u/chainglance_cm

There's a real fight happening in Congress right now over how staking rewards should even be taxed.

The current rule,as most of you probably know, is you get taxed twice. Once when you receive the reward (based on that day's price), and again when you sell it. 

The problem is if the price tanks after you receive it, you can end up owing more in tax than the tokens are even worth by the time you'd cash out. People call this "phantom income."

For those who don’t know, there's a bill (H.R. 9175) that would let stakers elect to defer that first tax hit for up to 5 years instead of paying immediately on receipt. Congress is still split on how to even think about it. 

Is a staking reward more like a paycheck (taxed the moment you get it) or more like something you created yourself, where the value only really matters once you cash it in?

No markup scheduled yet, but the Senate's apparently got a similar framework ready and might move on it this fall.

I don’t know how many of you remember but there was a well-known case around this exact debate (Jarrett v. United States). A Nashville couple staking Tezos argued their staking rewards shouldn't be taxed the moment they're created, using the same logic as a baker and a cake. You're not taxed on the cake when it comes out of the oven, only when you sell it. 

The IRS ended up offering them a refund before any court ruling actually happened, so the case got dismissed without ever settling the question.

Which analogy makes more sense to you, paycheck or self-created property?

Makes sense people are jumpy right now due to the recent Coldcard hack literally two weeks before this. "Hardware wallet" + "breach" in the same headline twice in one month makes it feel like one big pattern, but they're not related incidents at all, so worth actually understanding what's actually going on instead of panicking right off the bat.

It wasn't Trezor that got hacked, it was ShipMonk, the company that packs and ships their orders. About 13,700 customers who ordered between May and August had their name, email, phone, and home address exposed. A smaller group of about 1,900 had just name, city, and email leaked.

Your device, your seed phrase, your firmware, none of that touched. Trezor says no device, private key or wallet backup was affected, and that its systems were not compromised. Nobody can get into your wallet from this.

If you're on that list, someone now knows you own a hardware wallet and has your home address. That's still a bad thing btw. In no way am I downplaying that. But this is not the same thing as the coldcard hack or anything close to that.

If you got the notification email from Trezor, you're affected. If you didn't, you're not. No reason to panic about the device itself either way

Seeing a lot of people treat the Coldcard hack like proof hardware wallets in general aren't safe anymore. That's not really what happened.

Coldcard had a bug in how their firmware generated the random numbers used to create your seed phrase, and it sat there undetected for five years. A code change in March 2021 quietly swapped out the proper hardware randomness for a broken software substitute. That made some seeds way easier to guess than they should've been, and that's how funds got drained.

That's a Coldcard problem. A mistake in their code, not a flaw in the whole idea of hardware wallets as a category.

However, I'm not making the argument that it can't happen to other brands too. Any company can ship a bad update. But wallets that are fully open source, like Trezor or Blockstream Jade, tend to have way more independent people checking the code over time, which makes bugs like this less likely to slip through for years. Not a guarantee, just better odds. And this is how most tech usually evolves. Some things go wrong but that's how it becomes more robust and anti-fragile.

But I also understand that "that's just how tech evolves" doesn't help people who actually lost their money. Genuinely feel for everyone who lost years of savings over something totally out of their control though, that part really sucks and doesn't get fixed by any of this logic.

I'm wondering if scheduled rebalancing is even realistic for most people doing this solo, or if it's one of those things everyone agrees is best practice but almost nobody actually sticks to.

Like do you have an actual calendar reminder or a rule like "rebalance if any position drifts more than X%," or is it purely vibes based, like you glance at your positions when something feels off and adjust from there?

And for the people who do stick to a schedule, has it actually made a measurable difference, or does it just feel more disciplined without changing much?