Crypto Fraud Watch: An FBI Agent Accused of Draining Case Wallets, the First Spot Bitcoin ETF Liquidation, and BlackRock's $311B Tokenization Push
Four stories from the past 48 hours cut across enforcement, security, markets, and infrastructure, and each carries a legal wrinkle worth understanding.
An FBI Counterintelligence Agent Accused of Draining Case Wallets
An August 1 filing in the U.S. District Court for the Eastern District of Virginia alleges that Patrick Steven Yarmoch, a supervisory special agent in the FBI's counterintelligence division in Washington, pulled private keys out of internal FBI systems and made as many as a dozen transfers to himself from accounts tied to foreign individuals he had investigated. The total exceeds $1 million. Yarmoch, who held a top secret clearance, was fired and arrested on July 31 and is detained in Alexandria, Virginia.
The prosecution is the easy part. Private keys held by an investigating agency are evidence, and evidence has a chain of custody. Defense counsel in unrelated matters touching those wallets now have a live argument that access controls at headquarters were inadequate, and they will seek discovery on who could reach seized key material and when.
The Coldcard Exploit Is Still Live
Coinkite told Coldcard users on August 4 to move their bitcoin, with the exploit in its sixth day and sweeps continuing. Tracking data shows roughly 1,368 BTC drained, about $86.6 million, plus 388.93 BTC from 462 addresses. Fortune put the running total near $116 million on August 3. The reported cause is a seed generation flaw that reduced entropy, making a subset of private keys searchable.
Legally this reads less like a hack claim than a product defect claim. Buyers purchased a device whose entire value proposition was the quality of its key generation. That theory still has to survive the economic loss rule, warranty disclaimers, and arbitration clauses, and Coinkite is a Canadian manufacturer, which adds a jurisdictional layer. Class certification is not obvious either, since exposure appears to vary by firmware version.
The First U.S. Spot Bitcoin ETF Heads for Liquidation
Hashdex disclosed in an SEC filing that it will liquidate its spot bitcoin ETF, DEFI, with a final trading day of August 17, after which the fund sells its remaining bitcoin and distributes cash. This appears to be the first liquidation of a U.S. spot bitcoin ETF since the category launched in January 2024. DEFI held $14.7 million in net assets, against $47.08 billion for BlackRock's IBIT.
A liquidation is not neutral: the fund sells and distributes cash, a realization event whether or not you wanted to sell this year. Anyone who wants continued exposure needs to reposition before August 17, and advisers running discretionary accounts should be documenting that decision now.
BlackRock Tokenizes $311 Billion of European Money Market Funds
BlackRock launched 12 tokenized share classes across six UCITS money market funds on August 4, covering a combined $311 billion in assets across 15 markets, built with JPMorgan's Kinexys platform.
Be precise about what this is. These are share classes of regulated UCITS funds, not crypto assets. The prospectus, the redemption mechanics, and the regulatory perimeter are unchanged; the transfer and recordkeeping layer is what moved. For treasurers, the questions are settlement finality, token custody, and what governs if the chain and the transfer agent's register disagree.
How to Protect Yourself
If you hold a Coldcard, treat the funds as at risk and move them to a freshly generated seed on a different device. Do not reuse the seed, and keep the hardware and purchase records intact rather than wiping or returning it. Expect recovery scams to follow the coverage, and treat any unsolicited offer to retrieve stolen funds as fraudulent until proven otherwise.
On recourse, speed and documentation matter. Capture transaction hashes, receiving addresses, timestamps, and exchange account records before anything is deleted, and file with the FBI's IC3 promptly. Where stolen assets land at a centralized exchange, a fast preservation request can matter enormously. Claims against a manufacturer, an exchange, or an insider run on different theories, limitations periods, and jurisdictions, so talk to counsel early.
At Coin Counsel, we work with individuals and businesses navigating the legal fallout of crypto fraud — whether you're a victim seeking recovery, a company facing regulatory scrutiny, or a project working to stay compliant in an increasingly complex legal landscape. The rules are evolving fast, and the cost of getting it wrong has never been higher. Contact us at coin-counsel.com to speak with a crypto-focused attorney today.
Disclaimer
This blog post is for informational purposes only and does not constitute legal advice. Reading this content does not create an attorney-client relationship between you and Coin Counsel or Franco Law PLLC. The legal landscape surrounding cryptocurrency is rapidly evolving and varies by jurisdiction. Do not act or refrain from acting based on information in this post without first consulting a qualified attorney. If you believe you have been the victim of crypto fraud, contact us at coin-counsel.com for a consultation.
