AGP Executive Report

Coldcard Fallout: Galaxy Research says a Coldcard wallet recovery-phrase flaw enabled a third theft wave, pushing suspected losses to ~1,367 BTC (about $88.6M) across 4,585 addresses, with a firmware fix coming too late for older weak seeds. Stablecoin Flows Watch: Korea-to-overseas stablecoin outflows hit 2.76T won in June (net ~560B won out), raising investor-protection and FX concerns as traders chase higher-risk venues. US Consumer Rulebook: Minnesota’s Aug. 1 crackdown bans crypto kiosks and toughens penalties for impersonating law enforcement, after nearly $1M was reported stolen via kiosks. Regulation in Kyrgyzstan: Kyrgyzstan’s virtual-asset regulator opens public discussion on new rules covering exchanges, stablecoins, RWA tokens, mining, a sandbox, and enforcement. Fraud & Scams: A Bitquery CEO faces allegations of stealing $5M and deleting 194 expense records; separately, the FBI reports a 59% jump in senior fraud losses, with a new bill headed to the Senate. Market Pressure: Bitcoin slid into August after the Coldcard scare, while XRP dipped below $1.05 amid broader risk-off sentiment.

Coldcard Wallet Hack: A firmware flaw in Coldcard hardware wallets let attackers drain about 1,082–1,196 BTC (roughly $70M) from roughly 1,200 self-custody wallets, with Coinkite urging affected users to create new seeds on fixed firmware. Bitcoin Market Mood: BTC hovered near $62k–$63k as traders digested the hack and ETF outflow pressure, while Bitcoin Dominance: BTC’s share of crypto rose to about 58.5%, signaling institutions still favor the “safer” bet. Regulation Fight: The CLARITY Act remains the big U.S. crypto policy hinge, with passage odds tied to the 2026 midterms and ethics/market-structure disputes. Scam Crackdowns: Minnesota’s crypto kiosk ban kicked in after nearly $1M in losses, and HMRC recovered £8M from hundreds of investors. Crypto Crime & Sanctions: Reuters detailed an Iran-linked gambling and exchange network using Dubai’s Shelbit to evade sanctions via crypto. AI + Crypto Builders: Coinbase CEO Brian Armstrong says AI agents will need “programmable money,” while a new Image-to-WebDev AI benchmark highlights faster product shipping for crypto teams.

Crypto Regulation & Consumer Protection: Minnesota’s crypto kiosk ban kicks in Aug. 1 as lawmakers target scam losses, while Massachusetts weighs a statewide ATM-style kiosk ban after residents reportedly lost $77M in 2024. Hardware Wallet Security: Coldcard firmware bug allegedly cut wallet seed entropy for years, enabling an attacker to drain ~594 BTC (~$38M) from about 500 wallets in 25 minutes. Sanctions Evasion via Crypto: A U.S. probe says Iranian exchanges and an offshore platform moved billions in crypto-linked flows, with nearly $1B frozen or seized. Geopolitics & Cyber Risk: The U.S. and allies warn North Korea uses IT workers with fake identities to earn money for nuclear/ballistic programs, including crypto theft risk. Market & Industry Moves: Bitcoin slips near $63K amid Iran tensions; Coinbase faces pressure after a Q2 revenue miss; and Russia expands mining restrictions in Moscow/Kursk through 2032. DeFi Incident: AFX Bridge exploit reportedly cost ~$24M in USDC.

Bitcoin Market Jolt: BTC slid toward a two-week low after failing to hold $65K, dropping about $3K in a fast sell-off and wiping out hundreds of millions in leveraged bets. Seasonal Pressure: Traders are watching August closely, a historically weak month in prior cycles. Regulation Watch: South Korea confirmed crypto gains will be taxed starting Jan. 1, 2027 at up to 22%, with filing due in May 2028. Stablecoin Spotlight: Circle secured a New York trust charter for USDC, while Tether reported $1.5B Q2 profit and reserves backing USDT. Fraud & Scams: Minnesota’s crypto kiosk ban starts Saturday after nearly $1M in losses tied to kiosk scams; Texas reported $56.8M in 2025 kiosk losses. Sanctions Evasion Probe: Reuters linked a Dubai gambling network and unlicensed exchange Shelbit to at least $4B moving through Iran-linked channels. North Korea Alert: Canada and allies warned remote IT worker schemes are being used to fund nuclear and ballistic programs. Crypto Stocks: Coinbase shares fell after a Q2 revenue miss, while SBI reaffirmed its Ripple stake value at about $41.2B despite XRP weakness.

