Crypto’s next altcoin season may produce fewer winners as institutional investors concentrate their activity in a narrower group of digital assets, according to crypto market maker Wintermute.

In its over-the-counter (OTC) flow report for the first half of 2026, Wintermute said institutional counterparties generated 72% of spot flow across all tokens on its OTC desk, the highest share on record. That was up from 61% in the second half of 2025 and 59% in the first half of last year. 

With institutional activity concentrated in fewer tokens and fading faster after price surges, the findings suggest future altcoin rallies could become narrower and more selective. Wintermute said liquidity was concentrating in the assets institutions favored while activity across the market’s “long tail” weakened.

Between the first half of 2024 and the first half of 2026, the number of unique tokens traded by Wintermute’s institutional counterparties grew by just 24%, compared with 76% among retail clients. The firm also found that institutional activity following a surge in a token’s price and volume faded after roughly one day. In contrast, retail activity typically remained elevated for about three days.

Percentage of institutional spot OTC flow. Source: Wintermute

Altcoin capital was already becoming more concentrated

Wintermute’s findings add proprietary OTC data to signs that capital has been clustering around a smaller group of altcoins across the wider market.

On June 20, CryptoQuant CEO Ki Young Ju said the traditional rotation of Bitcoin profits into smaller crypto assets had “basically disappeared.” CryptoQuant data showed trading volume in Bitcoin-denominated altcoin pairs near its weakest level since 2021.

Meanwhile, the 10 largest non-stablecoin altcoins accounted for about 80.5% of the non-Bitcoin, non-stablecoin market’s capitalization.

Related: Crypto altseason unlikely in 2026 as ‘blue-chip survivors’ to win out: Analyst

Kaiko identified a similar concentration in exchange trading. In July 2025, the data provider said that the ten largest altcoins accounted for 63% of altcoin trading volume, up from about 50% several months earlier, as activity in smaller tokens weakened. 

DWF Labs managing partner Andrei Grachev also argued that broad altcoin rallies were giving way to selective sector moves. On March 15, Grachev said too many tokens were competing for limited capital, while institutional investors remained focused on Bitcoin, Ether and tokenized real-world assets.

Magazine: The 100x obsession: Fundamentals grow in importance as crypto matures

Coinkite warned Coldcard Mk3 users on July 30 to move Bitcoin from wallets whose seed phrases were generated on affected firmware.

The Canadian hardware maker said seeds created on firmware 4.0.1 or any later Mk3 release through version 5.0.3 may put funds at risk.

The notice arrived as security researchers examined a coordinated sweep of 594.48 BTC, worth about $38.2 million at a Bitcoin price near $64,324. However, Coinkite and independent researchers have not established that the Mk3 issue caused those transfers.

Coldcard Mk3 warning covers firmware since 4.0.1

Coinkite’s official advisory said its investigation remains active. The company said the Coldcard Mk4, Q and Mk5 are not affected based on its early analysis. It also said wallets using an affected seed with a BIP-39 passphrase face “minimal risk,” while stressing that a passphrase is different from the device PIN.

The advisory now gives users more detailed migration options. Coinkite recommends generating a new seed on an unaffected device, verifying the backup and receiving address, sending a small test transaction and moving the remaining balance only after the test confirms the setup works.

The 594 BTC sweep remains unlinked to Coldcard

AnchorWatch CEO Rob Hamilton reported that 1,324 unspent transaction outputs moved through 500 transactions within a three-block window. The transfers swept 594.48 BTC from single-signature addresses, after which 562 BTC was consolidated into another address.

Hamilton wrote, “At a glance, this looks like there was flawed entropy” during wallet generation. That statement was a preliminary assessment, not a confirmed cause. A Reddit account also described a drained wallet tied to a Mk3-generated seed, but the self-reported account does not prove a wider connection.

