SciPHR/ Notes sciphr.io ↗

[ 00 ] Notes

One mechanism at a time.

Short, plain notes on crypto and key security. One real mechanism, exploit, or recovery rule per entry, explained for people who want to understand the machine, not the headline. These are the posts SciPHR publishes, kept here as the permanent, citable record, grouped by theme and ordered newest first.

RecentLatest

Passkey-only wallets.

Passkeys remove the most common way wallets get drained, but the risk moves to whoever controls cloud recovery.

Week 27February 2026

Fake Ledger Live app on the Apple App Store.

Last week, a counterfeit Ledger Live app sat on Apple's Mac App Store for nearly a week and drained $9.5 million.

Week 25February 2026

Layer 2s were created because Layer 1s were slow, expensive, and hard to use at scale. They served as a workaround, not the ultimate goal. What.

Permissioned Domains on XRPL

Today, the XRP Ledger activated permissioned domains. This allows restricted areas to exist on the public ledger where only.

Week 24January 2026

Bypassing Security Controls

Private keys, API keys, and credentials are common in development. They're needed to test, deploy, and iterate upon a codebase. The issue is that testing.

Security Audits:

They check configurations and permissions as they exist on the day of review. While useful at that moment in time.

In crypto, a private key is closer to a physical key than a password. It doesn't identify you nor ask for permission, it simply opens the door. If the key.

Week 23January 2026

Key Storage vs. Usage.

Usage. Generating and storing cryptographic keys is largely solved. Hardware wallets, secure enclaves, HSMs, and cloud services all do this.

A hardware security module (HSM) is built to store private keys and keep them from ever leaving the device. Your Mac and iPhone use one for Touch ID.

Most people find it difficult to understand modern encryption. That becomes a problem when they rely on it daily without realizing it. Passwords.

Why developers end up bypassing security controls

Why developers end up bypassing security controls When security systems slow down development or break workflows, developers route around them. Not.

The problem with the "just use an HSM" advice

Real systems scale, rotate staff, add services, and change trust.

What surprised us most while building

What surprised us most while building Concrete things like: how often signing authority needs to be temporary how rarely permissions are truly binary how.

Week 22January 2026

Claude Cowork is basically Claude Code with a user interface. It grants Claude access to folders on your desktop and allows non-technical.

XRPL 3.0.0. The software was released in December, but XRPL upgrades do not take effect immediately. Validators vote first, and then amendments are activated.

Raspberry Pi AI HAT+ 2

Raspberry Pi AI HAT+ 2 Reports suggest Nvidia is pulling back on certain consumer GPUs, including the RTX 5070 Ti, as supply is redirected toward AI and.

Week 21January 2026

Ledger Customer Data Breach via Global-e Payment Processor

According to ZachXBT, an independent blockchain investigator, Ledger customers were affected by a new data breach linked to its payment processor, Global-e.

NVDA announces Rubin.

Nvidia announced Rubin, its next-generation AI compute platform, at a time when hardware in general remains supply-constrained. Rather.

Polymarket Arbitrage and Prediction Market Pricing Gaps

You might have seen many copy-paste posts about Polymarket Arbitrage bots. Prediction markets, such as Polymarket, often reveal pricing gaps before.

ChatGPT Health is a major release

Privacy, HIPAA compliance, and data handling were.

Nvidia and Autonomous Vehicles: AI Moves into Machines

When self-driving cars began research and discovery in the mid-2010s, the technology was seen as an anomaly. Alphabet's (Google) Waymo and Tesla's early work.

Week 20December 2025

Ripple expands RLUSD to Layer-2 networks

They exist to process transactions.

Why younger investors turn to crypto

Why younger investors turn to crypto A recent survey shows 73 percent of Gen Z and Millennial investors believe it is harder for their generation to build.

HashKey goes public in quiet IPO

HashKey, one of the largest regulated crypto exchanges operating out of Hong Kong, went public today in a notably quiet IPO. It is the first major crypto.

Coinbase takes on prediction markets.

Coinbase announced the launch of zero-commission U.S. stock trading alongside prediction markets on its platform. This.

Japan raises rates to a 30-year high

For most of the last generation, Japan was.

Week 19December 2025

AI interviews its users.

Anthropic released Interviewer on December 4. It is a Claude-powered tool that conducts large-scale qualitative interviews. The.

Crypto waits on the Fed.

The Fed will announce its final rate decision for 2025 on Wednesday, with the CME Group indicating an approximately 85–90% chance of.

GPT 5.2 GPT 5.2 was released today and is an iterative upgrade to GPT 5.1. OpenAI reports that enterprise users save 40 to 60 minutes per day, and heavy.

