Good for Bitcoin

Hackers used zero-day flaws in Bitget's third-party security tools to make $387M in withdrawals look like internal transfers, and a $464M protection fund made every user whole. Plus Muneeb takes over Stacks Labs, Anchorage clients can stake Bitcoin, and we ask whether a fruit fly brain can mine Bitcoin.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

The Clarity Act failed its cloture vote 49 to 50, and Polymarket now gives it 8% this year. Brandon argues two-thirds of the crypto market already has its clarity; Kate warns agency rules can be undone by the next administration. Plus tokenized stocks get an SEC exemption and Revolut gets breached.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• The Clarity Act failed to advance: it needed 60 votes and got 49 yes, 50 no. Polymarket's odds for this year fell from 75% in May to 8%. Brandon's take: Bitcoin is already a commodity to the SEC, CFTC, and IRS, and with GENIUS Act stablecoins that's roughly two-thirds of the crypto market with the clarity it needs. Kate's worry: rules made by agencies instead of Congress can be reversed by the next administration.
• The Digital Asset Tax Certainty Act did advance: a de minimis exemption for small transactions, wash sale rules that close the sell-at-a-loss-and-rebuy loophole, and clearer tax treatment for mining and staking.
• The House Financial Services Committee voted 28 to 21 to advance H.R. 8957, codifying the Strategic Bitcoin Reserve with a 20-year no-sale lockup and quarterly proof-of-reserve audits. It commits the U.S. to holding, not buying.
• The SEC's innovation exemption greenlights tokenized stocks: on-chain trading with no registration for five years, for real shares with dividends and voting rights, not synthetics. Issuers get 30 days to object.
• Circle launched Arc, its own chain with USDC as native gas, sub-second finality, and EVM compatibility.
• Revolut disclosed a KYC breach after attackers spent six months inside Italian law enforcement systems, using them to request data from Revolut.
• Quick headlines: Defense Secretary Pete Hegseth says classified Bitcoin efforts are underway inside the Pentagon, and Franklin Templeton says it's no longer TradFi or DeFi, just Fi.
• Treasury tracker: Strive +469 BTC (25,000), Capital B +4 (3,525), ProCap -51 (5,254) and renaming to Silvia. Strategy repurchased $139M of STRC. Satsuma sold all 669 BTC to return $41.4M to shareholders, and Adam Back's Bitcoin Standard Treasury Co. terminated its SPAC with a $15M fee.
• We're off next week and back in two weeks.
• Follow the show on X: @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

A dormant bug in Liquid's confidential transactions let an attacker mint roughly 4,000 BTC nobody could see, then bridge it out. They returned 3,400, kept 600, and are negotiating with Blockstream in OP_RETURN messages. Plus Trezor's leak grows to 80,000 customers, the Stacks Genesis Bond sells out in 24 hours, and Brian Armstrong calls $400K Bitcoin by 2030 reasonable.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• Liquid was exploited for roughly 4,000 BTC: a dormant bug in Elements' confidential transactions got a fix that introduced a new one, and the attacker minted BTC nobody could see, then bridged it out like a normal withdrawal. They returned 3,400 BTC, kept 600, and negotiated with Blockstream through OP_RETURN messages demanding a 10% bounty. Blockstream says no ransom, calls it theft, and shipped a patched Elements Wednesday.
• Trezor's data leak got worse: shipping vendor ShipMonk kept customer records past its 90-day deletion policy, and another 67,000 U.S. customers who ordered between November 2019 and August 2021 had names, emails, phone numbers, and addresses exposed. About 80,000 are now affected. Kate's tip: set a family safe word before the AI voice-clone calls start.
• The Stacks Genesis Bond sold out in 24 hours: 230 BTC time-locked on Bitcoin's L1, no bridge and no custodian handoff, paired with STX to target a 3% yield over a six-month bond. UTXO Management, HashKey Cloud, Cypher Capital, and 21Shares anchored the first round; the next opens around October 10. Also: Bullish listed STX and sBTC.
• Clarity Act crunch: Senator Cynthia Lummis says if the Senate doesn't pass it next week there's no realistic shot before the end of the decade. The bill grew from 616 to 630 pages with over 100 Democrat-requested changes, including CFTC registration for DeFi that's decentralized in name only. Polymarket puts enactment in 2026 at 18%.
• Quick headlines: SoFi and Kraken's parent Payward partner on 24/7 USD settlement, River argues Bitcoin could hit $840,000 within five years, Block applies for an OCC trust bank charter, Hunter Biden's LAPTOP token crashes 99% in hours, Luke Dashjr leaves Ocean, and Brian Armstrong tells CNBC the bottom is in.
• Treasury tracker: Strategy +4,603 BTC (845,050), its first buy since June, plus $167M of STRC repurchased and the buyback doubled to $2B. Strive +1,375 (24,531), Boyaa Interactive +115 (4,316), Capital B +376 (3,521), CleanSpark -228 (13,703).
• Follow the show on X: @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

