The Chopping Block: ColdCard's $100M RNG Hack, AI-Powered Security & Ethereum's Staking Yield Taper

This week we dissect ColdCard's ~$100M RNG exploit that Claude Code cracked in 8 minutes, debate whether AI just killed open-source security and Bitcoin maximalism, tear apart Ethereum's EIP-8361 staking-yield taper, and unpack Leopold Aschenbrenner's 67% Situational Awareness blowup and CLARITY Act's ethics fight. Welcome to The Chopping Block – where crypto insiders Haseeb Qureshi, Tom Schmidt, Tarun Chitra, and Robert Leshner chop it up about the latest in crypto. No guest this week, just the four of them working through a week where AI quietly rewrote the economics of both security and human psychology, and crypto happened to be standing in the blast radius. This episode: ColdCard, NVK's Bitcoin-only hardware wallet, got drained of nearly $100M thanks to a random-number-generation bug that a one-word commit buried five years ago, and Claude Code sniffed it out in 8 minutes (an open model with no internet found it in 20, for about two bucks). The crew debates whether AI just killed open-source security, whether Nic Carter is right that this is 'the death of Bitcoin maximalism,' and why Tarun thinks maxi devs are 'the RFK of security practices.' Then they take a blowtorch to Ethereum's EIP-8361 staking-yield taper (Tarun: 'the proposal reads like shit'), unpack Leopold Aschenbrenner's 67% Situational Awareness blowup while 4x levered, and wade into the CLARITY Act's ethics fight where a single amendment is the whole ballgame. Listen to the episode on Apple Podcasts, Spotify, Pods, Fountain, Podcast Addict, Pocket Casts, Amazon Music, or on your favorite podcast platform. Show highlights 🔹 ColdCard's Bitcoin-only hardware wallet drained of nearly $100M after a five-year-old random-number-generation bug silently fell back to weak software RNG. 🔹 A single dev swapped C++ macros with a one-word commit message, seemingly just to get NVK's code to compile, and doomed years of keys. 🔹 Claude Code found the ColdCard bug in 8 minutes; open model GLM 5.2, no internet, found it in ~20 for about $2. 🔹 Tarun calls Bitcoin maxi devs 'the RFK of security practices' who 'don't do audits,' branding ColdCard's lack of hardening 'incredibly delinquent.' 🔹 Haseeb warns AIs 'are much less diverse than humans,' so security now scales with AUM while North Korea spends thousands in compute. 🔹 Nic Carter calls it 'the death of Bitcoin maximalism' as Haseeb reads posts from holders who scrimped for three Bitcoin and woke up wiped. 🔹 EIP-8361 from Pintail and Justin Drake tapers ETH staking yield toward zero above 50% staked; the community is 'vomiting all over' it. 🔹 Tarun torches EIP-8361 as 'a truly horrendous post,' arguing constantly changing policy means Ethereum is never credible hard money. 🔹 Leopold Aschenbrenner's Situational Awareness AI hedge fund blew up ~67% while 4x levered, with Robert drawing Archegos comparisons. Hosts ⭐️Haseeb Qureshi, Managing Partner at Dragonfly ⭐️Tom Schmidt, General Partner at Dragonfly ⭐️Tarun Chitra, Managing Partner at Robot Ventures ⭐️Robert Leshner, Founder & CEO of Superstate Disclosures Timestamps 00:00 Intro 01:03 ColdCard's $100M Exploit 05:46 AI, Audits & Bitcoin Maxi Security Failures 12:07 Open Source vs Closed Source in the AI Era 23:21 EIP-8361: Ethereum's Staking Yield Taper 30:34 Hard Money, Post-Quantum & Central Bank Chaos 35:54 Aschenbrenner's Situational Awareness Blowup 44:41 Robinhood Prediction Markets Boom as Hyperliquid RWAs Flip Crypto 51:54 Korea's Bloodbath & the Death of Retail Volatility 55:17 CLARITY Act: Ethics Provisions Are the Linchpin Learn more about your ad choices. Visit megaphone.fm/adchoices