BTC $63,615, ETH $1,880.17, SOL $76.10, XRP $1.023, HYPE $54.59, DOGE $0.072141, AAVE $88.08, ZEC $481.76.
Wednesday morning is about wrappers getting teeth.
The August 9-11 digests already covered BIP-110’s weak fork, Brazil’s transfer delays, ETF flows, Robinhood and Coinbase distribution, miner AI pivots, Broadridge’s repo rail, Ethereum privacy, tokenized gold, wallet drains, WordPress supply-chain abuse, Solidity extension malware, and yesterday’s SEC Reg Crypto meeting setup.
This morning moves the board again.
The SEC may propose a crypto offering regime that starts with a token safe harbor. CLARITY’s September route looks heavier, not cleaner. Bitcoin slipped toward $64,000 before the CPI test. Coldcard migration pushed new Bitcoin addresses from about 260,000 to more than 330,000. ENS tokenholders moved the foundation from steward to operating body with control over a $65 million endowment. Twenty One Capital lost $413.5 million and now has to prove it is more than a public bitcoin box. Riot’s reported Anthropic deal made AI colocation the main valuation story. Keel’s CEO described a full demolition of mining sites for data centers. U.K. lawmakers asked banks whether the new FCA regime changes account access for crypto firms. GRVT is putting Ondo’s USDY inside its user base-rate product. GitHub’s fresh board points to phone-control agents, animation infrastructure, and robotics-first time-series tooling.
Less “which asset rallied?” More “who gets a regulated wrapper, a usable balance sheet, a bank account, a board, a data-center tenant, and a policy layer when crypto stops being early.”
Price snapshot via CoinGecko simple-price data around 05:50 HKT.
1. The SEC May Start With A Token Safe Harbor
The Block reported that the SEC will hold a public meeting Friday to consider tailored offering rules for certain crypto investment contracts.
TD Cowen’s read is that the agency may start with a safe harbor for early-stage token sales. That would give projects a path to issue tokens during network development without treating every sale as an immediate securities-law trap.
That is the better version of crypto policy.
Enforcement can punish bad actors after the fact. A disclosure and compliance regime tells serious issuers how to launch before they get sued. The hard part is the transition test: when does a token move from investment-contract wrapper to commodity-like network asset?
If the SEC can answer that cleanly, the rule could matter more than another round of speeches.
2. CLARITY’s September Path Got Messier
The Block’s policy feature said the CLARITY Act still faces a difficult September even after avoiding a failed August vote.
The unresolved list is not small. Stablecoin reward language, ethics fights, CFTC jurisdiction, bank-sector pressure, and Senate calendar math all have to fit into a post-recess window.
That makes Friday’s SEC meeting more important.
If Congress keeps moving slowly, agencies will fill the vacuum. That may give builders narrower rules faster, but it also risks a patchwork where token issuance, secondary trading, custody, stablecoins, and market abuse all move on different clocks.
The industry asked for clarity. It may get it in pieces.
3. Bitcoin Slipped Into The CPI Test
The Block reported that bitcoin fell toward $64,000 after failing four times to hold above $65,000.
Ether was weaker, trading near $1,880. The immediate catalyst is Wednesday’s U.S. CPI print, the first major inflation read since weak payrolls cut September rate-hike odds from about 80% in late July to roughly 44%.
That is the current market in one chart.
Crypto has ETF demand, tokenization news, and policy progress, but price still cares about the macro release in front of it. Bitcoin’s diversification story only works if it can absorb CPI without turning into a thinly traded rates proxy.
The next move doesn’t need drama. It needs follow-through above the level traders keep rejecting.
4. Coldcard Migration Hit The Address Data
The Block reported that new Bitcoin addresses jumped from roughly 260,000 to more than 330,000 last week.
The reason appears ugly: users are moving funds after the Coldcard seed-generation exploit.
That turns a security advisory into onchain behavior. Wallet migration shows up as address creation, transaction demand, support tickets, exchange deposits, and maybe ETF custody flows if larger holders decide self-custody hardware risk is no longer worth the purity points.
The useful lesson is simple. Self-custody can fail through software, hardware, entropy, backups, user process, or panic migration.
Bitcoin’s security model is strong. The human and device layer still isn’t.
5. ENS Gave Its Foundation Real Operating Power
The Block reported that ENS tokenholders executed the “Next Era of ENS DAO” proposal.
The ENS Foundation now becomes a fully operational organization with staff, an executive director, a five-member board, offchain policy work, trademark authority, institutional engagement, and administrative control over an endowment worth about $65 million.
That is a DAO growing up the hard way.
Token voting is good at signaling broad preference. It is worse at hiring staff, handling legal work, maintaining trademarks, and dealing with institutions that need somebody accountable across the table.