Critical vulnerabilities in Core Lightning have node operators going offline while a two-week embargo holds, and they were surfaced by AI-generated bug reports that proved real. Plus the first quantum-resistant Bitcoin transaction mined on mainnet, Coinbase's Bitcoin-backed mortgage goes nationwide, Pakistan's full crypto licensing framework, and Strategy adds $1.59B to its reserve.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• Critical vulnerabilities in Core Lightning: maintainers told every node operator to upgrade or restart with the --offline flag while fixes ship. Details are under a two-week embargo, and the bugs surfaced through AI-generated vulnerability reports that proved real. If you run a Lightning node, act now.
• The first quantum-resistant Bitcoin transaction was mined on mainnet: StarkWare submitted it through Marathon's Slipstream service and shared the news live at Bitcoin Asia. It builds on Avihu Levy's April white paper — non-standard transactions that work today at roughly $150 each.
• Coinbase's Bitcoin-backed mortgage is live nationwide: pledge 250% of the down payment in BTC, get a conforming Fannie Mae first mortgage plus a second loan against the coins. No margin calls just because the price drops, and Coinbase One members get a 1% rebate at closing, capped at $10,000.
• Pakistan released a full licensing framework for crypto exchanges, custody, lending, and derivatives: apply for a no-objection certificate by September 5 or cease operations. Licensed providers must segregate customer assets and gain access to the formal banking system.
• Quick headlines: the Wall Street Journal reports JPMorgan is considering its own stablecoin, HashKey Cloud joins Bitcoin staking on Stacks, and Galaxy Digital says last week's rise was Bitcoin's largest weekly dollar gain ever.
• Treasury tracker: Strive +1,110 BTC (21,356), Empery Digital -100 (1,179). In the pipeline: Alpha Modus signed a $254M PIPE for 3,170 BTC, Genius Group plans $827M over five years, Capital B is raising €21M. Strategy: no buys, no sells; +$1.59B to its USD reserve and another $136M of STRC bought back.
• Follow the show on X: @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

The Treasury yield hit 5.34%, its highest since 2007, and the Treasury answered by doubling its long-end bond buybacks. Bitcoin surged 7% in a day, its biggest move since March. Plus Bullish IPOs holding more BTC than Coinbase, MetaPlanet's US landing as SuperPlanet, the SEC's new crypto exemptions, and OrdinalsBot winds down.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• The Treasury yield hit 5.34% this week, the highest since 2007, and the Treasury responded by doubling long-end bond buybacks from $2B to $4B per operation starting September 9. The yield fell back to 5.187%, the dollar hit a 2.5-month low, and gold rallied past $4,500.
• Bitcoin followed with a 7% single-day surge, its biggest since March: $1.4B in shorts liquidated in about four hours and $517M in ETF inflows, the biggest single day in three and a half months.
• Bullish IPO'd and revealed 24,300 BTC in its financial statement, making it the sixth-largest public company holding Bitcoin, ahead of Strive, SpaceX, and Coinbase.
• MetaPlanet is coming to America: a controlling stake in Super League Enterprise (SLE), to be renamed SuperPlanet under ticker SUPA and seeded with 2,100 of MetaPlanet's own BTC. CEO Simon Gerovich: two markets, two currencies, two investor bases, one balance sheet. Expected to close Q4.
• The SEC proposed Regulation Crypto Assets: a one-time $5M exemption over four years and a $75M annual exemption from full securities registration, plus a safe harbor for qualifying crypto assets. Rules that may outlast the wait for Clarity.
• Clarity gets its Senate vote September 15: cloture on the motion to proceed needs 60 votes, so at least seven Democrats have to cross the aisle. Call your senator.
• OrdinalsBot is winding down and looking for bids to keep the brand alive. The first inscription service many ever used, and part of historic projects from Runestone to the Dog airdrop. End of an era.
• Treasury tracker: Strive +79 BTC (20,246), Gemini revealed +1,698 (5,528), Capital B +5 (3,145), Canaan +2 (1,917), Remixpoint +9.98 (1,501). Strategy: no buys, no sells; USD reserve up $150M and $132M of STRC bought back via a common-stock ATM.
• Follow the show on X: @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

