Market SitRep · CW32 2026 · Monday
A hardware-wallet mess, a month-end ETF flip, and CLARITY still racing the recess clock: Coldcard entropy sweeps, US spot BTC ETFs from +$233M to -$265M, and 2026 enactment odds near 28%.
by Fenris | Market Intelligence
GM to this week's Market SitRep - a hardware-wallet mess, a month-end ETF flip, and CLARITY still racing the recess clock.
Market snapshot (CoinGecko, live vs ~7d, as-of 3 August 2026 04:58 UTC): BTC $62,781 (-3.87%) · ETH $1,855.02 (-4.96%) · SOL $72.83 (-4.93%). Source: Bitcoin, Ethereum, Solana on CoinGecko.
Coldcard entropy flaw - multi-wallet BTC sweeps
Coinkite warned on 30 July (updated 1 August) that a March 2021 Coldcard firmware path generated seeds with a weak software random-number generator. Attackers offline-enumerated those seeds and swept air-gapped Bitcoin without physical access - like a locksmith who left the master-key formula on a napkin years ago. Galaxy Research maps about 1,367 BTC (~$88.6M at report time) across 4,585 addresses after three observed waves, as of 1-2 August.
Why it matters: a firmware update does not repair old seeds. Affected users need full seed migration. In absolute terms the loss is local next to major exchange failures, but the public narrative hits self-custody hard. Opponents of crypto will use that perception to steer people into bank and other custodial arrangements. We still recommend self-custody: losses at centralized custodians and unregulated exchanges have historically been far larger, often with little or no recourse for the customer. Prefer proven entropy and process over brand trust.
Sources
- Coinkite: Coldcard seed generation warning (30 Jul, upd 1 Aug)
- Coinkite entropy technical backgrounder
- Block Engineering: predictable RNG fallback in Coldcard firmware
- The Hacker News: Coldcard flaw linked to BTC sweeps (1 Aug)
- Galaxy Research: third-wave total ~1,367 BTC (X, ~1-2 Aug)
- CoinDesk: losses near $89M / ~4,500 addresses (2 Aug)
- Coldcard upgrade docs
US spot BTC ETFs flip from +$233M to -$265M into month-end
Farside Investors shows US spot Bitcoin ETFs took in $233.1M on 30 July, then redeemed $265.4M on 31 July, led by BlackRock's IBIT at -$122.7M. July finished only modestly net positive at about +$173M after prior outflow months.
Why it matters: ETF flow is the main regulated spot bid. Month-end left July weak into thinner August liquidity. One redemption day is a bruise. Watch the next three sessions and whether cumulative inflows rebuild above $500M.
Sources
CLARITY recess risk - merged text up, 2026 odds near 28%
Since last Monday's SitRep, process moved on paper while the calendar stayed mean. Paul Hastings reports a 22 July updated merged Senate CLARITY text with a White House ethics title. Leader Thune doubted a pre-recess floor path on 23 July. Polymarket priced 2026 enactment near 28% Yes at retrieval: crowd odds then.
Why it matters: CLARITY would clarify which US regulators cover exchanges and tokens. A merged draft still needs a floor path. Watch a floor vote path before recess.
Sources
- Paul Hastings: updated CLARITY Act text (27 Jul)
- Polymarket: CLARITY Act signed into law in 2026
- Congress.gov: H.R.3633 (119th)
- Lummis: updated CLARITY Act text
Conclusion
From these points we conclude:
Coldcard migration is urgent
Affected firmware needs seed migration now; a patch leaves old entropy exposed. The hit is local in size next to major exchange failures, but it lands as a self-custody trust story. We still recommend self-custody done with sound entropy and process.
ETF bid flipped at month-end
Spot BTC ETF demand turned two-faced into August after +$233.1M then -$265.4M; the flow tape opens soft until the next sessions rebuild above $500M.
CLARITY paper advanced; recess did not
Text moved while enactment odds near 28% and the recess clock stayed tight; without a floor path, 2026 passage stays a minority bet.
GM.
Software and engineering services. Not financial, tax, or investment advice.