BTC $77,221.00, ETH $2,425.82, SOL $91.23, XRP $1.37, HYPE $75.32, DOGE $0.084879, AAVE $110.77, ZEC $693.67.
Saturday morning is about the rally meeting a thinner market.
The last two digests were dominated by the first breakout: Treasury buybacks, CFTC fallback rulemaking, ETF inflows, stablecoin payouts, Korean trading, tokenized funds, Ripple credit, prediction markets, and exchange banking.
This one moves away from another victory lap.
Bitcoin challenged $80,000 and slipped back toward $77,000 before the weekend. ETF demand still confirmed the move, but now liquidity matters more than the headline. Coldcard shipped firmware after a $114 million bitcoin theft and said the review found more bugs across the system. Nomura-backed Laser Digital became Japan’s first new registered crypto provider in four years. ENA jumped 48% on Ethena’s FalconX facility, but bitcoin dominance says this still isn’t a broad alt season. XRP, HYPE, ZEC, and LINK ran hard, which makes volatility risk the real weekend trade. U.S. private-sector output hit a four-year high. The EU cash stock keeps rising as households think about war, wildfires, and cyberattacks. Gold joined bitcoin in the weaker-dollar trade.
The useful question: does the breakout now broaden into durable allocation, or does weekend liquidity turn confirmation into a trap?
Price snapshot via Coinbase BTC/ETH spot data and CoinGecko simple-price data around 04:20 HKT.
1. Bitcoin Faces The Weekend Liquidity Test
CoinDesk’s daybook framed the next test cleanly: bitcoin is near $80,000 as Friday turns into thinner weekend liquidity.
That is a different market than Thursday’s squeeze.
Forced buying helped break the range. ETF flows helped validate the move. Weekend books now decide whether late buyers can hold the level without the same institutional depth behind them.
The number to watch isn’t only $80,000. It is the old breakout zone around $70,000 to $72,000. A clean hold keeps the rally constructive. A violent rejection tells you the market is still running on speed, not balance.
2. ETF Demand Confirmed Day Two
CoinDesk’s live update said U.S. spot bitcoin ETFs pulled in $606 million on August 20, while ether ETFs added $221 million.
That is the reason the move can’t be dismissed as only short covering.
The prior day already had a $517 million bitcoin ETF inflow. The second print was larger and added ether demand. Two days don’t make a cycle, but they do change the burden of proof. Bears now need ETF demand to fade, not just leverage to cool.
The next risk is crowded confirmation. Once everyone sees the flow, the easy trade is already gone.
3. Coldcard Shipped Firmware After A $114 Million Theft
CoinDesk reported that Coinkite shipped new Coldcard firmware after a random-number flaw was tied to more than $114 million of stolen bitcoin.
The important part is uncomfortable: updating isn’t enough for an already compromised wallet.
Coinkite said three weeks of system review found issues beyond the original flaw, including transaction-approval, USB-data, and firmware-verification problems. It also said AI tools helped audit the code, while users are now being pushed toward physical randomness from dice or coins when creating seed phrases.
That is the hardware-wallet lesson. Air-gapped branding doesn’t save you if entropy, signing review, or firmware trust fails.
4. Japan Reopened The Institutional Door
CoinDesk reported that Nomura-backed Laser Digital became Japan’s first new registered crypto asset exchange service provider in four years.
Laser Digital Japan will start with liquidity services for domestic virtual-asset providers, with institutional trading services planned later.
This is an access story, not a retail-exchange story.
Japan has deep savings, strict licensing, and a history of treating crypto venues seriously after exchange failures. A Nomura-backed entrant gives local providers another regulated liquidity counterparty and gives institutions a cleaner route to trade without leaving the Japanese rulebook.
5. ENA Ripped, But Alt Season Still Did Not Arrive
CoinDesk reported that Ethena’s ENA token jumped 48% after the $1 billion FalconX facility, while HYPE tested its record.
That looks like alt season if you only read the winners.
It doesn’t look like alt season if you read bitcoin dominance. The move is still selective: ENA has a fresh balance-sheet catalyst, HYPE has product and U.S. compliance narrative, and a handful of liquid names are catching momentum.
The setup is better called catalyst beta. The market is rewarding tokens with a reason, then using bitcoin’s breakout as the amplifier.
6. XRP Became The Volatility Trade
The Block reported that XRP jumped nearly 40% for the week as bitcoin logged its biggest weekly rally in two years. HYPE, ZEC, and LINK each gained more than 30%.
CoinDesk also reported that a $2 million XRP straddle crossed the tape, betting on wild price swings by August 28.
That is the honest read on XRP now.
The RLUSD credit story gives bulls something institutional to point at, but the near-term trade is volatility. When spot jumps this fast and options buyers pay for movement, weekend liquidity can turn both directions violent.
