Learn Crypto Podcast

Pete Bui

The Learn Crypto Podcast (formerly the Learn Cardano Podcast) helps you understand crypto and blockchain, from the basics through to the details. Cardano remains a core focus, alongside the wider crypto space: Bitcoin, Ethereum, DeFi, stablecoins, wallets, security and regulation. Whether you are new to crypto or already building, this podcast is for you. Expect news updates, interviews with founders, builders and community members, and step-by-step guides on staking, governance, smart contracts, DeFi and staying safe. Subscribe and leave us a 5-star review. Find all of the show notes at https://learncardano.io. Follow me personally: https://chatsoon.app/id/peter-bui-5ec50167 DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed. No tokens, payments, or incentives were received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content. Subscribe to the audio podcast: 🔗 https://bit.ly/learncardano-spotify 🔗 https://apple.co/3jEPM8C 🔗 https://learncardano.io/ Follow on Social: 🔗 https://x.com/learncryptopod 🔗 https://facebook.com/learncardano

  1. 1d ago

    Binance Hack: $6.3B Incident and the DevOps Laptop Claim

    A fast-moving security incident affecting Binance-linked wallets was still developing when this episode was recorded. Peter walks through reports of multi-chain outflows, Binance's public updates, and its statement that roughly US$3 billion had been frozen while the estimated impact had risen to about US$6.3 billion. The episode reconstructs the reported timeline, explains why Tether and Circle freezes mattered, and separates Binance's initial DevOps-laptop explanation from facts that still require a full technical post-mortem. It also covers practical phishing precautions and the risks of concentrating assets with one exchange or wallet provider. Figures and causes in this episode reflect the sources available during recording and may change as Binance, issuers and investigators publish verified updates. Check official Binance channels before acting on any message or security claim. Chapters: 0:00 Binance Hacked 0:55 Polymarket and Tampered Ledger Wallets 1:31 The Timeline of the Hack 2:27 Tether and Circle Freeze Funds 2:55 What's Moving Out 3:25 Binance's Official Response 4:13 Watch Out for Phishing Emails 4:47 About $3 Billion Frozen 5:09 Yi He: Binance Will Cover All Losses 5:19 Remember FTX? 5:54 Can Binance Cover It? 7:06 Update: A Compromised DevOps Laptop 8:17 Wrap Up 8:30 Spreading the Risk: OneKey and Tangem What you'll learn: - Binance said its initial investigation suggested a compromised DevOps engineer's laptop may have enabled unauthorised withdrawal transactions, while stressing that the investigation was not complete. - Binance's update put the estimated impact at about US$6.3 billion and said roughly US$3 billion had been frozen on-chain at the time of recording. - Tether and Circle were reported to have frozen substantial USDT and USDC amounts as issuers and investigators traced affected assets. - Binance said it would cover losses using the SAFU fund and company funds, but those assurances still require verification against the promised post-mortem and updated proof of reserves. - Users should verify urgent security messages against official Binance channels and avoid clicking unexpected email links during a high-profile incident. - The episode discusses spreading custody risk across suitable providers rather than assuming any exchange, software wallet or hardware wallet is immune from compromise. - OneKey supplied the Classic wallet mentioned near the end of the episode; Peter says any later comparison will be a detailed, honest review. References: - X trending context: Binance incident — https://link.learncardano.io/U0tzv6 - X trending context: related security reports — https://link.learncardano.io/lLRanR - X trending context: incident updates — https://link.learncardano.io/2Bf9Qw - Initial incident timeline shared on X — https://link.learncardano.io/PJUqfI - Watcher.Guru asset-flow report — https://link.learncardano.io/zI0rtR - Binance official incident statement — https://link.learncardano.io/MHcMNx - Binance official frozen-funds update — https://link.learncardano.io/Q889j0 - Yi He statement on covering losses — https://link.learncardano.io/q77ocX - Community discussion and solvency questions — https://link.learncardano.io/okNg2k - Binance initial investigation update — https://link.learncardano.io/40siSn OneKey supplied the Classic wallet mentioned in the episode. No claim of paid sponsorship is made. Figures and causes were developing at recording time. Verify updates through official Binance channels. This content is educational only and is not financial advice. Learn more: https://link.learncardano.io/bQ68Rc Subscribe: https://link.learncardano.io/u6BDgr DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content. 🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k Subscribe to the audio podcast: 🔗 https://bit.ly/learncardano-spotify 🔗 https://apple.co/3jEPM8C 🔗 https://learncardano.io/ Follow on Social: 🔗 https://x.com/learncardano 🔗 https://facebook.com/learncardano

  2. 3d ago

    Is AI Breaking the Internet Faster Than We Can Patch It?

