Strike named its new savings buckets "Stacks," and when Brandon pointed out Stacks already exists, a Strike team member called it an affinity scam. Plus Treasury withdraws the unhosted wallet and mixer rules, the CFTC builds a federal crypto license without Congress, and Robinhood buys Bitcoin.

• Strike launched Stacks, named buckets for your Bitcoin and cash savings. Brandon replied that Stacks already exists, and Strike's Matt Carvalho, formerly of Swan, answered that STX is too irrelevant to be a brand conflict. Kate: it's not a good look.
• Strike also now pays 3.6% interest on cash, paid out in Bitcoin, FDIC insured, with no minimums or maximums.
• Treasury formally withdrew FinCEN's 2020 unhosted wallet proposal and its 2023 rule labeling international crypto mixing a primary money laundering concern. Brandon calls it a win for self-custody and privacy, and shouts out Coin Center for fighting both.
• CFTC Chairman Michael Selig announced the agency's first crypto market rules, Regulation CTX and Regulation CAM, aiming for one federal exchange license instead of state-by-state licenses. Brandon's read: clarity without the Clarity Act.
• The US government moved a little over 12,000 BTC, about $1B, with some landing at Coinbase Prime. Kate thinks it's a custody shuffle tied to the Bitfinex hack, and Brandon tells the story of the time he met Razzlekhan at a Bitcoin conference.
• Buyers of tampered Ledger devices from a third-party reseller lost around $86M by Kate's count. Ledger says it wasn't them. Brandon's advice: buy direct from the manufacturer, or use multisig.
• OKX filed to trade tokenized shares of 63 US companies around the clock, from Nvidia and Tesla to McDonald's, and raised money at a $25B valuation from Circle, Ripple, SC Ventures, and Qube Research & Technologies.
• Vibewatch update: the Vibe Index wrapped with over 300 payments made by AI agents over x402, and a new repliability score (is this worth jumping into?) is in closed beta.
• Xverse closed a round from Draper Associates and Trust Machines.
• Treasury tracker: Strategy +334 to an even 848,000 BTC, Metaplanet ends an 11-week pause with +1,000 (44,000), Strive +2,000 (29,462), Silvia Inc. sold 165 (4,965), Remixpoint +7.45 (1,509), and Robinhood joins the treasury club with about 294 BTC.
• Follow the show on X: @goodforbtc.

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

Hackers used zero-day flaws in Bitget's third-party security tools to make $387M in withdrawals look like internal transfers, and a $464M protection fund made every user whole. Plus Muneeb takes over Stacks Labs, Anchorage clients can stake Bitcoin, and we ask whether a fruit fly brain can mine Bitcoin.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• Bitget lost $387M from its hot and warm wallets. Attackers used zero-day flaws in third-party security tools to write withdrawals into the backend that looked internally generated. Cold wallets were untouched, and a $464M protection fund covers every user. Kate notes on-chain patterns match North Korea-linked attackers.
• NEAR Intents lost about $3.8M in USDT through a bug on BNB Chain, patched it within an hour, called out the attacker, and got the funds back.
• Adam Back replied to last week's clip: 25,000 BTC versus 0.6 BTC. Brandon's answer: it was a joke, and Adam is welcome on the show anytime.
• Anchorage Digital clients can now fund a Bitcoin bond on Stacks from their Anchorage account and earn BTC rewards self-custodially.
• Muneeb becomes CEO of Stacks Labs in mid-October, focused on Bitcoin capital markets, privacy, and post-quantum. Kate says STX nearly doubled on the news.
• A shielded Bitcoin white paper promises private L1 transfers with no soft fork, operators, or bridges. The peg-in and peg-out design is saved for part two, so Brandon is reserving judgment.
• Coinbase launched fixed-rate USDC loans backed by Bitcoin. Your BTC can still be liquidated on LTV or a missed due date.
• Can a fruit fly brain mine Bitcoin? A mining hardware maker claims real neurons could hash 10 times more efficiently than today's ASICs.
• Blink Wallet custodial accounts were drained and customers made whole, and a French family was held in a crypto extortion attempt. Brandon's wrench-attack advice: time delays and multisig.
• Quick headlines: SoFi settles its $25B card program in stablecoins on Mastercard's network, the SEC proposes looser adviser custody rules, and Treasury's first GENIUS Act rule sends stablecoins over $10B to federal oversight.
• Treasury tracker: Strategy holds 847,666 BTC, back above its pre-summer-sales stack, and repurchased $152M of STRC. Strive +1,107 (27,462), Capital B +13 (3,538), and Metaplanet sat out an 11th straight week.
• Follow the show on X: @goodforbtc.

