AGP Executive Report

Coldcard Fallout: Coinkite’s Coldcard firmware flaw (seed randomness bug since 2021) is tied to theft estimates around $114M–$130M, with attackers still sweeping thousands of compromised wallets—prompting urgent “move your funds” warnings. Nigeria Crypto Tax: Nigeria’s new virtual-asset tax rules add stamp duties and withholding, and critics say the “tax the movement” design could push users away from regulated exchanges. Regulation & Custody: Blockchain.com secured a Cayman Islands VASP license for custody and exchange services, adding to its MiCA and UK FCA approvals. Crypto Market Pulse: Bitcoin slipped near $64.4K amid US jobs data and Fed-rate worries, while ETF inflows continued to support sentiment. Fintech Product Moves: SEI launched the ANGU research-enhanced U.S. large-cap ETF, and Bercor Pay rolled out a cross-border USD Visa card with Apple/Google Pay and upfront fees. Payments & Security: Zeus Wallet paused services after a security incident (no user funds lost reported), while multiple US states warned about bitcoin kiosk scams. AI Infrastructure Costs: Reports say power volatility at AI data centers is damaging equipment faster than planned, raising the real cost of the AI buildout.

Crypto Policy: Sen. Cynthia Lummis urged the Senate to vote on the CLARITY Act before the August recess, warning Democrats could kill the bill despite months of bipartisan work. Digital Assets & Security: A major Coldcard hardware-wallet firmware flaw is again in focus after reports of an “extremely bad” Bitcoin ecosystem audit and ongoing fallout from offline key-generation weaknesses. Market Snapshot: Bitcoin traded around $64.5K and Ethereum near $1,900, with crypto moving more on macro hopes than fresh on-chain demand. Payments & Banking Tech: Maybank Singapore joined MAS’s BLOOM initiative to advance tokenised cross-border settlement using regulated stablecoins; Vic.ai partnered with Increase and Core Bank to streamline AP payments from invoice approval to settlement. Regulation & Compliance: Nigeria’s tax authority rolled out virtual-asset taxation rules covering crypto, NFTs, stablecoins and DeFi, while Singapore expanded its fraud-fighting toolkit via GoWest and Rippleshot for credit unions. Retail Adoption: Dubai Duty Free enabled cryptocurrency payments via Crypto.com’s regulated rails at DXB, AMIA and online. Corporate Finance: SpaceX reported a $540M bitcoin-related loss while keeping its BTC holdings flat, even as IPO cash piled into money-market funds. Fintech Growth: UnionPay International and Pesapal expanded card acceptance across East Africa, starting in Tanzania and rolling into Rwanda.

Crypto Payments Push: Real Jet is partnering with Crypto.com to let private-flight charters be paid in crypto, betting on a mainstream use case for digital assets. Open-Banking Fight: The CFPB has submitted a revised open-banking proposal to the White House that could allow banks to charge fintechs for customer data access, setting up fresh legal battles. Coldcard Fallout: Galaxy Research says the biggest Coldcard hardware-wallet theft involves 1,159 BTC (~$72.7M) still unmoved, while a separate attacker has started routing smaller amounts through a mixer. Regulatory/Market Watch: Coinbase will suspend six crypto pairs on Aug. 6 after moving five to limit-only mode; Lido DAO rebounded ~5% after its NEST vote, even as Ethereum staking proposals weigh on sentiment. Fintech Earnings: Chime raised its 2026 revenue growth forecast and CFO Matt Newcomb will step down; Block reported a 31% drop in bitcoin gross profit after Cash App fee cuts. Fraud & Enforcement: DOJ charged an Ontario man in a hacking conspiracy tied to a U.S. cloud breach and ransom payments in crypto.

