The Commoner

Monday, October 19, 2026

Sup, freaks.

Black Monday never showed up, but this week's Ten31 Timestamp with John Arnold found plenty to worry about under the surface.

WHAT TO EXPECT IN THIS NEWSLETTER

• John Arnold and I break down why Black Monday never came, and why AI, bond volatility and diesel all run into the same wall.
• OpenCode says a breach tied to a distillation attack may have exposed AI provider keys stored in its hosted Console.
• TFTC's MCP server lets any agent search The Commoner, our podcast transcripts and live ETF and Treasury data, no key required.
• Claude traced the NIST curve seeds to a timestamp-seeded random number generator, and MSCI will decide which bitcoin companies count as real businesses.
• Lopp's wrench attack archive passes 700, and Bisq 2 ships a required security update.

Marty's Bent

Black Monday Never Showed Up

If you spent any time on X this weekend, you were promised a Black Monday. Charts were flying around Saturday night showing a 50 basis point wick on the S&P on Hyperliquid, and the doomers were sure it was a preview of the carnage that would hit when the opening bell rang this morning. It never showed up. By the time John Arnold and I sat down to record this week's Ten31 Timestamp, the NASDAQ was up 1.4%, the S&P was up 67 basis points and the VIX was falling. I was not, in fact, entertained.

That doesn't mean everything is fine. It means the weekend scare was noise and the signal is somewhere else. John and I spent the episode digging through the data underneath the surface, and the picture that emerges is a system running into real limits on several fronts at once. Partly cloudy, as we titled it.

Start with AI, because as John put it, this is where all of the themes we talk about meet most keenly. Real resource demand, running it hot, reshoring, geopolitical competition, the government's ability to fund itself and, through that, bitcoin. All roads run through it right now. Headlines last week had Anthropic's third quarter revenue set to hit $16.8 billion ahead of its IPO. A massive number, but growing slower than previous quarters, and as John pointed out, the one thing you can't do in front of public market investors is decelerate. At the same time, Anthropic says its new defenses have cut the data harvested by distillers by around 90 to 99%. You can argue that clears a headwind and growth picks back up. You can also ask how much of that revenue was distillers in the first place. Either way, the irony is thick. The whole business was built on a massive distillation of everything humans have ever written down, and now the labs want to call it theft when somebody does it to them. The OpenCode breach in the Signals below shows you where that fight is headed.

The market noticed. The neoclouds, the inference providers that sprung up to fill demand, took a beating over the last couple of weeks, and credit default swaps on CoreWeave and others blew out. John is wary of reading too much into short-term CDS moves for names that only recently started getting quoted, but you can't ignore it either. One camp says demand for intelligence is infinite and none of this matters. The other says that may be true, but you still have to marshal the atoms, the power and the financing to meet it. Last week those two camps ran into a wall.

Which brings us to the cost of capital. Inflation came in hotter than expected, driven in part by the wars in Iran and Ukraine pushing up oil, the input to everything. Long-end yields spiked before a sharp intraday reversal. And then, right on cue, all three of the major Fed officials who spoke last week sang from the same hymnal. Expectations are well anchored. No urgency on rates. So much for moving away from forward guidance. As soon as things get hairy, the pro-market jawboning comes right back. Is that really surprising though?

The piece I'd urge everyone to read is Harley Bassman's latest at Convexity Maven. Bassman created the MOVE index, so when he talks bond volatility, you listen. His argument, as John walked through it, is that after nearly two decades of rates well below 5%, the cheapest-to-deliver bond in Treasury futures has carried a duration of roughly 11. As rates rip higher, that could shift toward something closer to 17.5. Portfolio managers end up holding more duration than they want, so they mechanically sell, which pushes yields higher, which forces more selling, and the basis trade starts to unwind on top of it. Bassman calls out 6% on the 20-year as the nightmare scenario. Not coincidentally, a Citi note recently floated that Bessent could cut or even eliminate 20-year issuance. The Treasury has tools to manage this. But it's another example of fixing the plane while it's flying, and it puts them between a rock and a hard place. If Bessent comes out and says "we see it, here's the fix," the market assumes something is broken. As John said, it's Fight Club. The first rule is you don't talk about it. Watch the buyback plans and issuance tweaks, not the press conferences.

Then there's the thorn in this administration's side: diesel. Headlines last week had the diesel squeeze lasting well into 2027, and as John noted, attacks around the Gulf are widening, up to and including a direct strike on Aramco's headquarters. Yet the chart John pulled shows U.S. demand for oil products sitting near a five-year high. No demand destruction yet, and I'm not sure we can afford any while we're trying to reindustrialize. That's why Trump was on Truth Social this morning talking up a Russia-Ukraine peace deal, why the Graham Act sanctions were applied the way they were two weeks after passage and why Canada's Mark Carney is promising to maximize diesel shipments south. A dozen little fires being managed at once, during the first major industrial growth impulse the U.S. has seen in more than 20 years, colliding with a historic disruption to global energy infrastructure.

Iran sits on the other side of that game of chicken. Javier Blas's chart of the day shows Iranian GDP approaching -10% this year, the worst since 1985. The blockade is biting. Whether it bites hard enough to bring Tehran to the table is the question.

China's exports surged 36% in September, and some people took a victory lap over the supposed failure of Liberation Day. Look closer. Robin Brooks's data shows Chinese exports to the U.S. still well below trend while shipments flood just about every other market. That's exactly the Michael Pettis view. A model built on industrial production and aggressive exports has to dump its overproduction somewhere, and it's being funded with more debt while more Chinese industrial firms lose money than five years ago. That's not a call that China collapses tomorrow. It's not strength, either.

We closed on Jim Himes, the Democratic ranking member of the House Intelligence Committee, telling a forum in Warsaw that Europe needs to get its economies and its militaries in order. Pull the text out and it reads like Trump or Bessent. Plenty of capital allocators still believe all of this reverses the moment Democrats take back power. John doesn't buy it, and neither do I. Many of Trump's first-term China policies survived Biden, and some export controls actually got tighter. This is structural.

So what do you do with all of that? Every one of these threads ends in the same place. A government that needs cheap energy, cheap capital and a cooperative bond market to fund itself and an AI build-out at the same time, with fewer and fewer ways to deliver all three without debasing the currency. When the plumbing gets stressed, the answer is always more jawboning, more liquidity and more fixes on the margin. Don't believe me? Look at the Fed last week. Contrast that with bitcoin, a system that doesn't need anyone to fix the plane mid-flight. No Treasury secretary managing the 20-year. No Fed governors keeping expectations anchored. It just keeps producing blocks. That's why it sits at the end of all of these roads.

Listen to the full episode here, and subscribe to John's weekly Timestamp at ten31timestamp.com. Be aware, freaks.

SIGNAL

OpenCode breach: your API key is a bearer instrument

OpenCode, the open-source coding agent, disclosed a breach Saturday "related to a large scale distillation attack" that hit 1.4% of the people using its hosted Console, the ones who had linked their own OpenAI, Anthropic and Google accounts. Per the notice, as reported by Cyber Security News, someone got into a legacy system OpenCode was already preparing to shut down, and the provider keys stored there may have been exposed. OpenCode hasn't said how many keys were taken or used. If you got the email, revoke those keys at the provider itself. Per Noma Security, deleting them from the Console doesn't invalidate them. Then check your bills.

An API key is a bearer instrument, a private key with a credit line attached. And it's not only people hunting them. OpenAI documented an internal model that was never given a funded wallet, so it derived keys from public recovery phrases, found one holding test funds and spent from it without telling anyone. Cap every key, keep keys local and hold your own.

Plug your agent into TFTC, no key required

Speaking of keys, here's a connection that doesn't need one. TFTC runs a free MCP server at mcp.tftc.io/mcp. Add it to Claude, Cursor, VS Code, Claude Code, Codex, Gemini CLI, Hermes or any other app that speaks MCP, and your agent can search The Commoner, TFTC podcast interviews and their transcripts, and pull live spot ETF flows and Treasury auction data. Every answer links back to the TFTC page it came from. ChatGPT users get their own address, mcp.tftc.io/chatgpt/mcp.

There's no sign-in, no API key and nothing to leak. It's read-only, so it can't place trades, send messages or reach member content. Setup instructions for every app are at tftc.io/ai. If you run an agent, paste the prompt on that page and it will install the server itself and schedule a brief for 8 a.m. every weekday. Then ask it what Luke Gromen has said about Treasuries, or what ETF flows did last week.

Claude solves the NIST curve mystery, and it was timestamps

For 26 years cryptographers have wondered where the NSA got the "seeds" behind NIST's P-256 and its sibling curves. They were handed over with no explanation, which left plenty of room to suspect a backdoor. The best story going was that the late NSA mathematician Jerry Solinas hashed a joke phrase like "Give Bob and Jerry a raise." Anthropic says an internal research model cracked it in under half an hour. The seeds weren't hashes of anything. They were output from the old C library random number generator lrand48, seeded with a Unix timestamp. P-256 took 1,842 iterations.

Anthropic is clear that "this is not a cryptographic break, new attack, or weakness in the ECDSA curves," and that it makes a backdoor much less plausible. Bitcoin never needed the explanation. Satoshi picked secp256k1, a Koblitz curve whose parameters don't come from an unexplained seed, when almost everyone else was using the NIST curves. Good choice then, good choice now. And note what kind of machine just cleared up a 26-year-old mystery in 30 minutes.

MSCI now decides whether a bitcoin company is a real company

MSCI finalized a rule late Thursday that makes "non-operating companies" ineligible for its global indexes. Companies get screened on their core operating assets and are flagged if they fail four of five financial ratios. Current constituents only get removed if they fail in each of the two most recent annual periods. The final list comes out November 11 and takes effect at the close on November 30, and MSCI is ending the interim freeze it put on digital asset treasury companies last year.

MSCI's release doesn't name anybody, and nobody should say Strategy is out yet. But the market had its read. MSTR closed Friday at $136.83, down 9.6% from Thursday. A handful of index committees deciding what counts as a real business is exactly the kind of gatekeeping bitcoin was built to route around. Whether or not the passive money stays, the bitcoin on the balance sheet doesn't care which index you're in.

Lopp's wrench attack archive passes 700 after an AI-assisted sweep

Jameson Lopp's archive of physical attacks on bitcoin holders just passed 700 documented incidents, more than doubling after researcher Pizza Bitcoiner used AI-assisted searches through local-language news, court records and police reports to surface 375 cases that had never made it into the English-language record. Kidnappings, home invasions, violent robberies and extortion, going back to 2014.

The threat was undercounted for a decade because nobody was reading the local papers in Brazil, France or Southeast Asia. The same tools now finding these cases can be pointed at leaked customer databases just as easily. Every KYC database that leaks is a target list. Keep your holdings private, use multisig so no single person can be forced to hand over everything, and stop telling people how much bitcoin you have.

⚡ FREEDOM TECH CORNER

DATA SNAPSHOT

Spot price, block height and hashrate estimate: October 19, 2026, 5:13 p.m. ET. Bitcoin Lab daily series: October 18, 2026. U.S. spot ETF flows: October 16, 2026.

Sources: Kraken spot quote, mempool.space block height and hashrate, Bitcoin Lab daily metrics, and TFTC ETF flows. Daily metrics use the provider’s October 18 observation, not live intraday estimates.

Talk tomorrow, freaks.

Marty Bent · TFTC · Nostr

YouTube

Podcast