XRP on Solana. Wrapped.

Wrapped. Hex Trust says it will issue and custody "Wrapped XRP (wXRP)", a 1:1-backed representation of native XRP, using LayerZero's OFT.

Ripple receives conditional OCC approval.

On December 12, 2025, the U.S. Office of the Comptroller of the Currency (OCC) conditionally approved Ripple's.

Wrapped assets and why they exist

Wrapped assets and why they exist Wrapped assets were introduced to move value between blockchains without selling the underlying asset. Early examples.

Week 18December 2025

Bitcoin drops over 7%.

Bitcoin opened December with a drop of more than seven percent. The decline came from selling across top tokens, forced liquidations.

Exchange security remains exposed.

Chainalysis reported a recent breach where attackers drained approximately $35 million in ~15 minutes by accessing private.

Memory supply is under strain.

RAM prices have skyrocketed because running and training AI models require far more memory than traditional computing.

The scale of modern compute.

A PlayStation 5 delivers about 10 teraflops (TFLOPS) of performance, which was top-of-the-line in terms of console gaming only a.

PC prices continue to climb.

Manufacturers are increasing the prices of Windows-based computers due to rising component costs. Dell and Lenovo have already.

Week 15November 2025

Coinbase launched a new token platform that allows verified U.S. users to participate directly in early token distributions. For years, this.

Pro-crypto Jurisdiction.

Coinbase plans to leave Delaware and reincorporate in Texas, based on the state's pro-business environment and strong support for.

The first U.S. spot XRP ETF.

The first U.S. spot XRP ETF. The first XRP ETF in the United States started trading today, giving institutional investors their first opportunity to access.

Bitcoin dropped into the mid-$95,000 range today

Bitcoin dropped into the mid-$95,000 range today, hitting its lowest level in months, with over $1 billion in leveraged positions wiped out as the market.

Frontier models advance.

OpenAI released GPT-5.1 this week, improving multi-step reasoning, planning, and code generation across ChatGPT and its developer.

AI x Cybercrime

AI x Cybercrime Anthropic disclosed a large cyber-espionage campaign that used its tool Claude Code to target ~30 tech, finance, chemical, and government.

Week 13October 2025

People are the weak spot

People are the weak spot Crypto losses in 2025 are already over $3B, and most come from social attacks: Phishing emails, fake support chats, impostors asking.

Institutional rails are being rebuilt

Coinbase × Citi Coinbase and Citigroup announced a partnership to expand digital-asset payment capabilities for global clients. The goal is to make.

OpenAI's restructuring, explained

OpenAI's restructuring, explained OpenAI completed its restructuring, which turned the non-profit into a foundation that now holds equity in a new for-profit.

Encryption meets compliance

Apple expands end-to-end encryption for enterprises Apple extended end-to-end encryption to managed business accounts under Apple Business Manager. It's one.

The roadmap to post-quantum security.

CISA and NIST published joint guidance for migrating to post-quantum cryptography by 2030. Quantum research has.

Azure services interrupted.

Microsoft Azure experienced a global outage this week after an infrastructure change disrupted its Azure Front Door (AFD), which.

The second cut.

The second rate cut of the year resulted in another 25 basis point cut. The move came during a heavy earnings week for tech and financial.

Prediction becomes product.

During Coinbase's earnings call, Brian Armstrong mentioned Polymarket, the crypto-based prediction platform that's become a.

Week 12October 2025

AWS US-EAST-1 Outage Disrupts Major Internet Services

A major AWS incident in its US-EAST-1 region, located in Virginia, caused widespread disruptions across the internet today. The outage impacted popular.

Ripple-Backed Evernorth Plans Nasdaq Listing for XRP Treasury

Evernorth Holdings, backed by Ripple, plans to go public on the Nasdaq and merge with a special purpose acquisition company (SPAC) to raise over $1 billion.

NuGet Supply Chain Attack Targets Ethereum Wallets

NuGet Supply Chain Attack Targets Ethereum Wallets A malicious package impersonating the popular Nethereum Ethereum library was discovered on NuGet, the .NET.

A Payment Protocol for the Agentic Web

A Payment Protocol for the Agentic Web https://docs.cdp.coinbase.com/x402/welcome This new capability immediately raises questions. How do we stop spam and.

Ripple Prime and the Institutional Infrastructure Play

Ripple Prime and the Institutional Infrastructure Play Ripple closed its $1.25 billion acquisition of Hidden Road this week, rebranding it as Ripple Prime.

Week 11October 2025

Apple's Private Cloud Compute and Google's Confidential Space

Apple's Private Cloud Compute and Google's Confidential Space isolate workloads and keep data encrypted while processing, so the cloud provider cannot look.

