Foundation just confirmed its support inbox got hijacked, spraying over 20,000 phishing emails at customers through a back-end vulnerability, and one guy's "deleted" data showed up in the attack anyway. On top of that, Electrum has a confirmed RBF exploit letting a malicious server swap your transaction and steal funds the moment you bump a fee, Keystone is now the latest hardware wallet maker admitting a breach, and the crew spends the hour arguing about what self-custody even means anymore when AI-assisted attacks are hitting every wallet company in Bitcoin.
In this episode:
• Foundation's 20,000+ phishing emails after a self-hosted app breach exposed its support inbox, and Zach Herbert's response to customer backlash
• Electrum's confirmed RBF vulnerability letting malicious servers hijack fee-bumped transactions, fixed only in version 4.8.3
• Keystone's newly announced data breach, and how it compares to the earlier Cold Card and Ledger incidents
• Why the hosts argue AI has made hardware wallet and infrastructure security dramatically harder to guarantee
• A debate on whether single-sig self-custody is still responsible advice for newcomers, versus exchanges, Casa multisig or Anchorage-style insured custody
• Anthropic's IPO filings showing a 42 billion dollar loss and an 80 billion run rate, plus Microsoft's buyout offer to 60,000 employees
• Vitalik Buterin's comments on restricting offensive cyber capabilities in open-weight AI models, and the EA versus e/acc framing the hosts apply to it
• Bitcoin Core's policy shift to prioritize AI-discovered vulnerabilities, and a long riff on Michael Saylor, MSTR and STRC heading into the US election
Watch the video version: https://youtu.be/WtcS41n-zpQ
More episodes from "Bitcast"



Don't miss an episode of “Bitcast” and subscribe to it in the GetPodcast app.