Wizardsardine CEO Kevin Loaec described low randomness in a wallet generator as his “current hypothesis.” He said the source could be a software library, secure element, device batch or firmware version. He also proposed that an attacker may have searched a narrow set of BIP-84 paths, which could explain the concentration in native SegWit addresses and partial sweeps.
https://x.com/KLoaec/status/2082926304995762209?s=20 

Loaec’s theory remains unverified. No public technical report has identified the faulty component, measured the available entropy or shown how an attacker derived the keys. Coinkite’s advisory still promises a formal technical review, but the company had not published that review at the time of writing.

The case resembles a broader class of weak-randomness failures. In related coverage, crypto.news reported on the Ill Bloom vulnerability, which Coinspect linked to weak recovery-phrase generation across several blockchains.

As previously reported, the older Randstorm vulnerability affected BitcoinJS wallets that did not generate sufficiently random private keys. That case involved wallets created between 2011 and 2016 and is separate from the current Mk3 investigation.

Affected users have two fallback migration paths

Users with an unaffected Coldcard can create a new seed there and migrate carefully. Coinkite advises preserving the old backup until the entire transfer is confirmed. Users should verify every address on the hardware screen and avoid entering seed words or passphrases on websites or untrusted devices.

For users whose Mk3 is their only option, Coinkite suggests a strong, unique BIP-39 passphrase as a temporary measure. Advanced users may instead create a dice-only seed on an empty Mk3 running firmware 4.1.9 by entering at least 99 independent rolls of a fair six-sided die. The company cautioned that this procedure requires careful backup and verification.

What happens next depends on Coinkite’s technical review and continued on-chain analysis. Until investigators publish a confirmed root cause, the 594 BTC sweep and the Mk3 seed-generation warning should be treated as related in timing but not proven to share the same cause.

Canadian hardware wallet vendor Coinkite has issued an urgent security advisory for its Coldcard Mk3 signing device, warning users to move funds away from wallets whose seed phrases were generated on certain Mk3 firmware versions. The company says the issue affects Mk3 firmware 4.0.1 through 5.0.3, and that affected seeds may put funds at risk.

The warning arrives as Bitcoin investigators and security specialists scrutinize an unrelated-looking but highly unusual sweep of 594.48 BTC from single-signature addresses. While commentators have connected the timing to Mk3 devices, Coinkite stresses that no definitive public proof has linked its firmware warning to the broader sweep.

Key takeaways

• Coinkite’s advisory targets Coldcard Mk3 firmware versions 4.0.1 to 5.0.3; Mk4, Q, and Mk5 are stated as not affected.
• The recommended response is to generate a fresh seed on an unaffected device, verify backups and receiving addresses, then send test transactions before moving remaining funds.
• Early internal analysis from Coinkite indicates BIP-39 passphrases (distinct from the device PIN) may face minimal risk.
• Security experts are analyzing a separate event: a sweep of 594.48 BTC across 500 transactions within a narrow three-block window from single-signature addresses.

Coinkite flags an Mk3 firmware window

In a post on its official blog, Coinkite said that seeds created on a Coldcard Mk3 running firmware version 4.0.1 (released in March 2021) or any later Mk3 firmware may expose funds to risk. The company extends the affected range through firmware version 5.0.3, described as the final firmware supporting the Mk3.

Coinkite’s early analysis also draws a boundary around which components of wallet setup are most relevant. It said seeds used with a BIP-39 passphrase face minimal risk, while clarifying that this refers to a passphrase rather than the Coldcard PIN.

Importantly, the company framed its guidance as a precautionary measure. “Out of an abundance of caution,” Coinkite urged users with potentially affected seeds to generate a new seed on an unaffected device, confirm the backup, verify the receiving address, send a small test transaction, and only then transfer the rest of their funds. Coinkite added that its investigation is still ongoing and that it will deliver a formal technical review.

