AGP Executive Report

Bitcoin ETF Inflows: US spot Bitcoin ETFs logged about $853.5M in net inflows over five straight positive sessions, with BlackRock’s IBIT taking roughly $693M (81% of the total) even as BTC churned under $65K. Regulation Watch: The CLARITY Act vote was pushed to September; Grayscale says the delay won’t stop network activity or stablecoin growth, while the Senate targets a cloture vote around Sept. 15. Security Shock: BTCPay Server disclosed a critical Lightning-related flaw under active attack; stolen Lightning macaroon credentials can survive patches unless operators rotate/delete them. Bitcoin Network Politics: BIP-110 enforcement is nearing, with nodes rejecting non-signaling blocks and raising fork/replay concerns. XRP Update: XRP stays near $1.04 as whale activity on Binance remains elevated alongside XRPL upgrade momentum, while XRP ETF inflows are reported to be cooling. Web3 Infrastructure Push: ZAN Node promoted ultra-low-latency, enterprise RPC performance across major chains, positioning itself for DApp-scale reliability.

Wall Street’s Crypto Grip: Wintermute says institutions now drive most spot liquidity, with hedge funds and asset managers at 72% of OTC spot volume in H1 2026, shifting crypto from retail momentum to more concentrated, steadier trading. ETF Flows: Spot Bitcoin ETFs pulled in about $102M on Aug 7 and weekly inflows topped $750M; Ethereum ETFs added ~$50M while Solana and XRP ETFs were flat. Regulatory Crossroads: The Senate delayed the CLARITY Act until September, and Michael Saylor argued Bitcoin doesn’t need it—while markets brace for volatility. Security Shock: BTCPay Server pushed an emergency patch after an actively exploited flaw could bypass TOTP protections; separately, Coldcard fallout shows ~210,000 BTC moving from long-term holders. Stablecoin Infrastructure: Circle is launching native USDC and CCTP on OKX’s X Layer, aiming to make cross-chain transfers simpler and reduce reliance on volatile gas tokens. Sanctions: The US sanctioned Dubai exchanges Shelbit and Nobitex-linked entities over alleged Iran IRGC money flows.

US Sanctions: The US Treasury sanctioned Dubai’s Shelbit and founder Siavash Kayvanpour, alleging a $4B Iran sanctions-evasion pipeline tied to the IRGC and Nobitex. Scam Warnings: Pennsylvania AG Dave Sunday and local sheriff offices warned of “number spoofing” calls demanding bail/bond payments via Bitcoin or gift cards. Bitcoin Security: BTCPay Server issued an emergency patch alert—version 2.4.2 is being actively exploited; update or shut down. Coldcard Fallout: Galaxy and on-chain analysts say the Coldcard firmware exploit is driving long-dormant wallet thefts, with confirmed losses topping $111M and estimates rising higher. Regulation Watch: The Senate shelved the Digital Asset Market Clarity Act until September, while CFTC staff pushed a path for “perpetual-style” contracts into regulated markets. Stablecoin Rails: Circle launched native USDC and CCTP on OKX’s X Layer. Corporate Treasuries: El Salvador kept buying 1 BTC daily; Capital B grew to 3,140 BTC; Bhutan reportedly sold down to ~3,000–4,000 BTC. Market Moves: Bitcoin held near $65K as ETF inflows continued despite the Coldcard shock. Ethereum Governance: ether.fi CEO Mike Silagadze bet $1M against EIP-8363, arguing tapered issuance burn could centralize validators. Exchange Legal Action: Bybit won a court freeze targeting assets tied to the alleged North Korea-linked $1.5B Ethereum hack.

