Strategy CEO Phong Le defended the company’s decision to sell Bitcoin near $60,000 before resuming purchases around $80,000, arguing that its treasury trades depend on capital costs rather than Bitcoin’s market price.

Speaking on Bloomberg Crypto on Sept. 1, Le said the earlier sales and the latest purchase were both appropriate because Strategy’s financing conditions had changed between the transactions.

Strategy purchased 4,603 BTC for $369.7 million between Aug. 24 and Aug. 30 at an average price of $80,318, according to an Aug. 31 regulatory filing.

The purchase lifted its holdings to 845,050 BTC, acquired for approximately $63.73 billion at an average cost of $75,412 per coin.

Strategy links Bitcoin trades to capital costs

Le said Strategy does not decide whether to buy or sell Bitcoin solely by comparing the cryptocurrency’s current price with past levels.

Instead, management considers the cost of raising capital and the return it expects from deploying that capital. If Strategy can issue common shares at a premium to the value of its assets, it may use the proceeds to buy Bitcoin while increasing Bitcoin exposure on a per-share basis.

“We don’t buy or sell Bitcoin based on the price of Bitcoin,” Le said. “We buy or sell based on our cost of capital.”

The position explains why Strategy considered selling Bitcoin between approximately $60,000 and $65,000 reasonable while later paying more than $80,000. The transactions occurred under different balance sheet and financing conditions.

Le said issuing MSTR shares had become attractive again because the stock was trading at a premium. Strategy sold approximately $602.8 million of common shares during the week that ended Aug. 30, using part of the proceeds for its Bitcoin purchase.

The company also increased its general USD Cash pool by $29 million and spent approximately $152 million repurchasing STRC preferred shares below their $100 stated amount.

Strategy’s return to Bitcoin purchases after a two-month pause was therefore part of a broader capital allocation decision rather than a directional call that Bitcoin would rise from $80,000.

Bitcoin sales funded financial obligations

Le said Strategy sold roughly 7,000 BTC during its balance sheet restructuring, describing the amount as “minuscule” relative to its total holdings.

Strategy’s public Bitcoin ledger records sales of 2,225 BTC in early July, 1,638 BTC in early August and 1,690 BTC the following week. Those three disclosed reductions total 5,553 BTC.

The company had also reported selling approximately $218.4 million of Bitcoin earlier in 2026 to fund part of its preferred dividend obligations. Le’s interview figure appears to describe the broader period in rounded terms.

Le said selling Bitcoin to pay preferred dividends was “the right trade at the time.” Strategy had already committed to regular payments on its preferred securities and needed dollar liquidity to meet those obligations without relying entirely on new financing.

The sales represented a departure from Strategy’s earlier reputation as a company that only accumulated Bitcoin. Its board formally authorized a Bitcoin monetization program in June, allowing management to sell BTC to finance its dollar reserve, pay dividends and interest, repurchase securities or meet other approved obligations.

The policy permits up to $1.25 billion in Bitcoin sales to build the designated USD Reserve. It does not require Strategy to sell that amount.

Strategy’s first disclosed sale under its evolving treasury policy marked a transition toward active management of its Bitcoin holdings, rather than an abandonment of its accumulation strategy.

Strategy says net leverage has fallen to zero

Le said Strategy used the pause in Bitcoin purchases to strengthen its balance sheet. Over roughly two months, it increased dollar assets while reducing its net exposure to convertible debt.

The company reported $6.71 billion in USD assets as of Aug. 30. That amount comprised cash and other dollar-denominated holdings allocated across its designated reserve and general corporate liquidity.

Its convertible debt stood at approximately $6.75 billion. Strategy therefore reported net leverage of 0.0% because its company-defined calculation subtracts dollar assets from outstanding debt before comparing the balance with its Bitcoin reserve.

Net leverage of 0.0% does not mean Strategy has eliminated its legal debt or preferred stock obligations. The company continues to have convertible notes outstanding and must make preferred dividend payments.

The metric instead shows that its dollar assets nearly offset the principal value of its convertible debt. The calculation does not subtract all preferred stock claims.

Le described the balance sheet as a “fortress,” arguing that Strategy has no meaningful Bitcoin liquidation price under its current structure. The company’s debt is not secured directly by its Bitcoin in a way that would automatically force sales when BTC falls to a stated level.

That claim does not mean a prolonged Bitcoin decline would have no financial effect. Lower Bitcoin prices could reduce Strategy’s asset value, weaken its ability to issue shares at attractive prices and increase pressure from preferred dividends and other obligations.

Strategy adopts a two-way Bitcoin policy

Le said Strategy now operates a “two-way strategy.” It may sell Bitcoin when doing so improves its capital structure, even though it intends to remain a net accumulator over time.

The framework makes Bitcoin one component of Strategy’s financing system rather than an asset that can never be sold. Management can compare BTC sales with common equity issuance, preferred offerings, repurchases and cash usage.

Strategy’s June framework explains that common stock issuance can be accretive when MSTR trades above the company’s adjusted net asset value. Issuing shares below that level can dilute Bitcoin exposure per share.

Le said Strategy could continue purchasing Bitcoin at $90,000, $100,000 or $130,000 if the cost of capital makes those purchases attractive. Those levels were examples, not forecasts or confirmed purchase orders.

The company would also consider selling Bitcoin again if the proceeds were more valuable elsewhere in its capital structure. Le said price alone would not determine such a decision.

Strategy’s Aug. 31 purchase confirms that it has returned to accumulation after its restructuring period. It now controls slightly more than 4% of Bitcoin’s maximum 21 million supply.

The next update will depend on Strategy’s weekly capital markets activity. Further MSTR issuance at a premium could finance additional Bitcoin purchases, while weak equity demand or higher financing costs could slow accumulation or make another sale more economical.

Meanwhile, Le’s central argument was that the apparent contradiction between selling near $60,000 and buying near $80,000 disappears when the transactions are viewed through Strategy’s cost of capital.

The Bitcoin sales supplied dollars for preferred obligations and balance sheet restructuring. The later purchase used proceeds from common shares issued when management believed MSTR’s market premium made the transaction accretive.

Le said Strategy had strengthened its dollar position, reduced net leverage and retained flexibility to transact in both directions. He maintained that the company remains a long-term net buyer, but no longer treats Bitcoin sales as prohibited.

He also said future purchases could occur at much higher Bitcoin prices if Strategy can obtain capital on sufficiently attractive terms. The comments described a conditional financing framework rather than a Bitcoin price prediction.

A fake desktop application impersonating Anthropic’s Claude is reportedly being used as a delivery mechanism for RevStealer, a Windows malware family designed to harvest sensitive information from victims and then target a wide range of cryptocurrency wallets.

In a report published Monday, cybersecurity firm Morphisec says the campaign has evolved beyond earlier distribution methods that relied on GitHub repositories and game-cheat-themed sites, with one of the most prominent lures being a project dubbed “Claude Opus 5 Free Desktop.” The name suggests free access to Claude while disguising malware intended to steal crypto and broader account credentials.

Key takeaways

• Morophisec links the latest RevStealer infections to a fake “Claude Opus 5 Free Desktop” download that impersonates Anthropic/Claude.
• The malware focuses on stealth, including searches of browser data, cookies, password-manager records, VPN/remote-access settings, and selected files.
• RevStealer targets more than 50 cryptocurrency wallets and attempts to avoid analysis by checking for “real user” environments.
• Its staging includes environment and debugging-delay checks; if the system doesn’t meet the criteria, the malware halts further activity.

Fake Claude desktop lure points to continued social-engineering

According to Morphisec, RevStealer was previously pushed through channels such as GitHub repositories and websites themed around game cheating. While those delivery routes remain common for commodity malware, the firm highlights a more noticeable ruse: a counterfeit “Claude Opus 5 Free Desktop” project that mimics the branding of the AI developer Anthropic and presents the promise of free Claude access.

This matters for users because it reflects how crypto-targeting threats increasingly blend into everyday software expectations. Instead of asking victims to install a clearly suspicious file, attackers wrap their payloads in familiar UI assumptions—an “app” users might treat as legitimate productivity software.

What RevStealer looks for—and where it steals

Morphisec says RevStealer is built to minimize its forensic footprint while broadening the scope of harvested data. The malware searches browser databases and related artifacts such as cookies, password-manager records, and other stored session information.

The threat also goes beyond typical credential theft by collecting details connected to remote access and privacy tooling, including VPN and remote-access settings. It further targets messaging-related data and takes screenshots, alongside selected documents.

On the crypto side, Morphisec notes that RevStealer targets over 50 cryptocurrency wallets. For investors and everyday users, the key risk is that stolen wallet access can enable asset movement without needing the attacker to break the wallet software itself—if the victim’s wallet files or credentials are extracted, the next step can be direct unauthorized control.

Environment checks designed to frustrate researchers

A notable feature of the RevStealer infection chain, according to the Morphisec report, is a multi-part gating mechanism. Before unlocking the next stages, the malware checks whether the machine resembles a genuine user device.

The researchers describe checks based on available memory, processor core count, hostname and username characteristics, and graphics hardware. Morphisec also adds that RevStealer monitors for debugging delays that are typical in malware analysis environments.

If the malware detects anything it considers abnormal, it does not proceed further—meaning it can reduce the amount of observable behavior available to analysts and slow down detection efforts. When the checks pass, Morphisec reports that the payload is decrypted, saved under a random filename, and executed covertly.

