Pinned Tweet
Bitcoin products fail at the boundaries between contracts, payments, APIs & production data.
I help CTOs scope, ship & rescue those systems with SetDev. Proof: merged Simplicity tools in BlockstreamResearch repos.
Building one? DM SCOPE with the blocker & target date.
Vaciaron casi todas las bóvedas de Arkadiko sin romper el código: una propuesta de gobernanza con título falso, 1 votante, 0 en contra y un contrato con permiso de acuñar
TVL -90% en un día. Auditar el contrato no basta, también hay que revisar quién aprueba qué
98% of the BTC in DeFi earns under 0.5% a year. the 8% headline is the exception, and it usually comes with a risk nobody puts on the landing page
A headline figure doesn't tell you much.
$15B of BTC in DeFi.
8% APY.
Its important to look at the underlying factors to get a clear picture.
For example, Bitcoin lending is the dominant use-case on chain. BTC is used as collateral to borrow stablecoins.
Although they technically earn yield, its peanuts, because the direction of lending is extremely one-sided.
@paretocredit does a great job in this piece highlighting how Bitcoin DeFI is used today and the major sources of real yield. Featuring some of our data.
Recommended reading.
En blockchain no hay contracargos. Mastercard lanzó Stablecoin Security: revisa fraude, sanciones y origen de los fondos desde que se inicia el pago hasta que se mueve on-chain. El control va antes de mover el dinero.
En qué punto de tu flujo decides si un pago sale?
1 out of 21 sounds small until it’s your BTC sitting in it
this is the homework most people skip before depositing
Of the 21 products reviewed on bitcoinyield.com
1 has suffered an exploit.
2 had exploits in products managed by the same team, but BTC in our reviewed project was unaffected.
1 had a bug found by a white-hat and fixed proactively.
Proper due diligence is both time-consuming and necessary before deploying capital.
BitcoinYield provides intelligence for the most important digital asset.
Get the latest analysis delivered to your inbox.
bitcoinyield.com/#newsletter
Vaciaron 1,404 wallets de Qubic en 104 minutos. No rompieron la red: el fix cambió Math.random() por crypto.getRandomValues() al generar semillas. Si el generador es predecible, la llave también.
Sabes con qué se generan las semillas en tu wallet?
El Senado tiene hoy en el pleno la Ley de Economía Digital, Hacienda decidirá qué sectores pasan a sólo pago digital
8 de cada 10 negocios cobran en efectivo, cuando se muevan, ese volumen cae en tu riel de cobro
Tu conciliación SPEI está lista?
29 days is the number nobody puts on the landing page
the exit terms should sit right next to the APY
Getting into a Bitcoin yield vault can take minutes. Getting out can take 29 days.
Allocators on our mailing list got a look at our most recent report, as well as the top yield movers this week.
Subscribe to get the Weekly BY Briefing: bitcoinyield.com/#newsletter
Stablecoin en pesos?
El cruce ya se liquida en dólares
Lo que decide la experiencia es la última milla: según Borderless, SPEI paga en una mediana de 3 min y completa 98.6%
La pregunta es dónde vive la conversión y quién se queda con el spread
For the group chats that already argue about trades all day
Now you can make money together, with receipts haha
Send it to yours
Mastercard y BVNK prometen "conversión en tiempo real" entre fiat y stablecoins. No publican spreads
Una tarjeta USDC en una terminal en México puede pasar por tres conversiones: emisor, red y terminal. ¿Quién fija cada tasa y cuándo?
Desde Octubre 13, @Bitso vende USDPT, la stablecoin de @WesternUnion, directo con pesos
Emite Anchorage. Corre en Solana. Bitso sólo intercambia. Sin seguro FDIC
Al 14-oct circulaban unos 17.8M tokens
El riel ya existe. La escala todavía no
¿Quién responde en cada capa?
Three failures, three different layers: entropy, customer data, supply chain
That's the case for multisig across vendors. One bad layer shouldn't be enough to lose the coins
ColdCard, Trezor, Ledger. $330M + sensitive data lost just in 2026...
For those asking if HWWs are still worth it? YES.
The frequency & ferocity of the exploits isn't unique to HWWs, crypto, or even finance; LLMs are simply a forcing function for new security standards.
The good news? The math is still intact & every company failed in different, but addressable ways.
The bad news? *Everything* around the math is significantly more vulnerable & we likely haven't seen the last or worst exploits.
Never doom, stay informed & protect your stack!
setpato.btc retweeted
Impersonator accounts are posing as official Zest Protocol handles.
The only official Zest Protocol accounts on X are @zestprotocol and @zest_cn. Don't trust, verify.
Si te pagan rendimiento sobre tu bitcoin, alguien lo está pagando
Un préstamo, un mercado o un incentivo que algún día se acaba
Antes de mirar el porcentaje, pregunta de dónde sale
setpato.btc retweeted
YIELD UPDATE: The @Starknet BTC Staking APR has risen over 6% in the past week.
We are unsure at this time what the source of the additional yield is.
Un equipo con implante puede pasar la verificación
Revisa el chip, no la placa
El caso Ledger en 42 segundos
Quién paga el rendimiento es la primera pregunta, casi nadie la hace
Para eso existe Bitcoin Yield
Understanding risk requires information.
So far, we've done a good job at bitcoinyield.com to help readers see through the marketing speak and understand who pays the yield, how sustainable it is, and where your playing your BTC into.
A big missing piece.
How risky is Bitcoin DeFi in the data?
Have any current top projects been hacked?
How did they handle it?
We are just beginning to scope out this data. This is an early look at some of the data. Not exhaustive yet.
If you want access to a complete Bitcoin DeFi exploit database, you can hit the last tweet in the thread below and get on the list when it's ready.