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

The Clarity Act failed its cloture vote 49 to 50, and Polymarket now gives it 8% this year. Brandon argues two-thirds of the crypto market already has its clarity; Kate warns agency rules can be undone by the next administration. Plus tokenized stocks get an SEC exemption and Revolut gets breached.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• The Clarity Act failed to advance: it needed 60 votes and got 49 yes, 50 no. Polymarket's odds for this year fell from 75% in May to 8%. Brandon's take: Bitcoin is already a commodity to the SEC, CFTC, and IRS, and with GENIUS Act stablecoins that's roughly two-thirds of the crypto market with the clarity it needs. Kate's worry: rules made by agencies instead of Congress can be reversed by the next administration.
• The Digital Asset Tax Certainty Act did advance: a de minimis exemption for small transactions, wash sale rules that close the sell-at-a-loss-and-rebuy loophole, and clearer tax treatment for mining and staking.
• The House Financial Services Committee voted 28 to 21 to advance H.R. 8957, codifying the Strategic Bitcoin Reserve with a 20-year no-sale lockup and quarterly proof-of-reserve audits. It commits the U.S. to holding, not buying.
• The SEC's innovation exemption greenlights tokenized stocks: on-chain trading with no registration for five years, for real shares with dividends and voting rights, not synthetics. Issuers get 30 days to object.
• Circle launched Arc, its own chain with USDC as native gas, sub-second finality, and EVM compatibility.
• Revolut disclosed a KYC breach after attackers spent six months inside Italian law enforcement systems, using them to request data from Revolut.
• Quick headlines: Defense Secretary Pete Hegseth says classified Bitcoin efforts are underway inside the Pentagon, and Franklin Templeton says it's no longer TradFi or DeFi, just Fi.
• Treasury tracker: Strive +469 BTC (25,000), Capital B +4 (3,525), ProCap -51 (5,254) and renaming to Silvia. Strategy repurchased $139M of STRC. Satsuma sold all 669 BTC to return $41.4M to shareholders, and Adam Back's Bitcoin Standard Treasury Co. terminated its SPAC with a $15M fee.
• We're off next week and back in two weeks.
• Follow the show on X: @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

A dormant bug in Liquid's confidential transactions let an attacker mint roughly 4,000 BTC nobody could see, then bridge it out. They returned 3,400, kept 600, and are negotiating with Blockstream in OP_RETURN messages. Plus Trezor's leak grows to 80,000 customers, the Stacks Genesis Bond sells out in 24 hours, and Brian Armstrong calls $400K Bitcoin by 2030 reasonable.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• Liquid was exploited for roughly 4,000 BTC: a dormant bug in Elements' confidential transactions got a fix that introduced a new one, and the attacker minted BTC nobody could see, then bridged it out like a normal withdrawal. They returned 3,400 BTC, kept 600, and negotiated with Blockstream through OP_RETURN messages demanding a 10% bounty. Blockstream says no ransom, calls it theft, and shipped a patched Elements Wednesday.
• Trezor's data leak got worse: shipping vendor ShipMonk kept customer records past its 90-day deletion policy, and another 67,000 U.S. customers who ordered between November 2019 and August 2021 had names, emails, phone numbers, and addresses exposed. About 80,000 are now affected. Kate's tip: set a family safe word before the AI voice-clone calls start.
• The Stacks Genesis Bond sold out in 24 hours: 230 BTC time-locked on Bitcoin's L1, no bridge and no custodian handoff, paired with STX to target a 3% yield over a six-month bond. UTXO Management, HashKey Cloud, Cypher Capital, and 21Shares anchored the first round; the next opens around October 10. Also: Bullish listed STX and sBTC.
• Clarity Act crunch: Senator Cynthia Lummis says if the Senate doesn't pass it next week there's no realistic shot before the end of the decade. The bill grew from 616 to 630 pages with over 100 Democrat-requested changes, including CFTC registration for DeFi that's decentralized in name only. Polymarket puts enactment in 2026 at 18%.
• Quick headlines: SoFi and Kraken's parent Payward partner on 24/7 USD settlement, River argues Bitcoin could hit $840,000 within five years, Block applies for an OCC trust bank charter, Hunter Biden's LAPTOP token crashes 99% in hours, Luke Dashjr leaves Ocean, and Brian Armstrong tells CNBC the bottom is in.
• Treasury tracker: Strategy +4,603 BTC (845,050), its first buy since June, plus $167M of STRC repurchased and the buyback doubled to $2B. Strive +1,375 (24,531), Boyaa Interactive +115 (4,316), Capital B +376 (3,521), CleanSpark -228 (13,703).
• Follow the show on X: @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

