Community alert: Ledger had another data breach via payment processor Global-e leaking the personal data of customers (name & other contact information).
Earlier today customers received the email below.
Action required for users impacted by the Browser Extension v2.68 incident:
We identified a limited group of ~36k wallets (0.016% of our user base) still having a compromised wallet(s). All impacted users have already been directly notified via a security incident banner on your Trust Wallet Browser Extension.
In case the users haven't opened extension to see the banner, we also tried to notify them if the same wallet addresses have been imported to their mobile version, via:
•a mobile app notification with action required notice
•a pop up when you open the Trust Wallet mobile app
If you have been notified, please abandon the old compromised wallet, create a new wallet and move your funds immediately to ensure your assets remain safe. Instruction below.
If you have not received a notification, you are not affected and no action is required.
Step-by-step guide:
https://t.co/CLWkpQkFLf
This applies to all wallets that used Trust Wallet Browser Extension version 2.68 between December 24-26, 2025.
We should all build worlds to inhabit and make noise in our own style. Sam Drew at Lumps (@lumps_uk) with his crazy illustrations has built a unique world and it is loud and fun. Check and check. Lessons learnt.
[https://t.co/LX6gT1veCW]
My son asked for an iPad for Christmas
I said no
“Son, tablets are closed-source walled gardens controlled by centralized corporations”
Instead I gave him a Ledger
He opened it with visible disgust
Then something utterly shocking happened
My wife’s CrossFit trainer Luca got him the iPad my son wanted
“Games should be fun,” he said
“Thank you Uncle Luca” my son hugged him for almost a minute
I pulled my wife aside and explained that Luca is promoting platform-dependent consumption
She mumbled “at least he got him a real gift”
That night, while my son was asleep, I took the iPad and went to the store
Thanks to a generous holiday return policy, I was able to get a full cash refund of $549
Then I bought a gift for my son that he truly deserves
$549 worth of ETH
When I came home my son was crying looking for his iPad
I explained to my son that centralized hardware is temporary
Self-custody is forever
I showed him the receipt for the refund
Then I took him to Etherscan to see the ETH on his Ledger
He started crying and asked when he could play games
I said “when the protocol matures”
He started shaking and cried even more
I smiled
“Decentralization takes patience”
🚨 ALERT: ZachXBT reported multiple Trust Wallet users experiencing fund drains following a recent Chrome extension update.
Trust Wallet confirms security incident affecting version 2.68 and urges immediate upgrade to 2.69 while they’re working on the issue.
Younger brother came into town for the holidays, we were talking about crypto yesterday.
Trying to figure out why it's been so weak, even with strong equity markets. He threw me a curveball.
"Crypto isn't that cool anymore."
Blew my mind. The kid is 22.
"Prediction markets are better, and stocks too because they don't get rugged 24/7".
I looked much deeper last night...and what I'm observing under the surface is not technical or fundamental.
It's cultural. A social shift. Attention has relocated.
Starts on youtube. Views are down across anything related to crypto.
A crypto youtuber with 139K subscribers said that his viewership had dropped more in the last 2 weeks than anything he's seen in 5 years.
Second point. Attention is shifting from the top. The biggest crypto influencers are publicly "losing interest" in crypto, and switching to stocks (sources attached).
Third point. Crypto has long been a free-spirited, lawless, young man's game.
But with legacy brokerages like Schwab/JPMorgan getting involved + gov't interest, is crypto losing the demographic that made it popular in the first place?
Potentially...as the perception's changed.
Fourth point. Optionality. Every vehicle is becoming more accessible. From $COIN adding stock trading, to $HOOD adding 0DTE options, to prediction markets as a whole...
Everything's right there...without the perceived risk of a rug-pull via the “lawless” crypto landscape that defined crypto’s appeal in the first place.
Question is...does real-world crypto utility generate enough demand to offset a sustained decline in retail participation?
All I'm saying is the divergence of the once highly correlated $BTC - $QQQ pair is highly suspect. And it's only getting wider.
Yes, you can argue some of these things happen in every crypto bear market, but there's new variables & moving parts now (optionality + legacy brokerages participation + gov't interest) that change the game.
Crypto seems to be in a transition phase...from a momentum asset to an infrastructure asset.
Fundamental transitions like this are usually not kind to price in the medium term.
Long term, I'm bullish on the crypto's utility and think it will be everywhere, but the real world utility/adoption (and subsequent growing pains...) is something I'm watching in 2026.
