First sip

The Drift Protocol hack made a lot of noise. Not because it was some wild code exploit. It was how much of the damage came from patient social engineering, blind signing and a setup that gave too much power to too few people. A two-of-five multisig is already hard to explain after $280 million disappears. Add in Solana's pre-signed transactions setup allowing it to be weaponized, and it starts to feel less like bad luck and more like a system that was easier to manipulate than people wanted to believe.

The OpenAI and TBPN story pulled on a different thread. TBPN went from the ground floor to one of the fastest-growing media brands around. OpenAI clearly saw the value in getting closer to that engine. Not just the audience, but the team’s ability to frame the conversation, explain the product and stay in the middle of the AI discourse while the whole space keeps speeding up.

The point: one story was about weak control getting exposed. The other was about strong distribution getting valued.

Watch next: Drift was not really a code exploit story. It was a story about control and how badly the setup failed.

In this episode you will get

  • Why a two-of-five multisig became the question everyone kept coming back to

  • How blind signing and social engineering helped turn a routine setup into a $280M disaster

  • Why durable nonces turned signed transactions into a delayed weapon

  • What the hack revealed about protocol security and who users are really trusting

Action Box

  • Do: Ask who actually has control before you trust the product with size.

  • Check: Whether the real risk is in the code or in the people, permissions and setup behind it.

  • Watch: Which teams are getting better at shaping the story around their product, especially when the stakes get higher.

☕ Quick sip

Login or Subscribe to participate

This week on Coffee with Captain

  • Drift exposed how ugly crypto security can still look once too much power sits with too few people. The story got worse the more detail came out. A two-of-five multisig already looked thin after $280 million disappeared. Add in patient social engineering, blind signing and pre-signed transactions getting weaponized. It sounded like a setup people were too comfortable with.

  • OpenAI’s reported TBPN deal showed how valuable narrative control has become. TBPN went from the ground floor to one of the fastest-growing media brands around, and OpenAI clearly saw value in getting closer to that engine. Not just the audience, but the ability to frame the conversation, explain the product and stay in the middle of the discourse while AI keeps speeding up.

  • The smaller stories looked better when they felt a little more real. Community value made more sense when it came with actual access. Rewards looked better when they gave people something tangible instead of another system to game. The closer crypto got to something a real person could actually use, the better it looked.

Partner Offers

Doma

Going to Doma? Use code CWC to get your ticket.

Awaken Tax

Need crypto tax help? Use code returncoffee50 or coffee50 with Awaken Tax.

2026 Web3 Conference Calendar is live.

Dates and locations we’re tracking so you can plan travel and time launches.
Bookmark it here: 2026 Web3 Conference Schedule
Got an event we missed? Reply and we’ll add it.

PS: If there’s a conference not on the calendar, send us an email and we’ll check it out!

DISCLAIMER: This newsletter is for educational purposes only and does not constitute financial or investment advice. Make any investment decisions with a qualified professional. I may hold digital assets referenced here.

Keep Reading