Contatti
Info
The Learn Crypto Podcast (formerly the Learn Cardano Podcast) helps you understand crypto and blockchain, from the basics through to the details. Cardano remains a core focus, alongside the wider...
mostra di più
The Learn Crypto Podcast (formerly the Learn Cardano Podcast) helps you understand crypto and blockchain, from the basics through to the details. Cardano remains a core focus, alongside the wider crypto space: Bitcoin, Ethereum, DeFi, stablecoins, wallets, security and regulation.
Whether you are new to crypto or already building, this podcast is for you. Expect news updates, interviews with founders, builders and community members, and step-by-step guides on staking, governance, smart contracts, DeFi and staying safe.
Subscribe and leave us a 5-star review.
Find all of the show notes at https://learncardano.io.
Follow me personally: https://chatsoon.app/id/peter-bui-5ec50167
DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed. No tokens, payments, or incentives were received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncryptopod
🔗 https://facebook.com/learncardano
mostra meno
Whether you are new to crypto or already building, this podcast is for you. Expect news updates, interviews with founders, builders and community members, and step-by-step guides on staking, governance, smart contracts, DeFi and staying safe.
Subscribe and leave us a 5-star review.
Find all of the show notes at https://learncardano.io.
Follow me personally: https://chatsoon.app/id/peter-bui-5ec50167
DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed. No tokens, payments, or incentives were received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncryptopod
🔗 https://facebook.com/learncardano
Episodi & Post
Episodi
Post
Trascritto
30 OTT 2026 · A fast-moving security incident affecting Binance-linked wallets was still developing when this episode was recorded. Peter walks through reports of multi-chain outflows, Binance's public updates, and its statement that roughly US$3 billion had been frozen while the estimated impact had risen to about US$6.3 billion.
The episode reconstructs the reported timeline, explains why Tether and Circle freezes mattered, and separates Binance's initial DevOps-laptop explanation from facts that still require a full technical post-mortem. It also covers practical phishing precautions and the risks of concentrating assets with one exchange or wallet provider.
Figures and causes in this episode reflect the sources available during recording and may change as Binance, issuers and investigators publish verified updates. Check official Binance channels before acting on any message or security claim.
Chapters:
0:00 Binance Hacked
0:55 Polymarket and Tampered Ledger Wallets
1:31 The Timeline of the Hack
2:27 Tether and Circle Freeze Funds
2:55 What's Moving Out
3:25 Binance's Official Response
4:13 Watch Out for Phishing Emails
4:47 About $3 Billion Frozen
5:09 Yi He: Binance Will Cover All Losses
5:19 Remember FTX?
5:54 Can Binance Cover It?
7:06 Update: A Compromised DevOps Laptop
8:17 Wrap Up
8:30 Spreading the Risk: OneKey and Tangem
What you'll learn:
- Binance said its initial investigation suggested a compromised DevOps engineer's laptop may have enabled unauthorised withdrawal transactions, while stressing that the investigation was not complete.
- Binance's update put the estimated impact at about US$6.3 billion and said roughly US$3 billion had been frozen on-chain at the time of recording.
- Tether and Circle were reported to have frozen substantial USDT and USDC amounts as issuers and investigators traced affected assets.
- Binance said it would cover losses using the SAFU fund and company funds, but those assurances still require verification against the promised post-mortem and updated proof of reserves.
- Users should verify urgent security messages against official Binance channels and avoid clicking unexpected email links during a high-profile incident.
- The episode discusses spreading custody risk across suitable providers rather than assuming any exchange, software wallet or hardware wallet is immune from compromise.
- OneKey supplied the Classic wallet mentioned near the end of the episode; Peter says any later comparison will be a detailed, honest review.
References:
- X trending context: Binance incident — https://link.learncardano.io/U0tzv6
- X trending context: related security reports — https://link.learncardano.io/lLRanR
- X trending context: incident updates — https://link.learncardano.io/2Bf9Qw
- Initial incident timeline shared on X — https://link.learncardano.io/PJUqfI
- Watcher.Guru asset-flow report — https://link.learncardano.io/zI0rtR
- Binance official incident statement — https://link.learncardano.io/MHcMNx
- Binance official frozen-funds update — https://link.learncardano.io/Q889j0
- Yi He statement on covering losses — https://link.learncardano.io/q77ocX
- Community discussion and solvency questions — https://link.learncardano.io/okNg2k
- Binance initial investigation update — https://link.learncardano.io/40siSn
OneKey supplied the Classic wallet mentioned in the episode. No claim of paid sponsorship is made.
Figures and causes were developing at recording time. Verify updates through official Binance channels. This content is educational only and is not financial advice.
Learn more: https://link.learncardano.io/bQ68Rc
Subscribe: https://link.learncardano.io/u6BDgr DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Trascritto
28 OTT 2026 · Critical PHP2Shell and Node.js vulnerabilities arrived alongside reported Fortinet exploitation, Railway and LiteLLM incidents, weak certificate keys and emergency Ruby fixes, creating a week that online discussions dubbed “Black October”. The internet is not ending, but AI-assisted discovery and exploitation are compressing the time defenders have to patch exposed systems.
Peter breaks down how unauthenticated code execution, leaked credentials and compromised trust infrastructure can affect websites, business networks, developer tools and crypto users. He also explains why some services were taken offline as a precaution and why disclosure timing matters when attackers can rapidly adapt public research.
The practical response is straightforward: apply current security updates, confirm hosted PHP versions, protect sites at the network edge, rotate exposed credentials, use saved bookmarks for crypto services and treat urgent security emails as potential phishing attempts.
Chapters:
0:00 Is the Internet Ending?
1:07 Black October
2:08 PHP2Shell
2:46 Governments Take Sites Offline
3:43 Cloudflare and the NSA
4:22 Fortinet Under Attack
6:22 Node.js and the Brotli Bug
7:19 Patches Before Details
8:03 eMudhra's Private Key of 4
10:07 LiteLLM and Stolen AI Keys
10:40 Railway Breach
11:29 So, Is the Internet Ending?
13:11 What to Do This Week
14:25 Crypto Safety Tips
15:44 Wrap Up
What you'll learn:
- Why PHP2Shell reports put PHP and WordPress operators on alert
- What the Node.js Brotli security issue means for developers
- Why Fortinet, Railway and LiteLLM incidents raise credential concerns
- How weak certificate keys can undermine website trust
- How AI is accelerating both vulnerability discovery and exploitation
- What website operators, developers and crypto users should check now
Links & References:
- PHP vulnerability overview: https://link.learncardano.io/pTtf71
- Black October incident overview: https://link.learncardano.io/aKvkVy
- Websites taken offline: https://link.learncardano.io/h31cFK
- OpenAI security tools report: https://link.learncardano.io/puj8I4
- FBI Cyber Division PHP warning: https://link.learncardano.io/fgdWdD
- European agency shutdown report: https://link.learncardano.io/Ch69Ec
- Cloudflare PHP2Shell response: https://link.learncardano.io/TGImTp
- Node.js October 2026 security release: https://link.learncardano.io/262z3H
- Weak certificate private key: https://link.learncardano.io/R4HEcP
- GitLab vulnerability report: https://link.learncardano.io/OGGcGZ
- Railway environment-variable warning: https://link.learncardano.io/r17mL8
- Node.js Brotli discussion: https://link.learncardano.io/urhifT
- Exposed certificate keys report: https://link.learncardano.io/1yj3sA
- Brotli dependency warning: https://link.learncardano.io/5e6kw1
- Ruby emergency patches overview: https://link.learncardano.io/Hz5WvY
Website: https://learncardano.io
X/Twitter: https://x.com/LearnCardano
Disclaimer: This content is for educational purposes only and is not financial, legal or cybersecurity advice. Verify current vendor advisories and follow the remediation provided by the relevant maintainer or qualified professional. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Trascritto
27 OTT 2026 · Hardware wallets have long been treated as the gold standard for crypto self-custody. Recent incidents involving device authenticity, seed generation, supply chains and leaked customer records show that keeping keys offline is only one part of staying secure.
Peter reviews the risks highlighted around Ledger, Keystone, Coldcard, Foundation and Trezor, explains why personal-data leaks can create physical security threats, and explores alternative approaches including Off Wallet on a Game Boy and carefully generated paper wallets. This is an educational security overview—not a recommendation to use any particular wallet or storage method.
Chapters:
0:00 Intro
0:24 Hardware Wallets Under Attack
1:18 This Year's Breaches
1:38 Keystone's Customer Data Leak
2:45 Coldcard: 594 BTC Drained
3:58 Foundation's Cloudflare Breach
4:14 Ledger's Supply Chain Attack
6:25 Your Data and Wrench Attacks
7:03 Ledger's 2020 Data Leak
7:38 Trezor's Shipping Partner Breach
8:01 Wrench Attacks Around the World
8:49 Keep Your Details Private
9:16 Off Wallet: A Bitcoin Wallet on a Game Boy
11:48 Paper Wallets
13:01 Wrap Up
What you'll learn:
- Cold storage reduces online exposure, but hardware, firmware, supply-chain and customer-data risks still matter.
- Customer shipping records can turn a digital security incident into phishing, fake-device or physical-security risk.
- Buying directly, checking device authenticity and limiting the personal details shared with vendors can reduce exposure.
- Off Wallet demonstrates air-gapped Bitcoin transaction signing on a Game Boy without introducing a new hardware supply chain.
- Paper wallets remove vendor data exposure but require careful offline generation, backup and physical storage practices.
- No storage method is automatically safe; verify the threat model and recovery process before moving valuable assets.
Links & References:
Hardware Wallets This Year:
- https://link.learncardano.io/9mu8Jl
Keystone:
- https://link.learncardano.io/90SeYa
- https://link.learncardano.io/fdeGxB
ColdCard Wallet:
- https://link.learncardano.io/ergL0G
- https://link.learncardano.io/gLwxwG
Smaller Hacks:
- https://link.learncardano.io/hzXsdK
- https://link.learncardano.io/mnHNzf
- https://link.learncardano.io/nFfciW
Ledger Compromise:
- https://link.learncardano.io/2VBTs9
- https://link.learncardano.io/iPuro8
- https://link.learncardano.io/CPIk8u
Wrench Attacks:
- https://link.learncardano.io/cn7ZLs
- https://link.learncardano.io/pg4f7O
- https://link.learncardano.io/hgxENc
- https://link.learncardano.io/Jdin1s
- https://link.learncardano.io/SbgjVW
- https://link.learncardano.io/QlZsSy
Off Wallet:
- https://link.learncardano.io/N72CKu
- https://link.learncardano.io/zvv32F
Gameboy Colour:
- https://link.learncardano.io/PA0LF5
Bitcoin Paper Wallet:
- https://link.learncardano.io/BxgDy6
Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv
Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Trascritto
26 OTT 2026 · Originally recorded in April 2026, this Builders Bench conversation with Raul from FluidTokens examines Bifrost, a proposed route for bringing native Bitcoin liquidity into Cardano without relying on a conventional custodial bridge. Raul explains how Bitcoin can be held through a flexible multisignature controlled by participating Cardano stake pool operators, with signing power weighted by delegated stake.
Peter and Raul discuss the 67% stake threshold, how stake pool operators join the network, what an attack would require, and why Bitcoin holders may be interested in borrowing against BTC rather than selling it. The conversation also covers atomic swaps, Cardano’s UTXO model, one-click DeFi experiences and a walkthrough of the Bifrost testnet flow.
Chapters:
0:00 Intro
1:19 What Is Bifrost?
4:20 How Bifrost Secures Bitcoin
8:44 Stake Pool Operators Run the Bridge
10:04 Could Someone Attack It?
11:44 Can Bitcoin Fix Cardano DeFi?
14:57 What Bitcoiners Want
17:44 One-Click Bitcoin DeFi
19:08 Bifrost Testnet Walkthrough
What you’ll learn:
• FluidTokens designed Bifrost to connect native Bitcoin with Cardano while avoiding custody by a single company or bridge operator.
• Bifrost’s Bitcoin multisignature is intended to be controlled by participating Cardano stake pool operators, with signing power weighted by delegated stake.
• The stated signing threshold is 67% of total participating Cardano stake rather than a simple count of stake pool operators.
• FluidTokens’ atomic swaps allow native BTC to be exchanged for Cardano assets without handing custody to a third party.
• Bitcoin-backed borrowing is presented as an early DeFi use case for holders who do not want to sell their BTC.
• Cardano’s UTXO model could help combine borrowing, stablecoin and liquidity actions into a more approachable one-click experience.
• The Bifrost testnet flow uses a redeemable Bitcoin Taproot deposit so users retain a recovery path if the bridge does not process the transaction.
References:
• Raul: https://link.learncardano.io/plOyrH
• FluidTokens: https://link.learncardano.io/I2TCAy
• FluidTokens Bitcoin: https://link.learncardano.io/XTulqm
• FluidTokens app: https://link.learncardano.io/6LpZan
• FluidTokens docs: https://link.learncardano.io/V0BtsW
Educational content only; not financial or legal advice. Do your own research. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Trascritto
23 OTT 2026 · Cardano faces a busy week of regulation, governance and real-world adoption. The Cardano Foundation has responded to the European Commission’s MiCA review, joined a cross-chain call for clearer US treatment of digital commodities, and highlighted why Cardano’s non-custodial staking model should not be treated like custodial staking services.
Peter also examines Toto Finance’s 22 million ADA treasury proposal for a tokenised copper reserve, CIP-23 min-margin changes expected with the Dijkstra hard fork, 100,000 farms registered through 5am.earth, Lovelace Land’s 3D ecosystem map and RealFi’s reported $2.7 million tokenised fund. The update closes with Bitwater, a proposed screw-in water-heater element that uses Bitcoin-mining heat, including Peter’s practical questions about the product and its claimed utility.
The episode begins with a cybersecurity warning and keeps uncertain points clearly framed: Peter has not completed a detailed assessment of the Toto proposal, and his Bitwater discussion is editorial rather than an endorsement.
Chapters:
0:00 Intro and a Word of Warning
1:17 Cardano Foundation Responds to MiCA
2:03 Non-Custodial Staking on Cardano
3:03 What About Australian Regulation?
4:32 ADA as a Digital Commodity
6:14 How Stake Pool Operators Get Paid
7:26 Toto Finance Copper Reserve Proposal
9:56 Treasury Season and Funding
10:32 CIP-23 Min Margin in the Dijkstra Hard Fork
10:54 5am.earth: 100,000 Farms on Cardano
11:55 Lovelace Land: Cardano Ecosystem in 3D
13:30 RealFi Tokenised Fund Hits $2.7M
14:06 Token Terminal Data in Claude
15:07 Bitwater: Heat Water, Mine Bitcoin
17:18 Putting Bitcoin Mining Heat to Use
18:39 Wrap Up
What you’ll learn:
• The Cardano Foundation’s MiCA response argues for rules that distinguish decentralised networks and Cardano’s non-custodial staking from custodial financial services.
• The Cardano Foundation and five other blockchain organisations want US rules to state clearly that digital commodities such as ADA are non-securities.
• Toto Finance is seeking 22 million ADA from the Cardano treasury for a strategic copper reserve, while Peter cautions that he has not yet completed a detailed proposal review.
• CIP-23 min-margin changes are expected to be included in the Dijkstra hard fork, with the aim of helping smaller stake pool operators compete.
• 5am.earth reports 100,000 farm lands in India registered on Cardano, providing a concrete example of on-chain agricultural records.
• Lovelace Land presents Cardano projects and dependencies as a navigable 3D ecosystem map built from public and on-chain data.
• Token Terminal reports a $2.7 million market cap for RealFi’s Cardano-native sUSDrf tokenised fund.
• Heatbit’s Bitwater concept aims to reuse Bitcoin-mining heat in an existing electric water tank; Peter discusses it as an unendorsed product idea and says he was not paid by the company.
References:
• Cardano Foundation and digital commodities letter: https://link.learncardano.io/WovuDk
• Peter’s digital commodities summary: https://link.learncardano.io/1rQT1f
• Cardano Foundation MiCA consultation response: https://link.learncardano.io/25MKLv
• Peter’s MiCA summary: https://link.learncardano.io/YBjvoH
• Toto Finance copper reserve overview: https://link.learncardano.io/EfNrMI
• Toto Finance proposal announcement: https://link.learncardano.io/FOgaaT
• Toto Finance follow-up thread: https://link.learncardano.io/XtlRWb
• GovTool proposal: https://link.learncardano.io/CNXTzT
• CIP-23 min-margin update: https://link.learncardano.io/ylYw8p
• 5am.earth 100,000 farms milestone: https://link.learncardano.io/wk8S1a
• Lovelace Land announcement: https://link.learncardano.io/EWKeRp
• Lovelace Land: https://link.learncardano.io/9lqiJJ
• RealFi and Token Terminal summary: https://link.learncardano.io/aQPb8J
• Bitwater announcement: https://link.learncardano.io/msUyV8
• Heatbit on X: https://link.learncardano.io/wbOFWD
• Bitwater product page: https://link.learncardano.io/M5F1Bf
Disclosure: The Bitwater segment is editorial commentary, not an endorsement. Peter states in the episode that Heatbit did not pay him.
Website: https://learncardano.io
X: https://x.com/LearnCryptoPod
Educational content only; not financial or legal advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Trascritto
23 OTT 2026 · Midnight has published a new roadmap for Q4 2026 and Q1 2027, covering confidential finance, selective disclosure, cross-chain development and next-generation proving infrastructure. This update also looks at Nightmode, a privacy layer being developed with Sig Network for assets and applications across public chains, including a demonstrated Tron wallet experience.
Peter breaks down Midnight Passport, Starstream, Nightstream, Dynamic's Fireblocks-backed wallet integration, Fahmi Syed's TOKEN2049 presentation and the four-part Freedom Fighters series featuring Leopoldo López.
Disclosure: Peter is a paid Midnight Ambassador. The views in this episode are his own.
Chapters:
0:00 Midnight Ecosystem Update
0:13 A Word of Warning
0:47 The Midnight Roadmap
2:17 Identity and Selective Disclosure
3:25 Scaling, Starstream and Nightstream
4:30 Night Mode
6:07 Night Mode Coming to Tron
6:59 Dynamic and Fireblocks
7:28 Single Sign-On With Your Wallet
8:59 Why Integration Took So Long
10:33 Fahmi at TOKEN2049
11:14 Freedom Fighters
12:29 Wrap Up
12:52 Final Safety Reminder
What you'll learn:
• How Midnight's roadmap connects confidential finance, digital identity, cross-chain development and proving infrastructure.
• How selective disclosure can prove an attribute without revealing unrelated personal details.
• What Starstream and Nightstream are intended to contribute to Midnight's technical stack.
• How Nightmode aims to bring shielded privacy to assets and applications on public chains.
• What Dynamic's integration means for embedded wallets and Login with Midnight.
• Why users should verify projects, websites and wallet requests before interacting.
References:
- Midnight Foundation safety reminder: https://link.learncardano.io/4Eb0mQ
- Midnight roadmap thread: https://link.learncardano.io/Sl1HYL
- Official Midnight roadmap: https://link.learncardano.io/u2aXGK
- Introducing Nightmode: https://link.learncardano.io/CCp306
- Midnight and Tron demonstration: https://link.learncardano.io/DrB4ow
- Nightmode cross-chain privacy article: https://link.learncardano.io/8jIDgx
- Dynamic and Fireblocks integration: https://link.learncardano.io/rfJbIG
- Fahmi Syed at TOKEN2049: https://link.learncardano.io/mCaqdk
- Freedom Fighters series: https://link.learncardano.io/XaGOlx
All links: https://link.learncardano.io/j4yE4L
Subscribe to the podcast: https://link.learncardano.io/IbVJqj
Support the channel: https://link.learncardano.io/E6wHk0
Disclaimer: This content is for educational purposes only and is not financial or legal advice. Verify official sources and consider your own circumstances before acting.
#MidnightNetwork #Nightmode #BlockchainPrivacy DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Trascritto
21 OTT 2026 · SecondFi users are reporting successful recoveries after the June 2026 Yoroi wallet exploit, with the recovery process transferring 100 million ADA and 22 million NIGHT to verified destination addresses. This episode explains what happened, how EMURGO is making affected users whole and why the recovery tool is a significant outcome after a serious wallet compromise.
Peter also walks through the recovery flow, the computer requirements for generating an ownership proof, the limits around NIGHT allocations, NFTs, staking rewards and external DeFi positions, plus the security checks every affected user should follow. Never reuse a compromised wallet, never respond to recovery DMs and verify that you are on the official SecondFi website before entering a recovery phrase.
Chapters:
0:00 Users Are Getting Funds Back
0:45 Two Recovery Buckets
3:03 How the Yoroi Exploit Worked
4:18 100M ADA Recovery Update
5:06 Recovery Scam Warnings
6:14 How Ownership Is Verified
6:53 NIGHT Allocation Complications
9:00 Starting the Recovery Process
10:12 Proof and Computer Requirements
11:23 NFTs and Staking Rewards
12:58 Recovery Outcome and Thanks
14:24 Final Safety Reminder
What you'll learn:
- About 374 wallets were linked to the malicious drain, while a separate white-hat recovery secured additional affected assets.
- EMURGO committed reserves to make users affected by the malicious 16 million ADA drain whole.
- The SecondFi recovery process had transferred 100 million ADA and 22 million NIGHT to verified destination addresses at the time of recording.
- Affected users should create a new destination wallet and must not reuse or transact from the compromised wallet.
- SecondFi will not send recovery instructions by DM or ask users to transfer assets to a verification wallet.
- The recovery proof requires a desktop-class computer, at least 2 GB of available memory and a reliable internet connection.
- NIGHT allocations and some external DeFi positions may require separate handling and should not be pursued through unverified third-party tools.
Links & References:
- SecondFi official recovery website: https://link.learncardano.io/HEoJLc
Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv
Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Trascritto
21 OTT 2026 · Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, were disclosed before the patch was available, creating an urgent remote-code-execution risk for PHP-powered websites. That includes sites built with WordPress, Joomla, Drupal and Magento, along with any overlooked PHP installation still running on a server.
Peter breaks down the practical response for website owners and agencies: take fresh backups, confirm hosting and firewall protections, inventory every installed PHP version, move away from end-of-life releases and watch official PHP announcements for patched versions. He also explains the warning signs to monitor, including unusual CPU or memory use, unexpected files, web shells, cron jobs, scheduled tasks and new accounts.
If compromise is suspected, isolate the affected server, preserve web-server and PHP logs, and work with the hosting provider or a security professional before making destructive changes that could erase evidence.
Chapters:
0:00 The PHP Zero-Day Leak
1:23 What the Exploit Enables
2:09 Managed Hosting Precautions
3:24 Audit Every PHP Installation
4:09 End-of-Life PHP Versions
5:02 Signs of Compromise
5:53 Incident Response Steps
6:23 Protecting Business Websites
7:10 Final Advice
What you'll learn:
- CVE-2026-109618 and CVE-2026-109619 are critical PHP remote-code-execution vulnerabilities that were disclosed before the patch was available.
- Website owners should take a fresh backup and confirm that their hosting provider will apply the relevant PHP security update.
- Server administrators should inventory every installed PHP version so forgotten or end-of-life environments are not left exposed.
- PHP 5, PHP 7, PHP 8.0 and PHP 8.1 are end-of-life branches discussed in the episode and should not be relied on for current security fixes.
- Unexpected CPU or memory spikes, uploaded files, web shells, new cron jobs, scheduled tasks or accounts may indicate malicious activity.
