Good Morning Bitcoin, 11 August.
Three big moves yesterday. A hardware wallet exploit drained over $116 million in BTC, pushing even more institutional capital into custodied ETF products. The US Senate filed the procedural motion that puts the CLARITY Act on a September floor vote. Meanwhile, South Korea's largest bank went live on JPMorgan's Kinexys blockchain for real-time cross-border dollar settlement. Each story circles back to the same question: which Bitcoin - private custodied infrastructure or a public, open, unbounded chain - wins the next decade of financial rails? Let's get into it.
Coldcard Hardware Exploit Drains $116M - and Sends $850M Into Bitcoin ETFs
The news
A firmware vulnerability in Coinkite's Coldcard hardware wallet let attackers drain more than 1,816 BTC - about $116 million - across 5,200 addresses since July 30. The culprit was a build configuration error in March 2021 firmware that made Coldcard devices use a weak software random number generator instead of the hardware entropy source.
This flaw slashed effective key entropy from 128 bits to as few as 40 bits on affected devices. Victims were experienced self-custody holders who thought they followed all the right steps.
Coinkite issued a firmware patch, but it can't fix seeds already generated on compromised firmware. Users need to migrate to new wallets. Meanwhile, US spot Bitcoin ETFs saw their strongest weekly inflows since April: over $850 million for the week ending August 7, with $102 million coming in on August 7 alone.
These two data points pull in opposite directions. BTC's core pitch is self-sovereign, hardware-backed custody - the Coldcard was supposed to be the gold standard.
The exploit exposed a simple truth: the security of that promise depends on a third-party firmware build process. That's a supply-chain trust point, not so different from a bank, really.
Institutional capital reacted rationally, moving toward custodied, regulated ETF products. BlackRock and Fidelity at least offer insurance and regulatory accountability.
Total Bitcoin ETF AUM now sits at about $80 billion. BlackRock IBIT, Fidelity, ARK 21Shares and Grayscale lead the inflows.
BTC price has stabilized around $65,000, down from earlier highs.
What's next?
Coinkite has to identify affected devices and communicate with customers in the coming weeks.
ETF inflow momentum looks structural, not just a one-off. Every self-custody failure pushes the case for institutional custody further.
Regulatory clarity - like the CLARITY Act - will decide if that custody stays in ETFs or expands to public-chain settlement infrastructure.
The Takeaway
BTC's self-custody thesis just hit its most expensive credibility test in years - and the market voted for custodied infrastructure.
BSV's approach is a sharp contrast to this mess. Bitcoin Script logic on BSV enables programmable custody: multi-signature schemes, time-locked conditions and on-chain access controls, none of which depend on a single hardware device's entropy.
Chronicle (activated April 7, block 943,816) removed the last script and transaction constraints. Now, complex programmable custody schemes are actually viable at scale.
The Coldcard hack is a live demo of the ceiling on hardware wallet security. Entropy generation is just a black box for the end user.
BSV's model says spending conditions should be transparent, auditable and enforced by the chain itself. As ETF inflows surge, it's clear that institutions want accountable, custodied settlement - a public chain with programmable rules, not private hardware, can deliver that.
BSV is building exactly that.
Senate Files Cloture on CLARITY Act - September Floor Vote Now Set
The news
The US Senate confirmed it won't vote on the Digital Assets Market Clarity Act before the August recess. On August 8, Senate Majority Leader John Thune filed a cloture motion on the motion to proceed - the first formal step toward a floor vote.
The vote is now set for around September 15. The CLARITY Act would give the CFTC full spot-market authority over digital commodities, while the SEC keeps oversight of investment contracts and tokenized securities.
Market odds on passage: Polymarket at 33%, Galaxy Research at 30%.
The commodity-versus-security line in the CLARITY Act is the biggest regulatory question hanging over crypto. If a digital asset works mainly as a medium of exchange or data carrier, not as an investment contract, the CFTC would oversee it - a much looser regime than the SEC.