One week after Coldcard, Trezor got hit too: a shipping partner leaked nearly 12,000 customers' home addresses, phones, and emails. Plus BIP 110's two-block death, the Coldcard theft numbers, Tether's KPMG audit, and BlackRock's $1M door into IBIT.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• Trezor data breach: a shipping provider exposed the last 90 days of orders across seven countries. Nearly 12,000 customers had shipping address, phone, and email leaked. Funds are safe; it's a doxxing problem, and many victims had just fled Coldcard.
• BIP 110 is dead. Mandatory signaling began at block 961,632; Antpool skipped the signal, Knots nodes rejected its block, and Roughnecks forked a competing chain, then quit two blocks in. Luke Dashjr took a sabbatical from Ocean and was removed as a BIP editor. RIP110.
• Coldcard fallout, by the numbers (Alex Thorn, Galaxy): 8,300 addresses attacked, ~$112M (1,720 BTC) stolen and climbing. The victims were long-term, air-gapped savers. Seed from March 2021 to the patch with no dice rolls? Move your funds now. Victims: send your addresses to Thorn for an FBI-ready report.
• The red team's AI sweep of 500+ open-source repos came back clean: Bitcoin itself is untouched. BTCPay Server is donating 0.21 BTC each to the red team and Craig Raw, plus a recovery bounty of 10%, up to 3 BTC.
• The Bitcoin Policy Institute wants AI labs to give open-source devs trusted access to frontier models, after Claude and ChatGPT kept blocking security defenders. Signed by Strategy, Coinbase, Block, Galaxy, River, and BitGo.
• Treasury tracker: Strategy sold 1,691 BTC to buy back $108M of STRC and ran a $653M MSTR ATM, now 840,447 BTC and $4.65B cash. Trump Media +4,622 BTC. OranjeBTC launched Digi11, an ETF of Bitcoin-ecosystem preferred shares (3,950 held). BitGo +74 (2,523).
• The KYC honeypot keeps leaking: France's tax authority was hacked and 678,000 records leaked. Add a wallet shipping list and finding Bitcoiners gets easy.
• Quick hits: BlackRock cut tax-free in-kind BTC-to-IBIT conversions from $25M to $1M. Tether passed a full KPMG audit: unqualified opinion. The .bitcoin TLD has 50+ endorsements but ICANN pace means maybe 2030. Netflix's FTX series The Altruists drops November 19. July's $432B US deficit: interest now costs more than the military or Medicare.
• Brandon joined SoFi as their first crypto-native marketing hire. The show stays independent.
• Follow the show on X: @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