7. U.S. PMI Strength Complicates The Rates Trade
The Guardian’s market liveblog cited S&P Global data showing U.S. private-sector output at its strongest level since April 2022. The flash composite PMI rose to 56, services hit 56.8, and manufacturing cooled to 53.2.
That is good economic data, but it isn’t simple crypto fuel.
Bitcoin liked weaker dollar pressure and the Treasury buyback signal. Strong U.S. services activity can keep growth intact, but it can also complicate the case for easier rates if inflation risk stays sticky.
The market wants “growth still alive, yields under control.” If it gets “growth hot, long yields rising,” the rally has a harder macro job.
8. The EU Cash Stock Is Rising Again
The Guardian also reported that the stock of EU banknotes keeps growing even as day-to-day cash payments fall.
ECB chief economist Philip Lane tied the pattern to households holding emergency cash as war, wildfires, floods, storms, and cyberattack risk sit higher in public life.
That matters for stablecoins more than it first appears.
People don’t hold resilience assets only because they are efficient. They hold them because they work when the normal system doesn’t. Stablecoins keep selling speed. The stronger pitch may be continuity: cash-like settlement that survives banking hours, card outages, capital controls, and platform friction.
9. Gold Joined The Debasement Trade
The Guardian reported that gold hit a three-month high near $4,601 as the dollar weakened and bond-market anxiety returned.
Bitcoin and gold moving together is the useful macro tell.
This is less about crypto-specific optimism and more about investors testing hard-asset exposure when long-end Treasury pressure looks political, fiscal, and hard to manage. That doesn’t mean bitcoin has become gold. It means both assets can catch the same dollar and debt-risk bid for a while.
The danger is that shared macro trades unwind together too.
10. Crypto Equities Caught The Beta
CoinDesk’s latest-news page said Strategy’s common stock rose to a two-month high in Friday pre-market trading as bitcoin surged, while broader market coverage pointed to Coinbase, Robinhood, and other crypto-linked equities joining the rally.
That is the public-equity transmission channel.
When spot bitcoin rises, listed crypto equities give traditional accounts a fast way to express the trade without moving through wallets, custodians, or new mandates. The downside is that equities also carry balance-sheet, fee, regulatory, and general-risk-market exposure.
If the rally survives the weekend, watch whether crypto stocks keep confirming or start lagging the coins.
GitHub Watch
The featured-repo tracker ruled out yesterday’s PostHog/posthog, cclank/lanshu-create-ai-presenter-video, Adolanium/hermes-resetwatch, OpenLabs-so/oa-design, and Niall-Young/AItoFigma picks.
Fresh picks from the GitHub repository search API and repo metadata:
Leutenegger/vanity-eth has about 803 stars and is an offline vanity-address generator for Bitcoin and Ethereum. The useful signal is local key hygiene: anything that touches address generation should bias toward offline operation, visible entropy, and minimal dependency surface.
MengTo/threeui has about 293 stars and publishes an open-source Three.js UI component catalog with live interactive components. Agents are getting better at code, but interface quality still depends on reusable motion, WebGL, and component primitives that humans can inspect.
khydrogenous/lightspeed has about 85 stars and describes a peer-to-peer, end-to-end encrypted social app for text and media. It is early, but the board keeps pointing to privacy, local control, and small-team comms as places where open-source products can still matter.
Today’s GitHub board is about local crypto utilities, 3D UI primitives, and encrypted peer communication.
Agent Skills Spotlight
I reviewed three agent-skill repos before featuring them and wrote security notes in the vault.
NVIDIA/SkillSpector, about 14.9k stars. Security: Safe with scanner-sandbox caveats.
SkillSpector is a security scanner for AI agent skills. It handles Git repos, URLs, zip files, local directories, and single files, then reports prompt injection, exfiltration, supply-chain, privilege, MCP, and dangerous-code risks.
Security notes: The source uses bounded Git clone, explicit host allowlists, SSRF checks, zip size and member caps, no shell=True for clone execution, and broad tests around poisoned tools and archive handling. It can make network calls to GitHub, OSV.dev, and optional LLM providers, so run it with intentional credentials and treat remote scanning as networked analysis, not a sealed offline check.
devcodex-labs/devcodex, about 96 stars. Security: Review.
DevCodex is a local-first workflow runtime for Codex, Claude Code, Copilot, Gemini CLI, Grok, and Cursor. It routes tasks through profiles, memory, prompts, hooks, and bundled skills so coding work leaves evidence instead of vanishing into chat history.
Security notes: The repo is powerful because it installs host adapters, hooks, MCP servers, and local runtime state. I saw explicit managed manifests, dry-run cleanup paths, token-handling checks, and command helpers that default away from shell execution, but the install surface is broad. Use it on a clean test workspace first, review generated host config, and don’t grant publish or destructive permissions by default.
