Coldcard's Confession Booth & Bhutan's Quiet Bitcoin 

A live hack is quietly building the case for regulated custody while a sovereign nation formalizes its own Bitcoin exposure through a professional manager.

Bitcoin is trading near $64,800, holding the same $62,000 to $65,000 band it has sat in for a week. That range has stopped being the story. Underneath it, an active theft has turned a hacker's wallet into a public message board, and a small Himalayan kingdom just handed part of its national Bitcoin reserve to a professional asset manager.

The Coldcard Hacker's Wallet Became a Public Confession Booth, and Two Wall Street Firms Are Already Pricing the Fallout

The exploit that began July 30 has moved from a security story to a behavioral one, and analysts are treating it as a business opportunity for someone else.

• The wallet became a message board: a Bitcoin address tied to the Coldcard hacker, holding roughly $36 million, has been receiving permanent text messages attached via Bitcoin's OP_RETURN function since the theft began, ranging from pleas for the money back to an offer to launder the stolen funds for a cut. Each message arrives with a small real payment attached and is timestamped into the blockchain alongside it, permanently.

• The confirmed total has settled, for now, at $114 million: across four sweeps since July 30, researchers now put the running total at roughly 1,816 BTC, worth close to $114 million, drained from more than 5,200 addresses. That supersedes the earlier three-wave count of 1,596 BTC from about 7,300 addresses this Pulse carried in prior editions, and should be treated as the current figure pending Galaxy Research. With the final tally, since the fourth wave was still moving through the mempool as of August 3.

• Cantor Fitzgerald sees the second-order trade: the bank told clients the exploit should push token flows toward custodians and exchanges, naming Coinbase, Robinhood, BitGo, Bullish, eToro and Gemini as potential beneficiaries of Coldcard users shifting toward managed custody. "The read-through is second-order but we would expect that token flows to custodians and exchanges will increase following the hack," Cantor's Nico Pasquariello wrote in a note to clients. The bank compared the incident to the 2023 "Milk Sad" exploit, a smaller flawed-key-generation theft of roughly $900,000.

• FRNT Financial framed it as heartbreak, not indictment: the firm said the reaction inside the Bitcoin community was one of heartbreak, since many affected users had followed standard self-custody practice. Rather than abandoning self-custody, FRNT expects wallet makers to harden their products while investors are unwilling to accept that operational risk leans further into spot ETFs.

A Sovereign Nation Just Handed Part of Its Bitcoin Reserve to a Professional Manager, Without Saying How Much

Bhutan's Gelephu Mindfulness City, a special administrative region built around a December 2025 pledge of up to 10,000 BTC, has taken its first concrete step toward putting that reserve to work.

• The mandate is real, the size is not disclosed: Gelephu Mindfulness City has hired Toronto-based 3iQ to manage part of its Bitcoin treasury using a market-neutral strategy. Neither party disclosed how much Bitcoin is under the new mandate.

• The 10,000 BTC figure is a ceiling, rather than a confirmed balance: the appointment lands amid unresolved questions about Bhutan's original pledge, after on-chain data suggested roughly $1 billion had already left wallets linked to the sovereign fund. That dispute has not been resolved by either party, so the pledge figure should be read as the original ceiling, not the amount actually under 3iQ's management today.

• The pattern matters more than the number: a government moving from passive accumulation to active professional management is a different kind of institutional commitment than a fund inflow. It is a state choosing the same kind of managed exposure Cantor expects retail Coldcard users to choose after this week's hack, for the same underlying reason.

Crypto's Political Machine Lost Its Highest-Profile Race, Even as Its Congressional Footprint Keeps Growing

Fairshake, the industry's top political action committee, went five and one in the August 4 primaries, and the one loss came with a message attached.

• The loss was notable: Fairshake spent more than $2 million backing Representative Shri Thanedar in his Detroit primary, but progressive challenger Donavan McKinney, endorsed by Bernie Sanders, unseated him anyway. Thanedar had co-sponsored the House's version of the CLARITY Act, so the industry lost a sitting ally rather than gaining a contested seat.

• The other five held: Fairshake-backed candidates won the remaining primaries in Michigan and Washington, mostly incumbents, meaning the crypto caucus heading into the next Congress is still expected to grow overall.

• Why it matters right now: the CLARITY Act's Senate floor vote is still hanging on an unresolved ethics provision, a fight Coinjuice flagged when it first stalled in early August. One lost ally in the House does not change that Senate math directly, but it is a reminder that the industry's political capital does not always buy the outcome it wants.

The Lesson

The people who lost coins to Coldcard are not a statistic in a custody argument, they are the reason the argument exists. What their loss is teaching the rest of the market: when a live hack makes custodians look safer and a sovereign nation hires a professional manager in the same stretch, trust is migrating from the individual to the institution built to hold it for them. That migration is not a verdict on whether self-custody works, it is a bet on who investors would rather blame when something goes wrong.

Coinjuice Lens

Category: On-chain behaviour. The OP_RETURN messages sitting on the Coldcard hacker's wallet are a small, strange proof of the same idea this current affairs section flagged when the exploit first broke: custody risk lives upstream of the person holding the keys, in the firmware, the seed generation, and now, visibly, in the permanent public record of the chain itself. For the mechanics of how a hardware wallet can fail at that exact layer, see Can a Hardware Wallet Generate a Weak Bitcoin Seed?

Readers weighing regulated exposure against self-custody after a week like this one can start with the Coinjuice ebook, Bitcoin Trading Without Leverage, or go deeper with a Coinjuice subscription, currently 30% off the annual plan, where we start and complete trades and you will learn to snipe them independently.

News Behind Today's Pulse

• "You stole, please return some." Coldcard hacker's wallet becomes a graffiti wall of pleas and hustles (CoinDesk, Aug 5, 2026) — source for the OP_RETURN messages, the $36 million wallet balance, and the range of pleas and hustles left on-chain.

• Coldcard wallet losses may near $114 million as possible fourth sweep emerges (CoinDesk, Aug 3, 2026) — source for the corrected total: 1,816 BTC (~$114M) from more than 5,200 addresses across four waves, superseding the earlier three-wave count.

• Coldcard exploit could boost demand for regulated bitcoin exposure, analysts say (CoinDesk, Aug 5, 2026) — source for Cantor Fitzgerald's and FRNT Financial's read-through to custody and exchange stocks; independently re-verified against the live article before publishing.

• Bhutan's GMC puts part of its Bitcoin treasury to work after 10,000 BTC pledge (CoinDesk, Aug 4, 2026) — source for the 3iQ mandate and the undisclosed size caveat, including the disputed $1 billion outflow claim.

• Crypto's campaign efforts see rare loss, but crypto roster in Congress likely to grow (CoinDesk, Aug 5, 2026) — source for the Fairshake primary results and the Thanedar/McKinney race.

Market Snapshot