The X-Factor Weekend Roundup | The Burden of Trust — November 9, 2026

[00:00:04] [SPEAKER_01] Welcome to the X-Factor Weekend Roundup. This is your host, Jamil Hasan, the Crypto Hipster. Today, we're going to talk about the burden of trust. Five stories, different countries, different institutions, different claims about how money ought to work.

[00:00:26] [SPEAKER_01] But one recurring question, who protects the system and who holds the protectors accountable? We're not grading political parties. We're not going to do that. We are not automatically cheering on regulators.

[00:00:48] [SPEAKER_01] And we're not giving crypto companies a pass just because they call themselves decentralized. We examine the evidence through my framework of lambs, which you can find in my book, The Lambs Lie Down.

[00:01:08] [SPEAKER_01] And that framework is simple. Trust, protection, consensus, and stewardship. And today's stories show why those four obligations have to apply to everybody.

[00:01:26] [SPEAKER_01] So the first story we're going to start with is the MXC and Canadian money exchange firms. Two distinct U.S. Treasury actions on November 6.

[00:01:50] [SPEAKER_01] They belong in one conversation, but they are not the same legal action. First, FinCEN moved to restrict certain transfers involving cryptocurrency exchange MEXC Global, citing approximately $16 billion in alleged illicit transactions over a five-year period.

[00:02:19] [SPEAKER_01] The allegations include roughly $1.5 billion linked to Russian sanctions, evasion, about $1 billion in direct transfers involving more than 40 Iranian exchanges, and about $22 million connected to Iran's central bank and the Islamic Revolutionary Guard Corps.

[00:02:50] [SPEAKER_01] The Treasury also described dealing involved sanctioned Russian exchange Garantex and its successor Grinex. These are Treasury's findings and allegations. They're not a substitute for independent adjudication of every underlying transaction.

[00:03:15] [SPEAKER_01] The mechanism matters because a FinCEN restriction on U.S. financial institutions processing specific transfers is not the same thing as a worldwide shutdown of an exchange. Nor does it automatically mean that every customer account is frozen.

[00:03:38] [SPEAKER_01] Now, the second action involved eight Canadian money service businesses in Ontario and in British Columbia. Treasury sanctioned them over alleged connections to Iranian financial flows, including the movement of money through digital assets.

[00:04:01] [SPEAKER_01] Treasury also linked some of those businesses to alleged laundering connected to Ryan Wedding. These sanctions carry different legal consequences from the MEXC transfer restriction, including restrictions on dealings involving blocked property and U.S. people, too.

[00:04:28] [SPEAKER_01] Now, both actions sit under Treasury's Operation Economic Outcast. Together, they show that the distinction between traditional money services and crypto platforms does not make illicit finance disappear. Trust. Trust. What did these businesses represent about compliance?

[00:04:58] [SPEAKER_01] And what evidence does Treasury offer to challenge those representations? From a protection standpoint, we got to look at do these actions meaningfully disrupt illicit networks? Or how are lawful customers protected from collateral damage?

[00:05:23] [SPEAKER_01] From a consensus perspective, when the U.S. acts against entities operating internationally, how are cross-border standards and jurisdictional boundaries negotiated? Or are we still the COP, the global COP, right?

[00:05:46] [SPEAKER_01] And from a stewardship perspective, does enforcement change outcomes or simply encourage the same flows to move through another intermediary? Now, I want to see the evidence of actual disruption. And not just the size of the number in the headline, although the headline size is pretty, it's petty attention grabbing, right?

[00:06:14] [SPEAKER_01] So $16 billion is a serious allegation. The real test is whether an enforcement response reduces harm or perhaps it increases harm, potential harm.

[00:06:32] [SPEAKER_01] So while regulators are focused on money moving through financial infrastructure, our next story will ask what happens when the infrastructure protects the money but exposes the person.

[00:06:56] [SPEAKER_01] Story two is Gnosis Pay, a data breach and the meaning of protection. Gnosis Pay disclosed unauthorized access affecting its legacy consumer card system.

[00:07:14] [SPEAKER_01] According to disclosures and reporting, exposed information included payment card details and sensitive personal information, potentially including wallet addresses. Now, that combination is important to look at because a card number can be replaced.

