News linked to both this project and an event.
The Head of Research at Galaxy posted on the X platform that the U.S. Securities and Exchange Commission (SEC) released a draft of the "Reg Crypto Assets" regulations on August 18, proposing a dedicated securities regulatory framework for certain crypto asset issuances. The proposal would allow qualified issuers to sell tokens to the U.S. public and provide a formal exit mechanism for related investment contracts following project completion or termination.
: Galaxy's Head of Research posted on X, stating that on August 18, the U.S. Securities and Exchange Commission proposed the "Regulation Crypto Assets," abbreviated as Reg Crypto. The proposal aims to establish a legal pathway for certain tokens to be offered to the U.S. public and to set up a mechanism for terminating investment contracts. Its applicability is limited to crypto assets that are not themselves securities but were previously issued or sold as part of an investment contract; tokenized stocks, bonds, and arrangements bundling tokens with equity or other securities are not covered by the framework.The proposal sets out four stages: offering, disclosure, build-out, and exit. A one-time startup exemption allows issuers to raise up to $5 million over a maximum of four years; a higher-threshold exemption modeled on Regulation A permits raising $20 million or $75 million within 12 months. Such offerings must pass SEC qualification review and involve ongoing disclosure, with non-accredited investors capped at 10% of the higher of their annual income or net worth. Issuers are also required to disclose token supply and unlock schedules, minting and burning mechanisms, governance and smart contract permissions, source code, as well as project construction commitments and progress.Once an issuer completes or permanently ceases the relevant build-out obligations, makes no new construction commitments, and submits a transition report, the related investment contract will be deemed terminated, and the crypto asset will no longer be subject to securities laws under that investment contract. Issuers that did not use the above offering exemptions may also use this safe harbor. The SEC estimates that approximately 475 issuers per year would use the investment contract safe harbor, and about 130 issuers would use the two new exemptions. Offerings that qualify would not be considered restricted securities and could be resold immediately without contractual restrictions.The proposal also excludes covered initial offerings and certain secondary transactions from state registration and qualification requirements, but it does not address exchanges, brokers, dealers, or custody, nor is it a standalone innovative exemption for tokenized securities and on-chain transactions. The comment period is 60 days after publication in the Federal Register. SEC Chairman Paul Atkins and Commissioners Hester Peirce and Mark Uyeda all issued statements of support. The article was written by Alex Thorn.
Odaily报道：Galaxy的研究主管在X平台上发帖表示，他对Hyperliquid如何以完全合规合法的方式进入美国市场非常关注。
Galaxy Research has sharply lowered the probability of the U.S. CLARITY Act passing this year from the previous 75% to 10%, believing that disagreements over ethical provisions, bank lobbying, and the limited legislative time window in September have all increased the difficulty of passing the bill.
: Digital asset firm Galaxy Digital has lowered the probability of the CLARITY Act passing this year from 75% in May to 10%. The bill proposes that two U.S. federal regulatory agencies each oversee crypto asset regulation separately. U.S. Senators will return to Washington on September 14, followed by a working period of approximately three weeks. According to the Senate schedule, the motion to invoke cloture to advance the bill will be eligible for a vote at 2:15 PM on September 15. The motion requires the support of at least 60 senators. Republicans currently control 53 seats; if all Republican senators support the bill, support from at least 7 senators from other parties would still be needed. Galaxy Digital stated that unresolved ethics concerns, declining Republican support due to banking lobbying, and the shorter legislative window in September constitute the main obstacles to the bill's passage this year. (Bitcoin.com News)
Odaily News: Bank Leumi, Israel's largest and oldest commercial bank, has announced a partnership with cryptocurrency company Galaxy Digital, planning to launch Bitcoin, Ether, and Solana trading services on the Leumi Trade investment app and mobile banking platform PEPPER in early 2027, subject to approval from the Bank of Israel. Customers will be able to buy, hold, and sell related crypto assets through their bank accounts, without needing to open accounts on separate exchanges or use personal wallets. Galaxy Digital will provide institutional trading platforms and custody infrastructure, while Bank Leumi intends to operate under a white-label model where customers do not hold private keys. Bank Leumi previously announced a partnership with Paxos in 2022 to offer crypto trading services, but it did not receive regulatory approval. Fees, trading limits, the asset list, and external wallet withdrawal rules for this service have not yet been disclosed, and custodied crypto assets do not enjoy the same deposit insurance coverage as shekel deposits. (Bitcoin.com News)
Texas Governor Greg Abbott announced that Galaxy Digital, Compass Datacenters, and Montera Infrastructure have committed to complying with new standards and regulatory requirements established by Texas for data center construction.It is understood that these guidelines are being implemented across data center projects statewide, aiming to ensure that data center expansion does not add burdens to residents, nor affect grid stability, water supply, or community quality of life. Under the new rules, data center operators must meet several requirements, including: bearing the costs of power infrastructure themselves without shifting construction and operational costs onto Texas households and small businesses; implementing water recycling for their own use to reduce pressure on public water resources; taking measures to lower overall electricity costs; avoiding disruption to residential communities by reducing noise, light, and traffic impacts; and reducing dependence on government subsidies and taxpayer funds to achieve self-sustaining project operations.Additionally, the Public Utility Commission of Texas (PUCT) and the Electric Reliability Council of Texas (ERCOT) will review data center projects, requiring companies to disclose project ownership structures, government subsidy details, electricity demand forecasts, self-built power generation plans, water usage plans, and community impact mitigation measures.
According to Calcalist, Israel's Bank Leumi announced a cooperation agreement with Nasdaq-listed company Galaxy Digital, planning to launch cryptocurrency trading services within the Leumi Trade application, allowing customers to buy, sell, and hold Bitcoin, Ethereum, and Solana. The service is expected to go live in early 2027, but requires regulatory approval from the Bank of Israel. This collaboration will integrate Galaxy's Galaxy Custody (formerly GK8) blockchain infrastructure and custody services to provide customers with access to regulated digital assets.
Polymarket data shows that the probability of the CLARITY Act becoming law by December 31 stands at 21%, with related contract trading volume exceeding $5.5 million as of August 9. Galaxy Research had previously lowered its expectation for the bill's passage in 2026 from 50% to 30%. On August 8, the U.S. Senate filed a motion to invoke cloture on the motion to advance the bill, but no full chamber vote was held. Senators will return on September 14, and per procedural rules, the first cloture vote is scheduled for September 15. The CLARITY Act aims to delineate the regulatory authority of the U.S. Securities and Exchange Commission (SEC) and the U.S. Commodity Futures Trading Commission (CFTC) over digital assets. Senate negotiations still involve three unresolved issues: ethics enforcement, illicit financial activity provisions, and stablecoin yield. The bill will need 60 votes to overcome a filibuster.
According to Cryptopolitan, the U.S. Senate is scheduled to enter recess on August 7, leaving an extremely limited window for the CLARITY Act to pass before then. If voting is not completed this week, the next feasible window will be delayed until September, and if missed again, it could be postponed until after the midterm elections, meaning enactment may not occur until 2027. The main disagreement over the bill currently lies in the Democrats' insistence on adding crypto ethics clauses for senior government officials, but the consolidated draft has not yet incorporated relevant provisions. During the regulatory vacuum, large institutions such as Coinbase and Circle are better equipped to adapt to the uncertain environment due to their capital strength—ARK Invest increased its holdings in both companies this week, and Circle was approved for a federal national trust bank charter in July—while small and medium-sized crypto enterprises and DeFi projects continue to face pressure. In terms of the market, Polymarket data shows that the probability of the CLARITY Act passing within 2026 has dropped to 23%, a significant decline from Galaxy Research's prediction of 67%–75% in mid-May.
Galaxy Digital Head of Research Alex Thorn stated that based on new victim reports received following the incident, the number of attackers exploiting the Coldcard vulnerability has reached at least 15.Thorn noted that information provided by victims helped the research team uncover previously unidentified attack activity. Unlike thefts from centralized exchanges, correlations between the attackers in this vulnerability exploit require confirmation through on-chain analysis and victim feedback.He added that a single victim reporting less than 1 BTC stolen helped the team discover a previously unknown attack, which siphoned approximately 12 BTC from 126 addresses.According to Galaxy Research's earlier estimates, the Coldcard vulnerability has led to at least three rounds of attacks, with losses amounting to approximately $100 million in BTC. Additionally, Galaxy has identified a suspected fourth round of attacks, which could bring total losses to approximately $130 million.Meanwhile, the incident has also sparked discussions regarding the security of Bitcoin self-custody. Dragonfly Managing Partner Haseeb Qureshi stated that "AI security hardening costing around $2" could potentially have prevented this vulnerability, and noted that some AI models were able to rediscover related vulnerabilities within a relatively short timeframe. However, industry insiders pointed out that current claims about the speed of AI discovering vulnerabilities lack rigorous blind testing and verification.Researchers believe that as AI model capabilities improve, the costs of vulnerability discovery and attacks in the crypto industry may continue to decline, requiring wallet developers to further strengthen code audits and security protections. (Cointelegraph)
According to CoinDesk, BNY Mellon (The Bank of New York Mellon) announced a partnership with crypto financial services company Galaxy (GLXY), planning to add staking functionality to its digital asset custody platform. Institutional clients will be able to stake digital assets in custody directly through the BNY platform without needing to transfer tokens to third-party service providers. The service is pending regulatory approval before officially launching. Galaxy will be responsible for providing staking infrastructure and will participate in platform expansion as a design partner.
: Tyler Williams, a senior official at the U.S. Department of the Treasury responsible for digital asset policy, has departed. He had served as Treasury Secretary Scott Bessent's primary crypto advisor and was involved in shaping the Trump administration's digital asset agenda. Bessent confirmed that Williams' last working day at the Treasury was last Friday. Williams joined the Treasury in early 2025, having previously served as Head of Policy at Galaxy Digital, and is expected to return to the private sector. Williams' departure comes amid a continued stalemate in Congress over the CLARITY Act, a digital asset market structure bill. The legislation has faced obstacles to advancement before lawmakers' August recess due to disagreements over federal ethics provisions for officials.
Odaily News: Hardware wallet company Coinkite's Coldcard wallet series has experienced a seed generation randomness vulnerability, with threat actors stealing over 1,000 BTC in the past two days. Galaxy Research data shows that as of Saturday 17:36 ET, the incident involved 1,367 BTC, with losses exceeding $88 million. To notify potentially affected users, Coinkite sent security alerts to email addresses retained through its store and newsletter system since 2019. Coldcard confirmed that the emails originated from Coinkite and stated that it has contacted all reachable addresses to the best of its ability. Coinkite has faced criticism for retaining customer email data. The company stated that its public policy explains that purchase email addresses are saved so customers can log in and verify that other information has been cleared, but it did not specify a deletion timeline, saying these addresses would be kept "temporarily." Coinkite co-founder and CEO Rodolfo Novak previously stated that the company does not store customer information, deletes customer data 90 days after purchase, and offers anonymous purchase options.
Odaily News: According to monitoring by Galaxy's Head of Research, a victim's Coldcard wallet was compromised in a hacker attack involving nearly 30 BTC, of which 17 BTC were swapped for ETH via THORChain and subsequently deposited into Duel.comcasino. The victim and a researcher have sent emails to all known addresses associated with Duel.comcasino, requesting that the relevant funds be frozen, and provided all transaction and deposit information. The hacker deposited 229.72497255 ETH, valued at $445,000, into Duel.comcasino—funds originating from the Coldcard attack involving approximately 30 BTC. The victim stated that Duel.comcasino responded by saying that the police would need to contact their team. Duel.comcasino's anti-money laundering policy claims it enforces Know Your Customer (KYC) procedures and complies with all applicable laws. Duel.comcasino was notified within minutes of the deposit being completed. To date, Duel.comcasino has not frozen the relevant funds. Since most of the Western world had already passed midnight at the time of the incident, police reports cannot be filed until at least Monday. If Duel.comcasino fails to freeze the funds, the victim will pursue legal action against them. Duel.comcasino's X account has been suspended, and Galaxy's Head of Research has also flagged individuals on X suspected of being associated with the platform, including team members and dealers: @korraflow, @atrois7, @MiaMalkova.
Odaily News, Galaxy Research Head Alex Thorn posted on X platform, stating that the attack targeting wallet addresses with weak random numbers generated by Coldcard is still ongoing. Users who still hold funds in Coldcard single-signature wallets should immediately migrate to secure addresses. New victim addresses and attacker addresses are continuously being added to the investigation database, and Galaxy Research plans to release updated statistics on the number of affected addresses.He noted that the previously identified waves 1, 2, and 3 of the attack exhibit clear programmatic characteristics, and the stolen BTC currently remains in the attacker's addresses without any transfers. However, in recent times, smaller-scale attackers have begun exploiting the vulnerability to steal funds and move them through peeling chains, cross-chain services, and other methods. It is certain that single-signature wallet addresses generated by Coldcard after the March 2021 firmware upgrade are all potentially at risk, and users should migrate funds as soon as possible.Previously reported, Galaxy Research has disclosed that the Coldcard vulnerability attack has affected approximately 1,367.05 BTC (approximately $88.6 million), involving around 4,585 addresses.
