A devastating flaw in one of the crypto industry’s flagship hardware wallet providers has shaken confidence in self-custody, driving a massive surge of Bitcoin transfers to centralized exchanges. Following an ongoing exploit that drained an estimated $90 million from Coldcard wallet users, retail investors moved 39,600 BTC in transfers under 1 BTC in a single day, the highest daily small-holder transfer volume recorded since the collapse of FTX in November 2022.
Research from Galaxy Digital indicates the attack stems from a vulnerability in Coldcard’s seed generation mechanism, which failed to employ a genuinely random number generator. Across three successive attack waves, hackers compromised over 4,580 addresses, netting approximately 1,367 BTC. Security researchers continue to advise affected users to immediately evacuate funds from any address generated via Coldcard devices.
Legislative Gridlock and Ethics Disputes Freeze the Clarity Act
The security crisis unfolds against a backdrop of intensifying regulatory uncertainty in Washington. With only five days remaining before the Senate recess, passage of the Clarity Act has stalled. Proposed compromise ethics amendments drafted by Senators Thom Tillis and Ruben Gallego, which would permit state attorneys general to sue the Department of Justice over non-enforcement rather than suing elected officials directly, have failed to bridge partisan divides.
Senate Minority Leader Chuck Schumer introduced competing anti-corruption legislation targeting executive branch crypto holdings, further compounding the stalemate. Meanwhile, traditional banking lobbies continue to resist yield-bearing stablecoins, while law enforcement organizations remain divided over proposed carve-outs for blockchain developers under the Blockchain Regulatory Certainty Act.
Q2 Earnings Disappoint While Industry Revenue Concentrates
Corporate earnings reports for the second quarter mirrored the broader market’s malaise. Coinbase reported a net loss of $359 million on $1.2 billion in revenue as trading volume slumped, while Strategy Inc recorded an $8.22 billion paper loss driven by mark-to-market accounting on its treasury reserves. Online broker Robinhood posted strong overall financial results but saw crypto transaction revenue slide 38% year-over-year.
Despite weak earnings, market analysts at ARK Invest highlighted an unprecedented structural shift toward revenue consolidation. A mere three applications, Hyperliquid, Pump.fun, and Ethena, now command roughly 80% of total application revenue across the entire crypto ecosystem. Analysts expect this extreme concentration to accelerate mergers, bankruptcies, and shutdowns among smaller decentralized projects through the remainder of the year.