Coldcard Fallout: Coldcard’s firmware flaw has now been linked to $130M+ in stolen bitcoin across multiple waves, with attackers moving BTC and ETH to mixers and security teams warning more drains may still be coming. Self-Custody Reality Check: Zeus Wallet suspended Lightning infrastructure after a breach, saying customer funds were not lost or at risk, while the broader debate over “offline safety” keeps intensifying. ETF Flows vs. Price Action: U.S. spot bitcoin ETFs pulled in about $754.7M this week, but BTC is still stuck near $64K as traders wait for a decisive close above $65K and brace for macro risk. Regulation Watch: The U.S. Senate delayed the Crypto Clarity Act vote to September, adding uncertainty for institutional demand. XRP & Markets: XRP led major losses as the Clarity Act timeline slipped. Macro/Geopolitics: Strait of Hormuz talks and Fed rate-hike fears kept risk mixed, with bitcoin trading in a tight $64K–$65K range. Corporate Moves: Wintermute USA registered as an SEC broker-dealer and FINRA member, signaling deeper Wall Street integration for crypto market making.

Coldcard Fallout & Custody Debate: Bitcoin steadied above $64K as the Coldcard hardware-wallet exploit—now pegged at $116M+ stolen—kept reigniting self-custody fears, while spot Bitcoin ETFs saw renewed inflows (about $620M since the weekend, per Bloomberg), with analysts noting some investors may be shifting toward regulated exposure. Security & Wallet Reality Check: A new deep dive on the Coldcard randomness failure argues AI-assisted firmware hunting may have been involved, and Arkham added OP_RETURN message viewing to make on-chain “bulletin board” chatter easier to spot. Regulation & Politics: GOP Sen. Tim Scott pushed the CLARITY Act on Fox, despite trafficking and oversight concerns; meanwhile, Wiz filed to secure the .bitcoin domain via ICANN’s community priority process ahead of Aug. 12. Corporate Crypto & Payments: Circle launched a Discovery API for USDC-paid services by AI agents; HesabPay hit 1M users on Algorand via humanitarian aid; Cash App rolled out fee-free Bitcoin DCA with Bitkey self-custody routing. DeFi Credit & Tokenization: Centrifuge’s $JAAA tokenized AAA CLO fund topped ~$689.9M AUM across eight chains; Morpho surpassed $5B deposits on Base. Market Structure Watch: JPMorgan said Hyperliquid (HYPE) ETF inflows have largely stalled as regulated centralized perps compete. Scams & Local Crackdowns: Kentucky and Wisconsin warned of Bitcoin kiosk scams; Tremonton approved a ban on kiosks after rising fraud.

Hardware Wallet Security: Coldcard’s firmware flaw is still reshaping the wallet debate, with a new explainer stressing that “offline” doesn’t automatically mean “safe enough,” since randomness bugs, lost backups, and physical coercion can still bite. Open-Source Scrutiny: In response to the Coldcard fallout, Bitcoin Red Team says it found 4,962 issues across 390 projects in under 30 hours, including 720 high/critical items. Institutional Moves: GSR shifted its Core3 model toward more Bitcoin exposure as trading slowed, while cutting Ether weight. Cross-Chain Custody Upgrade: BitGo moved Wrapped Bitcoin ($7.7B WBTC) from LayerZero to Chainlink CCIP, aiming to standardize routing and reduce bridge risk. Regulation Watch: Russia signed a crypto market-structure law that regulates exchanges and custody but keeps a domestic crypto payments ban; in the US, the CLARITY Act’s Senate timeline remains a key uncertainty. Market Mood: Bitcoin held near $64K as traders weighed macro and geopolitical headlines, while quantum fears resurfaced after Jim Cramer said he sold. Payments & Tokenization: Coinbase UK launched zero-commission access to US stocks plus crypto in one app, and Binance added new tokenized “bStocks” listings. Stablecoin Funding: JPYC raised $38M to expand Japan’s yen-backed stablecoin payments network. Scam Alerts: US authorities warned about bitcoin kiosk scams, including a case where a senior was stopped mid-transaction.

