# Rabbit Hole Recap #412: Stay Humble and Stack Sats

- **Episode:** #412
- **Hosts:** Odell & Marty Bent
- **Source:** https://pca.st/b023e261
- **Published:** 2026-06-04
- **Duration:** ~95 min (5736 seconds)
- **Format:** Live stream → podcast
- **Transcript:** Whisper-generated, no timestamps/speaker labels (~2087 lines)

---

## Topics

### 1. Zcash Orchard Vulnerability — Infinite Inflation Bug (L368-720)

- Zcash Orchard (newest privacy pool) had an undetectable infinite inflation bug discovered by the Zaddle/Zashi dev team
- Three people "froze the whole pool" via soft fork without public notice, then hard forked to "fix" it
- Post-mortem called it a "soundness bug" — hosts call this gaslighting; it's infinite inflation
- Turnstile mechanism: if someone exploited the bug, they can exit first while legitimate users get stuck — bank run dynamic
- "Billions of dollars" in the pool, Cake Wallet and third-party wallets still broken after hard fork
- "Zcash was never down" gaslighting from CEO of Zaddle (for-profit company)
- Contrast: Samurai/Tornado Cash devs get prosecuted; Zcash has VCs and US-based team → no issues
- "If Iran goes into this, what happens? They just tell three people to freeze the pool." (L445)
- Peter Todd: this is why Bitcoin devs resist adding ZK proofs at protocol level — too new, known edge cases
- Monero parallel: Odell claims there was an inflation bug on Monero in 2016-2017 that people were exploiting, told by "people we both know"

### 2. Trezor Safe 7 + TROPIC01 Chip Disclosure (L723-807)

- Ledger Don Jon team performed laser fault injection on Tropic01 open-source secure element in Trezor Safe 7
- Attack can extract subset of secrets; Tropic Square found method to extract one more affecting PIN functions
- **Funds are safe:** Trezor Safe 7 uses TWO secure elements (open-source Tropic01 + closed-source classic SE) — both must be compromised
- Requires physical device access + expensive laser equipment
- "Your funds are safe. This vulnerability cannot give an attacker access to your PIN." (Trevor statement)
- Odell impressed by build quality: "Super nice build quality... feels like quality in hand"
- Collaborative security culture: Trezor sent chip to Ledger competitors and said "break this"
- "Ledger Don Jon team is fucking awesome. Just trying to hack things." (Marty, L803)

### 3. CLARITY Act + Blockchain Association (L835-880)

- Blockchain Association published letter from 160+ current/former intelligence and law enforcement officials to Senate leadership supporting the Digital Asset Market Clarity Act
- Signatories include former FBI, Secret Service, DEA, IRS, DOJ personnel
- Law expands Bank Secrecy Act, AML, sanctions compliance to digital commodity brokers/dealers/exchanges
- Creates Treasury-led information sharing pilot with DOJ, FBI, DEA, private sector
- Establishes permanent inter-agency working group including Treasury, DOJ, DHS, FBI, DEA, IRS, Secret Service
- **Extends Section 311 of the Patriot Act to digital assets** — explicitly not named as Patriot Act in the bill
- "This is disgusting." (Marty, L898) / "We should be doing the exact opposite of all this." (L932)
- "KYC/AML is a facade for tax enforcement — it's all downstream of tax." (Odell, L913)

### 4. Treasury / OFAC Iran Crypto Sanctions (L511-540, L880-920)

- Treasury designated Iran's largest digital asset exchange for terror finance and sanctions evasion
- Besant claimed "over a billion dollars" seized — Odell says majority was USDT via Tether's freeze portal
- "Tether has a portal for the three-letter agencies to click a button and freeze Tether — incredibly clean UX" (Odell, L975)
- Some seizure through offensive cyber ops (hot wallets hacked)
- Iran has been mining and using Bitcoin for years — downward price action since war may partially be from Iran selling Bitcoin
- Bugle: "Gay treasury secretary Besant on Bitcoin: I see every bottom as an opportunity to go home" (L1007)

### 5. George Santos + Kalshi Insider Trading (L1223-1255)

- Former Congressman George Santos under DOJ investigation for insider trading on Kalshi
- Bet he wouldn't attend White House Correspondents' Dinner after publicly claiming he would, then "missed his flight"
- Kalshi detected the trade, froze his account, referred to CFTC and DOJ
- "Prediction markets benefit insiders on the trading aspect but benefit outsiders on understanding the world" (Odell, L1249)
- "If you bet on that and you're not George Santos, you're fucking retarded." (Marty, L1256)
- Santos response: "Well that's news to me" / "I'm not saying yes, I'm not saying no"

### 6. Polymarket Incorrect Ruling on Saylor/MSTR Market (L1273-1465)

- Polymarket incorrectly resolved "MicroStrategy sells Bitcoin by May 31" market as "No" despite Saylor selling 32 BTC on May 30
- One user lost $500K because majority of bet was placed after May 31 (after public info)
- Deep discussion of the **oracle problem**: "The oracle problem is unsolvable, but there's a spectrum of trade-offs" (Odell, L1360)
- Augur tried to solve it and failed; Polymarket/Kalshi just offload to UMA/whales
- "In the most generous interpretation, their platform is broken. In a less generous version, it's outright criminal." (Marty, L1300)
- DLCs with blinded oracles discussed as best potential solution (Odell, L1375)
- Prediction markets "shouldn't have bets after the event" — need cool-down periods
- 98-99% of markets settle correctly → but edge cases matter when you lose $500K
- Conspiracy theory: Polymarket had trades on the losing side of this market
- "We need that guy from the Pirate Bay — skinny, long beard, all the books — to build the prediction market." (Marty, L1425)

