HR Locked the Vault: The Six Weeks an Office Cup Pool Went Dark
Photo: Syced, CC BY-SA 4.0, via Wikimedia Commons
Every office Cup pool has a boss. Not the boss of the company — the boss of the pool. The person who collects entries, keeps the spreadsheet, and — in the crypto era — holds the wallet.
At one Fortune 500 company we'll call Meridian Logistics, that person was the HR director. And for six weeks after the Cup final, roughly $18,000 in a prize pool sat in a wallet nobody else could touch.
The Setup: One Wallet to Rule the Bracket
The pool worked like most modern office pools do. Employees sent their bracket entries in with a Lightning or stablecoin payment, the admin wallet aggregated everything, and payouts were supposed to fire automatically once the final was settled. Clean, fast, no chasing Dave from accounting for twenty bucks in cash.
The problem is that "clean and fast" only works when the person holding the keys is reachable, solvent, and on good terms with the outcome.
Meridian's HR director ran the pool from a personal wallet. Single signature. No co-signers. No documentation beyond a sticky note. When her bracket — which had picked an underdog run that collapsed in the semifinals — lost, she also happened to be starting a previously scheduled six-week medical leave.
The pool didn't just pause. It effectively ceased to exist. The money was there, on-chain, visible to every participant who knew the address. Nobody could move it.
The Slack Meltdown
What followed is now legend in the company's internal Slack. The #cup-pool channel went from celebration memes to a slow-burning investigation thread. Someone posted the wallet address. Someone else ran the balance. Then came the realization that the only human being with the keys was out of office with an auto-reply that gave no return date.
Legal got looped in. Then compliance. Then, eventually, someone asked the question that should have been asked in March: why does one person in HR personally custody the company's entire prediction pool?
The answer, of course, is convenience. Single-signature wallets are how everyone starts. They're how tailgate pools run and how bar bets settle. But an office-wide pool with 300 entrants and five figures in it isn't a tailgate. It's a de facto company benefits program, and it was being run like a fantasy football spreadsheet.
What Six Weeks of Darkness Teaches
Meridian's pool eventually resolved. The HR director returned, signed the transaction, and the payouts went out with a company-issued apology and a fruit basket's worth of goodwill damage. But the postmortem produced something genuinely useful: a playbook that other office pools are already copying.
Multi-sig or it doesn't happen. The new rule at Meridian is that any pool over a threshold — they settled on $500 — must use a 2-of-3 multisig setup. Three custodians: one from HR, one from a volunteer employee, one from finance. No single person can move funds, and no single person's absence can freeze them.
The admin can't play — or can't win. Several pools have adopted a stricter version: whoever holds the keys sits out the bracket entirely. It removes even the appearance of self-dealing. Others allow the admin to play but cap their maximum payout. Either way, the incentive question gets answered before the first entry comes in.
Publish the address on day one. Transparency doesn't stop at multisig. The best-run pools now post the wallet address in the pool announcement, along with the rules, the payout schedule, and what happens if a custodian goes dark. Everyone can watch the balance. Nobody has to take anyone's word.
Write down the recovery plan. Meridian's sticky note is gone. In its place: a one-page document, stored with two other custodians, that spells out exactly how funds are recovered if a key holder becomes unavailable. It reads like an IT disaster recovery plan, because that's exactly what it is.
The Power Nobody Talked About
Here's the part that deserves more attention than the technical fix. When one person controls the ledger, they control the social temperature of the entire office for the length of the tournament. Late entries get approved or denied at their discretion. Disputed picks get ruled on by the person holding the money. And when that person loses their own bracket — as Meridian's HR director did — the temptation to slow-walk payouts, re-check tiebreakers, or simply go quiet becomes very real.
None of this requires malice. It just requires humanity. Which is precisely why the fix has to be structural, not personal.
The Cup Pool Grows Up
There's something fitting about the fact that office prediction pools — the most casual corner of Cup culture — are now pioneering custody practices that some crypto funds would do well to study. The stakes are smaller, but the lessons are identical: shared control beats personal trust, transparency beats vibes, and a recovery plan beats a sticky note.
The Cup comes around every few years. The pool your company runs this summer will be remembered a lot longer if it pays out on time. Get the keys out of one person's pocket — especially if that pocket belongs to HR.
