Together with
Greetings Bitcoiner,
Welcome to Issue #616 of Bitcoin Breakdown, where it’s OPSEC Wednesday special, followed by the latest Quick Bits snippets. But first, today’s Top Stories:
A former FBI counterintelligence agent stands charged with lifting nearly one million dollars in Bitcoin from wallets he was paid to investigate. Cloudflare hands AI agents programmable wallets and fills them with stablecoins. South Africa drafts rules that would put offshore Bitcoin transfers, including ones to your own wallet, under reporting.
|
A multi-key vault with keys spread across devices from different vendors eliminates single points of failure. No single bug, theft, or mistake can touch your bitcoin.
If your setup depends on one device being perfect forever, what is your plan for the day it is not?
Casa's security team is running free consultations to review your setup, show you what a multivendor multisig wallet would look like for you, and help you plan a calm migration, including pairing hardware you already own.
Casa holds your hand, not your keys. The strongest self-custody is the kind with no single point of failure.
Book a security consultation with Casa Advisors here.
🇺🇸 FBI Counterintelligence Agent Charged in Bitcoin Theft
Patrick Steven Yaroch, a former supervisory special agent in the FBI's counterintelligence and espionage division, faces charges in the Eastern District of Virginia over the theft of nearly $1M in bitcoin and other digital assets. Prosecutors say he used Top Secret clearance to lift wallet credentials from classified case files on Russian targets, then made about a dozen unauthorized transfers into accounts held in his own name. Roughly $925,000 has since been recovered, and filings show he asked ChatGPT how to invest $1M and how to relocate to Portugal.
Why it matters: Americans are told to hand stolen coins to the same agencies that employ men like Yaroch. Custody you cannot verify is not custody, whether the counterparty wears an exchange logo or a badge. Read more→
Trust problems also scale when machines start spending...
☁️ Cloudflare Picks Stablecoins Over Bitcoin for Agents
Cloudflare has launched programmable wallets that let AI agents pay for application programming interfaces and digital content, using Coinbase's x402 protocol to attach stablecoin payments directly to HTTP requests. The company is offering Account Wallets for people and Virtual Wallets for agents with spending caps built in, though payments are not live yet and users can only claim a handle for now. Cloudflare sits as reverse proxy in front of 24.2% of all websites, which puts it in position to build payment rails into the request layer itself.
Why it matters: The company that already sees a quarter of the web is wiring machine money to dollar tokens, with no mention of Bitcoin or Lightning anywhere. Agent commerce is being built on someone else's balance sheet. Read more→
Governments are drawing their own lines on movement...
🇿🇦 South Africa Moves to Police Offshore Bitcoin Transfers
South Africa's National Treasury and Reserve Bank published a draft Crypto Asset Manual for Cross-Border Activities, requiring that Bitcoin sent offshore move through an authorized local provider and be reported to the Financial Surveillance Department. The draft counts a transfer into a private, non-custodial wallet as a cross-border event, which pulls self-custody inside the reporting perimeter. Individuals would be held to existing foreign currency allowances of R2 million a year, rising to R10 million with tax clearance, and comments close on September 30.
Why it matters: No jurisdiction can practically stop a seed phrase crossing a border. The rule mostly criminalizes people who have harmed no one, and pushes everyone else toward tools that never touch a reporting provider at all. Read more→
Poll #616: What breaks first once agents hold wallets?
A Russian VPN that promised it never stored connection logs was holding 58 million of them, timestamped device by device, when a 17 GB copy of its database surfaced on a cybercrime forum alongside 865,000 email addresses and partial card numbers.
This week's OPSEC Feature Article shows you how to test a provider's no-logs claim instead of believing it, and how to move that trust inward to your own node.
Get instant access to this special feature by becoming a premium supporter here.
Hacker who stole 64 BTC from a Coldcard hardware wallet begins mixing the funds through multiple transactions, splitting outputs into smaller chunks to obscure the trail.
Dormant Bitcoin address holding 500 BTC, worth $31.8M, moves after 12 years amid ongoing Coldcard hardware wallet hacks that have drained an estimated $130M according to data from Galaxy Research.
Chainalysis, a chainanal firm, reports that Canadian BTC holders absorbed 25% of losses from the ongoing Coldcard hardware wallet hack.
Security researcher claims to have discovered Coldcard hardware wallet's RNG (random number generator) flaw 11 months earlier, sparking debate over Coinkite's flawed bug bounty program.
James O'Beirne, Bitcoin developer, alleges that Coinkite co-founder Peter Gray, using alias 'switck', themselves wrote the buggy libngu library behind Coldcard hardware wallet's RNG flaw.
Galaxy reports that 15 attackers exploited a Coldcard hardware wallet flaw, causing the bitcoin losses across three confirmed waves.
Nigeria Revenue Service, the country's tax authority, mandates exchanges to withhold 1% on disposals, 10% on staking and airdrops, plus 1.5% stamp duty on conversions.
Glassnode, an analytics firm, reports that Bitcoin's futures basis has been trading below the 2-year US Treasury yield since February 2026, only the second such stretch, signaling that carry traders are exiting as long-term holders dominate demand.
Glassnode also reports that $63,000 is becoming bitcoin's key support zone as retail investors and whales accumulate near its 200-week moving average.
Greg Abbott, Texas Governor, halts new data center grid connections pending audit, and Bernstein says the freeze locks in scarcity value for connected Bitcoin miners.
Binance, the world's largest exchange, launches 'Lite Loan,' letting users borrow up to $1,000 in USDT against BTC without triggering liquidation for 30 days.
BitGo, custodian of Wrapped Bitcoin (WBTC), migrates $7.4B worth of WBTC from LayerZero to Chainlink's Cross-Chain Interoperability Protocol (CCIP).
Bithumb, South Korea's exchange rivaling Upbit, unveils a 2028 IPO roadmap while facing a $24.5M fine and CEO bribery allegations.
Bitget, a major exchange, exits Japan after regulatory warnings, halting registrations, restricting accounts by Nov 1, and forcibly closing positions after Dec 31.
London court convicts five men of holding two French millionaires captive for 52 hours, with two also found guilty of blackmail conspiracy, amid rising Bitcoin and crypto-related 'wrench attacks'.
OKX, a major exchange, reports record customer inflows following the Coldcard hardware wallet exploit that stole bitcoin from thousands of self-custody addresses.
CNBC's 'Mad Money' host Jim Cramer plans to sell his BTC over quantum computing fears raised by IBM's CEO, sparking 'inverse Cramer' buying celebrations.