Built this because I was tired of doomscrolling Twitter for alpha. Track your favorite analysts' consensus in one place. Daily market summaries in 17 languages.
https://t.co/HRji3w1vgs
Today @jpmorgan, the world's largest bank by market cap per @WSJ, announced they're launching their first ever tokenized money market fund—MONY—on Ethereum.
The firm is seeding the fund with $100M of its own capital before opening to outside investors on Tuesday.
Private Payments on X are live. Built on @solana.
Tag any handle, mention amount, tag @anoncoinit & the payment is sent privately. The transaction is end-to-end encrypted.
If you have a blue check, you already have $5 to try it. No signup needed.
A new era of social payments.
I recovered another wallet by partial seed phrase, this time 3 words were lost and 9 words were in correct position :
after i dropped the script to recover 2 lost words in an hour which was mathematically not possible but somehow it was tricked, so i started to recover 3 words and see if its even possible
to crack 3 words :
each missing word had 2048 possible values (BIP39 wordlist), so total combinations were 2048³ = ~8.6 billion possibilities but with the BIP39 checksum filter, a 12 word seed has 4 bits of checksum, in simple words only 1 in 16 combinations are valid
so real number of valid seeds = ~8.6b/16 ≈ 536 million possibilities
there was one more difficulty this time which made it harder to crack that is, it was not the first addresses on that seed, it was the second one, what do i mean by that ?
BIP44 :
correct derivation path for modern MetaMask is m/44'/60'/0'/0/i
first address on phrase X = m/44'/60'/0'/0/0
second address on phrase X = m/44'/60'/0'/0/1
and so on
that means for every valid seed i had to derive two addresses, check both index 0 and index 1
so total derivations ≈ 536M × 2 ≈ 1B generations that would take years if combined with balance check
reason :
while checking if those possible wallets were active onchain and to filter wallets with 0 onchain history the major issue is blockchain RPC calls to check balances, it is slow and rate limits again and again limiting upto 30-150 attempts/sec, even if you use indexed APIs like Covalent it would still rate limit (~4 requests per second) , to tackle this there was only 1 option use Target_Address because even using multiple RPCs to back up each other the amount of requests you need to check per second still over powers the capacity of multiple rpc limits
by using Target_Address i was lucky enough to hit the seed early so i did not need to filter all 536 million possibilities, it took around 8 hours until i hit on the actual phrase : m/44'/60'/0'/1 with the balance i believe the time can be reduced heavily by renting powerful cloud GPUs along with little bit of luck
i modified the script i dropped publicly 2 days before whichrecovers 2 words and that source script is really powerful if modified further
hope you learnt something new from my experience today
The Tether folks are in the early innings of running a massive interest rate trade. How I read this audit is they think the Fed will cut rates which crushes their interest income. In response, they are buying gold and $BTC that should in theory moon as the price of money falls.
A roughly 30% decline in the gold + $BTC position would wipe out their equity, and then USDT would be in theory insolvent. I'm sure some large holders and exchanges will demand a real-time view of their B/S so they can assess the solvency risk of Tether. Get out your popcorn, I expect the MSM to run wild with this, especially all the editors with TDS who want to shit on Lutnick and Cantor for backing this stablecoin.
vitalik introduced Kohaku—ethereum’s native and compliant privacy framework.
it's the biggest privacy upgrade path ethereum has ever outlined.
i try to explain the flow in the most intuitive way possible.
so let's say alice wants to send $1k to bob.
1. say bob has a normal wallet. (0xABC...)
2. bob creates a stealth keypair linked to his real wallet.
3. alice derives a one-time stealth address from bob's stealth key.
4. alice sends money to the stealth address.
5. bob scans the network to see if his stealth key's addresses received funds.
6. the stealth address alice sent the funds to expires.
in essence, Kohaku creates an ephemeral stealth address with your public key, which lets you execute a private action without revealing the link to your main wallet.
this is a game changer, but why is it compliant?
you can publicly reveal the linkage if required (for regulation, audits, institutions).
but the blockchain does NOT automatically expose it.
believe in somETHing.
DUMMIES GUIDE TO BEING QUANTUM SAFE.
In the past it was about protecting your PRIVATE KEY (your seed phrase). In the age of big scary quantum computers (BSQC) that are coming, you need to protect your PUBLIC KEY also.
Basically a BSQC can figure out your private key from a public key.
