Contacts
Info
The Learn Crypto Podcast (formerly the Learn Cardano Podcast) helps you understand crypto and blockchain, from the basics through to the details. Cardano remains a core focus, alongside the wider...
show more
The Learn Crypto Podcast (formerly the Learn Cardano Podcast) helps you understand crypto and blockchain, from the basics through to the details. Cardano remains a core focus, alongside the wider crypto space: Bitcoin, Ethereum, DeFi, stablecoins, wallets, security and regulation.
Whether you are new to crypto or already building, this podcast is for you. Expect news updates, interviews with founders, builders and community members, and step-by-step guides on staking, governance, smart contracts, DeFi and staying safe.
Subscribe and leave us a 5-star review.
Find all of the show notes at https://learncardano.io.
Follow me personally: https://chatsoon.app/id/peter-bui-5ec50167
DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed. No tokens, payments, or incentives were received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncryptopod
🔗 https://facebook.com/learncardano
show less
Whether you are new to crypto or already building, this podcast is for you. Expect news updates, interviews with founders, builders and community members, and step-by-step guides on staking, governance, smart contracts, DeFi and staying safe.
Subscribe and leave us a 5-star review.
Find all of the show notes at https://learncardano.io.
Follow me personally: https://chatsoon.app/id/peter-bui-5ec50167
DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed. No tokens, payments, or incentives were received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncryptopod
🔗 https://facebook.com/learncardano
Episodes & Posts
Episodes
Posts
Transcribed
13 NOV 2026 · A 535,400 USDT address-poisoning loss opens this Cardano and Midnight news update, alongside the reported Binance compromise chain and an iOS vulnerability warning. Peter explains why wallet transaction history cannot replace checking an address against its original source, and why unfamiliar interview code or software should be handled in an isolated environment.
The update then covers Blockenfy’s growth from a Midnight hackathon winner, NightKit’s preview route for connecting existing wallets, and EMURGO and Yoroi’s plan to deregister their DRep IDs on 30 November 2026. Viewers will understand how NightKit aims to reduce wallet setup friction and why affected Cardano delegators need to choose a new representative.
The episode includes a sponsored segment from Nexo Australia explaining its Credit Line product, changing loan-to-value ratios and the possibility that borrowers may need to add collateral, repay part of a loan or have assets sold.
Chapters:
0:00 It Wasn't Really a Hack: Address Poisoning
1:54 How the Binance Hackers Got In
4:58 Following the Stolen Funds
6:46 Binance Warns iPhone Users
8:07 Sponsor: Nexo
10:42 Blockenfy on Midnight
11:59 NightKit by 1AM
15:08 EMURGO and Yoroi DReps Are Closing
16:20 How to Find a New DRep
17:42 Strike Finance Liquidity
18:28 Cardano Developer Survey
19:24 I've Joined AlphaGrowth for Cardano PRIME
20:29 Coming Up: Aussie Crypto Tax Videos
21:32 Wrap Up
What you'll learn:
- Address-poisoning victims can mistake a fake transaction in their wallet history for their own test transfer, so the destination address must be checked against its original source before sending funds.
- Developers handling unfamiliar interview assignments or repositories can reduce risk by using a burner computer, virtual environment or Linux system booted from a USB drive.
- Nexo Australia’s sponsored segment explains how a crypto-backed Credit Line uses collateral and why a rising loan-to-value ratio can lead to demands for more collateral, repayment or asset sales.
- Blockenfy progressed from winning the 2025 Midnight Hackathon in Buenos Aires to building a profitable white-label real-world asset tokenisation business.
- NightKit by 1AM is in preview on Midnight testnets and lets users connect an existing wallet, sign a message and open a Midnight account without an app holding their key.
- EMURGO and Yoroi plan to deregister their DRep IDs on 30 November 2026, so affected Cardano delegators will need to select a new DRep.
- Cardano’s developer survey asks builders for 15 minutes of feedback after receiving 109 responses last year.
- Peter has joined AlphaGrowth to support communications and content for Cardano PRIME.
