Zero Crypto at Home: Bankless in the Age of Wrench Attacks and Phishing | Jameson Lopp and Beau
Zero Crypto at Home: Bankless in the Age of Wrench Attacks and Phishing | Jameson Lopp and Beau
73 days agoBankless
Podcast1 hr 42 min
Listen to Episode
Note: AI-generated summary based on third-party content. Not financial advice. Read more.
Quick Insights

**RocketPool's (RPL) Saturn upgrade introduces a fee switch, allowing RPL stakers to earn protocol revenue in ETH, creating a new yield opportunity. The upgrade also lowers the barrier for running an Ethereum validator to just 4 ETH, which could drive demand for both ETH staking and the RPL token. For any crypto holdings over $1,000, it is highly recommended to secure your assets from third-party risk by purchasing a hardware wallet from brands like Ledger or Trezor. For significant holdings, adopt a "Zero Crypto at Home" strategy using a multi-signature wallet to protect against physical threats. Investors who prioritize financial privacy should consider researching dedicated privacy coins like Monero (XMR) or Zcash (ZEC).

Detailed Analysis

RocketPool (RPL)

  • The podcast featured a sponsorship from RocketPool, a non-custodial staking provider for Ethereum.
  • They announced their Saturn upgrade, described as the biggest upgrade since the protocol's launch.
  • Key features of the upgrade mentioned:
    • RPL Fee Switch: This new feature allows users who stake RPL tokens to earn a share of the protocol's revenue, which is paid out in ETH.
    • 4 ETH Validators: The upgrade lowers the barrier to entry for running a node, allowing users to create validators with just 4 ETH (down from 8 or 16 ETH). This was scheduled to launch on February 18th.

Takeaways

  • The introduction of the RPL fee switch creates a new yield-generating opportunity for RPL token holders, potentially increasing the incentive to buy and stake the token.
  • The new 4 ETH mini-pools make it significantly more accessible for the average investor to become a node operator on the Ethereum network through RocketPool, which could drive more demand for both ETH staking and the RPL token.

Ethereum (ETH)

  • The discussion around RocketPool highlights a method for earning yield on ETH through non-custodial staking, meaning you retain control of your assets.
  • The primary context for ETH in the episode is security, particularly for those holding assets like NFTs on the Ethereum network.
  • Scammers often target ETH holders by tricking them into signing malicious smart contract approvals, which can drain their wallets of valuable assets.

Takeaways

  • Investors looking for yield on their ETH can consider non-custodial liquid staking solutions like RocketPool, which allow them to earn rewards without handing their assets over to a centralized third party.
  • The security risks on Ethereum are significant. The podcast strongly advises segregating funds into multiple wallets: a "hot wallet" with minimal funds for daily use and a "cold storage" hardware wallet for the majority of your holdings to protect against phishing and malware.

Bitcoin (BTC)

  • Bitcoin is mentioned as a primary example of an asset that users should self-custody to achieve financial sovereignty (the "Bitcoin way").
  • The discussion touches on the iBit (BlackRock Bitcoin ETF) as a convenient alternative to self-custody, but the speakers warn that it doesn't solve all problems.
  • A key risk mentioned is that even if you hold an ETF like IBIT, you could still be targeted in a physical "wrench attack" and forced to sell your ETF shares during market hours and then use the proceeds to buy and send crypto to the attacker.

Takeaways

  • The podcast advocates for holding BTC in a self-custody setup (like a multi-signature wallet) as the superior long-term strategy for security and control, despite the convenience of ETFs.
  • The "Zero Crypto at Home" strategy is presented as the gold standard for securing large amounts of BTC. This involves a multi-signature setup where the keys are geographically distributed (e.g., in different locations, some in bank safe deposit boxes), making it impossible for an attacker to force you to transfer funds from a single location.

Privacy Coins (Monero & Zcash)

  • The speakers discuss the difficulty of achieving true privacy on transparent blockchains like Bitcoin and Ethereum.
  • Monero (XMR) and Zcash (ZEC) are highlighted as cryptocurrencies with strong privacy features built-in at the protocol level.
  • The speakers suggest that for users who genuinely need strong privacy, using a network designed for it is a much better approach than trying to use mixers or other complex methods on a transparent chain.

Takeaways

  • Investors who prioritize financial privacy should research and consider dedicated privacy coins like Monero or Zcash.
  • The speakers caution that using mixers on transparent blockchains can be risky and may lead to compliance issues with exchanges or being wrongly associated with illicit activity.

Solana (SOL)

  • Solana was mentioned in the context of third-party risk.
  • The speakers cited an example from the last market cycle where the trading platform Robinhood allegedly force-sold customers' Solana tokens near the market bottom.

Takeaways

  • This serves as a cautionary tale about the dangers of holding your assets on custodial platforms. You are subject to the platform's decisions, which may not be in your best interest. This reinforces the podcast's main theme of self-custody.

Investment Theme: Security & Self-Custody

  • The core theme of the episode is that the biggest risk for crypto investors has always been trusted third parties (e.g., exchanges like FTX, custodians, or unaudited smart contracts).
  • The solution advocated is self-custody, but this comes with its own set of responsibilities, primarily protecting against digital phishing attacks and physical "wrench attacks."

Takeaways

  • Digital Security (Most Likely Threat):
    • Wallet Segregation: Do not keep all your assets in one wallet. Use a "hot wallet" (like a browser extension) for small, daily transactions and a "cold wallet" (hardware device) for long-term savings. An investment of $50-$100 in a hardware wallet from a reputable brand (Ledger, Trezor, BitBox) is highly recommended for anyone holding over $1,000 in crypto.
    • Password Managers & 2FA: Use a password manager and enable two-factor authentication (2FA) on all accounts. The gold standard for 2FA is a physical security key like a YubiKey, as it protects against phishing where SMS or authenticator app codes can be stolen.
  • Physical Security (Most Dangerous Threat):
    • Zero Crypto at Home: For significant holdings, implement a strategy where you cannot access your funds from your home. This is best achieved with a multi-signature (multisig) wallet where keys are stored in different, secure geographic locations (e.g., home, office, bank safe deposit box).
    • Services like Casa were mentioned as companies that help users set up these complex multi-signature security systems.
    • This strategy makes a physical "wrench attack" unsuccessful because you physically cannot access the funds under duress from a single location.
Ask about this postAnswers are grounded in this post's content.
Episode Description
Crypto’s newest threat isn’t a smart contract exploit, it’s a knock at your door. In this episode, Ryan sits down with Jameson Lopp (Casa) and Beau (former CIA, now safety at Pudgy Penguins) to map the real security landscape for crypto holders in 2026: the phishing traps you’ll see daily, the physical “wrench attacks” that terrify the community, and the practical systems that can make both dramatically less effective. If going bankless is about freedom, this is the playbook for keeping that freedom without turning into your own security team. --- 📣ROCKET POOL | PERMISSIONLESS STAKING https://bankless.cc/Rocketpool --- BANKLESS SPONSOR TOOLS: 🔮POLYMARKET | #1 PREDICTION MARKET https://bankless.cc/polymarket-podcast 🪐GALAXY | INSTITUTIONAL DIGITAL FINANCE https://bankless.cc/galaxy-podcast ⚡ EUPHORIA | REAL-TIME ONE-TAP TRADING https://bankless.cc/euphoria 🌐BRIX | EMERGING MARKET YIELD https://bankless.cc/brix 🏅BITGET TRADFI | TRADE GOLD WITH USDT https://bankless.cc/bitget 🎯THE DEFI REPORT | ONCHAIN INSIGHTS https://bankless.cc/TDRpro --- TIMESTAMPS 0:00 Intro 2:45 The 2026 threat landscape: third parties, privacy, then physical 8:07 Most likely vs most dangerous: phishing vs wrench attacks 17:23 Minimize attack surface + separate your money by risk 20:27 The “3-wallet” model: daily spend, risky ops, deep cold vault 25:08 Hot vs cold: the $1k rule + don’t sign when you’re not sharp 30:01 Social engineering defense: authenticate everything, trust nothing inbound 36:22 Password managers + the 2FA ladder (passkeys/YubiKeys win) 45:05 “Dedicated signing machine” and air-gapped thinking 47:30 Wrench attacks: how targets are found + what the attacks look like 52:50 Why France stands out (and what Dubai’s data shows) 57:37 “Zero Crypto at Home”: multisig + geography + time delays 1:12:27 Duress wallets: why they don’t reliably work 1:16:38 Home hardening checklist: cameras, lights, panic buttons, doors/windows 1:30:59 Onchain privacy reality + tax software pitfalls 1:37:40 Is this a setback for the Bankless vision? --- RESOURCES Jameson Lopp https://x.com/lopp https://casa.io/ Beau https://x.com/beausecurity https://beausecurity.substack.com/ RSA’s Article - Zero Crypto at Home https://x.com/RyanSAdams/status/2016572587363520933 --- Not financial or tax advice. See our investment disclosures here: https://www.bankless.com/disclosures
About Bankless
Bankless

Bankless

The Ultimate Guide to Crypto Finance. DeFi, NFTs, and cryptocurrencies. Level up. Go bankless.