HomeVideos

Bitcoin self-custody has a dangerous new problem

Now Playing

Bitcoin self-custody has a dangerous new problem

Transcript

386 segments

0:00

Crypto spent years demanding legitimacy.

0:03

Well, congratulations. Now we have a big

0:06

four audit, index methodology reviews,

0:08

public company earnings, and exactly the

0:11

same third party data breaches that

0:13

plague other industries. We're going to

0:15

talk about all of that and more right

0:17

now on the Daily Wolf. Let's go.

0:25

What is up party people? Welcome to the

0:27

Daily Wolf on Yahoo Finance. I am your

0:30

host, Scott Melker, also known as the

0:32

Wolf of all streets. We've got 15

0:35

minutes to talk about everything that is

0:37

driving crypto markets, although it's

0:39

hard to tell where they're driving at

0:41

the moment as Bitcoin just flatlines.

0:44

But

0:46

there will be brighter days ahead and a

0:48

lot of the things that are happening now

0:49

will be looked back upon as obvious

0:51

catalysts for the next bull market. But

0:54

it's not all unicorns, puppies, apple

0:57

pie, and roses. The hits continue to

1:00

come, especially in the world of

1:03

self-custody. Here's a story I wish I

1:05

was not reporting. Treasure warns 14,000

1:08

customers after fulfillment partner

1:11

suffers data breach. The incident marks

1:13

the first time Treasure customers

1:15

shipping addresses were exposed. So,

1:17

first I'll dive into what happened, then

1:20

we'll talk about what it means. So, this

1:21

is a breach at Treasure shipping

1:22

partner, Shipmunk. Cute. It's like

1:26

Chipmunk, but they get you killed.

1:28

Exposed information belonging to

1:30

approximately 13,689

1:33

customers. For 11,742

1:36

of them, the compromised information

1:37

included names, addresses, phone

1:39

numbers, and emails. Another 1947 had

1:43

just their names, cities, and emails

1:45

exposed. So, Treasure made it clear that

1:47

there was no violation of private keys.

1:49

uh the devices are safe, customer funds

1:52

are safu, not compromised.

1:55

That distinction matters technically,

1:57

but criminals now potentially have a hit

2:00

list of people who have bought hardware

2:02

wallets and know where they live. So,

2:05

let's talk about this. The first risk

2:07

obviously immediately is fishing. We saw

2:09

this with the Ledger X uh the Ledger

2:11

data breach many many years ago. uh I

2:14

can't remember the number but tens of

2:16

thousands of customers there their data

2:18

was given and every single one of them

2:19

started getting emails and fishing

2:20

attempts and attempts to steal all of

2:23

their money. Okay, great. The bigger

2:26

problem right now is wrench attacks,

2:29

which means physical attacks to try to

2:32

steal people's Bitcoin and crypto. And

2:35

if you think I'm being hyperbolic, you

2:37

should take a look at what's been

2:38

happening in France over the past couple

2:41

years. So in in case you missed the

2:43

story, basically wrench attacks started

2:46

increasing in France from 2024 to 2025

2:48

2026. There's now been, I believe, over

2:50

70 attacks just this year. Uh four or 5x

2:53

since 2024 when they started came out

2:55

that uh basically because of reporting

2:58

rules to the French equivalent of the

2:59

IRS. Everybody transparently gave the

3:02

government all the information on the

3:04

crypto that they held and somebody at

3:06

the government then sold that to

3:07

criminals at €800 a pop and those people

3:11

became targets. The uh founder of Ledger

3:14

lost a finger literally they cut his

3:16

finger off in a€ 10 million euro ransom

3:18

attempt. People's uh wives and children

3:21

have been kidnapped and this is

3:22

happening multiple times a month in

3:25

France. Well, now Treasure has sent, you

3:29

know, uh, a letter to all these 14,000

3:32

people saying you could be next, right?

3:34

Criminals now definitely will know

3:37

exactly where you live and that you

3:39

bought a hardware device. Now, some

3:40

people have said to me, "It's no big

3:42

deal. They don't know how much you hold,

3:44

but they know that you hold enough that

3:46

you care about buying a hardware device.

