From Yesterday's Simply Bitcoin Live | Episode 1621
The Numbers
Price is holding near $80,000 even as three separate wallet companies deal with breaches inside the same week.
The News
Foundation confirmed this week that compromised Cloudflare API keys let attackers send spam emails from official Foundation domains, built with personal data pulled from old Woocommerce orders that a database migration bug left exposed even after the company thought it had redacted them. Foundation counted more than 23,000 phishing attempts across its systems, split between 19,057 messages through Mailgun and 1,500 through Google Workspace.
Ledger customers are now getting physical letters at their actual home addresses, built from personal information leaked in last week's breach. Names, addresses and official-looking letters are showing up in mailboxes, pointing people toward a link.
If an email or a letter about your hardware wallet asks you to click anything, the only right answer is the trash can.
Keystone confirmed it will destroy more than 18,835 hardware wallets in its remaining inventory after attackers stole the cryptographic key used to verify that a Keystone device is authentic. The company says the breach came through a vulnerability in a third party monitoring tool on its website on October 20, exposing 25,964 customer records and 12,873 abandoned checkout records.
The stolen key is baked into devices already in the field and cannot be replaced, so Keystone is suspending shipments and building new units with a different key. Recovery phrases and private keys were not touched. Anyone who gets a device with the old authentication key after October 20 should verify it before trusting it.
Three wallet companies, one week, the same lesson: the breach is never the hardware. It is everything around it.
Since the ETFs launched, more Bitcoin has been moving into Wall Street products as people decide self custody is too much work. Tony from The Bitcoin Way, on the show to walk through this week's wallet breaches, argues that is the real mistake: owning an ETF share is not owning Bitcoin, it is owning access that someone else can switch off.
His read is that the price keeps climbing whether or not Wall Street shows up, because the same broken money pushing institutions into Bitcoin is pushing everyday people out of dollars too. The difference is only who controls the keys when it actually matters.
Wall Street can buy the asset. It cannot hand you the keys.
The Culture
Guest SegmentTony, who runs cybersecurity-focused self custody consultations at The Bitcoin Way, broke sovereignty into three pieces that have nothing to do with which hardware wallet you buy: protect your money from the system that wants to control it, protect your data so a breach cannot put your address in a stranger's hands, and protect your jurisdiction so you can leave if your country stops working for you.
On the jurisdiction point, his pitch is insurance, not abandonment. The Bitcoin Way is focused on Panama right now for its tax treatment, growing circular Bitcoin economy and weather, but the actual ask is simpler: build a second option before you need one, not after.
A second passport is not about leaving home. It is about being able to.
The Bitcoin Way's Tony walks through three wallet breaches from the same week and explains why he thinks every attack on self custody means Bitcoin is winning.
Watch on YouTube →