all work.
• Also: Storj filed Chapter 11, BitMart is winding down, POAP is shutting down, Fold Bitcoin gift cards hit TikTok at a discount, a solo miner won 3.157 BTC (~$200K), and the Senate punted the Clarity Act to September. Bitcoin already has clarity.
• Follow the show on X: @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

Jack Mallers quit Twenty One, BitMEX is closing, Satsuma is liquidating, and Smarter Web sold Bitcoin. The old guard is packing up. Plus: BlackRock and Strategy funded Bitcoin's quantum defense, the Clarity Act cleared its last blocker, and Wise debanked Peter McCormack.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• Jack Mallers is out at Twenty One. He stepped down as CEO over a fundamental disagreement on how the company should generate real cash flow, and he's going all in on Strike. The merger floated in May never happened, and Twenty One holds no equity in Strike.
• BitMEX is shutting down September 23. HDR Global Trading is closing operations after a strategic review. Arthur Hayes' exchange invented the 100x perpetual swap that every exchange now runs, then watched its volume drain to the copycats.
• Treasury tracker, and it's grim: Strategy hasn't bought Bitcoin in over a month, adding $225M to USD reserves through an ATM sale instead (now $3.2B). Strive bought a symbolic 21 BTC (19,921). Smarter Web sold 178 BTC (2,700). Satsuma is winding down: shareholders voted to sell its 668 BTC, return the cash, and delist from London after a 99% collapse to 21 pence.
• The institutions finally showed up for Bitcoin security: Strategy, Coinbase, BlackRock, Fidelity, Block, Galaxy, and Blockstream pledged $15M over three years, aimed largely at quantum resistance, coordinated by Brink's Mike Schmidt. Strive also committed to funding open source devs via Brink. Kate's take: for BlackRock, $15M is a coffee.
• The Clarity Act's last blocker is gone. The White House says Trump agreed to sweeping ethics rules: covered officials can't issue digital assets and must sell their crypto or move it to a blind trust. Brian Armstrong says the bill is on the one-yard line. Again.
• Chokepoint 2.0 is still running in 2026. Wise debanked Peter McCormack over an invoice from a Bitcoin company and still has nearly £12,000 of his money. Isabella Santos was closed out and banned for life. Kate makes the case for self-custody.
• Stacks approved SIP-44 and SIP-45 with 99.99% in favor. Clarity 6 and Bitcoin staking hard fork around July 29, restacking runs through August, and the first protocol bond lands end of August.
• Worth your time: Presidio Bitcoin has six rolling spots for builders to spend one to three months in San Francisco, and Robin Linus and Casey Rodarmor host a Bitcoin show and tell space Sunday at 4pm ET.
• Follow the show on X: @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

The BIP-110 haters found us, so we read the hate mail on air. Plus: privacy coins are crypto's only green category this year, Lyn Alden's $40M Orange Juice, ZachXBT calls every hardware wallet 'complete garbage,' Bitcoin lands on TikTok Shop, and Vibewatch wins a Stacks grant.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• Hate mail time: we rapid-fire the BIP-110 comments on air. Personal attacks, zero engagement, and our most-streamed episode since May. Thanks for the boost.
• Treasury tracker: Strive added 18 BTC (19,900), OranjeBTC 8 (3,912), Canaan 49 from June mining (1,915). Strategy skipped the buy again but added $450M to USD reserves, now $3B (~20 months of dividends). Metaplanet plans Bitcoin-backed digital credit in Japan.
• Strategy graded the banks: the new Bitcoin Bank Adoption Index scores 25 institutions. Average: 32%. Fidelity leads at 71%, Royal Bank of Canada is last at 13%, JPMorgan somehow scored 43%. Someone tell Jamie Dimon.
• Kate breaks down Chamath's privacy piece: privacy coins are up 127% this year while everything else bled, even after 73 exchanges delisted them. Privacy is a feature Bitcoin can add with ZK proofs and BitVM. Plus Brandon's BlockFi flashback on tainted coins.
• Vibewatch might be good for Bitcoin: Brandon's community-intelligence tool landed a Stacks Endowment grant to build a sentiment index for the Stacks ecosystem, with free subscriptions for Stacks projects (DM Brandon) and an x402 layer for AI agents.
• Orange Juice: Lyn Alden, Jeff Booth, and the Ego Death Capital partners raised $40M for a permanent-capital alternative to private equity: buy cash-flowing businesses, hold them forever, sweep the cash into a Bitcoin treasury. Yes, they got orangejuice.com.
• Quick hits: Eric Trump's American Bitcoin is down 95% from its peak, erasing $600M+ of the family fortune. Fold put the first Bitcoin gift card on TikTok Shop, in front of 70M shoppers.
• ZachXBT says all hardware wallets are 'complete garbage' and recommends a dedicated iPhone instead. We push back: the ColdCard is air-gapped for a reason.
• Follow the show on X — @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS