The short version

  • Senate Majority Leader John Thune filed cloture on August 8; the CLARITY Act vote moves to September 15, with passage odds priced at 17–30%.
  • Strategy sold 1,690 BTC at roughly $64,262 each and 6.5 million MSTR shares in separate transactions, both tied to preferred-stock management.
  • Mastercard closed its $1.5–1.8 billion BVNK acquisition on August 3, ahead of its year-end target, gaining access to $30 billion in annualized stablecoin volume.
  • A Coldcard firmware flaw from March 2021 surfaced July 30, 2026, resulting in an estimated $89–130 million in theft and 210,000 BTC in precautionary migrations.

The Senate's Crypto Bill Lives, but September Is Its Last Chance

The Digital Asset Market Clarity Act did not reach a full Senate floor vote in August. Senate Majority Leader John Thune filed a cloture motion on August 8, 2026, scheduling a procedural vote for September 15. Cloture ends debate and moves a bill to a final vote, but it requires 60 senators to agree — a threshold Republicans cannot reach alone.

The Senate Banking Committee passed the bill 15–9 in May, giving it bipartisan committee support. On the full Senate floor, the math is harder: the bill needs at least seven votes from outside the Republican caucus. Galaxy Research put the chance of passage at roughly 30 percent, while prediction-market traders on Polymarket priced it closer to 17 percent heading into the August recess.

The description 'barely survived' overstates the drama. The bill did not come close to a losing vote; Senate leadership simply did not schedule a floor debate before the August recess began. The September window is real and the committee history is encouraging, but clearing 60 votes in a divided chamber remains the bill's single hardest hurdle.

SourceSignal
Galaxy Research30% chance of passage
Polymarket traders17% chance of passage
Senate Banking Committee15–9 vote in May 2026
CLARITY Act passage-probability signals, mid-August 2026

Strategy Sold Bitcoin and Stock — for Very Different Reasons

Strategy — the company formerly known as MicroStrategy — sold 1,690 bitcoin between August 3 and August 9, 2026. The company averaged roughly $64,262 per coin, generating approximately $108.6 million. According to SEC 8-K filings reported by Bloomberg, Strategy directed every dollar of those proceeds toward retiring STRC preferred stock, not toward operations or new bitcoin purchases.

In a separate action, Strategy ran its at-the-market equity program, selling 6,585,682 MSTR common shares and raising $653.1 million. This is a routine shelf-offering mechanism the company uses regularly. The two transactions — the bitcoin sale and the stock offering — served different purposes and raised money from different sources. Adding their totals together would misrepresent what happened.

According to its treasury disclosures, Strategy still holds 840,447 bitcoin acquired at an average cost of about $75,385 per coin. Selling near $64,000 locks in a loss against that average. Chief Executive Michael Saylor described the activity as a credit exercise. Analysts have questioned whether that framing fully accounts for the realized gap between sale price and average cost.

Strategy's August 2026 capital transactionsBTC sale (1,690 BTC)109 USD MMSTR share sale653 USD M
Strategy's August 2026 capital transactions · SEC 8-K filings, Bloomberg, August 3–9 2026

Mastercard Closes Its First Stablecoin Infrastructure Acquisition

Mastercard announced on March 17, 2026, that it would acquire BVNK, a stablecoin payments infrastructure company. The deal closed August 3, 2026 — ahead of the originally targeted year-end date. BVNK processes roughly $30 billion in annualized stablecoin payment volume across more than 200 markets, according to figures cited by CNBC and Bloomberg at the time of announcement.

The acquisition price is reported as up to $1.8 billion. That ceiling includes a $300 million earnout tied to performance milestones that BVNK must meet after the deal closes. The guaranteed floor is $1.5 billion. PYMNTS and Genfinity both confirmed the early close date; no public source identified a material obstacle to the earnout component at this stage.

Industry publications describe Mastercard as the first major publicly listed payments network to acquire — rather than partner with — stablecoin infrastructure. Visa, PayPal, and others have struck partnership deals; this transaction represents a different level of commitment. Stablecoins are digital tokens pegged to a real-world currency, usually the U.S. dollar, enabling fast cross-border payments without converting between traditional currencies.

A 2021 Firmware Flaw Resurfaced and Cost Holders up to $130 Million

Hardware wallet maker Coinkite shipped a Coldcard firmware update in March 2021 that contained a security flaw. That flaw remained undetected for more than five years. On July 30, 2026, attackers began exploiting it, draining bitcoin from wallets that had never updated beyond the vulnerable firmware version. The attack expanded in waves over the following days.

Understanding how hardware wallets work is important context. A hardware wallet stores private keys offline, which normally protects funds against remote attacks. It does not protect against a flaw inside the firmware itself — the manufacturer-written software that controls how the device operates. Theft estimates vary by source: CoinDesk reported roughly $89 million, while TRM Labs and Galaxy Research cited figures between $116 million and $130 million.

Coinkite confirmed the vulnerability and issued an emergency firmware patch. The company advised all Coldcard users to update immediately and move funds to addresses generated after the patch. The incident showed that cold storage security depends on the integrity of the firmware running on the device, not only on keeping the device physically disconnected from the internet.

  • March 2021: Coinkite released the firmware version containing the flaw
  • July 30, 2026: Attackers began draining affected Coldcard wallets
  • Approximately 4,585 wallet addresses were compromised across multiple waves
  • Theft estimates range from $89 million (CoinDesk) to $130 million (Galaxy Research)

One Firmware Bug Triggered a $13 Billion Bitcoin Migration

Beyond the direct theft, the Coldcard disclosure set off a wave of precautionary movement across the broader bitcoin holder base. Glassnode on-chain data cited by CoinDesk showed approximately 210,000 bitcoin leaving long-term holder wallets in the days after the disclosure — the largest such shift since December 2024. At bitcoin's current price of roughly $64,000, that equals about $13.4 billion in movement.

Most of that $13.4 billion was not stolen. Holders moved coins to new, clean wallet addresses as a precaution — even when their specific device model or firmware version was unaffected. On-chain data cannot always distinguish precautionary migration from distressed selling, which is why reading the bitcoin market through a security event requires more context than price charts alone provide.

The week held three largely independent stories — a legislative delay in Washington, an institutional deal in the payments industry, and a security event in hardware infrastructure — that together show the range of forces capable of moving bitcoin. None had its roots in speculation. Each unfolded through filings, contracts, and firmware update logs: the same paper trails that govern any other corner of finance.

Sources