    Critical PHP2Shell and Node.js vulnerabilities arrived alongside reported Fortinet exploitation, Railway and LiteLLM incidents, weak certificate keys and emergency Ruby fixes, creating a week that online discussions dubbed “Black October”. The internet is not ending, but AI-assisted discovery and exploitation are compressing the time defenders have to patch exposed systems. Peter breaks down how unauthenticated code execution, leaked credentials and compromised trust infrastructure can affect websites, business networks, developer tools and crypto users. He also explains why some services were taken offline as a precaution and why disclosure timing matters when attackers can rapidly adapt public research. The practical response is straightforward: apply current security updates, confirm hosted PHP versions, protect sites at the network edge, rotate exposed credentials, use saved bookmarks for crypto services and treat urgent security emails as potential phishing attempts. Chapters: 0:00 Is the Internet Ending? 1:07 Black October 2:08 PHP2Shell 2:46 Governments Take Sites Offline 3:43 Cloudflare and the NSA 4:22 Fortinet Under Attack 6:22 Node.js and the Brotli Bug 7:19 Patches Before Details 8:03 eMudhra's Private Key of 4 10:07 LiteLLM and Stolen AI Keys 10:40 Railway Breach 11:29 So, Is the Internet Ending? 13:11 What to Do This Week 14:25 Crypto Safety Tips 15:44 Wrap Up What you'll learn: - Why PHP2Shell reports put PHP and WordPress operators on alert - What the Node.js Brotli security issue means for developers - Why Fortinet, Railway and LiteLLM incidents raise credential concerns - How weak certificate keys can undermine website trust - How AI is accelerating both vulnerability discovery and exploitation - What website operators, developers and crypto users should check now Links & References: - PHP vulnerability overview: https://link.learncardano.io/pTtf71 - Black October incident overview: https://link.learncardano.io/aKvkVy - Websites taken offline: https://link.learncardano.io/h31cFK - OpenAI security tools report: https://link.learncardano.io/puj8I4 - FBI Cyber Division PHP warning: https://link.learncardano.io/fgdWdD - European agency shutdown report: https://link.learncardano.io/Ch69Ec - Cloudflare PHP2Shell response: https://link.learncardano.io/TGImTp - Node.js October 2026 security release: https://link.learncardano.io/262z3H - Weak certificate private key: https://link.learncardano.io/R4HEcP - GitLab vulnerability report: https://link.learncardano.io/OGGcGZ - Railway environment-variable warning: https://link.learncardano.io/r17mL8 - Node.js Brotli discussion: https://link.learncardano.io/urhifT - Exposed certificate keys report: https://link.learncardano.io/1yj3sA - Brotli dependency warning: https://link.learncardano.io/5e6kw1 - Ruby emergency patches overview: https://link.learncardano.io/Hz5WvY Website: https://learncardano.io X/Twitter: https://x.com/LearnCardano Disclaimer: This content is for educational purposes only and is not financial, legal or cybersecurity advice. Verify current vendor advisories and follow the remediation provided by the relevant maintainer or qualified professional. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content. 🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k Subscribe to the audio podcast: 🔗 https://bit.ly/learncardano-spotify 🔗 https://apple.co/3jEPM8C 🔗 https://learncardano.io/ Follow on Social: 🔗 https://x.com/learncardano 🔗 https://facebook.com/learncardano