Stablecoin Regulation Push: A new argument says the Fed should treat dollar-backed stablecoins as “real money” by designing interoperability with tokenized deposits, warning that without clarity value could stay uncertain. Stablecoin Clarity vs Politics: Another take says stablecoins need more than an act of Congress, arguing any U.S. rules raise barriers and slow consumer adoption. Crypto Market Mood: Bitcoin held near $64K as traders watched macro headlines around the Strait of Hormuz, while self-custody fears deepened after the Coldcard hardware-wallet exploit, now pegged around $100M+. Security & AI Scrutiny: Coinkite says AI failed to catch the flaw, urging teams to test build boundaries for security-critical code. Payments & Fintech in Focus: Circle reported higher Q2 revenue as USDC circulation jumped; Taiwan proposed mandatory Travel Rule-style customer info sharing for domestic crypto transfers; and India’s debate over charging fees on UPI/RuPay debit payments for large merchants heats up. Banking/Markets: Kenya’s NSE plans East Africa’s first AI-focused ETF, while Russia’s Putin signed a digital currency law legalizing key crypto activities. Corporate/Deal News: Boerse Stuttgart Digital and Tradias completed a merger to build an institutional crypto platform. Fintech Awards: LendKey made CNBC’s top fintech list; Shufti won a fraud-prevention Stevie.

Crypto Regulation: Russia’s first comprehensive crypto law takes effect, treating digital assets as property, setting Bank of Russia oversight, and requiring registered intermediaries (with a 15 million ruble minimum) while still banning crypto payments for most goods and services. Stablecoins & Payments: Open USD’s backers are signaling a “multi-stablecoin” approach—Coinbase, Visa and Mastercard framed it as interoperability, not a single USDC replacement. Bitcoin Markets: BTC steadied near $64,000 after the Coldcard cold-wallet exploit fallout and Strategy’s recent sales; Glassnode points to heavy supply around $63k and retail re-accumulation signals. Security & Custody: Multiple reports keep spotlighting Coldcard’s firmware/entropy weakness and ongoing theft estimates, reinforcing the shift from self-custody assumptions to tighter operational risk controls. Corporate Crypto: SpaceX topped revenue forecasts but posted a $540M loss and disclosed bitcoin holdings worth about $1.1B at quarter-end. Fintech & Jobs: Visa, ServiceNow and Chime announced Bay Area layoffs totaling hundreds, while Bilt faced credit-reporting fallout from a collections agency error. Policy & Governance: Nigeria ordered tighter data protection compliance across ministries, pushing for Data Protection Officers and NDPC alignment. Local Impact: Interledger Foundation launched $500–$3,000 mini-grants to fund grassroots digital financial inclusion and open payments.

Nigeria Banking: FirstHoldCo, parent of First Bank of Nigeria, secured Central Bank approval for a N1.4trn public share sale (10.4bn shares), with management saying demand is so strong it may close in about a week. Crypto Security: Kaspersky flagged the OkoBot/OkoSpyware campaign targeting cryptocurrency users, designed to steal seed phrases and monitor browser activity across 25+ countries. US Regulation: Senate Majority Leader John Thune confirmed the CLARITY Act is headed for a floor vote before the August recess, but passage still hinges on clearing the 60-vote filibuster hurdle. Market Macro: Bitcoin is trading in a tight range as investors look to US jobs data; yen intervention has revived carry-trade jitters that can spill into risk assets. Crypto Products: Hashdex will close and liquidate its $14.7m spot bitcoin ETF, citing weak investor interest and shifting demand toward AI-linked returns. Fintech Hiring: Razorpay is beefing up AI-native payments with senior hires from Microsoft, Salesforce, CRED and Divyam.ai. Africa Payments: FNB rolled out an ATM feature letting international cardholders see withdrawal amounts in home currency via dynamic currency conversion. Cyber Risk (Africa): Interpol says South Africa is Africa’s top cybercrime hotspot, with most ransomware and BEC detections concentrated there.

