John Morgan

Even when he has a 50/50 shot, the odds are 80/20 in his favor. $BTC $TQQQ

[John Morgan @johnmorganFL]

Like this move from Lighter: https://t.co/0i2ppswi2A's weETH now works as perp collateral.
Restaked ETH backs your margin and keeps accruing rewards.
It counts at 70% of index value, with a 1,000 weETH platform cap.
Measured rollout beats a free-for-all.

[John Morgan @johnmorganFL]

Coinbase is now open for AI agents. ChatGPT, Claude and Grok can place real trades from a chat, with order previews and an off switch.
Coinbase's own advice: give the agent a separate, small portfolio, not your whole stack. $COIN

[John Morgan @johnmorganFL]

Bitcoin is back above its 200-day average vs the Nasdaq, snapping a 235-session streak below it. That is a long run of tech beating BTC finally cracking. Does it hold through FOMC, or is this another fakeout? $BTC

[Bitcoin Magazine @BitcoinMagazine]

JUST IN: Bitcoin has risen above its 200-Day Average against the NASDAQ, breaking a streak of 235 sessions below the average! 🚀

[John Morgan @johnmorganFL]

Heads up, CoinShares holders: seven of its Swedish altcoin and staking ETPs get force-redeemed for cash on Nov 9. Want the coins instead? Register by Oct 26. The BTC and ETH trackers aren't affected.

[John Morgan @johnmorganFL]

CISA and the FBI just put SafePay ransomware on blast 🚨
• Stolen logins + unpatched VPN/edge devices
• Legit IT tools to move undetected
• Backups wiped before encryption
• Double-extortion phone calls
~600 victims so far. Patch the edge, protect the backups. #StopRansomware

[John Morgan @johnmorganFL]

@TheHackersNews Two PHP warnings in two days. Silver lining: the new unpatched CVE-2026-115560 only hits unusual session configurations. The catch: plenty of teams can't say what their session config actually is. Check php.ini and apply PHP's mitigation guidance now, not when a patch lands.

[John Morgan @johnmorganFL]

Reflect's Create lets anyone launch a yield-bearing stablecoin on Solana in one transaction. Slick, but a 21% average APY is never risk-free.

[John Morgan @johnmorganFL]

I'm with CZ on this one.
AI isn't what breaks Bitcoin. The internet and banks run on weaker encryption, so they'd crack first.
What AI is already doing: making phishing and social engineering way more convincing.
Your seed phrase is the attack surface now. $BTC

[John Morgan @johnmorganFL]

Solana's biggest consensus change since launch is now live. What it means: payments go from "wait for confirmation" to basically done, and wallets and apps don't have to change a thing. $SOL

[John Morgan @johnmorganFL]

Two Marines are suing the Pentagon under the Privacy Act over the DMDC breach that exposed 3M+ military-linked records. Inspector general reports flagged the gaps back in 2021. 🛡️

[John Morgan @johnmorganFL]

TRON quietly had a monster Q3 as a stablecoin rail (per CoinDesk Data and Nansen):
• ~73% of all stablecoin transfer volume
• $2.21T in stablecoins settled
• USDT on TRON hit a record ~$92.7B
• TVL up 26.6% QoQ to $5.7B
Payments first, DeFi second. $TRX

[John Morgan @johnmorganFL]

@brian_armstrong Aave adding lending and borrowing for tokenized stocks on Base is the real unlock. Stocks onchain stop being something you just hold and start working as collateral. That's where tokenization goes from a headline to actual capital efficiency.

[John Morgan @johnmorganFL]

1Password just launched a way for AI agents to log in for you without ever seeing your password. You approve each sign-in. 🔐

[John Morgan @johnmorganFL]

a16z crypto is reportedly dropping "crypto" from its name (via The Information), and a founding member may be leaving.
Before calling it a retreat: its $2.2B fifth fund, closed months ago, is still crypto-only.
Paradigm and Haun are widening mandates too.
Feels more like a rebrand than an exit.

[John Morgan @johnmorganFL]

@OpenAI Giving outside evaluators three weeks on site with deep infra access is the right precedent. Monitoring for internal agents is only as trustworthy as the people allowed to poke at it. Will the METR write-up become a recurring audit, or stay a one-off pilot?

[John Morgan @johnmorganFL]

If your trading bot's keys sat on Railway, I'd move hot-wallet funds and rotate everything today 🔐

Railway says customer env vars may have been accessed. Taylor Monahan counts ~$371K swept from 200+ addresses, a link Railway hasn't confirmed.

[John Morgan @johnmorganFL]

Uniswap v4 now routes swaps through Curve, Fluid and PancakeSwap liquidity on Ethereum, Base and Robinhood Chain.
What that means: those trades still pay Uniswap fees, which feed UNI burns. $UNI

[John Morgan @johnmorganFL]

@Cointelegraph @glassnode ~$81K is the line. It's roughly where ETF buyers sit at break-even, and spot ETFs still took in $1.07B this week. Holding it turns cost basis into support. Losing it is when the mid-$70Ks talk gets real.

[John Morgan @johnmorganFL]

David's Bridal is spinning its AI wedding-planning arm, Pearl, into its own public company 💍
• Target valuation around $350M, closing expected in the first half of 2027
• Over 30% EBITDA margin expected this year, revenue projected above $85M in 2027
• Pearl takes the IP and licenses it back to the stores
• Two bankruptcies in, the AI side became the growth engine
Rare AI play that already has its customer.

[John Morgan @johnmorganFL]

@TheHackersNews No CVE is the scary part. Scanners and SBOM tools key off advisories, so this one stays invisible and teams have to check OpenCode versions by hand (fixed in 1.18.33) and prune untrusted remote MCP servers. Should MCP clients ship with a server allowlist by default?