Bitcoin News - August 4, 2026 at 11:00 AM
Top of Mind
The Coldcard hardware wallet exploit is the dominant story of the period. A firmware bug in Coinkite's Coldcard Mk3 (firmware v4.0.1+, March 2021) caused seed generation to use a weak software PRNG instead of the hardware RNG, reducing effective entropy to ~40 bits. Galaxy Research confirms 1,596 BTC (~$110M) stolen across three waves from ~7,300 addresses; a suspected fourth wave could push total losses to 2,055 BTC (~$130M). Critically, 90% of stolen coins remain unmoved — a potential freeze/recovery window. The attack appears AI-assisted, the attacker used a named blockchain services provider (unnamed per Block engineers), and Coinkite has destroyed remaining vulnerable inventory. Immediate action: any Coldcard user who did not use 50+ dice rolls to generate their seed should migrate funds now.
Market Structure
- BTC trading ~$63,700, down ~27% YTD and ~50% from the October ATH of $126,080. The Coinbase Premium Index has been negative for 77 straight days — a record — indicating persistent US institutional selling even as spot ETFs returned to modest net inflows in July.
- Spot Bitcoin ETFs ended July with $172M net inflows, reversing two consecutive months of heavy outflows ($4.5B in June alone). YTD cumulative outflows remain ~$5.3B. IBIT led a $233M single-day inflow on Thursday. A $265M outflow on Friday capped the month on a cautious note; ETH ETFs outperformed with a four-week inflow streak.
- Strategy sold 1,638 BTC at avg $63,957 ($104.7M proceeds) to fund STRC dividends ($52.4M) and repurchase STRC shares ($81.2M). USD reserve now $4B; holdings at 842,138 BTC. STRC recovered to $92.32 but remains ~8% below $100 par. Bitcoin held firm on the sale announcement — per WSJ/Cex.io, "market conditions continue to improve beneath the surface."
- Small-wallet flight post-Coldcard: Sub-1 BTC transfers hit 39,600 BTC on July 31, the highest since FTX's collapse in November 2022, per CryptoQuant. Retail self-custody panic is measurable on-chain.
Policy and Institutions
- CLARITY Act on the clock: Senate recess begins Friday; no floor vote yet scheduled. Ethics language remains the sticking point — Tillis/Gallego compromise would let state AGs sue DOJ for non-enforcement rather than sue officials directly. Galaxy cut passage odds to 30%; Bernstein says failure would prompt SEC/CFTC to accelerate rulemaking under Project Crypto instead.
- Trump financial disclosure: $1.16B in crypto income in 2025, including $526.8M from World Liberty Financial token sales and $635M in memecoin royalties. He retains ~$900M in WLF tokens. Schumer introduced an Anti-Corruption Bureau bill in response; Democratic opposition is explicitly tied to Trump's crypto holdings complicating ethics language.
- Trump Media sold 2,628 BTC (~$165M) to Crypto.com, per Lookonchain/Arkham. Total BTC sold over seven months: 7,281 BTC at avg ~$74,855. Holdings now 4,261 BTC. DJT shares down 25%+ over the same period.
- Circle received NYDFS limited-purpose trust charter, adding to its OCC national trust bank approval. Shares rose 8.4% on the news. Separately, Circle acquired IBM's ~1,000 blockchain patents.
Network and Industry
- Coldcard (Coinkite) has destroyed remaining vulnerable inventory and halted shipments. All models — Mk2 through Q — are now confirmed affected to varying degrees. Bitcoin Optech confirms Mk4/Mk5/Q seeds have 32 effective entropy bits from the secure element path. Block engineers identified the attacker used a paid blockchain services provider account; federal law enforcement and exchanges have been given attacker/victim addresses.
- Texas data center audit: Governor Abbott ordered ERCOT/PUCT to audit the interconnection queue (474 GW, ~90% data centers), pausing the Batch Zero process. Bernstein says this increases scarcity value of already-approved capacity — names Riot, IREN as beneficiaries; Cipher, CleanSpark, Core Scientific as most exposed.
- Hut 8 signed a second 15-year lease at Beacon Point (352 MW), doubling contracted capacity to 704 MW. Benchmark raised price target to $195 (buy). American Bitcoin (ABTC) mined record 932 BTC in Q2, grew treasury to 8,002 BTC, narrowed net loss to $57.2M. Miner hashprice near ~$30.6/PH/day, multi-year lows per VanEck.
- BitGo launched Link, connecting institutional clients' Coinbase, Kraken, and Crypto.com accounts to a unified custody dashboard with policy-engine governance. BitGo holds OCC trust bank charter; $100B+ AUC.
Macro Linkages
- Fed held rates at 3.50%-3.75%; new Chair Warsh signaled no tolerance for inflation. Three FOMC members preferred a hike. Bitcoin moved less than 1% on the decision. 10x Research flags that rising 10-year Treasury yields could force a September hike — its base case remains a hold, which it characterizes as constructive for BTC.
- US-Japan yen intervention (first coordinated action since 1998) used the Fed's FIMA repo facility, explicitly to prevent Japan from selling Treasuries. QCP Capital flagged the KOSPI gyrations drove measurable crypto liquidity spikes, linking Asian equity positioning to crypto trading volumes.
- Iran/Strait of Hormuz: OFAC sanctioned two IRGC-linked firms accepting Bitcoin for Hormuz transit "insurance." WTI crude near $79-85/bbl across the period; CoinShares explicitly cites US-Iran escalation and oil-driven inflation risk as headwinds preventing a meaningful Bitcoin recovery even as sentiment improves.
Standouts
- Hashdex is liquidating its DEFI spot Bitcoin ETF (225 BTC, $14.25M AUM) — confirms the long tail of small ETF entrants is unviable at current volumes.
- Tether reported $1.5B Q2 net operating profit, up ~50% QoQ, with USDT circulation at $184.6B and a $4.11B reserve surplus.
- Mastercard completed its $1.8B acquisition of BVNK, integrating stablecoin B2B payment rails into its global network.
- BlackRock launched BRSRV and BSTBL tokenized money market funds on Ethereum and Solana, explicitly targeting stablecoin reserve management under the GENIUS Act framework — $311B in European ICS funds also received tokenized share classes.
- FBI supervisory agent Patrick Yaroch charged with stealing ~$1M in crypto from counterintelligence investigation wallets; used Kraken and ChatGPT, had booked a flight to Portugal.