Galaxy Research confirmed on August 4 that 1,596 BTC — more than $100 million — has been drained from roughly 7,300 addresses across three verified waves plus 14 smaller incidents. Include a suspected fourth wave and the tally climbs to about 2,055 BTC, or nearly $130 million. Estimates have escalated relentlessly: roughly $38 million when the flaw surfaced, $88.6 million by the weekend, and still moving.

The root cause is a design failure, not a phishing campaign. A March 2021 firmware change swapped Coldcard's hardware random-number generator for a deterministic pseudo-random generator from MicroPython, collapsing seed entropy on Mk3, Mk4, Mk5 and Q devices to roughly 40–72 bits instead of the intended 128. That let attackers precompute private keys offline and sweep wallets without ever touching a device.Galaxy's Alex Thorn now estimates at least 15 separate attackers are exploiting the same vulnerability.

Roughly 90% of the stolen coins remain unmoved, and confirmed attacker addresses have been handed to US law enforcement and exchanges. The behavioural fallout matters more than the price action: sub-1 BTC transfers spiked toward post-FTX levels and active addresses jumped toward one million in a single day, while exchange inflows surged as holders reconsidered self-custody entirely.

Hashdex is liquidating its $14.7 million spot Bitcoin ETF (NYSE Arca: DEFI), the apparent first closure of a US fund holding bitcoin directly. Final trading day is August 17, after which the remaining bitcoin is sold and cash distributed to shareholders. Filings disagree on the payout date — the 8-K points to around August 24, the SEC closure notice to August 28 — leaving holders with a wind-down whose value floats with bitcoin's price during liquidation.

Read this as concentration, not capitulation. The broader US spot bitcoin ETF complex still holds $77.6 billion in net assets against $51.5 billion of lifetime net inflows. IBIT alone accounts for roughly $60.5 billion of cumulative inflows and Fidelity's FBTC about $9.95 billion, while GBTC has bled $27.47 billion in outflows. DEFI was the smallest fund in the category; the next-smallest, WisdomTree's BTCW, holds $142.4 million.

The structural lesson for anyone modelling ETF economics: Hashdex arrived late, converting from a futures product only in late March 2024, and cited liquidity and operating costs when pulling the plug. With capital rotating toward AI-themed funds, any crypto product without scale or a fee edge now has a harder existence to justify.

Senate Majority Leader John Thune confirmed on August 3 that H.R. 3633, the Digital Asset Market Clarity Act, will get a floor vote before recess — upgrading it from probable to scheduled. But as of that confirmation the bill was still absent from the official floor calendar with no cloture motion filed, and Monday's schedule listed only a spending vote, with the state work period beginning August 10.

The arithmetic is brutal. Republicans need roughly seven Democratic votes to clear the 60-vote filibuster threshold, and if leadership waits until Wednesday, August 6 to file cloture, the earliest floor vote falls on Friday, August 8. Senator Thom Tillis has conceded negotiators are not yet aligned on the ethics provision — the piece Democrats have made central. Polymarket prices passage into law this year near 33%; Galaxy Research puts it around 30%.

What's actually at stake is jurisdiction: the SEC keeps investment contracts and tokenised securities while the CFTC gains full spot authority over digital commodities. Nothing breaks if the window closes — but the realistic timeline for statutory market structure slides to mid-2027, colliding with funding fights and a midterm cycle.

Brent fell 5.3% to settle at $79.36 and WTI dropped 5.7% to $75.77 after Treasury Secretary Scott Bessent told CNBC there was a chance of a deal "today or tomorrow" to open the Strait of Hormuz. Officials framed the arrangement as ships entering the Gulf via Iran and exiting via Oman, with Qatar describing draft texts as circulating and Secretary Rubio citing progress but "not finality."

Equities took the hint. The S&P 500 jumped 1.79% to 7,736.52, the Nasdaq gained 2.59% to 26,584.99, and the Dow added 907 points to 54,085.88 — the S&P's first record close in two months and the Dow's first-ever finish above 54,000. Palantir surged 29% on blowout Q2 results, its best session since February 2024, dragging the tech sector up 4%.

Two cautions worth printing. TD Securities' Ryan McKay argues Iran is unlikely to accept any deal without control of the strait, making failure highly likely. And Bank of America notes August through October is historically the S&P's weakest three-month stretch. Crypto barely participated: total market cap $2.27 trillion, up 0.7%, with the Fear Index at 27.

SpaceX posted Q2 revenue of $7.8 billion against $6.81 billion consensus, up from $4.7 billion in Q1, with adjusted EBITDA of $3.5 billion versus $2.0 billion expected. Backlog closed at $47.5 billion, capex came in at $18.37 billion, and the AI segment lost $1.26 billion — roughly half the $2.39 billion the street feared. Starlink subscribers doubled year-over-year to 12 million, lifting connectivity revenue to $4.3 billion.

The market shrugged. Shares sank 7% after hours to $116.40, below the $135 IPO price and nearly 50% off the June 16 intraday high of $225.64. Musk used the call to promise Starlink could one day carry the majority of the world's internet and to talk of delivering "well over 1 million tons to orbit per year" — exactly the multi-year framing analysts said investors didn't want.

The near-term overhang is mechanical, not narrative. The lockup expires August 6, freeing up to 20% of shares — roughly triple the current tradable float. Also buried in the release: an agreement to acquire Cursor for $60 billion, and Musk naming Nvidia the exclusive supplier for SpaceX's AI chips.

DISCLAIMER: None of this is financial advice. This newsletter is strictly educational and is not investment advice or a solicitation to buy or sell any assets or to make any financial decisions. Please be careful and do your own research.