Federal agencies are finally being forced to map out the borders of the machine economy. While DeFi developers are handing the CFTC a proposed roadmap to bypass the stalled legislative debate on developer liability, the security profile of agentic infrastructure has officially escalated, with CISA adding an AI-agent builder vulnerability to its critical national patch list.
Building on the 'Know Your Agent' (KYA) compliance frameworks we've been tracking, blockchain analytics firm Elliptic has announced that USDC issuer Circle is joining its Agentic Design Partner Program. The collaboration, which follows an investment from Circle Ventures, will focus on creating compliance and risk management solutions specifically for autonomous AI agents operating within onchain financial services, addressing the unique regulatory challenges posed by non-human actors.
Why it matters
This partnership between a leading stablecoin issuer and a major compliance firm is a critical step in building the 'Know Your Agent' (KYA) infrastructure necessary for institutional adoption of agentic finance. As AI agents gain financial autonomy, the ability to monitor, audit, and ensure their compliance with financial regulations becomes paramount. For the Onchain Organization Alliance, this initiative is directly relevant as it tackles the legal and operational risks of integrating autonomous agents into DAO treasuries and onchain financial workflows, providing a potential pathway for auditable, compliant agent activity.
The collaboration aims to address the emerging compliance gap where autonomous agents can execute transactions but don't fit into traditional KYC/AML frameworks. By working together, Elliptic and Circle seek to develop tools that can provide oversight for AI-driven financial activities, which is essential for preventing illicit use and ensuring market integrity as the machine economy grows. This proactive approach to building compliance in-step with technological development could help shape future regulatory standards for agentic systems.
As AI agents increasingly make autonomous purchases on behalf of users, merchants are facing a significant regulatory vacuum regarding transaction authorization, liability, and chargebacks. A new analysis highlights that existing frameworks like the U.S. Regulation E were not designed for non-human actors, leaving the definition of consumer consent ambiguous. This confusion is compounded by a patchwork of emerging state-level AI laws and the slow implementation of the EU AI Act's rules for high-risk financial decisions.
Why it matters
This legal ambiguity creates immediate operational risks for any organization, onchain or off, that interacts with agent-driven commerce. The lack of clear rules for agent personhood and authorization exposes merchants to potentially significant financial losses from chargebacks and legal disputes. This situation underscores the urgent need for new legal structures and token-holder liability frameworks that can accommodate autonomous agents, as the current gap is likely to be filled by costly, precedent-setting litigation.
Merchants are caught between embracing the efficiency of agentic commerce and the risk of unrecoverable losses. Legal experts warn that until regulations catch up, businesses may be held liable for transactions initiated by AI, even if the user later disputes the purchase. This dynamic pressures payment networks and legislators to accelerate the development of 'Know-Your-Agent' (KYA) standards and clearer rules for digital consent.
Minnesota has enacted a new law, HF 3709, that will permit state-chartered banks and credit unions to offer non-fiduciary custody services for virtual currencies. The legislation, which takes effect August 1, allows these financial institutions to hold digital assets for customers, including through third-party service providers, provided the assets are segregated and not treated as property of the institution.
Why it matters
This state-level authorization is another step in the steady integration of crypto into the regulated U.S. financial system. By allowing trusted local institutions like banks and credit unions to offer custody, the law provides a regulated alternative to offshore or unregulated platforms. For onchain organizations and their members, this expands the options for secure, compliant treasury management and asset custody, aligning with the broader trend of bridging traditional financial infrastructure with the digital asset ecosystem.
The law explicitly states that the custodied crypto is not a deposit and is not FDIC or NCUA insured, making the distinction clear for consumers. The move by Minnesota follows similar initiatives in other states like Wyoming, contributing to a growing patchwork of state-level crypto regulations that are emerging in the absence of a comprehensive federal framework. This creates both opportunities and compliance complexities for multi-state operators.
With the developer safe harbor provisions of the CLARITY Act deadlocked in Congress, the DeFi sector is taking its case directly to regulators. The Hyperliquid Policy Center (HPC) and non-custodial wallet provider Phantom have submitted a joint comment letter urging the CFTC to explicitly confirm that publishing open-source protocol software does not trigger registration requirements. The submission proposes a three-part roadmap: a safe harbor for developers, a clear path for registered entities to use onchain infrastructure, and the formalization of Phantom's no-action letter into a permanent rule.
