Replying to @sighohwhy
People are misunderstanding
The FIRST thing that happened was a devops laptop was compromised
Then A LOT of other shit happened
Then the hack happened
These are really skilled hackers. They navigate complex systems and get the access they need from a tiny toehold.
Matrix retweeted
The real risk with the Binance hack is not insolvency but the chilling effect it will have on the asset class.
Past hacks were viewed as isolated incidents. But in this case, the market will (imo correctly) assume that this is the first of many LLM-enabled exploits.
My non-crypto friends are already talking about Binance - it’s the biggest mainstream news coverage we've gotten in months. I don't see how instis will be able to justify additional investments into crypto under these conditions.
I am worried that this week's cybersecurity crisis is the beginning of a new bearish narrative for crypto.
The early version of this narrative was "AI breaks crypto" - a concern that cryptographic primitives used in major protocols would be broken by automated research.
At the time, I thought this fear was mostly overblown, and so far the market seems to have agreed.
However, a slightly different version now seems plausible: "AI breaks crypto exchanges."
There are hundreds of billions in digital assets sitting in the centralized custody of major exchanges. This is the juiciest target for hackers anywhere on the internet.
I think there is a high probability that in the next few months, a top ten exchange loses billions of dollars of customer assets.
If this happens, there will be a small immediate selloff as we've seen after past hacks. But it will also likely kick off a new narrative: that further hacks are only a matter of time, and that all assets on centralized exchanges are fundamentally insecure.
Crypto's best path through the coming months is to define itself *positively* with respect to AI - for example, "crypto is the financial layer for agents."
But if the main AI-related narrative that sticks to crypto is *negative* - like "crypto exchanges are the biggest losers in the cybersecurity apocalypse" - then we're in for a rough winter.
🚨 PHP is going to be dropping emergency security updates tomorrow (October 21st, 14:00 UTC).
- CVE-2026-109618 & CVE-2026-109619 are unauthenticated RCE vulnerabilities both with a score of CVSS 9.2
- The RCE appears to work on default installations of many services & frameworks such as WordPress, Magento, Laravel and more
- PHP versions >5.4.0 affected
- Discovered by team @calif_io
Matrix retweeted
Every time there is a catastrophic security failure in the Bitcoin industry, it is to my great chagrin that the common response is "we can no longer trust X, move to Y."
And it's a mass migration from Single Point of Failure X to Single Point of Failure Y. 🤦♂️
Matrix retweeted
"It's not our war" well they just hit one of our embassies so I think it's starting to be our fucking war
Matrix retweeted
How it feels when you're sick and can't sleep all night, then see the sun rise so you know you're dead and there's no redemption
Matrix retweeted
I really like this framing of "best trade ever".
I'm sure most people would expect best == most profitable, but a trade that protects you from catastrophic downside is more deserving of that title even if it results in realized losses.
my best trade ever -
not what u would expect...and i think it's a good lesson on risk management.
i used to trade HTZ CDS, and all throughout 2019/2020 i kept getting lifted in HTZ frontend CDS...was always bank desks..and when those guys come in u basically know that they hedging stuff and u can sell at really good levels
but basically i sold quite a lot to the point where my jump risk was pretty bad..to the tune of about $50m - ie, if hertz defaulted and the CDS triggered, i would lose $50m
for weeks and week and weeks my boss told me to cut the risk, but i was just lazy and never really did, no one would sell it and i basically had to pay up quite a large amount that would have had a negative pnl effect for me so i was just apathetic about covering what was lazy risk
then in march 2020 all the covid fears kicked off, and people started to panic on leisure-related companies etc...htz cds went a lot wider and the curve had started to flatten, i was basically losing like $200-300k a day on it and obviously my boss was livid coz he'd been telling me for weeks to cut it
then we had that first crazy day where circuit breakers got triggered etc...and im basically panicking...i go round asking people for offers and then eventually someone shows me an offer (actually quite a well-known HF founder)...but it was a crazy high level...basically if i did the trade i was paying way way above market and it would have cost me $5m in pnl on that day alone
but basically everyone including my boss was off the desk in a meeting and the guy was basically saying last look need to know now or he's going to pull the offer...and so basically i just lifted him...booked the trade...boss comes back to desk and sees my pnl like -$6m (i was down the most on the entire floor) and was like WTF did u do
anyways next few days i continue to bleed, my pnl goes from being +$5M on the year to around -$10M...so $15M swing in just a few days...and then literally like a week after hertz defaults lmao
even tho it's not a trade i've made money on, i consider it my best trade ever because i had to make a really aggressive decision to cut bad risk (that i should have cut long ago), and it saved me (and the bank) from losing a monstrous amount of money
fortunately, COVID created the best trading environment ever seen for credit derivatives and not only did i make it all back but i ended the year up $40m.
one thing that trading that market taught me (and i went through 6 different CDS auctions...ie companies defaulting)...sometimes u get urself into a bad position and u know in ur stomach it's a bad trade, but u don't do anything about it because u don't want to take the loss and ur just hoping for it to go higher...it goes from "ill sell it back at ATHS, to ill sell it at breakeven to ill sell it at a 20% loss" but each time you should have just been aggressive to move the risk even though the market is illiquid
ok that's it cheers
Matrix retweeted
We are long, long, long overdue to reduce the amount of KYC we do as a society.
It doesn’t stop crime. It enables mass surveillance of the innocent by the tyrannical. And, perhaps most of all, it enriches hackers with troves of intimate personal data.
p2p.coincenter.org/p/the-hug…
Matrix retweeted
gambling on new pairs isn't locking in, its being lazy and offloading the cognitive burden. its harder to find real conviction than it is to rip a lottery ticket. if someone said they were going to lock in as they sports bet/traded options you'd look at them the same way
a small port has less market impact, more nimble, many more advantages than a large port. the concept of "not enough size" is relative framing vs CT that is poisoning ppls process and returns
Matrix retweeted
There is a critical vulnerability being actively exploited on BTCPay Server, which can result in the loss of funds.
Please update your BTCPayServer to 2.4.2 by going to Admin Dashboard -> Server -> Maintenance -> Update & verify the 2.4.2 version string in the footer.
If you are unable to update right away, turn off your BTCPay Server to prevent unauthorized access until you can update.
Matrix retweeted
Join team COLDCARD. Our wallet's are battle tested and proven, there is no second best.

