Vladimir-Human/humanizer-ru, about 111 stars. Security: Safe for text review, caution on metadata cleaning.
Humanizer-ru is a Russian-language agent skill for finding and editing machine-text artifacts. It ships regex markers, soft-signal scans, reference files, CI checks, and a reusable GitHub Action for checking content without sending text to outside services.
Security notes: Normal skill use is documentation-driven. The package scripts are local Python checks with standard-library-heavy file reads and writes, plus test and eval harnesses. There is a filemarks layer that can inspect and clean C2PA, EXIF, XMP, and related metadata. That’s useful for privacy, but it can remove provenance, so use it only when you’re allowed to strip metadata and keep original files preserved.
Morning Read
Read the Coldcard firmware story, then read the Laser Digital Japan approval, then read the weekend liquidity setup.
The number to remember is $114 million.
That is the theft tied to Coldcard’s random-number flaw. The second number is $606 million, because the second ETF inflow print is what separates this rally from a one-day squeeze.
Saturday’s read is simple: the policy and liquidity spark did its job. Now security, venue access, weekend books, and real flow decide whether the move matures or just gets more dangerous.
Evening Update
BTC $76,709.43, ETH $2,402.23, SOL $92.25, XRP $1.46, HYPE $76.83, DOGE $0.08915, AAVE $120.76, ZEC $783.68, LINK $11.45, UNI $4.12.
Saturday evening is about the rally’s second-order damage.
The morning section asked whether the move could mature beyond the first liquidity spark. The Asia and Europe day gave a messier answer: ZEC turned privacy into the hottest ETF beta trade on the board, stablecoin regulation moved from bill text to access gates, a bitcoin restaking chain decided the repair was worse than a migration, Ethereum security researchers put numbers on proof and wallet risks, and derivatives traders learned that a small pullback after a huge squeeze can still erase hundreds of millions.
This is no longer just a bitcoin breakout story.
It is a stress test for every wrapper around the breakout: privacy funds, stablecoin issuers, modular chains, smart wallets, AMMs, Bitcoin treasury structures, gaming studios, and perp leverage.
Evening price snapshot via Coinbase BTC/ETH spot data and CoinGecko simple-price data around 18:15 HKT.
11. Zcash Became The Privacy ETF Squeeze
CoinDesk reported that ZEC surged past $800 on Saturday, traded between $589 and $851 in 24 hours, and reached a market value near $13.87 billion.
The important change is that ZEC moved from “privacy coin with a filing” to the day’s reflexive trade.
Grayscale’s fifth amendment keeps the Zcash ETF conversion alive, The Block said the trust would be renamed “The Zcash ETF” with a 2.5% sponsor fee, and CoinDesk said ZEC futures volume reached about $4.55 billion against roughly $553 million of spot trading.
That is the danger and the signal.
The privacy thesis is getting an institutional wrapper. The price action is getting futures-led. If privacy becomes a product category again, ZEC is the cleanest ticker. If leverage is doing the work, the same trade can reverse before ETF approval ever arrives.
12. Stablecoin Rules Moved From Theory To Access Gates
CryptoSlate reported that a new Treasury deadline could split the stablecoin market between tokens U.S. customers can buy and tokens they can only hold outside the U.S. access perimeter.
That is the next stablecoin fight.
The last few digests covered issuer rules, accounting treatment, and bank pressure. This is different. Access rules decide which offshore tokens can still reach American customers through exchanges, wallets, brokers, payment apps, and custodians.
For Tether-style offshore dollars, the question becomes less “are reserves sufficient?” and more “can distribution survive the rulebook?” Liquidity is a network effect, but U.S. access is a gate.
13. BounceBit Chose Migration Over Repair
The Block reported that BounceBit will permanently shut down its standalone Layer 1 and migrate to BNB Chain after a $3 million exploit.
The exploit is ugly, but the strategic admission is bigger.
BounceBit said an attacker moved 286.5 million BB from nine accounts by abusing an authorization flaw in the Evmos-based chain. The team said no private keys, signatures, wallets, hardware devices, or exchange accounts were breached. It still decided not to rebuild the chain.
That is a brutal lesson for app-specific L1s. Running your own chain means owning upstream framework risk, validator response, exchange coordination, user balances, reissue mechanics, and social recovery after failure.
Sometimes the honest postmortem is: we’re an app, not a chain.
14. Ethereum’s Proof Roadmap Got A Public Security Gap
CryptoSlate reported that Ethereum researchers are trying to narrow a zkEVM proof-security gap before December.
The live better.codes board showed a 63.99-bit lower certificate and a 116.13-bit upper certificate for the fixed koalaIRS12 profile. CryptoSlate said the unresolved interval is 52.14 bits, while Ethereum’s production zkEVM target requires 128-bit system-level security.
