Private Keys: Crypto’s Original Sin, with Griff Green

Griff Green is back, about six months after his first appearance, and this time Jade and co-host Stefan Beyer get him talking about communal security and where TheDAO Security Fund has got to. Griff runs the fund, founded Giveth and DappNode, led the original DAO white-hat cleanup, and sits on the Arbitrum and ENS Security Councils. The line that sticks from this one: private keys are crypto’s original sin. Griff doesn’t hold back on it. It’s 2026, everyone’s been hacked, and the way we still onboard a new person is a raw private key and twelve seed words, where one bad click and it’s all gone. No bank works like that, because nobody would want it to. What he wants instead is vaults, smart-contract wallets, MPC setups like Turnkey (which Giveth now uses), things with daily limits, allowlists and an escape hatch if you get hacked. Non-custodial, but actually safe. He argues crypto could even be safer than a bank, because it can get rid of custodial risk entirely. First though, the fund. Round one handed out over $1.6M to 135 projects through quadratic funding, and the big lesson was how many people wanted to chip in for security, and how much they left on the table simply because they didn’t give themselves enough lead time to fundraise. So round two is built differently. Funding comes out against milestones, at least a third of every budget is tied to actual adoption, and an initiative has to raise 25% from the community before it can touch the DAO’s ~400 ETH. Then 200 Ethereum security badge holders vote on what gets funded using participatory budgeting (Stefan, to Griff’s disbelief, didn’t make the badge-holder cut). The whole design is about beating the free-rider problem: only fund the things the community actually puts money behind. The initiatives range from a privacy-preserving EDR tool to a service that screens job applicants for North Korean operatives. Then they get into the pound of cure. Griff walks through the KelpDAO exploit, how a LayerZero/RSETH issue let likely North Korean attackers borrow around $71M against duplicated collateral on Arbitrum, and how the Arbitrum Security Council stepped in with an L1 transaction to freeze it. He can’t discuss the internal debate (there’s an NDA), but he’s completely open about where he stands: on “code is law” versus stepping in, he’s an extremist, if you can stop North Korea walking off with $71M, you do it, every time. From there it widens out into the legal headaches that followed, why hackers now bridge funds off-chain to dodge exactly this kind of freeze, and a genuinely sobering stretch on how crypto’s weak security ends up funding real-world harm, from state actors to the scam compounds operating across Southeast Asia. Key Topics TheDAO Security Fund round two: milestone funding, co-funding as a filter, and badge-holder voting The KelpDAO exploit, the Arbitrum Security Council freeze, and “code is law” versus intervention Why private keys are crypto’s original sin, and the case for vaults and smart-contract wallets Chapters 00:00 Introduction and Welcoming Griff Back 01:03 Griff’s Origin Story: The DAO, Giveth, and DappNode 04:11 TheDAO Security Fund: From the 2016 Cleanup to Today 07:21 Staking Rewards, Not Principal: How the Fund Works 09:51 Round One in Review: $1.6M, 135 Projects, and the Appetite to Fund Security 11:16 Why Round Two Is Different: Lead Time and Leaving Money on the Table 14:37 Solving the Free-Rider Problem: Co-Funding as a Filter 16:52 Adoption Milestones and Starting Small Businesses, Not Just Tools 21:05 How Initiatives Are Ranked: 200 Badge Holders and Participatory Budgeting 26:27 Real-Time Results and Leaning Into Community Signal 31:43 How to Get Involved 41:44 Shared Infrastructure: Why One Team’s Weakness Hits Everyone 43:05 The KelpDAO Exploit and the Arbitrum Security Council Freeze 49:19 The Legal Challenge and the Wider Impact of Intervention 53:03 Where Griff Draws the Line on Intervention 56:16 Is Crypto a Net Positive? Scam Compounds and Funding Atrocities 01:00:38 The Most Underfunded Security Issue: Wallets 01:04:32 Beyond the EOA: Vaults, Turnkey, and Smart-Contract Wallets 01:07:16 Hardware Wallets, Ledger Spyware, and Why Vaults Still Win Resources and Links Griff’s first episode: https://www.podbean.com/ep/pb-fzeke-1a801d4  Griff on X: https://x.com/griffgreen TheDAO Security Fund: https://initiatives.thedao.fund SEAL 911 (Telegram): @seal\_911\_bot Oak Security’s Research: https://research.oaksecurity.io/