Galaxy Research stated in a post on X that the attack targeting wallet addresses generated with weak randomness by Coldcard is still ongoing. The team urges users to immediately migrate funds from affected Coldcard single-signature wallets to secure addresses.They stated that approximately 600 suspected attacker addresses have been submitted to federal investigators, industry compliance bodies, and cross-industry cybersecurity investigators. These addresses are believed to hold funds stolen from Coldcard wallets with weak randomness.The team also noted that victims have proactively shared wallet addresses and transaction hashes, helping researchers establish on-chain attack patterns and further identify more affected wallets and attack addresses. Currently, multiple parties within the Bitcoin and crypto industry are assisting in user asset protection and attack tracing efforts.Galaxy Research previously stated in a post on X that a third wave of attacks suspected to target Coldcard-generated addresses has emerged, with 207.7294 BTC already transferred out. According to on-chain tracking data, the Coldcard wallet attack incident has so far involved approximately 1,367.05 BTC, valued at approximately $88.6 million, affecting 4,585 addresses.
Galaxy Research stated on Friday that over 1,000 BTC from nearly 1,200 addresses have been moved, valued at approximately $70 million, with the transactions believed to be linked to a vulnerability affecting Coldcard hardware wallets.Earlier, Coldcard manufacturer Coinkite issued a warning on Thursday about an ongoing issue with seed phrases generated by Coldcard Mk3 devices. Out of caution, the company reminded all users who generated seed phrases using Mk3 devices with firmware version 4.0.1, released in March 2021, or later, that their funds may be at risk.Subsequently, Coinkite expanded the scope of its risk alert to include certain firmware versions of Mk4, Mk5, and Coldcard Q, and released emergency firmware updates for all affected models.Coinkite CEO Rodolfo Novak (also known as NVK) apologized on Friday and stated that the company takes "full responsibility" for the firmware vulnerability, acknowledging that internal review processes failed to identify the issue.Novak also suggested that the vulnerability may have been discovered with the help of artificial intelligence, noting that this incident reflects a "sobering reality under the new AI paradigm." He warned that AI-assisted code review could identify potential vulnerabilities faster than experienced security experts, while also making it easier for attackers to exploit weaknesses in public code.
on July 28 that U.S. Senator Jon Husted publicly supported the Digital Asset Market Clarity Act, stating that if the United States wants to maintain its leading position in the digital asset field, it needs a clear, enforceable regulatory framework that supports innovation and employment.The CLARITY Act aims to establish the first comprehensive federal framework for crypto regulation in the U.S., dividing jurisdiction between the U.S. Securities and Exchange Commission (SEC) and the U.S. Commodity Futures Trading Commission (CFTC). The bill classifies tokens into three categories, granting the CFTC exclusive regulatory authority over the spot market for digital commodities, while the SEC continues to oversee assets that still resemble securities.Galaxy Research has lowered the probability of the CLARITY Act becoming law by 2026 from 50% to 30%. Alex Thorn, the firm's Head of Research, stated that the 60-vote threshold in the Senate is the main obstacle, and supporters may not yet hold a simple majority.The revised version of the bill proposes to prohibit the President, Vice President, members of Congress, federal judges, and their spouses from receiving compensation through the issuance or sponsorship of digital assets during their term in office until January 2029. It also requires relevant officials to sell their cryptocurrency holdings or place them in a blind trust.
According to Bitcoin.com, U.S. Senator Cynthia Lummis is pushing hard for the CLARITY Act to complete Senate voting before Congress adjourns. Section 303 of the bill grants the Treasury Department the authority to impose targeted digital asset sanctions on foreign jurisdictions, while Section 305 allows exchanges to freeze suspicious transactions for up to 180 days. On-chain data shows that North Korea's Lazarus Group stole approximately $643 million in the first half of 2026, accounting for two-thirds of the total global crypto theft during the same period ($972 million), including a $285 million attack on Drift Protocol in April and a $292 million attack on the KelpDAO cross-chain bridge. The group's cumulative theft amount has reached $6.75 billion since 2019. Currently, Galaxy Research has lowered the probability of the CLARITY Act passing within 2026 to 30%. The bill still requires 60 votes to advance, meaning at least 7 Democratic senators need to vote across party lines in support.