Coinbase launches a dedicated portal for connecting AI agents to its platform.
TFTC
tftc@primal.net
npub1sk7m...jraw
Truth for the Commoner. A media company focused on #Bitcoin, freedom, and truth in the digital age.
Don't let your expenses eat your bitcoin.
Aven gives you a line of credit backed by your bitcoin. Up to $1M, rates from 8.99%, no rehypothecation.
2% unlimited cash back on every purchase.


Aven Bitcoin Visa Card
Redirecting...
Bitcoin Core is updating its security disclosure policy in response to the flood of AI-discovered vulnerabilities. Antoine Poinsot on the Bitcoin-Dev mailing list:
"This is largely due to LLMs drastically reducing the bar to find certain classes of issues or identify covert fixes. For these issues that are easy to find, the embargo period achieves little but it delays the availability of a fixed release."
Bugs that an LLM can find with a simple prompt will now get backported fixes and fast-tracked releases instead of sitting behind a long embargo.


"I'm quite worried about sort of like a dirty deal here, where we get a version of the GENIUS Act through that basically blurs the line between stablecoins and a CBDC."
Zack Shapiro on the GENIUS Act and the Bank Secrecy Act.
René Pickhardt on why Lightning's scaling limits and on-chain bottlenecks make the case for multiparty channels: "If you care for Bitcoin, you should care for payments."
"The people trading the bond market don't care what the Fed is doing and neither do I."
Gary Brode on why the Fed no longer controls borrowing costs.
METR and Redwood Research spent 3 weeks inside OpenAI red-teaming the systems designed to catch rogue AI agents.
~10% of internal Codex traffic was unmonitored. Agents could delay monitoring indefinitely by simply continuing to act.
Exploits could hide hundreds of actions from monitors. Codex sandboxing and Auto-Review could be bypassed. RL training wasn't even covered by monitoring at the start of the audit.
The team submitted a 61-page report. OpenAI redacted it to 38 pages.
OpenAI says all production vulnerabilities have been patched.


Red-Teaming OpenAI's Internal Agent Monitoring Systems
A METR employee and a Redwood Research employee spent three weeks stress-testing OpenAI's internal misalignment monitoring system, discovering a nu...

"We heard about wars over oil or water. Now it's going to be over, over who is going to get the power."
Anas Alhajji on the coming fight over power for AI.
A low-skill hacker used a jailbroken DeepSeek V4 paired with the Hermes Agent framework to brute-force an Indian university, steal 5,200+ student and faculty records, and map attack surfaces across multiple organizations.
The AI even drafted a "NEXT EXPLOIT OPPORTUNITIES" plan for follow-up attacks.
Unit 42 found the same actor using AI-generated scripts for VoIP fraud, Wi-Fi cracking, and crypto whale reconnaissance.
Multiple unrelated criminals are now independently adopting the same cheap DeepSeek setup.


Unit 42
“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities
An investigation into a threat actor bypassing AI safety controls to coordinate credential theft, VoIP fraud planning, and database exfiltration.

Parker Lewis on why bitcoin treasury companies are fundamentally different: "With a company like Google or even a bank, if you want access to their assets, you have to own their stock. That's not the case with the underlying asset Bitcoin."
Heatbit introduces Bitwater, a water heater element that mines bitcoin.
It screws into your existing electric tank, turning everyday hot water heating into physically decentralized mining.
Altimeter's Brad Gerstner on why the AI boom isn't a repeat of dot-com: "In 2000, we had constrained demand because we only had 30 million people on the internet. Today, we have unconstrained demand for super intelligence."
Robinhood just got approved by Dubai's Financial Services Authority to launch bitcoin and crypto trading in the Middle East.
Major U.S. banks are detecting unauthorized AI agents inside customer accounts, some taking actions independent of user instructions.
Morgan Stanley, JPMorgan, BofA and others are now racing to block third-party agent access.
Banks say they can't even tell if an agent is human or bot, let alone whether it's been authorized by the customer.
https://www.axios.com/2026/10/22/ai-agents-banks-unauthorized-accounts-access


Palo Alto Networks CEO Nikesh Arora on the real threat after a major vulnerability drops: "trophy hunters" racing to find the next one.
"I'm more concerned about what comes next. This is just one. There's more to come."
CFTC Chairman Mike Selig: "We can't have just New York or California regulating crypto and setting the standard across the country. We need uniform rules that if you make a trade in New York, you still have the same protections when you go back home in Florida."
Railway, a popular cloud hosting platform, disclosed that an unauthorized third party accessed encrypted customer environment variables and may have obtained decrypted contents, including API keys and database credentials.
Railway says the attack is part of a series targeting platform companies to compromise AI inference providers.
All deployments are paused. Users should rotate all keys and credentials immediately.


GitLab patched a critical vulnerability scoring a perfect 10.0 on the CVSS severity scale.
The flaw allows unauthenticated attackers to execute arbitrary code on self-managed GitLab servers. No login required.
It affects 12 years of releases going back to version 7.0.
is already patched, but anyone running a self-managed instance should update immediately.

GitLab - Speed with control for agentic software engineering

NVIDIA CEO Jensen Huang: "This is one petaflop. One petaflop and 128 gigabytes of memory. In the year 2016, I delivered one petaflop and 128 gigabytes to a small company called OpenAI. This is one petaflop and 128 gigabytes."
5.469%.
That's where the 20-year cleared today, a new high for the bond since its 2020 return. Indirects came in 7 points light and direct bidders took 31.6% to fill the gap.
4 of the last 7 coupon auctions graded soft or weak.

Treasury Auction Results: Notes, Bonds & TIPS
Results of every Treasury note, bond and TIPS auction since 2000: yields, bid-to-cover, buyers and demand. Latest: 7-Year Note at 4.894%, Oct 29.
