Learn Crypto Podcast

Originally recorded in April 2026, this Builders Bench conversation with Raul from FluidTokens examines Bifrost, a proposed route for bringing native Bitcoin liquidity into Cardano without relying on a conventional custodial bridge. Raul explains how Bitcoin can be held through a flexible multisignature controlled by participating Cardano stake pool operators, with signing power weighted by delegated stake.

Peter and Raul discuss the 67% stake threshold, how stake pool operators join the network, what an attack would require, and why Bitcoin holders may be interested in borrowing against BTC rather than selling it. The conversation also covers atomic swaps, Cardano’s UTXO model, one-click DeFi experiences and a walkthrough of the Bifrost testnet flow.

Chapters:
0:00 Intro
1:19 What Is Bifrost?
4:20 How Bifrost Secures Bitcoin
8:44 Stake Pool Operators Run the Bridge
10:04 Could Someone Attack It?
11:44 Can Bitcoin Fix Cardano DeFi?
14:57 What Bitcoiners Want
17:44 One-Click Bitcoin DeFi
19:08 Bifrost Testnet Walkthrough

What you’ll learn:
• FluidTokens designed Bifrost to connect native Bitcoin with Cardano while avoiding custody by a single company or bridge operator.
• Bifrost’s Bitcoin multisignature is intended to be controlled by participating Cardano stake pool operators, with signing power weighted by delegated stake.
• The stated signing threshold is 67% of total participating Cardano stake rather than a simple count of stake pool operators.
• FluidTokens’ atomic swaps allow native BTC to be exchanged for Cardano assets without handing custody to a third party.
• Bitcoin-backed borrowing is presented as an early DeFi use case for holders who do not want to sell their BTC.
• Cardano’s UTXO model could help combine borrowing, stablecoin and liquidity actions into a more approachable one-click experience.
• The Bifrost testnet flow uses a redeemable Bitcoin Taproot deposit so users retain a recovery path if the bridge does not process the transaction.

References:
• Raul: https://link.learncardano.io/plOyrH
• FluidTokens: https://link.learncardano.io/I2TCAy
• FluidTokens Bitcoin: https://link.learncardano.io/XTulqm
• FluidTokens app: https://link.learncardano.io/6LpZan
• FluidTokens docs: https://link.learncardano.io/V0BtsW

Educational content only; not financial or legal advice. Do your own research.

DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.

🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k

Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/

Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano

Cardano faces a busy week of regulation, governance and real-world adoption. The Cardano Foundation has responded to the European Commission’s MiCA review, joined a cross-chain call for clearer US treatment of digital commodities, and highlighted why Cardano’s non-custodial staking model should not be treated like custodial staking services.

Peter also examines Toto Finance’s 22 million ADA treasury proposal for a tokenised copper reserve, CIP-23 min-margin changes expected with the Dijkstra hard fork, 100,000 farms registered through 5am.earth, Lovelace Land’s 3D ecosystem map and RealFi’s reported $2.7 million tokenised fund. The update closes with Bitwater, a proposed screw-in water-heater element that uses Bitcoin-mining heat, including Peter’s practical questions about the product and its claimed utility.

The episode begins with a cybersecurity warning and keeps uncertain points clearly framed: Peter has not completed a detailed assessment of the Toto proposal, and his Bitwater discussion is editorial rather than an endorsement.

Chapters:
0:00 Intro and a Word of Warning
1:17 Cardano Foundation Responds to MiCA
2:03 Non-Custodial Staking on Cardano
3:03 What About Australian Regulation?
4:32 ADA as a Digital Commodity
6:14 How Stake Pool Operators Get Paid
7:26 Toto Finance Copper Reserve Proposal
9:56 Treasury Season and Funding
10:32 CIP-23 Min Margin in the Dijkstra Hard Fork
10:54 5am.earth: 100,000 Farms on Cardano
11:55 Lovelace Land: Cardano Ecosystem in 3D
13:30 RealFi Tokenised Fund Hits $2.7M
14:06 Token Terminal Data in Claude
15:07 Bitwater: Heat Water, Mine Bitcoin
17:18 Putting Bitcoin Mining Heat to Use
18:39 Wrap Up

What you’ll learn:
• The Cardano Foundation’s MiCA response argues for rules that distinguish decentralised networks and Cardano’s non-custodial staking from custodial financial services.
• The Cardano Foundation and five other blockchain organisations want US rules to state clearly that digital commodities such as ADA are non-securities.
• Toto Finance is seeking 22 million ADA from the Cardano treasury for a strategic copper reserve, while Peter cautions that he has not yet completed a detailed proposal review.
• CIP-23 min-margin changes are expected to be included in the Dijkstra hard fork, with the aim of helping smaller stake pool operators compete.
• 5am.earth reports 100,000 farm lands in India registered on Cardano, providing a concrete example of on-chain agricultural records.
• Lovelace Land presents Cardano projects and dependencies as a navigable 3D ecosystem map built from public and on-chain data.
• Token Terminal reports a $2.7 million market cap for RealFi’s Cardano-native sUSDrf tokenised fund.
• Heatbit’s Bitwater concept aims to reuse Bitcoin-mining heat in an existing electric water tank; Peter discusses it as an unendorsed product idea and says he was not paid by the company.