Critical vulnerabilities in Core Lightning have node operators going offline while a two-week embargo holds, and they were surfaced by AI-generated bug reports that proved real. Plus the first quantum-resistant Bitcoin transaction mined on mainnet, Coinbase's Bitcoin-backed mortgage goes nationwide, Pakistan's full crypto licensing framework, and Strategy adds $1.59B to its reserve.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• Critical vulnerabilities in Core Lightning: maintainers told every node operator to upgrade or restart with the --offline flag while fixes ship. Details are under a two-week embargo, and the bugs surfaced through AI-generated vulnerability reports that proved real. If you run a Lightning node, act now.
• The first quantum-resistant Bitcoin transaction was mined on mainnet: StarkWare submitted it through Marathon's Slipstream service and shared the news live at Bitcoin Asia. It builds on Avihu Levy's April white paper — non-standard transactions that work today at roughly $150 each.
• Coinbase's Bitcoin-backed mortgage is live nationwide: pledge 250% of the down payment in BTC, get a conforming Fannie Mae first mortgage plus a second loan against the coins. No margin calls just because the price drops, and Coinbase One members get a 1% rebate at closing, capped at $10,000.
• Pakistan released a full licensing framework for crypto exchanges, custody, lending, and derivatives: apply for a no-objection certificate by September 5 or cease operations. Licensed providers must segregate customer assets and gain access to the formal banking system.
• Quick headlines: the Wall Street Journal reports JPMorgan is considering its own stablecoin, HashKey Cloud joins Bitcoin staking on Stacks, and Galaxy Digital says last week's rise was Bitcoin's largest weekly dollar gain ever.
• Treasury tracker: Strive +1,110 BTC (21,356), Empery Digital -100 (1,179). In the pipeline: Alpha Modus signed a $254M PIPE for 3,170 BTC, Genius Group plans $827M over five years, Capital B is raising €21M. Strategy: no buys, no sells; +$1.59B to its USD reserve and another $136M of STRC bought back.
• Follow the show on X: @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

The Treasury yield hit 5.34%, its highest since 2007, and the Treasury answered by doubling its long-end bond buybacks. Bitcoin surged 7% in a day, its biggest move since March. Plus Bullish IPOs holding more BTC than Coinbase, MetaPlanet's US landing as SuperPlanet, the SEC's new crypto exemptions, and OrdinalsBot winds down.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• The Treasury yield hit 5.34% this week, the highest since 2007, and the Treasury responded by doubling long-end bond buybacks from $2B to $4B per operation starting September 9. The yield fell back to 5.187%, the dollar hit a 2.5-month low, and gold rallied past $4,500.
• Bitcoin followed with a 7% single-day surge, its biggest since March: $1.4B in shorts liquidated in about four hours and $517M in ETF inflows, the biggest single day in three and a half months.
• Bullish IPO'd and revealed 24,300 BTC in its financial statement, making it the sixth-largest public company holding Bitcoin, ahead of Strive, SpaceX, and Coinbase.
• MetaPlanet is coming to America: a controlling stake in Super League Enterprise (SLE), to be renamed SuperPlanet under ticker SUPA and seeded with 2,100 of MetaPlanet's own BTC. CEO Simon Gerovich: two markets, two currencies, two investor bases, one balance sheet. Expected to close Q4.
• The SEC proposed Regulation Crypto Assets: a one-time $5M exemption over four years and a $75M annual exemption from full securities registration, plus a safe harbor for qualifying crypto assets. Rules that may outlast the wait for Clarity.
• Clarity gets its Senate vote September 15: cloture on the motion to proceed needs 60 votes, so at least seven Democrats have to cross the aisle. Call your senator.
• OrdinalsBot is winding down and looking for bids to keep the brand alive. The first inscription service many ever used, and part of historic projects from Runestone to the Dog airdrop. End of an era.
• Treasury tracker: Strive +79 BTC (20,246), Gemini revealed +1,698 (5,528), Capital B +5 (3,145), Canaan +2 (1,917), Remixpoint +9.98 (1,501). Strategy: no buys, no sells; USD reserve up $150M and $132M of STRC bought back via a common-stock ATM.
• Follow the show on X: @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