3:47

you care enough about your self-custody

3:50

and it's probably a meaningful part of

3:51

your wealth and they know exactly where

3:52

you live, what your email address is,

3:54

what your phone number is and how to

3:56

find you. This is an absolute disaster.

4:00

I'm prone to hyperbole, but when you put

4:03

this, you know, in conjunction with the

4:04

cold card hack that I told you about

4:07

from just last week that was an ongoing

4:09

exploit, it really is damning for the

4:13

self-custody

4:14

industry. Right? We were told and

4:18

telling people not your keys, not your

4:20

coins, be your own bank. But I didn't

4:22

know that being your own bank also meant

4:25

in 2026 being your own bank security,

4:27

which means having the uh weaponry and

4:30

knowhow to protect yourself physically

4:31

from violence when somebody tries to rob

4:34

your bank. We also told keep your keys

4:37

to yourself. Don't trust exchanges.

4:39

There's too much counterparty risk. But

4:41

nobody talked about the counterparty

4:43

risk of a data leak from the person you

4:46

buy the hardware wallet from or the

4:47

counterparty risk of cold card having an

4:50

exploit where you didn't roll enough

4:51

magic Dungeons and Dragons dice to

4:54

generate a seed phrase. We're at the

4:56

point where now the debate is if all

4:58

these treasure people should have sent

5:00

it to a PO box to an anonymous address

5:02

and not use their name and blah blah

5:03

blah blah blah blah. Nobody wants to do

5:06

this. I do in theory believe in self

5:10

custody. Now, you have to believe in

5:11

multi- signature self-custody, which is

5:13

something that I have done. Uh, and

5:16

geographically setting yourself on a

5:17

scavenger hunt for a hundred days around

5:20

the world just to be able to access $5

5:22

worth of your Bitcoin. But let's be

5:24

honest, for 95% of people at this point,

5:26

nobody is going to go far enough down

5:29

the rabbit hole to have the proper

5:30

OPSACE to actually protect themselves. I

5:33

don't know what the answer is. I'm

5:34

struggling with it. I'm not the guy

5:36

who's going to say just go buy an ETF

5:38

because the issuers of the ETF are the

5:40

very institutions that we got into

5:42

Bitcoin to rage against in the first

5:44

place. But we have a very very very big

5:48

problem right now. I mean the hardware

5:49

wallet works perfectly.

5:51

The shipping spreadsheet is the attack

5:53

surface. Like you really could not have

5:55

uh predicted that. Now in more positive

5:58

news,

6:00

we can put aside to death finally one of

6:04

the largest pieces of FUD, fear,

6:06

uncertainty, and doubt against the

6:08

crypto industry for over a decade.