Coldcard Hack: Coinkite says AI review missed the firmware flaw behind the Coldcard exploit, with losses now estimated around $100M+ as affected users debate self-custody risk. Corporate Treasury: Strategy (MSTR) authorized a multi-billion-dollar Bitcoin sale framework tied to buybacks/dividends, while analysts keep arguing the treasury shift is still a long-term BTC bet. Mining to AI Pivot: Cipher Digital and Hyperscale Data keep trimming BTC to fund AI/data-center moves, underscoring how miners are funding the next cycle. Market Structure & Regulation: Russia passed a crypto-exchange regulation law while keeping payment bans; the US Clarity Act push continues as lawmakers aim for a Senate vote before recess. Infrastructure: Fireblocks launched Wallet Pools to reduce stuck-transaction issues across vaults. Macro Crosswinds: Bitcoin held near $64K as equities hit records and yen-intervention skepticism lingered. Security Watch: A Bitcoin Red Team sprint logged 4,962 findings across 390 projects, triggered by the Coldcard incident.

Coldcard Fallout & Self-Custody Shock: Bitcoin wallet maker Coinkite said a firmware flaw left users exposed, with losses estimated above $100M as hackers drained wallets and forced a rush to move funds. Market Pulse: BTC steadied back above $64K as traders priced in a Strait of Hormuz reopening deal, while liquidity concerns lingered and volumes hit 2026 lows. Stablecoin Scrutiny: S&P Global Ratings downgraded Tether, TrueUSD and Ethena USD to the weakest stablecoin tier, citing backing and risk factors. Institutional Tokenization Push: BlackRock launched Ethereum-based tokenized access to $311B European money market funds via JPMorgan’s Kinexys, signaling deeper onchain cash management. Corporate Crypto in the Spotlight: SpaceX reported $7.8B revenue but a 33% drop in the carrying value of its BTC holdings to about $1.1B. Security & Custody Upgrades: BitGo migrated $7.7B WBTC infrastructure to Chainlink CCIP to standardize cross-chain security. Regulation Watch: South Africa proposed new cross-border crypto reporting rules that could push activity offshore, while the US CLARITY Act’s stalled progress keeps market structure uncertainty alive. Ethereum Supply Debate: Researchers proposed tapering and burning validator rewards as staking rises, sparking backlash from stakers and DeFi builders.

Coldcard Fallout: Galaxy says “numerous” attackers exploited a Coldcard firmware randomness flaw, with confirmed theft now around $100M+ and a possible total near $130M, while Coinkite warns users must move to new seeds and updated firmware. Ethereum Policy Shock: Researchers published EIP-8361 proposing tapered issuance burn—staking rewards would fall as more ETH is staked and hit zero once ~50% of supply is staked—though it’s still only a draft. Crypto Regulation Watch: Putin signed Russia’s comprehensive crypto law: exchanges and custodians must register, but crypto payments for domestic goods stay restricted. ETF & Custody: Hashdex will liquidate its DEFI Bitcoin ETF after weak demand, and Bitwise notes Coinbase custody dominates spot ETF assets. Institutional Crypto Plumbing: BitGo is migrating WBTC cross-chain coverage from LayerZero to Chainlink CCIP, and BitGo+Derive are pushing onchain derivatives with collateral kept in BitGo’s regulated trust bank. Market Mood: BTC rebounded above $64K on easing Iran/Hormuz headlines, but analysts still flag key resistance and downside risk. Tokenized Finance: BlackRock launched tokenized money market funds in Europe on-chain, and Dinari expanded tokenized U.S. stock trading to eligible U.S. investors via USDC.

Coldcard fallout: Galaxy Research estimates Coldcard-linked theft at 1,596 BTC (about $130M) with a possible 2,055 BTC if a suspected next wave is confirmed, while holders are urged to generate new seeds and migrate. Bitcoin price action: BTC rebounded toward $64,000 in Asia but struggled to hold as traders weighed the hack’s self-custody shock and broader macro jitters. Dormant whale moves: A wallet inactive since 2013 transferred 500 BTC (~$31.3M) amid the Coldcard crisis, adding to the “move to safety” narrative. Strategy in focus: Michael Saylor’s Strategy sold 1,638 BTC for ~$105M, boosting cash reserves to $4B and extending runway—prompting fresh “JPMorgan of crypto” debate. XRP DeFi access: Flare’s FXRP collateral is now accepted in Sentora’s $280M RLUSD lending pool on Ethereum, letting XRP holders borrow without selling. South Korea regulation & listings: The 22% crypto gains tax stays on track for Jan. 1, 2027, and Upbit/Bithumb expanded markets with HOME, META2, and USDG. Security beyond wallets: North Korean-linked attackers hid malware command servers inside “empty” Ethereum transfers, underscoring supply-chain and onchain threat evolution. Tokenized finance momentum: BlackRock launched two tokenized money-market products aimed at GENIUS Act reserve requirements. Crypto industry staffing: FalconX cut 10% of staff and is shifting Singapore focus toward derivatives.