Links & References:
PSA and hack updates on Binance:
- https://link.learncardano.io/QUBpUA
- https://link.learncardano.io/B59542
- https://link.learncardano.io/3M9Ziq
- https://link.learncardano.io/FVTCvB
- https://link.learncardano.io/DjXeJU
- https://link.learncardano.io/17IzsG
- https://link.learncardano.io/0m9vh0
Midnight Updates:
- https://link.learncardano.io/gH7Loe
- https://link.learncardano.io/YpZkvT
Emurgo / YOROI DRep:
- https://link.learncardano.io/nrE9bB
- https://link.learncardano.io/vG2x1z
Strike:
- https://link.learncardano.io/R0YU4g
Developer Survey:
- https://link.learncardano.io/MXumOK
Cardano PRIME:
- https://link.learncardano.io/Inp2ix
New Upcoming Content:
- https://link.learncardano.io/6FI2qc
Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv
Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Transcribed
9 NOV 2026 · A Web3Auth infrastructure vulnerability exposed private keys for some Keplr wallets created through Google or Apple social login. Peter explains why this was not a compromise of Google or Apple accounts, how affected wallets could be swept, and what the reported recovery activity means for users.
The episode breaks down how Web3Auth reconstructs wallet keys, the difference between a two-of-three Shamir’s Secret Sharing setup and single-factor authentication, and why changing a Google password cannot secure a private key that has already leaked. It also covers the concentration risk of using one social account across many services and the role of unique credentials and password managers.
Cardano users also get practical context on social-login wallets, self-custody and the questions to ask before trusting any provider-assisted wallet setup.
Chapters:
0:00 Intro
0:40 What Happened at Keplr
2:40 How a Web3Auth Login Works
3:56 Shamir's Secret Sharing
4:59 Single Factor Mode
6:07 Web3Auth's Statement
6:22 The Rescue and the Numbers
8:32 Should You Sign In With Google?
10:07 CZ on Self-Custody
10:41 Are Cardano Users Affected?
11:12 Wrap Up
What you'll learn:
- Web3Auth said a vulnerability in its own infrastructure led to private keys leaking from some Keplr wallets created with Google or Apple login.
- Google and Apple accounts were not identified as the compromised systems; the failure involved the wallet key service behind the social login.
- Web3Auth’s typical two-of-three model separates login, device and recovery shares, but single-factor mode can make the network-held share sufficient to rebuild a wallet key.
- Changing a Google password cannot protect a wallet after its private key has already leaked.
- The episode cites roughly 44,700 swept wallets and about US$5.6 million held in Web3Auth recovery addresses, while distinguishing recovery activity from confirmed theft.
- Using one Google account across many services creates concentration risk even when Google itself was not breached in this incident.
- Crypto users should understand who can reconstruct their wallet key and whether independent device or recovery factors are required.
- Cardano users should review any wallet that uses social login and compare its key-sharing design with seed phrase or hardware-wallet self-custody.
Links & References:
Full show notes:
- https://link.learncardano.io/MBzf2y
- https://link.learncardano.io/qiQ3pp
- https://link.learncardano.io/wehj3I
- https://link.learncardano.io/zsZ82Y
- https://link.learncardano.io/EFvn8V
- https://link.learncardano.io/bA98t8
Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv
Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Transcribed
6 NOV 2026 · Cardano’s next scaling phase and Midnight’s mainnet rollout are both moving forward. This update covers the final NIGHT redemption window, a draft rewards model for Cardano stake pool operators, open smart-contract deployment on Midnight, Monument Bank’s tokenised deposit plans, and the latest Dijkstra testnet work ahead of Leios.
Peter also breaks down live ecosystem activity across RealFi, Strike, ATLAS, Ascend, Revuto and WingRiders, including new mainnet launches, integrations and infrastructure upgrades. The episode includes a paid sponsorship segment from Nexo Australia at 7:58 explaining how crypto-backed credit lines work, including loan-to-value and liquidation risk.
PAID PARTNERSHIP DISCLOSURE: This episode contains a sponsored segment from Nexo Australia beginning at 7:58.
Chapters:
0:00 Happy 39th Birthday, Charles
0:39 Glacier Drop: The Last Thaw
2:43 NIGHT Rewards for SPOs
4:10 Midnight and Other Chains
5:27 Midnight Mainnet Open to Developers
6:05 Monument Bank and the SALT Panel
7:58 Sponsor: Nexo
10:41 RealFi and Pulsewave
12:16 Dijkstra and Leios
14:06 Strike and Conflux
16:10 Atlas on Mainnet
16:54 Ascend Market Prediction Perps
18:12 Revuto on Solana
19:23 WingRiders DEX Revamp
20:11 Wrap Up
What you'll learn:
• Midnight’s final NIGHT redemption tranche is under way, with 28 days remaining from the recording date to claim eligible tokens.