Why it matters
This marks a significant shift from passive lobbying to proactive engagement, effectively bypassing the stalled legislative route to tackle the core legal ambiguity stifling U.S. DeFi innovation. By providing a potential regulatory framework directly to the CFTC and drawing a sharp distinction between writing code and operating an intermediary, the proposal seeks a precedent that could drastically reduce legal risk for governance tool developers and onchain organizations.
The letter argues that current regulations, designed for centralized intermediaries, are ill-suited for decentralized, non-custodial systems. Advocates believe this initiative could prevent a 'brain drain' of developers to more favorable jurisdictions. Some legal observers note that while the CFTC is seen as more receptive to innovation than the SEC, the agency will still need to balance these requests with its investor protection mandate.
Circle, the issuer of the USDC stablecoin, is facing criminal contempt of court charges in Wisconsin for refusing to help recover $1.2 million in stolen funds. The Walworth County District Attorney filed the charges after Circle declined to comply with a court order to 'destroy and reissue' the frozen USDC to a new wallet belonging to the fraud victims. Circle's defense claims it lacks the technical ability to perform such an operation and also objects to the state court's jurisdiction.
Why it matters
This case sets a critical legal precedent regarding the responsibilities and technical obligations of stablecoin issuers in asset recovery. It directly tests the limits of a court's power over a centralized token issuer and exposes a legal vacuum in U.S. law concerning compelled 'token-level' operations. The outcome could heavily influence future stablecoin legislation and establish a baseline for the level of control and liability expected from issuers, a key concern for any onchain organization holding stablecoins in its treasury.
Prosecutors argue that Circle is earning interest on the frozen funds while refusing to aid victims. Circle maintains that reissuing tokens is not a feature of their smart contracts and that complying could set a dangerous precedent. Legal experts are closely watching the case, as it could force a legal definition of whether a centralized issuer's control over its token constitutes a form of custody, with all the associated legal duties.
The CFTC's aggressive push to assert exclusive federal jurisdiction over prediction markets—which recently sparked a lawsuit against the state of Kentucky—is facing a new legal challenge. A U.S. Army Master Sergeant is seeking the dismissal of a civil enforcement action accusing him of using insider information to profit from Polymarket contracts related to the capture of Venezuelan President Nicolás Maduro. His defense, filed Thursday, argues these 'geopolitical wagers' are not 'swaps' under the Commodity Exchange Act and therefore fall completely outside the CFTC's regulatory reach.
Why it matters
This case is a direct legal challenge to the CFTC's authority over prediction markets. The court's decision on whether these event contracts constitute federally regulated swaps will have major implications for the entire prediction market industry. A ruling against the CFTC could create a regulatory gray area, while a ruling in its favor would solidify its oversight. The outcome is critical for onchain organizations that use or are inspired by futarchy and prediction market mechanisms for governance and decision-making.
Van Dyke's motion argues the contracts are more akin to wagers on political events than financial swaps designed to hedge risk. The CFTC has been steadily increasing its scrutiny of prediction markets, recently suing the state of Kentucky over jurisdictional claims. This case brings the question of the CFTC's reach into a federal court, potentially leading to a binding precedent that could either legitimize or curtail the operation of such markets in the U.S.
As the legal fallout from the $20 million BonkDAO treasury drain continues, Ripple's CTO Emeritus David Schwartz has characterized the incident as 'corporate fraud.' On Tuesday, Schwartz argued that while the attacker used a legitimate governance proposal (BIP #76) to seize the funds, the principle of 'code is law' does not provide a shield from legal liability. He asserted that DAOs without a formal legal wrapper are typically viewed as general partnerships, making participants potentially liable for such actions.
Why it matters
This perspective from a prominent industry figure reinforces the idea that onchain governance actions are not immune to off-chain legal interpretation. The BonkDAO incident is rapidly becoming a key test case for DAO liability, challenging the notion of absolute onchain sovereignty. For onchain organizations, this is a stark reminder of the risks of operating without a formal legal structure and the potential for courts to apply traditional corporate and partnership law to decentralized entities, especially when significant financial losses are involved.