Bitcoin & Markets: Strategy keeps monetizing its BTC stash—selling about $105M of bitcoin and shares while boosting its USD reserve to $4B—while analysts debate whether late 2026 is the likeliest cycle bottom. Crypto Custody Shock: Coldcard’s long-running firmware/seed-generation flaw is tied to theft estimates near $89M, shaking confidence in self-custody. Stablecoins & Regulation: Dakota is seeking an OCC trust charter for stablecoin business; South Korea’s Digital Asset Basic Act push aims to consolidate crypto rules, including won stablecoins, by year-end. Payments & Banking Tech: Grab posted $252M Q2 profit and raised guidance, with finance revenue up sharply; Karnataka Bank launched a digital insurance lead portal; Visa agreed to buy BioCatch for $2.4B to strengthen behavioral fraud detection. Enforcement & Crime: An FBI agent was charged after allegedly stealing nearly $1M in crypto from adversarial accounts; a London crypto kidnapping/extortion case ended with convictions. Fintech Deals: OpenPayd filed an F-4 amendment for its business combination with Titan. Macro FX: US-Japan yen intervention talk is back in focus, with carry-trade jitters spilling into crypto sentiment.

Crypto Security Shock: Coldcard wallet breaches tied to a firmware flaw are again in the spotlight, with reports of $70M+ drained and warnings that more affected wallets could be swept in waves. Payments & Banking: GCash is rolling out “link-and-pay” QR transactions funded by linked Visa cards, using Visa Payment Passkey for biometric/PIN authentication; the UAE Ministry of Finance also adopted “Aani” and “Jaywan” as new federal fee-and-fines payment channels. Fintech Expansion: Pakistan’s Abhi plans an IPO for Abhi Microfinance Bank, while Robinhood secured UK FCA crypto registration ahead of the next licensing regime. Crypto Market & Regulation: South Africa released draft cross-border crypto rules requiring offshore transfers via authorized providers and reporting to the Reserve Bank; Japan’s Bitget is exiting the market for residents. Institutional/DeFi Finance: Hyperscale Data raised ~$30M via a Bitcoin-collateralized Morpho DeFi loan to fund Michigan expansion. AI in Finance: Pluang is testing AI-led trading with human confirmation, and D-Wave is piloting quantum tech with Nasdaq Verafin for financial crime detection.

Coldcard Fallout: A 2021 firmware flaw tied to the Coldcard hardware wallet has reportedly drained about 1,367 BTC (~$89M) across thousands of wallets, with attackers running multiple waves and even posting a laundering “offer” on-chain—prompting urgent migration guidance and renewed self-custody risk debate. Legal Pressure: Victims are weighing class-action/product-liability moves against Coinkite, while industry voices warn that patches may not fix already-generated seeds. Market Impact: The exploit is distorting on-chain signals and comes as Bitcoin trades choppily near $62K–$63K, with ETF flows and leverage metrics staying in focus. Fraud & Scams: Separate reporting highlights how West African scam networks keep targeting Americans at scale, including sextortion campaigns using real breach data. Policy & Payments: India’s UPI hits a record Rs 29.9 lakh crore in July, while the US and Japan coordinate on yen weakness—both underscoring how macro and rails shape finance fast. AI & Crypto Infrastructure: Big Tech’s AI spending surge is also feeding demand for data centers and the crypto mining supply chain.

Crypto Security & Scams: Minnesota’s crypto ATM ban kicks in after nearly $1M in reported losses, with officials warning kiosks are repeatedly used in romance and impersonation scams that push victims to send money via “unconventional” channels. Self-Custody Under Pressure: Galaxy Research raised the estimated Coldcard theft to 1,367.05 BTC (~$88.6M) across 4,585 addresses after multiple attack waves, reviving debate over wallet safety and operational security. Stablecoins & Regulation: Bahrain’s AX Coin says its AXBHD stablecoin cleared a formal Shari’a review, positioning it as a centrally bank-regulated product with ongoing governance. Market Structure Shift: DEX spot volume hit a record 24% of CEX trading share in July, even as overall DEX turnover fell, signaling more on-chain trading for new access. Policy & Oversight: New York AG Letitia James urged Congress to strengthen crypto fraud rules without weakening state enforcement, as reported scam losses climb. Geopolitics & Crypto: Russia expanded its Moscow-area crypto mining ban through 2032, citing grid strain.

