btcpay server 2.4.1 or older? updating isn't enough. btcpay's official advice: sweep funds to a new server with a new wallet and a new seed, and rotate your keys, even if you updated after the nov 1 alert. the fix shipped in august. keys on hardware wallets weren't hit.
ethereum just moved its quantum-safe goal up by a year. at devcon in mumbai today, justin drake from the ethereum foundation set dec 2028 as the target to make ethereum resistant to quantum computers, down from dec 2029 in september's roadmap. he calls it "mission 2028". quick context on why anyone cares. the signatures that prove you own your coins rely on math that a big enough quantum computer could break. nothing is broken today. this is about getting there first. the plan, as proposed: a first mainnet milestone in jan 2027, then ~24 months for three forks covering transactions, validator votes and data. specs aren't final and there are no activation dates yet. why rush? drake's own forecast is a 10% chance of a relevant quantum computer by 2029 and 50% by 2032. that's his estimate, not a consensus number. fair warning: this is one researcher's target, reported by one outlet so far (crypto times), and ethereum forks have a long history of slipping. my read: a deadline beats a vibe. if ethereum gets anywhere close to 2028, that's a real edge... just don't treat a goal like a shipped upgrade.
it's election day, and crypto is one of the biggest spenders on the ballot. three crypto super pacs (fairshake and its affiliates, digital freedom fund and fellowship fund) have put roughly $170m into these midterms, per coindesk. that's those three pacs, not the whole industry. and the single biggest target is one man: sherrod brown in ohio. fairshake alone spent ~$56m against him (coindesk), plus $7.2m from the winklevoss-backed digital freedom fund. why him? brown chaired the senate banking committee and was one of the toughest voices on crypto. the industry already spent ~$40m to beat him in 2024. now he's running again. here's the twist. as of ~nov 1, kalshi had brown at 68% to win, and a recent marist poll had him up 4. so the most expensive single-issue push of the cycle might lose the race it cared about most. two ways to read that. one: money doesn't buy votes, and voters notice when one industry tries too hard. two, the line coinbase and ripple are using: the payoff already came through regulators, no matter who wins tonight. my read: tonight is the first real scoreboard for crypto as a political lobby. if brown wins anyway, expect a lot fewer "crypto voters decide elections" takes next cycle...
about a dozen defi sites got hijacked friday night, all registered with the same registrar, name dot com. you typed the right address and landed on a fake page built to drain your wallet. the block traced ~$138k stolen on evm chains, bitquery counts ~$202k across 6 networks. the smart contracts were fine, none got touched. what changed was the address book. a domain is basically rented, and whoever controls that registration decides where the name sends you. someone got control, pointed the sites to pages running a drainer kit you can literally rent online, and waited. every theft still needed the victim to sign. one kintsu staker alone lost ~$160k, per bitquery. blockaid flagged 12 sites, name dot com says 15 customer domains were hit and all are restored. whose fault it was is still open: name dot com points at "third parties", kintsu points at vercel. no confirmed root cause yet. the lesson for me isn't "defi is broken". it's that "i checked the url" isn't enough anymore. bookmark the apps you use, and read what you're signing like it matters, because that's the exact moment the money moves. small hack in dollars, big one in what it teaches...
strategy's average cost is $75,446 per bitcoin, on 848,517 btc as of oct 25. btc is around $77.6k right now, so the world's biggest corporate holder is only ~2.9% in the green on the whole stack. the headline was a $19.5bn q3 profit. sounds huge, but almost all of it is bitcoin's price being marked up on paper, ~$20.9bn in digital asset gains. the actual software business brought in $125m, down 3%. the number i'd look at is the one strategy invented itself: btc yield. it's -3.7% year to date. in plain words, they issued shares faster than they added bitcoin per share, so each common share now owns a bit less btc than in january. and they've sold ~$432m of btc this year to help pay preferred dividends and buy back strc. not exactly the "never sell" story. to be fair, they hold ~3.4 years of cash for dividends and bought a lot of btc this year. saylor says it's the start of the next bull market. maybe. but with the price this close to their cost, the cushion is thinner than the profit headline makes it look.
electrum 4.8.3 just patched a high-severity light-wallet trap (advisory oct 24). a malicious electrum server can swap the tx you just broadcast for a fake conflicting one with the attacker's output — often grinding the last few address chars so it looks familiar — and if you hit accelerate / rbf, you sign the theft. anything below 4.8.3 is in the blast radius. some servers are already doing this in the wild. no cve listed. amounts lost weren't published. the fix checks signatures on your own inputs before a mempool tx lands in history. if you can't update yet: before any bump, re-check addresses and amounts yourself. running your own server also sidesteps the trust problem. light clients always leaned on the server for mempool view — this is that trade-off biting, not the chain failing... just saying!
strategy's 8-k for oct 19–25: zero btc bought or sold, stack still 848,517 — and ~$205M of strc bought back that same quiet week. strive added 6,182 btc at ~$82,732 (now ~43k held). with spot under that print, the lot is underwater mark-to-market — not a realized loss.