### 7. HRF Oslo Freedom Forum (L1471-1509)

- Human Rights Foundation event in Oslo this week; Ed (from team) reporting on the ground
- Juxtaposition: CLARITY Act expands surveillance while freedom fighters need privacy to stay safe
- HRF gets flack as an NGO but core focus on freedom tech is vital
- "Alex Gladstein and his team have done great work throughout the years" (Marty, L1508)
- 30+ talks expected to be uploaded over next week; Bitcoin + open-source AI track
- Odell noted HRF has pro-US bias but work is still important

### 8. Cashu — First On-Chain TEE Mint Tests (L1580-1700)

- Kalie announced: first on-chain Cashu mint running inside a TEE (Trusted Execution Environment)
- Mint keys generated entirely within the enclave, unknown to the operator
- **Operator cannot inflate e-cash supply and cannot access Bitcoin reserves**
- "We've moved from trusting operators to relying on hardware to force cryptographic guarantees." (Kalie quote via Odell)
- "This could be absolutely massive." (Odell, L1637)
- Cashu was always natively Lightning — this is on-chain, useful for larger amounts
- Trade-offs: (1) uptime — TEE mint could just go down forever (2) immutable code — if there's a bug, it stays forever, can't do what Zcash did
- "Bitcoin defaults to no change. That's a foundational element to the value prop of Bitcoin." (Odell, L1680)
- Lightning integration still requires human-operated Lightning node for gateway
- Considered complementary to existing trusted Cashu setups, not replacement

### 9. Software Releases Roundup (L1700-2030)

- **Core Lightning v26.06:** "Quantum resistant lightning channel" release name (likely a troll)
- **Alby Hub v1.22.2:** New AI/agents page, integrated on-chain wallet mode, custom user labels for transactions, redesigned settings
- **Sparrow Wallet 2.5.2:** Improved PSBT verification, warns on non-default SIG hash types, warns on non-zero output transactions, BIP375 verification support for pre-computed SP outputs
- **Nostr-vpn v4.0.48:** Android restores VPN from OS always-on VPN on boot/startup, macOS launcher icon padding fixes
- **Tails 7.8.1:** Emergency release — Linux kernel CVE-202643503 vulnerability (allows application in Tails to gain admin privileges). Odell: "If you use Tails, update ASAP." (L2040)

### Bonus: Anthropic Claude AGI Noise (L1835-1920)

- Anthropic internal data: Claude Opus averaged 3x code speedup, Mythos preview achieved 52x
- Success rate now 76% — 50-point jump in 6 months
- Engineers say Claude's code quality on par with human code
- Odell: This is fundraising noise before IPO (filed confidentially)
- "Our product is gonna kill everybody, give us money." (Marty, L1898)
- Dario Amodei (Anthropic CEO) is from the EA cult (same as SBF) — classic regulatory capture strategy
- Odell expects SpaceX, then OpenAI, then Anthropic IPO sequence

---

## Why This Matters

This episode captures Bitcoin in a transitional moment. The "orange tie" (institutional/corporate) era peaked and the community is pivoting back to cypherpunk fundamentals. Three themes dominate:

1. **Trust minimization is the core Bitcoin value prop** — demonstrated negatively by Zcash (three people freeze billions) and positively by Cashu TEE mints (hardware-enforced guarantees)
2. **Legislative surveillance is accelerating** — the CLARITY Act would bring Patriot Act powers to digital assets under the guise of "market structure" while the Blockchain Association (supposedly pro-crypto) facilitates it
3. **Prediction markets hit the oracle ceiling** — Polymarket's incorrect Saylor ruling shows the fundamental unsolved problem; the oracle problem may be the most important unsolved problem in crypto

The hosts are bearish on altcoins, cautiously optimistic on prediction markets, deeply skeptical of the policy direction in DC, and bullish on on-chain Bitcoin fundamentals + self-custody tooling.

---

## Connection to Existing Wiki Topics

| Topic Area | Wiki Section | Key Points to Link |
|-----------|-------------|-------------------|
| **Zcash / Altcoin Critique** | `privacy-tech` + `bitcoin-markets` (altcoin critique section) | Zcash as pump-and-dump, 3-person centralization, turnstile bank run risk, Monero parallel inflation bug |
| **Hardware Wallet Security** | `bitcoin-wallet-security` | Trezor Safe 7 dual-SE architecture, TROPIC01 laser attack, collaborative Ledger/Trezor security audit culture |
| **US Crypto Policy** | `US-policy` | CLARITY Act = Patriot Act for crypto, Blockchain Association 160 spook signatures, BSA/AML expansion, Treasury-Iran sanctions |
| **Geopolitics / Iran** | `geopolitics` via `bitcoin-markets` | Treasury action against Iran exchange, Besant seizure claims, Iran selling Bitcoin for war needs, Tether freeze capability |
| **Prediction Markets** | `prediction markets` | Santos Kalshi insider trading, Polymarket oracle failure on Saylor market, oracle problem unsolved, DLCs + blinded oracles as potential solution, Augur vs Polymarket history |
| **Human Rights / Privacy** | `bitcoin-pleb-values` + `human-rights` | HRF Oslo Freedom Forum, juxtaposition of financial surveillance vs freedom fighters, tax reform as privacy solution |
| **Chaumian eCash / Privacy Tech** | `privacy-tech` + `bitcoin-privacy` | Cashu TEE mint — trust-minimized on-chain e-cash, operator can't inflate supply or access reserves, hardware guarantees vs trusted operator model |
| **Bitcoin Software Releases** | `open-source` | Core Lightning v26.06, Alby Hub v1.22.2, Sparrow Wallet 2.5.2, Tails 7.8.1 (emergency kernel security fix) |
| **Nostr** | `nostr` | Nostr-vpn v4.0.48 release details |