Coldcard Fallout: Galaxy Research says a third wave of Coldcard-related thefts drained 207.7294 BTC, pushing estimated losses to 1,367.05 BTC (~$88.6M) across 4,585 addresses, after a firmware-era weakness let attackers reconstruct seeds offline. Self-Custody Reality Check: Coinkite issued emergency firmware, but users must migrate funds because old weak seeds can’t be “fixed” in place—prompting renewed calls to split holdings and rely on stronger custody. Crypto Market Pressure: Strategy’s plan to sell up to $5B in Bitcoin to protect dividends sparked extra selling pressure; Michael Saylor later clarified the authorization timing and said Strategy expects to remain a net buyer. Regulatory Turf War: The SEC froze Nasdaq’s cash-settled Bitcoin options approval after CME challenged jurisdiction, setting up a comment process through Aug. 24. ETF Boom, Derivatives Everywhere: US ETF launches hit a record pace, with 50% of new funds using derivatives and crypto ETFs continuing to roll out. Geopolitics Hits Risk Assets: US-Iran escalation and Treasury sanctions on Iranian crypto infrastructure are driving whipsaws in Bitcoin and broader markets.

Crypto Scam Fallout (Hong Kong): Hong Kong police logged 25 romance and online-dating investment scams in late July, with losses nearing HK$70m (~US$9m), including a case where a victim was steered into a fake crypto trading setup and blocked from withdrawing after months of “profits.” Sovereign Crypto Mandate (Bhutan): Bhutan’s Gelephu Mindfulness City named 3iQ as the first institutional manager for part of its Bitcoin treasury, formalizing a state-level accumulation plan into a discretionary mandate (details like BTC amount and fees not disclosed). Regulation Push (Delaware): A bill to curb crypto kiosks stalled in Delaware’s Senate, leaving consumer advocates worried as lawmakers pivoted from warning-sign rules to a proposed kiosk ban after scam reports. Security Shock (Adform): Adform says attackers poisoned a JavaScript ad script to swap crypto wallet addresses on customer sites, urging users to clear caches and double-check addresses. Market & Policy Crosscurrents: Bitcoin hovered around the low-$60Ks amid ETF flow jitters and macro uncertainty, while the CLARITY Act debate remains a live catalyst for US crypto policy. AI + Crypto Crime: OpenAI reportedly shut down Cambodia-linked ChatGPT accounts tied to crypto investment fraud, highlighting how scammers use AI to build trust and funnel victims to fake trading platforms. Payments Reality Check: MARA CEO Fred Thiel argued Bitcoin’s payments era is over due to volatility, pointing to stablecoins as the practical alternative.

Crypto Policy: Minnesota’s ban on cryptocurrency kiosks starts Aug. 1, with machines taken offline immediately and removed by Dec. 31 after officials linked them to nearly $1M in losses and widespread scams. Cyber & Custody Risk: Coldcard’s $38M-plus wallet exploit is traced to a years-old firmware flaw, and investigators say the attacker used a blockchain services provider to support the theft workflow—renewing pressure on self-custody practices. Stablecoin Watch: Tether posts $1.5B Q2 operating profit as excess reserves shrink by about half, while it boosts gold holdings and adds to BTC reserves. AI Infrastructure & Finance: Big Tech’s AI data-center spending is projected to approach $2.4T, with Morgan Stanley flagging a $1.5T financing gap likely to be filled by private credit. Regulation & Platforms: Google will require Android developer verification for sideloading on most devices, but sanctioned-country devices get an exemption—raising concerns for app distribution. High-Profile Case: Authorities released Nancy Guthrie ransom notes, including a second note claiming she died shortly after the abduction, and are asking the public to recognize the writer’s language patterns.

