$86M Drained From Ledgers & Can AI Break Bitcoin's Crypto? | Rabbit Hole Recap
10/9/2026 · 86 min · transcript via mlx
Tags
Key topics
— Ledger reseller attack via CryptoBillis: An estimated $86M in Bitcoin, Ethereum, and Tron reportedly drained from wallets purchased through the Southeast Asian reseller; evidence suggests hardware manipulation (possibly eSIM implants) before sale.
— Justin Drake's AI-breaks-ECDSA claim debunked: Ethereum Foundation researcher claimed frontier AI could break elliptic curve cryptography; cryptographer Yehuda Lindell (Coinbase) dismissed it as unfounded FUD with no evidence.
— Project Loupe Bitcoin Core hardening: Spiral/Block-funded red team disclosed five merged and three pending pull requests fixing critical bugs (silent payments, RPC port vulnerability, transaction manager race condition, package eviction).
— South Korean bank breaches via AI tools: Nine banks compromised; attackers used open-source Chinese AI models and Claude to brute-force loan status pages and extract 68,000+ customer records with minimal sophistication.
— Dark Horse energy deal: 50MW expansion agreement with Hopkinsville Electric includes $65M substation (paid by Dark Horse) benefiting local grid with 15MW allocated to residential consumers—counters data center FUD.
— Block's mainstream Bitcoin ad campaign: Multi-year campaign launching in movie theaters and major sporting events aimed at making Bitcoin approachable to everyday Americans.
Market & price signals
— Bitcoin at $82,720 (1,209 sats per $1 USD), $1.66T market cap. Block height 970,657 with difficulty adjustment expected October 16 (estimated 4.6% upward adjustment); blocks averaging 9m38s. Mempool at 83,244 transactions; free fees available. U.S. government moved ~$1B in Bitcoin this week (likely Bitfinex proceeds); Treasury Secretary Scott Bessent announced expected seizure of $1B Iran-linked crypto. S&P 500 concentration extreme: five largest stocks now worth as much as bottom 434 combined—highest concentration since 1991.
Actionable insights
— If you own a Ledger bought from CryptoBillis: Do not use unopened devices; immediately move funds from already-used wallets; buy only direct from manufacturers to eliminate reseller attack surface.
— Address reuse remains critical vulnerability: Implement non-reusing address schemes (supported by Casa, hardware wallets); avoid exchanges that reuse addresses; this remains sound practice regardless of AI/quantum timeline.
— Monitor but do not over-rotate on ECDSA threats: Justin Drake's AI-breaks-elliptic-curve claim lacks evidence; Bitcoin researchers already working on post-quantum signature schemes; focus instead on immediate hygiene (non-reuse, SegWit, avoiding dodgy resellers).
Episode sponsorships
Paid placements mentioned in this episode. BTC Pods is not sponsored by or affiliated with these advertisers. Links are included so you can find offers mentioned on the show.
— No sponsorships in this episode.