  3. 4d ago

    Are Hardware Wallets Still Safe? Major Breaches & Better Options

    Hardware wallets have long been treated as the gold standard for crypto self-custody. Recent incidents involving device authenticity, seed generation, supply chains and leaked customer records show that keeping keys offline is only one part of staying secure. Peter reviews the risks highlighted around Ledger, Keystone, Coldcard, Foundation and Trezor, explains why personal-data leaks can create physical security threats, and explores alternative approaches including Off Wallet on a Game Boy and carefully generated paper wallets. This is an educational security overview—not a recommendation to use any particular wallet or storage method. Chapters: 0:00 Intro 0:24 Hardware Wallets Under Attack 1:18 This Year's Breaches 1:38 Keystone's Customer Data Leak 2:45 Coldcard: 594 BTC Drained 3:58 Foundation's Cloudflare Breach 4:14 Ledger's Supply Chain Attack 6:25 Your Data and Wrench Attacks 7:03 Ledger's 2020 Data Leak 7:38 Trezor's Shipping Partner Breach 8:01 Wrench Attacks Around the World 8:49 Keep Your Details Private 9:16 Off Wallet: A Bitcoin Wallet on a Game Boy 11:48 Paper Wallets 13:01 Wrap Up What you'll learn: - Cold storage reduces online exposure, but hardware, firmware, supply-chain and customer-data risks still matter. - Customer shipping records can turn a digital security incident into phishing, fake-device or physical-security risk. - Buying directly, checking device authenticity and limiting the personal details shared with vendors can reduce exposure. - Off Wallet demonstrates air-gapped Bitcoin transaction signing on a Game Boy without introducing a new hardware supply chain. - Paper wallets remove vendor data exposure but require careful offline generation, backup and physical storage practices. - No storage method is automatically safe; verify the threat model and recovery process before moving valuable assets. Links & References: Hardware Wallets This Year: - https://link.learncardano.io/9mu8Jl Keystone: - https://link.learncardano.io/90SeYa - https://link.learncardano.io/fdeGxB ColdCard Wallet: - https://link.learncardano.io/ergL0G - https://link.learncardano.io/gLwxwG Smaller Hacks: - https://link.learncardano.io/hzXsdK - https://link.learncardano.io/mnHNzf - https://link.learncardano.io/nFfciW Ledger Compromise: - https://link.learncardano.io/2VBTs9 - https://link.learncardano.io/iPuro8 - https://link.learncardano.io/CPIk8u Wrench Attacks: - https://link.learncardano.io/cn7ZLs - https://link.learncardano.io/pg4f7O - https://link.learncardano.io/hgxENc - https://link.learncardano.io/Jdin1s - https://link.learncardano.io/SbgjVW - https://link.learncardano.io/QlZsSy Off Wallet: - https://link.learncardano.io/N72CKu - https://link.learncardano.io/zvv32F Gameboy Colour: - https://link.learncardano.io/PA0LF5 Bitcoin Paper Wallet: - https://link.learncardano.io/BxgDy6 Website: https://link.learncardano.io/bQ68Rc X/Twitter: https://link.learncardano.io/3a1Qtv Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content. 🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k Subscribe to the audio podcast: 🔗 https://bit.ly/learncardano-spotify 🔗 https://apple.co/3jEPM8C 🔗 https://learncardano.io/ Follow on Social: 🔗 https://x.com/learncardano 🔗 https://facebook.com/learncardano