• A draft Midnight proposal outlines how participating Cardano stake pool operators and delegators could earn NIGHT through block production, but the mechanism is not yet active.
• Midnight has opened mainnet smart-contract deployment to developers, allowing more applications to move beyond the earlier gated process.
• Monument Bank presented plans for a one-year tokenised fixed-term deposit that would be available to UK retail customers.
• The Dijkstra test network was upgraded on 2 November as Cardano prepares protocol work that includes Leios scaling.
• Strike is adding Conflux-linked fiat off-ramps and incentives while approaching two billion in all-time trading volume, according to the episode’s cited updates.
• ATLAS has launched on Cardano mainnet, while Ascend has introduced prediction perpetuals to private mainnet groups on Midnight.
• The sponsored Nexo Australia segment explains that borrowing against crypto can create rising loan-to-value and liquidation risk when collateral values fall.
References:
Happy BDay Charles:
- https://link.learncardano.io/jgCX8P
Pineapple on Pizza:
- https://link.learncardano.io/cezM7v
Glacier Drop Redeem Ends Soon:
- https://link.learncardano.io/mVjpbV
Midnight Updates:
- https://link.learncardano.io/5Z5RPo
- https://link.learncardano.io/OCNBqh
- https://link.learncardano.io/rx1BNt
- https://link.learncardano.io/AjTvig
- https://link.learncardano.io/wJzW1u
Learn more about Nexo:
- https://link.learncardano.io/QR6DJe
RealFi:
- https://link.learncardano.io/nIK3uH
- https://link.learncardano.io/psHjzK
Dijkstra Hardfork:
- https://link.learncardano.io/vIidij
Strike Finance Killing It:
- https://link.learncardano.io/OhsgKc
- https://link.learncardano.io/RvcYTw
- https://link.learncardano.io/rU5ZYr
ATLAS Beta Public Mainnet Live:
- https://link.learncardano.io/nndhj7
- https://link.learncardano.io/hJVE3z
- https://link.learncardano.io/XkLxVE
- https://link.learncardano.io/lSMxd2
Ascend Prediction Perps Live in Midnight Mainnet:
- https://link.learncardano.io/HMs6sM
- https://link.learncardano.io/aK7Xm2
Revuto Solana:
- https://link.learncardano.io/SWWhA7
Wingriders Upgrade:
- https://link.learncardano.io/XpziVg
- https://link.learncardano.io/TmHJxa
Website: https://link.learncardano.io/cQEeJd
X/Twitter: https://link.learncardano.io/sH30IF
Disclaimer: Educational content only; not financial, tax, accounting or legal advice. Borrowing against crypto can involve collateral calls and liquidation risk. Consider your circumstances and seek appropriately licensed professional advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Transcribed
5 NOV 2026 · Cardano PRIME has selected its first cohort of nine teams for AlphaGrowth's Cardano DeFi program. Peter breaks down what Sundae Labs, Liqwid Finance, Indigo, Steer, VIA Labs, ReBond, Dial, Midgard Labs and TxPipe are expected to deliver.
The cohort covers new market functions, isolated lending markets, collateral upgrades, automated liquidity management, cross-chain routing, tokenised bonds, programmable invoices and independent smart-contract audits—all aimed at addressing infrastructure gaps and supporting deeper liquidity on Cardano.
Chapters:
0:00 Cardano PRIME's First Cohort
1:15 How the Teams Were Picked
1:51 Sundae Labs and What Cardano DeFi Is Missing
3:17 Liqwid V3
3:49 Indigo
4:08 Steer
4:40 VIA Labs
5:18 ReBond
5:40 Dial
7:05 Midgard Labs
7:22 TxPipe
7:52 Nine Teams, One Goal
8:48 Wrap Up
What you'll learn:
- Cardano PRIME's first cohort includes nine established and newer teams working across Cardano DeFi infrastructure.