The present day taproot addresses (the latest format) are NOT safe, these are addresses starting with "bc1p" and they embed the public key into the address, not good.
Prior formats hide the public key behind a hash, so a BSQC can't easily crack it.
Do this:
1) create a new segwit wallet. It will start with "bc1q" (NOT "bc1p"), you can use older formats too like ones starting with "1" and "3"
2) send all your BTC into this new address
3) you can continue to stack sats into this new address
4) NEVER send BTC out of it, once you do you're BSQC hackable because your public key is revealed
5) wait for Bitcoin to upgrade to a quantum safe protocol, this may take 7 years, who knows
6) send your BTC into the new quantum safe address when the network is NOT congested, once you send, you reveal the private key for a short time. It's unlikely a BSQC will steal your coins in that short window
I'm being asked what x402 is, so here's why you should care:
a) Background:
- The x402 protocol enables agents to make payments onchain
@a16zcrypto 2025 "State of Crypto" Report specifically mentioned x402 in the context of agentic payments, which is anticipated to hit $30 trillion in autonomous txs value by 2030
- It's dubbed the "Payments MCP" [Model Context Protocol];
I'll link my MCP article below so you have an understanding, but the "quick and nasty" is that MCP enables agents to interact with real world data, so payments MCP enables agents to transact with their own wallet
b) Backers: @coinbase + @Cloudflare
- So you'll see the bulk of this activity on @Base; But it's also cross-chain (Solana, Polygon, Near etc)
- It's why you've seen several @virtuals_io x402 agents pop off in the past few days - several of the ecosystem agents use the x402 protocol
- The acquisition of Echo by Coinbase took centre stage earlier this week; but this is Coinbase AI Agent baby; and IMO (I'm biased) far bigger. Sorry @icobeast
c) Relevant x402 protocols:
- @pingobserver - first token minted by x402
- @heurist_ai
- @virtuals_io
- @questflow
- @AnchorBrowser
- @GoKiteAI announced its partnership with @brevis_zk this week for privacy around payments with agents; it uses x402
- @Cloudflare Agents SDK + Google A2A payment protocol
- @PayAINetwork
- $DREAM (Virtuals)
- $SANTA (Virtuals)
- $GLORIA (Virtuals)
- $AURA (Virtuals)
Honestly the list could go on, so I'd advise researching before spraying and praying.
NFA on these - they're simply affiliated with using the x402 and it doesn't necessarily mean value will accrue to these tokens. If anything it'll accrue to the protocol backers itself - COIN.
You can check https://t.co/TomVpva3Mq (see thumnail)
d) Other Insights:
1) @circle has an ongoing relationship with Coinbase and the main currency transacted by these agents is Stablecoins to pay for compute etc. So as you can imagine USDC will likely be the stable of choice
2) Neo Banks are gearing up for AI Agent payments:
- @tether launched its wallet development kit; the tagline is that there's anticipated to be trillions of wallets. These obviously won't be human wallets, so I'll let you connect the dots
- @useTria partnered with several AI protocols and this week with @billions_ntwk for zkKYC as privacy around payments comes to the forefront
- @Visa + @Mastercard announced their AI Agent programs a few months ago and are rolling out the infra for trillions of transactions. Almost all of these Cards from these Neo Banks are VISA/Mastercard.
- @PayPal ventures led the $18m Series A for Kite AI; PyUSD coming in hot here for agentic stablecoin usage?
Next step: Robots will have their own crypto wallets with virtual cards to make payments in the real world. Welcome to physical AI!
3) @a16zcrypto report on AI referenced x402 specifically when talking about AI Agents and payments, anticipating $30 trillion in agentic purchases by 2030
Interesting quote: "x402 is what the internet was supposed to be - payments via https" - @_imhamzah
4) @RibbitCapital released their 2025 "Token Letter" which discusses agents + payments (see "knowledge" tab on their website):
- Page 1/2: AI systems are economic participants that will earn and spend
- P33/34: Stripe and upstarts like PayOS will capture a lot of value building this infra for agents
- P33-35: Stablecoins and programmable money will be used by both humans and agents for payments and asset mgmt.
- P39/40: AI agent payments will become new financial rails for autonomous entities
TLDR: AI Agents + Payments is only going to get bigger. x402 is positioning itself at the enabler of this parabolic payment boom.
The cats out of the bag, so how would you capitalize on the upside?
Taking a cut in fees on trillions of txs isn't a bad idea.