Regulation Watch: Coinbase CEO Brian Armstrong said the Clarity Act failing before the August recess would still mean “business as usual,” arguing the SEC and CFTC could issue their own rules; analysts peg passage odds low. Exchange Earnings: Coinbase posted a Q2 net loss of $359.5M as revenue fell for a third straight quarter, even as it hit a record 10.3% global trading-volume share and prediction markets topped $100M annualized. Market Pulse: Fed-driven whipsaws triggered about $286M in leveraged liquidations across 87,294 traders, with BTC and ETH swinging but ending near unchanged levels. Stablecoin Expansion: Ripple’s RLUSD went live on South Korea’s top four exchanges, adding direct KRW access via Upbit and Bithumb. Scam & Crime Pressure: EU sanctions targeted a Cambodia-Myanmar cyberscam network accused of running crypto investment scams and forced online scamming; Nigeria also moved to overhaul its anti-trafficking strategy as traffickers shift online. Legal/Investor Risk: Kraken sued a New Zealand custodian over alleged misappropriation of $25M+ in customer funds, calling it “Ponzi-like.”

SEC Roundtable: SEC Chair Paul Atkins says the agency will study how to run U.S. stock trading 23 hours a day, five days a week, with a Sept. 17 public roundtable focused on infrastructure, risks, and liquidity. Crypto Tax Showdown: South Korea confirms its long-delayed crypto profit tax starts Jan. 1, 2027—20% on gains above KRW 2.5M, rising to 22% with local taxes—despite investor concerns about loss deductions. Russia Sanctions Evasion: Russia’s Rostec-linked ruble stablecoin RubX quietly soft-launched and began dollar-stablecoin swaps via Tether, even as the EU targets Russian crypto infrastructure. Market Watch: XRP rebounds toward $1.10 on fresh ETF inflows and Aviva Investors’ XRPL push, though sellers remain active near resistance. Scam Pressure: A Senate Aging hearing warns AI is supercharging fraud by cloning voices and manufacturing “proof” faster than victims and platforms can respond. Institutional Compliance: Hitachi plans a digital-asset monitoring service for banks and crypto firms, targeting an Oct. 2026 rollout. Regulation by Example: Armenia’s 2025 crypto-asset law ends the grey zone with a Central Bank licensing regime for crypto services.

Regulation Watch: Robinhood CEO Vlad Tenev says the U.S. needs durable crypto rules and backs the CLARITY Act, warning the “floor” can’t keep shifting every few years as crypto revenue slides 38% in Q2. SEC Backstop: SEC Chair Paul Atkins says the agency is ready to write crypto market rules if Congress stalls, but statute is the “future-proof” path. Prediction Markets Push: Binance.US plans to apply for a CFTC license for regulated prediction markets next month, while Robinhood’s prediction business already out-earns its crypto trading in a quarter. Security & Crime: U.S. Treasury sanctions two Iranian maritime insurers tied to IRGC-linked “safe passage” fees using crypto payments; meanwhile Lazarus-linked wallets moved 121.5 BTC (~$7.74M). Scam Pressure: New research finds AI is accelerating organized online scam operations in Southeast Asia, and South Korea arrests a Ripple staking scam crew. Market Mood: Bitcoin trades around $64.4K after the Fed held rates, with crypto staying rangebound and liquidations hitting ~$400M.

Fed Watch: Bitcoin stayed near $64K after the Federal Reserve held rates steady, while traders digested lingering uncertainty and crypto-linked stocks diverged. Whale Signals: Analysts pointed to continued BTC whale accumulation even as price action stalled. Regulatory Push: The Solana Policy Institute urged Senate leaders to move the Digital Asset Market Clarity Act before the August recess, with industry groups backing clearer rules. Crypto Policy in Focus: Binance launched regulated gold and silver options via ADGM, adding more TradFi-style derivatives access for crypto traders. Scam Alerts: Dallas County and Michigan AG both warned about imposter calls and payment demands that may include crypto; officials urged people to hang up and verify via official numbers. Crypto Crime & Courts: A NY crypto recovery fraud case heads to trial as a deal falters. Tech Meets Risk: Amazon linked a North Korea-linked hacker group to multiple open-source package compromises, underscoring how supply-chain attacks can reach crypto-adjacent systems. Education/Partnerships: DCX signed a non-binding MOU with Whales AI to commercialize an AI-powered STEM robotics platform across the US and Canada.