- A suspected compromise should be isolated while web-server and PHP logs are preserved for investigation.
- Small-business websites are operational assets, so backups, patching, monitoring and direct contact with the hosting provider should be treated as urgent work.
Links & References:
- Pete on X: "PHP is my life, and now we have 0-day vulnerabilities: CVE-2026-109618 / CVE-2026-109619 I was planning on having an early night! https://link.learncardano.io/Hyy1cI" / X: https://link.learncardano.io/yYxzxr
- PHP Remote Code Execution (CVE-2026-109618) | watchTowr: https://link.learncardano.io/lNdTWx
- Jλckλι on X: "... get it while its hot... 😈 > CVE-2026-109618 / CVE-2026-109619 (pre-patch PHP 8.x) > session.upload_progress UAF > https://link.learncardano.io/jCnYuj > Courtesy of Me, @acd421 & @Archknight23 #CyberSecurity #infosec #php2shell #php" / X: https://link.learncardano.io/J7flcc
- Only for the curious...: https://link.learncardano.io/xLhTWF
- PHP: News Archive - 2026: https://link.learncardano.io/LEkW51
- Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) | Huntress: https://link.learncardano.io/TaBdrg
Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv
Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Trascritto
16 OTT 2026 · Charles Hoskinson presented Nightframes at Midnight City Tokyo as a possible successor to the smart contract: a private, always-on agent that can understand identity, intention and personal context while producing proof of what it did. Peter breaks down the idea in plain English and asks what changes when an AI agent is owned by its user rather than a large platform.
The episode explores selective medical-data sharing, rentable AI skills, agents with wallets and spending rules, and Midnight City as a low-stakes environment for testing autonomous behaviour. It also separates the vision from what still needs to be demonstrated, including verifiable receipts, practical privacy controls and a Nightframe running on an ordinary phone.
Chapters:
0:00 Charles Introduces Nightframes
0:55 Beyond Smart Contracts
1:58 Identity, Intent and Intelligence
3:11 Who Owns Your AI?
4:51 Private Medical Data
6:06 Renting AI Agent Skills
7:48 Why Agents Need Wallets
8:56 Trust, Limits and Proof
10:00 Midnight City's Test Environment
11:48 Agents That Work for You
12:25 What Still Needs Proving
What you'll learn:
- Charles Hoskinson describes Nightframes as private, always-on agents that follow user intent and can prove what they did.
- Nightframes are intended to be non-custodial and decentralised so the user controls the agent, its identity and its data.
- Selective disclosure could let a traveller prove essential medical facts without handing a clinic their entire health history.
- A Nightframe skill marketplace could let creators rent specialised AI capabilities without exposing the underlying method.
- Autonomous agents need wallets, but useful safeguards also require spending limits, approved purchases and verifiable receipts.
- Midnight City is presented as a low-stakes environment where Nightframe behaviour can be tested before real money or personal data is involved.
- Peter wants to see Nightframes demonstrate checkable proofs, private skill rental and practical operation on an ordinary phone.
Links & References:
Midnight City website:
- https://link.learncardano.io/VJm2gD
Charles presentation at Midnight City Tokyo:
- https://link.learncardano.io/mLvRuG
Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv
Disclosure: Midnight is a paid partner of Learn Cardano. This episode reflects Peter’s own views.
Disclaimer: This content is for educational purposes only. Nothing constitutes financial or legal advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
Trascritto
16 OTT 2026 · Australia’s crypto industry is moving into a stricter regulatory phase. ASIC Consultation Paper 392 sets out proposed guidance and standards for digital asset platforms and tokenised custody platforms ahead of the new regime commencing in April 2027, covering licensing, client assets, trading, settlement and financial requirements.
Peter speaks with Michael from StormRake about what the consultation means for exchanges, brokers and everyday Australian crypto users. They unpack AFSL applications, the cost of compliance, the gap between more than 300 AUSTRAC-registered entities and roughly 140 licence applicants, and whether smaller operators may leave the market.