- Sundae Labs, Liqwid Finance and Indigo are funded to expand core market, lending and collateral capabilities.
- Steer and VIA Labs focus on automated liquidity management and easier cross-chain asset routing into Cardano.
- ReBond and Dial add tokenised bond and programmable invoice use cases.
- Midgard Labs and TxPipe provide independent smart-contract security reviews for cohort projects.
- The program is designed to address missing infrastructure and support AlphaGrowth's stated goal of increasing Cardano DeFi liquidity.
Links & References:
- Cardano Prime on X: "TxPipe (@txpipe_tools) TxPipe builds core developer tooling for Cardano and runs smart-contract security audits. PRIME has secured a block of audit hours with them, so every grantee ships with an independent security review behind it." / X: https://link.learncardano.io/hgGYGE
Cardano DeFi is ready to scale.:
- https://link.learncardano.io/2kmfpx
Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv
Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Transcribed
2 NOV 2026 · CVE-2026-98432 is a critical Linux kernel vulnerability affecting versions dating back to 4.4. Because many Cardano stake pools run Linux infrastructure, exposed relays may face crashes or, in a worst-case scenario, remote compromise.
Peter explains how the reported TCP use-after-free works, what it could mean for relays and block producers, and the practical guidance from Intersect: identify affected kernels, apply fixed packages when available, reboot, and use temporary MPTCP or firewall mitigations only as exposure reduction—not as a replacement for patching. The episode also covers Clay Stake Pool’s closure and why delegators should check that their chosen pool is still operating.
Chapters:
0:00 A Linux Bug Hits Cardano Stake Pools
0:31 The Notice: CVE-2026-98432
1:45 Red Hat Details and Which Kernels Are Patched
2:35 How the Bug Works
3:27 Anthropic's Claimed Exploit
3:52 What It Means for Stake Pools
4:38 Worst Case: From Relay to Block Producer
5:16 Your Delegated ADA
5:54 Ubuntu Is Still Waiting on a Patch
6:32 What Stake Pool Operators Should Do
7:03 More Attacks Every Week
7:29 Clay Stake Pool Closes
8:34 Check Your Delegation
8:51 Wrap Up
What you'll learn:
- CVE-2026-98432 is rated CVSS 9.8 and affects Linux kernel versions dating back to 4.4.
- Internet-facing Cardano relays are the most exposed part of a typical stake pool setup.
- A relay outage can stop a pool from propagating blocks even when the block producer remains online.
- Intersect advises operators to check kernels, install fixed packages and reboot as soon as their distribution publishes them.
- Disabling MPTCP or filtering TCP packets with IPv4 options may reduce exposure but does not replace patching.
- Delegators keep custody of their ADA, but should still confirm their chosen stake pool remains active and maintained.
Links & References:
CVE-2026-98432 (CVSS 9.8):
- https://link.learncardano.io/1gLE5G
- https://link.learncardano.io/dwTQxW
- https://link.learncardano.io/tfLwiU
Security advice:
- https://link.learncardano.io/oyvXSP
- https://link.learncardano.io/2QIXbc
Claymates Closing It's Stakepool:
- https://link.learncardano.io/2La0QW
Intersect Weekly Update Advice:
- https://link.learncardano.io/OKumWG
- https://link.learncardano.io/KEGOaM
Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv
Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Transcribed
30 OCT 2026 · A fast-moving security incident affecting Binance-linked wallets was still developing when this episode was recorded. Peter walks through reports of multi-chain outflows, Binance's public updates, and its statement that roughly US$3 billion had been frozen while the estimated impact had risen to about US$6.3 billion.
The episode reconstructs the reported timeline, explains why Tether and Circle freezes mattered, and separates Binance's initial DevOps-laptop explanation from facts that still require a full technical post-mortem. It also covers practical phishing precautions and the risks of concentrating assets with one exchange or wallet provider.
Figures and causes in this episode reflect the sources available during recording and may change as Binance, issuers and investigators publish verified updates. Check official Binance channels before acting on any message or security claim.
Chapters:
0:00 Binance Hacked
0:55 Polymarket and Tampered Ledger Wallets
1:31 The Timeline of the Hack
2:27 Tether and Circle Freeze Funds
2:55 What's Moving Out
3:25 Binance's Official Response
4:13 Watch Out for Phishing Emails
4:47 About $3 Billion Frozen
5:09 Yi He: Binance Will Cover All Losses
5:19 Remember FTX?