6:11

Crypto firm Tether says KPMG completes

6:14

long promised audit. There are people on

6:18

the internet whose entire identities

6:20

have been questioning whether Tether was

6:23

actually backed by the assets that they

6:25

said they had. Well, now one of the big

6:28

four firms has audited them and

6:31

confirmed the backing of all of their

6:34

assets. This was a deep audit. Some are

6:36

calling it the largest audit in the

6:39

history of financial markets for a first

6:41

audit because they checked the

6:44

transactions. They checked the actual

6:46

holdings. They literally went to the

6:48

vault and checked every single

6:51

individual bar of gold that Tether owned

6:55

to make sure that they were real and

6:58

that they had them. So, this story is

7:00

probably nuanced, right? I'm assuming

7:02

when Tether launched years ago that they

7:04

were not backed solely by short-term

7:07

treasuries and that maybe they were

7:10

backed by riskier instruments, but with

7:12

time as they became leg more legitimate

7:15

and the industry did, that became a

7:17

problem that should not have even been

7:19

discussed. It's being put to bed now and

7:23

hopefully we will never ever ever have

7:25

to hear about it again. You may remember

7:26

that literally Howard Lutneck who's the

7:29

commerce secretary said we're Caner

7:31

Fitzgerald and we're holding the assets

7:33

that back it. It's fine. But now we have

7:35

the audit that people have been begging

7:38

for, begging for for years. I think that

7:41

this is uh actually really really big

7:43

news. At least it kills one more of the

7:46

negative narratives that we've had

7:47

around crypto even uh in recent days. I

7:50

know Jason Calcanis from the All-In

7:53

podcast has been very skeptical and

7:55

critical of Tether saying that they're

7:57

not fully backed because he read

7:58

something on the internet somewhere,

8:00

right? Well, now all of the fudsters and

8:03

all the doubters can now change their

8:06

opinion with superior information. And I

8:08

listen, if they had reason to doubt it,

8:10

okay, fine. Like I am a firm believer in

8:13

strong opinions loosely held. But if we

8:14

still see this nonsense after it's now

8:16

been proven, you know that somebody is

8:18

just emotionally attached to their

8:20

position against Tether. The next story

8:23

right here, strategy Metanet could face

8:26

MSCI index removal under new proposal.

8:30

They've been having deja vu all over

8:31

again. This is something that we

8:32

discussed just months ago, but MSCI is

8:36

changing the qualifications of the test

8:37

for what can be included in the index. a

8:40

new methodology that would exclude

8:42

nonoperating

8:44

companies from its global investable

8:47

market indexes. So this is not

8:50

explicitly aimed at crypto. It targets

8:54

companies whose value comes from

8:55

primarily from accumulating assets

8:58

rather than a operating a conventional

9:00

business. It comes to to to three

9:03

companies, right? It's uh strategy,

9:06

metaplanet, and uranium holder yellow

9:09

cake. What a name. You guys definitely

9:11

remember the uh Yellow Cake, Uranium,

9:13

George Bush uh days of memes before

9:17

memes. But yeah, so there's other

9:19

companies, Ethereum Treasury companies

9:21

that could come up uh in this as well.

9:23

Sharply named in the future on a watch

9:24

list, but they're going to have to

9:26

basically pass uh some certain tests and

9:28

criteria, which they probably won't or

9:29

they're going to be removed from the

9:31

MSCI. So why does this actually matter?

9:33

So the index exclusion could force

9:36

passive funds that track MSEI benchmarks

9:38

to sell effective shares. If it's in the

9:40

index and is removed and they're

9:41

tracking the index, they need to sell

9:43

strategy meta planet.

9:46

Sell yellow cake. Got to sell the yellow

9:48

cake, right? So strategyy's always

9:50

argued that it's more than a spot

9:52

bitcoin rapper, but MCI is asking them

9:54

to really prove it through operating

9:56

operating assets, expenses, and cash

9:59

flow. But I guess the deeper threat here

10:00

would be precedent. If uh these rules

10:02

are adopted and strategy and metaplanet

10:06

are removed from this index, other

10:08

indexes may follow and adopt the same

10:12

rules. So it's a really interesting time

10:15

right now for uh strategy obviously

10:16

MetaPlanet and for the Bitcoin treasury

10:19

company industry at large. I mean, I

10:23

tweeted something to the effect

10:24

yesterday that there's literally guys at

10:26

making like a million dollars a year at

10:27

treasury companies who all they did was

10:29

buy a bunch of Bitcoin 16 months ago and

10:31

since then they've just sat in a room

10:32

and watch their stock go down. That's

10:34

like their job. They they don't do

10:36

anything else. Don't buy anything else,

10:39

don't earn cash flow. Maybe they talk to

10:42

the accountant every once in a while.

10:43

Maybe they cry to their wife in their

10:45

money bags of jars. But I don't know.

10:48

It's a completely completely broken

10:50

industry. uh outside of these very

10:52

serious players that we're talking about

10:53

here. So, we would hate to see them uh

10:55

discluded from these indexes. Now, the

10:58

next story is interesting because we

10:59

have bullish I told you about securitiz

11:02

losing money. Bullish Q2 earnings and

11:04

revenues tops estimates they did well.

11:06

They reported second quarter adjusted

11:08

revenue of 92.6 million up approximately

11:11

62% from 57 million a year earlier.

11:14

Their subscription services other

11:15

revenue nearly doubled to $62.7 million.

11:18

That's good. adjusted rose to 29.5

11:20

million from 8.1. Net income improved to

11:23

14.3 million from a 6 million loss.

