Crypto Law Brief: A New CLARITY Act Draft, Storj's Chapter 11, and Malware That Hunts Seed Phrases

The last two days in crypto read like a study in contrasts: lawmakers inching toward long-promised market rules, another well-known company sliding into bankruptcy, and a fresh malware strain quietly hunting for the keys to people's wallets. Here is what happened and why each development carries real legal and practical weight for anyone holding, building, or investing in digital assets.

Congress Moves on the CLARITY Act — Again

On July 27, a new draft of the Digital Asset Market Clarity Act surfaced, merging the competing Senate Banking and Agriculture Committee versions into a single text and, for the first time, adding an ethics provision. A motion to proceed is expected early in the week, with a possible floor vote as soon as the week of August 3. The bill's central aim is to divide oversight of digital assets between the SEC and the CFTC and to settle the long-running question of when a token is a security versus a commodity.

For projects and exchanges, the stakes are enormous. A clearer statutory line would reduce the regulation-by-enforcement dynamic that has defined recent years, but the draft is already drawing opposition, with New York's attorney general warning that a federal framework could hollow out state-level enforcement. Anyone building or investing in this space should track the final language closely, because it will define compliance obligations, registration duties, and litigation exposure for years to come.

Storj Files for Chapter 11 as Failures Mount

Decentralized storage provider Storj Labs filed for Chapter 11 bankruptcy on July 27, making it the fourth crypto company in seven days to announce a failure or wind-down, following BitMEX, BitMart, and Movement Labs. In an unusual move, Storj said it plans to include token holders in the ownership of the reorganized company.

Bankruptcy is where crypto's legal ambiguities become painfully concrete. Token holders are rarely secured creditors, and their recovery often turns on how a court characterizes the tokens in the reorganization. Storj's plan to fold token holders into ownership is novel, but it also underscores how little certainty holders have when a project fails. Customers and investors should understand where they sit in the creditor stack before trouble hits, not after.

A New Malware Strain Hunts for Seed Phrases

Researchers at Kaspersky disclosed SparkKitty, a malware strain that slipped into both the Apple App Store and Google Play. Rather than tricking users into typing their credentials, it uses optical character recognition to scan the photos saved on a device, searching for screenshots of wallet seed phrases and other sensitive data.

This is a sharp reminder that the most common way people lose crypto is not a dramatic exchange hack but a compromise of their own keys. Once a seed phrase is captured and funds move on-chain, recovery is extraordinarily difficult, and distribution through official app stores makes the threat feel deceptively legitimate. The legal reality is that self-custody losses rarely come with a deep-pocketed defendant to pursue.

Strategy Hits Pause on Bitcoin Buying

On the markets side, Strategy (formerly MicroStrategy) raised $544.5 million by selling roughly 5.4 million shares over the prior week but bought no Bitcoin, leaving its holdings flat at 843,775 BTC. The company also lifted its dollar reserve to $3.75 billion, citing more than two years of dividend coverage.

For a company whose identity is synonymous with aggressive Bitcoin accumulation, a pause is notable. It signals a shift toward balance-sheet resilience over relentless buying, and it is exactly the kind of disclosure investors in crypto-linked equities should read carefully, since the value of those shares is tightly bound to both the underlying asset and the company's financing decisions.

How to Protect Yourself

Treat your seed phrase as something that should never exist as a photo, screenshot, or cloud-synced note; write it down offline and store it somewhere secure. Download wallet apps only from verified developers, scrutinize the permissions an app requests, and keep meaningful holdings in hardware wallets that keep your keys off internet-connected devices. If you hold tokens in a project showing signs of financial distress, document your holdings and transaction history now, while the records are easy to gather.

If you have been the victim of theft or believe you are exposed in a failing project's bankruptcy, act quickly. Preserve everything, including transaction hashes, wallet addresses, and communications, and consult an attorney about tracing stolen funds, filing claims in bankruptcy proceedings, or pursuing exchanges and counterparties. Speed and documentation often make the difference in whether any recovery is possible at all.

At Coin Counsel, we work with individuals and businesses navigating the legal fallout of crypto fraud — whether you're a victim seeking recovery, a company facing regulatory scrutiny, or a project working to stay compliant in an increasingly complex legal landscape. The rules are evolving fast, and the cost of getting it wrong has never been higher. Contact us at coin-counsel.com to speak with a crypto-focused attorney today.

Disclaimer

This blog post is for informational purposes only and does not constitute legal advice. Reading this content does not create an attorney-client relationship between you and Coin Counsel or Franco Law PLLC. The legal landscape surrounding cryptocurrency is rapidly evolving and varies by jurisdiction. Do not act or refrain from acting based on information in this post without first consulting a qualified attorney. If you believe you have been the victim of crypto fraud, contact us at coin-counsel.com for a consultation.