đ„ FTX Bets Big đ€ + Coinbase has a massive bug đ
- Writer Milk Man
- February 22, 2022
- âą3 Min Read


GM, this is the Milk Road. The email that makes you smarter about crypto.Â
Itâs Tuesday morning. Grab a pop tart and dive in:Â
- đź FTX bets big on crypto gaming
- đ Coinbase has a massive bug, only pays the guy who found it $250K?!
- đž Spotify going web3!
- đ A DAO is trying to buy the Denver Broncos

FTX bets big on crypto gaming
FTX is on fire right now:Â
- $750M in revenue, $350M in profit last year
- The founder is worth $22B+Â
- Had a great Super Bowl commercial with Larry David
And now - they announced âFTX-as-a-Serviceâ for gaming companies. Basically, if youâre a game, and you want to launch NFTs, Tokens, Wallets etc.. into your game - you can license FTX and use it inside your game.
Why do gaming companies want to incorporate NFTs and tokens into their games?Â
Because they love their community.
Wait no, thatâs not right.Â
Because itâs going to make a gigantic boatload of money for them.Â
The entire gaming industry watched Axie Infinity the way James Harden watches gogo dancers⊠with great interest.Â
Axie generated over $2 BILLION in revenue last year as the first hit âcrypto game.â
According to the game maker (Sky Mavis), they were at ~3M daily active players a few months ago:

The game made its own âsidechainâ of Ethereum called Ronin. And Ronin has now seen over $4B in sales volume, second only to ETH (and most of that was from Axie Infinity).

Crypto Gaming is going to be a big theme over the next few years and Iâve got my eye on it.Â

Coinbase, ya cheap bastard
This is a crazy story of a generous hacker and a cheap multi-billion dollar company.Â
So our hero is âTree of Alpha.âÂ
He found a bug in Coinbaseâs code that could have wrecked the crypto market.Â
Did he use the bug for personal profit? No. He is whatâs known as a âwhite hat hackerâ. Someone who finds vulnerabilities in the code, but instead of robbing the bank, they tap the bank manager on the shoulder and tell them how they can get robbed.Â
So hereâs how it went down. I was on Twitter, and saw this tweet:

At first, I thought maybe it was just someone looking for attention. But then - I noticed it start to get some momentum. People started pinging people and until they got in touch with the CEO of Coinbase.Â
It turns out - that he wasnât lying.Â
He found a bug in the Coinbase code that let him trade 50 SHIB coins (worth less than 1 penny) for 50 Bitcoin (worth $2M). If he wanted to, he could have used this bug over and over again to pay himself tens or hundreds of millions - while creating panic in the crypto market and ruining Coinbaseâs strong reputation for safety.Â
Well, no harm done right?Â
Guy found an exploit. He told Coinbase. They paused trading and fixed it. No harm done, right? Whatâs the problem?Â
The problem is that they rewarded the guy with their âbiggest bounty everâ... $250k. $250k!?
Cobie said it best. The guy found an infinite money glitch in Coinbase, and properly reported itâŠand got paid less than a junior engineer salary at Coinbase?!

Insane. They spent $13M on a Super Bowl ad, and only $250k bug bounty for an exploit this big? Whoâs running the budget over there?! Itâs like starting a diet while in line at a buffet. Just makes no sense.Â
I googled to see if they came out explaining (or defending) the low bounty, and instead just found that ALL exchanges have piss-poor bug bounties. Hereâs their stated maximums:
- FTX - $2,000 max bounty
- Blockfi - $3,000 max bounty (they manage $10B in assets)Â
- BitGo - $20,000 max bounty (custody billions in assets)Â
- Coinbase - $50,000 max bountyÂ
Not only is this cheap, itâs stupid.Â
Low bounty == no incentive to report == more people just hacking you.

In comparison, DeFi protocols have paid out multiple bounties in the millions, as high as $10M already. Itâs like a street hustler having better safety protocols than the Nasdaq.Â
Fortunately, the companies at least acknowledged the shortcomings and said they would look into it.

Do better Coinbase! Do better!Â

Spotify getting into crypto?
Hereâs an easy hack to figuring out a company's strategy - watch their job board and what they're hiring.Â
Two weeks ago, Spotify posted a job listing on LinkedIn for a job to âto uncover the next growth opportunity leveraging new technologies, like Web3.â
Hmm.. Spotify. What could they do? Maybe musicians will do NFT drops of songs inside the app?Â
Dear Spotify PM, would you like to make more money? Can you write the letters N-F-T inside this email?


Today's Milk Road is brought to you by LEXÂ đą
What they do: make it easy to invest in real estate
Pop quizâŠÂ
What asset class has created more millionaires than any other?Â
Answer: Real estate.Â
Todayâs sponsor, LEX, has a really cool angle for investing in real estate.Â
LEX does an âIPOâ for a building, so you can directly invest in marquee commercial real estate.You can build a portfolio of buildings you want to invest in. Each building has a ticker, just like stocks.Â
As a shareholder, you can get paid dividends flowing from the rent paid by the tenants. You can also earn tax advantaged passive income and trade without lockups.
Check out LEXâs live assets in New York City and upcoming IPO in Seattle.Â
Sign up for free here and get a $50 bonus when you deposit at least $500.

We're all gonna buy a $4B NFL Team?
On February 1st, the Denver Broncos went up for sale.Â
On the same day, a player on the Broncos (Kicker Brandon McManus) tweeted out the idea of creating a DAO to buy the team.

And followed it up with this:

Now, the Twitter account and website are up.
A few reasons why it probably wonât happen:Â
1/ Itâs really hard to raise $4 Billion Dollars
2/ The league has rules against this (eg. the NBA just now started to let private equity groups buy teams)Â
3/ Did I mention theyâd need to raise $4B dollars?Â
Bold prediction. This WILL happen someday (just not yet).
Why shouldnât teams be owned by their fans, instead of 1 billionaire? Wouldnât that be more fun?
There are several projects trying to do this. KrauseHouse is trying to buy an NBA team. WAGMI United is trying to buy a low level English soccer team.
Itâs going to happen. Write it down!Â

That's all for today!
Shaan Tree of Alpha's a Hero" Puri and Ben "That Broncos Kicker is a Hero" Levy

What'd you think of today's email?
Vitalik gave us a week's worth of photos at ETHDenver đ đ

Get smarter about crypto
Join 250,000+ subscribers and get our 5 min daily newsletter on what matters in crypto.