The Boardroom Brief Monday, November 9, 2026 · Maverick · 3-minute read |
The Reconciliation. |
A wallet rescue needs a money trail, while AI suppliers add new controls that buyers must understand. |
Good morning. A disappearing balance is alarming. This weekend, some Keplr customers were told it could also mean rescuers had moved their money. Your finance team should not have to guess which explanation is right. Quick ask: who verifies an emergency transfer at your company? Reply with the role. I read every reply. |
Today in 30 seconds | ▪ | Web3Auth: publishes recovery addresses after rescuers moved funds from exposed wallets. |
| ▪ | Grok API: turns text watermarking on by default, with a team-level opt-out. |
| ▪ | Doha: opens telecom talks with cross-border standards and resilient networks in focus. |
|
|
The Move A supplier that can move money during an emergency needs a recovery procedure your treasury team can verify. By Monday noon, have the finance chief and security chief map suppliers that can move company funds, name the approver for emergency recovery, and test how treasury verifies the destination. Keep the transaction trail beside the incident report. |
|
01 · Recovery · Digital assets Web3Auth publishes addresses used to rescue Keplr fundsEarly Sunday, Web3Auth published verified recovery addresses for affected Keplr wallets. It said transfers to those addresses had been mistaken for attacker activity. On Saturday, it disclosed that rescuers had used the attacker's route to secure exposed wallets. Keplr says some Google or Apple login users suffered a private-key breach. The incident was already public on Friday; the address list is new. Why it matters: An empty wallet does not tell you who moved its contents. Your treasury team needs verified recovery destinations before classifying an outflow. The list does not establish total losses or prove that every affected customer's money is safe. Source: Web3Auth recovery update; Keplr user guidance |
02 · Provenance · AI xAI makes text watermarks the API defaultDated Saturday, November 7, xAI's change puts invisible watermarks in output from seven Grok text models by default. Its application programming interface (API) documentation covers ordinary text, structured output and tool-call arguments. A response header reports whether output was watermarked. Team administrators can opt out per model where allowed; that choice covers every API key on the team. The mark adds no hidden characters. Why it matters: Put this setting on your change-control list. One administrator can alter the default for every application sharing the team. The watermark is statistical, not a fact check. Access to xAI's detector requires an application, so buyers cannot assume they can independently check a pasted passage. Source: Grok API documentation |
03 · Infrastructure · Qatar Doha opens telecom talks on networks for AI agentsMobile industry group GSMA opened its three-day MWC Doha on Sunday. Qatar's communications minister called for diversified connectivity routes and service continuity as AI agents increase network and computing requirements. GSMA urged common global standards. These are priorities for discussion, not newly adopted regulations. Why it matters: An agent that places orders still needs a dependable network. For deployments across countries, ask suppliers which links have a tested backup. A conference speech is not evidence that those safeguards exist in the service you are buying. Source: GSMA opening statement |
History rhymes 1974: Herstatt left one side of the payment unpaidWhen German authorities closed Bankhaus Herstatt in June 1974, counterparties had already sent Deutsche marks. The matching dollar payments had not been made in New York. Other banks stopped outgoing payments until they knew they had received the other side, freezing the payment system. Today's wallet recovery is a different event, but treasury still needs to reconcile where the money actually went. |
Put these to management | 1. | Which supplier can move our funds during an incident, and who can verify its recovery destination? |
| 2. | Who can change provenance settings across our AI account, and do we retain the audit trail? |
| 3. | Which cross-border AI workflow has a tested connectivity backup? |
|
|
From the archive: The Registry. Singapore explored identity for AI agents. Read it beside the question of who acts for your company. |
See you tomorrow at 7. Maverick Know someone who should be in the room? Forward this, or send them your link. Found this in Promotions or Spam? Drag it to your Primary tab so tomorrow's Brief lands where you will see it. The Boardroom Brief · daily at 7 a.m. ET · theboardroombrief.news |