What triggered renewed attention: the 594.48 BTC sweep

Interest in this broader incident intensified after a Reddit user reported that a wallet drained from an account associated with a Coldcard Mk3 purchased in May 2021 had later been restored onto a Coldcard Mk4 in January 2026. That user’s account is self-reported and does not, by itself, establish a direct connection between the Mk3 firmware warning and the sweep activity.

Separately, AnchorWatch CEO and co-founder Rob Hamilton published a preliminary analysis stating that 1,324 unspent transaction outputs were swept across 500 transactions in a three-block window, moving a total of 594.48 BTC. In his write-up, Hamilton noted that all affected addresses were single-signature, and that 562 BTC was later consolidated into another address.

Hamilton described the pattern as consistent with “flawed entropy in wallet generation somewhere along the way,” echoing the possibility that randomness quality during seed creation may have mattered. At the time of writing, the 594.48 BTC was estimated to be worth about $38.3 million based on Bitcoin’s price of $64,364.07, according to CoinGecko.

Experts debate cause: low-entropy seeds and partial drainage

Another security researcher, Wizardsardine CEO Kevin Loaec, offered a hypothesis focused on the randomness source itself rather than the sweep mechanics. In a separate post, Loaec said his current theory is that a low-entropy random-number generator—potentially located in a software library, a secure element, or a specific device batch or firmware version—produced wallet seeds with insufficient randomness.

Loaec further suggested that if attackers were aware of the flaw, they may have used an AI-generated brute-force script. In his account, the search was confined to a limited set of BIP-84 derivation paths, which could help explain why the sweep appears concentrated in native SegWit addresses and why some wallets were only partially drained. He emphasized that the idea remains unconfirmed.

Crucially, Loaec warned that if his model is correct, wallets that saw only partial drainage could remain vulnerable to additional attempts. He also said funds in other address types might be exposed if the attacker expands scanning beyond the initially targeted formats.

Why the guidance matters for users—especially in light of the speculation

Even though Coinkite has not publicly connected the Coldcard Mk3 firmware issue to the 594.48 BTC sweep, the overlap in themes—seed quality, single-signature theft, and concentrated sweep behavior—means the advisory should be treated as a direct action item. Hardware-wallet incidents differ from typical “compromised computer” narratives: if the weakness is in seed generation, reusing the same seed (even on a different device) can keep exposure alive.

That’s why Coinkite’s recommended operational steps are specific and defensive: creating a new seed on an unaffected device, validating backups, confirming the correct receiving address, and using a small test transfer before moving the remainder. This sequence is aimed at reducing the risk of both theft and user error during migration—two failure modes that often show up around recovery events.

For users, the key uncertainty is whether the sweep investigators will eventually find deterministic evidence linking the Mk3 firmware range to the stolen outputs. Until then, Coinkite’s advisory stands independently as a risk-management decision for any Coldcard Mk3 owner who created seeds during the stated firmware window.

Going forward, readers should watch for Coinkite’s promised formal technical review and for any public forensic work that either corroborates or rules out a relationship between the Mk3 seed-generation warning and the 594.48 BTC sweep pattern described by security specialists.

The American Arbitration Association launched a specialist Web3 Panel on July 29, creating a roster of arbitrators for disputes involving blockchain systems, smart contracts, digital assets, tokenization and autonomous transactions.

The New York-based organization said the panel is intended for commercial conflicts that combine familiar contract questions with technical evidence and cross-border activity. The official AAA announcement said the organization will continue recruiting specialists as the panel expands.

The launch does not establish a regulator or court. Instead, it adds specialists to the AAA’s existing arbitration and mediation system. Parties must still have an arbitration agreement, or agree after a dispute arises, before the organization can administer a case.

AAA Web3 panel covers code, custody and governance disputes

The AAA said the panel may hear disagreements over contract formation, governance, asset control, cybersecurity, transaction records and cross-border enforcement. Its dedicated Web3 dispute-resolution page also lists smart-contract bugs, exchange restrictions, wallet custody, stolen-asset recovery, DAO voting and tokenized-asset rights.

The scope extends beyond cryptocurrency. Agentic commerce and autonomous transactions are included because software or artificial intelligence systems may negotiate, authorize or execute agreements with limited human involvement.

Eric Dill, the AAA’s head of panel relations, said “Web3 disputes involve familiar commercial questions in a highly technical environment.” That statement describes the organization’s reasoning for creating the panel. It does not establish a new legal standard.

In related coverage, a smart contract explainer described these systems as automated blockchain code rather than legal documents. Code can execute transactions, but it cannot interpret intent or independently enforce real-world remedies.

Five initial members combine legal and technical experience

The initial roster includes Kabir Duggal of Akin Gump, technology disputes lawyer David Evans and University of Pennsylvania law professor David Hoffman. Nelson Mullins partner Paula Pendley and Google Cloud Web3 strategy head Rich Widmann also joined the panel.

Their stated experience covers international arbitration, automated commerce, decentralized finance, Bitcoin mining, artificial intelligence infrastructure and digital-asset businesses.

The AAA said it is continuing to recruit arbitrators as new technologies and business models produce additional disputes. However, it did not announce a fixed panel size, a first assigned case or a timetable for expansion.

Therefore, the launch establishes an available specialist roster rather than a mandatory forum for the crypto industry. Companies and customers will still need a valid contractual basis to bring disputes before the AAA.

Existing arbitration rules will still govern cases

Business-to-business technology disputes will generally proceed under the AAA’s Commercial Arbitration Rules. Disputes between consumers and exchanges, wallet providers or other businesses will usually use its Consumer Arbitration Rules.

A claimant must submit an arbitration demand, describe the claim, provide the relevant arbitration clause and pay the applicable filing fee. The panel itself does not gain enforcement or supervisory authority over exchanges, protocols or token issuers.

Under Section 2 of the Federal Arbitration Act, written agreements to arbitrate commerce-related disputes are generally enforceable, subject to legal grounds that may invalidate other contracts. Courts may still become involved when parties contest whether they agreed to arbitrate or seek enforcement of an award.

That distinction has already mattered in crypto cases. As previously reported, the U.S. Supreme Court ruled against Coinbase in a Dogecoin sweepstakes dispute, finding that a court had to decide which of two conflicting contracts controlled.

What happens next for the AAA Web3 panel

Companies seeking access to the panel can add an AAA arbitration clause to commercial agreements. They can also submit an existing dispute when their contract already names the AAA or its rules.

The organization says blockchain transactions are generally not reversed by arbitration itself. Instead, an award or settlement may require repayment, a new asset transfer or another remedy conducted outside the original transaction.

The AAA plans to expand the roster as disputes develop around automated systems, tokenization and AI-driven transactions. As of July 30, its public announcement did not disclose pending case volumes, expected Web3-specific fees or a deadline for adding new members.

The panel arrives as arbitration is already being used in major digital-asset disputes. Kraken secured a $22 million arbitration award against former auditor Mazars USA before seeking court confirmation of the decision.

The Ethereum Foundation appointed Pascal Caversaccio, known as pcaversaccio, to its board on July 29 for an initial one-year voluntary term.

The move expands the governing body to four members as the organization places greater weight on privacy, security and censorship resistance.

Caversaccio joins Ethereum co-founder Vitalik Buterin, Foundation President Aya Miyaguchi and Swiss counsel Patrick Storchenegger. The official board update described him as a longtime Ethereum contributor, a co-founder and lead of SEAL 911, and a member of the Foundation’s Silviculture Society.

Ethereum Foundation adds a security specialist

The Ethereum Foundation said its board sets the organization’s vision and checks whether management’s strategies remain aligned with its values. It also described the body as a “security council” that protects the Foundation’s mission and ensures compliance as a Swiss foundation. That wording reflects the Foundation’s governance model rather than a separate regulatory status.

Caversaccio’s background combines technical security work and privacy advocacy. He wrote The Ethereum Cypherpunk Manifesto in 2024 and Ethereum Privacy: The Road to Self-Sovereignty in 2025. The Foundation also credited him with advancing security practices through technical contributions and community work.

Privacy and security shape the new structure

The appointment follows the Ethereum Foundation’s June reorganization, which reduced its workforce by 54 people, or roughly 20%. The new structure divided work across protocol, access, user, community and institutional layers, alongside operations and management teams.

Within that structure, the protocol cluster treats privacy and security as “non-negotiable protocol guarantees.” Its stated work includes layer-1 privacy, post-quantum security, safer protocol upgrades, reduced technical complexity and defences against harmful maximum extractable value practices.

However, the Foundation’s formal mandate places privacy and censorship resistance at the centre of its work. The mandate does not give the Foundation control over Ethereum. Instead, it describes the organization as one steward among many across the network.

SEAL 911 adds incident-response experience

SEAL 911 is a free, around-the-clock emergency service for active or imminent crypto security incidents. Security Alliance says the initiative has handled more than 3,300 tickets, coordinated over 125 war rooms and helped rescue more than $180 million in assets.

That operational background gives Caversaccio experience with exploits, compromised wallets, protocol failures and fund-recovery efforts. However, the Foundation did not announce any new security programme, budget or incident-response authority tied directly to his appointment.

The two organizations already have a working relationship. The Ethereum Foundation sponsored a SEAL security engineer in February to track and counter crypto drainers targeting Ethereum users.

In related coverage, the Foundation explained how its protocol security team uses coordinated artificial-intelligence agents to identify and verify software flaws. The team reported finding a remotely triggered libp2p flaw that was fixed and disclosed as CVE-2026-34219.

What happens during the one-year term

The board update did not specify committee assignments, voting powers beyond normal board duties or measurable targets for Caversaccio’s first year. It also did not announce compensation, stating only that the role is voluntary and begins with an initial one-year term.

His main formal responsibility will therefore remain board-level oversight. Management will continue to handle execution, while the board reviews whether major strategies and decisions fit the Foundation’s mandate and Swiss legal obligations.

The appointment may place more security and privacy expertise inside those reviews, but the Foundation did not promise specific protocol changes. Work on layer-1 privacy, post-quantum protection and safer transactions will still move through researchers, developers and Ethereum’s broader governance process.

The Foundation has not announced an exact end date for the term or whether Caversaccio may be reappointed. Any continuation beyond the initial year would require a later board decision or public update.

Japanese game developer Gumi will begin operating a roughly ¥3 billion crypto asset fund with SBI Financial Services on Aug. 

According to a July 28 company announcement.The private fund, named SBI Crypto Fund I, will invest mainly in Bitcoin and major listed altcoins. Daiwa Securities Group and several unnamed investors have also committed capital. However, Gumi did not disclose individual investment amounts or the fund’s planned asset allocations.

Gumi and SBI will operate the fund for three years

SBI Crypto Fund I will operate as a private placement through a Japanese silent partnership structure. The fund has a planned three-year term and will be managed by SBI Crypto Fund LLC, according to the official fund overview.

SBI Financial Services owns 51% of the operating company. Gumi’s wholly owned subsidiary, gC Labs, owns the other 49%. The partners had originally considered beginning operations in 2025 but delayed the launch while assessing crypto-market conditions.

The fund will combine staking, portfolio rebalancing and hedging. Gumi did not identify the altcoins it plans to hold, its custody providers, fee structure or specific risk limits. It also warned that the announcement does not guarantee future returns and is not an invitation to invest.

Bitcoin and altcoins support a wider product strategy

Gumi said the fund’s mission is to “bridge the crypto asset market and Japanese companies” through investment and liquidity provision. That statement describes the fund’s planned role rather than a measurable outcome.

The participating companies also plan to collect performance data and test portfolio strategies that combine traditional and digital assets. Gumi said the information could support research into future investment trusts and other managed products. No such retail product has been announced or approved.