5:54 Can Binance Cover It?
7:06 Update: A Compromised DevOps Laptop
8:17 Wrap Up
8:30 Spreading the Risk: OneKey and Tangem
What you'll learn:
- Binance said its initial investigation suggested a compromised DevOps engineer's laptop may have enabled unauthorised withdrawal transactions, while stressing that the investigation was not complete.
- Binance's update put the estimated impact at about US$6.3 billion and said roughly US$3 billion had been frozen on-chain at the time of recording.
- Tether and Circle were reported to have frozen substantial USDT and USDC amounts as issuers and investigators traced affected assets.
- Binance said it would cover losses using the SAFU fund and company funds, but those assurances still require verification against the promised post-mortem and updated proof of reserves.
- Users should verify urgent security messages against official Binance channels and avoid clicking unexpected email links during a high-profile incident.
- The episode discusses spreading custody risk across suitable providers rather than assuming any exchange, software wallet or hardware wallet is immune from compromise.
- OneKey supplied the Classic wallet mentioned near the end of the episode; Peter says any later comparison will be a detailed, honest review.
References:
- X trending context: Binance incident — https://link.learncardano.io/U0tzv6
- X trending context: related security reports — https://link.learncardano.io/lLRanR
- X trending context: incident updates — https://link.learncardano.io/2Bf9Qw
- Initial incident timeline shared on X — https://link.learncardano.io/PJUqfI
- Watcher.Guru asset-flow report — https://link.learncardano.io/zI0rtR
- Binance official incident statement — https://link.learncardano.io/MHcMNx
- Binance official frozen-funds update — https://link.learncardano.io/Q889j0
- Yi He statement on covering losses — https://link.learncardano.io/q77ocX
- Community discussion and solvency questions — https://link.learncardano.io/okNg2k
- Binance initial investigation update — https://link.learncardano.io/40siSn
OneKey supplied the Classic wallet mentioned in the episode. No claim of paid sponsorship is made.
Figures and causes were developing at recording time. Verify updates through official Binance channels. This content is educational only and is not financial advice.
Learn more: https://link.learncardano.io/bQ68Rc
Subscribe: https://link.learncardano.io/u6BDgr DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Transcribed
28 OCT 2026 · Critical PHP2Shell and Node.js vulnerabilities arrived alongside reported Fortinet exploitation, Railway and LiteLLM incidents, weak certificate keys and emergency Ruby fixes, creating a week that online discussions dubbed “Black October”. The internet is not ending, but AI-assisted discovery and exploitation are compressing the time defenders have to patch exposed systems.
Peter breaks down how unauthenticated code execution, leaked credentials and compromised trust infrastructure can affect websites, business networks, developer tools and crypto users. He also explains why some services were taken offline as a precaution and why disclosure timing matters when attackers can rapidly adapt public research.
The practical response is straightforward: apply current security updates, confirm hosted PHP versions, protect sites at the network edge, rotate exposed credentials, use saved bookmarks for crypto services and treat urgent security emails as potential phishing attempts.
Chapters:
0:00 Is the Internet Ending?
1:07 Black October
2:08 PHP2Shell
2:46 Governments Take Sites Offline
3:43 Cloudflare and the NSA
4:22 Fortinet Under Attack
6:22 Node.js and the Brotli Bug
7:19 Patches Before Details
8:03 eMudhra's Private Key of 4
10:07 LiteLLM and Stolen AI Keys
10:40 Railway Breach
11:29 So, Is the Internet Ending?
