Market Intel

North Korea's 2026 Crypto Haul Tops $1B

Chainalysis ties the Bitget hack to North Korea, pushing Pyongyang's 2026 haul past $1B. Plus: Jay Clayton heads Trump's Super Intelligence Force, Bitcoin Core merges a PSBT signing fix, and community banks sue over OCC crypto charters.

Funk D. Vale5 min read 135 of 142
Where this one sits in the run

Jay Clayton runs America's AI push now. The SEC chair who sued Ripple as one of his last acts in December 2020 is the Director of National Intelligence these days, and Trump just put him at the head of something called the Super Intelligence Force, a name I laughed at until I read it again.

That winter comes back easily. A friend who only DMs me when something breaks sent a screenshot of his XRP sitting in a Coinbase account with nowhere to sell it. He was sure they'd taken his coins. They hadn't. He could withdraw, he just couldn't trade there, and I spent most of an evening walking him through the difference between losing an asset and losing an exit. The XRP Ledger's own order book kept matching trades the whole time, years before a judge got around to ruling on any of it.

AI mostly doesn't have a ledger underneath. The weights live on the lab's servers, your account is your access, and a ban takes all of it. That's probably why it stuck with me more than it should have that OpenAI suspended PewDiePie twice while he trained Ajax, a small uncensored model meant to run on your own PC. He hit the wall and kept building the version that can't be switched off. That's the self-custody reflex, coming out of a YouTuber instead of a cypherpunk mailing list. We spent years arguing over whether Treasury could sanction Tornado Cash before an appeals court said immutable code wasn't property it could block, and my gut says open weights are headed into the same argument. I'd rather not guess where the man who sued Ripple lands on it.

The day before, XRP had turned up on the other side of the moral ledger. Chainalysis tied the Bitget theft I've been chewing on since late September to North Korea, and that one job pushed Pyongyang's crypto haul for 2026 past $1B. The stolen XRP never touched an exchange that could freeze it. It went into a cross-chain pool that takes XRP on one chain and pays out bitcoin from its own reserves on another, with no account to ban and no front desk to serve papers at. Same property that kept the XRP order book alive when Clayton came for Ripple. I've known since the Silk Road days that these rails don't pick sides, and I've defended that for years. It still sits differently on a night when the money goes to a regime that builds missiles.

What I keep turning over is the tooling. Chainalysis says pairing those hops across four blockchains takes over 20 hours by hand, and its in-house AI cleared it in under 10 minutes. Machines are on the forensics side now. The same weekend, Cathie Wood says we should start watching where AI agents spend money as they move from answering questions to paying for things, with the funds and the big platforms already scrambling to own the pipes. 🤖 I tried to picture an agent at the moment it pays. It doesn't hand over cash. It signs something. ✍️

Which is why a Bitcoin Core fix has sat with me longer than anything else this weekend. A partially built transaction can ask your wallet to sign one input with SIGHASH_SINGLE. If there's no output at the matching position, your signature can end up committing to no recipient at all. That's a blank check with your name on it, handed to whoever built the rest of the transaction. Core merged a repair to its PSBT handling, and as of tonight no release has been named to carry it. I've been signing PSBTs for years and couldn't tell you the last time I read a sighash flag before approving one. An agent built to move fast won't read it either, not unless it's been taught to.

Underneath the machines, the dollar plumbing moved too. Washington is rewriting the rules for borrowing against Treasuries. The issuers who keep bills behind their dollar tokens live inside those rules, so what's really being rewritten is how fast you get paid on a bad day. I think about the SVB weekend whenever this comes up. USDC's slip back then wasn't about the bills. It was about cash sitting in a bank that failed on a Friday, and whether Circle could reach it by Monday. Solvency is a balance sheet. Liquidity is a calendar. One layer down, the Russian money I wrote about Friday sits in that same plumbing, which hadn't occurred to me until tonight.

Then the community banks went to court. The ICBA wants the OCC's national trust charters for crypto firms blocked, calling them a side door into the banking system without the safeguards that bind traditional banks. My read is that the door scares them less than where deposits go once any door exists. Meanwhile the Clarity Act stalled in the Senate and the deal desks barely blinked, with crypto M&A running at record levels anyway. Last spring I'd have told you the bill was the whole game. Now I wonder whether the deal desks think they need Congress at all while the regulators keep saying yes, and I've seen that bet before from the other side. In the ICO year we built without permission and paid for it in subpoenas. This cycle we're building on permission that was never written into law, and I honestly don't know how much weight it holds once a court leans on it.

Third-quarter earnings kick off this week, and more companies than ever are telling us their profits will grow. At the same time wages are falling, energy is soaring, and the 1970s comparisons are back out of the drawer. 🛢️ Those two stories fight less than they seem to. In an inflationary decade, companies with pricing power post gorgeous nominal numbers while paychecks shrink in real terms, so the optimism is measured in a unit that's losing value. The tokenized Nvidia and Tesla and Apple will trade those earnings around the clock. I'll watch them on weekends, when the exchanges they mirror are closed, but the books I want to watch hardest are gold and silver. 🪙 That decade's playbook opened with gold, and for part of it holding bullion wasn't even legal in the US. Now gold sits on public rails as a token in the same wallet as your dollars, with an issuer attached, and issuers can be told to freeze. I can't decide whether that's progress or the old rule in a nicer suit.

It's late, and the thread I keep pulling is consent: who gets to say no, and what you've actually agreed to when you sign. A signature is supposed to say where the money goes. I wonder how many of mine, a few years out, will be made by something that never reads the flags.

All 142 briefings