The company also said it wants to build a track record before the “possible lifting of the ban” on domestic crypto exchange-traded funds. Japan’s Financial Services Agency has discussed changes that could eventually allow certain crypto ETFs, but regulatory and investment-trust rules still need to support their launch.

Notably, Japan’s first Bitcoin ETF could arrive by 2028 as regulators revise the country’s fund framework. That date remains a reported possibility rather than an official launch deadline.

Gumi’s crypto assets nearly doubled within one year

Gumi’s crypto holdings have already become a large part of its balance sheet. The company reported ¥14.13 billion in crypto assets as of April 30, 2026, up from ¥7.58 billion one year earlier. The increase was about 86%.

Its annual financial results also showed a ¥2.63 billion valuation gain from crypto assets during the latest fiscal year. The company recorded a ¥60.4 million loss from crypto sales, while its operating profit fell to ¥83.3 million. Therefore, valuation gains made a large contribution to Gumi’s ¥2.17 billion ordinary profit.

Gumi said its crypto business centres on active holdings of XRP, portfolio management through Hinode Technologies and investment-fund operations.In addition, Gumi adopted XRP as a corporate treasury asset after previously approving a ¥1 billion Bitcoin purchase.

What happens after the August 1 launch

SBI Crypto Fund I is scheduled to begin operations on Aug. 1. The first verified information on its holdings, staking activity or performance will depend on future disclosures from Gumi, SBI or the fund operator.

The announcement did not set a reporting schedule or provide return targets. It also did not say whether investors may add capital after launch. For now, the confirmed structure remains a three-year private fund with approximately ¥3 billion in committed capital.

Crypto exchange Luno is cutting about 20% of its global workforce as part of a restructuring confirmed on July 28 by Chief Executive James Lanigan. 

The Digital Currency Group-owned company will reduce costs while directing more resources toward institutional customers and its business-to-business unit.

Lanigan did not disclose the number of employees affected or identify the regions and departments included. He said investments in automation and wider operational changes had altered the resources required to run the exchange.

Luno layoffs support an institutional shift

Luno plans to continue investing in compliance, core infrastructure and selected retail products while scaling services for other businesses. Its institutional platform offers liquidity and trading infrastructure for professional clients. The company’s website currently says it serves 15 million customers worldwide.

Lanigan said a “leaner and adapted structure is both necessary and appropriate.” That statement represents management’s assessment rather than a verified financial outcome. Luno has not published projected savings, restructuring charges or a completion date for the workforce reduction.

The latest cuts are smaller than Luno’s January 2023 retrenchment. At the time, the exchange officially announced a 35% reduction across all regions as the crypto downturn weakened growth and revenue. Contemporary reporting estimated that more than 330 roles were affected from a workforce of roughly 960.

July crypto layoffs reached at least 12 companies

The CryptoJobsList tracker listed 12 crypto or crypto-adjacent companies with July-dated cuts or restructurings. They included Luno, Gnosis, Uphold, BitMart, Dango, Odos, BitMEX, Exodus, Polygon Labs, AscendEX, Zapper and Yield Guild Games.

Adding the published figures for six of those companies gives 894 affected jobs. The tracker listed 550 at BitMart, 160 at BitMEX, 85 at Uphold, 54 at Exodus, 35 at Yield Guild Games and 10 at Odos. However, the figure remains incomplete because Luno, Gnosis and several other companies did not disclose exact totals.

CryptoJobsList recorded more than 7,254 disclosed cuts across 47 companies during 2026 and identified market conditions as the most frequently cited reason. However, the tracker relies on public announcements and media reports. It also includes fintech and crypto-adjacent businesses, making it a broad indicator rather than an audited industry total.

Gnosis also confirmed workforce reductions in its second-quarter report, published on July 17. Co-founder Friederike Ernst said the organization had reduced the Gnosis App team after deciding that “growth has been linear, and linear is not good enough” for a consumer product.

