BMTNews

Daily Briefing

One crypto intelligence edition a day, with selected AI, technology, and policy coverage.

Archive 08.17 08:00–08.18 08:00
227 fetched 227 analyzed 14 displayed 2 high priority
BTC $64,386 +2.6%ETH $1,909 +2.0%Fear & Greed 41 Fear

Stories are ranked by impact; the first three are the edition highlights. This edition displays 14 of 227 candidates.

#01
CryptoEdition highlightThread · day 3
9.0

Coldcard Firmware Bug Goes Unnoticed for Years, Enabling ~$100M Bitcoin Theft

A long-dormant bug in Coldcard's firmware, present since version 4.0.1 released in March 2021, led to the theft of roughly $100 million in Bitcoin on July 30, 2026. Galaxy Research tied the sweep to weak randomness in seed generation, and independent analysts later put losses as high as $116 million. Coldcard is one of the most trusted Bitcoin-only hardware wallets, yet a years-long flaw in its key-generation path validates the industry's 'don't trust, verify' maxim—as Foundation CEO Zach Herbert put it, reputation is not a security model. The incident may push users to demand stronger verification of hardware wallets and to reassess self-custody risks. The bug affected only some devices, causing generated seed phrases to have far weaker entropy than intended, and the coins swept by the attacker spanned 2021 to 2026. On July 30, about 1,196 addresses were drained in 41 minutes, taking 1,082.65 BTC; Coinkite's CEO initially denied a wallet-wide vulnerability, and attacks were reported to still be ongoing.

rss · CoinDesk · · Single source

Background, discussion, and references

Market impact

The theft is concentrated in Bitcoin and self-custody hardware wallets, so the transmission channel is user trust and perceived custody risk rather than exchange liquidity. If confidence in Coldcard erodes, some holders may shift to competing wallets, multisig setups, or custodial services, but the net effect on Bitcoin's price is not predetermined.

Background

A hardware wallet is a small physical device that stores cryptocurrency private keys offline. Coldcard is a Bitcoin-only hardware wallet made by Canadian firm Coinkite, designed to keep keys off internet-connected computers. The exploit traces to firmware 4.0.1's random-number handling, meaning devices using that code could generate weak, predictable seed phrases for years, contradicting the community's 'don't trust, verify' ideal.

Discussion

Reddit commenters were skeptical of Coinkite's denial, with one user outlining a supply-chain scenario in which a factory worker could pocket a wallet, record its seed, and later drain users who did not add a passphrase. The discussion reflected broader concern that the bug may be wider than initially disclosed and that users should add extra entropy or passphrases.

References

Tags

#Coldcard#hardware wallet#security#exploit#bug

#02
PolicyEdition highlight
9.0

Treasury Proposes Stablecoin Issuer Licensing Rules Under GENIUS Act

The US Treasury proposed rules implementing Section 3 of the GENIUS Act, defining when stablecoins are issued, offered, or sold in the US. Beginning January 18, 2027, issuers must generally obtain a federal or state license, and from July 18, 2028, platforms will be restricted from selling unapproved stablecoins to US customers. As the first major Treasury rule under the GENIUS Act, the proposal establishes a federal/state licensing regime that will materially reshape US stablecoin market access and industry structure. Issuers, exchanges, and users will all be affected by the approval-based listing restrictions and compliance deadlines. Foreign-issued stablecoins may still be sold, but only if the foreign issuer complies with US legal orders and agreements between the US and its home jurisdiction. Violations would include soliciting US buyers, advertising availability, or helping buyers bypass IP checks; public comments are due by October 19, 2026.

rss · Decrypt · · 4 sources

Background, discussion, and references

Market impact

The rules create a compliance channel that could alter which stablecoins US platforms can list, potentially concentrating liquidity and issuance among approved issuers and raising costs for smaller or foreign issuers. Exchanges, issuers, and market infrastructure may need to adjust product offerings before the 2027–2028 deadlines, but the final market impact depends on the completed rulemaking and industry responses.