One week after Coldcard, Trezor got hit too: a shipping partner leaked nearly 12,000 customers' home addresses, phones, and emails. Plus BIP 110's two-block death, the Coldcard theft numbers, Tether's KPMG audit, and BlackRock's $1M door into IBIT.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• Trezor data breach: a shipping provider exposed the last 90 days of orders across seven countries. Nearly 12,000 customers had shipping address, phone, and email leaked. Funds are safe; it's a doxxing problem, and many victims had just fled Coldcard.
• BIP 110 is dead. Mandatory signaling began at block 961,632; Antpool skipped the signal, Knots nodes rejected its block, and Roughnecks forked a competing chain, then quit two blocks in. Luke Dashjr took a sabbatical from Ocean and was removed as a BIP editor. RIP110.
• Coldcard fallout, by the numbers (Alex Thorn, Galaxy): 8,300 addresses attacked, ~$112M (1,720 BTC) stolen and climbing. The victims were long-term, air-gapped savers. Seed from March 2021 to the patch with no dice rolls? Move your funds now. Victims: send your addresses to Thorn for an FBI-ready report.
• The red team's AI sweep of 500+ open-source repos came back clean: Bitcoin itself is untouched. BTCPay Server is donating 0.21 BTC each to the red team and Craig Raw, plus a recovery bounty of 10%, up to 3 BTC.
• The Bitcoin Policy Institute wants AI labs to give open-source devs trusted access to frontier models, after Claude and ChatGPT kept blocking security defenders. Signed by Strategy, Coinbase, Block, Galaxy, River, and BitGo.
• Treasury tracker: Strategy sold 1,691 BTC to buy back $108M of STRC and ran a $653M MSTR ATM, now 840,447 BTC and $4.65B cash. Trump Media +4,622 BTC. OranjeBTC launched Digi11, an ETF of Bitcoin-ecosystem preferred shares (3,950 held). BitGo +74 (2,523).
• The KYC honeypot keeps leaking: France's tax authority was hacked and 678,000 records leaked. Add a wallet shipping list and finding Bitcoiners gets easy.
• Quick hits: BlackRock cut tax-free in-kind BTC-to-IBIT conversions from $25M to $1M. Tether passed a full KPMG audit: unqualified opinion. The .bitcoin TLD has 50+ endorsements but ICANN pace means maybe 2030. Netflix's FTX series The Altruists drops November 19. July's $432B US deficit: interest now costs more than the military or Medicare.
• Brandon joined SoFi as their first crypto-native marketing hire. The show stays independent.
• Follow the show on X: @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

The Coldcard exploit drained over $100M from wallets that never touched the internet. How a 2021 firmware bug collapsed seed entropy, what to do with your Bitcoin now, and the AI arms race finding holes faster than teams can patch. Plus: Strategy sold again, Storj went bankrupt, and .bitcoin could become a real domain.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• The Coldcard exploit, explained: a 2021 firmware bug silently swapped seed generation to a weak software RNG seeded by the device ID and the clock, cutting entropy from 128 bits to about 40. Over $100M is tracked stolen on-chain. Dice rolls helped. Stop using Coldcard.
• What now? Brandon's 3-2-1 rule: three wallets, mixed hardware and software, one offsite. Multisig via Bitkey, Casa, or Unchained. Prefer custody? River, Fidelity, BitGo, or AnchorWatch, offering 60 days of free custody as a Coldcard safe haven.
• The AI security arms race: Boltz suspended swaps citing AI-assisted probing, Zeus shut down over a security incident, and BTCPay Server disclosed a critical vulnerability under active exploitation. The red team started by Rob Hamilton and led by calle has scanned 425 projects and filed 1,000+ high or critical findings. OpenSats reimburses the researchers.
• Treasury tracker: Strategy sold 1,637 BTC (~$104M) and bought back $81M of STRC (842,138 BTC held, STRC at $95). Strive +20 (20,020), Block +85 (9,117), American Bitcoin +298 (8,300), OranjeBTC +30 (3,948), Capital B +1 (3,140), Smarter Web +12 (2,712). Cipher Digital sold 470 (646 left); Sequans sold 344 (314 left).
• A French tax agent allegedly sold crypto holders' data from government databases to criminals, linked to a violent home invasion. Kate on the KYC honeypot, and why an offsite multisig key defeats the wrench attack.
• Mempool explorer founder Wiz is filing for the .bitcoin TLD in ICANN's first new gTLD window since 2012. Without a community application it goes to auction; he needs written support from Bitcoin projects.
• Stacks users: POX unstacked every STX position. Restake by around August 12 or miss a cycle of Bitcoin rewards. Leather pools, Xverse, StackingDAO, or the Ryder One all work.
• Also: Storj filed Chapter 11, BitMart is winding down, POAP is shutting down, Fold Bitcoin gift cards hit TikTok at a discount, a solo miner won 3.157 BTC (~$200K), and the Senate punted the Clarity Act to September. Bitcoin already has clarity.
• Follow the show on X: @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS