Three Buddy Problem

A Security Conversations podcast

Author: Security Conversations

The Three Buddy Problem is a popular Security Conversations podcast that goes beyond industry talking points to discuss what others wont -- nation-state malware, attribution, cyberwar, ethics, privacy, and the messy realities of securing computers and corporate networks. Hosted by three veteran security pros -- journalist Ryan Naraine and malware paleontologists Costin Raiu and Juan Andres Guerrero-Saade -- the weekly show attracts a highly engaged audience of security researchers, corporate defenders, CISOs, and policymakers. Connect with Ryan on Twitter (Open DMs).
Be a guest on this podcast

Language: en-us

Genres: News, Tech News, Technology

Contact email: Get it

Feed URL: Get it

iTunes ID: Get it

Get all podcast data

Listen Now...

The Great Binance $6.34 Billion Crypto Heist
Friday, 30 October, 2026

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.) Three Buddy Problem - Episode 118: On the show this week, the buddies dig into the $6.34 billion Binance heist, the largest crypto hack ever, walking through its multi-chain laundering, the North Korea fingerprints, and whether offensive AI quietly helped pull it off. Plus, thoughts on Sam Altman's swipe at local hardware, the PHP2Shell "cannonball," why defenders keep hitting guardrails while GLM-5.3 happily does the work, a trojanized Claude Code extension, Apple's fresh spyware alerts, and Volt Typhoon's Silent Train. Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu. Timestamps: 0:00 Introductory banter 3:46 CTI training & the AI model stack 8:03 The $6.34B Binance hack: the largest crypto heist ever 12:40 Inside the multi-chain laundering 18:23 Sam Altman & the AI hardware crunch 20:44 Root cause: a compromised DevOps laptop 23:43 Did AI help pull it off? 31:22 Who actually loses six billion dollars? 44:00 Crypto as a financial instrument 51:04 Can it get bigger? Hardware-wallet implants 57:04 Attribution, "misalignment" & is Binance Chinese? 1:10:00 Cash, privacy & the Mt. Gox lesson 1:22:12 PHP2Shell: dodging the cannonball 1:30:52 AI for defense & the productization gap 2:09:32 GLM-5.3, the refusal trap & open weights 2:32:26 Apple spyware alerts & Silent Train