The Café Bitcoin Podcast

Latest Episodes:

Café Bitcoin | Guy Swann and Yan Pritzker on Coldcard, the Asymmetry of Defense, and Privacy | Day 16 of 50 Aug 05, 2026

Show notes

Guy Swan on learning the wrong lessons. The takeaway circulating is "go with the biggest company," which forgets Mt. Gox and FTX and everything else proving size is not safety. His analogy: when a libertarian politician betrays you, libertarianism didn't break, you got scammed.
He wants a rule that works forward. His sharpest point: "I don't want a rule that only works in hindsight." Anyone can now point at the source-available license. The useful question is what indicator predicts the next failure before it happens.
His own heuristic broke in both directions. He had trained himself not to dismiss builders for being abrasive, and now concludes that for security specifically, a maintainer who attacks people reporting problems is telling you something. Yan Pritzker paired it with the engineering version: without a culture of safety, people stop surfacing mistakes.
James O'Beirne's tripwires. He seeded wallets on-chain carrying graduated entropy over broken Coldcard seeds, five dice rolls, ten, fifteen, one and two-word passphrases, as bait. The bare seed was swept within an hour and nothing else has moved, mapping attacker capability live.
The red team's numbers. Rob Hamilton and Calle have scanned over 300 repos and spent roughly $40,000 on tokens in two days, finding critical vulnerabilities at about one per person per hour. OpenSats is now funding most of that budget.
Every company needs an agentic security pipeline. Yan's argument: agents are non-deterministic, so one scan proves nothing. The real work is harnesses that find, test, distill and reproduce on a loop. Swan has been building this for six to twelve months.
The asymmetry is the whole problem. Attackers need one vulnerability, defenders need all of them, and the economics favor the attacker. Some have been paying up to 90% of stolen funds in fees to get transactions mined quickly.
A fake Coldcard desktop app is circulating. No such application has ever existed. Trezor reported a phishing spike since disclosure, and a counterfeit Wasabi wallet reached an app store. Nobody legitimate asks for recovery words, and unsolicited migration instructions are always hostile.
Yan's read on whether this repeats. He calls the bug exotic: entropy wasn't weak, it was switched off entirely. Scans across the popular hardware wallets show correct and consistent entropy use, so he thinks this specific failure is unlikely to recur elsewhere.
Government overreach, the other half of the show. Suz on Liechtenstein's beneficial ownership register, roughly 31,000 entities, built in 2021 for EU anti-money-laundering compliance and now breached and offline. Yan on the Bank Secrecy Act's 1970 threshold, never inflation-adjusted, capturing dramatically more data for near-zero measured effect.

Café Bitcoin | Self-Custody Is Not Dead, the Custody Spectrum, and Owning Is Not Operating | Day 15 of 50 Aug 04, 2026

Show notes

Dice rolls are now confirmed safe. Portland HODL published a full verification, independently cross-checked by James O'Beirne, Block's engineering team and Rob Hamilton: the Coldcard did use dice entropy rather than falling back to the pseudo-random generator. Fifty or more rolls was sufficient.
Still rotate anyway. The prevailing view on the show was that dice-generated seeds are safe but worth rotating as hygiene. Separately, no other hardware wallet firmware vulnerability has surfaced yet from the red-team sweep.
The red team is scaling. Rob Hamilton's group, now joined by other Bitcoin developers, is pointing Kimi K3 and other frontier models at repos across the ecosystem. Critical vulnerabilities have been found and responsibly disclosed, none in hardware wallets so far.
Cory rejects the "always more to learn" framing. He argued that line doesn't apply here: the entire point of code securing assets is that there can be no mistakes that put those assets at risk. He gave two press interviews on the exploit.
The custody spectrum, with a chart in the nest. Cory laid out five positions: solo self-custody, guided self-custody via Swan Sovereign at $25 a month, collaborative multisig, delegated custody with OCC-chartered custodians, and multi-institutional custody, which Swan has been building since December.
The real gap is knowing how to use your wallet. Alec, who spent the weekend on client calls, found people holding large amounts in setups they could not operate. Getting Bitcoin off an exchange is not enough. Practice moving it more than once.
Jason on the false binary. People have been taught there is one right way to hold Bitcoin, and that it's the most esoteric one. His question: what is self-custody worth if you cannot move your coins in an emergency?
Zach Herbert of Foundation. Self-custody is not dead, and he framed this as negligence by a single vendor rather than an indictment of every maker. His takeaway is free and open source software, shared libraries and engagement with auditors. He calls it the worst event for committed Bitcoiners since Mt. Gox.
Boltz went dark. The Lightning swap provider shut down entirely, hit by automated attacks faster than a small team could patch, taking swaps in Zeus, Aqua and Blockstream's app with it. No user funds lost. Brady drew the line from Kimi K3's release through Coldcard to this.
The AI incentive argument. Phillip's case: calls to regulate AI harder are moat-building, not safety, and defenders keep having to reach for open-weight models because the US frontier models refuse legitimate security work. Steve noted five figures a day in tokens is not a sustainable audit model.

