Mehow

Our CEO @MehowHacks spoke to @Forbes on what the $6.3B Binance hack means for banks heading into stablecoin issuance under the GENIUS Act. The short version: the attackers didn’t break code. They compromised three people. At a bank there are no cryptographic proofs at all, only more people in the way. The fix isn’t more approvals but a system where withdrawals can’t happen unless the user authorises them, and nobody can withdraw what they can’t prove they deposited. That’s what we’ve built. Full piece ↓

The FBI is releasing information advising the Democratic People's Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange, Binance, on or about October 29, 2026. The FBI refers to this specific North Korean malicious cyber activity as "TraderTraitor." The FBI, together with partners at the USSS and IRS-CI, has observed TraderTraitor actors converting stolen assets primarily into Ethereum (ETH). It is expected these assets will then be further laundered by converting them using DeFi and instant swap services as they prepare them for further laundering stages. How You Can Help: FBI, USSS, and IRS-CI are urging private sector entities including THORNode operators, RPC node operators, instant exchanges, DeFi services, blockchain analytics firms, and other virtual asset service providers to block transactions with or derived from addresses TraderTraitor actors are using to launder these stolen assets. A list of addresses associated with this activity is available here: fbi.gov/investigate/cyber/al…

My video on how to "Stop the Steal" with @Americanfort_io

ICYMI: Postquant Labs, the team building Quip Network, and eight other organizations launched the Quantum Alliance to set shared post-quantum standards for blockchains and wallets. Covered by @CoinDesk @DecryptMedia @QuantumDaily @BitcoinNews @TFTC21

Introducing FortressID™, with @Sumsub. Proving who you are in crypto means starting over every time. Each exchange, app and counterparty runs its own check and keeps its own copy. Meanwhile, person to person, there is no check at all: a payment from a stranger's address says nothing about who sent it, and scams took an estimated $17B in 2025 with impersonation up 1,400% year on year. FortressID™ moves identity from the company's database to the person's name. Every paid FortressName™ will include one Sumsub identity verification at no extra cost. FortressID™ answers one question for the person paying you: has this person passed an identity check? Are they human or a robot? The answer stays with you until you decide to share. Read more in @ThePaypers, link below.

Every public blockchain has the same missing piece. Not speed, not fot fees, but privacy that regulators can live with and users don't have to think about. Watch @MehowHacks @token2049 keynote, "Compliant Privacy in Public Blockchains: The Missing Primitive," on why privacy has to be built into the products people already use, and what it looks like when it is. 👇

Taylor on Indian company eMudhra using just the number 4 as the private key to sign certificates, even through two audits "The specific company that we're talking about here is called eMudhra. An Indian company. Apparently, they're an authority. They do a lot of work, I guess, with India government and governments in that region." "Their entire job is to create a very secure private key and then sign these various certificates with those private keys, which then helps secure the internet on the whole for everyone around the world." "It turns out that instead of generating the private key in a secure way, where the private key was truly random, the private key was just the number four." "There's very little information on how exactly this happened. What we know right now, the private key has been the number four for over a year. It's been signing stuff since April 2025." "Apparently, they were audited twice in this period of time. Clearly, that needs to be reviewed."