Morning digest: October 25, 2026
Electrum, one of the oldest Bitcoin wallets, patched a flaw that thieves were already using to turn an ordinary fee bump into a payment to themselves. Two of the three “Senate” seats at X100 were bought with a flash loan and used to drain about $4.85 million, and Initia has named the bug behind Friday’s chain halt. Health leads with athletes: caffeine for early bouts and beetroot juice for late ones, flywheel lifting for jumps and cutting, and six breaths a minute for a quick heart-rate-variability lift. Locally, Virginia is studying two-way I-95 Express Lanes from Fairfax to Fredericksburg, and a Jersey cow named Jubilee won the NASCOW race at Frying Pan Farm Park.
Blockchain: Electrum’s fee-bump trap, X100’s bought Senate, Initia’s bug
Electrum patches an actively exploited fee-bump attack. Electrum is a light Bitcoin wallet, so it trusts the server it connects to for unconfirmed transactions. Malicious servers were hiding a payment the user had just broadcast and showing a fake replacement that paid an attacker address chosen to share the last four characters of the real one. If the user then bumped the fee (replace-by-fee), they signed a valid payment to the attacker. Electrum has two user reports, including one loss. Version 4.8.3, released Saturday, makes the wallet check signatures on unconfirmed transactions that spend its own coins. All earlier versions are affected, except for people who connect only to their own server. Upgrade through Electrum’s official channels and check outputs before signing (Electrum advisory; Bitcoin.com News).
X100 loses about $4.85M to a flash-loan governance takeover. The Ethereum project’s treasury was run by a three-seat “Senate” elected by token holdings. On Saturday attackers borrowed about 1.94M USDT from Aave in a flash loan (borrowed and repaid within one transaction), bought enough X tokens to win two seats, and immediately passed proposals moving treasury tokens into pools they controlled, then sold on Uniswap. Blockaid traced about $4.85M in USDT proceeds, and the X token fell more than 96%. The flaw was in the design, not the code: no voting snapshots, no minimum holding period and no execution delay (The Defiant; Bitcoin.com News).
Initia names the bug behind its halt; restart is days away. Initia’s first official account blames a flaw in MoveVM script caching that let the attacker credit itself unbacked WETH, iUSD and USDC without the tokens’ total supply changing. The attacker bridged out about $2.7M through LayerZero and Circle’s CCTP and swapped it into 1,135.52 ETH. The bridges themselves worked as designed: they released real assets on Ethereum against burns of tokens that should never have existed on Initia, which is why the LayerZero adapters for AUSD and ETH were largely emptied. Agora says AUSD was never deployed on Initia and remains fully backed. Initia expects a fix to be finished and audited “in a few days”; Kraken still has INIT deposits and withdrawals paused (Le Coin, citing Initia; TokenPost).
Tether lines up 15 mining firms behind its open-source mining kit. Tether’s Mining Development Kit (MDK) is a common interface for managing Bitcoin mining hardware and services from different vendors. Fifteen operators and manufacturers, including Bitmain, Bitdeer, Canaan, Foundry Digital and Block’s Proto, committed to building integrations. Version 0.11 shipped at the Plan ₿ Forum, and a stable 1.0 is targeted by year-end. These are commitments and a roadmap, not a deployed industry-wide system; if adopted, the kit would loosen vendor lock-in on mining firmware and dashboards (Tether).
Bitcoin briefly dips below $80K. Bitcoin fell to about $79.3K on Saturday, its lowest in over a month, after the WSJ reported US personnel evacuations across the Middle East over Iranian threats. About $436M of leveraged positions, mostly longs, were liquidated in four hours. It recovered to roughly $80.7K overnight, with ether near $2,350 (CoinDesk).
Health: tournament fuel, flywheels, slow breathing, the movement budget
The first four items come from athletes or trained groups. The rest are general-population cohorts and one small clinical-style trial.
Caffeine for early bouts, beetroot juice for late ones. In a randomized, double-blind crossover trial, 35 competitive judo athletes completed four simulated competition days of five bouts each, on beetroot juice, caffeine, both, or placebo. Caffeine improved fight-specific fitness, neuromuscular function and cognition in bouts 1–3 but faded by bout 5. Beetroot juice helped in bout 5, and the combination helped across the whole day. How to use it: for a multi-bout day, such as a tournament or a hard double session, take caffeine for the early efforts and add beetroot juice (dietary nitrate) for the late ones. Limits: the abstract gives no doses, timing or effect sizes, so check the full text before copying the protocol; one sport (European Journal of Sport Science).
Flywheel lifting beat regular lifting for jumps and cutting. A meta-analysis of 7 randomized trials in 119 basketball players found flywheel (eccentric-overload) training gave a moderate extra gain in jump height (g 0.65) and change-of-direction speed (g −0.57, faster) over traditional resistance training; the sprint advantage wasn’t significant. How to use it: swap part of your lower-body lifting for flywheel squats or lunges, alongside regular lifting rather than instead of it. This matches the Oct. 22 soccer split-squat trial. Limits: seven small trials and no typical dose given (Frontiers in Physiology).
Six breaths a minute lifted heart rate variability straight away, most in fast breathers. In 962 UK military men, about half with combat injuries, five minutes of slow-paced breathing at six breaths a minute raised every short-term HRV measure. Injury, fitness and activity level didn’t change the effect, but resting breathing rate did: in men who normally breathe 15 or more times a minute, RMSSD rose from about 15.6 to 21.9 ms, roughly 41%. How to use it: before sleep or after a stressful block, breathe in for 5 seconds and out for 5 seconds for 5 minutes. Limits: an immediate, within-session change, not proof of long-term benefit; men only (European Journal of Applied Physiology).
Masters runners: a slightly wider but normal aorta and healthier leg arteries. Forty-two recreational runners over 40, running at least 20 km a week for at least a year, had a wider ascending aorta than 27 sedentary peers (3.25 vs. 2.90 cm), but none reached 4.0 cm and all were within normal limits. Their ankle-brachial index, a marker of leg-artery health, was better (1.07 vs. 1.03), and heart function was preserved. The authors call it “modest, exercise-associated aortic remodelling rather than overt aortopathy.” How to use it: if an echo report ever shows a mildly wide aorta, mention your running history. Limits: small and cross-sectional, with no outcome data (European Journal of Applied Physiology).
General population: hit at least two of three movement targets. In 13,897 Spanish university graduates followed for about 14.5 years, meeting at least two of the 24-hour movement guidelines (150+ minutes a week of moderate-to-vigorous activity, 8 hours a day or less of sitting, 7–9 hours of sleep) went with about 63% lower risk of heart attack, stroke or cardiovascular death than meeting none. How to use it: treat activity, sitting and sleep as one daily budget. It fits yesterday’s finding that sitting is a separate target from exercise. Limits: observational and self-reported; under 1% met none, so the estimates are very imprecise (European Journal of Public Health).
General population: your walking cadence is a cheap vital sign. In 4,067 older UK adults (Whitehall II) followed for about 12 years, each standard-deviation step up in clinic walking speed went with 23% lower mortality, and in everyday walking cadence measured by a wrist accelerometer, about 17–18% lower. The watch-style measure predicted death about as well as the clinic test. How to use it: watch your steps per minute on walks; practicing brisk walking is a reasonable target, though the study treats pace as a marker, not a treatment. Limits: observational; mostly men (JAMA Network Open).
General population: fish benefits leveled off around 100 g a day. A dose-response meta-analysis of Japanese cohorts found the highest fish intake went with 6% lower all-cause and 15% lower cardiovascular mortality, with the benefit flattening beyond about 100 g a day, roughly one portion most days. Food fish isn’t the same question as the Oct. 23 null result for DHA capsules. Limits: low-certainty, observational evidence, and two authors work for a seafood company (European Journal of Clinical Nutrition).
Creatine with lifting: no sharper thinking, steadier sleep timing. In an exploratory trial of 51 perimenopausal women lifting twice a week for six weeks, creatine (5-day loading, then about 4.5 g a day) didn’t improve reaction time beyond lifting alone, but it raised prefrontal oxygenation during a thinking task and improved wearable-measured sleep consistency. Limits: small, short, a group unlike Alexey, and the senior author advises creatine companies (European Journal of Applied Physiology).
General and local
Two-way I-95 Express Lanes studied from Fairfax to Fredericksburg. VDOT and Transurban are studying bi-directional Express Lanes on a 45-mile stretch of I-95, replacing today’s reversible-only setup. If it goes ahead, construction would start in 2030–31 and take about five to six years. Supervisor Victor Angry called it “the gamechanger for OmniRide.” Funding is undetermined, though the aim is to avoid public money (Prince William Times).
Gunshots in Old Town Manassas; no one hurt. Manassas City Police responded Friday night to reports of gunshots near Church and Main streets. Officers recovered cartridge casings in front of Bull Run Unitarian Church, where a private gathering of about 150 to 200 people had been held, and one parked car was damaged (Potomac Local).
Iwo Jima statue suspect: bail fight Monday. A General District Court judge granted cashless bail to Miguel Alonso Maldonado Soriano, the Stafford man accused of taking a sledgehammer to the Iwo Jima statue near Quantico, then stayed the order after the commonwealth’s attorney objected. On Friday a retired circuit judge continued the bond appeal to Monday at 9:30 a.m. and ordered him held until then (Potomac Local).
Fed, GDP and Big Tech in one week. The Fed is expected to hold at 3.75%–4.00% on Wednesday at 2 p.m.; with no new dot plot, Chair Warsh’s press conference is the place to listen for December-hike signals, which markets price at roughly 80%. Thursday at 8:30 a.m. brings advance Q3 GDP, forecast near 3.0%–3.3%, and September PCE inflation, forecast at 3.6%–3.7%. Microsoft and Alphabet report Wednesday after the Fed, and Amazon on Thursday (Morningstar; U.S. Bank).
Briefly:
- Townhomes near Dulles: the Fairfax Planning Commission backed K. Hovnanian’s plan to turn about 15 acres of offices in the Sully Square area into nearly 300 townhomes; it goes next to the Board of Supervisors (FFXnow).
- House GOP report on Fairfax: an interim House Judiciary Committee staff report says the Fairfax Sheriff’s Office declined at least 1,670 ICE detainers from 2023 to 2025 and faults Commonwealth’s Attorney Steve Descano’s charging decisions; his office called it politically motivated (Fairfax County Times).
Lighter note: Jubilee wins NASCOW. Seven cows took to the “track,” a path around a corral, for the seventh annual NASCOW FundRACER at Frying Pan Farm Park near Herndon on Thursday night. A Jersey cow named Jubilee easily outpaced the field despite a detour with Rudolph to investigate spectators at a gate, and she tolerated her crown and sash for “a reluctant minute.” The real prize was alfalfa and spent grain from local breweries; the event raised nearly $8,700 in sponsorships for the farm (FFXnow).
Photo: Mary Stachyra Lopez/FFXnow, via FFXnow.
Russia: Domodedovo restricted overnight, drones over Voronezh
Moscow and Voronezh overnight. Domodedovo ran flights only “by coordination” from 23:52 Saturday until 05:15 Moscow time Sunday, and Vnukovo and Sheremetyevo still show dozens of delays and cancellations, so check flight status before traveling. Voronezh’s governor said 11 drones were destroyed over the region overnight, with preliminarily no injuries or damage (RIA Novosti; Airports.ru; RIA Novosti).
Bottom line
If you use Electrum, upgrade to 4.8.3 and don’t fee-bump on an older version. X100 shows how a governance design can be bought in one transaction, and Initia’s restart is still days away. In Health, pair caffeine with beetroot juice for long competition days, add flywheel work for jumps, and try six breaths a minute to wind down. Locally, two-way I-95 Express Lanes are a 2030s idea, the Fed and GDP set this week’s tone, and Jubilee is the reigning NASCOW champion.