Cryptoccino — Friday 07 August 2026
☕ 8 min read
Today's Roast
Single shot · top move 2.3% (XRP)
The Pour. Cold wallets are hot news, the Senate punted, and BTC sits at $64k pretending nothing is wrong.
Today. Coldcard hack rattles hardware wallet confidence Security Desk · Senate delays Clarity Act until September On the Hill · Ondo Finance power struggle after founder’s death Projects & Money.
Prices
- BTC$64,245−0.4%
- ETH$1,897+0.0%
- BNB$588+0.0%
- SOL$72.68−1.2%
- XRP$1.02−2.3%
- DOGE$0.0690−0.8%
SECURITY DESK
Coldcard’s software bug lets attackers drain cold wallets over days, shaking the last line of hardware defence.
bloomberg_crypto bloomberg_crypto bloomberg_crypto cryptobriefing
What happened. Coinkite’s Coldcard hardware wallets were compromised via a software bug, enabling attackers to siphon funds from devices that were supposed to be air-gapped. The theft played out over multiple days before the broader community noticed, and on-chain researchers have been working through the weekend to scope the losses. Coinkite has declined to put a number on customer losses and says a formal post-mortem is in preparation.
Why it matters. Cold storage is the bedrock assumption that lets large holders sleep at night. A multi-day, software-triggered drain of ostensibly offline devices breaks that mental model in a way that a hot-wallet exploit does not. The incident lands while sentiment is already reading 29 on the Fear & Greed Index, adding a credibility wound to an already fragile market.
The catch. Total losses remain unconfirmed, which is itself part of the problem: the uncertainty is fuelling speculation well beyond any verified figure. Coinkite saying it will publish a post-mortem “eventually” is not the same as incident containment. Until the attack surface is fully characterised, every Coldcard user is running a risk they cannot properly size.

BTC flatlines at $64k ahead of jobs data. Bitcoin has been pinned near $64,000 through the week with volatility compressed, while the S&P 500 added roughly $2 trillion in market cap over the same period. Traders are watching Friday’s payrolls print and a $100 billion SpaceX share unlock as the next potential catalysts. Low realised vol does not mean low tail risk, as the Coldcard story illustrates.
coindeskcoindesk
XRP leads major-token losses on Clarity Act delay. XRP dropped harder than the rest of the large-caps after the Senate confirmed it would not vote on the Clarity Act before its summer recess. Whale wallets are still accumulating near $1 on-chain, but the daily chart remains below a death cross. See On the Hill for the full legislative picture.
coindeskdecrypt
JPMorgan flags stalled inflows into the HYPE ETF. JPMorgan analysts note that inflows into the Hyperliquid ETF have lost momentum as competing products multiply and Hyperliquid’s edge in perps narrows. Whether HYPE can close the gap on Solana or XRP in market cap is listed as an open question. The note underlines how quickly the window for first-mover ETF premium closes.
coindesktheblock
Bitcoin miners MARA and CleanSpark post double-digit revenue falls. MARA’s net loss widened to $611 million for the quarter while CleanSpark reported a $240 million loss, with both companies accelerating pivots toward AI infrastructure to offset post-halving mining economics. Revenue dropped significantly at both firms despite the workforce and capex restructuring underway. Bernstein kept TeraWulf at Outperform separately, noting HPC revenue now accounts for 71% of its Q2 total.
theblocktheblock

Ondo Finance founder’s mother seeks to oust the current CEO. Following Nathan Allman’s death earlier this year, his mother has filed to take control of Ondo Finance and remove interim CEO Ian De Bode. The dispute puts governance of one of the higher-profile RWA projects in legal limbo at a moment when tokenised assets are seeing their strongest institutional traction yet. Outcome will likely hinge on how Allman’s estate and equity were structured.
coindesktheblock
Tokenised RWA deposits triple to $7.4 billion as broader DeFi contracts. CoinShares data shows deposits of tokenised real-world assets into lending platforms and DEXs grew from $2.3 billion to $7.4 billion year-on-year, even as overall DeFi TVL fell 15%. The growth reflects institutional appetite for yield-bearing onchain instruments rather than speculative liquidity. Tether’s move into Saudi real estate tokenisation fits the same trend.
theblockcointelegraph_deficoindesk
Wintermute registers as a US broker-dealer to trade equities and crypto ETFs. Wintermute USA has secured SEC and FINRA broker-dealer registration through a New York subsidiary, allowing it to trade stocks, options, and crypto ETFs alongside its existing market-making book. The move positions one of crypto’s largest liquidity providers directly inside the regulated US equity stack. It is an early signal of how trading firms plan to straddle TradFi and onchain under clearer US rules.
theblock
MetaMask ships a self-custodial AI agent wallet. The new Agent Wallet lets AI agents execute onchain transactions within limits set by the user, extending MetaMask’s footprint into autonomous trading without surrendering custody. It arrives as several competing AI-agent wallet frameworks are in development across other major wallet providers. User-defined guardrails are the key design bet here, though how they hold under adversarial conditions is untested at scale.
decrypt

Coldcard hardware wallet breach: full details in the lead. Coinkite’s Coldcard devices were compromised via a software bug enabling multi-day remote fund drainage. Losses unconfirmed; post-mortem pending.
bloomberg_crypto
Violent crypto wrench attacks on pace to exceed $30 million stolen in 2026. Chainalysis counts more than $30 million taken in physical attacks on crypto holders through mid-year, with France overtaking all other jurisdictions as the primary hotspot. Attackers are increasingly layering sophisticated laundering on top of the physical thefts. Annual totals are tracking toward a second consecutive record year after $58 million in 2025.
theblockdecryptchainalysis
Bitcoin codebase AI audit surfaces nearly 5,000 findings, 85 flagged critical. A volunteer security group running AI agents across 390 Bitcoin-related repositories filed 4,962 issues in total, with 85 classified as critical and developers describing the situation as “extremely bad”. The audit method is AI-assisted rather than manually verified, so false-positive rates matter before treating the headline number as gospel. The project nonetheless highlights how much attack surface sits in Bitcoin’s broader software ecosystem.
coindeskdecrypt
Canadian hacker pleads guilty to the Snowflake extortion campaign. Connor Riley Moucka, 26, admitted to breaching more than 165 organisations that used Snowflake’s cloud storage and to stealing over 100 million AT&T customer records. The plea closes the criminal chapter on one of the largest data-extortion campaigns of 2024, though civil exposure for affected firms continues. Not a crypto-native exploit, but relevant to any team running sensitive data on shared cloud infrastructure.
krebsonsecurity

Senate shelves Clarity Act vote until September. Majority Leader John Thune confirmed the chamber is carrying the crypto market structure bill over the summer recess, with a floor vote now expected in September. The delay came after Senator Tim Scott had publicly insisted a vote would happen this week, making the reversal more pointed. XRP took the sharpest hit among major tokens on the news, as the bill’s passage is closely tied to expectations around XRP’s regulatory status.
coindesktheblockcointelegraph_regulationcryptobriefing
Crypto bill’s ethics clause could hand Trump a personal tax deferral. Bloomberg reporting indicates that Trump is actively reviewing ethics language embedded in the crypto legislation, a provision that could allow him to defer taxes on crypto holdings running into the millions. The conflict-of-interest angle has given Democratic opponents fresh ammunition to stall or amend the bill. How this plays out in September negotiations will determine whether the ethics clause survives or kills the broader legislation.
theblock
Crypto PACs deploy $1.5 million into three state-level primary races. Following a high-profile primary loss, Defend American Jobs and Protect Progress PACs have redirected spending to Florida, Alaska, and Wyoming contests ahead of 18 August primaries. The targeting shift suggests crypto political operatives are recalibrating toward races with cleaner crypto-friendly narratives after overcommitting in a contested district. It is an early read on how the industry’s political infrastructure adapts after a defeat.
cointelegraph_regulation
Putin signs Russia’s first comprehensive crypto trading law. The legislation creates a central bank-supervised licensed market for digital asset trading, with core provisions taking effect from September 2026. Crucially, crypto remains banned for everyday payments, so the law legalises speculation while keeping the rouble insulated from competition. It draws a clear line between Russia’s approach and the broader Western push for crypto as payment infrastructure.
decryptcointelegraph_regulation
What else is grinding?
- Solana processed $650 billion in stablecoin volume in a single month, overtaking Ethereum on that specific metric for the first time.
cryptobriefing - Sui is adding post-quantum signature schemes, letting users migrate to quantum-safe keys without changing their wallet address or recovery phrase.
theblock - EU watchdogs are warning that fraudsters are impersonating MiCA regulators to redirect stranded customers toward fake platforms after the July authorisation deadline.
decrypttheblock - An NFT startup founder has been federally charged with misappropriating funds from a $10 million raise, adding another name to a growing list of 2021-era project founders facing criminal counts.
coindesk - A US appeals court issued its formal mandate affirming Sam Bankman-Fried’s conviction, closing off the main avenue for further appellate challenge.
cointelegraph_regulation - CASHCAT surged 120% in a week alongside Robinhood Chain’s TVL crossing $774 million, with Uniswap now taking the top launchpad slot on the network via a zero-fee model.
coindeskdecrypt
Last sip. Coinkite still hasn’t put a dollar figure on how much walked out of cold storage, and until they do, nobody really knows how big this is.