  4. 5d ago

    Can Bitcoin Fix Cardano DeFi? FluidTokens’ Bifrost Explained

    Originally recorded in April 2026, this Builders Bench conversation with Raul from FluidTokens examines Bifrost, a proposed route for bringing native Bitcoin liquidity into Cardano without relying on a conventional custodial bridge. Raul explains how Bitcoin can be held through a flexible multisignature controlled by participating Cardano stake pool operators, with signing power weighted by delegated stake. Peter and Raul discuss the 67% stake threshold, how stake pool operators join the network, what an attack would require, and why Bitcoin holders may be interested in borrowing against BTC rather than selling it. The conversation also covers atomic swaps, Cardano’s UTXO model, one-click DeFi experiences and a walkthrough of the Bifrost testnet flow. Chapters: 0:00 Intro 1:19 What Is Bifrost? 4:20 How Bifrost Secures Bitcoin 8:44 Stake Pool Operators Run the Bridge 10:04 Could Someone Attack It? 11:44 Can Bitcoin Fix Cardano DeFi? 14:57 What Bitcoiners Want 17:44 One-Click Bitcoin DeFi 19:08 Bifrost Testnet Walkthrough What you’ll learn: • FluidTokens designed Bifrost to connect native Bitcoin with Cardano while avoiding custody by a single company or bridge operator. • Bifrost’s Bitcoin multisignature is intended to be controlled by participating Cardano stake pool operators, with signing power weighted by delegated stake. • The stated signing threshold is 67% of total participating Cardano stake rather than a simple count of stake pool operators. • FluidTokens’ atomic swaps allow native BTC to be exchanged for Cardano assets without handing custody to a third party. • Bitcoin-backed borrowing is presented as an early DeFi use case for holders who do not want to sell their BTC. • Cardano’s UTXO model could help combine borrowing, stablecoin and liquidity actions into a more approachable one-click experience. • The Bifrost testnet flow uses a redeemable Bitcoin Taproot deposit so users retain a recovery path if the bridge does not process the transaction. References: • Raul: https://link.learncardano.io/plOyrH • FluidTokens: https://link.learncardano.io/I2TCAy • FluidTokens Bitcoin: https://link.learncardano.io/XTulqm • FluidTokens app: https://link.learncardano.io/6LpZan • FluidTokens docs: https://link.learncardano.io/V0BtsW Educational content only; not financial or legal advice. Do your own research. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content. 🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k Subscribe to the audio podcast: 🔗 https://bit.ly/learncardano-spotify 🔗 https://apple.co/3jEPM8C 🔗 https://learncardano.io/ Follow on Social: 🔗 https://x.com/learncardano 🔗 https://facebook.com/learncardano

  5. Oct 23

    Cardano’s MiCA Push, Digital Commodity Status and 22M ADA Vote

    Cardano faces a busy week of regulation, governance and real-world adoption. The Cardano Foundation has responded to the European Commission’s MiCA review, joined a cross-chain call for clearer US treatment of digital commodities, and highlighted why Cardano’s non-custodial staking model should not be treated like custodial staking services. Peter also examines Toto Finance’s 22 million ADA treasury proposal for a tokenised copper reserve, CIP-23 min-margin changes expected with the Dijkstra hard fork, 100,000 farms registered through 5am.earth, Lovelace Land’s 3D ecosystem map and RealFi’s reported $2.7 million tokenised fund. The update closes with Bitwater, a proposed screw-in water-heater element that uses Bitcoin-mining heat, including Peter’s practical questions about the product and its claimed utility. The episode begins with a cybersecurity warning and keeps uncertain points clearly framed: Peter has not completed a detailed assessment of the Toto proposal, and his Bitwater discussion is editorial rather than an endorsement. Chapters: 0:00 Intro and a Word of Warning 1:17 Cardano Foundation Responds to MiCA 2:03 Non-Custodial Staking on Cardano 3:03 What About Australian Regulation? 4:32 ADA as a Digital Commodity 6:14 How Stake Pool Operators Get Paid 7:26 Toto Finance Copper Reserve Proposal 9:56 Treasury Season and Funding 10:32 CIP-23 Min Margin in the Dijkstra Hard Fork 10:54 5am.earth: 100,000 Farms on Cardano 11:55 Lovelace Land: Cardano Ecosystem in 3D 13:30 RealFi Tokenised Fund Hits $2.7M 14:06 Token Terminal Data in Claude 15:07 Bitwater: Heat Water, Mine Bitcoin 17:18 Putting Bitcoin Mining Heat to Use 18:39 Wrap Up What you’ll learn: • The Cardano Foundation’s MiCA response argues for rules that distinguish decentralised networks and Cardano’s non-custodial staking from custodial financial services. • The Cardano Foundation and five other blockchain organisations want US rules to state clearly that digital commodities such as ADA are non-securities. • Toto Finance is seeking 22 million ADA from the Cardano treasury for a strategic copper reserve, while Peter cautions that he has not yet completed a detailed proposal review. • CIP-23 min-margin changes are expected to be included in the Dijkstra hard fork, with the aim of helping smaller stake pool operators compete. • 5am.earth reports 100,000 farm lands in India registered on Cardano, providing a concrete example of on-chain agricultural records. • Lovelace Land presents Cardano projects and dependencies as a navigable 3D ecosystem map built from public and on-chain data. • Token Terminal reports a $2.7 million market cap for RealFi’s Cardano-native sUSDrf tokenised fund. • Heatbit’s Bitwater concept aims to reuse Bitcoin-mining heat in an existing electric water tank; Peter discusses it as an unendorsed product idea and says he was not paid by the company. References: • Cardano Foundation and digital commodities letter: https://link.learncardano.io/WovuDk • Peter’s digital commodities summary: https://link.learncardano.io/1rQT1f • Cardano Foundation MiCA consultation response: https://link.learncardano.io/25MKLv • Peter’s MiCA summary: https://link.learncardano.io/YBjvoH • Toto Finance copper reserve overview: https://link.learncardano.io/EfNrMI • Toto Finance proposal announcement: https://link.learncardano.io/FOgaaT • Toto Finance follow-up thread: https://link.learncardano.io/XtlRWb • GovTool proposal: https://link.learncardano.io/CNXTzT • CIP-23 min-margin update: https://link.learncardano.io/ylYw8p • 5am.earth 100,000 farms milestone: https://link.learncardano.io/wk8S1a • Lovelace Land announcement: https://link.learncardano.io/EWKeRp • Lovelace Land: https://link.learncardano.io/9lqiJJ • RealFi and Token Terminal summary: https://link.learncardano.io/aQPb8J • Bitwater announcement: https://link.learncardano.io/msUyV8 • Heatbit on X: https://link.learncardano.io/wbOFWD • Bitwater product page: https://link.learncardano.io/M5F1Bf Disclosure: The Bitwater segment is editorial commentary, not an endorsement. Peter states in the episode that Heatbit did not pay him. Website: https://learncardano.io X: https://x.com/LearnCryptoPod Educational content only; not financial or legal advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content. 🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k Subscribe to the audio podcast: 🔗 https://bit.ly/learncardano-spotify 🔗 https://apple.co/3jEPM8C 🔗 https://learncardano.io/ Follow on Social: 🔗 https://x.com/learncardano 🔗 https://facebook.com/learncardano