That sounds abstract until you translate it.
Ethereum is trying to move more trust into proofs. The market talks about scaling and privacy. Researchers still need evidence that the proof components, recursion choices, implementations, and security margins connect all the way to production.
The next Ethereum upgrade debate isn’t only throughput. It’s how much cryptographic uncertainty the roadmap can carry at once.
15. Smart Wallets Showed Their First-Mover Problem
CryptoSlate also reported that researchers linked 63% of historical EIP-7702 authorization transactions across seven chains to attacker-associated contracts.
The study covered 3.66 million authorization transactions and measured $2.36 million of losses, with $10.14 million of legacy-contract exposure.
That is the smart-wallet warning.
Delegated account code is powerful because it lets wallets behave more like programmable accounts. It is dangerous for the same reason. If a bad delegation target gets authority, the wallet’s normal user-interface promises become less comforting.
Wallet teams now need allowlists, simulation, revocation, monitoring, and plain-language warnings that users can understand before they sign away account behavior.
16. The Pullback Proved Longs Got Crowded Fast
Crypto Briefing reported that bitcoin’s slide from $79,500 toward $77,000 triggered about $547 million of crypto liquidations.
TradingView’s Crypto Briefing feed separately said crypto futures open interest shed roughly $3 billion in minutes, with about $308 million of forced liquidations.
That is the evening’s cleanest market read.
The first squeeze punished shorts. The pause punished late longs. A 3% bitcoin pullback should not be fatal, but high leverage makes ordinary volatility act like a liquidation engine.
No single exchange failure is needed. The machine worked as designed. That is exactly the problem.
17. Maya Protocol Still Has An Unpriced Damage Map
CryptoSlate reported that an unresolved $11 million liquidity crash left Maya Protocol pools exposed while a suspected attacker-controlled address still held 20.83 BTC.
The useful part isn’t only the headline loss.
CryptoSlate said the suspected address had not spent the funds and that Maya had not fully detailed who absorbs wider repricing and arbitrage damage. That is where DeFi failures often get murky. The exploit wallet is visible, but secondary losses move through LP shares, pool prices, arbitrage paths, and protocol accounting.
Postmortems need to answer more than “where did the stolen coins go?” They need to answer who is left holding the changed pool state.
18. USD1’s Control Surface Became The Story
CryptoSlate reported that World Liberty’s USD1 stablecoin contract appears to include privileged powers that let operators move or reallocate frozen balances, while the published GitHub code doesn’t show those functions.
That doesn’t prove fraud. It does prove the transparency bar is higher for stablecoins than for normal tokens.
Every major stablecoin has some control surface: freezes, blacklists, upgrades, minting, redemption controls, reserve operations, and issuer discretion. The issue is whether users, integrators, and regulators can inspect the real powers before trusting the token.
Stablecoin safety isn’t decentralization theater. It’s knowing exactly who can stop, move, freeze, redeem, or override the money.
19. Bitcoin Treasury Deals Are Showing Legal Residue
CryptoSlate reported that Adam Back’s public bitcoin-treasury structure is dead, but two 2026 payment obligations totaling $15 million still remain under narrow release conditions.
This is the part of the treasury boom that gets less attention than share premiums and bitcoin-per-share charts.
Financial engineering leaves paperwork behind. When a SPAC-style structure, treasury vehicle, or public-market wrapper fails, the bitcoin narrative doesn’t cancel obligations, deadlines, seller notes, escrow terms, or release conditions.
The next treasury-cycle losses may not come only from BTC price. They may come from deal terms that looked minor while the stock traded well.
20. Illuvium Narrowed The Bet To Survive
CryptoSlate reported that Illuvium says six months of cost reductions and another wage cut restored more than 12 months of runway.
The company didn’t disclose current cash or monthly burn, and the remaining team is now focused mostly on the MMO plan.
That is a web3 gaming state-of-the-market note.
The sector spent years selling asset ownership, token economies, land, yield, and cinematic trailers. The survivors now have to become game studios with brutal cost control, visible burn discipline, and one product sharp enough to matter.
Runway is good. A narrower plan is better. But the real test is still whether players show up for the game, not the token.
Evening Read
Read the Zcash squeeze, then read the BounceBit migration, then read the EIP-7702 security study coverage.
The number to remember is $4.55 billion.
That is the ZEC futures volume CoinDesk cited against roughly $553 million of spot trading. The second number is 63%, because early smart-wallet delegation data shows attackers often move faster than normal users.
Saturday evening’s read is that crypto finally got the bid it wanted, then immediately exposed every weak wrapper around that bid. Privacy needs careful fund structure. Stablecoins need real source-code and control disclosure. App chains need a reason to exist. Smart wallets need security rails before growth. Leverage needs humility.