FTX Fallout: U.S. prosecutors charged FTX founder Sam Bankman-Fried with fraud and money laundering, alleging he diverted customer funds to Alameda and personal spending, with decades of jail on the table. Korea Market Shock: SK Hynix’s sudden stock move triggered a Hyperliquid liquidation event tied to a stock-referenced crypto derivative, wiping about $17.4M in realized losses for hundreds of traders. Regulation Watch: South Korea plans to implement crypto taxation in 2027 as scheduled, while the FSC reportedly aims to consolidate stablecoin and digital-asset rules into one bill. Institutional Flows: BlackRock-related reports say clients sold about $54.8M in Bitcoin amid volatile ETF flows. Security & Scams: Apple faces a lawsuit over a fake Sparrow Wallet app that allegedly stole ~$1.8M; meanwhile, police warn of crypto “fake detective” scams and a major Malaysia Forest City raid netted 335 suspects tied to love scams, currency fraud, and crypto syndicates. Mainstream Payments: Emirates begins accepting crypto payments via Crypto.com for eligible UAE bookings. ETP Expansion: Morgan Stanley launched Ethereum and Solana ETPs with staking rewards.

Crypto Crime Crackdown: Myanmar’s military-backed parliament approved an “Anti-Online Scam Bill” that keeps prison terms and adds the death penalty for those who detain or violently coerce victims into online scam work. Apple App-Store Fraud: A lawsuit says Apple kept and promoted a fake “Sparrow Wallet” iOS app after warnings, with plaintiffs alleging about $1.8M stolen from Bitcoin holders. Exchange Compliance Pressure: A report says Binance changed how it responds to law-enforcement requests, slowing investigations in some countries. Regulation Watch: Russia’s central bank set capital and operational rules for “digital depositories,” while the U.S. CLARITY Act faces fading odds as Bitcoin slips near $63K. Wallet Security (Quantum): AmericanFortress proposed a quantum-safe add-on that could protect existing wallet addresses without moving funds. Market Moves: Morgan Stanley launched low-fee spot Solana and Ethereum ETFs with staking features, while crypto liquidations surged amid the selloff. Scam Warnings: U.S. sheriffs and auditors highlighted rising impersonation and elder-targeted scams, including demands for crypto payments.

Regulation Push: Pakistan’s FIA launched a Virtual Currency Investigation Cell plus AI-and-blockchain tools to target crypto-linked terror financing, money laundering, and cybercrime, with a fusion centre to coordinate intelligence. EU Compliance Deadline: MiCA’s July 1, 2026 enforcement deadline is now the big operational clock for crypto firms in the bloc, with major compliance steps required. US Policy Gridlock: The US Senate’s Digital Asset Market Clarity Act is unlikely to hit a floor vote before the August recess as leadership schedules nominations and a Russia sanctions bill first. Scam Crackdowns: Myanmar approved an Anti-Online Scam law that keeps death-penalty provisions for forcing victims into scam centres, while Malaysia’s Johor police busted call-centre syndicates using Telegram/WhatsApp/TikTok to run fake crypto investment and romance scams. Platform Risk: BitMart is winding down after nine years, sending its BMX token sharply lower and adding to a wider exchange shakeout. Consumer Fallout: Apple faces a lawsuit after users claim a fake iOS Bitcoin wallet app wiped out about $1.8M. Market Mood: Bitcoin slipped in early Asia on rising rate fears, with traders watching key downside levels.

AI & OSS Policy: Codeberg says it will reject projects whose code is largely machine-generated via LLM tools, after a community vote backed tighter rules on AI-assisted code scraping and “license whitewashing.” US Crypto Oversight Push: New York AG Letitia James urged Congress to strengthen crypto regulation to curb scams, warning the Clarity Act could weaken state enforcement. Scam Crackdowns (Crypto ATMs): Minnesota starts banning crypto kiosks Aug. 1, while New Zealand weighs targeted rules instead of a full ban as kiosks spread. Regulator vs Exchange: Thailand’s SEC alleges Bitkub concealed a 2021 cyberattack tied to a $50M theft, moving the case toward police prosecution. Exchange Shakeups: Uphold cuts about 17% of staff as it shifts toward enterprise services; BitMEX will shut down in September after 11 years. Tokenized Gold: Tether’s XAUt gets Shariah certification to expand access for Islamic finance investors. Market Pulse: Bitcoin hovers near $65K as ETF flows swing and traders watch upcoming policy headlines. Fraud Tech Alert: Google search results reportedly exposed shared Claude chats, including sensitive user data.

