Crypto had a rough week on two fronts, regulation and cybersecurity, at once and it says a lot about where the industry actually stands.
First, Washington. The Senate was expected to vote on the CLARITY Act, a bill meant to finally spell out which US regulator, i.e. the SEC or the CFTC, oversees which crypto assets. Right now, that line is blurry, and it’s kept banks, pension funds, and other big institutions cautious about touching digital assets at all.
Senate Majority Leader John Thune confirmed the chamber won’t hold that vote before its August recess, pushing action to September at the earliest. Prediction market Polymarket, where traders bet real money on how they expect events to unfold, tells the story in numbers: odds of the bill becoming law in 2026 have collapsed from above 80% earlier this year to the low double digits now. That’s a stark shift in confidence in just a few months. Lawmakers still disagree over ethics rules covering officials who profit from crypto ventures, among other sticking points.
Second, hardware. Coldcard, a popular device that stores the secret “recovery phrase” protecting someone’s bitcoin offline, turned out to have a five-year-old firmware bug. Instead of generating that phrase using genuinely random data, some devices used a predictable substitute, meaning an attacker could effectively guess it. Coinkite, the company behind Coldcard, shipped a fix, but by the time researchers at Galaxy Research had finished counting, roughly $100 million in bitcoin had already been drained from more than 7,300 wallets across multiple waves of theft. The unsettling part is that victims didn’t click a bad link or fall for a scam. They just used an intrinsic flaw in device that’s marketed as one of the safest ways to hold crypto.
Put those two stories side by side, and a pattern emerges. Crypto keeps attracting more money, more attention, and more institutional interest than the systems meant to protect it can currently support. Whether that system is a law in Congress or a chip inside a wallet, uncertainty doesn’t help this emerging alternative financial infrastructure. Regulatory clarity keeps slipping. Hardware that’s supposed to be foolproof isn’t. Both stories chip away at the same thing: trust, or better say, lack thereof. That’s the same undercurrent running through the record-setting July for tokenized stock trading, where fee-free promotions raised real questions about whether demand was genuine or manufactured.
None of this means crypto’s momentum is reversing. Coinbase, Fidelity, and other large custodians are already using the Coldcard episode to pitch their own services as the safer alternative to self-custody. But it does mean two of the industry’s biggest promises, namely, legal clarity and personal control over your own money, both took a visible hit in the same week.
