Breaking down the Coldcard exploit & ramifications for self-custody

Casa CTO Jameson Lopp joins Gareth Jenkinson on The Starting Block to discuss how the Coldcard entropy exploit unfolded, why multi-vendor multisig is the gold standard for self-custody, and why Bitcoin self-custody is still worth pursuing despite the risks. Foundation CTO Zach Herbert also joined Gareth for the day’s Market Pulse, where he discussed the role of AI in discovering the Coldcard bug and what the industry needs to do to rebuild trust in self-custody.

OUTLINE
00:06 – Welcome & Show Intro
01:47 – Block Briefing: Strategy Sells BTC
03:17 – Trump Media, SEC/CFTC Turf War & More
09:35 – Zach Herbert: Coldcard Exploit Explained
15:17 – AI’s Role in Finding the Bug
20:23 – Open Source vs. Closed Source Debate
23:15 – Self-Custody Trust & Don’t Trust Verify
27:13 – Hardware Wallet UX & Market Options
34:28 – Jameson Lopp: First Reports of the Hack
40:51 – AI, LLMs & the Changing Attack Landscape
46:23 – Self-Custody: Who It’s Really For
55:57 – Casa’s Multi-Vendor Multisig Case

Jameson Lopp –
Casa –
Zach Herbert –
Foundation –

Gareth Jenkinson –
The Block –
———————————————————————————

Subscribe to The Block’s Newsletters!

🚨 Breaking News
👨‍🔬 Expert Analysis
📈 Market Insights

Subscribe now 👉

——————————————————————————–

Hiring in crypto?

🧠 Find top talent fast with Campus, powered by The Block!
✅ Challenge candidates with our Crypto Assessment Test
⚡ Hire faster, build stronger teams

Start your free trial today 👉