The GENIUS Act (stablecoin framework) became law in July 2025, making stablecoins regulated financial infrastructure with reserve and audit requirements.
The CLARITY Act wraps up the market-structure debate. It determines which assets trade on exchanges, which custodians can hold them and which institutional vehicles can package them.
What's next?
September 15 is the target for the cloture vote. If it passes with 60 votes, the bill moves to floor debate and amendment before a final passage vote.
Galaxy Research and Polymarket both put the odds of full passage in 2026 at about one-in-three. There's real uncertainty, but also real momentum.
The Takeaway
The CLARITY Act's commodity-versus-security test is tailor-made for BSV's utility thesis - and September is now the date that matters.
BSV's Chronicle-completed protocol, its 7-plus billion transactions, micropayment channels and on-chain data apps all fit the commodity definition the CLARITY Act lays out.
A BSV-as-commodity ruling under CFTC would erase the securities-law fog that's blocked exchange listings and institutional interest for years.
BTC, positioned as a store of value with minimal on-chain utility, also leans toward the commodity side - but BSV's daily transaction volume, data-carrier use cases and enterprise adoption make the utility argument way more concrete.
For BSV, the September vote is the single biggest political event of 2026. Keep an eye on the CFTC-versus-SEC jurisdictional line as amendments roll through committee.
KB Kookmin Goes Live on JPMorgan's Kinexys for 24/7 Cross-Border Dollar Payments
The news
KB Kookmin Bank, a unit of KB Financial Group and South Korea's largest lender by assets, launched a corporate cross-border remittance service on JPMorgan's Kinexys blockchain in August 2026.
The service covers 10 countries at launch: South Korea, the United States, Singapore, Saudi Arabia, India, Thailand, Qatar, the UAE, Bahrain and South Africa.
The goal is to help import and export businesses settle dollars in real time, 24/7, instead of waiting one to three business days with correspondent banking.
Kinexys processes $2 to $5 billion in daily transaction volume. Payments are growing 10x year-over-year.
Kinexys uses digitized bank deposit tokens, not public crypto and integrates with SWIFT messaging infrastructure instead of replacing it. No one needs to touch volatile assets.
JPMorgan rebranded its blockchain division to Kinexys in November 2024 and has steadily expanded its institutional counterparty network.
SWIFT is adding a blockchain-based shared ledger to its infrastructure, aiming to connect its 11,000-bank network to on-chain settlement rails.
TradFi's message is clear: programmable settlement and 24/7 availability are now basic requirements.
What's next?
KB Kookmin plans to expand the service to more countries and corporate clients through H2 2026.
SWIFT's blockchain integration is expected to launch a broader pilot in early 2027.
Each new bank launch on a private blockchain increases market demand for these features - and eventually raises the question: why do you need JPMorgan's permission for this?
The Takeaway
JPMorgan is building at enormous cost what BSV already offers on an open, public chain - and TradFi adoption is proving the demand is real.
Kinexys is closed. Access requires a JPMorgan institutional counterparty relationship, bilateral integration agreements and acceptance of JPMorgan's terms.
BSV is open. Any import business in any of those 10 countries can settle a dollar-denominated payment today using a BSV-based stablecoin or payment channel - no JPMorgan account, no SWIFT fees and full on-chain auditability for any regulator who asks.
Teranode's roadmap, already showing 1 million TPS on testnet, is built for this settlement volume at public-chain cost levels.
The commercial gap between Kinexys and BSV isn't technical. It's about the distribution reach of incumbents.
But every Kinexys launch just makes the case for public-chain infrastructure clearer. When the next bank in those 10 countries asks why cross-border settlement needs a JPMorgan account, BSV has an answer.
What to Watch
- Chronicle on-chain data activity
- HSBC Hong Kong HKD stablecoin, H2 2026
- BTC price and ETF consolidation
That's the Drop for Tuesday. Stay on-chain.