Retail Holds 66% of Bitcoin Supply as Security Flaws Shake Self-Custody

Despite years of narrative focusing on the institutionalization of digital assets, individual investors remain the primary stewards of the Bitcoin supply. Recent market data indicates that private individuals still control approximately two-thirds of all circulating Bitcoin, significantly outweighing the combined holdings of corporations, exchange-traded funds (ETFs), and government entities ^crypto.news. This persistent dominance of the retail sector comes even as major institutional players signal shifts in their long-term strategies. For instance, Strategy—formerly MicroStrategy—recently executed its first-ever Bitcoin sale, offloading 1,638 tokens for approximately $104.73 million in the week ending August 3, 2026 ^crypto.news. While the company remains a massive holder with 842,138 BTC, the move highlights a pivot toward active treasury management and liquidity preservation, with the firm’s USD reserves growing to $4 billion ^crypto.news.

The landscape of individual ownership is currently facing a significant structural test as security vulnerabilities prompt a migration toward centralized custody. A critical seed-generation flaw in Coldcard hardware wallets, which persisted for five years, has been linked to the theft of nearly $90 million in Bitcoin ^crypto.news. Galaxy Research has confirmed the loss of 1,596 Bitcoin across three distinct attack waves, with potential losses climbing as high as 2,055 Bitcoin if further incidents are verified ^crypto.news. This security breach, affecting more than 5,200 potential victim addresses, has triggered record inflows to centralized exchanges like OKX ^{crypto.news crypto.news}. Security experts, including Kraken’s Chief Security Officer Nick Percoco, are now calling for mandatory independent testing of hardware wallet firmware to prevent manufacturers from being the sole verifiers of their own security protocols ^crypto.news.

Simultaneously, institutional interest appears to be diversifying beyond simple Bitcoin accumulation toward the broader tokenization of traditional finance. BlackRock has expanded its tokenized money market fund offerings to Europe, launching Ethereum-based share classes for funds that manage a combined $311 billion in assets ^crypto.news. This move toward on-chain institutional liquidity is already impacting the stablecoin market; Morgan Stanley recently downgraded Circle (USDC) to underweight, slashing its price target from $106 to $38 ^crypto.news. The bank cited the rise of tokenized money market funds as a direct threat to the reserve income model that sustains stablecoin issuers, noting that USDC’s circulating supply has already contracted from $80 billion in March to roughly $73 billion in August ^crypto.news.

In the banking sector, Italy’s Intesa Sanpaolo has demonstrated a similar trend of diversification. SEC filings reveal the bank reduced its position in BlackRock’s iShares Bitcoin Trust (IBIT) by 93.7% during the second quarter, while simultaneously tripling its stake in the iShares Staked Ethereum Trust ^crypto.news. Despite this sharp reduction in IBIT, the bank maintains a $67.6 million holding in the ARK 21Shares Bitcoin ETF (ARKB), suggesting a rebalancing of exposure rather than a total exit from the asset class ^crypto.news. This institutional rebalancing is occurring against a backdrop of increasing retail access to tokenized equities. Dinari has introduced a platform allowing U.S. investors to trade tokenized versions of the entire S&P 500, backed one-to-one by underlying securities and funded via USDC ^crypto.news.

Regulatory progress in the United States remains a primary source of market uncertainty as the Clarity Act faces a legislative deadlock. Prediction market odds for the bill’s passage in 2026 have plummeted to 37%, down from over 70% earlier this year ^crypto.news. Negotiators remain divided over ethics provisions, anti-money laundering requirements, and DeFi guidance ^crypto.news. Analysts at Bernstein warn that a failure to pass the act could trigger a market selloff, while JPMorgan suggests that further delays might push tokenization efforts off public blockchains and onto traditional, private financial infrastructure ^crypto.news. The Senate faces a critical window ending August 7 to file a cloture petition before the summer recess begins on August 10 ^{news.bitcoin.com crypto.news}.

Global regulatory and tax frameworks are also tightening. Nigeria’s Revenue Service has implemented a new 1% withholding tax on crypto disposals, alongside a 1.5% stamp duty on token-to-fiat transfers ^crypto.news. Uniquely, the Nigerian guidelines require some taxes to be remitted in the specific token used for the underlying transaction ^crypto.news. In South Africa, the National Treasury has proposed rules requiring all cross-border crypto transfers to be processed through authorized providers and reported to the central bank ^crypto.news. Meanwhile, the SEC has stayed the approval of Nasdaq’s proposed Bitcoin index options following a jurisdictional challenge from the CME Group, which argues these products fall under the exclusive authority of the CFTC ^crypto.news.

What to watch next: The immediate focus for market participants will be the August 7 Senate deadline for the Clarity Act, as missing this window would likely push legislative action into a crowded September calendar ^crypto.news. Additionally, the SEC’s August 24 deadline for statements regarding Bitcoin index options will be a pivotal moment for the derivatives market ^crypto.news. Investors should also monitor the impact of expiring gas subsidies on Robinhood Chain at the end of September, which will serve as a real-world test of retail demand for tokenized equities ^crypto.news.