ENS is choosing an operating wrapper around the DAO. That may annoy governance purists, but protocol brands with real assets eventually need adults holding pens.
6. Twenty One Showed The Bitcoin Treasury Discount Problem
The Block reported that Twenty One Capital posted a $413.5 million second-quarter net loss, mostly from bitcoin markdowns.
The company still holds 43,514 BTC, worth about $2.78 billion, but its new CEO Raphael Zagury says it has to become more than a bitcoin treasury. The market agrees. Its enterprise mNAV sits around 0.7x, meaning investors are valuing the company below the bitcoin it holds.
That is the warning for every treasury wrapper.
Owning bitcoin at scale is not enough if shareholders can buy bitcoin directly, buy ETFs, or buy a cleaner balance sheet. The wrapper has to add something: credit, lending, operating cash flow, acquisition skill, tax structure, or liquidity.
Otherwise the stock becomes a leaky BTC container.
7. Riot’s AI Deal Changed The Miner Math
The Block reported that Bernstein raised its Riot price target after a reported $9.1 billion AI data-center lease with Anthropic.
The 20-year deal covers 191 IT megawatts at Riot’s Rockdale campus in Texas and is expected to generate about $457 million in annual recurring revenue. Bernstein now estimates AI colocation accounts for 84% of Riot’s target enterprise value, compared with 11% for bitcoin mining and 5% for bitcoin holdings.
That has moved beyond a side business.
For miners, AI demand has turned power sites into the asset and ASICs into the replaceable part. The market no longer has to believe in hashprice recovery if an AI tenant signs a long lease.
The catch is brutal: once AI colocation drives the valuation, investors will judge miners like infrastructure landlords, not bitcoin proxies.
8. Keel Is Demolishing The Mining Story
The Block reported that Keel Infrastructure CEO Ben Gagnon described a full rebuild of former bitcoin mining sites for AI data centers.
The company, formerly Bitfarms, has already sold 1,085 BTC for $75 million and is down to 1,861 BTC on the balance sheet. Gagnon said the work is not a light retrofit. It is “complete demolition” of mining facilities and construction of new data-center buildings.
That is the purest version of the pivot.
Miners used to say they had cheap power. Now the question is whether that power can support uptime, cooling, interconnection, financing, and customers with real compute demand.
The bitcoin business got them the sites. AI gets to decide whether those sites are worth more.
9. U.K. Lawmakers Pressed Banks On Crypto Access
The Block reported that U.K. lawmakers asked bank CEOs how the new FCA crypto regime may change account access for digital-asset firms.
That is a practical question, not a philosophical one.
A licensing regime doesn’t help much if regulated crypto companies still can’t open or keep bank accounts. The U.K. can write market-abuse rules, stablecoin rules, capital rules, and custody rules, but the sector still needs payments, payroll, fiat settlement, and banking continuity.
Banks will say risk controls matter. Crypto firms will say blanket de-risking kills compliant operators and leaves users with worse venues.
The FCA regime can only work if banks treat approved firms as regulated clients instead of radioactive paperwork.
10. GRVT Put USDY Behind A Base Rate
The Block reported that GRVT is partnering with Ondo Finance to build a $100 million position in USDY over the next year.
The useful detail is product packaging.
GRVT plans to hold and manage USDY on its balance sheet so returns feed into the single base rate users already receive. Users don’t have to buy USDY directly.
That is where tokenized yield gets interesting.
Most users don’t want to manage a dozen RWA wrappers. They want the rate to show up inside an account, exchange, wallet, or brokerage product they already understand. Ondo gets distribution. GRVT gets a yield source. Users get one number.
The token sits underneath the interface, which is probably where most financial tokens will live.
GitHub Watch
ShawnPana/phone-harness is a fresh agent-control layer for phones. That matters because mobile automation is becoming the missing execution surface between chat agents and real user workflows.
oil-oil/oil-motion is a web-animation toolkit focused on smooth interactive motion. It is not crypto, but it fits the broader agent-app stack: generated interfaces still need motion that feels native, not bolted on.
Flaminis/Dalaran is robotics-first visualization and time-series infrastructure with ROS 2 support. That is the sort of data tooling physical AI teams need before agents can reason over machines, sensors, and recordings without drowning in logs.
Today’s GitHub board was less about another prompt library. It was about agents reaching phones, interfaces getting richer, and robot data becoming easier to inspect.
Evening Update - 18:12 HKT
BTC $64,094, ETH $1,910.33, SOL $76.69, XRP $1.023, HYPE $55.23, DOGE $0.071930, AAVE $89.61, ZEC $482.28.
Wednesday evening is about wrappers failing under stress.