For defenders, this implies that “it didn’t run” can be a deliberate outcome rather than a sign of a clean system. It also highlights why behavioral detection and endpoint monitoring still matter: relying solely on static indicators or single-run samples may miss threats that deliberately stall during investigation.

Broader trend: crypto-investor malware frameworks keep expanding

The RevStealer report lands amid other research targeting people involved with cryptocurrency investing. Earlier coverage referenced discovery by Kaspersky of a new malware framework called OkoBot, described as targeting crypto investors by harvesting wallet files, browser data, and user credentials.

As noted by Kaspersky in that separate discovery, OkoBot can also inject malicious extensions and capture wallet application windows to help steal assets. While the Morphisec write-up focuses specifically on RevStealer, both cases point to a persistent pattern: attackers are combining browser/session theft with wallet-targeted collection and increasingly using realistic lures.

For readers, the important takeaway is not just that malware exists, but that campaigns are diversifying their tooling and delivery methods while remaining aligned around a shared objective—access to crypto storage and the credentials needed to move money.

What users and teams should watch next

With scams now leveraging credible-sounding AI branding and malware that attempts to detect analysis environments, the immediate priority is operational hygiene: treat “free” desktop downloads—especially ones impersonating well-known companies—as high-risk, avoid installing unknown software from community-hosted pages, and verify integrity before execution. Meanwhile, security teams should expect more wallet-focused stealers that pair broad browser-data harvesting with stealthy, environment-aware execution.

Ripple has teamed up with SettleMint to help financial institutions manage tokenized assets from issuance through ongoing custody and lifecycle operations. The partnership, announced Tuesday, is designed to combine Ripple’s institutional custody offering with SettleMint’s platform for digital asset lifecycle management.

Just a day earlier, Coincheck Group said it was working with wallet infrastructure provider DFNS to bring institutional-grade digital asset custody and wallet technology to Japan. Together, the two deals underline a broader industry push in Asia-Pacific: building infrastructure that can meet regulatory expectations and reduce the complexity for regulated entities entering tokenized markets.

Key takeaways

• Ripple and SettleMint plan to integrate Ripple Custody with SettleMint’s Digital Asset Lifecycle Platform to support tokenized assets across their full lifecycle.
• Coincheck Group’s earlier Japan-focused partnership pairs DFNS wallet-as-a-service with institutional-grade custody and lifecycle controls.
• Both initiatives aim to close an “infrastructure gap” that has limited regulated financial institutions’ ability to deploy digital asset services.
• Asia-Pacific remains a high-growth region for onchain activity, according to Chainalysis’ 2025 global adoption index.

Ripple’s custody and token lifecycle integration

Ripple’s announcement centers on an integration between its institutional custody infrastructure, Ripple Custody, and SettleMint’s Digital Asset Lifecycle Platform (DALP). The stated goal is to give institutions a more streamlined way to secure tokenized assets while supporting the operational steps needed before, during, and after issuance.

By positioning the combined stack around both custody and lifecycle functions, the partnership targets a practical bottleneck for regulated firms: it’s not only about holding assets securely, but also about handling operational workflows, controls, and ongoing management in a manner that aligns with enterprise requirements.

Ripple did not outline, in the provided announcement text, specific implementation details such as which tokenization use cases DALP will prioritize or how institutions will integrate the system into existing back-office operations. Investors and enterprise buyers are likely to watch for clearer information on deployment timelines and integration paths once pilots or production rollouts begin.

Coincheck and DFNS bring wallet-as-a-service to Japan

On Monday, Coincheck Group announced a separate strategic partnership with DFNS. The aim of that collaboration is to develop wallet technology and custody services for Japan, with DFNS providing a wallet-as-a-service layer.

According to the company’s description, DFNS’s model supports institutions with transaction lifecycle management. It includes workflow orchestration and governance controls, all delivered through a single platform that supports more than 100 blockchain networks.

The timing matters: Ripple’s announcement comes immediately after another Japan-linked institutional push, suggesting that custody and wallet infrastructure are being treated as foundational components rather than standalone offerings. For regulated institutions considering tokenization, this kind of packaging can reduce the number of vendors and operational handoffs—an important factor when enterprises are trying to move from experimentation to governed deployment.

Why Asia-Pacific is becoming the focus

Both partnerships are taking shape in a region that is actively expanding its onchain activity. Chainalysis’ 2025 global crypto adoption index cited in the report points to Asia-Pacific as the fastest-growing area for onchain crypto activity, with a 69% year-over-year increase in value received.

When activity grows, it typically increases pressure on the surrounding infrastructure—custody providers, transaction tooling, compliance workflows, and governance systems. In practice, regulated financial institutions often need these elements to be coherent and auditable, rather than stitched together from multiple tools.

