
Hackers Minted 4,000 BTC on Liquid: Blockstream Won't Pay, Trezor Leak Grows, Genesis Bond Sold Out
A dormant bug in Liquid's confidential transactions let an attacker mint roughly 4,000 BTC nobody could see, then bridge it out. They returned 3,400, kept 600, and are negotiating with Blockstream in OP_RETURN messages. Plus Trezor's leak grows to 80,000 customers, the Stacks Genesis Bond sells out in 24 hours, and Brian Armstrong calls $400K Bitcoin by 2030 reasonable. In this episode of Good For Bitcoin, Brandon and Kate discuss: Liquid was exploited for roughly 4,000 BTC: a dormant bug in Elements' confidential transactions got a fix that introduced a new one, and the attacker minted BTC nobody could see, then bridged it out like a normal withdrawal. They returned 3,400 BTC, kept 600, and negotiated with Blockstream through OP_RETURN messages demanding a 10% bounty. Blockstream says no ransom, calls it theft, and shipped a patched Elements Wednesday. Trezor's data leak got worse: shipping vendor ShipMonk kept customer records past its 90-day deletion policy, and another 67,000 U.S. customers who ordered between November 2019 and August 2021 had names, emails, phone numbers, and addresses exposed. About 80,000 are now affected. Kate's tip: set a family safe word before the AI voice-clone calls start. The Stacks Genesis Bond sold out in 24 hours: 230 BTC time-locked on Bitcoin's L1, no bridge and no custodian handoff, paired with STX to target a 3% yield over a six-month bond. UTXO Management, HashKey Cloud, Cypher Capital, and 21Shares anchored the first round; the next opens around October 10. Also: Bullish listed STX and sBTC. Clarity Act crunch: Senator Cynthia Lummis says if the Senate doesn't pass it next week there's no realistic shot before the end of the decade. The bill grew from 616 to 630 pages with over 100 Democrat-requested changes, including CFTC registration for DeFi that's decentralized in name only. Polymarket puts enactment in 2026 at 18%. Quick headlines: SoFi and Kraken's parent Payward partner on 24/7 USD settlement, River argues Bitcoin could hit $840,000 within five years, Block applies for an OCC trust bank charter, Hunter Biden's LAPTOP token crashes 99% in hours, Luke Dashjr leaves Ocean, and Brian Armstrong tells CNBC the bottom is in. Treasury tracker: Strategy +4,603 BTC (845,050), its first buy since June, plus $167M of STRC repurchased and the buyback doubled to $2B. Strive +1,375 (24,531), Boyaa Interactive +115 (4,316), Capital B +376 (3,521), CleanSpark -228 (13,703). Follow the show on X: @goodforbtc. Hosts: Brandon Marshall — @marshallmixing Kate Parkman — @katemparkman Subscribe & Follow: goodforbitcoin.com YouTube Spotify Amazon Music Apple Podcasts Pocket Casts RSS
- Transcript


