Bitcoin rebounds: BTC climbed back above $65,000 as the U.S. and Iran paused strikes, lifting risk sentiment while oil slid ~5%. Crypto policy push: SkyBridge’s Anthony Scaramucci called the U.S. CLARITY Act “ten times better” than no rules, but Senate timing and ethics fights remain messy. Market structure pressure: Spot Bitcoin and Ethereum ETFs saw fresh outflows as Fed-rate worries returned. Security hits: Garden Finance took its app offline after a solver database compromise drained about $450k USDT; Triple-A confirmed unauthorized access to treasury wallets totaling ~$11.8m while client funds stayed safe. Regulation abroad: India’s CBDT issued 198-page crypto reporting guidance aligned with OECD CARF; the EU adopted its 21st Russia sanctions package, tightening crypto-network restrictions and sanctioning HTX. Tech + crypto: Coinbase CEO Brian Armstrong argued AI agents will need “programmable money,” boosting crypto’s role. Scam risk: Apple faces a lawsuit over a fake Sparrow Wallet app allegedly stealing ~$1.8m. Automated trading: Toobit upgraded its Futures Grid Bot with a reserve margin feature to reduce liquidation risk in volatility. Crypto + geopolitics: Korea Customs flagged $4.92b in illegal FX trades, including cases using crypto to move export proceeds.

India Tax Rules for Crypto: India’s CBDT issued a detailed OECD-aligned framework requiring crypto exchanges and other crypto intermediaries to collect users’ tax residency and ID details and share transaction data annually, starting next financial year. Ireland Prediction Markets Blocked: Polymarket and Kalshi are geoblocked in Ireland after the Gambling Regulatory Authority of Ireland threatened legal action over operating without a licence. Russia Builds Regulated Crypto Rails: Sberbank plans crypto trading infrastructure by Dec. 1, including a digital depository to record ownership and process most transactions outside the main blockchain as Russia moves toward a regulated market. Crypto Crime Crackdowns: India’s ED alleges a Pune fintech helped launder proceeds from the “ALL PANEL EXCHANGE” fraud via shell firms and cryptocurrency, while North Korea reportedly arrested hackers accused of laundering stolen state funds through crypto. Scam Alerts: U.S. and local police warn of impersonation scams that may demand crypto or gift cards, and a Michigan State Police alert targets calls posing as MSP personnel. Market Watch: XRP is edging higher around $1.10 amid broader crypto recovery ahead of Fed discussions.

ClickFix Malware: Steam users are being lured by “fixes” posted in forums that trick victims into running PowerShell commands, secretly installing an XMRig miner and draining PCs. Binance Security Drills: Binance says it runs monthly phishing simulations on staff, with extra training for failures and tougher consequences for repeated misses. Kenya Ransom Attack: Kenya’s presidential site was defaced and taken offline after a ransom demand of five bitcoin, with officials saying there’s no sign of data theft so far. North Korea Wallet Phishing: BlueNoroff is using fake Zoom/Teams meetings (often via hijacked Telegram contacts) to scan wallets and deliver malware that steals browser and wallet credentials fast. Exchange Shutdowns: BitMart has started a phased global wind-down, ending trading Aug. 26 while withdrawals stay open; BitMEX also plans to close Sept. 23. Russia Banking Push: Sberbank plans a regulated crypto trading and custody infrastructure plus a digital depository by Dec. 1, aligning with Russia’s new framework. CLARITY Act Pressure: Wall Street and police groups back the U.S. CLARITY Act as Senate timing tightens, while crypto advocates keep flooding Congress. Scam Tactics: Authorities warn that replying to scam texts can confirm active numbers, and “mule accounts” remain a key laundering tool in crypto fraud.

North Korea crackdown: Pyongyang arrested former military hackers accused of stealing from the Central Bank and Foreign Trade Bank, then laundering proceeds through overseas crypto wallets before cashing out via Chinese brokers. Russia crypto rails: Sberbank plans crypto trading infrastructure and a digital depository by Dec. 1, aiming to bring custody and settlement into Russia’s licensed framework. India enforcement: The ED alleges a Pune fintech helped launder an ₹800-crore fraud tied to “ALL PANEL EXCHANGE,” routing funds through shell firms and converting them into cryptocurrency. UK court case: British sprinter CJ Ujah denied involvement in an alleged crypto fraud linked to police/crypto-company impersonation scams. Security & crime: The FBI arrested a Florida man over a Steam malware scheme tied to about $220,000 in crypto theft. Scam patterns: An Ahmedabad CFO lost $81,700 after a matrimonial-app match steered him into a USDT “trading” site. Market watch: Bitcoin hovered near $64K as ETF flows cooled and macro jitters hit risk assets. Regulation signals: India’s crypto debate heats up as a parliamentary panel pushes an interim VDA self-regulatory approach. Crypto safety: Reports highlight “wrench attacks” rising as criminals target people, not just wallets.