Background

The GENIUS Act, signed into law in July 2025, is the first US federal law to create a comprehensive framework for payment stablecoins — digital tokens pegged to a monetary value and intended for payments. Under the Act, primary federal regulators are defining licensing and oversight requirements, with the law taking effect on the earlier of 18 months after enactment or 120 days after final regulations are issued. The Treasury proposal is one of several implementing rules; the OCC, FDIC, and Treasury have also proposed separate rules on issuance, reserves, and anti-money laundering.

References

Tags

#stablecoins#GENIUS Act#Treasury#crypto-regulation#US

#03
CryptoEdition highlight
8.5

Harmony to roll back chain after forger mints 3 trillion ONE tokens

Harmony announced that validators will revert the blockchain to 11:25 pm UTC on Aug. 11, discarding over 109,126 regular transactions and 315 staking transactions, after an attacker forged 3 trillion ONE tokens. It deemed the pre-attack rollback "fairest and most secure" over token burns or blacklisting. This is a major protocol governance and security decision because rolling back confirmed transactions challenges blockchain immutability and affects users, exchanges, and bridge partners. The outcome could set a precedent for how layer-1 networks respond to large-scale exploits. Harmony said selectively restoring transactions would be unsafe because balances, contract states, transaction nonces and other conditions would differ on the replacement chain. Investigators traced nearly all forged ONE to wallets or service boundaries and are coordinating with exchanges, bridges, and law enforcement.

rss · The Block · · 2 sources

Background, discussion, and references

Market impact

The exploit and forced rollback could affect market confidence in Harmony and the ONE token, with potential exchange listing reviews and increased volatility around the restored chain state. However, the overall crypto market impact is likely limited given ONE's relatively small market capitalization.

Background

A blockchain rollback, also known as a chain reorg, reverses a series of confirmed transactions and returns the chain to a previous state, typically used after major exploits or network failures. Token burns permanently remove tokens from circulation by sending them to an unspendable address, while blacklisting forbids specific wallets from transacting. Harmony's decision to reorg rather than burn or blacklist stems from concerns about inconsistent chain state if only some transactions were restored.

References

Tags

#Harmony#exploit#rollback#security#governance

#04
8.5

Qwen3.8 27B Scores 52 on Artificial Analysis, Topping Larger Models

Qwen3.8-27B, a 27B-parameter open-weight model from Alibaba's Qwen team, scored 52 on the Artificial Analysis benchmark, outperforming models up to 150B+ parameters and matching DeepSeek V4 Flash 0731. It also rivals or beats Claude Opus 4.6, a frontier model released just six months earlier. This is a major open-source AI milestone, showing a small dense model can match or exceed much larger frontier models. It could democratize access to high-end AI capability, enabling developers to run frontier-level performance on consumer hardware. The model is a native multimodal vision-language model with Apache 2.0 open weights, excelling at coding, agentic workflows, and office automation. Community benchmarks show it scores 52, the same as DeepSeek V4 Flash 0731, and beats Opus 4.6 on Artificial Analysis; some users note Opus still has better world knowledge.

hackernews · anana_ · · Discussion · Single source

Background, discussion, and references

Background

Artificial Analysis is an independent benchmarking platform that evaluates AI models on quality, speed, and price. Qwen3.8-27B is the latest in Alibaba's Qwen line of open-weight models. Opus 4.6 is Anthropic's frontier model released on February 5, 2026. The result suggests parameter count is no longer the sole determinant of model capability.

Discussion

Community members expressed amazement and some disbelief. One commenter noted Qwen3.8 27B beats all medium models (40B–150B) and ties a top large model, while another called it 'funny and a bit terrifying' that it runs on a gaming PC and still outscores Opus 4.6. Others reported strong real-world agentic behavior and careful coding performance, with one user saying the scores 'feel real' and not 'benchmaxxed'.

References

Tags

#Qwen#open-source AI#benchmark#model release#AI breakthrough

#05
Policy
8.5

Binance gave Russian authorities user data that led to a Ukraine donor's trial

According to an exclusive report, Binance provided Russian security services with client data that was used to charge a Russian user for donating to Ukraine's military. The user is now on trial in Russia. This case raises serious concerns about user privacy and the compliance practices of major crypto exchanges, particularly regarding cooperation with authoritarian governments. It could undermine trust in Binance and prompt stricter regulatory scrutiny in Western jurisdictions. Binance has said it cooperates with lawful requests, despite having exited the Russian market in 2023 to improve its compliance strategy. The documents reportedly show the data exchange was used to charge the user over Ukraine-related donations.

google_news · Meduza — Новости · · 17 sources

Background, discussion, and references

Market impact

This news could affect market sentiment around Binance-related tokens and the broader crypto market due to heightened concerns about surveillance and regulatory risk. It may also influence how other exchanges handle data requests, potentially prompting more stringent privacy protections or compliance measures, but no direct asset price implications are certain.

Background

Binance is the world's largest cryptocurrency exchange by trading volume. It ceased operations in Russia in 2023, citing compliance concerns, but this report suggests it still responded to requests from Russian authorities. The case highlights the tension between exchange obligations to comply with local laws and the promise of user anonymity and data protection in the crypto ecosystem. It also comes amid broader geopolitical conflicts where cryptocurrency donations play a role in funding military efforts.

Tags

#Binance#Russia#privacy#user data#regulation

#06
Crypto
8.0

BitMart Founder Dismisses Audit Demands as Users Report Blocked Funds

BitMart founder Sheldon Lee dismissed as 'fabricated rumors' an X post claiming users cannot withdraw funds and employees have not been paid, saying the exchange's Chinese-language account was hacked. Users and onchain investigator ZachXBT are demanding independent audits as the exchange winds down ahead of its final trading day on Aug. 26. This matters because unverified exchange insolvency rumors can trigger panic, regulatory scrutiny, and broader distrust in centralized exchanges. BitMart's refusal to open its books underscores the lack of transparency that persists among crypto custodians. BitMart announced its wind-down last month with Aug. 26 as the final trading day, yet users report withdrawals remain blocked. Distressed investment firm Echo Base says it proposed a funded restructuring package including debtor-in-possession financing, but BitMart has not responded.

rss · CoinDesk · · 2 sources

Background, discussion, and references

Market impact

The episode could affect sentiment toward centralized exchange custody risk, potentially pressuring tokens listed on BitMart and widening risk premiums across exchanges with opaque reserves. However, since insolvency is not confirmed, the impact remains sentiment-driven rather than a confirmed systemic event.

Background

Onchain investigation involves analyzing blockchain data to track asset movements and verify an exchange's solvency. Proof of Reserves (PoR) is an independent attestation that a custodian holds enough assets to cover user deposits, which differs from a full financial audit and is often called for during exchange crises.

Discussion

Users on X expressed frustration, with one demanding 'Where is my $10 million?' and others challenging the hack excuse. ZachXBT argued that if BitMart actually has liquidity, it should simply return funds instead of posting vague statements.

References

Tags

#bitmart#exchange-crisis#withdrawals#insolvency#audit

#07
Crypto
8.0

ABFinance Closure Marks Fourth Crypto Exchange Shutdown in Six Weeks

US-based crypto exchange ABFinance, founded by ByBit's former CEO Helen Liu, announced last Friday that it will not launch and is winding down in an orderly manner. The closure marks the fourth exchange shutdown in six weeks, after BitMart, BitMEX, and AscendEX. The rapid succession of exchange closures raises serious concerns about the safety of user funds and the stability of crypto trading platforms. Users of affected exchanges face withdrawal delays and uncertainty, which can erode trust in centralized exchanges and drive demand for self-custody solutions. ABFinance lasted only about six months, as Liu founded the exchange in March before stepping down from her ByBit co-CEO role on April 30, 2026. BitMart has continued processing withdrawals at a slow pace, leading users to speculate about insolvency, while AscendEX's shutdown was flagged by ZachXBT for missing large amounts of ETH, USDT, and SOL in reserves.

rss · Protos · · Single source

Background, discussion, and references

Market impact

The spate of exchange shutdowns could reduce liquidity in affected markets and increase counterparty risk perceptions across the crypto sector. Tokens listed on the closing exchanges may face selling pressure or delisting, while broader sentiment toward centralized exchanges could weaken, potentially accelerating a shift toward decentralized trading venues.