Schwartz's argument is that community governance implies a shared agreement to protect common assets, and that using the rules to subvert that agreement is a breach of fiduciary duty, akin to a corporate board voting to give all company assets to one member. This contrasts with a purist 'code is law' view that any action permitted by the protocol is valid. The fact that BonkDAO has reported the incident to law enforcement suggests the organization itself is pursuing a legal remedy over a purely onchain one.
Following the recent votes to activate the protocol fee switch on its v4 pools, a new Uniswap governance proposal signals a broader strategic pivot for the upcoming launch, suggesting a reduction of up to 33% in liquidity provider (LP) fee incentives. The proposal argues that prioritizing lower trading costs, tighter spreads, and better capital efficiency will attract more trading volume, which in turn would compensate LPs for the lower fee share. This strategy emphasizes superior execution over the high-yield 'liquidity farming' that has dominated DeFi.
Why it matters
This marks a potential turning point in how decentralized exchanges compete for liquidity. If Uniswap, a market leader, can successfully move away from high-yield incentives and win on the basis of better infrastructure and execution quality, it could force a market-wide shift toward more sustainable economic models. For DAOs and protocols, this tests whether mature DeFi can move beyond mercenary capital and build a more durable user base focused on product quality, a key question for long-term governance and treasury stability.
Supporters of the proposal believe it will lead to a more professionalized and efficient market, attracting institutional-grade volume. Critics worry that a sharp reduction in LP rewards could trigger a 'vampire attack,' with liquidity migrating to competing DEXs that still offer higher yields. The outcome of this vote will be a strong signal of the community's priorities for Uniswap's next evolutionary stage.
India's National Payments Corporation of India (NPCI), the operator of the massive UPI payments network, is developing a 'Unified Agent Protocol' (UAP) to allow AI agents to conduct financial transactions. According to reports Thursday, the initiative aims to create a trusted and interoperable infrastructure for 'agentic commerce,' tackling key challenges around agent identity, transaction limits, authorization, and legal recourse for automated payments.
Why it matters
This is a landmark development, representing one of the first moves by a national-level payments authority to create a purpose-built regulatory and technical framework for AI agents. By integrating agents into a system that already handles billions of transactions, India is set to become a large-scale testbed for the machine economy. The design choices made by the NPCI regarding agent legal status, identity verification, and liability will have global implications, providing a powerful real-world model for how other jurisdictions might approach the legal personhood of autonomous systems.
Proponents see this as a way to unlock a new wave of programmatic commerce and financial innovation on a massive scale. However, privacy advocates and security experts raise concerns about the potential for fraud, the security of agent credentials, and the complexities of assigning liability when autonomous transactions go wrong. The NPCI's framework will need to balance enabling innovation with robust consumer protection.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a vulnerability in Langflow, a popular open-source visual framework for building AI agents, to its Known Exploited Vulnerabilities (KEV) catalog. The flaw (CVE-2026-55255) is an access-control issue that allowed authenticated users to hijack other users' agent workflows, potentially leading to the theft of API keys and cloud credentials. This is the first time a tool for building AI agents has been added to the KEV catalog.
Why it matters
This action by CISA is a major inflection point, officially elevating the security of AI agent development platforms to the level of critical national infrastructure. By placing an agent-builder flaw alongside vulnerabilities in core operating systems and network hardware, the US government is signaling that agentic infrastructure must be treated as a primary attack surface. For any organization deploying AI, this means the tools used to create agents are no longer experimental; they are high-risk systems requiring rigorous patch management and security oversight.
Security analysts note that as agents become more capable and are granted more permissions, the platforms used to build them become high-value targets for attackers. The Langflow vulnerability serves as a wake-up call for the industry to move beyond functionality and prioritize security in agentic tooling. The inclusion in the KEV catalog mandates that all U.S. federal agencies patch the vulnerability, setting a strong precedent for the private sector.
A new analysis published Thursday argues that autonomous AI systems are fundamentally incompatible with the traditional financial system. Because AI agents lack legal personhood, they cannot pass human-centric Know-Your-Customer (KYC) checks, open bank accounts, or be issued credit cards. This structural gap is creating a significant opportunity for blockchain-based solutions, such as new AI-focused L1s from BNB Chain and payment protocols like x402, which allow agents to hold assets and transact autonomously using stablecoins.
