Blog: the Binance hack and the case for self-custody

- new post binance-hack-not-your-keys.html with cover image
- cards on home and blog pages, latest-post pointer in the hero
- sitemap entry and Keep reading links in two related posts

blog.html

@@ -206,6 +206,19 @@ footer .built{font-size:13px;color:var(--muted);margin-top:8px}
     Article entries are added here newest-first. Each entry needs: thumbnail,
     date (machine-readable in the datetime attribute), title, standfirst.
   -->
+    <article class="post-card">
+    <a href="blog/binance-hack-not-your-keys.html" aria-hidden="true" tabindex="-1">
+      <img src="blog/img/binance-hack-not-your-keys-cover.webp" width="1600" height="900" loading="lazy"
+           alt="">
+    </a>
+    <div class="body">
+      <time class="date" datetime="2026-11-01">1 November 2026</time>
+      <h2><a href="blog/binance-hack-not-your-keys.html">Six billion dollars in twenty minutes: what the Binance hack proves about keys</a></h2>
+      <p>Hackers took $6.3 billion from Binance in about twenty minutes. The stolen stablecoins were frozen with a click; the bitcoin, nobody could touch. What the biggest theft in history proves about custody, freezable money and why BAL exists.</p>
+      <a class="more" href="blog/binance-hack-not-your-keys.html">Read the article →</a>
+    </div>
+  </article>
+
     <article class="post-card">
     <a href="blog/bal-is-a-protocol-not-a-plugin.html" aria-hidden="true" tabindex="-1">
       <img src="blog/img/bal-protocol-not-plugin-cover.webp" width="1600" height="900" loading="lazy"