Background

A hot wallet is a cryptocurrency wallet that stores private keys in an internet-connected interface, making it convenient for frequent transactions but more vulnerable to hacks. When an exchange shuts down, users' funds held in hot wallets can be at risk if the exchange lacks sufficient reserves or faces solvency issues. The recent closures highlight the importance of verifying exchange solvency and the risks of keeping funds on centralized platforms.

References

Tags

#exchange-shutdown#crypto-exchange#user-funds#market-stress

#08
8.0

Israel's Largest Crypto Broker Bits of Gold Breached, 200K Customers Exposed

Bits of Gold, Israel's largest crypto broker, disclosed a data breach affecting about 200,000 customers. The breach occurred via a third-party data analytics provider, exposing names, national ID numbers, bank details, and public wallet addresses, but not funds or private keys. This incident underscores the vulnerability of crypto firms to supply-chain attacks via external vendors, and the exposure of sensitive financial and identity data could put affected users at heightened risk of fraud and phishing. It also adds to a string of recent crypto industry data breaches, potentially eroding customer trust in custodial brokers. Bits of Gold stated that no funds, passwords, private keys, CVV codes, or scanned IDs were exposed, and that it disconnected the affected system upon detection. The company believes the attack was part of a broader global incident, and it has launched an investigation with a cyber incident response firm.

rss · CoinDesk · · 2 sources

Background, discussion, and references

Market impact

The breach could heighten regulatory and operational scrutiny on Israeli crypto brokers and may temporarily affect Bits of Gold's ability to process certain services, as reports indicate a halt to its Bitcoin partnership. Broader market impact is likely limited, but the event reinforces the sector's exposure to third-party cyber risk, which can influence risk premiums for custodial platforms.

Background

Bits of Gold, founded in 2013, was the first crypto company in Israel to receive a permanent Financial Services Provider license and serves more than 250,000 customers. The breach follows recent crypto-related data exposures at SafePal and Trezor, which were also linked to compromises at third-party vendors. The incident highlights the reliance of crypto firms on external service providers for analytics, logistics, and other functions, which can become attack vectors.

Tags

#data-breach#crypto-broker#security#israel#privacy

#09
AI & Tech
8.0

DuckDB v2.0 Preview Showcases New Features and Performance Gains

The DuckDB team published a preview of v2.0, introducing Quack client-server support and a range of new features and performance improvements. This preview marks a major milestone for the widely adopted embedded analytical database. DuckDB is one of the most widely adopted open-source analytical databases, with over 6 million downloads per month, so v2.0 has broad implications for data engineering and analytics workflows. The preview gives builders an early look at capabilities that could reduce resource requirements and expand where DuckDB can run. This is a preview rather than a stable release, so features and performance numbers may change before the final version. Community discussion notes an extremely rapid development cadence of roughly 10,000 commits in under six months, and highlights in-progress areas such as incremental materialized views.

hackernews · ibotty · · Discussion · Single source

Background, discussion, and references

Background

DuckDB is an open-source, column-oriented relational database management system specialized for online analytical processing (OLAP) workloads. Unlike transactional embedded databases such as SQLite, DuckDB is designed for fast analytical queries and can spill to disk to handle data larger than available memory. It runs everywhere as an in-process SQL database, making it popular for local data analysis and embedding into applications.

Discussion

Community sentiment is largely positive, with users expressing excitement about Quack and sharing real-world use cases in analytics pipelines and stream processing. Some commenters raised concerns about the rapid commit pace and whether AI is contributing heavily to development, while others wished for incremental materialized views to better compete with ClickHouse.