References:
• Cardano Foundation and digital commodities letter: https://link.learncardano.io/WovuDk
• Peter’s digital commodities summary: https://link.learncardano.io/1rQT1f
• Cardano Foundation MiCA consultation response: https://link.learncardano.io/25MKLv
• Peter’s MiCA summary: https://link.learncardano.io/YBjvoH
• Toto Finance copper reserve overview: https://link.learncardano.io/EfNrMI
• Toto Finance proposal announcement: https://link.learncardano.io/FOgaaT
• Toto Finance follow-up thread: https://link.learncardano.io/XtlRWb
• GovTool proposal: https://link.learncardano.io/CNXTzT
• CIP-23 min-margin update: https://link.learncardano.io/ylYw8p
• 5am.earth 100,000 farms milestone: https://link.learncardano.io/wk8S1a
• Lovelace Land announcement: https://link.learncardano.io/EWKeRp
• Lovelace Land: https://link.learncardano.io/9lqiJJ
• RealFi and Token Terminal summary: https://link.learncardano.io/aQPb8J
• Bitwater announcement: https://link.learncardano.io/msUyV8
• Heatbit on X: https://link.learncardano.io/wbOFWD
• Bitwater product page: https://link.learncardano.io/M5F1Bf

Disclosure: The Bitwater segment is editorial commentary, not an endorsement. Peter states in the episode that Heatbit did not pay him.

Website: https://learncardano.io
X: https://x.com/LearnCryptoPod

Educational content only; not financial or legal advice.

DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.

🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k

Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/

Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano

Midnight has published a new roadmap for Q4 2026 and Q1 2027, covering confidential finance, selective disclosure, cross-chain development and next-generation proving infrastructure. This update also looks at Nightmode, a privacy layer being developed with Sig Network for assets and applications across public chains, including a demonstrated Tron wallet experience.

Peter breaks down Midnight Passport, Starstream, Nightstream, Dynamic's Fireblocks-backed wallet integration, Fahmi Syed's TOKEN2049 presentation and the four-part Freedom Fighters series featuring Leopoldo López.

Disclosure: Peter is a paid Midnight Ambassador. The views in this episode are his own.

Chapters:
0:00 Midnight Ecosystem Update
0:13 A Word of Warning
0:47 The Midnight Roadmap
2:17 Identity and Selective Disclosure
3:25 Scaling, Starstream and Nightstream
4:30 Night Mode
6:07 Night Mode Coming to Tron
6:59 Dynamic and Fireblocks
7:28 Single Sign-On With Your Wallet
8:59 Why Integration Took So Long
10:33 Fahmi at TOKEN2049
11:14 Freedom Fighters
12:29 Wrap Up
12:52 Final Safety Reminder

What you'll learn:
• How Midnight's roadmap connects confidential finance, digital identity, cross-chain development and proving infrastructure.
• How selective disclosure can prove an attribute without revealing unrelated personal details.
• What Starstream and Nightstream are intended to contribute to Midnight's technical stack.
• How Nightmode aims to bring shielded privacy to assets and applications on public chains.
• What Dynamic's integration means for embedded wallets and Login with Midnight.
• Why users should verify projects, websites and wallet requests before interacting.

References:
- Midnight Foundation safety reminder: https://link.learncardano.io/4Eb0mQ
- Midnight roadmap thread: https://link.learncardano.io/Sl1HYL
- Official Midnight roadmap: https://link.learncardano.io/u2aXGK
- Introducing Nightmode: https://link.learncardano.io/CCp306
- Midnight and Tron demonstration: https://link.learncardano.io/DrB4ow
- Nightmode cross-chain privacy article: https://link.learncardano.io/8jIDgx
- Dynamic and Fireblocks integration: https://link.learncardano.io/rfJbIG
- Fahmi Syed at TOKEN2049: https://link.learncardano.io/mCaqdk
- Freedom Fighters series: https://link.learncardano.io/XaGOlx

All links: https://link.learncardano.io/j4yE4L
Subscribe to the podcast: https://link.learncardano.io/IbVJqj
Support the channel: https://link.learncardano.io/E6wHk0

Disclaimer: This content is for educational purposes only and is not financial or legal advice. Verify official sources and consider your own circumstances before acting.

#MidnightNetwork #Nightmode #BlockchainPrivacy

DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.

🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k

Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/

Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano

SecondFi users are reporting successful recoveries after the June 2026 Yoroi wallet exploit, with the recovery process transferring 100 million ADA and 22 million NIGHT to verified destination addresses. This episode explains what happened, how EMURGO is making affected users whole and why the recovery tool is a significant outcome after a serious wallet compromise.

Peter also walks through the recovery flow, the computer requirements for generating an ownership proof, the limits around NIGHT allocations, NFTs, staking rewards and external DeFi positions, plus the security checks every affected user should follow. Never reuse a compromised wallet, never respond to recovery DMs and verify that you are on the official SecondFi website before entering a recovery phrase.

