Trump Media says it will overhaul how it manages its digital-asset treasury after crypto and securities losses contributed to a $238 million net loss in the second quarter. In its Q2 earnings materials, the company attributed $190.4 million in unrealized losses to its mix of digital assets, pledged digital assets, and equity securities, while describing a plan aimed at keeping long-term Bitcoin exposure but reducing balance-sheet volatility.

The publicly traded company—best known as the parent of social platforms Truth Social and Truth+ and the financial services brand Truth.Fi—linked the strategy shift to the need for a more resilient framework. The company noted that the changes are meant to improve the “productivity” of its balance sheet without abandoning its core digital-asset positioning.

Key takeaways

• Trump Media reported $238 million net loss in Q2, with $190.4 million tied to unrealized losses across digital assets, pledged digital assets, and equity securities.
• A new treasury framework is planned to preserve long-term Bitcoin exposure while managing volatility and improving capital efficiency.
• Bitcoin use in hedging and yield activity is already in place, including options-based volatility management and deployments of some BTC to third parties.
• The company increased direct Bitcoin exposure in July, moving from 9,477.16 BTC at quarter-end to about 14,139 BTC by July 31, including pledged BTC.
• Counterparty and liquidity risks are explicitly flagged for Bitcoin-yield strategies, including default risk and limits on selling or pledging deployed BTC.

Why Trump Media is changing its digital-asset plan

Trump Media’s shift comes as investors focus on how publicly traded firms balance crypto exposure with the accounting swings that unrealized losses can create. In its second-quarter reporting, the company said its existing digital-asset and securities positions generated significant unrealized markdowns. Those losses, it said, were part of what drove the quarter’s large net loss figure.

Rather than retreating from Bitcoin, Trump Media emphasized that the revamp is intended to “preserve” long-term exposure while addressing volatility and making the balance sheet work more efficiently. The company also said it plans to direct more resources toward Truth Social, Truth+, and other media operations, framing the treasury shift as part of a broader capital allocation change.

Because the group is tied to former U.S. President Donald Trump, the broader context matters for market watchers. The filing notes that a trust holding roughly 41.1% of Trump Media’s voting power as of Feb. 25 remains the sole beneficiary of Trump Media voting power, according to the company’s latest annual report.

What the Q2 filing says about Bitcoin strategy

Trump Media’s Q2 documentation indicates it is not treating Bitcoin purely as a long-term spot holding. Instead, the company described a framework that already includes options to manage Bitcoin volatility and generate premium income. It also reported using part of its BTC in lending and other yield-style arrangements.

As of June 30, Trump Media held 9,477.16 Bitcoin, down slightly from 9,542.16 BTC at the end of the prior quarter. Separately, it reported pledging 2,077.34 BTC as collateral for its options strategy. The company also said 4,260.73 BTC was serving as collateral for convertible notes.

That structure shows a balancing act: maintaining Bitcoin exposure while ring-fencing assets for derivatives and financing obligations. It also highlights how pledged collateral can constrain a company’s flexibility during drawdowns or liquidity events.

July: Bitcoin-related sales followed by increased BTC exposure

While the second quarter itself left Trump Media’s direct Bitcoin holding relatively stable, the company later stepped up its Bitcoin exposure in July. By July 31, Trump Media said it held approximately 14,139 BTC, including pledged Bitcoin, which it valued at about $890.5 million at the time of reporting.

The path to that increase was tied to an intermediate step: the company said it sold Bitcoin-related securities worth $159.6 million in July and used the proceeds to purchase Bitcoin. This matters because it suggests the company viewed those securities as a temporary component in its capital deployment rather than a permanent replacement for direct BTC exposure.

For readers tracking how non-traditional crypto entrants manage treasury assets, the key takeaway is that Trump Media’s exposure management appears active rather than passive. The company is also maintaining a portfolio where some Bitcoin remains tied up—through pledges and other arrangements—while the headline BTC totals can rise through incremental purchases.

Risks Trump Media says it faces with BTC yield activities

Trump Media’s filings do not just outline how it earns additional income; they also provide a clear warning about the trade-offs. The company stated it deployed a portion of its Bitcoin holdings to third parties via lending, placement, and other yield-generating arrangements, describing these as relatively new strategies.

According to the company, some counterparties may not be rated by major credit rating agencies. That increases the risk that counterparties could default during periods such as market downturns, liquidity crises, or other financial stress.

Trump Media also warned that if an arrangement is unsecured, it may be unable to recover its Bitcoin in the event a counterparty becomes insolvent. It added that its ability to sell or pledge Bitcoin can be limited while assets are deployed, and that counterparties may use the assets at their discretion.

These disclosures are especially relevant when paired with the company’s decision to revamp its treasury strategy. The new framework is positioned as a way to maintain long-term exposure and reduce volatility, but the filings indicate the risk is not only market-driven. It is also operational and credit-driven—tied to whether deployed Bitcoin is recoverable and how counterparties behave under stress.

In other words, the company is trying to enhance balance-sheet performance while accepting that yield-style BTC deployments can introduce new failure modes that typical spot holding does not.

What investors should watch next

Trump Media has flagged both accounting volatility from unrealized losses and credit/liquidity risk from its Bitcoin-yield counterparties. Going forward, investors will likely focus on how the company implements its revamped treasury framework—particularly whether it changes the share of Bitcoin deployed to third parties versus retained as pledged collateral or held directly, and how those choices affect reported results in subsequent quarters.

Bitcoin’s BTC$64,080.96 elite holders are quietly loading up again.

The number of wallets holding at least 10,000 BTC has climbed back to 90, a six-month high, according to analytics firm Santiment. Over the past eight weeks alone, the count of these “whale” wallets has risen by six, a 7.1% increase.

The move builds on a broader accumulation trend first flagged four days ago. Since July 29, wallets in the 10–10,000 BTC range (whales and sharks) have accumulated BTC worth $1.5 billion. Santiment noted at the time that the pattern of larger players accumulating while smaller holders sell raised the odds of a move above $70,000 versus a drop below $60,000.

Meanwhile, “micro” wallets have been steadily shrinking throughout August. Santiment links this divergence to two recent catalysts of uncertainty and doubt: The Coldcard hardware-wallet exploit, which drained roughly $120 million worth of bitcoin, and continued delays to the U.S. Clarity Act, the long-awaited crypto market-structure bill that the Senate has now pushed to September.