Coinbase invests in CoinDCX.

Reuters reports that Coinbase has invested in CoinDCX at a $2.45 billion valuation. The deal expands Coinbase's influence in.

Laos will cut power to crypto miners by early 2026

Laos will cut power to crypto miners by early 2026 Reuters reports that Laos plans to stop supplying electricity to crypto miners and redirect that power to.

Smaller models. Bigger reach.

Bigger reach. Anthropic released a new version of its small model, Haiku 4.5. The claim is that it performs on par with Sonnet 4, which was.

Spyware and Privacy.

A U.S. court ordered NSO Group, a surveillance technology firm, to stop using its spyware against WhatsApp users. The case centers on.

Quantum and the Future of Encryption

Quantum and the Future of Encryption Earlier this year, Samsung started testing quantum-safe encryption within Knox Vault, bringing new cryptography from.

Week 10October 2025

OpenAI signed a multi-year chip deal with AMD

It includes an option for OpenAI to buy up to 10% of AMD and targets up to 6 GW of AI compute, with the first.

NHIs, Non-human identitys.

As agents become part of standard workflows, identity has to move past just people. Every API, model, and bot that acts on.

Wallet-as-a-Service.

Coinbase offers Wallet-as-a-Service, an API that lets companies embed crypto wallets without managing seed phrases. It's a custodial.

SciPHR started entirely on an on-premise infrastructure

It worked for early testing, we could encrypt wallet seeds, handle signing operations, and validate.

Banks explore G7-pegged Stablecoins

Banks explore G7-pegged Stablecoins Ten major banks, including Citi, Goldman Sachs and UBS, are exploring stablecoins backed 1:1 by G7 currencies. Today.

Week 9September 2025

Modern-Day Password Managers

Password managers are becoming full credential hubs in 2025.

Coding agents. Competition at work.

Competition at work. Anthropic released Claude Sonnet 4.5 this week, claiming that agents can run ~30 hours straight. In their demo, they.

David Schwartz steps back.

Ripple's longtime CTO, David Schwartz, announced he's stepping down after over a decade, though he'll stay on the Board of.

MPTs live on the XRP Ledger.

Multi-Purpose Tokens are now live on XRPL as of October 1st, 2025. You can issue a token and configure it accordingly: How many.

Unity Android flaw flagged.

A bug in Unity's Android build process could let attackers tamper with game installs and skim sensitive data, including keys from.

What do Government Shutdowns really mean?

The U.S. government officially shut down on October 1, 2025, after Congress failed to pass funding. Historically.

New highs. Familiar questions.

Familiar questions. Bitcoin hit a record this week, but the conversation feels different. Where is the crowd? In 2021, highs were driven by.

Week 8September 2025

Reuters says China's securities regulator asked several mainland brokerages to pause real-world asset tokenization

Reuters says China's securities regulator asked several mainland brokerages to pause real-world asset tokenization work in Hong Kong while it reviews risks.

Morgan Stanley will let E*Trade clients trade Bitcoin, Ether, and Solana

Morgan Stanley will let E*Trade clients trade Bitcoin, Ether, and Solana in the first half of next year, using Zero Hash for the infrastructure. Zero Hash is.

XRPL: Credentials and Deep Freeze.

XRPL introduced two features via amendments: Credentials and Deep Freeze. Both target enterprise use where compliance and.

Options and ETFs. Timed moves in crypto.

Timed moves in crypto. In traditional markets, scheduled events trigger activity at specific times. Options have set expiration dates.

Kraken. Coinbase. Ripple.

Coinbase. Ripple. Kraken is in talks to raise new capital around $20B. It remains one of the largest private U.S. exchanges, scaling for its next.

Funding. Stakes. Valuations.

Stakes. Valuations. Tether is (also) reported to be in talks with investors like SoftBank and ARK to raise $15–20B for about 3% of the company.

Week 7Medium Form Updates - Daily Current Events

Due Process Returns to Crypto

For years, we lived under regulation by enforcement. Ripple was sued in 2020, Coinbase in 2023, and Kraken's U.S. staking shut down in 2023. Teams tried to.

Gemini Earn Nears Closure

Gemini is a U.S. crypto exchange founded by Cameron and Tyler Winklevoss. In 2021, it launched Earn, where customers lent crypto to Genesis for yield.

Regulated hedging expands past BTC and ETH

CME plans to list options on Solana and XRP futures on October 13, pending review. Both futures are already trading this year, SOL since March and XRP since.

Fed Cuts Rates 0.25% to 4.00-4.25%, First Since December

The Fed lowered rates by 0.25% to 4.00–4.25%, its first cut since December. Powell said there wasn't broad support for a larger move. The projections show.

DBS, Franklin Templeton, and Ripple plug cash and yield into XRPL

DBS signed an agreement with Franklin Templeton and Ripple. DBS will list Franklin Templeton's tokenized U.S. money-market fund (sgBENJI) next to Ripple's.

Gold at highs. Stocks at highs. Rates down.

Gold set brand new records this week. The S&P and Nas closed at new all-time highs, and at the same time, the Fed cut rates. It's unusual to see all three.

XRP Seoul 2025 at COEX Auditorium

Today in Seoul, XRPL Korea hosts XRP Seoul 2025 at the COEX Auditorium. It's a one-day XRPL conference with a crowd in the thousands, pulling in teams and.

Week 6Medium Form Updates/Content Adjustment

Stablecoins are now a compliance product.

Payment stablecoins in the U.S. now look like cash. Full reserve, audited, and no interest paid by issuers. That is what the GENIUS Act requires. There is a.

XRPL 2.5.0 is a powerful upgrade for regulated DeFi.

This version introduced TokenEscrow, Batch, Permissioned DEX, AMM v1.3, and more. Pair these features with DIDs (decentralized identitifiers), and you can.

Tokenized Treasuries, explained like a tool you can use

Tokenized Treasuries are digital receipts for a fund of T-bills and cash that your app can move and automate. Add dollars with the provider and receive the.

Crypto Twitter Has Felt Like the Wild West for Listings

Crypto Twitter has felt like the Wild West for listings: Bots, fake countdowns, and recycled "alpha." Coinbase's move of all listing updates to.

npm Maintainer Phished, 18 Packages Compromised

This week, a maintainer on npm (the package hub for JavaScript) was tricked by a fake two-factor reset. Attackers took the account and pushed malicious.

Enterprise-Level Analytics on XRPL

Chainalysis now automatically tracks 260,000+ XRPL tokens, not only XRP. That includes issued currencies, XLS-20 NFTs, and the new multi-purpose tokens, with.

Week 5Infra Decisions and Current Events

Federal Procurement Quietly Shifts Toward Blockchain

Federal Procurement Quietly Shifts Toward Blockchain "The Department [of Commerce] published an official hash of its quarterly GDP data release for 2025.".

IPO Settlement Moves On-Chain

IPO Settlement Moves On-Chain Bullish received $1.15 billion in IPO proceeds entirely as stablecoins. Jefferies coordinated the conversion and delivery. The.

Week 4Current Events

Friday, August 22, 2025: Jerome Powell delivered his Jackson Hole address

"The shifting balance of risks may warrant adjusting our policy stance," he said.

Why SBI Group's Chainlink Partnership Matters

Why SBI Group's Chainlink Partnership Matters SBI Group, Japan's largest financial conglomerate with $200 billion in assets, announced a strategic.

Week 3XRPL's Real Advantage

How XRPL Achieved Deterministic Consensus Without Mining

How XRPL Achieved Deterministic Consensus Without Mining The Byzantine Generals Problem (1982): Several generals surround a city, each with their own.

Week 2Enterprise Blockchain Reality - "Complexity kills adoption"

Integration ≠ Interoperability

Most blockchains operate in complete isolation. They can't.

Enterprise IT spent 20 years teaching employees that forgotten passwords aren't a disaster.

Then blockchain arrived and said: "Lose this 24-word phrase, lose.

Enterprise lawyers spent decades perfecting contracts that courts actually enforce.

Then blockchain arrived with "smart contracts" that exist in legal limbo.

SciPHR has filed a provisional patent application with the United States Patent and Trademark Office.

Our patent covers a novel decentralized key management.

Week 1Hidden Costs of Self-Custody

We stopped putting money in mattresses 50 years ago

Now, millions of users write private keys in locked Apple Notes and call it secure. The crypto community.

Quick math lesson

Quick math lesson: $2.2B stolen from crypto platforms in 2024. 43% of it? Private key compromises. That's nearly $1 billion gone because platforms couldn't.

A $2.92 billion industry just described its own failure

A $2.92 billion industry just described its own failure in one sentence: "...providers should focus on modular service offerings that cater to diverse.

The $240 Billion Elephant in the Room

Twenty percent of all Bitcoin is gone. Not stolen. Not hacked. Just... gone. We built financial freedom and locked ourselves out of it. James Howells has.

The $9.3B elephant in the room

Everyone talks about crypto adoption. Nobody talks about the $9.3B elephant in the room The 2024 numbers: $9.3B lost to crypto scams 43.8% from private key.

Network: TESTNET ·Notes ·_

© 2026 SciPHR LLC · Patent Pending · USPTO 63/860,921 Contact Learn Docs