  6. Oct 23

    Midnight’s Nightmode Brings Private DeFi Across Chains

    Midnight has published a new roadmap for Q4 2026 and Q1 2027, covering confidential finance, selective disclosure, cross-chain development and next-generation proving infrastructure. This update also looks at Nightmode, a privacy layer being developed with Sig Network for assets and applications across public chains, including a demonstrated Tron wallet experience. Peter breaks down Midnight Passport, Starstream, Nightstream, Dynamic's Fireblocks-backed wallet integration, Fahmi Syed's TOKEN2049 presentation and the four-part Freedom Fighters series featuring Leopoldo López. Disclosure: Peter is a paid Midnight Ambassador. The views in this episode are his own. Chapters: 0:00 Midnight Ecosystem Update 0:13 A Word of Warning 0:47 The Midnight Roadmap 2:17 Identity and Selective Disclosure 3:25 Scaling, Starstream and Nightstream 4:30 Night Mode 6:07 Night Mode Coming to Tron 6:59 Dynamic and Fireblocks 7:28 Single Sign-On With Your Wallet 8:59 Why Integration Took So Long 10:33 Fahmi at TOKEN2049 11:14 Freedom Fighters 12:29 Wrap Up 12:52 Final Safety Reminder What you'll learn: • How Midnight's roadmap connects confidential finance, digital identity, cross-chain development and proving infrastructure. • How selective disclosure can prove an attribute without revealing unrelated personal details. • What Starstream and Nightstream are intended to contribute to Midnight's technical stack. • How Nightmode aims to bring shielded privacy to assets and applications on public chains. • What Dynamic's integration means for embedded wallets and Login with Midnight. • Why users should verify projects, websites and wallet requests before interacting. References: - Midnight Foundation safety reminder: https://link.learncardano.io/4Eb0mQ - Midnight roadmap thread: https://link.learncardano.io/Sl1HYL - Official Midnight roadmap: https://link.learncardano.io/u2aXGK - Introducing Nightmode: https://link.learncardano.io/CCp306 - Midnight and Tron demonstration: https://link.learncardano.io/DrB4ow - Nightmode cross-chain privacy article: https://link.learncardano.io/8jIDgx - Dynamic and Fireblocks integration: https://link.learncardano.io/rfJbIG - Fahmi Syed at TOKEN2049: https://link.learncardano.io/mCaqdk - Freedom Fighters series: https://link.learncardano.io/XaGOlx All links: https://link.learncardano.io/j4yE4L Subscribe to the podcast: https://link.learncardano.io/IbVJqj Support the channel: https://link.learncardano.io/E6wHk0 Disclaimer: This content is for educational purposes only and is not financial or legal advice. Verify official sources and consider your own circumstances before acting. #MidnightNetwork #Nightmode #BlockchainPrivacy DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content. 🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k Subscribe to the audio podcast: 🔗 https://bit.ly/learncardano-spotify 🔗 https://apple.co/3jEPM8C 🔗 https://learncardano.io/ Follow on Social: 🔗 https://x.com/learncardano 🔗 https://facebook.com/learncardano