The morning digest already covered the SEC token safe-harbor setup, CLARITY’s harder September path, bitcoin into CPI, Coldcard migration, ENS giving its foundation real operating power, Twenty One’s treasury-wrapper discount, Riot and Keel turning miners into data-center landlords, U.K. bank access, GRVT hiding USDY inside a base rate, and GitHub’s phone-control, animation, and robotics-data picks.
Tonight moves away from that board.
Harmony confirmed an unauthorized 4 billion ONE mint. ASIC took down Yepbit sites after blocked-withdrawal reports. Bitwise cut 14% of staff even as it keeps building through the downturn. CoreWeave’s quarter reminded public markets that AI compute still gets the cleaner multiple. Fidelity is trying to turn an ether ETF into a staking-and-payout product. Public miners have sold about 28,000 BTC this year. Crypto.com launched synthetic tokenized stock exposure across 1,500 U.S. names. An XRP bridge lost nearly 200,000 XRP because fake deposits were treated as real. Zoom patched a zero-click exploit chain found with a small number of AI prompts. Cisco warned that ASA and FTD firewall software is being exploited in the wild.
That is the evening shape: tokens, exchanges, ETFs, miners, bridges, video clients, and VPN edges all need boring operational discipline. The product wrapper is getting easier to buy. The failure mode is getting easier to spot.
Evening price snapshot via CoinGecko simple-price data around 18:12 HKT.
11. Harmony Confirmed A 4 Billion ONE Mint
The Block reported that Harmony confirmed an exploit involving the unauthorized minting of 4 billion ONE tokens.
CoinDesk said ONE fell roughly 26% after reports of the mint, while The Block’s board showed the drawdown closer to one-third as the story developed.
The exact percentage matters less than the pattern.
Harmony is an older L1 with an old bridge scar. In 2022, its Horizon bridge became one of the defining bridge-risk events of that cycle. Now the damage is happening at the native-token supply layer, which is worse for trust because the market has to ask whether circulating supply, exchange deposits, validator coordination, and software fixes are all telling the same story.
That is the kind of exploit that turns a token chart into an incident-response dashboard.
12. ASIC Took Yepbit From Warning To Takedown
Crypto.news reported that Australia’s ASIC took down several websites linked to Yepbit after investors reported blocked withdrawals.
The useful detail is the alleged excuse.
ASIC said Yepbit told investors their funds were unavailable because the regulator had frozen the money during checks or audits. ASIC said that was false, added Yepbit to its Investor Alert List, and said the platform does not hold an Australian Financial Services Licence or an AUSTRAC virtual-asset registration.
That is more than another scam warning.
Regulators are learning that alerts alone do not stop deposits if websites keep operating and victims keep seeing simulated balances. Domain intervention is blunt, but in withdrawal-block cases, speed matters.
The crypto lesson is simple: a platform that blames the regulator for not returning user funds should trigger due diligence, not patience.
13. Bitwise Cut Staff Into The Downturn
The Block reported that Bitwise cut 14% of its global workforce, bringing the team to about 155 people.
CEO Hunter Horsley framed the move as positioning the company for future growth, but the market context is hard to ignore. The Block said Bitwise’s BITW product saw net assets drop 31% in the first seven months of 2026.
That is the ETF-era asset-manager squeeze.
Crypto fund managers can be right about long-term adoption and still have to cut costs when AUM falls, prices sag, and fee revenue gets thinner. The distribution pipe exists. The question is whether products can keep enough assets, margins, and investor attention when the market is not giving them price tailwinds.
Bitwise is not retreating from crypto. It is admitting the operating model has to survive a colder tape.
14. CoreWeave Kept The AI Infra Premium Alive
CoinDesk reported that CoreWeave jumped after reporting second-quarter revenue of $2.58 billion and a backlog around $104 billion.
That is why every bitcoin miner with power access keeps talking about AI.
The morning digest covered Riot and Keel from the miner side. CoreWeave shows the other side of the trade: AI infrastructure buyers and operators are still being valued on contracted compute demand while crypto miners are being punished for spot BTC exposure, hashprice pressure, and balance-sheet volatility.
The spread between those two stories is the opportunity and the danger.
If miners can turn power sites into credible AI colocation assets, the market may re-rate them. If they cannot, CoreWeave becomes the benchmark they are failing to match.
15. Fidelity Wants FETH To Stake
CoinDesk reported that Fidelity filed to add staking and quarterly cash payouts to its nearly $900 million Fidelity Ethereum Fund.
That changes the ETF conversation.
The first spot ETH products were mostly access wrappers. Buy the fund, get ether exposure, avoid wallets and exchanges. Staking turns the product into something closer to a yield-bearing instrument, with custody, validator selection, slashing risk, distribution timing, and tax treatment all embedded inside the wrapper.