Café Bitcoin | The Coldcard Timeline, Joe Nakamoto on the Fallout, and Open Source Must Win | Day 10 of 50 Aug 03, 2026

Show notes

A full forensic timeline. Brady traced it end to end: a 2018 MicroPython software fallback sat harmless for three years until March 2021, when Coinkite moved to Bitcoin Core's math library and silently bound seed generation to that fallback. Lopp notes the bug lived in the build system, not the main code.
Firmware 4.0.0 is the dividing line. Shipped March 17, 2021. Seeds generated before roughly March 1 are fine, and MK3 releases 3.2.1 and 3.2.2 were the last safe ones. Every default seed after that was weak.
It was flagged in 2021 and dismissed. Four months after the bad firmware shipped, someone publicly raised Coldcard entropy concerns. NVK's reply called it FUD and demanded a line in the code. That post is deleted; an archived screenshot survives.
The scope widened over the weekend. Coinkite added MK2 alongside MK3 and MK4, and confirmed Q and MK5 at roughly 72 bits rather than the expected 128. Independent analysis put the MK4 class nearer 50 to 60 bits in practice.
Dice rolls and passphrases do not cover everything. Nine other Coldcard features draw from the same broken generator, including message signing and deriving keys for other purposes. BTC Sessions confirmed an MK4 with a one-word passphrase was drained.
Scale, and Cory's proportion. Roughly 1,300 Bitcoin total, 594 in the first wave, with Chainalysis showing the highest-balance wallets targeted first. Cory noted centralized exchanges and lenders have lost about a thousand times more.
The chip-ID recovery hope is gone. Holders were told earlier in the week to keep their devices because a chip signature might prove ownership. Brady reported that has since been shown not to work as hoped, narrowing recovery further.
Vendor indictment or self-custody indictment? An audience question that framed the hour. Brady argued it is a challenge to upgrade toward multi-vendor multisig rather than a verdict on self-custody. One listener pushed back that the indictment already landed.
Joe Nakamoto from Europe. He found almost nobody in his circle affected, since Coldcard's loudest advocates were largely American and circular economies mostly run on Lightning. Bloomberg was the only genuinely mainstream outlet, and its coverage was fair.
Open source, and the AI asymmetry. Researchers keep reaching for Moonshot's open-weight Kimi K3 because US frontier models refuse legitimate security work. Rob Hamilton's decentralized effort to pentest Bitcoin repos received grant funding during the show.