13:11 What to Do This Week
14:25 Crypto Safety Tips
15:44 Wrap Up
What you'll learn:
- Why PHP2Shell reports put PHP and WordPress operators on alert
- What the Node.js Brotli security issue means for developers
- Why Fortinet, Railway and LiteLLM incidents raise credential concerns
- How weak certificate keys can undermine website trust
- How AI is accelerating both vulnerability discovery and exploitation
- What website operators, developers and crypto users should check now
Links & References:
- PHP vulnerability overview: https://link.learncardano.io/pTtf71
- Black October incident overview: https://link.learncardano.io/aKvkVy
- Websites taken offline: https://link.learncardano.io/h31cFK
- OpenAI security tools report: https://link.learncardano.io/puj8I4
- FBI Cyber Division PHP warning: https://link.learncardano.io/fgdWdD
- European agency shutdown report: https://link.learncardano.io/Ch69Ec
- Cloudflare PHP2Shell response: https://link.learncardano.io/TGImTp
- Node.js October 2026 security release: https://link.learncardano.io/262z3H
- Weak certificate private key: https://link.learncardano.io/R4HEcP
- GitLab vulnerability report: https://link.learncardano.io/OGGcGZ
- Railway environment-variable warning: https://link.learncardano.io/r17mL8
- Node.js Brotli discussion: https://link.learncardano.io/urhifT
- Exposed certificate keys report: https://link.learncardano.io/1yj3sA
- Brotli dependency warning: https://link.learncardano.io/5e6kw1
- Ruby emergency patches overview: https://link.learncardano.io/Hz5WvY
Website: https://learncardano.io
X/Twitter: https://x.com/LearnCardano
Disclaimer: This content is for educational purposes only and is not financial, legal or cybersecurity advice. Verify current vendor advisories and follow the remediation provided by the relevant maintainer or qualified professional. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Transcribed
27 OCT 2026 · Hardware wallets have long been treated as the gold standard for crypto self-custody. Recent incidents involving device authenticity, seed generation, supply chains and leaked customer records show that keeping keys offline is only one part of staying secure.
Peter reviews the risks highlighted around Ledger, Keystone, Coldcard, Foundation and Trezor, explains why personal-data leaks can create physical security threats, and explores alternative approaches including Off Wallet on a Game Boy and carefully generated paper wallets. This is an educational security overview—not a recommendation to use any particular wallet or storage method.
Chapters:
0:00 Intro
0:24 Hardware Wallets Under Attack
1:18 This Year's Breaches
1:38 Keystone's Customer Data Leak
2:45 Coldcard: 594 BTC Drained
3:58 Foundation's Cloudflare Breach
4:14 Ledger's Supply Chain Attack
6:25 Your Data and Wrench Attacks
7:03 Ledger's 2020 Data Leak
7:38 Trezor's Shipping Partner Breach
8:01 Wrench Attacks Around the World
8:49 Keep Your Details Private
9:16 Off Wallet: A Bitcoin Wallet on a Game Boy
11:48 Paper Wallets
13:01 Wrap Up
What you'll learn:
- Cold storage reduces online exposure, but hardware, firmware, supply-chain and customer-data risks still matter.
- Customer shipping records can turn a digital security incident into phishing, fake-device or physical-security risk.
- Buying directly, checking device authenticity and limiting the personal details shared with vendors can reduce exposure.
- Off Wallet demonstrates air-gapped Bitcoin transaction signing on a Game Boy without introducing a new hardware supply chain.
- Paper wallets remove vendor data exposure but require careful offline generation, backup and physical storage practices.
- No storage method is automatically safe; verify the threat model and recovery process before moving valuable assets.
Links & References:
Hardware Wallets This Year:
- https://link.learncardano.io/9mu8Jl
Keystone:
- https://link.learncardano.io/90SeYa
- https://link.learncardano.io/fdeGxB
ColdCard Wallet:
- https://link.learncardano.io/ergL0G
- https://link.learncardano.io/gLwxwG
Smaller Hacks:
- https://link.learncardano.io/hzXsdK
- https://link.learncardano.io/mnHNzf
- https://link.learncardano.io/nFfciW
Ledger Compromise:
- https://link.learncardano.io/2VBTs9
- https://link.learncardano.io/iPuro8
- https://link.learncardano.io/CPIk8u
Wrench Attacks:
- https://link.learncardano.io/cn7ZLs
- https://link.learncardano.io/pg4f7O
- https://link.learncardano.io/hgxENc
- https://link.learncardano.io/Jdin1s
- https://link.learncardano.io/SbgjVW
- https://link.learncardano.io/QlZsSy
Off Wallet:
- https://link.learncardano.io/N72CKu
- https://link.learncardano.io/zvv32F
Gameboy Colour:
- https://link.learncardano.io/PA0LF5
Bitcoin Paper Wallet:
- https://link.learncardano.io/BxgDy6
Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv
Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Transcribed
26 OCT 2026 · Originally recorded in April 2026, this Builders Bench conversation with Raul from FluidTokens examines Bifrost, a proposed route for bringing native Bitcoin liquidity into Cardano without relying on a conventional custodial bridge. Raul explains how Bitcoin can be held through a flexible multisignature controlled by participating Cardano stake pool operators, with signing power weighted by delegated stake.