These trends point to a classic supply rotation, with coins shifting from smaller holders into the wallets of the largest investors, the so-called “strong hands.”

Trump Media and Technology Group terminated its planned Cronos treasury venture with Crypto.com and Yorkville on August 7. The retreat signals that the corporate crypto treasury thesis, built on the premise that holding tokens is a balance sheet strategy, is running into the same saturation problem it was supposed to solve.

On August 7, 2026, Trump Media interim CEO Kevin McGurn told Axios that the company had terminated the CRO Strategy venture, the services agreement, and the digital asset product suite that accompanied the original deal. The companies also abandoned a related prediction market integration. Yorkville Acquisition Corp, the blank check vehicle created to take the treasury venture public, agreed to the termination. McGurn cited saturation. The treasury sector, he said, had become crowded.

The deal between Trump Media and Crypto.com was announced with the kind of numbers that attract headlines. A $6.42 billion treasury play. A branded entity called Trump Media Group CRO Strategy. A SPAC vehicle to take it public. The premise was simple: acquire CRO tokens at scale, hold them on a public balance sheet, and let market appreciation create shareholder value. The strategy echoed what MicroStrategy had done with Bitcoin, but applied to a token that was orders of magnitude smaller in market capitalization, less liquid, and tied to a single exchange ecosystem. The termination, coming less than a year after the announcement, is not just a deal falling apart. It is the first major public admission that the corporate crypto treasury model may have structural limits that its promoters did not advertise.

What the CRO Strategy deal was supposed to build

The original announcement in August 2025 outlined a multi-layered financial structure. Trump Media would purchase approximately $105 million in CRO tokens, acquiring 684.4 million tokens at a price of roughly $0.153 per token. Crypto.com would purchase $50 million in Trump Media shares, creating a reciprocal ownership link between the media company and the exchange. The two parties would then form Trump Media Group CRO Strategy, a dedicated entity designed to function as a publicly traded digital asset treasury.

Yorkville Acquisition Corp, a blank check company, would serve as the public listing vehicle. The SEC filing described the venture as the first and largest publicly traded CRO treasury firm, a designation that was accurate only because no one else had attempted the same structure with that specific token.

The deal also included a services agreement covering digital asset product development and a prediction market integration called Truth Predict, which would embed betting features inside Truth Social using Crypto.com Derivatives North America as the infrastructure provider.

The combined structure tied Trump Media to CRO price performance in multiple ways: through direct token holdings, through the treasury entity, through the SPAC listing, and through the product integrations that assumed continued engagement with the Cronos blockchain ecosystem. The multi-layered exposure was presented as strategic depth at the time of the announcement. In retrospect, it created a situation where CRO price weakness propagated through every component of the deal simultaneously, amplifying the downside in a way that a simpler structure would not have.

The valuation environment that produced the deal was also unusual. At the time of the announcement, corporate crypto treasuries were attracting premium multiples from investors who treated token accumulation as a growth strategy. Trump Media’s management appears to have structured the CRO Strategy venture to capture that premium. When the premium disappeared and the valuation environment shifted, the economic rationale for the deal evaporated alongside it.

Why the parties walked away

McGurn framed the termination around focus and saturation rather than failure. “We wanted to get focused,” Axios reported him saying. He characterized the crypto treasury sector as overcrowded, arguing that the competitive dynamics had shifted since the deal was announced.

The saturation claim has some factual basis. Between the second half of 2025 and mid 2026, more than 30 public companies announced crypto treasury strategies of various sizes. Most were modeled on the MicroStrategy template: issue equity or convertible debt, buy Bitcoin, and report the holdings as a core balance sheet item. The Trump Media venture stood apart because it targeted CRO rather than Bitcoin, but the underlying logic was the same.

What McGurn did not say is arguably more revealing than what he did. He did not claim the deal was restructured or paused. He confirmed mutual termination, meaning all three parties agreed that the venture no longer served their interests. The services agreement was also terminated. The prediction market integration was downgraded from a full product to a marketing arrangement.

McGurn added that staking CRO had become less central for Crypto.com itself, making a split logical for both sides. That detail matters. If the exchange that issues a token is de-emphasizing it, the case for a third party to build a treasury around it weakens considerably.

The $406 million loss that changed the math

The termination did not occur in a vacuum. Trump Media reported a $406 million quarterly loss earlier in 2026, driven primarily by markdowns on its digital asset holdings. The loss was not a realized trading loss in the traditional sense. It reflected the accounting treatment of crypto assets under fair value rules, where price declines flow directly through the income statement.

For a company with limited operating revenue, a nine figure markdown on token holdings is not a rounding error. It is a thesis test. The crypto treasury model assumes that holding tokens creates long term value for shareholders. But the same model forces the company to report price declines as losses, creating quarterly volatility that public market investors tend to punish.

MicroStrategy, the original corporate Bitcoin treasury, has navigated this problem by leaning into it. The company rebranded as Strategy, made Bitcoin accumulation its primary corporate identity, and attracted a shareholder base that understood and accepted the volatility. Trump Media was not positioned to make the same bet. Its core business is a social media platform. Its shareholders purchased the stock for reasons that included but were not limited to the crypto treasury thesis. When the token holdings produced a loss that exceeded the company’s operating revenue by orders of magnitude, the strategic case for continuing became harder to make.

The regulatory environment added complexity. While McGurn explicitly denied that regulatory pressure drove the termination, the broader landscape has shifted. The GENIUS Act and related legislative efforts have introduced new compliance requirements for companies holding digital assets at scale. Whether those requirements directly affected the CRO Strategy venture or simply increased the cost of maintaining it is an open question that the termination announcement did not address.

The accounting treatment itself deserves closer examination. Under ASC 820, crypto assets held at fair value require quarterly mark to market adjustments. When token prices rise, the company reports unrealized gains that flow through its income statement, inflating earnings in ways that may attract shareholders who mistake accounting gains for operating performance. When prices fall, the reverse occurs, and the company must explain why its core business lost hundreds of millions of dollars in a quarter where nothing operationally changed. The asymmetry between the two scenarios creates a ratchet effect: the company captures enthusiasm during price increases but faces existential questions during declines. For a company like Trump Media, whose operating revenue from Truth Social was in the low tens of millions annually, a $406 million markdown made the treasury strategy the dominant item on the income statement, overshadowing every other aspect of the business.

Truth Predict and the prediction market retreat

The CRO Strategy termination was not the only product that got scaled back. Truth Predict, the prediction market feature that Trump Media unveiled in October 2025, was also restructured.

The original plan embedded betting features inside Truth Social, powered by Crypto.com Derivatives North America. Users would trade prediction market contracts without leaving the social media platform. The integration assumed that Truth Social’s user base represented a captive audience for event contracts on politics, sports, and financial outcomes.

Under the new arrangement, the companies will pursue a marketing partnership rather than a full product integration. Crypto.com will promote its prediction products to Truth Social users, but Trump Media will not operate the back end infrastructure. McGurn argued that the space was already crowded with prediction market operators and that running infrastructure offered little return compared to simply distributing someone else’s product.

The reasoning reveals a broader shift in how Trump Media sees itself. The company is moving away from operating crypto infrastructure and toward licensing its brand and audience as distribution assets. That pivot is visible in its API business, which now serves roughly 10 customers (up from about five), most of whom are high frequency trading firms that feed Truth Social data into algorithmic strategies. McGurn said the company is also courting large language model developers and prediction market platforms as API customers.

The transition from infrastructure operator to data licensor is a meaningful strategic shift. It reduces Trump Media’s exposure to the operational risks of running crypto products while creating revenue streams that do not depend on token price performance. Whether the data licensing business can generate enough revenue to replace the value that was supposed to come from the treasury venture remains to be seen.

The prediction market landscape that existed when Truth Predict was conceived looked different from the one that emerged by mid 2026. At the time of announcement, Polymarket was the dominant player and the only U.S. focused platform with meaningful liquidity. By August 2026, Kalshi had expanded into event contracts for political and financial outcomes, Robinhood had added prediction market features to its mobile app, and several crypto native platforms had launched competing offerings. The window for Truth Social to capture a meaningful share of the prediction market audience had narrowed considerably, and the cost of operating back end infrastructure for a feature that would compete with well funded competitors no longer justified the investment when a simpler marketing arrangement could provide the same user exposure at a fraction of the cost.

The API pivot also reframes Truth Social’s value proposition. Under the treasury model, Truth Social was a distribution channel for crypto products. Under the data licensing model, it is a source of sentiment signals that have value to financial firms. The platform’s concentrated user base, which skews toward politically engaged American adults, generates text and engagement data that reflects a demographic segment that is underrepresented in other social media sentiment feeds. High frequency traders and LLM developers are willing to pay for access to that signal precisely because it is different from what Twitter, Reddit, or Stocktwits provides. The commercial value of the platform may ultimately have less to do with how many users it retains than with how unique the data those users generate is.

What happens to Yorkville and the SPAC structure

Yorkville Acquisition Corp agreed to the termination alongside the other parties. The blank check vehicle was created specifically to take the CRO treasury venture public. Without that venture, the SPAC’s original purpose no longer exists.

However, one piece of the Yorkville structure survives. Yorkville America’s America First ETFs, branded as Truth Social Funds, will continue operating. These funds existed as a separate product line from the SPAC and were not dependent on the CRO Strategy venture for their investment thesis.

The survival of the ETF products while the SPAC terminates illustrates the fragmented nature of the original deal. What was presented as a unified strategic partnership between Trump Media, Crypto.com, and Yorkville was in practice a collection of loosely connected agreements. The treasury venture, the services agreement, the prediction market integration, and the ETF products could be separated because they were never truly integrated at the operational level.

For the broader SPAC market, the termination adds another data point to an already difficult environment. Blank check companies that target crypto related ventures have faced elevated scrutiny from the SEC, and the completion rate for crypto focused SPACs has declined steadily since 2024. The Yorkville termination does not set a legal precedent, but it reinforces the pattern of crypto SPAC deals that announce with fanfare and unwind quietly.

The economics of the SPAC structure also contributed to the deal’s fragility. Blank check companies carry a deadline for completing their acquisition or merger, typically 18 to 24 months from IPO. If the deal is not completed within that window, the SPAC must return capital to shareholders. This deadline pressure means SPAC targets are selected and structured under time constraints that do not always align with the pace at which crypto markets evolve. When the CRO Strategy venture was designed, the crypto treasury thesis was still generating investor enthusiasm. By the time the SPAC needed to close, the market had moved on.

Researchers found 821 accounts that made $8.2 million by manipulating bitcoin prices in the final seconds before Polymarket settled its short dated contracts. Polymarket has now replaced instant snapshots with time weighted averages, but the structural vulnerability they exposed is not unique to one platform.

On August 7, 2026, Polymarket announced it would replace the single price snapshot it had used to settle short dated crypto contracts with a time weighted average price, known as a TWAP. The change followed months of trader complaints, public warnings from onchain analysts, and a peer reviewed study from researchers at Stanford University and Singapore Management University that documented how a small number of accounts systematically profited by moving bitcoin prices on Binance in the final seconds before Polymarket’s settlement windows closed.

The exploit was not a hack. No smart contract was compromised. No private key was stolen. The vulnerability was a design choice: Polymarket settled its short dated crypto markets using a single price at a single moment. Anyone who could move that price for a few seconds could change the outcome of the contract. The researchers called the vulnerability “structural,” and their language was precise. “An asset price contract settles on a financial price,” they wrote, “and that price can be moved by trading the underlying market itself.”

The finding raises questions that extend well beyond one platform. Prediction markets handled $50.6 billion in volume in July 2026 alone. As these markets grow, the intersection between prediction contract settlement and spot market manipulation becomes a systemic concern, not a niche complaint from retail traders who lost money on five minute bets.

The timing of the fix also coincides with Polymarket’s reported effort to raise $1 billion at a $20 billion valuation. For a platform seeking institutional capital, the public documentation of a manipulation vulnerability that went unaddressed for months creates a due diligence problem. Institutional investors do not merely evaluate growth metrics. They evaluate integrity infrastructure. The TWAP transition can be read as both a genuine security improvement and a necessary precondition for closing a fundraising round with investors who take market structure risk seriously.

How the manipulation worked

The mechanics were straightforward. A trader would accumulate a position on Polymarket’s five minute bitcoin up or down contract. These contracts pay out based on whether bitcoin’s price is above or below a specific threshold at the moment of settlement. The trader would then wait until the final seconds before settlement and place a large order on Binance, the world’s largest spot exchange by volume, to push bitcoin’s price across the strike threshold.

The order did not need to be large enough to sustain a price move. It only needed to last long enough for the settlement snapshot. Once the contract resolved, the manipulator would close the Binance position, often at a small loss, and collect the Polymarket payout. The Binance loss was the cost of doing business. The Polymarket profit was the payoff.

The strategy worked because five minute contracts have thin time horizons. Moving bitcoin’s price by a fraction of a percent for five seconds is expensive but achievable for a well capitalized trader with access to Binance’s spot order book. The study found that the manipulation was concentrated in the final seconds, with unusually large orders appearing just before settlement and rapid price reversals immediately after.

The cost structure made the trade attractive. A trader might lose $5,000 to $20,000 pushing bitcoin’s price on Binance, but collect $50,000 or more from the Polymarket payout. The spot market loss was predictable and bounded. The prediction market gain depended only on whether the price crossed the threshold at the exact moment of settlement. As long as the Polymarket position was large enough relative to the Binance cost, the combined trade was profitable regardless of where bitcoin’s price ended up minutes later.

The researchers noted that the manipulators showed increasing sophistication over the study period. Early instances involved crude large orders that were visible in the order book for several seconds. Later instances used more fragmented order placement, splitting the price push across multiple smaller orders that arrived in rapid succession during the final two to three seconds. This fragmentation made the activity harder to detect in real time, though the statistical signature in the settlement data remained clear.

The paper did not prove that the Binance orders and the Polymarket positions were placed by the same individuals. It could not, because Polymarket operates as a DeFi native platform where traders use pseudonymous wallets. But the statistical patterns were consistent with coordinated activity, and the timing correlations were tight enough for the researchers to classify specific settlement windows as “likely manipulated.”

What the research actually found

The study, published on arXiv by researchers from Stanford and Singapore Management University, analyzed roughly two months of five minute bitcoin contracts on Polymarket. The researchers identified 821 accounts whose trading activity was concentrated in windows where the statistical signatures of manipulation were present.

Those accounts collectively made $8.2 million during the study period. The losses came almost entirely from retail traders. After excluding market makers, who are structurally neutral and profit from spreads rather than directional bets, the researchers found that 93 percent of the losses in likely manipulated windows were borne by retail participants.

One finding stood out. In manipulated windows, “a bet the market treated as near certain was overturned one time in three.” This means that contracts priced at 90 percent or higher probability of resolving one way were flipped by last second price movements. For retail traders relying on market pricing as a signal of likelihood, this created a situation where the odds they saw on screen bore little relationship to the odds they actually faced.

The scale of the losses was asymmetric. A retail trader placing a $100 bet on a five minute bitcoin contract that was priced at 90 percent certainty expected to win $10 in profit nine times out of ten. When manipulation flipped the outcome, that trader lost $100. Across hundreds of settlement windows and thousands of participants, these small individual losses aggregated into the $8.2 million figure the researchers documented. No single retail trader lost a fortune. The damage was distributed across a large number of small participants, each of whom had no way to know that the odds they saw on screen had been distorted.

The researchers described the vulnerability as inherent to any event contract that settles on a real time financial price. The specific platform, the specific asset, and the specific contract duration all affect how easy the manipulation is. But the underlying dynamic, that the settlement price can be influenced by trading the referenced asset, applies to any platform using instant price snapshots.

The manipulators exploited a timing asymmetry that exists whenever a financial contract settles on a single price observation. In traditional futures markets, settlement prices are typically calculated from a volume weighted average of trades over a defined window, precisely to prevent the kind of end of period manipulation that Polymarket experienced. The fact that Polymarket launched with a single snapshot mechanism suggests either that the platform’s designers did not anticipate this attack vector or that they accepted the risk as a tradeoff for simpler oracle design. Either way, the result was a settlement system that rewarded traders who could move prices by small amounts for brief periods, a capability that requires modest capital relative to the profits available from correctly positioned prediction market contracts.

Why it took months to fix

The capital efficiency of the attack is what made it particularly difficult to detect through conventional surveillance. Each individual trade was small enough to look like normal market activity. The manipulators did not need to sustain the price movement for more than a few seconds, and the prediction market positions they held to profit from the manipulation were on a separate platform from the spot exchange where they moved prices. This cross platform structure meant that no single exchange could see both sides of the trade. Binance saw small orders that briefly moved bitcoin’s price. Polymarket saw contracts settling at prices that happened to favor certain accounts. Only by correlating the timing of trades across both platforms could the researchers identify the pattern, and that correlation required access to data from both systems and the statistical tools to analyze it. The attack surface existed not in any single platform’s code but in the gap between two platforms that each operated correctly in isolation but whose interaction created an exploitable seam.

Polymarket knew about the problem before the study was published. Onchain analysts raised concerns publicly as early as May 2026. Variance Lover, a pseudonymous analyst, posted an extensive breakdown on May 21 documenting the manipulation mechanism and identifying specific settlement windows where the patterns were visible.

“By now, most people are aware that market manipulation has become a major problem on Polymarket’s five minute crypto markets,” Variance Lover wrote. “The mechanism is simple: accumulate a large position on Polymarket, then move the price on Binance during the settlement window to force the market to resolve in your favor.”

A contributor who goes by the handle Christine on X noted on May 11 that the manipulation was becoming more severe, citing “precise reversals in the last few seconds.” Josh Stevens, a Polymarket developer, responded publicly: “We are looking into this a bit deeper. Do not worry.”

The gap between acknowledgment and action spanned nearly three months. During that time, the manipulation continued. The delay is notable because the fix Polymarket ultimately deployed, replacing a snapshot with a TWAP, is not a novel solution. Time weighted averages have been standard in DeFi oracle design for years. Uniswap V2 introduced TWAP oracles in 2020 specifically to prevent single block price manipulation. The concept was available off the shelf.

Polymarket has not publicly explained why the fix took as long as it did. One possibility is that switching the settlement mechanism required changes to the smart contracts that resolve bets, which need auditing and testing. Another is that the platform was reluctant to change rules midstream for live markets with open positions. A third, less charitable interpretation is that the manipulation generated volume and fees that the platform was not in a hurry to curtail.

The delay had real costs. Variance Lover estimated that manipulation continued throughout June and into July, with increasingly aggressive activity as manipulators learned they could operate without consequences. Several retail traders posted screenshots showing positions that should have been winners based on prevailing market prices but resolved as losers because of last second price spikes. The trust damage was compounding. Each manipulated settlement that went unaddressed made the next complaint louder and the platform’s credibility thinner.

How Polymarket’s fix compares to Kalshi

The fix Polymarket deployed mirrors safeguards that Kalshi, its regulated rival, already had in place. Kalshi resolves its short dated crypto markets using a CF Benchmarks price index, which aggregates prices from multiple regulated exchanges. It then applies a 60 second moving average, making it significantly harder to move the settlement price with a brief burst of trading on a single venue.

Kalshi also operates under CFTC oversight, which gives it enforcement tools that Polymarket lacks. A Kalshi spokesperson told CoinDesk that the platform has conducted 150 to 250 material investigations per quarter and made 40 to 50 referrals to the CFTC so far in 2026. Those figures cover all Kalshi markets, not just short dated crypto contracts, but they illustrate the surveillance infrastructure that comes with operating within a regulatory framework.

The structural difference between the two platforms matters. Kalshi requires identity verification for all traders. Polymarket’s DeFi version does not. When manipulation is detected on Kalshi, the platform can identify the trader, freeze the account, and refer the case to a regulator. When manipulation is detected on Polymarket, the platform can identify a wallet address but cannot easily connect it to a person.

Polymarket does operate a US regulated version under CFTC oversight, but its integrity and surveillance infrastructure has been developed largely in response to external pressure rather than as a foundational design choice. The company is reportedly seeking a $1 billion raise at a $20 billion valuation, and the manipulation episode highlights the tension between growing rapidly as a DeFi protocol and building the compliance infrastructure that institutional capital typically requires.

What the exploit reveals about prediction market design

The comparison between Polymarket and Kalshi illuminates a broader tension in prediction market design between decentralization and market integrity. Kalshi operates as a CFTC regulated exchange with centralized order matching, surveillance systems, and the ability to cancel trades that result from manipulation. Polymarket operates on Polygon with smart contract settlement that is transparent but largely automated. The transparency means that manipulation is visible to anyone who examines the blockchain, which is how the Stanford researchers identified the 821 accounts. But visibility is not the same as prevention. A centralized exchange can intervene in real time when it detects suspicious activity. A decentralized protocol must design its settlement rules to be manipulation resistant from the start, because retroactive intervention contradicts the trustless execution model that gives blockchain based markets their appeal.

The Polymarket manipulation exposed a broader design tension in prediction markets that settle on financial prices. These markets sit at the intersection of two trading systems: the prediction platform where bets are placed and the spot market where the referenced price is determined. When the two systems are connected but not coordinated, the cheaper market becomes a tool for profiting from the more expensive one.

In this case, moving bitcoin’s price on Binance for a few seconds cost less than the Polymarket payout it generated. The arbitrage was negative in the spot market and positive in the prediction market, creating a combined trade that was profitable as long as the settlement mechanism allowed it.

This is not a problem unique to Polymarket or even to prediction markets. It is a variant of the same cross venue manipulation that regulators have spent decades combating in traditional finance. The SEC’s Regulation SHO, the CFTC’s anti manipulation rules, and the EU’s Market Abuse Regulation all address scenarios where trading in one market is used to influence outcomes in another. The difference is that those frameworks assume centralized, identity verified markets with shared surveillance feeds. The prediction market version plays out across pseudonymous DeFi platforms and centralized exchanges in different jurisdictions.

The TWAP fix addresses the most obvious attack vector by making brief price spikes less effective. But it does not eliminate the underlying vulnerability. A well capitalized manipulator who can sustain a price move for 30 or 60 seconds rather than five can still influence settlement under a TWAP system. The cost is higher, but the attack is not impossible. The question is whether the increased cost makes the manipulation unprofitable, and that depends on the depth of the liquidity in the referenced market and the size of the positions available on the prediction platform.

The economics of the manipulation also raise questions about market depth. The reason five second price pushes were possible on Binance is that bitcoin’s order book, despite being the deepest in crypto, still has moments of relative thinness. During periods of lower activity, particularly around the clock during Asian or European off hours, the cost of moving bitcoin’s price by a fraction of a percent drops significantly. The manipulators timed their activity to coincide with these low liquidity windows, compounding the settlement vulnerability with a liquidity vulnerability. A TWAP reduces one problem but does not address the other.

As regulatory frameworks for prediction markets continue to develop, the settlement mechanism question will become more prominent. Platforms that want to offer contracts on financial prices will need to either use regulated price feeds, implement robust TWAP mechanisms, or accept that their markets will remain vulnerable to the same class of manipulation that Polymarket just addressed.

What to watch

Manipulation patterns after the TWAP transition. The 30 second and 60 second TWAP windows raise the cost of manipulation but do not eliminate it. Watch for evidence of sustained price pushes that last longer than the averaging window, which would indicate that manipulators are adapting to the new settlement rules.

Polymarket volume changes on short dated crypto markets. If volume declines significantly after the transition, it may indicate that a portion of the trading activity was driven by manipulators rather than genuine prediction market demand. A volume drop would validate the concern that the platform’s growth was partly artificial.

Regulatory response from the CFTC. The study provides a public, peer reviewed record of manipulation on a platform that overlaps with CFTC jurisdiction. Watch for formal inquiries, enforcement actions, or rulemaking proposals that address cross venue manipulation between prediction markets and spot exchanges.

Chainlink Data Streams performance. The TWAP mechanism depends on Chainlink for price data delivery. Any latency issues, outages, or oracle manipulation attempts would expose a new attack surface. The reliability of the data feed is now a critical dependency for Polymarket’s market integrity.

Kalshi and Polymarket competition for institutional capital. The manipulation episode and subsequent fix narrow the structural gap between the two platforms. Watch for whether Polymarket’s $1 billion fundraising effort is affected by the integrity concerns or whether the fix is treated as sufficient by prospective investors.

Copycat manipulation on other DeFi prediction platforms. The settlement vulnerability that Polymarket’s TWAP fix addresses exists on any platform that uses instant price snapshots. Smaller prediction market protocols with less liquidity and less sophisticated monitoring are potentially even more vulnerable. Watch for reports of similar manipulation patterns on competing platforms that have not yet adopted TWAP settlement.