The Coldcard exploit drained over $100M from wallets that never touched the internet. How a 2021 firmware bug collapsed seed entropy, what to do with your Bitcoin now, and the AI arms race finding holes faster than teams can patch. Plus: Strategy sold again, Storj went bankrupt, and .bitcoin could become a real domain.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• The Coldcard exploit, explained: a 2021 firmware bug silently swapped seed generation to a weak software RNG seeded by the device ID and the clock, cutting entropy from 128 bits to about 40. Over $100M is tracked stolen on-chain. Dice rolls helped. Stop using Coldcard.
• What now? Brandon's 3-2-1 rule: three wallets, mixed hardware and software, one offsite. Multisig via Bitkey, Casa, or Unchained. Prefer custody? River, Fidelity, BitGo, or AnchorWatch, offering 60 days of free custody as a Coldcard safe haven.
• The AI security arms race: Boltz suspended swaps citing AI-assisted probing, Zeus shut down over a security incident, and BTCPay Server disclosed a critical vulnerability under active exploitation. The red team started by Rob Hamilton and led by calle has scanned 425 projects and filed 1,000+ high or critical findings. OpenSats reimburses the researchers.
• Treasury tracker: Strategy sold 1,637 BTC (~$104M) and bought back $81M of STRC (842,138 BTC held, STRC at $95). Strive +20 (20,020), Block +85 (9,117), American Bitcoin +298 (8,300), OranjeBTC +30 (3,948), Capital B +1 (3,140), Smarter Web +12 (2,712). Cipher Digital sold 470 (646 left); Sequans sold 344 (314 left).
• A French tax agent allegedly sold crypto holders' data from government databases to criminals, linked to a violent home invasion. Kate on the KYC honeypot, and why an offsite multisig key defeats the wrench attack.
• Mempool explorer founder Wiz is filing for the .bitcoin TLD in ICANN's first new gTLD window since 2012. Without a community application it goes to auction; he needs written support from Bitcoin projects.
• Stacks users: POX unstacked every STX position. Restake by around August 12 or miss a cycle of Bitcoin rewards. Leather pools, Xverse, StackingDAO, or the Ryder One all work.
• Also: Storj filed Chapter 11, BitMart is winding down, POAP is shutting down, Fold Bitcoin gift cards hit TikTok at a discount, a solo miner won 3.157 BTC (~$200K), and the Senate punted the Clarity Act to September. Bitcoin already has clarity.
• Follow the show on X: @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

Jack Mallers quit Twenty One, BitMEX is closing, Satsuma is liquidating, and Smarter Web sold Bitcoin. The old guard is packing up. Plus: BlackRock and Strategy funded Bitcoin's quantum defense, the Clarity Act cleared its last blocker, and Wise debanked Peter McCormack.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• Jack Mallers is out at Twenty One. He stepped down as CEO over a fundamental disagreement on how the company should generate real cash flow, and he's going all in on Strike. The merger floated in May never happened, and Twenty One holds no equity in Strike.
• BitMEX is shutting down September 23. HDR Global Trading is closing operations after a strategic review. Arthur Hayes' exchange invented the 100x perpetual swap that every exchange now runs, then watched its volume drain to the copycats.
• Treasury tracker, and it's grim: Strategy hasn't bought Bitcoin in over a month, adding $225M to USD reserves through an ATM sale instead (now $3.2B). Strive bought a symbolic 21 BTC (19,921). Smarter Web sold 178 BTC (2,700). Satsuma is winding down: shareholders voted to sell its 668 BTC, return the cash, and delist from London after a 99% collapse to 21 pence.
• The institutions finally showed up for Bitcoin security: Strategy, Coinbase, BlackRock, Fidelity, Block, Galaxy, and Blockstream pledged $15M over three years, aimed largely at quantum resistance, coordinated by Brink's Mike Schmidt. Strive also committed to funding open source devs via Brink. Kate's take: for BlackRock, $15M is a coffee.
• The Clarity Act's last blocker is gone. The White House says Trump agreed to sweeping ethics rules: covered officials can't issue digital assets and must sell their crypto or move it to a blind trust. Brian Armstrong says the bill is on the one-yard line. Again.
• Chokepoint 2.0 is still running in 2026. Wise debanked Peter McCormack over an invoice from a Bitcoin company and still has nearly £12,000 of his money. Isabella Santos was closed out and banned for life. Kate makes the case for self-custody.
• Stacks approved SIP-44 and SIP-45 with 99.99% in favor. Clarity 6 and Bitcoin staking hard fork around July 29, restacking runs through August, and the first protocol bond lands end of August.
• Worth your time: Presidio Bitcoin has six rolling spots for builders to spend one to three months in San Francisco, and Robin Linus and Casey Rodarmor host a Bitcoin show and tell space Sunday at 4pm ET.
• Follow the show on X: @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