Peter and Raul discuss the 67% stake threshold, how stake pool operators join the network, what an attack would require, and why Bitcoin holders may be interested in borrowing against BTC rather than selling it. The conversation also covers atomic swaps, Cardano’s UTXO model, one-click DeFi experiences and a walkthrough of the Bifrost testnet flow.
Chapters:
0:00 Intro
1:19 What Is Bifrost?
4:20 How Bifrost Secures Bitcoin
8:44 Stake Pool Operators Run the Bridge
10:04 Could Someone Attack It?
11:44 Can Bitcoin Fix Cardano DeFi?
14:57 What Bitcoiners Want
17:44 One-Click Bitcoin DeFi
19:08 Bifrost Testnet Walkthrough
What you’ll learn:
• FluidTokens designed Bifrost to connect native Bitcoin with Cardano while avoiding custody by a single company or bridge operator.
• Bifrost’s Bitcoin multisignature is intended to be controlled by participating Cardano stake pool operators, with signing power weighted by delegated stake.
• The stated signing threshold is 67% of total participating Cardano stake rather than a simple count of stake pool operators.
• FluidTokens’ atomic swaps allow native BTC to be exchanged for Cardano assets without handing custody to a third party.
• Bitcoin-backed borrowing is presented as an early DeFi use case for holders who do not want to sell their BTC.
• Cardano’s UTXO model could help combine borrowing, stablecoin and liquidity actions into a more approachable one-click experience.
• The Bifrost testnet flow uses a redeemable Bitcoin Taproot deposit so users retain a recovery path if the bridge does not process the transaction.
References:
• Raul: https://link.learncardano.io/plOyrH
• FluidTokens: https://link.learncardano.io/I2TCAy
• FluidTokens Bitcoin: https://link.learncardano.io/XTulqm
• FluidTokens app: https://link.learncardano.io/6LpZan
• FluidTokens docs: https://link.learncardano.io/V0BtsW
Educational content only; not financial or legal advice. Do your own research. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Transcribed
23 OCT 2026 · Cardano faces a busy week of regulation, governance and real-world adoption. The Cardano Foundation has responded to the European Commission’s MiCA review, joined a cross-chain call for clearer US treatment of digital commodities, and highlighted why Cardano’s non-custodial staking model should not be treated like custodial staking services.
Peter also examines Toto Finance’s 22 million ADA treasury proposal for a tokenised copper reserve, CIP-23 min-margin changes expected with the Dijkstra hard fork, 100,000 farms registered through 5am.earth, Lovelace Land’s 3D ecosystem map and RealFi’s reported $2.7 million tokenised fund. The update closes with Bitwater, a proposed screw-in water-heater element that uses Bitcoin-mining heat, including Peter’s practical questions about the product and its claimed utility.
The episode begins with a cybersecurity warning and keeps uncertain points clearly framed: Peter has not completed a detailed assessment of the Toto proposal, and his Bitwater discussion is editorial rather than an endorsement.
Chapters:
0:00 Intro and a Word of Warning
1:17 Cardano Foundation Responds to MiCA
2:03 Non-Custodial Staking on Cardano
3:03 What About Australian Regulation?
4:32 ADA as a Digital Commodity
6:14 How Stake Pool Operators Get Paid
7:26 Toto Finance Copper Reserve Proposal
9:56 Treasury Season and Funding
10:32 CIP-23 Min Margin in the Dijkstra Hard Fork
10:54 5am.earth: 100,000 Farms on Cardano
11:55 Lovelace Land: Cardano Ecosystem in 3D
13:30 RealFi Tokenised Fund Hits $2.7M
14:06 Token Terminal Data in Claude
15:07 Bitwater: Heat Water, Mine Bitcoin
17:18 Putting Bitcoin Mining Heat to Use
18:39 Wrap Up
What you’ll learn:
• The Cardano Foundation’s MiCA response argues for rules that distinguish decentralised networks and Cardano’s non-custodial staking from custodial financial services.
• The Cardano Foundation and five other blockchain organisations want US rules to state clearly that digital commodities such as ADA are non-securities.
• Toto Finance is seeking 22 million ADA from the Cardano treasury for a strategic copper reserve, while Peter cautions that he has not yet completed a detailed proposal review.
• CIP-23 min-margin changes are expected to be included in the Dijkstra hard fork, with the aim of helping smaller stake pool operators compete.
• 5am.earth reports 100,000 farm lands in India registered on Cardano, providing a concrete example of on-chain agricultural records.
• Lovelace Land presents Cardano projects and dependencies as a navigable 3D ecosystem map built from public and on-chain data.
• Token Terminal reports a $2.7 million market cap for RealFi’s Cardano-native sUSDrf tokenised fund.
• Heatbit’s Bitwater concept aims to reuse Bitcoin-mining heat in an existing electric water tank; Peter discusses it as an unendorsed product idea and says he was not paid by the company.
References:
• Cardano Foundation and digital commodities letter: https://link.learncardano.io/WovuDk
• Peter’s digital commodities summary: https://link.learncardano.io/1rQT1f
• Cardano Foundation MiCA consultation response: https://link.learncardano.io/25MKLv
• Peter’s MiCA summary: https://link.learncardano.io/YBjvoH
• Toto Finance copper reserve overview: https://link.learncardano.io/EfNrMI
• Toto Finance proposal announcement: https://link.learncardano.io/FOgaaT
• Toto Finance follow-up thread: https://link.learncardano.io/XtlRWb
• GovTool proposal: https://link.learncardano.io/CNXTzT
• CIP-23 min-margin update: https://link.learncardano.io/ylYw8p
• 5am.earth 100,000 farms milestone: https://link.learncardano.io/wk8S1a
• Lovelace Land announcement: https://link.learncardano.io/EWKeRp
• Lovelace Land: https://link.learncardano.io/9lqiJJ
• RealFi and Token Terminal summary: https://link.learncardano.io/aQPb8J
• Bitwater announcement: https://link.learncardano.io/msUyV8
• Heatbit on X: https://link.learncardano.io/wbOFWD
• Bitwater product page: https://link.learncardano.io/M5F1Bf
Disclosure: The Bitwater segment is editorial commentary, not an endorsement. Peter states in the episode that Heatbit did not pay him.
Website: https://learncardano.io
X: https://x.com/LearnCryptoPod
Educational content only; not financial or legal advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
The Learn Crypto Podcast (formerly the Learn Cardano Podcast) helps you understand crypto and blockchain, from the basics through to the details. Cardano remains a core focus, alongside the wider...
show more
The Learn Crypto Podcast (formerly the Learn Cardano Podcast) helps you understand crypto and blockchain, from the basics through to the details. Cardano remains a core focus, alongside the wider crypto space: Bitcoin, Ethereum, DeFi, stablecoins, wallets, security and regulation.
Whether you are new to crypto or already building, this podcast is for you. Expect news updates, interviews with founders, builders and community members, and step-by-step guides on staking, governance, smart contracts, DeFi and staying safe.
Subscribe and leave us a 5-star review.
Find all of the show notes at https://learncardano.io.
Follow me personally: https://chatsoon.app/id/peter-bui-5ec50167
DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed. No tokens, payments, or incentives were received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncryptopod
🔗 https://facebook.com/learncardano
show less
Whether you are new to crypto or already building, this podcast is for you. Expect news updates, interviews with founders, builders and community members, and step-by-step guides on staking, governance, smart contracts, DeFi and staying safe.
Subscribe and leave us a 5-star review.
Find all of the show notes at https://learncardano.io.
Follow me personally: https://chatsoon.app/id/peter-bui-5ec50167
DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed. No tokens, payments, or incentives were received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncryptopod
🔗 https://facebook.com/learncardano
Information
| Author | Pete Bui |
| Organization | Pete Bui |
| Categories | Technology , How To , Investing |
| Website | learncardano.io |
| mail@learncardano.io |
Copyright 2026 - Spreaker Inc. an iHeartMedia Company