That helps explain the emphasis on lifecycle management in both announcements. A custody provider alone may secure assets, but lifecycle platforms and wallet infrastructure can help institutions manage operational steps such as issuance controls, governance mechanisms, and the day-to-day management that follows.

Regulation shifts in Japan raise the stakes for enterprise infrastructure

Regulatory direction in Japan provides additional context for why these partnerships are surfacing now. In July, Japan’s parliament passed revisions that classify crypto assets as financial assets under Japan’s Financial Instruments and Exchange Act, as noted in earlier coverage cited in the source text.

Additionally, Japan’s Finance Minister Satsuki Katayama signaled an intent to bring crypto under the same umbrella as traditional finance assets in January, with the aim that citizens would “benefit from digital and blockchain-based assets.” The inclusion of crypto within a more established securities framework increases the importance of controls and institutional-grade operating processes.

For custody and tokenization infrastructure providers, the regulatory shift can be a catalyst—new frameworks often require service providers to adapt how they safeguard assets, manage operational risk, and document processes. Partnerships like Ripple–SettleMint and Coincheck–DFNS can be seen as attempts to deliver the operational readiness institutions increasingly need.

What to watch next

The immediate question for institutions is how these integrated approaches will translate into real-world deployments—particularly around governance, lifecycle workflows, and enterprise onboarding. As Japan and other Asia-Pacific markets refine regulatory expectations, providers that can demonstrate secure custody plus end-to-end lifecycle management are likely to gain an advantage, while others may struggle to meet the operational bar at scale.

The US dollar continues to strengthen following its previous period of weakness, gradually recovering ground against the major currencies. Today, market attention will be focused on the preliminary ADP employment figures for the US. According to forecasts, the private sector is expected to have added 48K jobs, following an increase of 44K the previous month. A significant deviation from expectations could increase dollar volatility and prompt a reassessment of expectations for the Federal Reserve’s future policy.

The situation in the Middle East remains another important factor. Tensions surrounding Iran continue to support demand for safe-haven assets and increase volatility in the oil market. Stronger demand for safe havens could also support the yen and partially limit the upside potential of USD/JPY.

For USD/CAD, the Bank of Canada’s meeting will be the key event. The central bank is expected to keep its policy rate unchanged at 2.25%, meaning that attention will focus primarily on the accompanying statement and press conference. A more dovish tone could increase pressure on the Canadian dollar and support further gains in the pair.

Oil will remain another important driver. EIA crude inventory data and geopolitical tensions surrounding Iran could have a significant impact on oil prices and, consequently, on the Canadian dollar.

USD/JPY

Following last week’s recovery, USD/JPY has once again tested the important 159.40–159.80 support area. Yesterday, buyers managed to establish the pair above the psychological 160.00 level.

If the US employment data comes in stronger than expected, the advance could continue towards 160.50–161.00. The bullish scenario would be invalidated by a firm move below 159.40.

Key events for USD/JPY:

• today at 14:00 (GMT+3): US MBA Mortgage Applications;
• today at 15:15 (GMT+3): US ADP Nonfarm Employment Change;
• tomorrow at 03:30 (GMT+3): Japan Services PMI.

USD/CAD

USD/CAD has been consolidating within a narrow 1.3840–1.3910 range over recent trading sessions.

A breakout and sustained move above 1.3910 could pave the way for further gains towards 1.3960–1.4000. Conversely, a break below the lower boundary of the range could lead to another test of the recent lows around 1.3730–1.3780.

Key events for USD/CAD:

• today at 16:45 (GMT+3): Bank of Canada interest-rate decision;
• today at 17:30 (GMT+3): US crude oil inventories;
• today at 17:30 (GMT+3): Bank of Canada press conference.

The dollar is maintaining its upward momentum, although today’s events could significantly influence the next direction of the market.

For USD/JPY, the main drivers will be the ADP employment figures and any subsequent repricing of expectations for Federal Reserve policy. USD/CAD will additionally be influenced by the Bank of Canada’s decision and developments in the oil market.

Stronger-than-expected US data combined with a dovish BoC tone could support further gains in both pairs, while weaker US figures or more hawkish signals from the Canadian central bank could limit the dollar’s recovery.

Trade over 50 forex markets 24 hours a day with FXOpen. Take advantage of low commissions, deep liquidity, and spreads from 0.0 pips (additional fees may apply). Open your FXOpen account now or learn more about trading forex with FXOpen.

This article represents the opinion of the Companies operating under the FXOpen brand only. It is not to be construed as an offer, solicitation, or recommendation with respect to products and services provided by the Companies operating under the FXOpen brand, nor is it to be considered financial advice.