The organization plans to remove Gnosis App from Gnosis Ltd during the third quarter. A smaller team is expected to seek decentralized autonomous organization funding for an independent company. The proposal’s outcome and final staffing level remain unconfirmed.

Gnosis reported that the app had about 800 active card users in the second quarter, up from roughly 500 in the first quarter. Daily and weekly active users also increased. Still, management said the product required a smaller structure and faster decision-making outside the wider Gnosis organization.

Automation and payments reshape crypto staffing

The July reductions follow several firms that linked workforce changes to new business priorities. BitGo cut nearly 15% of its workforce in June while focusing resources on security, stablecoins, settlement and artificial-intelligence infrastructure.

Additionaly, Exodus cut 25% of its workforce while integrating Monavate and Baanx into a stablecoin payments and card platform. Its SEC filing said about 77 employees and individual service providers would be affected, with projected annual cash savings of $10 million to $13 million.

Luno has not announced comparable savings targets. The next verified updates may come through company statements, employee consultation processes or changes to its institutional services. Until then, the 20% figure remains the clearest measure of the restructuring, while the absolute number of affected workers remains unknown.

The U.S. Treasury sanctioned two Iranian maritime insurance companies on July 29, alleging that they supported an Islamic Revolutionary Guard Corps-linked system for collecting revenue from vessels using the Strait of Hormuz.

The Office of Foreign Assets Control added HormuzSafe Marine Services Authority and Persian Gulf Marine Insurance Company to its Specially Designated Nationals list. Both were designated under Executive Order 13902 for operating in Iran’s financial sector.

U.S. sanctions target HormuzSafe’s alleged Bitcoin use

Treasury described the two companies as part of an “IRGC-backed extortion scheme” that required commercial vessels to purchase approved maritime insurance before crossing the strait. These are U.S. government allegations, and the sanctions announcement did not include a court ruling against either company.

The department said HormuzSafe was developed by Iran’s Ministry of Economy and “accepts payment in Bitcoin and other digital assets” to bypass Western restrictions. It further alleged that the company generated revenue for the IRGC and helped Iran tighten control over regional shipping.

However, the public Treasury release and OFAC listing did not identify Bitcoin addresses, transaction hashes, payment amounts or specific customers. Therefore, the announcement confirms the U.S. designation and its allegations, but it does not provide public on-chain evidence showing completed Bitcoin payments.

Earlier Bitcoin insurance reports lacked payment evidence

moreover, HormuzSafe promoted maritime insurance payable in Bitcoin in May. The platform reportedly offered digital insurance policies and financial-responsibility certificates for ships operating around the Strait of Hormuz.

Iranian state-linked reports claimed the platform could eventually generate more than $10 billion annually. However, that figure was a projection rather than recorded revenue. No independent adoption data or verified Bitcoin payment records were available at the time.

The July action moves HormuzSafe from a reported sanctions-evasion proposal to an official U.S. sanctions target. Still, the designation does not establish how much cryptocurrency the platform received or whether Bitcoin formed a major part of its revenue.

Eight tankers and eight shipping firms were also targeted

OFAC also sanctioned eight companies accused of operating in Iran’s petroleum sector. The businesses are registered in China, Hong Kong and the Marshall Islands and were linked to vessels that Treasury said transported Iranian crude oil or petroleum products.

Eight tankers were identified as blocked property, including Well Sail, Lily, Al Salmi, Breeze V, Natsumi, Crystal, Nireta and Yehope. Treasury said some had carried millions of barrels of Iranian oil to China since 2022.

The Strait of Hormuz remains a central energy shipping route. U.S. Energy Information Administration data showed that flows through the waterway represented more than one-quarter of global seaborne oil trade and about one-fifth of worldwide oil consumption during 2024 and early 2025.

