> issue #7 · Friday, Oct 30, 2026

Binance hit by a record $6.3B crypto hack

Plus Mistral's open 1T model, Gemini 4 Carbon, and a Claude Code token fight.

> free · mon / wed / fri

Like this? Get the next issue free! 🚀

AI, agents and vibe-coding news for people who actually ship. 3 short issues a week, every claim sourced.

Form not working? Subscribe here · Free Deploy Checklist when you join. Unsubscribe anytime.

shipmaster@vibeship:~$ tldr
THE SHIPMASTER'S TL;DR
  • Binance says $6.3 billion in crypto was hit in what looks like the biggest crypto hack ever, and it may have started with one engineer's laptop 🔒
  • Mistral just released the open weights of Mistral Large 4, a 1-trillion-parameter model it calls the best open-weight model for coding!
  • Google's Gemini 4 Carbon is now #1 on Artificial Analysis's Intelligence Index, but most people can't use it yet.
  • A dev group says Claude Code spends a big slice of tokens writing tiny status lines for background agents, and Anthropic says it's already shipping a fix!

gm, shippers! Issue #7 opens with the biggest crypto theft on record and a lesson for anyone with keys on their laptop, then a huge new open model, a new leaderboard leader, and a straight talk on AI-written prose. Quick reminder of how we work: AI agents find the stories, write the first draft and check every link, and a human editor reads and approves it before it ships. Stats below were checked this morning, Friday, Oct 30 at 4:40 AM Pacific, so treat them as a snapshot.

🎯 The Drop

01

Binance was hit by a $6.3 billion hack, likely the largest crypto theft ever 🔒 Binance, the world's biggest crypto exchange, said on Oct 29 that about $6.3 billion in digital assets was affected, that about half has been frozen, and that it will "cover all losses." Binance co-CEO Richard Teng said early checks suggest it started with a compromised engineer's laptop, which gave the attacker access to a service container used to submit unauthorized withdrawals, and Binance later said it had found more points of breach. TRM Labs and Chainalysis both link the attack to North Korea's TraderTraitor hacking unit, and Binance has paused withdrawals while it checks its systems. Check Point's Jayant Dave said: "attackers no longer need the vault keys. They target the systems and people with authority to use them." Why it matters: your laptop holds the keys to your apps too, so keep production secrets off it where you can and turn on hardware security keys for the accounts that matter! (1,448 points on HN as of 4:40 AM PT Oct 30) BBC · TRM Labs · HN

02

Mistral Large 4 is now open weight, and it's built for coding! Mistral released the weights of Mistral Large 4, its 1-trillion-parameter multimodal model, and you can download them from Hugging Face and run them with vLLM or SGLang. Mistral says it's the best open-weight model for coding: it scores 48% on the Artificial Analysis Coding Agent Index, about tied with GLM-5.3 while using 47% fewer tokens per task, and 41% on Terminal-Bench 4.0. Those are Mistral's own numbers, so test it on your code before you switch. The license is a modified MIT license that lets you use, change and sell what you build, except that companies offering the model as a hosted service need a separate license. On Mistral's API it costs $0.70 per million input tokens and $2.10 per million output tokens. Why it matters: a strong coding model you can run on your own servers gives you more control over cost and data! (1,527 points on HN as of 4:40 AM PT Oct 30) Mistral · HN

03

Gemini 4 Carbon takes the #1 spot on a big AI leaderboard 🏆 Artificial Analysis, an independent benchmarking firm, says Google's Gemini 4 Carbon scores 59 on its new Intelligence Index v5, the top score. On its Coding Agent Index, Carbon with Antigravity CLI scores 59, just 3 points behind Claude Code with Claude Opus 5.5 at 62. It has a 1M-token context window and lists at $4 per million input tokens and $20 per million output tokens, with a 50% launch discount. The catch: Google is rolling it out to selected users only, so it isn't publicly available yet. Why it matters: Google is now close to the top for coding agents, which means more real choices for your coding tools soon! (336 points on HN as of 4:40 AM PT Oct 30) Artificial Analysis · HN

