🔎 Research Digest — 2026-08-03

🎯 Today's Priority

Title: Coldcard seed-generation flaw escalates into active-loss event

Why it matters to Casper: The operational lesson is key-generation provenance and migration discipline, not just patch status.

Signal level: High

Action: Save

Source: https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/

Title: OpenAI reframes agent deployment around outcome economics

Why it matters to Casper: Better pricing and stronger emphasis on routing/context design make practical agent experiments more affordable and more operationally grounded.

Signal level: Medium

Action: Read

Source: https://openai.com/index/building-abundant-intelligence

Title: Adform incident turns shared JavaScript into a live supply-chain reminder

Why it matters to Casper: If any Casper-managed or partner-facing properties depend on third-party scripts, vendor-side compromise can still hit end users.

Signal level: High

Action: Ask Sam

Source: https://site.adform.com/resources/newsroom/security-incident-company-update/

💹 Markets & Macro

• Fact: MSFT closed at USD 464.72 (+3.02%), NVDA at USD 200.75 (+2.93%), and SPY at USD 747.03 (+0.72%) on 2026-07-31. Interpretation: tech risk appetite stayed constructive into the weekend.
• Fact: MGM closed at USD 44.57 (-2.39%) and CZR at USD 29.75 (+0.47%); BTC was at USD 63074.64 (+0.50%) and ETH at USD 1862.52 (+1.04%) on the 2026-08-03 capture. Interpretation: gaming equities remain mixed while crypto has stabilized after the prior down move.
• Source note: local market_watch.py helper using yfinance/Yahoo Finance. Research-grade daily context, not trading-grade realtime data.

🤖 AI & Agents

• Fact: OpenAI says GPT-5.6 Luna pricing fell 80%, Terra 20%, Sol Fast mode can run up to 2.5x faster at 2x price, and Codex-based agentic work now accounts for 99.8% of weekly output tokens across the company. Interpretation: practical agent rollouts will increasingly be won on routing, context management, and total workflow cost.
• Fact: OpenAI also published ten new results in mathematics and theoretical computer science from its internal Astra model. Interpretation: this is strategically important, but lower immediate operational value for Casper than the pricing and workflow signal.

☁️ Cloud & 🛠️ DevOps

• Fact: The latest tracked scan found no new items from Microsoft Azure Blog or AWS News Blog. Azure's latest relevant post in the feed remains the July 27 database reliability / AI-readiness item. Interpretation: this is a low-feature-churn day; the practical work is ops hygiene, not reacting to new cloud announcements.
• Fact: The Adform incident required cache-clearing guidance even after the vendor removed the malicious code. Interpretation: cache invalidation and third-party asset governance remain real DevOps controls, not housekeeping.

🔐 Cybersecurity

• Fact: Coinkite says patched firmware does not repair existing vulnerable Coldcard seeds; affected users need seed migration. Block says the flaw came from a deterministic fallback PRNG path, and The Hacker News linked it to 1,082.65 BTC swept on July 30, with later suspected losses rising to 1,367.05 BTC across 4,585 addresses. Interpretation: high-signal reminder that key-generation bugs become catastrophic only after value accumulates.
• Fact: Adform says malicious code on 27 July 2026 replaced copied BTC, ETH, and Tron wallet addresses. Kevin Beaumont reported the shared trackpoint-async.js resource also rewrote form fields and beaconed to 84.32.102.230:7744. Interpretation: third-party JavaScript governance is now a supply-chain control, not a frontend nicety.

Saved Knowledge / LLM Wiki Candidates

• Saved raw/articles/openai-building-abundant-intelligence-2026-07-31.md
• Saved raw/articles/coldcard-rng-seed-generation-advisory-2026-08-01.md
• Saved raw/articles/adform-security-incident-2026-07-31.md
• Saved raw/articles/kalshi-new-york-lawsuit-2026-07-31.md
• Saved raw/articles/market-snapshot-2026-08-03.md
• Updated concepts/ai-agents.md, concepts/cybersecurity-watch.md, concepts/casino-slots-technology.md, concepts/market-watch.md, and index.md

Follow-ups for Sam

• Check whether any Casper-managed or partner-facing sites load Adform or similarly injected third-party JavaScript; if yes, confirm vendor notice, cache invalidation, and monitoring.
• If Casper or close contacts use Coldcard, verify firmware and seed-generation timing; migrate if the seed was created on affected versions.
• Keep watching the Kalshi vs New York/CFTC line; it is becoming a useful proxy for how hard prediction markets keep pressing gaming economics.