References

Tags

#duckdb#database#open-source#developer-tools#data-engineering

#10
AI & Tech
8.0

Roboflow Benchmarks Undermine GPT 5.6 Sol Vision Claims

Roboflow's blog post claims OpenAI's GPT 5.6 Sol is its best vision model, but its own benchmarks show Google's Gemini 3.5 Flash outperforming it on most vision tasks at one-third the cost. This challenges OpenAI's marketing position for its flagship model and gives developers concrete data to favor cheaper alternatives for high-volume vision workloads. It underscores the growing importance of cost-efficiency in enterprise AI model selection. In Roboflow's benchmark, Gemini 3.5 Flash beat GPT 5.6 Sol on all tasks except OCR, where a model called Fable won. GPT 5.6 Sol is the most capable variant in OpenAI's GPT-5.6 family, which also includes Luna and Terra.

hackernews · plurby · · Discussion · Single source

Background, discussion, and references

Background

GPT-5.6 is a family of large language models from OpenAI reportedly released on July 9, 2026, with three variants named Luna, Terra, and Sol. Roboflow is a computer vision platform that regularly evaluates models for developers. The comparison matters because real-world applications must balance accuracy, latency, and API cost when choosing a vision model.

Discussion

Commenters noted that the blog's own summary understated the results: Gemini 3.5 Flash outperformed GPT 5.6 Sol on all but one benchmark at one-third the cost. Others shared anecdotal praise for Sol's UI analysis capabilities, while one questioned a benchmark image's EXIF rotation and another argued Sol's latency makes it impractical for real-time robotics vision.

References

Tags

#openai#gpt-5.6#vision-model#benchmarks#ai-model-release

#11
Crypto
7.5

Vulcan (ex-Greenidge) flags bankruptcy risk as $33M debt maturity nears without PIPE close

Publicly traded bitcoin miner Vulcan (formerly Greenidge Generation) warned it may face bankruptcy because a proposed $39.4 million PIPE financing has not closed, leaving $33.1 million in senior notes due October 31 exposed. As of August 16, the company had received no proceeds from the deal. This is a material credit event for a publicly traded crypto miner, showing how debt maturities and capital-markets access can threaten mining firms even when they hold digital assets. It highlights the fragility of miners that rely on external financing in a high-cost, volatile operating environment. The PIPE would raise roughly $29.3 million from selling 17,146,190 shares at $1.71 each plus a $10 million convertible note from Machine Investment Group. The Oct. 10 outside date for closing is only 21 days before the notes mature, and Vulcan has not delivered a formal redemption notice.

rss · CryptoSlate · · Single source

Background, discussion, and references

Market impact

The main transmission channel is company-specific credit risk: the failure of a publicly traded miner to refinance maturing debt could pressure its equity and any outstanding bonds, and may signal higher financing costs for other miners reliant on similar PIPE deals. Broader digital-asset market impact is likely limited because the issue is idiosyncratic to Vulcan, though it can feed negative sentiment around mining stocks.

Background

Vulcan is a bitcoin miner formerly known as Greenidge Generation. A PIPE (private investment in public equity) is a private placement of shares or convertible securities in a company that already trades publicly, often used when traditional capital markets are not accessible. Senior notes are debt securities that have priority over junior debt in repayment, meaning they must be paid before subordinate creditors in a bankruptcy.

References

Tags

#crypto-mining#bankruptcy#debt#financing#greenidge

#12
Crypto
7.5

Bitcoin Miner HIVE Lands $350M AI Cloud Deal

HIVE's BUZZ HPC subsidiary signed a five-year, $350 million GPU cloud contract that adds $70 million in annualized recurring revenue. The deal marks HIVE's second large NVIDIA cluster agreement in two months. The contract underscores a growing trend of Bitcoin miners pivoting to AI and high-performance computing to diversify beyond mining revenue. It gives HIVE a stable, dollar-denominated revenue stream and validates the strategic value of miners' existing power and data-center infrastructure. The contract runs for five years and contributes $70 million in annualized recurring revenue (ARR). It is described as a 'large NVIDIA cluster deal,' and is the second such agreement HIVE has signed within two months.

rss · The Block · · Single source

Background, discussion, and references

Market impact

The deal is a company-level event, so its direct transmission to crypto spot or derivatives markets is limited. However, it may affect the trading of HIVE's stock and influence investor sentiment toward other publicly listed miners pursuing similar AI strategies, as the market reassesses miners' potential as hybrid HPC providers.

