Russian President Vladimir Putin has signed a “digital currency” bill into law, formally legalizing cryptocurrency transactions in the country and creating its first comprehensive regulatory framework. The legislation is set to take effect in September, providing a clearer legal basis for Russia’s digital asset market. The move signals a shift in Russia’s stance from restricting crypto activity to regulating it, which could support more compliant development of the local crypto industry.

Galaxy Research said a vulnerability affecting Coldcard hardware wallets could drive losses to about 2,055 Bitcoin, valued at approximately $130 million. The firm has identified 1,596 BTC stolen from around 7,300 addresses across three confirmed attack waves, plus 14 smaller incidents. The flaw involves recovery seeds generated on several Coinkite Coldcard models, including Mk3, Mk4, Mk5 and Coldcard Q. Investigators are still assessing a suspected fourth wave of thefts.

Stacks founder Muneeb Ali proposed setting up a Bitcoin fund to buy claims from victims of the Coldcard hardware wallet hack, aiming to give affected users immediate access to their lost BTC. The incident stems from a vulnerability in Coinkite’s Coldcard devices, with three confirmed major waves and 14 smaller incidents. Galaxy Research estimates at least 1,596 BTC—worth more than $100 million—was stolen from roughly 7,300 addresses, and said the total could reach about 2,000 BTC, or roughly $130 million, if suspected cases are included.

On July 5, 2026, two stcUSD wallets holding roughly 5.14M and 4.85M stcUSD were running high-leverage looping strategies on Aave with health factors around 1.03, near the liquidation threshold. The analysis describes health factors below 1.05 as a high-risk “yellow zone,” where a small rate jump or a 1–2% stablecoin soft depeg could trigger automated liquidation. The case highlights how leveraged strategies in the Aave ecosystem can be fragile, relying on collateral ratios, interest-rate swings, and stablecoin peg stability.

Russia’s government said bitcoin mining will be fully banned in Moscow and surrounding areas starting Aug. 15, 2026, with the restriction running through 2032. The move is tied to pressure on the local power system, with mining in Moscow alone consuming about 1 gigawatt of electricity. Hashrate Index data put Russia at roughly 16.9% of global bitcoin hashrate, while global hashrate had already fallen for two consecutive quarters by Q2 2026, down about 12% in total. The regional enforcement is set to disrupt operations for BTC miners in Russia and adds to the broader contraction in global hashrate.

As of July 20, 2026, the Uniswap ecosystem has seen more than 66,000 new tokens go live with roughly $380 million in cumulative trading volume, while the total launch count referenced in the report reaches 340,000. The surge underscores Uniswap’s growing role as a decentralized issuance and price-discovery venue, but it comes with systemic frictions including a high failure rate, smart-contract risk, MEV extraction and thin liquidity. The article attributes the trend to expansion within the Uniswap ecosystem and does not describe it as being driven by other chains or centralized exchanges.

Flare Network has added FXRP, an XRP-pegged asset, as eligible collateral in Sentora’s RLUSD lending vault on Morpho, a pool sized at $280 million. The vault is described as the first institutionally curated lending vault on Ethereum mainnet to approve FXRP as collateral. The change allows XRP holders to borrow RLUSD without selling their XRP exposure, keeping their position while accessing on-chain liquidity.

A major security incident involving Bitcoin cold wallets has resulted in losses exceeding $100 million, with more than 5,000 wallets marketed as “secure” reportedly emptied. The incident has raised questions about the trust underpinning Bitcoin’s security model, highlighting how hardware or operational weaknesses could bypass offline-storage designs. No official agency or project has issued a statement claiming responsibility or clarifying details, and the attack vector has not been disclosed. The impact appears concentrated in the BTC ecosystem, with no spillover to major smart-contract platforms or stablecoin systems so far.