Cryptoccino — Wednesday 05 August 2026
☕ 8 min read
Today's Roast
Decaf morning · top move 1.3% (BNB)
The Pour. Legislation stalls, wallets bleed, and the institutions keep quietly rewiring the plumbing.
Today. Coldcard losses near $130M and the exploit is still running Security Desk · BlackRock tokenizes $311B of European money market funds on Ethereum Projects & Money · Clarity Act hits a wall with Senate Democrats threatening to block cloture On the Hill.
Prices
- BTC$64,092+0.6%
- ETH$1,866+0.1%
- BNB$598+1.3%
- SOL$73.60−0.1%
- XRP$1.07−0.9%
- DOGE$0.0698−0.9%
SECURITY DESK
Coldcard Exploit Passes $130M as Phishing Wave Piles On Top of the Hardware Flaw
theblock coindesk decrypt decrypt cryptobriefing
What happened. Galaxy Research puts estimated losses from the Coldcard firmware vulnerability at roughly $130 million, with a fourth wave of fund sweeps still unconfirmed at time of writing. Coldcard itself is urging all affected users to move bitcoin immediately, while OKX reports record inflows to centralised exchanges as self-custody holders flee. The root issue is an entropy flaw in key generation: keys produced under certain firmware conditions are weak enough to brute-force.
Why it matters. This is the largest hardware-wallet exploit on record, and it is still active. The secondary damage is a phishing surge: fake ‘coordinated hardware audit’ emails are directing users to a cloned Coldcard site that installs remote-access software, meaning victims of the original flaw face a second attack vector if they go looking for help. With the Fear & Greed Index sitting at 27 (Fear), a sustained, unresolved security incident is exactly the kind of narrative that lengthens bearish sentiment.
The catch. Ledger’s CTO used the moment to argue that certified hardware randomness and AI-adaptive security are now table stakes, which is true but also convenient marketing. Separately, Boltz Bridge shut down swap services indefinitely, citing AI-powered vulnerability discovery outpacing its patch cadence — a separate incident that signals a broader shift in the attacker toolkit. Operators running any self-custody infrastructure should audit entropy sources and RNG implementations now, not after the next sweep.

Bitcoin holds near $64,000 despite the noise. Traders shrugged off the Coldcard fallout and Strategy’s $104 million BTC sale last week, with price recovering toward $64,000 as risk assets broadly caught a bid on Iran deal optimism. Glassnode flags the $63,000 zone as the key demand battleground; a clean hold there keeps the structure intact. See Security Desk for the Coldcard detail driving the OKX inflow spike.
coindeskcoindesk
Wall Street is quietly becoming the dominant Bitcoin market force. Bloomberg’s analysis finds hedge funds and asset managers have effectively replaced retail as the price-setting cohort during the current bear phase, a structural shift that reduces vol but also compresses the reflexive upside that retail FOMO used to provide. Intesa Sanpaolo’s 13F underscores the rotation: the Italian bank slashed its IBIT stake by 94% in Q2 while tripling its ether ETF position.
bloomberg_cryptocoindesk
Hashdex closes the first US spot Bitcoin ETF to shutter. The Brazil-based manager is liquidating its US spot BTC fund later this month after failing to build a meaningful asset base, becoming the first casualty of the post-January 2024 ETF cohort. The closure reflects how completely BlackRock and Fidelity have hoovered up available flows, leaving smaller issuers with structurally unviable cost bases.
decryptcoindesk
A 40x short on 1,600 BTC opened via Hyperliquid. Someone placed a leveraged short equivalent to roughly $100 million notional on Hyperliquid, a position large enough to matter if price accelerates toward resistance. High-conviction directional bets at this size tend to act as magnets for liquidation cascades in either direction.
cryptobriefing

BlackRock puts $311 billion of European money market funds on Ethereum. BlackRock launched tokenised share classes for select European cash management funds via JPMorgan’s Kinexys settlement layer, restricting access to professional investors for now. This is the largest single AUM figure brought on-chain by a traditional asset manager to date, and it runs on public Ethereum rather than a permissioned sidechain. Wells Fargo separately announced tokenised deposits for 24/7 corporate payments, continuing the week’s theme of TradFi settlement rails moving on-chain.
theblockcoindeskdecryptcoindesk
BitGo migrates $7.4 billion of WBTC from LayerZero to Chainlink CCIP. The move pushes the cumulative LayerZero-to-Chainlink migration tally to nearly $15 billion, with WBTC representing the single largest transfer in the exodus. The shift reflects growing institutional preference for Chainlink’s oracle and cross-chain infrastructure over LayerZero’s messaging layer for high-value bridging.
theblockcoindesk
Polymarket eyes a $20 billion valuation as the prediction market field crowds. The platform is in fundraising conversations at a valuation roughly double its last reported figure, betting that regulatory momentum and the addition of competitors validates rather than dilutes the category. A CFTC motion to halt enforcement against rival Kalshi was denied by a New York judge, keeping that legal overhang in place and leaving the sector’s federal status unresolved.
coindeskcointelegraph_regulation
BNY adds staking to its digital asset custody platform. America’s oldest bank will let institutional clients stake crypto assets directly through its custody infrastructure, removing the need for a separate staking provider. The timing aligns with Ethereum’s staking ratio hitting an all-time high of 34.4%, up from 30% earlier this year, as yield-seeking institutions deepen on-chain exposure.
coindeskcryptobriefing

Coldcard: full detail in today’s lead. Losses estimated at $130 million and rising, exploit still active, phishing campaign running in parallel. See the lead for operator action items.
theblock
Boltz Bridge suspends swaps indefinitely after AI-accelerated bug discovery. The non-custodial Bitcoin swap service shut down after its team found attackers were identifying and exploiting vulnerabilities faster than patches could ship, attributing the acceleration to AI-assisted fuzzing. No losses figure disclosed; the shutdown is precautionary but indefinite.
decryptcryptobriefing
Three Missouri men charged over alleged Bitcoin home-invasion plot. Federal charges allege the group conspired to rob a Bitcoin holder at their home; all three have pleaded not guilty to conspiracy to interfere with commerce by robbery. Physical-security threats against known crypto holders are becoming a regular feature of the docket.
theblock
London crypto kidnapping case ends in five convictions. A UK court convicted five individuals for imprisoning and torturing two crypto millionaires, with two also found guilty of conspiracy to blackmail. Prosecutors secured convictions without either victim testifying.
decrypt

Senate Democrats plan to block Clarity Act cloture as the recess clock ticks. Democrats say negotiations have stalled and are threatening to deny the procedural vote needed to advance the market structure bill, which has a roughly three-day window before Congress enters a month-long recess. Bitwise CIO Matt Hougan is publicly downplaying the risk, arguing the industry will be fine even if this cycle fails, though a delay resets the legislative calendar significantly.
cryptobriefingtheblockcoindesk
Warren and Blumenthal call on the SEC to investigate Trump’s memecoin. The senators sent a formal request to the regulator asking it to probe whether the president’s memecoin constitutes an unregistered security, tying the ethics question directly to the Clarity Act impasse. An anonymous group is simultaneously running Washington ad buys attacking the crypto industry, source unknown.
theblockcoindesk
US and UK reaffirm joint support for stablecoins and tokenisation. A July meeting between regulators from both countries highlighted GENIUS Act implementation, payment modernisation, and cross-border oversight coordination as shared priorities. The joint framing matters for firms seeking regulatory equivalence across jurisdictions.
cointelegraph_regulation
Tribal gaming lobby pushes to add sports betting fence to the Clarity Act. Senators aligned with tribal gaming interests want a provision keeping sports wagering under state jurisdiction inserted into the Clarity bill, using the prediction markets debate as a wedge. The addition would complicate passage further and hands the CFTC-versus-states dispute another legislative venue to play out.
theblock
What else is grinding?
- Cloudflare has begun rolling out stablecoin wallet handles so AI agents can pay for APIs and online content directly, with funding features coming later.
theblock - Ethereum researchers have proposed EIP-8361, which would burn a rising share of validator rewards as the staking ratio climbs past 50%, aiming to cap stake concentration.
theblock - A new Solana governance proposal would raise daily SOL burns more than tenfold, from roughly $47,000 to $650,000, by redirecting a larger share of priority fees.
coindeskdecrypt - Dinari launched tokenised S&P 500 equities for US self-custody wallets settled in USDC, opening on-chain stock exposure to retail holders for the first time domestically.
theblockcoindesk - SpaceX beat Wall Street’s Q2 revenue estimate but recorded a $540 million mark-to-market loss on its Bitcoin holdings as prices declined through the quarter.
coindesk - Nigeria has approved blockchain-based tokenised shares for trading through its NASD OTC Securities Exchange, becoming one of the first African markets to formalise on-chain equity issuance.
bloomberg_crypto
Last sip. The Clarity Act has three days, a hostile procedural vote, a memecoin ethics fight, and a gaming lobby amendment standing between it and a Senate floor vote, and Congress leaves for a month either way.