Café Bitcoin | Coldcard Emergency: What Happened, Who's Affected, and What To Do Now Jul 31, 2026

Show notes

The event. A firmware flaw in Coldcard seed generation, disclosed the night before, let an attacker recompute private keys outright. By airtime, 594 Bitcoin, put at roughly $38 million on the show, had been swept from about 500 wallets.
The mechanism. Yan Pritzker and Swan engineer Steve: the device's true random number generator was present and working, but a March 2021 library change meant the firmware silently stopped using it, falling back to software randomness seeded from device ID and clock.
Why five years passed. The code looked correctly wired, the failure hinged on a build-time variable, and the output still looked random. Zach Herbert of Foundation said a researcher flagged something adjacent in 2022 without unraveling it.
Who is exposed. Only seeds the Coldcard generated itself. Imported seeds are safe, dice rolls are safe, a long passphrase saved people. MK3 is worst hit. MK4, MK5 and Q sit near 72 bits, costly to attack but not impossible.
Updating firmware does not fix it. Coinkite patched, including MK3, but the vulnerable seed is the problem, not the device. You must generate a new seed and move funds. The dice function was never affected and has now been audited.
Multisig is not automatically safe. If most keys came from affected devices, an attacker can try permutations, and spending publishes your public keys and invites an RBF race. Wicked pointed people to Portland.HODL for private broadcast through Slipstream.
The attacker looks unsophisticated. The sweep ran roughly 25 minutes into a handful of addresses, stopped at shallow address gaps, and queried a public node instead of running one. Block researchers identified that service, so there may be a lead.
The industry reckoning. American HODL called it a Paul Revere moment and demanded podcasters and former sponsors broadcast immediately. Reardon argued the industry spent three years arguing over the wrong priorities and got caught by an entropy bug.
Self-custody versus diversification. Wicked held that multi-vendor multisig with your own entropy beats any custodian. Joe Carlasare countered that every system rests on assumptions that eventually fail. Yan declined to preach one model, calling self-custody still very early.
Swan's status and the scam wave. Yan confirmed Swan Vault is built on Blockstream Jade and unaffected, and reported an influx of deposits. He flagged a devious scam variant where attackers send you working seed words and ask you to deposit into them.

Café Bitcoin | Day 8 of 50: Telegram's Device Fingerprint, Getting Debanked Over Three Letters, and Where Retail Went Jul 30, 2026

Show notes

Swan's Phillip Alexander and Brandon Quittem host Day 8 of 50 Days for Freedom: Telegram's auth key ID and the Russian server question; getting debanked for the word Bitcoin, from Wise to Bitcoin Policy UK; Michelle Weekley on Bitcoin ATM bans, shared Claude links indexed by Google, and AI agents with access to your email; and Brandon Quittem on shrinking drawdowns and the retail wave that hasn't arrived.

Café Bitcoin | Day 7 of 50: Daniel Batten on Bitcoin and Energy, Britain's Curtailment Bill, and Wealth Is Energy Jul 29, 2026

Show notes

Cory was out for a family wedding, so Brady and Philip hosted from his handle. Also new: a weekly recap song in a different genre each week, covering everything from the previous weeks of the show.
Daniel Batten on Cambridge's new number. Its updated assessment puts Bitcoin mining at 59.4% clean energy, against a global grid mix near 40%. Hydro is the largest single source. Full report expected later this year.
Sweden's grid used Bitcoin mining 11,000 times last year to absorb excess wind. Batten's point: operators call it flexible load, flexible compute, or data centers. Anything but Bitcoin mining. Six Brazilian energy companies are doing the same with stranded generation.
The best idea in the episode, and it's Batten's. A grid operator is incentivized to admit a problem, because saying so unlocks resources and doesn't destabilize the grid. A central banker never can, because the admission is itself the instability.
Batten expects the West to adopt Bitcoin as an energy solution before a monetary one. In the global South the monetary problems are existential already: banking access, storing wealth safely, remittances that otherwise cost up to 20%.
The Ethiopian dam. You cannot build half a dam, so it's sized for demand 20 years out. No transmission lines, no industry, no customer for the surplus. Miners paid roughly three cents per kilowatt hour and delivered over $100M in unexpected revenue.
Callum Wheeler of Renew Blocks on Britain's curtailment bill. £1.5B last year paying wind farms to switch off and firing gas nearer London instead, forecast to reach £7B by 2030. A new "demand for constraints" market is meant to fix it.
A near-blackout on June 23 reached the shadow energy secretary via control-room whistleblowers. Cause: unexpected air conditioning demand in Britain's fourth heat wave. Wheeler's pilot is mining co-located inside a Scottish Highlands hydro powerhouse, built for £2M and never switched on.
Susie Violet Ward spent 13 months chasing a BBC correction on a headline claiming every Bitcoin payment uses a swimming pool of water. No correction, and the undisclosed source was a central banker. Brandolini's law: refuting costs ten times what inventing does.
Closing round on first resources. Inventing Bitcoin by Yan Pritzker, including his family's story of carrying value out of Russia. Also the Bullish Case, Broken Money, swan.com/welcome with Natalie Brunell, and Mary Kay Fain's approach: ask someone to recall a time they couldn't use their own money.

