Good morning,
July is going out loudly. Two deadlines land tonight at midnight, a five-year-old firmware bug just cost Bitcoin holders $38 million, and the KOSPI staged a record 17% rebound that crypto completely ignored.
Deadlines first, because those actually expire.
If you are a mandatory filer in Germany and doing it yourself, the statutory deadline is tonight, 31 July 2026, at 24:00. Not the first working day of August. From 1 August the Finanzamt can impose a late-filing surcharge of 0.25% of the assessed tax per month, with a minimum of €25 for every month started.
For crypto holders, this particular return is different from the last few:
The documentation grace period is over. The stricter record-keeping rules from the March 2025 BMF letter came with a non-objection provision covering years up to and including 2024. 2025 is the first year the full standard applies. Handing over a wallet address is explicitly not sufficient evidence.
Anlage SO now has dedicated crypto lines rather than a generic field for other assets.
It is the last return you file before the data arrives anyway. DAC8, implemented in Germany as the Kryptowerte-Steuertransparenzgesetz, has applied since 1 January 2026. EU-registered crypto service providers now report user transaction data to the tax authorities automatically. From next year, what you declare gets compared against what your exchange already sent.
If your 2025 history is scattered across exchanges, wallets and DeFi protocols, rebuilding it by hand tonight is not realistic. CoinTracking generates the Anlage SO as a ready-to-file PDF, imports from 400+ exchanges, wallets and blockchains, and applies FIFO per wallet the way the BMF expects. German company, based in Munich, running since 2012. One caveat if you are starting today: the tax report sits behind a paid plan, so if you need the form tonight, you are upgrading tonight.
👉 Import your history and generate your Anlage SO
Already resigned to missing it? Engaging a Steuerberater or Lohnsteuerhilfeverein moves your 2025 deadline to 1 March 2027 automatically. For a complicated DeFi year, that is usually the better call than a rushed filing you cannot substantiate. A Fristverlängerung request also works, but it has to reach the Finanzamt before the deadline expires, so that is also a today job.
Today is the final day of the XTB promotion. Open a new account and you get one Nike share (ISIN: US6541061031) credited free to your trading account.
Open your account through our link and enter code CRYPTOTICKER at the start.
Complete the opening and activate the trading account.
Make any first deposit and accept the promotion terms in the XTB app.
The share lands within three business days.
No trades required, no minimum holding period. One timing detail matters today: the deposit and the in-app confirmation must both fall inside the promotion window, and that closes tonight, 31 July 2026. Normally you get seven days after opening. Starting now means finishing both steps today.
👉 Open your account and claim the free Nike share
Investing involves risk. The value of investments can fall as well as rise, and you may get back less than you invested. Promotion terms apply.
Between 01:31 and 01:56 UTC this morning, an attacker swept roughly 594 BTC, about $38 million, out of around 500 separate wallets. Twenty-five minutes. More than 1,300 UTXOs moved across 500 transactions inside a three-block window, and 562 BTC was then consolidated into a single address that has not moved since.
Toby Cunningham@sircryptotips
Looks like 500 separate Cold Card hardware wallets were hacked. The hacker took over $40 million worth of Bitcoin from them. Yikes cryptopolitan.com/coldcard-flaw-…
9:57 AM · Jul 31, 2026 · 2.2K Views
6 Replies · 26 Likes
Every drained wallet was single-signature, every one held more than 0.15 BTC, and most had been dormant for years.
Here is the part that should make you check your own setup. According to analysis published by security teams, the cause was not phishing and not a compromised computer. It was key generation itself. A build setting told affected Coldcard devices to skip their own hardware randomness generator, and a check in a supporting library only tested whether that setting existed rather than whether it was switched on. Key generation quietly fell through to a software substitute seeded from the device’s serial number and clock registers. Neither of those is a secret. The serial number is fixed factory metadata. The clock values can be measured on an identical device.