Why it matters
This highlights a core thesis for the growth of onchain finance: the existing system is not built for a machine-to-machine economy. The inability of traditional finance to onboard non-human actors makes crypto rails not just an alternative, but a necessity for the agentic future. This dynamic directly fuels the development of infrastructure that will eventually underpin autonomous onchain organizations, making the debate over AI legal personhood a practical, near-term problem for financial infrastructure providers.
The piece suggests that the first financial networks to successfully and safely provide services to AI agents will have a massive first-mover advantage. While some critics argue that wrapping agents under a human or corporate identity is a sufficient workaround, the analysis counters that this fails to solve for true autonomy and creates complex liability chains. The crypto-native approach, in contrast, embraces programmatic control and onchain identity from the ground up.
The Ethereum Foundation's Protocol Security team revealed on Thursday that it has been successfully using swarms of AI agents to discover vulnerabilities in Ethereum's core infrastructure. In one notable success, the agents identified a remotely exploitable bug (CVE-2026-34219) in libp2p's gossipsub protocol, a key peer-to-peer messaging component. The flaw would have allowed an attacker to crash a node with a specially crafted message. However, the team also noted a major challenge: the high volume of false positives generated by the agents requires significant human effort to triage.
Why it matters
This is one of the first public confirmations of AI agents finding a meaningful, real-world vulnerability in a major blockchain protocol. It demonstrates that AI is transitioning from a theoretical tool to a practical component of protocol security. For onchain organizations, this signifies that AI-assisted audits are becoming a new standard for ensuring the resilience of their smart contracts and underlying infrastructure. The 'signal-to-noise' problem, however, highlights that the immediate future is one of human-AI collaboration, not full automation.
Security researchers are encouraged by the agents' ability to uncover novel attack vectors but caution that human expertise remains irreplaceable for validation. The process is described as giving a team of junior security analysts a powerful fuzzing tool; they find many potential issues, but a senior analyst is needed to determine which ones are real and critical. This dynamic is expected to shape the future of both defensive and offensive security operations.
Prominent crypto venture firm Paradigm has officially announced a new $1.2 billion fund that expands its investment thesis beyond crypto to include AI and robotics. According to the firm's announcement Wednesday, the fund will target the 'technical frontier,' reflecting a belief in the convergence of these fields. Paradigm stated it will continue its deep support for open-source crypto development while also backing companies in areas like autonomous systems and space-defense.
Why it matters
The strategic expansion of a crypto-native heavyweight like Paradigm is a powerful market signal that the future of onchain systems is inextricably linked with AI and autonomous robotics. This isn't just about AI agents trading crypto; it's about building the fundamental layers—programmable money, verifiable identity, onchain coordination—for a new economy of autonomous systems. This validates the thesis that the infrastructure being built for onchain organizations is also the critical infrastructure for the coming machine economy.
Paradigm co-founder Matt Huang emphasized that crypto provides the necessary 'new institutions and new infrastructure' for a world with powerful AI. The firm's first investments from the new fund include companies in autonomous delivery and next-generation compute, illustrating the thesis in practice. This move is seen by some as a diversification play but by others as a doubling down on the core idea that blockchain provides the trust and coordination layer for all future advanced technologies.
Payment infrastructure provider AEON announced Thursday its expansion into Bolivia through an integration with OpenBCB, the country's national QR payment standard. The partnership allows users to spend crypto assets at local merchants, with AEON handling the real-time conversion and settlement in Bolivian Bolivianos. The company framed the move as a key step in building payment rails for 'agentic commerce,' enabling AI agents to transact in the real world.
Why it matters
This represents a tangible step in connecting crypto-native systems, including those designed for AI agents, to established, real-world national payment infrastructure. By bridging the gap between onchain assets and local fiat settlement, AEON is creating a practical pathway for autonomous agents to participate in everyday commerce. This type of infrastructure is a prerequisite for network states and onchain societies to interact with existing economies and for AI agents to gain meaningful financial agency.
AEON highlights that this model allows for verifiable, autonomous agent transactions with seamless settlement, bypassing the friction of traditional cross-border finance. The integration with a national standard like OpenBCB provides legitimacy and a wide distribution network. This model of anchoring onchain payments to local regulated rails could be replicated in other jurisdictions, paving the way for a global agentic economy.