Café Bitcoin | Day 6 of 50: Lawrence Lepard on the Big Print, the AI Credit Crack, and The Math Ain't Mathing Jul 28, 2026

Show notes

Lawrence Lepard on bear market psychology. Everyone is short-term, negative, and attacking each other over BIP110 and Saylor. His read: we are winning, this is the moment to get friends buying, and he expects much higher highs within 18 to 24 months.
The big print thesis. Lepard is watching the yen carry trade, a near-vertical Japanese 10-year, and the US 10-year at 4.70 with 5% as the Fed's red line. Druckenmiller-adjacent circles think Japan breaks first.
"The math ain't mathing." A roughly $2T deficit while total debt grew $3.5T in twelve months. Hank Paulson resurfacing after fifteen years to suggest a Fed break-the-glass program reads to Lepard as a trial balloon for the big print.
Reading Kevin Warsh. Lepard's take: Warsh is abandoning the Phillips curve for a supply-side inflation story, talks like a balance-sheet hawk for the bond market's benefit, and will likely cut in September. Fed governor hawkishness is kabuki.
The AI credit crack. Cory: Nvidia credit default swaps blew out overnight, Korea down 11% and chipmakers 13%. Oracle sits one notch above junk at 6x leverage. Lepard adds $3.8T trapped in private equity and private credit, all mismarked.
Socialism for the rich. Frank Corva, reporting from New York, argues the US is not capitalist: Altman and Amodei asking Washington for stakes is the state picking winners. Cory's framing, via Saifedean, is that taking from everyone to give to your friends is the harder sell.
US versus China capitalism. Cory: America anoints monopolies and builds regulatory moats, while the CCP directs investment from the top then permits cutthroat competition. It happened in EVs and it is happening in AI. Open-weight Chinese models are the destabilizer.
A live bear debate. Gordon Johnson of GLJ Research brought three objections: private money has failed before, Bitcoin is not a real asset, and fixed supply breaks an economy. Cory and Lepard countered that a protocol with no issuer is not private money.
First duress-code prosecution. Samuel Tunick, an American citizen, was pulled into secondary inspection at Atlanta, pressured for his phone passcode, and entered a GrapheneOS duress code that wiped it. He is now charged federally with destroying property to prevent seizure.
Adoption from the actual front lines. Corva on the Kibera slum's Afribit circular economy, single mothers saving for college, India cracking down on BitChat alongside Signal and Telegram, and Indonesia approving Fedi ecash. His hill to die on: Bitcoin is money.

Café Bitcoin | Day 5 of 50: The Digital ID Retreat, the Race to Avoid the War, and Do the Work Jul 28, 2026