The BIP-110 haters found us, so we read the hate mail on air. Plus: privacy coins are crypto's only green category this year, Lyn Alden's $40M Orange Juice, ZachXBT calls every hardware wallet 'complete garbage,' Bitcoin lands on TikTok Shop, and Vibewatch wins a Stacks grant.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• Hate mail time: we rapid-fire the BIP-110 comments on air. Personal attacks, zero engagement, and our most-streamed episode since May. Thanks for the boost.
• Treasury tracker: Strive added 18 BTC (19,900), OranjeBTC 8 (3,912), Canaan 49 from June mining (1,915). Strategy skipped the buy again but added $450M to USD reserves, now $3B (~20 months of dividends). Metaplanet plans Bitcoin-backed digital credit in Japan.
• Strategy graded the banks: the new Bitcoin Bank Adoption Index scores 25 institutions. Average: 32%. Fidelity leads at 71%, Royal Bank of Canada is last at 13%, JPMorgan somehow scored 43%. Someone tell Jamie Dimon.
• Kate breaks down Chamath's privacy piece: privacy coins are up 127% this year while everything else bled, even after 73 exchanges delisted them. Privacy is a feature Bitcoin can add with ZK proofs and BitVM. Plus Brandon's BlockFi flashback on tainted coins.
• Vibewatch might be good for Bitcoin: Brandon's community-intelligence tool landed a Stacks Endowment grant to build a sentiment index for the Stacks ecosystem, with free subscriptions for Stacks projects (DM Brandon) and an x402 layer for AI agents.
• Orange Juice: Lyn Alden, Jeff Booth, and the Ego Death Capital partners raised $40M for a permanent-capital alternative to private equity: buy cash-flowing businesses, hold them forever, sweep the cash into a Bitcoin treasury. Yes, they got orangejuice.com.
• Quick hits: Eric Trump's American Bitcoin is down 95% from its peak, erasing $600M+ of the family fortune. Fold put the first Bitcoin gift card on TikTok Shop, in front of 70M shoppers.
• ZachXBT says all hardware wallets are 'complete garbage' and recommends a dedicated iPhone instead. We push back: the ColdCard is air-gapped for a reason.
• Follow the show on X — @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS

The BIP 110 fight has been all mudslinging, so we did something radical: we actually read the BIP. Why the filters won't work and why it probably ends in a fork. Plus: Strategy's never-sell era is over, a $21M DAO drain that broke no rules, Kraken's $22M Choke Point 2.0 win, and StackingDAO's stBTC ahead of Bitcoin staking on Stacks.

In this episode of Good For Bitcoin, Brandon and Kate discuss:

• The main event: BIP 110. Instead of mudslinging, we read the BIP itself — what it actually proposes, why the filters keep failing (prune ordinals, unprunable stamps appear), and its own admission that raising costs mostly 'sends a message.' Likely endgame: it fails and forks, BCH/BSV-style. Even Saylor weighed in — 'Bitcoin still has no spam problem.'
• The never-sell era is over: Strategy sold 3,588 BTC (~0.4% of its stack) to fund $21.6M of STRC-family dividends — obligations now structurally require selling. Elsewhere: Strive added 18 BTC (19,882), OranjeBTC added 5 (3,904), Empery sold 1,400 — nearly half its stack, Boyaa added 108 (4,201), American Bitcoin hit 8,000.
• StackingDAO announced stBTC — liquid-staked Bitcoin for the Bitcoin staking launch on Stacks: ~2.6% base yield paid in BTC, liquid across Stacks DeFi, no STX exposure needed. Launching just ahead of the staking release.
• The Bonk DAO drain: someone spent $4.4M acquiring 1% of BONK's supply, proposed draining the treasury, and passed the vote — $21.2M gone, $16.8M net profit, and nobody voted no. Exploit, or governance working exactly as designed?
• Choke Point 2.0 justice: Kraken is set to collect $22M from auditor Mazars, which quit days before finishing a clean 2023 audit. FOIA docs later showed the FDIC privately told banks to drop crypto clients. A precedent for everyone who got debanked.
• Read the fine print: Strike unveiled volatility-proof loans — no price-triggered liquidations for the six-month term, 45% max LTV, ~13% all-in APR. Binance launched a covered-call Bitcoin yield product: 0.41% APR, minus a 15% cut of the premiums. Self-custodial staking pays more.
• Quick hits: Tennessee banned Bitcoin ATMs; Circle got OCC approval for a national trust bank charter (stock +10%); Polymarket added instant Bitcoin deposits over Lightning, powered by Spark; and SIP 44 & 45 — Bitcoin staking and Clarity 6 — are live for voting — go vote yes.
• Follow the show on X — @goodforbtc.

Hosts:

• Brandon Marshall — @marshallmixing
• Kate Parkman — @katemparkman

Subscribe & Follow:

• goodforbitcoin.com
• YouTube
• Spotify
• Amazon Music
• Apple Podcasts
• Pocket Casts
• RSS