That is more useful for institutions, but also more complicated.
If staking gets approved inside major ETFs, the pressure moves to other issuers. A non-staking ETH ETF starts to look like a cash account that refuses to earn interest.
16. Public Miners Added $1.78 Billion Of BTC Supply
CoinDesk reported that public bitcoin miners have sold about 28,000 BTC this year, worth roughly $1.78 billion.
Blockware data cited by CoinDesk put public-miner holdings down from about 127,000 BTC at the start of the year to about 99,000 BTC.
That helps explain why bitcoin has felt heavy even when ETF demand looks supportive.
ETF inflows are visible. Treasury-company purchases are loud. Miner selling is quieter, especially when it happens through normal operations, debt service, AI-conversion funding, or balance-sheet cleanup.
The interesting second-order effect is difficulty. If miners exit or repurpose sites for AI, remaining miners can see better economics from lower network competition.
Bitcoin gets less selling from weak miners only after weak miners sell enough to leave.
17. Crypto.com Joined The Tokenized Equity Rush
CoinDesk reported that Crypto.com launched tokenized derivatives tracking 1,500 U.S. stocks and ETFs for eligible non-U.S. users.
The important word is derivatives.
Users get synthetic price exposure to names like Apple, Tesla, and Nvidia. They do not own the underlying shares, vote, or receive shareholder rights. That distinction will matter as tokenized equity products spread across crypto exchanges, brokerages, and offshore venues.
This is not only a new asset list. It is a fight over what a tokenized stock should mean.
If the token is just a price tracker, it competes on access, hours, collateral, and user experience. If the token carries real ownership rights, it becomes a heavier custody, securities, transfer-agent, and settlement problem.
Crypto.com is choosing the faster lane first.
18. An XRP Bridge Trusted Fake Deposits
CoinDesk reported that an XRP bridge lost nearly 200,000 XRP, worth about $200,000, after software treated fake deposits as real.
The attacker created unbacked XRP on another chain, then exchanged it for real XRP held in reserve. The bridge was halted, and the operator filed a complaint with the FBI.
That is a small dollar loss with a big design lesson.
Bridge security is not only private keys and multisigs. It is also state interpretation. A relayer can sign correctly, a contract can execute correctly, and reserves can still drain if the system accepts an event that never represented real collateral.
Cross-chain software needs to prove what happened, not just relay what looked like it happened.
19. Zoomsday Made AI-Assisted Exploits Feel Closer
The Verge reported that researchers found a Zoom zero-click exploit chain using fewer than 20 prompts on public AI models.
A Security, which named the issue Zoomsday, said the flaw enabled remote code execution against native Zoom clients during meetings. Zoom has patched the issue across major platforms.
That is a clean warning for the agent era.
The scary part is not that Zoom had a bug. Large communication software has bugs. The scary part is the compression of exploit discovery and weaponization. If public models can help a skilled researcher reach a working chain quickly, defensive teams have to assume attackers are getting the same leverage.
AI security is not abstract policy. It is patch velocity, telemetry, exploit triage, and boring client updates.
20. Cisco’s Edge Device Problem Got Another Reminder
The Hacker News reported that Cisco warned CVE-2026-20349 in Secure Firewall ASA and Secure Firewall Threat Defense software is being exploited in the wild.
Cisco’s advisory says the flaw can let an unauthenticated remote attacker trigger a denial-of-service condition through crafted HTTP requests against affected remote-access services. Cisco says there are no workarounds and has released fixed software.
This is why edge devices keep showing up in serious security boards.
Firewalls and VPN concentrators sit exactly where attackers want leverage: remote access, perimeter enforcement, identity paths, and incident response access. A DoS is not as glamorous as code execution, but taking out the access layer during stress can still create operational chaos.
Patch windows are part of resilience, not admin housekeeping.
GitHub Watch
harveyai/harvey-labs has about 1.1k stars and packages legal-work benchmarks from Harvey. The signal is that agents are moving into regulated professional workflows where evaluation needs domain specificity, not generic chat vibes.
3b1b/manim has about 90.3k stars and remains one of the best-known technical-animation engines. It matters because AI-native publishing is not just text generation. Clear generated explanations need diagrams, animations, and reproducible visual logic.
denoland/deno has about 108.2k stars and was pushed today. The relevance is runtime trust: as agents generate, execute, and inspect more JavaScript and TypeScript, permissioned runtimes and cleaner tooling become part of the security model.
Tonight’s GitHub board is not another pile of toy agents. It is evaluation for legal work, visual explanation infrastructure, and runtime control for generated software.