[00:07:38] [SPEAKER_01] A home address and an on-chain wallet identity combination may be harder to separate once it's linked. Gnosis Pay said customer funds were not affected. And the company described remediation measures, including replacing compromised credentials, introducing mandatory 3D secure replication, and retiring the affected legacy system.

[00:08:09] [SPEAKER_01] Those responses deserve examination, further examination. But funds unaffected does not mean customers unaffected. Now, I interviewed Deep Shah in 2025. Deep had been on the felonies team at Gnosis Pay. And when we spoke, he was leading the Gnosis app.

[00:08:38] [SPEAKER_01] At roughly 15 minutes into that conversation, he explained how Gnosis Pay connected a self-custodial on-chain wallet to Visa payment rails. His point was architectural. The customer retains custody of the assets until a card payment initiates the transfer through the issuing and payment infrastructure. He also described a broader ambition. Financial agency.

[00:09:09] [SPEAKER_01] Collective ownership. And the consumer experience that does not require people to surrender the benefits of crypto. I challenged him on what collective ownership actually means, including my own experience as a Celsius customer.

[00:09:28] [SPEAKER_01] We discussed the difficulty of building a profitable business while keeping the principles that made decentralized finance worth pursuing in the first place. Now, it's important to note that that was a 2025 discussion of product design and financial freedom. It was not a gap.

[00:09:57] [SPEAKER_01] I'm not assigning deep personal responsibility for a breach that happened afterwards, of course. But the interview itself exposes an important gap between two forms of protection. Safeguarding custody of assets and safeguarding the sensitive information that's attached to the person who owns them. I am launching this week the Kindle version of the conversation I had with you.

[00:10:22] [SPEAKER_01] And if you are interested in learning more listening to that initial conversation, it's available in the Crypto Hipster Podcast Archive on Spotify and YouTube. But let's look at the analysis through my lambs lens. From a trust perspective, I have a question. Is the disclosure clear about what was accessed? What is known and what remains uncertain?

[00:10:51] [SPEAKER_01] From a protection standpoint, what concrete support is available for the affected cardholders? And have they been told what to replace, monitor, or secure? From a consensus perspective, who establishes the security baseline when blockchain wallets meet card issuers, processors, and other regulated intermediaries?

[00:11:21] [SPEAKER_01] From a stewardship perspective, how does a company demonstrate accountability after remediation? Through independent review? Through customer communication? And measurable follow-through? How else? It's not an argument, you know, against self-custody. Self-custody is wonderful. Especially when you perhaps can't trust an intermediary.

[00:11:50] [SPEAKER_01] But it is an argument that self-custody alone is not a complete consumer protection framework. Now we're going to move from one country's obligation to a government's power to decide which digital financial instruments can operate at all.

[00:12:21] [SPEAKER_00] Story three.

[00:12:23] [SPEAKER_01] We go to Nigeria. Algorithmic stablecoins, licensing, and monetary sovereignty. We'll look at those. Nigeria's central bank issued new regulations for non-security virtual assets, effective November 5th. The rules prohibit algorithmic stablecoins that rely primarily on market mechanisms rather than eligible reserve assets to hold their peg.

[00:12:53] [SPEAKER_01] We also created licensing categories for Naira reference and foreign currency reference stablecoins. Their reported minimum paid up capital requirements are 10 billion Naira and 15 billion Naira, respectively. Now, issuers need authorization and approval for individual tokens.

[00:13:16] [SPEAKER_01] The rules address reserves, redemption, governance, anti-money laundering controls, sanction screening, transition monitoring, and other operational struggles and safeguards. Foreign currency issuers face local incorporation and licensing requirements. The framework also reaches certain activities directed at Nigerian users on materially affecting Nigeria's financial system.

[00:13:47] [SPEAKER_01] Existing operators have 180-day transitions, a period, to seek authorization subject to rules transitional requirements. And that is the reason regulators care about the algorithmic pegs.

[00:14:04] [SPEAKER_01] You've seen this before when certain cryptocurrencies lose their peg and what the potential Terraluna, for example, can happen. A token that depends on incentives and market conditions can unravel rapidly. We've seen it. When those incentives fail. The regulation itself is not costless.

[00:14:32] [SPEAKER_01] High capital thresholds can exclude smaller innovators. Local incorporation requirements can change the economics of cross-border access. Licensing can provide accountability. It can also concentrate power. The more capital you have, the more access you have. Is that sending the message of decentralization?

[00:15:02] [SPEAKER_01] I don't know. I don't mean, I don't think so, but hey. The question is not whether Nigeria should protect its financial system. Of course it should. The question is whether each restriction is proportionate, transparent, and responsive to evidence. From a lambs perspective, my questions are this.

[00:15:28] [SPEAKER_01] Can holders verify reserves, redemption rights, and the identity of the party standing behind the promise? That's trust. From a protections perspective, do the rules lower the likelihood of consumer losses or push some activity into less supervised channels? From a consensus perspective, who has a voice where regulators determine which digital money is permissible?

[00:15:59] [SPEAKER_01] And from a stewardship perspective, will the central bank measure the rules' effects on competition, inclusion remittances, and financial stability, and revise them when it's warranted to revise them? Financial freedom without safeguards can leave consumers exposed. And safeguards without proportionality can leave them excluded.

[00:16:28] [SPEAKER_01] Responsible governance has to hold both truths simultaneously. Our fourth story shifts from the people being regulated to someone entrusted with enforcing the law. Someone.

[00:16:52] [SPEAKER_01] In this case, the someone is former FBI agent Patrick Steven Yaroch, who pleads guilty. And I may not be saying his last name correctly, maybe Yaroch. But in any case, it's not merely an allegation that's a way to trial.

[00:17:13] [SPEAKER_01] On November 5, former FBI agent Patrick pleaded guilty to wire fraud and money laundering in connection with stealing cryptocurrency using access obtained through his position. According to the Justice Department, the scheme involved approximately 100 fraudulent transfers using credentials that were associated with 35 FBI investigations.

[00:17:42] [SPEAKER_01] I wonder if he made the most wanted list. The elicit proceeds total approximately $2 million. Actually, $2,474,380.66. Approximately.

[00:18:11] [SPEAKER_01] That's not an approximate number. Down to the penny is not approximate. That's exact. At least from my accounting financial reporting background, that sounds exact. But the Justice Department nevertheless says that thefts included cryptocurrency from wallets associated with investigative subjects, adversarial nation state actors, and at least one wallet created by the FBI for an operation.

[00:18:39] [SPEAKER_01] Even though if you think it's just to steal from those who are stealing, do two wrongs make a right? Yaroch explained that assets, he exchanged assets and moved the funds through further transactions to obscure their source. Sounds like laundry.

[00:19:04] [SPEAKER_01] Prosecutors said he also used some proceeds to pay personal debts and contemplated a life abroad. I would contemplate a life abroad, too. Or breaking the law. Luckily, I'm the author of blockchain ethics. That's a problem if I do that.

[00:19:27] [SPEAKER_01] The agreed statement of facts says his actions compromise investigations, including sources and methods. Sentency is scheduled for March 4, 2027, and a judge has yet to impose a sentence. Think about what all that means, right? The very credentials collected to investigate wrongdoing becomes tools for wrongdoing.

[00:19:53] [SPEAKER_01] This is a failure with consequences beyond the stolen dollar amount, of course. It reaches the integrity of evidence, the confidence of victims, and the security of investigations. And this is why accountability cannot stop at the boundary of a government's agency. Again, my phrase comes up that I penned back in 2018.

[00:20:21] [SPEAKER_01] That others claim to have penned since and did not. I was first. It's called blockchain ethics and etiquette. But, you know. Let's look through the Lambs lens now. Trust. Access to sensitive systems must be earned and continually checked. Not presumed safe because of a title.

[00:20:47] [SPEAKER_01] From a protection perspective, we can ask how are victims' investigative assets and national security operations protected against misuse by insiders. From a consensus perspective, what independent checks exist? When an agency holds both investigative authority and sensitive financial credentials. Not everybody does the right thing, do they?

[00:21:17] [SPEAKER_01] And so from a stewardship perspective, what controls failed? What changed afterward? And how will the public know those reforms work? If we demand accountability from exchanges and payment firms, we must demand at least as much from institutions with the power to seize assets.

[00:21:43] [SPEAKER_01] And we must compel cooperation. For our fifth and final story, we're going to turn to a development that is not a scandal. Not a crime.

[00:22:00] [SPEAKER_00] Something actually positive. Who would have thunk?

[00:22:10] [SPEAKER_01] It's about the next layer of financial engineering and decentralized lending. What does that mean? Aave Labs acquires Avon team and technology. Okay. Very different. Right? On November 6th, Aave Labs announced that it had acquired the team and technology behind Avon. A developer that's working on fixed rate and floating rate lending markets.

[00:22:40] [SPEAKER_01] Now, the deal itself includes Avon's lending protocols. It's on-chain order book. Domains, related assets, financial terms were not disclosed. Avon founder, Prince Sinha and Ayush Kowal are joining Aave Labs engineering.

[00:23:07] [SPEAKER_01] Omar El-Ashawa is joining its business development team. Good job. You guys have work. It's awesome. Avon Labs said the acquisition would support new lending capabilities, including fixed rate products. It's announcement cited more than $33 billion in deposits and $13 billion in active loans on the Aave network.

[00:23:36] [SPEAKER_01] Here's why that fixed rate element matters, right? A borrower who depends on a variable interest rate may see the cost of debt rise sharply, right? As liquidity markets change. A fixed rate can make borrowing costs more predictable for a specified term. That predictability may help households, businesses, institutions plan better. Financial planning.

[00:24:07] [SPEAKER_01] But fixed rates do not make risks vanish. They change who carries the risk and how it's priced. So, from a lands perspective, from a trust perspective, are borrowers told exactly what fixed means? A term, the fee is kind of like bonds, collateral rules, and conditions under which costs can change.

[00:24:37] [SPEAKER_01] From a protection perspective, who absorbs interest rate risk, liquidity stress, and liquidation losses when the markets move? And the markets always move. And most of the time, it's not in the direction that we want them to. We want markets to go up and up and up and up. They don't always do that.

[00:25:02] [SPEAKER_01] From a consensus perspective, how does Aave Labs, how do their product decisions interact with Aave Dow's governance over network parameters and the treasury?

[00:25:18] [SPEAKER_01] From a stewardship perspective, how will the technology be stress tested, documented, and judged by real outcomes rather than just adoption headlines? The acquisition itself is a meaningful sign. It's meaningful because DeFi is reaching for more familiar financial tools.

[00:25:45] [SPEAKER_01] But bringing familiar products on-chain is not enough. The test is whether their risk becomes clearer, fairer, and more manageable.

[00:25:59] [SPEAKER_00] From a crypto perspective, I hope it does.

[00:26:09] [SPEAKER_01] So let's bring those five stories together. Treasury is trying to disrupt illicit financial networks. Gnosis Pay is confronting the consequences of exposed customer information. Nigeria is drawing boundaries around digital money, while a former FBI agent has pleaded guilty to exploiting investigative access.

[00:26:35] [SPEAKER_01] And Aave Labs is building toward a more sophisticated lending market. They're not the same story. There are five different stories, right? But each one is a test of institutional responsibility. Trust requires evidence. Protection must extend to people, not just the balance sheet.

[00:27:03] [SPEAKER_01] Consensus requires legitimate, accountable decision-making. And stewardship means that owning the consequences are just as valid after the announcement is over as the information is in the announcement itself. No regulator, corporation, government agency, or decentralized protocol should be exempt from that standard.

[00:27:34] [SPEAKER_01] I'm Jamil Hasan, the Crypto Hipster. This has been the X Factor Weekend Roundup brought to you every Monday. Let me know your thoughts. I put a lot of questions out there. I'm interested in knowing your thoughts. Until next time, keep asking the questions that matter. And join me every Friday for the X Factor with the Crypto Hipster, where we talk about 10 articles throughout the week.

[00:28:03] [SPEAKER_01] And join me on Wednesdays for the prediction ledger, where we hold people who made Bitcoin predictions accountable for their predictions. Because people make decisions based on those decisions. And you can't just make an announcement and then walk away from it. So we look at that every Wednesday. Until next time, enjoy the next few days. Enjoy the week.

[00:28:34] [SPEAKER_01] Thanksgiving's in two weeks. I'm looking forward to it. I like turkey. Let's talk turkey. Send me your thoughts. Thanks for tuning in.