What happens after the OFAC designation

Property belonging to the sanctioned companies that enters U.S. jurisdiction must be blocked and reported to OFAC. Companies owned at least 50% by one or more blocked parties are also subject to restrictions, even when they are not separately listed.

U.S. persons are generally prohibited from providing funds, services or other economic benefits to the designated companies. Non-U.S. financial institutions may also face sanctions exposure when they knowingly facilitate certain transactions involving blocked parties.

The action did not announce a cryptocurrency seizure, criminal charge or enforcement case against customers who may have used HormuzSafe. Any later asset recovery or prosecution would require additional legal or regulatory action.

U.S. authorities previously froze $344 million in Iran-linked USDT across two Tron addresses. Unlike Bitcoin, USDT can be frozen through controls operated by its centralized issuer.

Visa Chief Executive Ryan McInerney said the payments company will remain neutral among stablecoins as Open USD prepares to enter a market led by Tether’s USDT and Circle’s USDC.

During Visa’s July 28 fiscal third-quarter earnings call, McInerney said the company would remain “multi-coin, multi-chain” and that its role was “not to pick winners.” Instead, Visa plans to help clients connect securely to whichever stablecoins, networks and infrastructure gain adoption.

Visa separates Open USD support from a single-token bet

Visa is one of more than 140 companies supporting Open Standard, the independent consortium developing Open USD. Other participants include Mastercard, Stripe, Coinbase, BlackRock, BNY, Google and several global banks.

However, McInerney’s comments show that Visa does not view its involvement as an exclusive commitment to OUSD. The company already supports several stablecoins and blockchains through settlement, card and money-movement products. Visa previously described its technical approach as a “multi-coin and multi-chain foundation.”

ARK Invest researcher Lorenzo Valente interpreted the response as evidence that partner support may be “closer to a soft LOI than a strategic bet.” That is an analyst’s view, not a disclosed Visa contract term. Neither Visa nor Open Standard has published commitments showing how much capital, distribution or balance-sheet support each partner must provide.

Open Standard plans to launch Open USD later in 2026. Its website says businesses will be able to mint and redeem OUSD without fees or volume limits, while most revenue from the reserves will return to participants that adopt and distribute the token.

That model differs from the issuer-led structures used by USDT and USDC, where the issuing company controls reserve management and related economics. Open Standard says an independent management team and partner-led governance will oversee OUSD. These are planned product features, and the token has not yet launched.

Notably, Open USD’s launch raised questions about Circle’s reserve-income model. Circle shares fell 17.5% on June 30, although Russell index removals also contributed to that day’s decline, making it difficult to isolate OUSD’s effect.

Visa is building infrastructure across stablecoins

Visa’s practical commitment is clearer in its own product releases. On July 16, the company introduced the Visa Stablecoin Platform for banks, fintechs and crypto companies. The platform initially provides access to Open USD, including minting, burning, storage and transfers through a Visa-managed environment.

The company said the platform will also connect with its existing stablecoin settlement, linked-card and money-movement services. In June, Visa reported that its stablecoin settlement activity had reached an annualized run rate of about $7 billion as of March 2026.

Additionally, Visa’s stablecoin platform was described as a route for institutions to use Open USD without building every wallet, security and treasury function internally. Visa’s broader structure could also allow it to serve clients choosing USDC, USDT or another regulated token.

Open USD’s launch will test partner commitment

Open Standard has not announced an exact launch date, initial circulating supply or confirmed transaction volume. Because OUSD is not yet live, there is no verified on-chain activity or market capitalization to compare with USDT and USDC.

The next test will be whether partners integrate OUSD into real payment, settlement and trading products after launch. Visa has already built an initial access route through its platform, but McInerney’s comments indicate the company will continue supporting competing tokens and networks.

Therefore, Open USD may gain distribution through Visa without becoming Visa’s exclusive stablecoin. Adoption will depend on reserve arrangements, regulatory compliance, partner integrations and actual customer demand rather than the size of the consortium alone.