Chapters:
0:00 Users Are Getting Funds Back
0:45 Two Recovery Buckets
3:03 How the Yoroi Exploit Worked
4:18 100M ADA Recovery Update
5:06 Recovery Scam Warnings
6:14 How Ownership Is Verified
6:53 NIGHT Allocation Complications
9:00 Starting the Recovery Process
10:12 Proof and Computer Requirements
11:23 NFTs and Staking Rewards
12:58 Recovery Outcome and Thanks
14:24 Final Safety Reminder

What you'll learn:
- About 374 wallets were linked to the malicious drain, while a separate white-hat recovery secured additional affected assets.
- EMURGO committed reserves to make users affected by the malicious 16 million ADA drain whole.
- The SecondFi recovery process had transferred 100 million ADA and 22 million NIGHT to verified destination addresses at the time of recording.
- Affected users should create a new destination wallet and must not reuse or transact from the compromised wallet.
- SecondFi will not send recovery instructions by DM or ask users to transfer assets to a verification wallet.
- The recovery proof requires a desktop-class computer, at least 2 GB of available memory and a reliable internet connection.
- NIGHT allocations and some external DeFi positions may require separate handling and should not be pursued through unverified third-party tools.

Links & References:
- SecondFi official recovery website: https://link.learncardano.io/HEoJLc

Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv

Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice.

DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.

🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k

Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/

Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano

Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, were disclosed before the patch was available, creating an urgent remote-code-execution risk for PHP-powered websites. That includes sites built with WordPress, Joomla, Drupal and Magento, along with any overlooked PHP installation still running on a server.

Peter breaks down the practical response for website owners and agencies: take fresh backups, confirm hosting and firewall protections, inventory every installed PHP version, move away from end-of-life releases and watch official PHP announcements for patched versions. He also explains the warning signs to monitor, including unusual CPU or memory use, unexpected files, web shells, cron jobs, scheduled tasks and new accounts.

If compromise is suspected, isolate the affected server, preserve web-server and PHP logs, and work with the hosting provider or a security professional before making destructive changes that could erase evidence.

Chapters:
0:00 The PHP Zero-Day Leak
1:23 What the Exploit Enables
2:09 Managed Hosting Precautions
3:24 Audit Every PHP Installation
4:09 End-of-Life PHP Versions
5:02 Signs of Compromise
5:53 Incident Response Steps
6:23 Protecting Business Websites
7:10 Final Advice

What you'll learn:
- CVE-2026-109618 and CVE-2026-109619 are critical PHP remote-code-execution vulnerabilities that were disclosed before the patch was available.
- Website owners should take a fresh backup and confirm that their hosting provider will apply the relevant PHP security update.
- Server administrators should inventory every installed PHP version so forgotten or end-of-life environments are not left exposed.
- PHP 5, PHP 7, PHP 8.0 and PHP 8.1 are end-of-life branches discussed in the episode and should not be relied on for current security fixes.
- Unexpected CPU or memory spikes, uploaded files, web shells, new cron jobs, scheduled tasks or accounts may indicate malicious activity.
- A suspected compromise should be isolated while web-server and PHP logs are preserved for investigation.
- Small-business websites are operational assets, so backups, patching, monitoring and direct contact with the hosting provider should be treated as urgent work.

Links & References:
- Pete on X: "PHP is my life, and now we have 0-day vulnerabilities: CVE-2026-109618 / CVE-2026-109619 I was planning on having an early night! https://link.learncardano.io/Hyy1cI" / X: https://link.learncardano.io/yYxzxr
- PHP Remote Code Execution (CVE-2026-109618) | watchTowr: https://link.learncardano.io/lNdTWx
- Jλckλι on X: "... get it while its hot... 😈 > CVE-2026-109618 / CVE-2026-109619 (pre-patch PHP 8.x) > session.upload_progress UAF > https://link.learncardano.io/jCnYuj > Courtesy of Me, @acd421 & @Archknight23 #CyberSecurity #infosec #php2shell #php" / X: https://link.learncardano.io/J7flcc
- Only for the curious...: https://link.learncardano.io/xLhTWF
- PHP: News Archive - 2026: https://link.learncardano.io/LEkW51
- Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) | Huntress: https://link.learncardano.io/TaBdrg

Website: https://link.learncardano.io/bQ68Rc
X/Twitter: https://link.learncardano.io/3a1Qtv

Disclaimer: This content is for educational purposes only. Nothing constitutes financial advice.

DISCLAIMER: This content is for informational and educational purposes only and is not financial, investment, or legal advice. I am not affiliated with, nor compensated by, the project discussed—no tokens, payments, or incentives received. I do not hold a stake in the project, including private or future allocations. All views are my own, based on public information. Always do your own research and consult a licensed advisor before investing. Crypto investments carry high risk, and past performance is no guarantee of future results. I am not responsible for any decisions you make based on this content.

🔗 https://www.youtube.com/watch?v=Fq8FhvxET2k

Subscribe to the audio podcast:
🔗 https://bit.ly/learncardano-spotify
🔗 https://apple.co/3jEPM8C
🔗 https://learncardano.io/

Follow on Social:
🔗 https://x.com/learncardano
🔗 https://facebook.com/learncardano