Background

GPU cloud computing and high-performance computing (HPC) involve leasing graphics processing units and clusters to handle workloads such as AI training and inference. Many Bitcoin miners are retrofitting their data centers to host NVIDIA GPU clusters, seeking more predictable revenue than the volatile block rewards from mining.

References

Tags

#bitcoin-mining#ai-cloud#gpu#hive#hpc

#13
7.5

Coinbase Unveils AiFi for AI Agent Payments After $100M in x402 Transactions

Coinbase launched AiFi, a full financial stack for AI agents covering trading, payments, and developer infrastructure, built on the x402 protocol and the Base network. The announcement follows over $100 million in transactions processed through x402. This move by a major exchange validates the emerging AI-crypto payments niche and could establish standards for autonomous machine payments. AiFi positions Coinbase to capture infrastructure value as AI agents begin to hold funds and transact on-chain. AiFi spans trading, payments, and developer infrastructure, and is built on x402 and Base, with USDC as a key settlement asset. The x402 protocol is backed by the Linux Foundation and enables instant stablecoin payments directly over HTTP requests.

google_news · CryptoNinjas · · Single source

Background, discussion, and references

Market impact

The launch could expand real-world use cases for stablecoins and Ethereum layer-2 networks, particularly Base, by enabling AI agents to transact autonomously. This may increase on-chain activity and demand for USDC and related infrastructure, while also drawing attention to AI-focused crypto projects building similar payment rails.

Background

x402 is an open, internet-native payment standard introduced by Coinbase that allows APIs, apps, and AI agents to send and receive payments through ordinary HTTP requests. AI agents are software programs that can autonomously perform tasks; enabling them to pay for services requires a lightweight, machine-readable payment rail. Stablecoins like USDC and layer-2 networks such as Base provide the low-cost, fast settlement layer for such transactions. AiFi is Coinbase's broader vision to provide the financial infrastructure for this new 'agentic finance' ecosystem.

References

Tags

#Coinbase#AI agents#payments#x402#AiFi

#14
Crypto
7.0

Kraken Parent Payward Joins Anthropic's Project Glasswing for Claude Mythos Security

Payward, the parent company of crypto exchange Kraken, has joined Anthropic's Project Glasswing and will use the Claude Mythos 5 model to scan its systems for security vulnerabilities. It is the first reported crypto company to gain access to the program. The move signals growing adoption of frontier AI for defensive cybersecurity in the crypto sector, following an open letter from more than 40 Bitcoin and crypto companies urging AI labs to grant trusted defenders access to powerful models. It could help harden both exchange infrastructure and the open-source software underpinning the crypto industry. Payward said findings from Mythos 5 scans will be reviewed and patched through its existing security program, and vulnerabilities found in third-party open-source software will be reported to maintainers. Project Glasswing, launched in April and expanded in June, has already helped partners uncover thousands of high- or critical-severity vulnerabilities.

rss · Decrypt · · Single source

Background, discussion, and references

Background

Project Glasswing is Anthropic's cybersecurity initiative that gives vetted organizations access to its most capable cyber models for defensive work. Claude Mythos 5 is the latest version of Anthropic's cybersecurity-focused AI model. The collaboration was announced amid growing evidence that AI models can both find and exploit software vulnerabilities, and after crypto companies publicly pressed major AI labs to open trusted-access programs to defenders.

References

Tags

#Kraken#Anthropic#Project Glasswing#Cybersecurity#AI Adoption