Unchained
Unchained

The Chopping Block: ColdCard's $100M RNG Hack, AI-Powered Security & Ethereum's Staking Yield Taper

This week we dissect ColdCard's ~$100M RNG exploit that Claude Code cracked in 8 minutes, debate whether AI just killed open-source security and Bitcoin maximalism, tear apart Ethereum's EIP-8361 staking-yield taper, and unpack Leopold Aschenbrenner's 67% Situational Awareness blowup

Topics Discussed

Episode Summary

Executive Summary: The episode argues that AI is reshaping security, finance, and crypto governance by making prediction harder and attacks cheaper. The hosts dissect the Coldcard wallet RNG exploit, debate ETH staking policy changes in EIP-8361, analyze a leveraged AI hedge fund blowup, note the rise of prediction markets and RWAs, and assess the fate of the Clarity Act amid ethics concerns.

Main Topics: Coldcard wallet exploit and AI-era security (Priority: 5/5): The hosts discuss a major Bitcoin wallet vulnerability caused by weak RNG in Coldcard hardware wallets, likely introduced by a five-year-old firmware change. They argue AI tools can now find critical bugs cheaply, making security audits and continuous hardening essential for both open and closed source code. Open source vs closed source security in the AI era (Priority: 5/5): The conversation expands from Coldcard to the broader claim that traditional assumptions about open source security are breaking down. The speakers debate whether AI-assisted attackers and auditors erase the old advantage of many humans reviewing code, and whether consolidation toward better-funded vendors is inevitable. ETH staking yield proposal and monetary policy backlash (Priority: 5/5): The panel critiques EIP-8361, which would taper ETH staking yield to zero above 50% staking. They say the proposal may be rational economically but is disruptive, poorly communicated, and risks undermining credibility by repeatedly changing Ethereum’s monetary policy. Situational Awareness fund collapse and leverage risk (Priority: 4/5): The hosts analyze Leopold Ashenbrenner’s AI-focused hedge fund drawdown, framing it as a classic leveraged-bet blowup rather than a thesis failure. They emphasize path dependency, liquidation risk, and how even strong directional views can fail under leverage. Shift in crypto trading toward prediction markets and RWAs (Priority: 4/5): Robinhood, Coinbase, Polymarket, Kalshi, and DeFi are increasingly driven by event contracts, prediction markets, and real-world assets rather than pure crypto trading. The panel views this as a structural shift toward wherever volatility and revenue are highest. Clarity Act timeline and ethics as the key bottleneck (Priority: 5/5): The final segment covers the uncertainty around the Clarity Act before recess. The hosts say the bill’s fate hinges on ethics language, with Democrats needing a politically defensible compromise and markets currently pricing low odds of passage this year.

Key Arguments: AI dramatically lowers the cost of finding vulnerabilities, so even tiny open-source projects can be attacked efficiently if they fail to use frontier models for security review. Open source is no longer automatically safer; AI reduces the advantage of diffuse human review because attackers and defenders use similar models and methods. Closed-source systems may suffer larger future losses because their scale, age, and complacency hide serious security debt, especially in mission-critical infrastructure. Ethereum’s staking policy should not be changed casually because monetary-policy credibility matters more than a small tweak in nominal yield. The staking-yield debate risks destabilizing DeFi and CeFi products that depend on current yield assumptions, making it a dangerous “deck chairs on the Titanic” issue. Leverage, not just wrong views, caused the AI fund’s collapse; path dependency can wipe out a thesis that is directionally correct. Prediction markets, event contracts, and RWAs are where trading activity is migrating because they are more volatile, timely, and revenue-generating than traditional crypto assets. Crypto retail speculation appears weaker than in prior cycles; institutions have dampened volatility, which reduces the momentum that once attracted retail participants. Clarity’s fate depends less on technical drafting than on political ethics optics, especially around Trump-related conflicts and Democratic accountability. If the bill does not move now, it is not necessarily dead, but its current form likely will not survive unchanged into a later legislative window.

Data Points: Coldcard losses: almost $100 million - Estimated Bitcoin drained from vulnerable Coldcard hardware wallets Coldcard market share: 1% to 2% - Estimated share of the Bitcoin wallet ecosystem Bug-finding cost with GLM 5.2: about $2 for 20 minutes - AI-assisted code review used to identify the RNG vulnerability Time to find bug with Claude Code: 8 minutes - Reported time for an AI tool to identify the flaw Time to find bug with GLM 5.2: 20 minutes - Open model finding the same issue without internet access ETH staking threshold in proposal: more than 50% staked - EIP-8361 would taper staking yield to zero above this level ETH yield change described: around 1% annual inflation reduction - Hosts argue the policy shift is marginal economically but large politically Situational Awareness peak AUM: 45 billion - Reported peak assets under management for the AI hedge fund Situational Awareness July performance: minus 67% - Reported drawdown after a period of explosive gains Situational Awareness June performance: almost 400%+ - Reported surge before the subsequent crash Situational Awareness inception return: over 1500% - Reported return since launch Robinhood Q2 event contract revenue: $156 million - Prediction markets/event contracts became a major revenue line Robinhood Q2 crypto revenue: about $100 million - Crypto revenue fell behind event contracts Robinhood Q2 equities revenue: $129 million - Equities revenue also trailed event contracts Hyperliquid volume comparison: TradeXYZ did more volume than the rest of Hyperliquid for two weeks in July - Used to illustrate the rise of RWAs over pure crypto trading Clarity Act passage odds: 25% - Polymarket/Kalshi pricing for passage this year Clarity floor-vote odds: 42% - Market implying a vote is more likely than not to pass if it reaches the floor Clarity next-cycle odds: 30% in 2027 - Kalshi market suggesting the bill may return in altered form later

Pivotal Quotes: "The death of apathy." — Robert: Response to the Coldcard exploit and the need for open-source projects to use AI security tooling proactively "It’s all about money. It’s just how much money are you spending on a frontier model trying to find attacks against this thing and fixing them all." — Asteve: Argument that AI changes security economics by favoring those who can spend more on offense and defense "Deck chairs on the Titanic." — Tom: Critique of the ETH staking yield proposal as a distracting policy tweak with destabilizing side effects

Implications: Security review, monetary policy, and trading behavior are all being reshaped by AI and leverage. Smaller projects and rigid assumptions look riskier, while better-funded, continuously audited systems and politically durable policies may become the winners.

🔓 Sign Up for Unlimited Episode Search

About Unchained

View all episodes from Unchained