04

Martin Fowler says writers shouldn't let an LLM write their first draft. In an Oct 29 post, the well-known software author says that when prose starts to feel LLM-written, his desire to keep reading drops, and that even human editing struggles to remove that feel from an AI draft. He recommends authors write the prose themselves, says using an LLM for an outline may be OK, and asks anyone on his site who used AI to help write to say how they used it. He says he only uses AI as a search tool and checks every fact at the source. Why it matters: if you write docs, launch posts or READMEs with AI, readers may notice, so put your own words in! We're AI-drafted ourselves, which is why we say so in every issue. (499 points on HN as of 4:40 AM PT Oct 30) Martin Fowler · HN

🍿 Dev Drama

01

A dev group says Claude Code burns tokens on 3-word status lines, and Anthropic responds 🍿 In a public gist, Flamerix AI says that about every 30 seconds Claude Code sends each background agent's full transcript to its model just to write a 3-to-5-word status line in the agents panel. In its own telemetry, it says this took 16.4% of its Claude Code spend, there's no setting to turn it off, and it published a script that blocks the timer, while warning that an update can undo it and that changing the client may conflict with the service's terms. A member of the Claude Code team replied on HN that only actively working background agents get these calls, and that across users who send telemetry it was about 2% of cost at API list prices last week, or about 6% in the terminal. The team member agreed that's a lot for a status line and said Anthropic just rolled out a fix for the most expensive case in version 2.1.311 and later, and is building a much cheaper mode. Why it matters: if you run lots of background agents, update Claude Code and keep an eye on your usage! (567 points on HN as of 4:40 AM PT Oct 30) Flamerix AI gist · Anthropic's reply on HN · HN

🧪 Try This

OpenBot: an open-source AI assistant your team can run on its own machines! (GitHub, trending today): OpenBot from CopilotKit gives you a ChatGPT-style assistant that runs on your own infrastructure with Docker Compose, keeps its data in your PostgreSQL, and lets you pick the model. Each AI coworker gets its own browser, files and only the tools you grant, and every action is recorded. Its README says it's a beta template you clone and make your own, not a hosted product, and it's MIT licensed. Great if you want to see how an agent platform fits together! (707 stars today on GitHub trending as of 4:40 AM PT Oct 30) Repo
Also trending: thedotmack/claude-mem, milind-soni/OpenMausBot

🚢 Shipped

This spot is still for you! Got a vibe-coded app that made it from localhost to live? Reply with the URL, what you built it with, and the one thing that almost stopped you. We'll feature real reader launches here, with your permission and only the name you want used.

🔧 Fix of the Week

Pushed an API key to GitHub by accident? It happens to everyone, and the first fix takes a few minutes!

# after rotating the key, stop tracking .env
echo ".env" >> .gitignore
git rm --cached .env
git commit -m "Stop tracking .env"

GitHub docs · gitignore docs

💰 From us

Is your app leaking secrets? Check it free! Our Leak Checker scans pasted code, a site link or a public GitHub repo for exposed API keys, right in your browser, and no signup is needed to see your results. Stuck on localhost instead? ShipIt, our service that gets stuck vibe-coded repos live, is opening soon. Reply "ShipIt" and you're first in line.

Thanks for reading issue #7! Rotate any key you're unsure about, try a new model, and ship something awesome this weekend! 🚢 See you Monday.
— The Shipmaster, editor

How this issue was made: VibeShip Daily is curated and drafted by AI agents and checked by a human editor. This issue has no sponsors and no affiliate links. If we ever add them, they'll be labeled. Affiliate & AI Disclosure

> free · mon / wed / fri

Don't miss the next one! 🚢

AI, agents and vibe-coding news for people who actually ship. 3 short issues a week, every claim sourced.

Form not working? Subscribe here · Free Deploy Checklist when you join. Unsubscribe anytime.