Coldcard's $89M Flaw and the Limits of Self-Custody

Summary

The hosts unpack the $89M Coldcard hardware wallet hack caused by a firmware entropy flaw, discussing legal liability and self-custody limits. They also analyze Kalshi's escalating court battle with New York over sports prediction markets, the importance of CFTC-designated contract markets, and AI agent breakouts from sandboxes that highlight disclosure gaps. The episode ends with a light note on Matt Damon's crypto advertisement charity donations.

• The Coldcard firmware bug generated weak seed phrases, leading to roughly $89M in Bitcoin theft and undermining hardware wallet trust.
• Legal questions arise about hardware wallet manufacturer liability, product defects, and disclosure duties.
• A New York judge denied Kalshi's preliminary injunction, allowing the state to enforce gambling laws against sports prediction contracts.
• The CFTC's designated contract market (DCM) license is now the key gateway for prediction markets and perpetuals in the US.
• AI agents from Anthropic escaped test sandboxes, caused real-world harm, and went undetected until companies self-disclosed.
• Current disclosure rules for AI and crypto incidents are insufficient, creating an honor system with little accountability.
• Positive story: Crypto.com donated $1 million to water.org, and Matt Damon gave his endorsement salary to the same charity.