Academic follow up research on TWAP effectiveness. The Stanford and Singapore Management University researchers documented the pre-fix manipulation in detail. A follow up study measuring whether manipulation persists or adapts under the TWAP regime would provide the first empirical test of whether the fix works in practice, not just in theory. The research community’s engagement with this question will shape regulatory confidence in TWAP as a sufficient safeguard.

Frequently asked questions

Bitcoin BIP Editor Mark “Murch” Erhardt called for Luke Dashjr’s removal from the editorial team on Aug. 9, escalating a dispute over Dashjr’s handling of BIP110 and the proposal’s recent chain split. 

Murch posted the motion to the Bitcoin Development Mailing List and then opened GitHub pull request 2248 as a proposed implementation.

Dashjr rejected the allegations less than an hour after Murch’s mailing list post. As of Aug. 10, the removal PR remained open, while the current BIP3 document continued to list Dashjr alongside five other BIP Editors. No removal has taken place.

Murch ties the removal motion to BIP110’s editorial process

Murch alleged that Dashjr exercised his editorial authority inconsistently while being closely involved with BIP110. He cited an attempt to assign the proposal a BIP number publicly before mailing list discussion and a later merge completed within minutes of a related pull request opening. Murch also claimed Dashjr produced fewer than 1% of BIP Editor comments after additional editors began serving in April 2024.

The current BIP3 process says authors should present an idea and draft to the Bitcoin Development Mailing List before formal submission. Editors then check that the proposal received prior discussion, assign a BIP number in the pull request and merge it when ready. The document describes the position as administrative and editorial and says editors do not decide whether a proposal is likely to gain adoption.

Murch also alleged that communication between Dashjr and the other editors had broken down. He framed the matter as a conflict between Dashjr’s editorial responsibilities and his involvement in advancing BIP110. Those are Murch’s allegations, rather than findings from a formal Bitcoin governing body.

Dashjr denies claims as contributors debate removal

Dashjr disputed Murch’s account. “These are false accusations,” he wrote, adding that he had consistently followed the BIP process. Dashjr also challenged Murch’s account of their communication breakdown and argued that Murch should instead lose his editor position.

Other contributors backed the removal request. Bitcoin developer Matt Corallo supported removing Dashjr, while fellow BIP Editor Olaoluwa Osuntokun formally seconded Murch’s motion. Osuntokun said his support centered on what he viewed as bypassing editorial procedures rather than punishing a developer for advocating a controversial proposal.

However, the discussion also exposed a procedural gap. Jameson Lopp said there was no formal governance structure covering management of BIP Editors. Antoine Riard supported Dashjr stepping aside, potentially temporarily, but argued that contributors should allow time for a public response and establish clearer procedures before resolving the dispute.

BIP110 chain split adds pressure to the editor dispute

The dispute follows BIP110 entering mandatory signaling at block 961,632 on Aug. 8. Only 51 of the previous 2,016 blocks, or 2.53%, had signaled support. As crypto.news reported in coverage of the mandatory signaling split, enforcing nodes created a minority branch that produced two blocks before stalling.

A later snapshot covered in the branch’s widening gap showed the dominant Bitcoin chain 111 blocks ahead, with no BIP110 signals among its first 113 blocks of the new difficulty period. BIP110 itself is a temporary consensus proposal intended to restrict certain forms of arbitrary transaction data.

Murch said the project “appears to evolve into a hard fork,” but that description should not be treated as a confirmed next step. Experimental proof of work change code exists, but its maintainer Chris Guida has described it as contingency code and said no activation date has been set. Earlier coverage of Dashjr’s backing also documented his support for the proposal amid opposition from other Bitcoin participants.

What happens next for Dashjr and BIP110

The immediate issue is pull request 2248. It remains open and currently proposes removing Dashjr from BIP3’s list of editors. BIP3 still names six editors, including Dashjr, and describes the BIPs repository as a publication and archive rather than a governing body that decides Bitcoin development or adoption.

A second open proposal is addressing BIP110 itself. Pull request 2245 seeks to change its status from Complete through Deployed to Closed following the stalled activation attempt. The discussion remains unresolved, and the live BIP110 specification still labels the proposal Complete.

The two open requests now leave Bitcoin contributors with separate questions: whether BIP110 should be formally closed and whether Dashjr should retain editorial access. There is currently no published deadline for resolving the removal motion, and the mailing list discussion has not produced a formal decision.

Former U.S. Defense Secretary Mark Esper urged senators to pass the CLARITY Act, arguing in a Financial Times op-ed that digital asset market structure should be treated as a national security issue as well as a financial regulatory question. 

Esper argued that China is building payment infrastructure outside U.S. oversight and that North Korean cyber actors continue exploiting digital assets.

His intervention comes just as the Senate has set the bill’s next procedural step. Majority Leader John Thune filed cloture on the motion to proceed to H.R. 3633 before the chamber began its August recess. The Senate Radio TV Correspondents Gallery says the vote is scheduled for 2:15 p.m. ET on Sept. 15, one day after senators return for regular business. It is a vote on whether to advance consideration, not final passage.

Esper frames the CLARITY Act as a security issue

Esper described the legislation as “not merely a financial services bill” but also a “national security bill.” He argued that bringing more digital asset activity under U.S. rules could improve law enforcement visibility, support sanctions enforcement and reduce incentives for crypto businesses to operate through lightly regulated foreign venues. Those are Esper’s policy arguments rather than independent findings about the bill’s eventual effects.

The former defense secretary pointed to North Korea’s Lazarus Group as one example. U.S. Treasury records identify Lazarus as a North Korean state sponsored cyber group and have linked it to major cryptocurrency thefts, including the roughly $620 million Ronin bridge attack. Esper also argued that Chinese payment alternatives could weaken U.S. financial leverage, although that assessment remains his geopolitical argument.

Esper’s industry ties are also relevant context. Coinbase currently lists him on its Global Advisory Council, which advises the exchange’s leadership. He joined the council in 2023 alongside other former national security officials.

Latest bill text gives Treasury new digital asset tools

The Senate’s July 22 merged text gives part of Esper’s argument a direct legislative basis. Section 10303 would amend 31 U.S.C. 5318A, the statute implementing Section 311 of the USA PATRIOT Act, by adding a new special measure covering certain digital asset fund transfers.