Coldcard Fallout: A Canada-based Coldcard hardware wallet flaw is driving a fifth day of fallout, with Galaxy Research tracking roughly 1,367 BTC (~$89M) drained across 4,585 addresses, shaking self-custody confidence and nudging some holders back to exchanges. Corporate Bitcoin Moves: Strategy (MSTR) sold 1,638 BTC (~$104.7M) to fund STRC preferred dividends/repurchases and lift cash reserves to $4B, while Strive added 20 BTC and Bitmine kept stacking ETH (10,399 ETH). Market Plumbing: Bitcoin’s carry trade appeal is fading as futures yields slip below Treasuries, while ETF demand cools and spot volume stays thin. Regulation Push: Global crypto rules tighten as the US leans on enforcement, Europe advances MiCA, and Asia updates licensing—plus the US Treasury’s top crypto policy architect Tyler Williams exits after 17 months. XRP DeFi Upgrade: Flare’s FXRP is approved as collateral in Sentora’s RLUSD lending vault on Ethereum, letting XRP holders borrow without selling. ETF Cleanup: Hashdex will delist and liquidate its DEFI spot Bitcoin ETF after weak demand, with cash payouts expected around Aug. 28.

Coldcard Fallout: Galaxy Research says the Coldcard hardware-wallet exploit is still unfolding, tracking about 1,367 BTC (~$88.6M) drained from 4,585 addresses, with warnings of a likely fourth coordinated wave and calls for users to migrate off vulnerable seed setups fast. Self-Custody Reality Check: A trader’s experience highlights how hardware wallets can fail in non-hack ways (firmware updates breaking signing), adding to the broader fear that “safe” storage isn’t risk-free. Market Pulse: Bitcoin hovers near $62.8K as confidence hinges on reclaiming $65K, while spot Bitcoin ETFs post $61M net outflows and Ethereum ETFs still pull in money—suggesting institutional rotation, not panic capitulation. Regulatory Crossroads: The SEC keeps Nasdaq Bitcoin index options approval on hold after CME’s jurisdiction challenge, with written comments due Aug. 24. Policy Drama: The CLARITY Act faces fresh Senate ethics pressure tied to Trump-linked crypto income, keeping the “next institutional bid” narrative in limbo. Geopolitics & Risk: Oil drops below $80 after Trump confirms US-Iran talks, but Iran warns of potential Gulf energy strikes—keeping volatility in the background. Exchange Moves: Binance will delist six tokens on Aug. 17, with futures cutoff earlier.

Coldcard Fallout: Galaxy Research says three theft waves drained about 1,367 BTC (~$88.6M) from 4,585 addresses after a firmware-linked seed weakness, pushing more holders to migrate and adding fresh fear to self-custody. ETF Momentum: Bloomberg Intelligence’s Eric Balchunas argues the Coldcard mess strengthens the case for U.S. spot Bitcoin ETFs for long-term exposure without managing keys. Regulatory Deadline: The Senate has just days to move the CLARITY Act before summer recess, with odds still low but Coinbase CEO Brian Armstrong calling it a near-term catalyst. DEX Rotation: BNB Chain reclaimed #2 in 24-hour DEX volume (about $1.47B) as PancakeSwap drove a retail/memecoin surge. XRP Flows: XRP funds extended a longest-active ETF inflow streak in July, pulling in ~$27.3M while some rivals struggled. Geopolitics & Crypto: OFAC blacklisted Iranian maritime insurance firms tied to a Strait of Hormuz scheme reportedly accepting Bitcoin, while Iran-Oman talks keep crypto tolls on the table. Security & Custody: Self-custody share fell to ~49% from ~78% in late 2022, underscoring how institutions and ETFs keep reshaping who holds BTC.

