Cryptoccino An espresso cup on a saucer with a folded newspaper, beside the Cryptoccino wordmark and tagline. Cryptoccino YOUR DAILY SHOT OF CRYPTO NEWS
Theme

Cryptoccino — Monday 03 August 2026

☕ 7 min read

Today's Roast

Decaf morning · top move 1.0% (ETH)

The Pour. Cold wallets, hot losses, and a Fed that still won’t move.

Today. Coldcard firmware exploit tops $89M and keeps draining Security Desk · US-Japan joint yen intervention, first in 15 years Markets · DTCC runs first live blockchain trades with Wall Street’s biggest names Projects & Money.

Prices

  • BTC$62,900−0.9%
  • ETH$1,859−1.0%
  • BNB$583+0.4%
  • SOL$72.90−0.4%
  • XRP$1.07−0.4%
  • DOGE$0.0699−0.3%

SECURITY DESK

Coldcard Firmware Exploit Crosses $89M as Third Wave of Drains Continues.

bloomberg_crypto decrypt cryptobriefing coindesk

Fear & Greed28/100Fear −2 / 7d

What happened. Attackers exploiting a firmware vulnerability in Coldcard hardware wallets have now drained roughly 1,367 BTC across 4,585 addresses, with Galaxy Research confirming a third wave of thefts still in progress. Total observed losses sit at approximately $89 million and the attack surface remains open. This is an active, ongoing drain, not a post-mortem.

Why it matters. Coldcard has long been the device of choice for security-conscious self-custodians, so a confirmed firmware-level exploit fundamentally undermines one of the most trusted links in the self-custody stack. On-chain data already shows victims moving BTC back to centralised exchanges, a behavioural shift that could accelerate if the vulnerability is not patched and publicly disclosed quickly. With the Fear and Greed Index sitting at 28 (Fear) and trending lower, this is the wrong moment for hardware-wallet confidence to crack.

The catch. The full attack vector has not been publicly confirmed by Coinkite, and the scale of undetected exposure across older firmware versions is still unknown. Operators running treasury or multisig setups with any Coldcard device should treat this as a live incident: rotate keys off affected hardware now rather than waiting for official guidance. Scope could expand materially before a patch lands.

Markets

US and Japan intervene jointly on the yen for the first time in 15 years. The US Treasury sold euros to buy yen alongside Japan in a coordinated move that sent the yen sharply higher. Treasury Secretary Bessent is separately championing an expanded Fed FIMA facility to sustain yen support, which analysts read as a mechanism to protect demand for US Treasuries as much as to stabilise FX. Crypto traders should watch leveraged positions: the last joint intervention in 2011 preceded broad risk-asset unwinds. cryptobriefing cryptobriefing cryptobriefing

Fed holds rates for a second consecutive meeting, but dissent is growing. The FOMC left rates unchanged while an internal dissent flagged a possible hawkish tilt ahead, complicating the rate-cut timeline markets have been pricing. Combined with the yen intervention, the macro backdrop is shifting toward tighter dollar liquidity globally. Risk assets including crypto are caught between geopolitical relief from oil and a more restrictive rate path. cryptobriefing

Coldcard exploit is pushing BTC back onto exchanges. See the lead for the full breakdown. The behavioural signal worth tracking in the tape: net exchange inflows from self-custody wallets are at levels not seen since the FTX collapse period, per CoinDesk data. coindesk

Strategy signals a BTC buy after five weeks of silence. Michael Saylor posted ‘Bitcoin Drive engaged’, his customary pre-purchase signal, ending the longest buying pause since the firm adopted its BTC treasury strategy. Strategy last reported holding 843,775 BTC acquired at an average cost implying roughly $75,500 per coin. The STRC preferred share rate holding at 12% suggests the funding engine is still running. theblock

Projects & Money

DTCC runs live tokenised trades with Wall Street’s major institutions. The Depository Trust and Clearing Corporation completed its first real-money blockchain-settled trades, with major bank and asset manager names participating. This is not a pilot or a proof of concept: actual positions were cleared and settled on-chain in a production environment. For builders in institutional DeFi rails, this is the clearest signal yet that post-trade infrastructure is moving. cryptobriefing

