Plus: Texas gets official with its Bitcoin bags

GM. Don’t ask what’s in this juice. Just sip it and brace for the aftertaste.

🤠 Texas governor signs SBR bill into law.

🚨 New mobile malware discovered.

🍋 News drops: best KeepKey deals, Florida man loses $860K to a fake crypto training school + more

🍍 Market flavor today

Crypto Market Cap: $3.32T 1.47% (24H)
Name		Price	24H	7D
	Bitcoin BTC	$106,977.01	1.41%	2.43%
	Ethereum ETH	$2,407.05	-0.90%	-3.94%
	XRP XRP	$2.18	-0.28%	1.78%
	BNB BNB	$643.76	0.74%	0.62%
	Solana SOL	$143.97	-0.26%	-0.97%

A LOT has happened since we last spoke on Friday, so let’s catch up.

Over the weekend, Bitcoin briefly dropped below $100K after the US launched airstrikes on three Iranian nuclear sites. The markets got spooked (well, duh, all of us did).

But the dip didn’t last long. Iran fired back with a missile strike on the Al Udeid US airbase in Qatar - and turns out, it was more bark than bite. All the missiles were intercepted or landed harmlessly.

This kind of "symbolic" response gave markets hope that the situation might actually calm down. So risk assets, which had dipped on war fears, started to recover as traders priced in a lower chance of a prolonged or messy conflict.

Then on Monday, Donald Trump announced a ceasefire between Israel and Iran.

Now, the world’s still far from calm, but this is still one less fire to put out.

And markets will take any excuse to breathe a little easier.

On top of that, investors got a little extra comfort from Fed Governor Michelle Bowman, who said she’d support a rate cut at July’s Fed meeting, as long as inflation stays chill.

Which is also what Governor Christopher Waller said on Friday - so the market's starting to think July might actually be the moment the Fed starts easing up.

That said...

Fed Chair Jerome Powell gave his usual “we’ll see” routine when he testified before the House Financial Services Committee yesterday.

Yay, give us nothing! 🥰

However, he did say that the inflation data from this month and next will be key to deciding if rate cuts happen this year.

The next big clue comes Monday, when the PCE inflation report drops - the Fed’s fave way to track inflation. If it shows price growth cooling off, that could open the door for a rate cut in July.

We'll see, though.

🥝 Memecoin harvest

Do NOT show these charts to your economist friend unless you want a TED talk and tears 🫢

Data as of 07:20 AM EST.

Check out these memecoins and plenty more here.

🏎️ SBR state race update

You know that moment when you play a song for your friends, and they’re like “ehh... it’s okay, I guess?” - but a week later they’re humming it under their breath, and next thing you know it’s on their gym playlist?

Yeah. This I knew you'd come around feeling is undefeated.

And it's kind of how it feels watching US states slowly start understanding Bitcoin.

The newest state to officially hit play: Texas.

Governor Greg Abbott signed off on a bill to add Bitcoin to the state’s strategic reserves.

So now Texas joins Arizona and New Hampshire in the SBR club.

And who else is tapping their foot to the Bitcoin beat?

Well, a bunch of state Bitcoin reserve proposals have flopped.

But there are still a few holding on in the queue:

• Massachusetts;

• Michigan;

• Ohio;

• Rhode Island;

• And North Carolina.

No guarantees - but keep your headphones charged just in case.

😾 Bad cat

Pop quiz time: there's this thing called SparkKitty. Purely based on vibes, what do you think it is?

A) A cursed version of the Nyan Cat

B) The latest toy every iPad kid wants

C) A furry Twitch streamer

Got your guess?

... Too bad. It was a trick question. It's D) None of the above.

SparkKitty is actually a malware recently discovered by the cybersecurity firm Kaspersky.

And no, it’s not cute.

It hides inside fake or modified apps (like TikTok mods, casino games, or crypto apps), and it's been found on both Android and iOS.

On iPhones:

It hides inside fake versions of legit developer tools like AFNetworking or Alamofire - normally used to help apps connect to the internet. Attackers modify them to launch malware as soon as the app opens.

And to get around Apple’s App Store checks, they use something called an Enterprise profile - a system meant for companies to test apps on employee phones. It lets apps be installed directly, without Apple’s usual security reviews.

On Android, the malware shows up in two main ways:

👉 Some versions are fake or modified apps with malicious code written in Java or Kotlin;

👉 Others use a tool called Xposed, which lets the malware hide inside real apps and mess with what they do - without changing how they look.

Once installed, the malware:

• Pretends to be a support chat or similar feature, then asks for access to your photo gallery;

• Scans your photos for sensitive text like crypto seed phrases;

• Sends those photos (and device info) straight to the attackers’ command server.

Basically, if you've ever taken a screenshot of your crypto wallet recovery phrase... you'd be cooked.

And yeah, we’ve talked about stuff like this many times before. But until people stop getting scammed, we’re not shutting up.

So, here's how to protect yourself:

1/ Only download from official app stores

Stick to Google Play and the Apple App Store.

And even then, don’t let your guard down - always check reviews and verify the developer.

2/ Don’t keep sensitive info in your photo gallery

No screenshots of seed phrases. No private keys. No "temporary" backups.

3/ Deny gallery access unless it makes sense

If an app that has nothing to do with photos asks for gallery access - say no.

But above all:

If your phone is where you manage your crypto, then it’s your wallet.

And just like you wouldn't let a random stranger near your actual wallet, you shouldn't let some sketchy app do that either.

🍋 News drops

🛍️ Wallet shopping on a budget? We found the best KeepKey deals so you don’t overpay for cold storage.

🤨 The Sherlock Holmes of crypto, ZachXBT, is calling out Garden Finance, a DeFi project built on Bitcoin. He claims most of their recent revenue came from money launderers.

😬 A Florida man says he lost $860K after getting tricked by a fake crypto training center and exchange. He says it started when someone named John Smith offered him $500 and lessons on how to trade crypto.

📉 Hacken Token (HAI) crashed after someone used a leaked private key to make and dump a bunch of tokens. They got away with about $250K, and the token lost around 99% of its value.

🇪🇺 Samson Mow, founder of Jan3, wants to help more European countries adopt Bitcoin. He met with French lawmaker Sarah Knafo to talk about France possibly adding Bitcoin to its national reserves and creating Bitcoin-friendly policies.

🍌 Juicy memes