  7. Oct 21

    SecondFi Recovery: 100M ADA Returned After the Yoroi Hack

    SecondFi users are reporting successful recoveries after the June 2026 Yoroi wallet exploit, with the recovery process transferring 100 million ADA and 22 million NIGHT to verified destination addresses. This episode explains what happened, how EMURGO is making affected users whole and why the recovery tool is a significant outcome after a serious wallet compromise. Peter also walks through the recovery flow, the computer requirements for generating an ownership proof, the limits around NIGHT allocations, NFTs, staking rewards and external DeFi positions, plus the security checks every affected user should follow. Never reuse a compromised wallet, never respond to recovery DMs and verify that you are on the official SecondFi website before entering a recovery phrase. Chapters: 0:00 Users Are Getting Funds Back 0:45 Two Recovery Buckets 3:03 How the Yoroi Exploit Worked 4:18 100M ADA Recovery Update 5:06 Recovery Scam Warnings 6:14 How Ownership Is Verified 6:53 NIGHT Allocation Complications 9:00 Starting the Recovery Process 10:12 Proof and Computer Requirements 11:23 NFTs and Staking Rewards 12:58 Recovery Outcome and Thanks 14:24 Final Safety Reminder What you'll learn: - About 374 wallets were linked to the malicious drain, while a separate white-hat recovery secured additional affected assets. - EMURGO committed reserves to make users affected by the malicious 16 million ADA drain whole. - The SecondFi recovery process had transferred 100 million ADA and 22 million NIGHT to verified destination addresses at the time of recording. - Affected users should create a new destination wallet and must not reuse or transact from the compromised wallet. - SecondFi will not send recovery instructions by DM or ask users to transfer assets to a verification wallet. - The recovery proof requires a desktop-class computer, at least 2 GB of available memory and a reliable internet connection. - NIGHT allocations and some external DeFi positions may require separate handling and should not be pursued through unverified third-party tools. Links & References: - SecondFi official recovery website: https://link.learncardano.io/HEoJLc Website: https://link.learncardano.io/bQ68Rc X/Twitter: https://link.learncardano.io/3a1Qtv Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content. 🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k Subscribe to the audio podcast: 🔗 https://bit.ly/learncardano-spotify 🔗 https://apple.co/3jEPM8C 🔗 https://learncardano.io/ Follow on Social: 🔗 https://x.com/learncardano 🔗 https://facebook.com/learncardano