Open Finance Push (Philippines): FintechAlliance.Ph backed House Bill 9149, which would let consumers authorize transfer of up to 24 months of alternative data (like bill and subscription activity) to lenders to assess creditworthiness. Cashless Expansion (Balkans): Nayax rolled out its unattended card payments suite in North Macedonia, targeting vending, laundromats, EV charging and other self-service merchants. Mobile Money Drive (Ghana): MobileMoney Fintech launched “Ride with MoMo” with GhIPSS via GhQR to push digital fare payments for drivers. Sanctions Evasion Probe (Crypto): Reuters alleges an Iran-linked $4bn sanctions-dodging network used online gambling, crypto trades and a Dubai exchange (Shelbit) to route funds through platforms like Binance. Banking Deregulation (US): The Trump administration is rolling back red tape for the smallest banks by easing the Community Bank Leverage Ratio, aiming to free up lending capacity. Stablecoin Oversight (South Africa): SARB reiterated that stablecoins could improve payments but warned they need regulation to protect exchange controls and oversight. Corporate Crypto Volatility (Strategy): Strategy reported an $8.2bn Q2 net loss tied to paper Bitcoin markdowns while continuing to grow its BTC holdings. AI + Fraud Gap (UK): A UK survey found AI-enabled fraud is outpacing financial crime teams’ response, with governance guidance still lagging. Revolut + OpenAI: Revolut partnered with OpenAI to bring ChatGPT Go to millions of customers, with free access periods depending on plan. Security Alert (Coldcard): Coinkite warned some Coldcard Mk3 seed generation setups may be vulnerable, requiring users to move funds to new keys.

Coinbase Earnings: Coinbase shares slid after a third straight quarterly loss as transaction revenue fell with weaker crypto trading; it still hit a record 10.3% share of global spot volume, but subscription/services revenue also missed. Stablecoins: Stablecoin market cap dropped about $16B in 10 weeks to a six-month low, with the GENIUS Act’s yield limits cited as a key driver. Crypto Policy Push: The SEC chair defended a proposal to let companies report earnings only twice a year, despite massive opposition—while the CLARITY Act gained momentum with over 1M Americans urging senators to back it. Payments Infrastructure: Canada’s Real-Time Rail is moving toward rollout, aiming to launch in Q4 2026 and reshape 24/7 money movement. AI Data Centers & Finance: New York moved to slow hyperscale data center permits, while Google reportedly backed a $15B Anthropic-linked Texas campus—fueling the AI-and-power buildout that’s now colliding with regulators. Banking-as-a-Service Risk: Coastal Financial flagged concentration risk tied to a fintech partner, driving a big quarterly credit-loss expense. Regional Fintech Growth: Singapore dominates SEA payment startup funding, and Africa’s intra-trade is raising FX risk for businesses. Corporate Results: Peoples Financial Services reported lower Q2 earnings on higher credit-loss provisions.

Crypto Exchange Restructuring: Luno is cutting about 20% of staff as it leans harder into automation and shifts toward business-to-business crypto services, with weaker retail trading continuing to pressure the sector. AI Meets Payments: MoonPay launched PayBox, letting AI agents in Claude/ChatGPT initiate real transactions via a “payment vault,” while Revolut is bundling ChatGPT Go subscriptions into its tiers in a bid to make AI a daily finance-adjacent tool. Institutional Crypto Product Push: Morgan Stanley rolled out staked ETPs for Ethereum and Solana, signaling deeper mainstreaming of crypto exposure through familiar wrappers. Mainstream Retail Crypto Rewards: Bitget Wallet Card added “Assetback” cashback that converts eligible spend into Bitcoin, gold, or tokenised stocks/ETFs. Macro Shock to Risk Assets: After the Fed held rates, Bitcoin jumped toward $64,400 as the dollar steadied and markets digested hawkish dissent. Regulation and Compliance in Focus: Binance.US is pursuing a CFTC license to enter prediction markets, while Fast Shift secured Malta EMI authorisation to expand into the EEA. Security and Fraud Pressure: Authorities and courts continue to target crypto-linked fraud and scams, from alleged Iran-linked hospital spying to warnings about crypto ATM misuse.