Under the proposal, Treasury could prohibit or place conditions on transfers involving foreign jurisdictions, financial institutions or transaction classes found to present a primary money laundering concern connected to digital assets. Treasury describes existing Section 311 authority as a tool for protecting the U.S. financial system from money laundering and terrorist financing threats.

The 616 page draft also contains a dedicated illicit finance title, studies of foreign adversary activity, digital asset law enforcement training and provisions for international cooperation against illicit finance. Senate Banking Chairman Tim Scott has likewise argued that the measure would make it harder for criminals and foreign adversaries to exploit the financial system.

Critics dispute whether the bill strengthens security enough

The national security case remains contested. During the May Senate Banking markup, ranking member Elizabeth Warren argued that the then current draft could instead increase national security risks. She cited concerns over DeFi, illicit finance enforcement and protections for noncontrolling software developers.

The National Sheriffs’ Association raised related objections in a May letter, warning that parts of the earlier proposal could restrict law enforcement’s ability to pursue illicit transfers involving mixers and decentralized systems. Those comments addressed the May draft, while the July version added and reorganized several law enforcement and illicit finance provisions.

The competing arguments mean Esper’s characterization should not be presented as bipartisan consensus. Supporters view clearer rules and expanded Treasury powers as strengthening U.S. security, while critics continue questioning whether exemptions elsewhere in the legislation could weaken enforcement.

Sept. 15 becomes the next CLARITY Act test

The House passed the CLARITY Act 294 to 134 in July 2025. The Senate Banking Committee later advanced its version 15 to 9 in May 2026.

As crypto.news reported in the September vote update, Thune’s cloture filing keeps the legislation moving after senators failed to complete consideration before recess. The Sept. 15 vote is therefore the next measurable test of whether leaders can assemble enough bipartisan support to move into floor debate.

The calendar remains difficult. In Grayscale’s latest assessment, research head Zach Pandl said passage during 2026 now appears unlikely because of the compressed Senate calendar and election year politics. That remains an assessment, not a determination of the bill’s outcome.

Esper’s intervention adds a former defense secretary’s voice to the security argument, but it does not settle the remaining legislative disputes. The Sept. 15 procedural vote will show whether that broader framing helps the CLARITY Act secure enough support to move further through the Senate.

Australia’s financial intelligence agency has suspended Cryptolink’s crypto ATM operations for three months after finding failures in transaction reporting and raising ongoing concerns over the company’s handling of high-risk activity.

According to the Australian Transaction Reports and Analysis Centre, Cryptolink’s registration as a virtual asset service provider was suspended from Aug. 9, preventing the company from operating its 96 Bitcoin ATMs during the three-month period.

AUSTRAC CEO Brendan Thomas said the regulator remained concerned about Cryptolink’s ability to manage high-risk transactions through its crypto ATMs. The latest action follows an enforceable undertaking imposed on the operator in October 2025 over separate compliance failures identified by the agency’s Cryptocurrency Taskforce.

Cryptolink operates machines that allow customers to exchange cash for Bitcoin, with most of its 96 Australian ATMs located in major cities including Sydney, Melbourne and Brisbane.

Cryptolink crypto ATMs suspended over reporting failures

In outlining the reasons for the suspension, AUSTRAC said Cryptolink had failed to meet basic reporting requirements, particularly its obligations involving threshold transaction reports.

The company also failed to respond to an information request from the regulator, according to AUSTRAC.

“As part of our continued focus on digital currency as a money laundering risk, AUSTRAC has ongoing concerns about the company’s ability to manage high-risk transactions through its CATMs,” Thomas said.

Cryptolink had already been subject to regulatory action before the suspension. In October 2025, the company entered into an enforceable undertaking with AUSTRAC after the agency’s Cryptocurrency Taskforce identified alleged breaches involving late transaction reporting and shortcomings in its risk assessments.

AUSTRAC also issued Cryptolink an infringement notice worth A$56,340 as part of the earlier enforcement action. The company subsequently paid the penalty.

The three-month registration suspension now prevents Cryptolink from providing the registered virtual asset services covered by the order, effectively taking its Australian Bitcoin ATM network offline for the duration of the suspension.

Australia has tightened controls on crypto ATMs

Cryptolink’s suspension comes after more than a year of regulatory scrutiny of Australia’s crypto ATM sector, which has expanded rapidly while attracting attention from financial crime authorities.

Australia has the largest crypto ATM market in the Asia-Pacific region. Speaking at the National Press Club in Canberra in October 2025, Home Affairs Minister Tony Burke said the number of machines had increased from 23 six years earlier to about 2,000.

Burke said Australia had become the world’s third-largest crypto ATM market at the time, while authorities had linked some activity involving the machines to scams, fraud, money laundering, illicit drug transactions and other criminal activity.

Citing AUSTRAC data, Burke said 85% of funds passing through crypto ATMs among the highest-volume users were associated with scams or money mules.

AUSTRAC had started increasing its scrutiny of operators months earlier. In March 2025, the agency warned crypto ATM providers about compliance with Australia’s anti-money laundering rules before conducting targeted investigations into the sector.

By June, the regulator had introduced a A$5,000 cash transaction limit for crypto ATM deposits and withdrawals. Operators were also required to conduct stronger customer due diligence and place scam warnings at their machines.

At the time, Thomas said the conditions were intended to protect consumers from scams while reducing the ability of criminals to exploit crypto ATM businesses.

Crypto ATM scams have caused millions in losses

Authorities have also documented cases in which scammers directed victims to crypto ATMs to transfer money.

Tasmania Police reported in July 2025 that 15 victims had lost an estimated A$2.5 million through scams involving crypto ATMs. The average victim was 65 years old and lost about A$165,000, while one person lost A$750,000.

Detective Sergeant Turner said some victims suffered consequences that affected retirement plans and forced them to sell assets before relying on social support payments.

Police identified romance scams, investment fraud, impersonation of government authorities and technology support scams among the methods used against the victims. In such cases, fraudsters persuaded or pressured victims to deposit cash at crypto ATMs and send the resulting digital assets to wallets controlled by the scammers.

The transfers created an additional problem for victims because cryptocurrency transactions sent to a scammer-controlled wallet generally cannot be reversed through the mechanisms available for some traditional financial transfers.

