A look at the week's key developments in blockchain and cryptocurrencies, covering security breaches, regulatory delays, protocol proposals, corporate treasury moves, and a major acquisition in the stablecoin space.

Coldcard Vulnerability Exposes Bitcoin Hardware Wallet Risk

Hardware wallets are widely regarded as the most secure method for storing Bitcoin, as the devices remain offline by design. This week demonstrated that offline storage alone is not sufficient.

A critical vulnerability was discovered in Coldcard devices manufactured by Coinkite. The flaw lay in the key generation process itself: a disabled hardware random number generator forced the firmware to rely on weak substitute entropy sources, namely the microcontroller serial number, a system counter, and real-time clock registers. These values are not secret, rendering the resulting private keys predictable. Failures in randomness during key generation are among the most severe defects possible in a hardware wallet, because they undermine the foundational assumption that private keys cannot be guessed or reproduced.

Seeds created since March 2021 on models ranging from Mk2 through Q are affected. Attackers drained approximately 1,816 BTC (around USD 116 million) from more than 4,500 addresses across multiple waves. Separately, reports indicate that around 1,367 BTC have flowed out so far.

Coinkite has released corrected firmware, halted shipments, and destroyed vulnerable inventory. The reputational damage extends beyond the company to the hardware wallet sector broadly. Users who generated seeds on affected devices are advised to treat those wallets as compromised and migrate funds to newly generated addresses on patched firmware.

US Senate Delays Crypto Market Bill Until Fall

The Digital Asset Market Clarity Act will not come to a vote before the summer recess. Majority Leader John Thune has not scheduled a cloture vote, and the bill remains approximately ten votes short of the 60 required to advance. The continued delay leaves the United States without comprehensive digital asset legislation, a gap that has persisted even as other jurisdictions — including the European Union with its MiCA framework — have moved ahead with bespoke crypto rules.

The legislation has had a protracted path. The House of Representatives approved the text in July 2025 by a vote of 294 to 134. The relevant Senate committees followed only in January and May 2026, after numerous delays. Under the bill, the CFTC would assume primary jurisdiction over digital commodities, while securities would remain under the SEC's authority.

Three issues are holding up the text. Senators Ruben Gallego and Thom Tillis want to prohibit federal officials and their spouses from holding their own tokens. Senator Catherine Cortez Masto considers the money laundering provisions insufficient. Senator Cory Booker is also negotiating over the Agriculture Committee's version of the text.

Senate staff describe the situation as a standstill and cite September as a realistic timeline. In the interim, only an interpretive guideline jointly issued by the SEC and CFTC applies, which any future administration could withdraw.

Ethereum Proposal Targets Zero Net Staking Issuance

While Washington debates regulatory jurisdiction, Ethereum's own protocol rules are under active discussion. Researchers led by Justin Drake of the Ethereum Foundation have proposed gradually burning staking rewards.

The draft, named Tapered Issuance Burn, has been under consideration since mid-July, with a forum discussion running since early August. Under the proposal, net issuance would fall to zero once approximately 50% of the ETH supply is staked, equivalent to roughly 60.25 million ETH. Currently, around 40 million ETH is deposited in the validator set, and the consensus layer yield stands at approximately 2.62% per year. After an 18-month rollout phase, only about 1.2% of that yield would remain.

Co-author Jérôme de Tychey argues that intervening only after the staking threshold has been crossed would require correcting a considerably larger imbalance.

Industry objections have been wide-ranging. Critics contend that the Ethereum Foundation is ignoring the full spectrum of secondary effects in the DeFi sector. Additionally, validators argue that already considerable operational effort would be compensated even less at a staking yield of approximately 2.62% per year. The debate also touches on a broader concern: as staking participation rises, newly issued ETH increasingly flows to stakers relative to non-stakers, a dynamic some researchers view as a long-term economic pressure on the protocol's neutrality.

Strategy Continues Bitcoin Sales for Capital Restructuring

Strategy, formerly known as MicroStrategy and the largest publicly listed Bitcoin holder, continued reducing its position. In the week ending early August, the company sold 1,638 BTC for approximately USD 104.73 million at an average price of USD 63,957 per Bitcoin.

Holdings now stand at 842,138 BTC, valued at approximately USD 52.6 billion. The total cost basis was approximately USD 63.5 billion, resulting in an unrealized loss of roughly USD 11 billion.

The proceeds are being directed toward balance sheet restructuring. Strategy raised its dollar reserve to USD 4 billion and repurchased STRC preferred shares at an 11% discount to par value. The repurchases fall under the Digital Credit Capital Framework announced in June, totaling USD 2 billion. The company also issued 3.01 million new shares.

Financial pressure is evident. Strategy reported a net loss of USD 8.22 billion in the second quarter, and the stock has declined 75% over the trailing twelve months. CEO Phong Le characterized the shift as a transition from capital accumulation to ongoing management of the capital structure — a marked departure from the company's years-long strategy of aggressive Bitcoin accumulation that once made it a bellwether for institutional Bitcoin adoption.

Mastercard Completes BVNK Acquisition

Mastercard completed its acquisition of stablecoin payment provider BVNK in early August. The purchase price is USD 1.5 billion, plus performance-based earn-outs of up to USD 300 million, bringing the total potential value to USD 1.8 billion.

The transaction ranks as the largest takeover in the stablecoin infrastructure segment to date, surpassing Stripe's acquisition of Bridge for USD 1.1 billion. The deal signals intensifying competition among global payment networks to build stablecoin settlement rails, as stablecoin transfer volumes have grown into a significant share of cross-border and B2B payment activity.

BVNK was founded in London in 2021 and processed approximately USD 30 billion in payments annually as of the end of 2025, serving more than 130 countries. Its clients include Worldpay, Deel, and dLocal.

For Mastercard, regulatory credentials are a key asset alongside volume: BVNK holds an EU e-money license and received MiCA authorization in February. The technology is expected to be integrated across four areas, including B2B payments, remittances, and corporate treasury flows.

The acquisition complements Mastercard's crypto partner program launched in March and its recently introduced card settlement capabilities in USDC, PYUSD, and RLUSD.