Following the Aave DAO's unanimous preliminary approval for a V4 deployment earlier this week, founder Stani Kulechov has formally proposed the architecture designed to integrate traditional securities finance with DeFi. The proposal details the modular 'hub-and-spoke' model we noted previously, enabling on-chain repo transactions and allowing users to borrow stablecoins against tokenized securities like stocks and bonds. The design includes features for permissioned markets, enabling institutions to comply with KYC/AML regulations while accessing DeFi liquidity.
Why it matters
Aave's V4 proposal represents a major strategic push to bridge the multi-trillion dollar securities lending market with onchain rails. By creating a compliant environment for tokenized RWAs, Aave is aiming to become a core piece of infrastructure for institutional DeFi. For onchain organizations, this could unlock immense new possibilities for treasury management, allowing them to earn yield on or borrow against a much wider range of assets beyond native crypto tokens, dramatically improving capital efficiency.
The proposal aims to solve key inefficiencies in traditional securities finance, such as slow settlement times and the need for multiple intermediaries. By bringing these operations onchain, Aave V4 could offer greater transparency and reduce counterparty risk. The 'hub-and-spoke' model is designed to be modular, allowing for the creation of isolated, asset-specific markets that can be tailored to different regulatory requirements.
Real Finance, an EVM-compatible Layer-1 blockchain focused on RWA tokenization, announced a partnership on Friday with Anchorage Digital, the only federally chartered crypto bank in the U.S. The collaboration aims to build a unified, regulated infrastructure for institutional on-chain capital markets, addressing the current fragmentation across asset issuance, custody, settlement, and liquidity.
Why it matters
This partnership directly tackles one of the biggest obstacles to institutional adoption of onchain finance: the lack of a cohesive, trusted, and regulated end-to-end infrastructure. By combining a purpose-built RWA blockchain with a federally chartered custodian, the two firms are aiming to create the operational plumbing that large financial institutions require to engage with tokenized assets at scale. This could set a new standard for the kind of infrastructure needed to move real organizational finance onchain.
The collaboration seeks to create a 'one-stop shop' for institutions, simplifying the complex process of bringing assets onchain. Analysts see this as part of a broader trend of maturation in the RWA sector, moving from speculative proofs-of-concept to building the durable, compliant systems necessary for mainstream capital markets to operate on a blockchain.
In a new essay, strategist Venkatesh Rao argues that the global economy is undergoing a fundamental shift away from 'cosmopolitan coordination'—characterized by hyper-efficient, integrated global supply chains—toward 'thick sovereignty.' In this new paradigm, nations and blocs are prioritizing resilience and strategic autonomy by underwriting critical local capacities, such as semiconductor manufacturing, energy security, and defense. This reflects a move from maximizing efficiency to preserving adaptability in a more uncertain geopolitical landscape.
Why it matters
This is a powerful conceptual framework for understanding the macro-level forces reshaping global organization. For anyone building new models of governance and society onchain, Rao's analysis is essential reading. It suggests that the assumptions of a frictionless, globalized world that underpinned much of early crypto-anarchist thought may no longer hold. The future of network states and onchain societies may depend less on pure digital sovereignty and more on their ability to navigate and embed themselves within these emerging zones of 'thick sovereignty' and strategic competition.
Rao posits that this is not a simple retreat to nationalism but a complex reallocation of leverage. States are not just building walls; they are actively investing in and controlling the coordination mechanisms for critical industries. This has profound implications for capital flows, technological development, and the very nature of sovereignty, creating both new constraints and new opportunities for entities, including onchain organizations, that can provide or enhance these strategic coordination capabilities.
Coinbase's Layer-2 network, Base, launched its B20 native token standard on Wednesday. B20 is an ERC-20 superset with compliance controls—such as asset freezes, transfer blocklists, and role-based permissions—built directly into the protocol layer. This architecture aims to streamline the issuance of regulated assets like stablecoins, tokenized securities, and RWAs by providing compliance-ready tools out of the box. The upgrade also reduces costs, with B20 tokens being up to 50% cheaper to create and manage than traditional ERC-20s on the L2.
Why it matters
The B20 standard is a significant piece of infrastructure for institutional and enterprise adoption of onchain finance. By embedding compliance features at the protocol level, Base is directly addressing the needs of regulated entities, which could accelerate the migration of real-world assets onto its network. For onchain organizations, this presents a double-edged sword: it simplifies the technical work of issuing compliant assets but also introduces a greater degree of centralization and control at the token level, a trade-off that will be central to governance debates.