11:26

These guys did exceptionally well. And

11:29

the real story is that they're not just

11:30

focusing specifically on

11:34

being a crypto exchange anymore. They're

11:36

building out a very robust business

11:38

including the $4.2 to billion dollar

11:40

acquisition of Aquinity uh which should

11:42

go through in 2027 which will connect

11:44

tokenization transfer agent records

11:47

trading settlement market data and of

11:49

course they own Coindesk so bullish

11:51

stock actually went up on this news

11:52

we've seen a trend of crypto stocks

11:54

getting slaughtered uh at earnings and

11:57

going down and bullish once again is

11:59

another example of exchanges pivoting to

12:01

become the everything apps so that they

12:03

don't just have to rely on crypto

12:06

trading for revenue now Gemini didn't do

12:08

so

12:09

Gemini share slide after 100 million

12:11

loss as WVAS says still have work to do.

12:14

So listen, it's not all roses here

12:17

either, but we knew that already before

12:19

we even shared this story. I think

12:20

bullish is the outlier here. And listen,

12:22

they'd had a rough run until now, but

12:25

maybe they're an indication that things

12:27

could potentially maybe sort of at some

12:29

point if we actually get a bull market

12:32

reverse. Once again, I will make the

12:34

point all of these will do well when

12:37

prices simply go up,

12:39

right? I mean, a lot of these losses

12:42

we're seeing are because they're marking

12:43

to market their crypto holdings which

12:45

have gone down and they have to report

12:46

that as part of earnings and blah blah

12:48

blah blah blah blah. So, it's going to

12:50

be fine. Just wait for prices to go up

12:52

probably the minute the summer ends. I

12:54

don't know. It's what seems to happen in

12:55

the past. And we have one final story.

12:58

SEC delays crypto regulation meeting and

13:00

latest industry setback. So, I reported

13:02

earlier this week that we are getting a

13:04

meeting today, Friday, today, where they

13:07

were going to talk about safe harbor and

13:09

how people can launch tokens in the

13:11

United States and what would make you

13:13

des sufficiently decentralized so that

13:15

you were no longer a security and all

13:17

those amazing things. And then, yeah,

13:19

last night they canceled the meeting.

13:22

We should be talking about the meeting

13:23

that just happened. Instead, we're

13:25

talking about the fact that the meeting

13:26

is not happening. But the good news is

13:28

that they definitely checks notes uh

13:30

rescheduled. Right now it's canled.

13:34

There was they said it was cancelled for

13:36

unforeseen scheduling issues but no

13:39

replacement date has been announced. I'm

13:42

not going to read too deeply into this.

13:45

We do know that this SEC CFTC the

13:47

regulatory regime is very bullish crypto

13:50

and very very bullish on creating rules

13:53

for the industry. I'm assuming that this

13:55

is just some some red tape or somebody

13:57

got COVID or something. Uh cuz otherwise

14:00

I I can't even take it if they are

14:03

literally just cancelling this and never

14:05

going to talk about regulation crypto

14:08

again.

14:09

Listen, Bitcoin prices have remained

14:12

steady regardless of the news, good or

14:14

bad. I think it's generally a symbol

14:16

that we're bottoming in a bare market

14:18

when that bad news doesn't affect it.

14:20

But we do have real questions to answer

14:22

and real issues with accountability from

14:25

self-custody from Bitcoiners fighting

14:27

over BIP 110 all the other nonsense that

14:30

seems to be happening. I do not have an

14:33

answer anymore to the custody question

14:36

because you know what I fundamentally

14:39

believe and being your own bank only

14:41

works if you can actually trust the

14:43

providers that are sending you your

14:44

hardware wallets. That's all I've got

14:46

for you this week. Be back on Monday

14:49

with the next Daily Wolf. Peace.

Interactive Summary

This episode of The Daily Wolf discusses several critical developments in the crypto market. Host Scott Melker covers the serious security breach at Trezor, where a shipping partner's data leak has exposed customer details, raising concerns about physical security and 'wrench attacks.' He also examines positive news regarding a major audit of Tether by KPMG, intended to dispel long-standing doubts about its asset backing. Further, the episode touches on potential MSCI index changes affecting Bitcoin treasury companies and reviews recent corporate earnings for firms like Bullish and Gemini, before concluding with the SEC's unexplained postponement of a crucial regulatory meeting.

Suggested questions

3 ready-made prompts