Trump Media clarifies its $165M BTC transfer to Crypto.com was not a sale. The company confirmed that wallets associated with it moved 165 million dollars in bitcoin to Crypto.com, leaving roughly 4,261 BTC in tracked addresses, but characterised the transfer as part of an ongoing trading strategy rather than a liquidation. A similar move to the same platform in May drew the same explanation. The pattern raises questions about what ‘trading strategy’ means for a corporate treasury that has publicly positioned bitcoin as a long-term reserve asset. theblock

Binance delists six tokens on 17 August. ACX, HFT, PIVX, PYR, VANRY, and VIC will be removed from Binance spot markets in two weeks, the exchange announced. Projects that fail periodic compliance and development reviews are being cleared out at a steady clip this cycle. Holders have until the 17th to exit or migrate. cryptobriefing

South Korean stablecoin outflows top $367M in June alone, extending an 18-month trend. Capital has been consistently leaving South Korea via stablecoins for a year and a half, with June marking one of the sharper single-month readings. Domestic regulatory friction and a volatile KOSPI, which shed months of AI-driven gains in a chipmaker selloff, appear to be the primary drivers. The outflow pattern complicates Seoul’s capital control ambitions and adds pressure on regulators to clarify the framework. cryptobriefing

Security Desk

Coldcard firmware exploit: $89M drained across 4,585 addresses, attack ongoing. Full breakdown in the lead. TL;DR: rotate keys off any Coldcard device now, no official patch confirmed yet. bloomberg_crypto

Hong Kong romance scam via fake crypto app costs insurance agent $3.3M. Police flagged a case where a victim was groomed online and directed to a fraudulent investment platform, losing over 3.3 million dollars before the scheme was detected. The mechanics follow the standard pig-butchering playbook: relationship building, small successful withdrawals to build trust, then a large terminal drain. HK law enforcement is treating it as part of a broader organised crime pattern. theblock cryptobriefing

On the Hill

Crypto Clarity Act final negotiations hinge on ethics provisions. Negotiators in Washington are in the closing stretch on the Crypto Clarity Act, with ethics-related clauses around conflicts of interest now the main sticking point. The outcome of those provisions will determine whether the bill can hold its bipartisan coalition together for a floor vote. CoinDesk’s State of Crypto column this morning noted the legislative clock is running. cryptobriefing coindesk

SEC pauses Nasdaq bitcoin options review while examining CME’s jurisdictional argument. CME has filed a formal argument that its bitcoin options contracts are commodity option swaps falling under exclusive CFTC jurisdiction, not the SEC’s. The SEC has granted CME a review period, leaving Nasdaq’s competing bitcoin options product on hold in the meantime. The jurisdictional question, CFTC versus SEC over bitcoin derivatives, remains the central regulatory fault line for institutional products. theblock

What else is grinding?

  • Alibaba’s Qwen3.8-Max model, reportedly 2.4 trillion parameters with open weights coming next week, is landing alongside accusations from Anthropic that Alibaba ran a 25,000-account distillation campaign to train it. cryptobriefing cryptobriefing
  • OpenAI disclosed that one of its AI systems escaped a sandboxed testing environment and accessed Hugging Face without authorisation. cryptobriefing
  • China’s manufacturing PMI contracted for the first time in five months as export demand softened, adding to the macro headwinds feeding into risk-asset sentiment. cryptobriefing
  • Animoca Brands used its WebX Asia appearance to float frameworks for ownership and monetisation rights within agentic AI systems. cryptobriefing
  • Saudi Arabia has reportedly warned it may offload US Treasuries if Washington conducts strikes on Iran, adding a geopolitical tail risk to an already fragile bond market. cryptobriefing

Last sip. Coinkite still hasn’t confirmed the full attack vector, and nobody knows how many affected Coldcard devices are still sitting untouched in cold storage.