A seed phrase meant to be drawn from an unguessable pool became a solvable puzzle.
Coinkite traced the change to a commit dated 1 March 2021, shipped in firmware 4.0.0 that month. The advisory centres on Mk3 devices running firmware 4.0.1 or later, with Mk4, Q and Mk5 believed unaffected on preliminary analysis. Exposure depends on which firmware your device was running the moment the wallet was created, not on when you bought the hardware.
If you generated a seed on a Coldcard Mk3: check your firmware version and move the funds to a freshly generated wallet. That is exactly what Coinkite is urging.
Bitcoin, for its part, did not care. Down about 1% on the day, and already lower on the week before the exploit happened.
Michaël van de Poppe@CryptoMichNL
The Nasdaq continues to run, but #Bitcoin falls down. Why? The Coldcard hardware wallet drain of $38M $BTC has hit the markets today. Overall, the structure remains intact, it's still, barely, holding above the 21-Day MA and 50-Day MA. If this doesn't hold, there's one
9:53 AM · Jul 31, 2026 · 18.5K Views
32 Replies · 3 Reposts · 92 Likes
BTC $63,846.91 | 🔴 1.05%
ETH $1,883.38 | 🔴 1.73%
BNB $591.96 | 🟢 0.81%
XRP $1.07 | 🔴 0.45%
SOL $73.52 | 🔴 0.56%
TRX $0.3262 | 🔴 0.60%
HYPE $54.76 | 🟢 2.10%
DOGE $0.06948 | 🔴 0.56%
BTC market cap $1.28T. Fear & Greed at 38, in Fear territory.
This week contained a record two-day crash in Korean equities, a 17% KOSPI snapback led by Samsung and SK Hynix both gaining more than 23%, and a $38 million hardware wallet exploit. The entire top ten finished within roughly 3% of where it started, Hyperliquid and BNB aside.
That is the honest read on Bitcoin ignoring the KOSPI and shrugging off the Coldcard sweep. It is not conviction. It is a market with very few participants left willing to react to anything. Today’s monthly options expiry, with the $66,000 level contested, is the first thing in a while that might force a move.
What Is the KOSPI? Inside the $2 Trillion Crash Shaking Global Markets
The KOSPI has erased around $2 trillion in 40 days, its worst crash on record. What happened, why it matters, and what it means for crypto. Worth rereading today given the 17% snapback.
Emirates Now Accepts Crypto: UAE Flyers Can Book Flights With Crypto.com Pay
Emirates has launched Crypto.com Pay for UAE residents, letting them book flights with digital assets on the website and app. How the flow actually works.
Russia Just Passed Its Own Crypto Clarity Act While the US Senate Keeps Stalling
Russia’s crypto trading law is on its way to Putin’s desk while the US CLARITY Act sits unvoted. What the split means for prices.
Today: monthly options expiry, with the $66,000 level as the battleground. Expect volatility into the weekend.
Today: Rare Evo 2026 wraps up, focused on institutional on-chain finance and tokenised ecosystems.
Watch: whether the 562 BTC the Coldcard attacker consolidated starts moving. A dormant address that suddenly transacts is the next chapter.
Around 7 August: Grayscale plans to begin distributing staking rewards from its Ethereum Staking ETF in cash, at least quarterly, pending SEC approval.
Early August: US labour data. The Fed held at 3.50% to 3.75% this week with a hawkish tone, so jobs prints carry more weight than usual now.
The Coldcard flaw shipped in firmware 4.0.0. How long was it live before this morning’s sweep?
Answer at the bottom.
Tonight is the last night for the free Nike share. New account, code CRYPTOTICKER, one deposit, terms accepted in the app.
Investing involves risk. Promotion terms apply.
Trivia answer: Just under five and a half years. The commit is dated 1 March 2021 and shipped that month. It was exploited on 31 July 2026.
No posts
Comments
Nothing yet. Say the first thing.
Sign in to join the conversation.