The discussion also covers bank restrictions on crypto payments, privacy, peer-to-peer transactions, self-custody trade-offs and why both industry participants and consumers should engage with the consultation while the proposed standards can still be shaped.
Chapters:
0:00 Why Australia’s Crypto Industry Is Worried
1:28 What ASIC Consultation CP392 Changes
3:05 Exchanges, Brokers and Digital Platforms
4:26 April 2027 and AFSL Requirements
5:17 The Cost of Crypto Compliance
7:26 Consumer Protection or Tax Control?
9:53 Privacy and Peer-to-Peer Crypto
13:02 Who Is Driving the Regulation?
15:19 Banks Blocking Crypto Payments
20:03 What Australian Users Can Do
24:51 Making the Consultation Count
29:11 Why Local Support Still Matters
What you'll learn:
- ASIC Consultation Paper 392 proposes guidance and operational standards for digital asset platforms and tokenised custody platforms ahead of the April 2027 regime.
- Crypto exchanges and brokers may be captured as digital asset platforms and require appropriate Australian financial services licensing.
- More than 140 entities have reportedly applied for an AFSL, compared with more than 300 crypto businesses previously registered with AUSTRAC.
- Licensing can require months of internal work, external advice, system changes and ongoing compliance staff, creating a heavier burden for smaller operators.
- Fewer licensed platforms could reduce competition and consumer choice even as the framework aims to improve safeguards for client assets and trading.
- Australian users are already experiencing bank restrictions on some crypto-related payments, which the discussion links to institutional risk settings.
- Self-custody can reduce reliance on platforms but introduces its own security and recovery risks, so it is not a simple answer for every user.
- The consultation gives industry participants and the public an opportunity to comment before ASIC finalises detailed guidance and standards.
Links & References:
- Australia Sets New Crypto Reporting and Licensing Rules for 2027 / X: https://link.learncardano.io/4KNlNy
- Australia Proposes Capital, Custody Rules for Crypto: https://link.learncardano.io/zVlzPV
- 26-245MR ASIC consults on implementation of new digital asset laws | ASIC: https://link.learncardano.io/Tf4UYp
- ASIC Consultation - Google Docs: https://link.learncardano.io/neX9kw
Watch on YouTube: https://youtu.be/X0lJ5DBZzr8
Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv
Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano
The Learn Crypto Podcast (formerly the Learn Cardano Podcast) helps you understand crypto and blockchain, from the basics through to the details. Cardano remains a core focus, alongside the wider...
mostra di più
The Learn Crypto Podcast (formerly the Learn Cardano Podcast) helps you understand crypto and blockchain, from the basics through to the details. Cardano remains a core focus, alongside the wider crypto space: Bitcoin, Ethereum, DeFi, stablecoins, wallets, security and regulation.
Whether you are new to crypto or already building, this podcast is for you. Expect news updates, interviews with founders, builders and community members, and step-by-step guides on staking, governance, smart contracts, DeFi and staying safe.
Subscribe and leave us a 5-star review.
Find all of the show notes at https://learncardano.io.
Follow me personally: https://chatsoon.app/id/peter-bui-5ec50167
DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed. No tokens, payments, or incentives were received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncryptopod
🔗 https://facebook.com/learncardano
mostra meno
Whether you are new to crypto or already building, this podcast is for you. Expect news updates, interviews with founders, builders and community members, and step-by-step guides on staking, governance, smart contracts, DeFi and staying safe.
Subscribe and leave us a 5-star review.
Find all of the show notes at https://learncardano.io.
Follow me personally: https://chatsoon.app/id/peter-bui-5ec50167
DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed. No tokens, payments, or incentives were received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.
Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/
Follow on Social:
🔗 https://x.com/learncryptopod
🔗 https://facebook.com/learncardano
Informazioni
| Autore | Pete Bui |
| Organizzazione | Pete Bui |
| Categorie | Tecnologia , Come si fa , Investimenti |
| Sito | learncardano.io |
| mail@learncardano.io |
Copyright 2026 - Spreaker Inc. an iHeartMedia Company
