S.10 Ep.11 $170M to Fix Ethereum Security (After Another Major Hack) with Griff Green

The gist

Griff Green, cofounder of Giveth and member of the Arbitrum Security Council, discusses the newly launched DAO Security Fund—a $170M+ initiative funded by staking yields from recovered DAO tokens—designed to coordinate Ethereum's fragmented security efforts into a unified public good. The episode also covers the recent KelpDAO/Layer Zero hack attributed to North Korea and the unprecedented emergency response where the Arbitrum Security Council recovered $70M in stolen funds, setting major precedents for decentralized governance under pressure.

Key takeaways

• The DAO Security Fund mechanism: Generates ~$5M annually (4 ETH/day) from staking 74,000 ETH in recovered DAO tokens, governed by a 7-person multisig including Vitalik, Taylor Monahan, and the founder of C11 (white hat group), with quarterly rotating funding experiments beyond quadratic funding.

• The KelpDAO hack details: A North Korea-linked attacker exploited a Layer Zero bridge validator to steal RSETH (EigenLayer-staked ETH), then liquidated it across Aave pools on mainnet and L2s, leaving $70M on Arbitrum while attempting further exploits—the delay enabled recovery.

• The emergency response precedent: The Arbitrum Security Council's 9-of-12 vote used emergency powers (normally reserved for constitutional violations) to force-include the stolen funds into a zero-address contract, creating a three-DAO problem (Arbitrum, Aave, KelpDAO) for redistribution decisions.

• Security as misaligned incentives: White hat bounties ($50K-$100K) grossly undercompensate compared to black hat payoffs ($300M+ per hack), explaining the proliferation of exploits; the fund aims to realign incentives through coordinated, large-scale security investment.

• The Giveth QF round specs: Starts Thursday (3 weeks, closing April 30), requires projects to have 1+ month of public open-source contributions; expert badge holders (200 security professionals) receive $100 anonymous ETH with 4x voting power to minimize political donation bias.

• Security as public good scalability: Individual protocol self-defense (Uniswap's walled security) is economically inefficient; coordination on Ethereum-wide security reduces total spending while improving outcomes—analogous to city-wide police being cheaper than individual home security.

• AI acceleration of Lindy effects: Post-Mythic/Claude, time compounds security "Lindiness" faster because AI can hack-test-iterate continuously; legacy code survives not from neglect but from active maintenance and rapid security patching (critical updates almost daily).

• Normal user adoption blocker: Crypto remains an "echo chamber" unsafe for non-technical people; solving security + UX is prerequisite for regen funding to reach real-world problems, but long-term bullish on cryptoeconomic tooling solving public goods market failures.

Notable quotes

"Show me the incentives, and I'll show you the outcome. Right now, black hats get $300,000,000. If a white hat does it, they get 50k or nothing sometimes." — Griff Green

"It's not safe. It's like building a one-lane road on the side of the cliff, and dude, it's reinforced. It'll never fall. But if two cars come, there's no guardrail." — Griff Green, on Ethereum's current security posture vs. PayPal

"Don't listen to the Fudders. Look at people's accounts. Who follows these guys?" — Griff Green, on social media manipulation surrounding the Arbitrum recovery

Worth a full listen?

Listen to the full episode if you're building Ethereum security infrastructure, involved in DeFi governance, or want deep context on the North Korea hack response and how decentralized emergency coordination actually works under real pressure; the TLDR captures the structural insights but misses the philosophical framing on public goods and DAO coordination theory that makes Griff's approach distinctive.