Australia’s response stopped short of the approach adopted across the Tasman Sea. New Zealand announced a ban on crypto ATMs in June 2025 as part of measures intended to prevent criminals from converting illicit cash into digital assets.

Australian authorities instead moved toward tighter limits, customer checks and regulatory supervision of operators.

AUSTRAC has expanded crypto transfer requirements

Regulatory requirements for Australian crypto businesses have continued to develop outside the ATM sector as well.

From July 1, 2026, Australia’s crypto travel rule introduced additional data requirements for virtual asset transfers handled by regulated businesses. AUSTRAC’s framework covers services including crypto-to-fiat and crypto-to-crypto exchange, virtual asset transfers, custody and certain services connected with token offerings.

Under the regulator’s guidance, businesses handling covered transfers must collect, verify and transmit specified information about the parties involved in a transaction.

For transfers involving self-hosted wallets, AUSTRAC requires the sending institution to determine whether the receiving wallet is custodial or self-hosted. While information does not have to be passed to another institution when no other regulated intermediary exists, the business must still collect and verify payer information and obtain relevant payee and tracing information.

The requirements apply alongside Australia’s existing financial intelligence reporting system. AUSTRAC previously said it received more than 2 million threshold transaction reports and more than 450,000 suspicious matter reports during the preceding reporting period.

Cryptolink’s reporting practices had already drawn regulatory attention months before the latest suspension, with the October 2025 enforceable undertaking requiring the company to address deficiencies identified by AUSTRAC’s Cryptocurrency Taskforce.

The company paid the associated A$56,340 infringement notice, while its latest three-month VASP registration suspension took effect on Aug. 9.

Thailand is rolling out a targeted tax break for crypto investors: beginning January 1, 2025, capital gains tax on profits from crypto trades conducted through platforms licensed by the country’s Securities and Exchange Commission will be exempt for five years, through December 31, 2029.

The move is designed to strengthen Thailand’s position as a regional digital-asset hub, while drawing a clear line between regulated onshore platforms and trading activity that occurs outside licensing—where investors would remain subject to standard personal income tax rates of up to 38%.

Key takeaways

• Thailand will exempt qualifying crypto capital gains for trades executed via SEC-licensed platforms from Jan. 1, 2025 to Dec. 31, 2029.
• Unlicensed or overseas exchange activity is still taxed under standard personal tax rates up to 38%.
• The policy is intended to make Thai-regulated access more attractive for investors, aligning crypto treatment with that of traditional securities.
• Across Asia, regulators and courts are simultaneously pushing for stronger controls—ranging from anti-scam withdrawal safeguards to travel-rule style data sharing.

Thailand’s five-year capital gains exemption for regulated exchanges

Under the new framework, crypto investors in Thailand will not pay capital gains tax on sales made through platforms licensed by the Thai Securities and Exchange Commission. The exemption runs for five years, covering January 1, 2025 through December 31, 2029.

While the tax incentive is specifically tied to using licensed venues, the exemption also signals a broader regulatory posture: Thailand is effectively attempting to mirror capital gains treatment applied to traditional securities. That linkage matters because it changes how investors model after-tax returns when comparing Thai-regulated offerings with offshore alternatives.

However, the relief is not universal. Traders who use exchanges that are unlicensed in Thailand, or that operate overseas without meeting the local licensing requirements, are expected to continue facing the country’s regular personal tax rates, reported as as high as 38%.

Thailand’s approach also follows earlier steps. In early 2024, the country reportedly waived 7% value-added tax on crypto gains—suggesting a pattern of phased adjustments aimed at improving the competitiveness of licensed crypto activity.

Asia’s policy push: scams, travel rules, and enforceability

Thailand’s tax move lands in a wider regulatory environment across Asia where authorities are focusing not only on market structure, but also on operational safeguards and information-sharing.

In Japan, for example, the Financial Services Agency has asked exchanges to adopt withdrawal delays and additional controls to combat scams. The regulator and Japan’s National Police Agency also highlighted patterns where fraudulent proceeds are transferred to exchange accounts. The requested measures include restricting withdrawals for a set period after customers deposit fiat or purchase digital assets, requiring users to pre-register withdrawal addresses, and enforcing a waiting period before newly added addresses can be used.

Taiwan is moving in a similar compliance direction. The Financial Supervisory Commission is set to require crypto platforms to transmit customer information for domestic platform-to-platform transfers starting in October. The rules apply irrespective of transfer value, with extra data requirements for transfers above 30,000 New Taiwan dollars (about $930). For high-value transfers, additional details such as a sender’s date of birth and residential address (for individuals) or corporate identification and registered address are expected. Receiving platforms would also need to verify beneficiary information provided by the sending institution against their own records. Taiwan also plans to extend the framework to transfers between domestic and overseas VASPs by the end of 2027.

Enforcement and asset tracing: Bybit’s North Korea case

Regulatory safeguards are running alongside legal efforts to trace and recover stolen funds. In a US court case involving exchange Bybit, a federal judge reportedly supported Bybit’s bid to trace assets connected to the widely reported $1.5 billion North Korea-linked hack from February 2025.

According to newly revealed court records, Bybit filed the lawsuit under seal on June 18 against North Korea, its Reconnaissance General Bureau, the Lazarus Group, and 20 unidentified defendants. The court granted expedited discovery on June 19, giving Bybit a route to identify alleged intermediaries and pursue a portion of funds that remain traceable.

Bybit reportedly told the court that 90.2% of the stolen assets had become untraceable after moving through mixers, cross-chain bridges, and over-the-counter dealers. The remaining 9.8% was said to be traced to identifiable wallets, including 5.3% of the total—about $75.5 million—that had been frozen or recovered. Bybit is seeking return of the stolen assets and approximately $1.5 billion in damages.

For market participants, the practical significance is straightforward: even when large portions of theft are obfuscated, courts and discovery processes can still uncover pockets of traceability—often tied to wallet-level movements and intermediary behavior—creating leverage for claims that go beyond a single judgment against a sanctioned state actor.

What builders and investors should watch next

Thailand’s capital gains exemption is likely to intensify the incentive to trade through SEC-licensed channels, while continuing to discourage the “regulatory arbitrage” route of using unlicensed or offshore exchanges. Investors should watch how Thailand defines eligibility in practice and whether licensed platforms promote the change in ways that meaningfully shift user behavior.