Show notes

Day 5 of 50 Days for Freedom, hosted from @Swan after Cory's handle hit tech trouble. Swan's buy fee sits at 50 basis points through Labor Day. Framing doc: swan.com/battle.
Cory on disagreeing well. Three summers of shows with Vlad Costea despite splitting on layer twos and drivechain. A lot of people we think we oppose actually love Bitcoin, and privacy is common ground.
UK digital ID scrapped, sort of. Suz reports the £1.8B scheme killed after a 2.9M-signature petition and cross-party opposition. Her warning: canceling a brand name is not abandoning the architecture.
The back door is already open. GOV.UK One Login covers 122 services, with all central government services slated to join by 2027. Age verification, employment checks, and the Online Safety Act converge on the same result.
America's version, differently packaged. No single federal portal yet, but Real ID, mobile driver's licenses, and digital age checks add up. Federalism is a partial brake. Panel consensus: very close.
Fear plus convenience is the playbook. 9/11, COVID, now the FATF travel rule reframed as national security. Suz: "you can make a scared man do anything." Bitcoin's answer is separating money from the identity gateway.
Fourth Turning, with an exit. Brady's case: institutions are collapsing on schedule, but this cycle has Bitcoin and Nostr already built. Freedom tech that math makes un-co-optable. Cory's version: ten million US Bitcoiners, the race to avoid the war.
Education is the whole mission. Lyn Alden's Seven Misconceptions, Vijay's 2018 Bullish Case article, Yan Pritzker's Inventing Bitcoin, and the Bitcoin Season documentary. Cory: understanding earns you the right to own more. ETF buyers who skipped it get lettuce hands.
Swan versus Coinbase, box by box. Swan Sovereign, Swan Vault multisig, Swan Safe Plus with live video withdrawal confirmation, buy fees under Coinbase's advanced exchange, and Swan covering network fees. Plus Steve's scarcity chart: 60 million millionaires, 21 million coins.
Agentic commerce wants Bitcoin. Scott's Machine Economy project, Buzz, Lightning Labs' Wavelength, and HTTP 402 finally getting built. An agent needs only a keypair. Cory also set the BIP110 policy: not daily here, but a moderated debate is coming.

Café Bitcoin | Day 4 of 50: Bitcoin Season Goes to the NBA, the BitChat Ban, and Don't Trust, Verify Jul 27, 2026

Show notes

The main event: Mike Nicoll, director of Bitcoin Season, on going from USC Film School and Netflix's At All Costs to documenting the first Bitcoin-only deals with an NBA franchise and Klutch Sports — "come for the sexy basketball world, stay for the financial revolution." 100,000 views in the first week, free on YouTube, and Swan will buy the pizza and beer for your watch party. King closes with a credit-desk teardown of Strategy's STRC: why coupon-divided-by-price is the wrong math, what an 85 price actually implies, and why the Bitcoin price — not the coupon — is what brings Stretch back to par. Cory adds the house view: these are institutional products; keep 80%+ of your exposure in real on-chain Bitcoin you control. Homework: Vijay Boyapati's The Bullish Case for Bitcoin and Stephan Livera episode 71. And Dom's legendary full-gear, no-warm-up swish gets the retelling it deserves.

Café Bitcoin | Day 3 of 50: The Battle of the Bears Begins, The Consortium, and Independence Must Be Won Jul 27, 2026

Show notes

Chapters:

00:00 — Wicked: from trader to Bitcoin-only, sats per dollar, save don't trade
04:30 — Satoshi's Bride: a Bitcoin tip at a fine-dining shift
11:00 — Scott: the echo-chamber reality check and a self-custody challenge to the Bitcoin-only companies
18:00 — C Hoddle: Bitcoin treasure hunts and the Buena Vista circular economy → Midwest Bitcoin Summit
21:30 — The unblocking amnesty: blocked in the '23–'24 squabbles? DM to get unblocked
31:00 — The Consortium: nine companies pledge Bitcoin developer funding, starting with quantum
33:30 — Cory on path dependence: Coinbase, Jesse Powell, and why every Bitcoin fintech converges on the full product set
41:30 — THE BATTLE OF THE BEARS: fifty days, fifty basis points, one mission
43:30 — The narrative machine: how Wall Street picks the story after the price moves
49:00 — "Money is only as good as the story you can tell about it"
55:30 — The Battle for Monetary Independence, Part 3: "Independence Must Be Won" (read live)
63:00 — Why everyone with a mic owes their audience the canon; swan.com/canon
70:30 — Wrap: 90 minutes without the price; Part 4 tomorrow

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected