Cryptoccino — Saturday 08 August 2026

Coldcard fallout visible onchain as 210,000 BTC rotates out of old wallets. Following the Coldcard hardware wallet exploit, a substantial volume of bitcoin has shifted from long-dormant addresses, reflecting users migrating funds away from potentially compromised keys. The scale of the rotation underscores how supply-side security events can create unusual onchain signatures even when price impact is contained. coindesk

XRP underperforms peers as Clarity Act delay bites hardest where regulatory status matters most. With the Senate pushing the Clarity Act vote to September, XRP is feeling the pressure more acutely than other majors given how much of its institutional narrative depends on legislative certainty around asset classification. OKX’s Rafique has separately warned that Clarity Act optimism was already priced into bitcoin, adding weight to the view that any rally on passage could be a sell-the-news event. decrypt coindesk

JPMorgan flags stalling HYPE ETF inflows and rising competition for Hyperliquid. JPMorgan analysts note that inflows into the HYPE ETF have plateaued and that Hyperliquid faces a more crowded competitive field, questioning whether the protocol can sustain a market cap trajectory above Solana or XRP. The report adds nuance to what had been an uninterrupted growth story for the perps venue. theblock

Tokenized RWA deposits tripled to $7.4 billion in a year when broad DeFi contracted 15%. CoinShares data shows tokenized gold, Treasuries and equity index products drove the tripling of RWA deposits into lending platforms and DEXs from $2.3 billion to $7.4 billion between Q2 2025 and Q2 2026. The divergence with overall DeFi TVL contraction illustrates how institutional-grade collateral is becoming the growth vector while native-token-backed yield plays lose ground. theblock decrypt

Trump Media scraps both its CRO treasury vehicle and Truth Social prediction market tie-up with Crypto.com. Roughly a year after agreeing to build a digital treasury company to hold billions in CRO, Trump Media has unwound both that arrangement and a separate plan to distribute prediction market contracts via Truth Social. New leadership at the company is pivoting toward media, data licensing and a planned merger with fusion energy firm TAE, suggesting the crypto pivot was driven by prior management priorities that have since evaporated. coindesk bloomberg_crypto theblock decrypt

Wintermute secures SEC broker-dealer registration, opening access to equities, options and crypto ETF blocks. The market maker’s US subsidiary has registered with the SEC and FINRA as a broker-dealer, letting it formally trade stocks, options and ETF blocks in the US market alongside its existing crypto operations. The move is a concrete example of the TradFi-crypto integration that tends to get talked about in funding announcements but rarely executed at the infrastructure level. coindesk theblock

Ondo founder’s mother seeks to remove CEO and take control of the company following Nathan Allman’s death. After Allman’s passing was announced in May and Ian De Bode was named CEO, his mother is now pursuing a legal challenge to assume control and oust De Bode. The dispute lands at an awkward moment given Ondo Perps has just crossed $7 billion in volume weeks after launch, making governance stability a live commercial question. theblock

EIP-8363’s proposed ETH issuance burn draws sharp criticism from stakers and institutional holders alike. The Tapered Issuance Burn proposal would progressively burn a rising share of consensus rewards to cap total staked ETH, but critics including SharpLink’s CEO argue it would erode the yield advantage that makes ETH attractive to institutions relative to bitcoin. Cointelegraph’s deep-dive finds the DeFi community broadly opposed, with concerns about centralisation effects if smaller validators exit first. theblock cointelegraph_defi

Polymarket lost millions via a timing exploit that required roughly five seconds to execute. Traders were able to exploit a race condition in Polymarket’s settlement logic, draining funds before the platform’s checks could complete. The method was simple enough that multiple actors appear to have used it, raising questions about how long the window was open and what the final loss figure will settle at. coindesk

BTCPay Server is under active exploitation via a critical vulnerability that can drain merchant funds. The open-source bitcoin payment processor issued an urgent advisory urging all operators to update to version 2.4.2 immediately and rotate any credentials that may have been exposed. Merchants running unpatched instances should assume compromise until updated. theblock decrypt

Coldcard exploit helped push July crypto theft losses to $247 million, the second-worst month of 2026. The hardware wallet compromise, which alone accounted for over $100 million in losses, drove July’s aggregate theft figure well above the monthly average. Separately, Blockaid’s CEO characterised private-key exposure as crypto’s structural vulnerability, warning the Coldcard incident is a preview of what AI-assisted attacks could achieve at scale. cointelegraph_defi theblock

BNB Chain is being used as a command-and-control layer to deliver malware via fake CAPTCHA prompts. Microsoft researchers found that compromised websites are fetching malicious instructions directly from BNB Chain smart contracts before serving them to Windows users as fake CAPTCHA verification steps. The on-chain delivery mechanism makes traditional URL-based blocking ineffective against this attack pattern. decrypt

Clarity Act vote pushed to September as Senate heads into recess without 60 votes secured. Senate Majority Leader Thune confirmed to The Block that the bill will be the first item queued when lawmakers return, but Democrats are still holding out and midterm calendars will compress the window to act. Industry observers note that continued legislative limbo is already being cited by Asian financial hubs as a competitive opening. theblock decrypt cryptobriefing cointelegraph_regulation

US Treasury sanctions two Iran-linked crypto exchanges under its Economic Fury campaign, one having processed over $6 billion. OFAC targeted Shelbit, which TRM Labs says handled $6.3 billion in transactions between mid-2024 and early 2026, alongside a second exchange, with Treasury tracing over $3 million in transfers to IRGC-linked wallets. The action lands while US-Iran nuclear talks are apparently ongoing, a tension that may complicate diplomatic signalling. coindesk bloomberg_crypto theblock decrypt

Bybit files suit against North Korea and the Lazarus Group over the $1.5 billion hack and obtains an asset freeze order. The exchange is pursuing the legal action in a bid to formalise recovery claims and potentially build a paper trail that could complicate future Lazarus-linked asset movements through regulated channels. Asset freezes against state-linked actors are largely symbolic in practice but can create friction at off-ramp points. coindesk

CFTC warns prediction market platforms against displaying American-style moneyline betting odds. Several platforms received informal guidance from the regulator to drop the familiar plus/minus odds format used in sports gambling, a presentation style the CFTC appears to view as crossing into regulated gambling territory. The warning arrives just as Coinbase separately lost a bid to block Michigan’s state enforcement action over sports event contracts. theblock theblock

What else is grinding?

• Stripe-owned Bridge has joined the EU’s MiCA stablecoin issuer register after receiving Luxembourg approval, becoming one of the first major fintech-affiliated issuers on the list. cointelegraph_regulation
• Sui is adding post-quantum signature schemes that let users upgrade to quantum-safe keys without generating a new recovery phrase or changing wallet addresses. theblock
• Lido published a post-mortem on its Staking Router v3 incident, attributing the bug to an accounting oracle oversight during migration rather than a malicious exploit. cryptobriefing
• Solana’s SIMD-0553 proposal, if passed, would increase the protocol’s daily SOL burn from roughly $47,000 to as much as $650,000, meaningfully accelerating disinflation. cryptobriefing
• A bitcoin address dormant since 2011 moved $3.2 million toward a FalconX-linked address, the latest in a series of early-miner wallet activations drawing onchain attention. coindesk decrypt
• Japan’s FSA has called on domestic crypto exchanges to implement withdrawal delays, mandatory address registration and tighter authentication as part of a coordinated anti-scam push. cointelegraph_regulation

Last sip. The Clarity Act has a September slot and no confirmed votes to fill it.