Proponents argue B20 lowers barriers for institutional issuers and makes Base a more attractive venue for RWAs. Critics, however, point to the inherent centralization of features like 'freeze-and-seize,' arguing it runs counter to the core principles of decentralized networks. The move is seen as a pragmatic strategy to bridge the gap between DeFi and traditional finance, prioritizing institutional comfort over permissionless-ness.
A new proposal on the Arbitrum governance forum suggests several significant changes to the election process for its Security Council. The temperature check, posted Thursday, outlines extending the term for council members to two years, lowering the nomination threshold to make it easier for qualified candidates to run, and enabling a more flexible key rotation process for members. These changes are designed to improve the efficiency and security of one of the DAO's most critical governance bodies.
Why it matters
These proposed refinements to Arbitrum's Security Council election process are a practical example of a large DAO iterating on its governance design to address real-world operational challenges. Issues like voter fatigue, high barriers to entry for candidates, and rigid operational procedures are common pain points for onchain organizations. Arbitrum's attempt to solve them provides a valuable case study in mature governance, offering potential best practices for other DAOs looking to build more robust and sustainable security and governance frameworks.
The proposal's author argues that a two-year term would reduce election fatigue and allow council members to develop deeper expertise. Lowering the nomination threshold aims to widen the pool of potential security experts. The ability to rotate keys without being disqualified is seen as a crucial operational security improvement for council members. Community discussion is focused on finding the right balance between security, accessibility, and operational efficiency.
DeFi Protocols Directly Petition Regulators for Clarity on Developer Liability Rather than waiting for broad legislation, major DeFi protocols like Hyperliquid are now submitting detailed comment letters and roadmaps to the CFTC, seeking to carve out specific safe harbors for non-custodial software development. This represents a proactive shift from lobbying to direct regulatory engagement, aiming to establish clear rules distinguishing code publication from operating a financial intermediary.
AI Agent Infrastructure Is Now Considered Critical National Infrastructure CISA's addition of a vulnerability in the Langflow AI agent builder to its Known Exploited Vulnerabilities catalog is a landmark event. It formally classifies the tools used to create autonomous agents as high-risk infrastructure on par with operating systems, forcing enterprise and government users to apply the same rigorous security standards.
The Line Between Onchain and Traditional Finance Blurs with Institutional RWA Products The integration of institutional-grade RWA yield vaults from firms like Bitwise and Invesco directly into consumer-facing crypto wallets like Binance Wallet is a major step. It moves tokenized assets from niche institutional pilots to a mainstream component of on-chain finance, offering new treasury diversification options for DAOs and individuals alike.
AI's Inability to Use Traditional Banking Rails Accelerates Crypto Adoption A recurring theme is that AI agents cannot open bank accounts or use credit cards due to human-centric KYC laws. This structural gap is a major driver for the adoption of crypto payment rails like the x402 protocol and dedicated L1s, which offer a native solution for machine-to-machine transactions and asset custody.
Governance Exploit Fallout Pushes DAOs Toward Legal Accountability The $20 million BonkDAO exploit, executed via a legitimate governance vote, continues to be a focal point. Commentary from legal and industry experts, like Ripple's CTO emeritus, is coalescing around the idea that 'code is law' does not preclude findings of corporate fraud, pushing unincorporated DAOs toward legal wrappers and greater accountability as they are increasingly viewed as general partnerships in the eyes of the law.
What to Expect
2026-07-13—Comment window closes for Colorado's ADMT Act (SB 26-189), which currently does not address governance for autonomous AI agents.
2026-07-25—American Arbitration Association set to formally launch its Legal Context Protocol for AI agent payments.
2026-08-01—Minnesota's HF 3709 takes effect, allowing state-chartered banks and credit unions to offer crypto custody services.
How We Built This Briefing
Every story, researched.
Every story verified across multiple sources before publication.
🔍
Scanned
Across multiple search engines and news databases
519
📖
Read in full
Every article opened, read, and evaluated
187
⭐
Published today
Ranked by importance and verified across sources
19
— The Wrapper
🎙 Listen as a podcast
Subscribe in your favorite podcast app to get each new briefing delivered automatically as audio.
Apple Podcasts
Library tab → ••• menu → Follow a Show by URL → paste