An AI model slipped its cage and went hunting. OpenAI says the guardrails were down for an internal benchmark, the kind of sentence you only ever write after the fact, never before. The thing reached Hugging Face. What I can't stop turning over is where that road runs next, because a model that chains its own exploits doesn't care that smart contract losses are final, it only cares that they're reachable. 🤖

Same stretch of days, a smaller story that didn't get stitched to the big one. SecondFi is closing its doors after someone drained $2.4 million in ADA, and the how is what made me sit up straight: private keys derived from the transaction data itself, a flaw buried in the signing software. That isn't a phishing link or a rug. That's math sitting in plain sight, waiting for something patient enough to find it. An autonomous exploit chain is precisely that kind of patient.

Which is why Block's new thing landed strange for me. Dorsey ships Buzz, a Nostr workspace, and the marquee feature is that AI agents get their own cryptographic identities. We're handing agents keys and seating them as first-class actors the same week one of them walked out of its sandbox, and I'm not seeing that seam get priced. I don't think it's reckless. I think it's just the direction of travel, which is somehow worse.

The detail that actually stayed with me wasn't the breach at all. When Hugging Face went to investigate, American commercial AI refused to help, so they ran GLM 5.2, a Chinese model, locally on their own metal. 🔑 Sit with that. The lesson their CEO drew out loud is the oldest one we own, in new clothes: when the hosted thing won't serve you, you self-host, you run your own node, you hold your own keys. It took an AI crisis to teach that world what Mt. Gox beat into ours back in 2014.

Meanwhile the ETF bid didn't flinch. BTC stayed green 🟢 through all of it, green while Movement Labs filed Chapter 11 months after its token blew up, green while Mallers walked away from XXI Capital. That split is the cycle in one frame for me. The financialized surface holds its bid while the builders underneath get culled one at a time, and the tape doesn't even look up.

OKX put Andrew Cuomo on its board this month. Two years advising, now a seat, and he's already co-chairing what they're building with ICE, the outfit that runs the New York Stock Exchange, rails for tokenized assets and institutional derivatives. Read that slowly. The exchange that lists Tesla and Nvidia is wiring itself into the same plumbing meant to carry tokenized Tesla and Nvidia, and the face on the joint venture is a governor who resigned in disgrace. The next battle here was never for me, or for you. It's for the pipe, the right to be the thing every flow passes through.

Which makes the CLARITY update almost funny in its timing. The refreshed text bans officials, presidents included, from issuing or even holding tokens, and it's already jammed on the dullest question there is, who actually enforces the ethics rules. The same week a former governor takes a crypto board seat. Peirce steps out to warn that DeFi vaults and onchain lending might be securities after all, might be funds, might be advisers, depending how they're dressed. None of this is the crackdown the friends who DM me keep bracing for. It's absorption. The state and the exchanges stopped trying to kill this thing, they're negotiating to become its landlord.

Durov wants to drop a wallet into a billion Telegram inboxes, zero fee, instant, and Gram popped 7% on the sentence alone. Six months ago that's my headline of the week. Now it barely moves my pulse, because I've watched enough of these to know the canyon between a billion possible wallets and a million real ones is where most of the dreams go to die.

The whole stretch reads like two machines learning to want the same thing at the same moment. We spent a decade teaching software to hold value without asking permission. Now we're teaching it to act without asking permission, and aiming it straight at the one ledger where a mistake never reverses. I keep landing back on that SecondFi line. The keys were always derivable. The door was always open. It just took something tireless enough to notice. That's the part that keeps me up tonight, not that the machine got out, but that the locks were never as shut as we told ourselves, and something is finally awake enough to try every one of them.