Coldcard Fallout: Galaxy Research says a firmware flaw in Coldcard Mk3 seed generation enabled three coordinated sweeps draining 1,367.05 BTC (~$88.6M) across 4,585 addresses, with users warned that fixes don’t “repair” already-weak seeds. Self-Custody Reality Check: BlueWallet added manual entropy (coin flips/dice) to reduce reliance on device randomness, while CZ urged splitting funds across wallets—plus the reminder that “nothing is 100%.” Crypto Crime Scale: Blockaid reports $1.1B stolen across 212 incidents in H1 2026, with North Korea-linked groups responsible for over half. Market Pressure: US spot Bitcoin ETFs saw $265M outflows in a brutal session as ETF liquidity thinned over the weekend; traders also watched Strategy’s STRC dividend held at 12% and renewed talk of Strategy’s potential $5B BTC sales. Stablecoin Flows: Korea saw 2.76T won in stablecoin outflows abroad in June, while Brazil’s crypto market hit $14.68B in H1 2026 stablecoin-led demand. Geopolitics & Crypto: Iran-US tensions and Strait of Hormuz sanctions keep Bitcoin sensitive to headlines. Human Story: Nancy Guthrie’s family renewed pleas after police released ransom notes claiming she “perished,” keeping the case in the spotlight.

Coldcard Wallet Breach: A firmware flaw let attackers reconstruct seeds offline, draining about 1,082.65 BTC (~$70M) from 1,196 addresses in roughly 41 minutes, shaking confidence in self-custody; Coinkite pushed emergency firmware but warned affected users must generate new seeds and move funds. Custody Debate: Strive’s Joe Burnett called it “one of the worst weeks in Bitcoin history,” arguing even careful self-custody can fail; Binance founder CZ urged users to split funds across multiple wallets. Regulatory Crossfire: The SEC paused Nasdaq’s cash-settled Bitcoin options (QBTC) after CME challenged jurisdiction, setting up a comment process through Aug. 24. Macro Pressure: US yields jumped with the 30-year rate above 5.20%, while bitcoin ETFs saw $265M outflows on July 31 (IBIT led), and mining difficulty fell as weak economics push operators to pivot. Stablecoin/Tokenization: Tether reported $1.5B Q2 profit but reserve math raised concerns; Stellar XLM hit $3.06B in tokenized real-world assets with stablecoin supply up 38.3%. Market Mood: Bitcoin dominance climbed past 58% as institutions favored BTC over alts.

Sanctions Crackdown: The US Treasury sanctioned Iranian crypto exchanges and froze nearly $1B in Iran-linked funds, tracing $3.84B through CoinEx and highlighting how stablecoins can be frozen while other routes still dodge control. Self-Custody Shock: Coldcard firmware/seed-generation flaw allegedly enabled an AI-assisted brute-force attack that drained 594 BTC (~$38M) from about 500 wallets in 25 minutes, renewing trust and wallet-security debates. Stablecoin Watch: Tether posted $1.5B Q2 profit, but its reserve buffer fell about half to $4.11B as USDT supply rose—raising questions about resilience through the rate cycle. Mining Meets AI: Bitcoin mining difficulty dropped 19.9% and miners are pivoting power toward AI data centers, with major miners signing multi-billion AI deals. ETF Flow Whiplash: Spot Bitcoin ETFs finished July slightly green on $172M inflows, but ended with a $265M outflow day; year-to-date remains negative. Market Pressure: BTC slipped below $63K amid weak Coinbase results and fading optimism for US crypto legislation, while traders brace for August volatility. Regulation Fight: The CLARITY Act push continues in the Senate as industry players argue for clearer rules. Local Crime, Crypto Angle: Arizona released full ransom notes in the Nancy Guthrie case demanding millions in bitcoin, hoping the writing style helps identify the kidnappers.