Coldcard Hack Moves 210K BTC; Crypto's Grown-Up Test

A security breach on Coldcard hardware wallets triggered the movement of roughly 210,000 bitcoin from long-term holder addresses – the largest such exodus since December 2024, according to Glassnode data. That is the most consequential single event in a week that tested crypto on nearly every front: regulation, institutional adoption, governance, and self-custody.

The unauthorized attack on Coldcard's offline wallets prompted users to transfer coins to newly generated wallets or to regulated custodians and spot exchange-traded funds. U.S. spot bitcoin ETFs attracted about $754 million in inflows during the same period, indicating some holders opted for institutional custody. The exact number of affected wallets and total losses remain unclear. Coldcard has not disclosed the attack vector or how many devices were compromised.

Bitcoin's price did not react sharply, hovering near $68,000 during the period. The shift of long-term supply into shorter-term custody could add eventual selling pressure. Glassnode noted that the distribution of addresses suggested the outflow was not a mass panic but a coordinated response by a specific user base – likely those who used Coldcard devices with a known vulnerability.

The episode underscores a tension that has followed crypto from its early days: the same self-custody tools that protect users from exchange risk also create a single point of failure if the hardware itself is compromised. The 210,000 bitcoin that moved may represent a permanent change in holder behavior, not just a temporary scare.

Meanwhile, the Digital Asset Market Clarity Act missed the Senate's August window. The industry had been hoping for a procedural vote before the congressional recess and reacted angrily when one did not materialize. CoinDesk's analysis argued that waiting may have been preferable to forcing a vote without enough support and watching the bill fail. The stakes extend beyond this Congress. If the legislation collapses and lawmakers have to start over next year, Democrats are likely to have a more prominent role in writing the next version. Three Democratic women who have approached digital assets with considerable skepticism could gain greater influence.

The regulatory train continues on two tracks. While Congress tries to write broad market structure, the SEC and CFTC are working on rules within their own ranks. The SEC delayed a planned innovation exemption for tokenized securities after concerns from both the White House and Wall Street. Moving too aggressively could complicate Clarity Act negotiations and reshape market structure without a full rulemaking process, the agency said.

Bitcoin's corporate treasury trade showed stress. Strategy sold 1,690 bitcoin and raised $653 million from stock sales – its fifth sale this year, totaling around 7,000 BTC. That is a sharp reversal for a company whose founders insisted they would never sell a single coin. Trump Media reported $360.6 million in first-half losses tied to digital assets, much of them unrealized. Public bitcoin miners added about $1.78 billion of selling pressure.

Yet some indicators turned bullish. Wallets holding more than 10,000 BTC reached a six-month high. Hedge funds shifted away from the structural shorts associated with the bitcoin basis trade and toward a net-long position on CME.

Wall Street's crypto expansion became more selective. Fidelity moved to add staking and quarterly payouts to its nearly $900 million ether ETF. Goldman Sachs agreed to buy NEOS for $2.25 billion, expanding its position in derivatives-based ETFs and gaining exposure to bitcoin income products. Mastercard completed its $1.8 billion acquisition of BVNK, with CoinDesk reporting intense competition between traditional payments companies and crypto firms for the stablecoin business.

Bitwise Chief Investment Officer Matt Hougan said trillions of dollars could flow into bitcoin if large institutions allocated even a small percentage of their assets. Last week showed institutions choosing selectively. Grayscale dropped plans for ETFs tied to Cardano, Polkadot and Hedera. Securitize shares fell 20% after its first earnings report as a public company missed expectations, even as tokenized assets hit a record and trading activity jumped.

The week also brought technical and governance tests. A controversial fork tied to Bitcoin Improvement Proposal 110 mined just two blocks before stalling. The breakaway chain inherited Bitcoin's mining difficulty while attracting only a tiny share of its computing power, resulting in blocks forming hours apart. Longtime developer Luke Dashjr was removed as a BIP editor after controversy surrounding the proposal. Dashjr said he would take a sabbatical from his roles as chair and CTO of mining pool Ocean.

Bybit sued North Korea, its Reconnaissance General Bureau and the Lazarus Group over last year's $1.5 billion hack and secured a preliminary U.S. court order freezing identified assets tied to the theft.

More than 100 projects have folded in 2026, according to CoinDesk's examination of a dot-com-style shakeout. Shutdown announcements from exchanges that survived prior cycles, particularly BitMEX, showed how tough the market has become. The firm's attempted sale collapsed after prospective buyers balked at founder ownership and a shrinking business.

Crypto spent years arguing that regulation would legitimize it, institutional money would transform it, and decentralized technology would offer an alternative. Pieces of all three things are happening at once, just not the way bulls expected.

Zcash's Tachyon upgrade aims to scale shielded payments and improve quantum readiness. Whether its funding, security, and governance can hold is a test that echoes the broader industry's week.