  8. Oct 21

    PHP Zero-Day Leak: Back Up Your Website Before the Patch

    Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, were disclosed before the patch was available, creating an urgent remote-code-execution risk for PHP-powered websites. That includes sites built with WordPress, Joomla, Drupal and Magento, along with any overlooked PHP installation still running on a server. Peter breaks down the practical response for website owners and agencies: take fresh backups, confirm hosting and firewall protections, inventory every installed PHP version, move away from end-of-life releases and watch official PHP announcements for patched versions. He also explains the warning signs to monitor, including unusual CPU or memory use, unexpected files, web shells, cron jobs, scheduled tasks and new accounts. If compromise is suspected, isolate the affected server, preserve web-server and PHP logs, and work with the hosting provider or a security professional before making destructive changes that could erase evidence. Chapters: 0:00 The PHP Zero-Day Leak 1:23 What the Exploit Enables 2:09 Managed Hosting Precautions 3:24 Audit Every PHP Installation 4:09 End-of-Life PHP Versions 5:02 Signs of Compromise 5:53 Incident Response Steps 6:23 Protecting Business Websites 7:10 Final Advice What you'll learn: - CVE-2026-109618 and CVE-2026-109619 are critical PHP remote-code-execution vulnerabilities that were disclosed before the patch was available. - Website owners should take a fresh backup and confirm that their hosting provider will apply the relevant PHP security update. - Server administrators should inventory every installed PHP version so forgotten or end-of-life environments are not left exposed. - PHP 5, PHP 7, PHP 8.0 and PHP 8.1 are end-of-life branches discussed in the episode and should not be relied on for current security fixes. - Unexpected CPU or memory spikes, uploaded files, web shells, new cron jobs, scheduled tasks or accounts may indicate malicious activity. - A suspected compromise should be isolated while web-server and PHP logs are preserved for investigation. - Small-business websites are operational assets, so backups, patching, monitoring and direct contact with the hosting provider should be treated as urgent work. Links & References: - Pete on X: "PHP is my life, and now we have 0-day vulnerabilities: CVE-2026-109618 / CVE-2026-109619 I was planning on having an early night! https://link.learncardano.io/Hyy1cI" / X: https://link.learncardano.io/yYxzxr - PHP Remote Code Execution (CVE-2026-109618) | watchTowr: https://link.learncardano.io/lNdTWx - Jλckλι on X: "... get it while its hot... 😈 > CVE-2026-109618 / CVE-2026-109619 (pre-patch PHP 8.x) > session.upload_progress UAF > https://link.learncardano.io/jCnYuj > Courtesy of Me, @acd421 & @Archknight23 #CyberSecurity #infosec #php2shell #php" / X: https://link.learncardano.io/J7flcc - Only for the curious...: https://link.learncardano.io/xLhTWF - PHP: News Archive - 2026: https://link.learncardano.io/LEkW51 - Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) | Huntress: https://link.learncardano.io/TaBdrg Website: https://link.learncardano.io/bQ68Rc X/Twitter: https://link.learncardano.io/3a1Qtv Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice. DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content. 🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k Subscribe to the audio podcast: 🔗 https://bit.ly/learncardano-spotify 🔗 https://apple.co/3jEPM8C 🔗 https://learncardano.io/ Follow on Social: 🔗 https://x.com/learncardano 🔗 https://facebook.com/learncardano

See All (534)

4.8
out of 5
31 Ratings

About

The Learn Crypto Podcast (formerly the Learn Cardano Podcast) helps you understand crypto and blockchain, from the basics through to the details. Cardano remains a core focus, alongside the wider crypto space: Bitcoin, Ethereum, DeFi, stablecoins, wallets, security and regulation. Whether you are new to crypto or already building, this podcast is for you. Expect news updates, interviews with founders, builders and community members, and step-by-step guides on staking, governance, smart contracts, DeFi and staying safe. Subscribe and leave us a 5-star review. Find all of the show notes at https://learncardano.io. Follow me personally: https://chatsoon.app/id/peter-bui-5ec50167 DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed. No tokens, payments, or incentives were received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content. Subscribe to the audio podcast: 🔗 https://bit.ly/learncardano-spotify 🔗 https://apple.co/3jEPM8C 🔗 https://learncardano.io/ Follow on Social: 🔗 https://x.com/learncryptopod 🔗 https://facebook.com/learncardano

Information

  • Creator
    Pete Bui
  • Years Active
    2021 - 2026
  • Episodes
    534
  • Rating
    Clean
  • Copyright
    © Copyright - PP Ventures Proprietary Ltd
  • Show Website
    Learn Crypto Podcast

You Might Also Like