The CLARITY Act's Developer Protection Has a Trojan Horse

Section 604 of the CLARITY Act, titled the "Blockchain Regulatory Certainty Act," has been positioned as the biggest win for open-source developers in the entire 309-page bill. The headline is compelling: if you build blockchain software and don't have unilateral control over users' funds, you are not a money transmitter. Not under FinCEN rules, not under federal criminal law, not under state registration requirements. Writing code does not equal money transmission.

Then you read subsection (d).

Lauren Rodriguez flagged the problem in a quote-tweet of our post about Section 604 this morning. Subsection (d), titled "Clarification of Treatment," explicitly states that the protections in subsection (c) do not modify the application of 18 U.S.C. § 1960(b)(1)(C). That is the exact federal statute that has been used to prosecute software developers. It criminalizes money transmission involving funds "known" to be derived from a criminal offense or intended for unlawful activity.

Here is where it gets dangerous: the word "known" in federal criminal law does not mean what you think it means. Prosecutors do not need to prove that a developer had specific knowledge of a specific criminal transaction. They need to prove that the developer knew their software was being used for criminal purposes and continued operating it anyway. Every developer of a privacy tool, every builder of a non-custodial wallet, every maintainer of a mixing protocol knows that somewhere, someone is using their tool for something illegal. That general knowledge, under aggressive prosecution theory, is enough to trigger 1960(b)(1)(C).

This is not hypothetical. This is what happened to Keonne Rodriguez and William Hill of Samourai Wallet. Both pleaded guilty to conspiracy to operate an unlicensed money transmitting business. Rodriguez is currently serving a five-year federal sentence. The prosecution's theory: they built a privacy tool, they knew criminals used it, and they kept building. Roman Storm of Tornado Cash was convicted on the same 1960 charge after the DOJ dropped the (b)(1)(B) registration count and proceeded solely on (b)(1)(C), the "knowledge" prong.

Peter Van Valkenburgh, Executive Director of Coin Center, offered a more measured read. He argues the language in subsection (d) is actually narrow: it preserves the ability to charge under 1960 only when a person "acts with the specific intent to transfer, on behalf of another person, funds that are known to be" criminal. That is two separate requirements: specific intent to move someone else's money, plus actual knowledge that those specific funds are dirty. Van Valkenburgh's position: if someone emails you asking for help laundering funds and you do it, you are not safe. But merely building a tool that bad actors might use does not meet this bar.

The problem is that the Samourai and Tornado Cash cases demonstrate prosecutors can bridge that gap by pointing to developers' own communications, marketing materials, and awareness of how their tools are used. The DOJ's position, validated by a jury in the Storm case, is that maintaining a protocol while knowing it facilitates crime satisfies the "specific intent" and "knowledge" requirements. The legal text reads narrow. The prosecution theory reads broad. And that gap is where developers go to prison.

So Section 604 gives with one hand and takes away with the other. It says you're not a money transmitter for building open-source software. But it preserves the exact criminal statute that has already put developers in prison for building open-source software. The protection is real in theory, hollow in practice. As long as 1960(b)(1)(C) remains the carve-out, any developer who builds privacy tools and is aware of their misuse is potentially exposed to federal criminal liability regardless of the safe harbor in subsection (c).

The Senate Banking Committee marks up the CLARITY Act on Thursday. If the industry wants Section 604 to actually mean something, the (d) carve-out needs to be narrowed to require proof of direct, intentional facilitation of a specific criminal act, not general awareness that a tool could be misused. Otherwise, this is a press release disguised as a protection.

75% of Bitcoin Hashrate Now Backs Miner-Built Block Templates

Why it matters: Stratum V2 gives miners, not pool operators, control over which transactions go into blocks.

Mining pools representing 75% of Bitcoin's hashrate have now adopted Stratum V2, the open-source protocol that lets individual miners build their own block templates instead of accepting whatever the pool operator chooses. This is a structural decentralization win. Under the old system, a handful of pool operators decided what went into blocks. Under Stratum V2, that power returns to the miners themselves. Censorship resistance at the protocol level just got a massive upgrade.

Coatue: Sellers of the Shortage Are Up 107% YTD

Why it matters: The AI capex supercycle is creating a two-tier market. Sellers of scarce inputs are printing money. Buyers are treading water.

Coatue Management's May 2026 Public Markets Update lays out the AI capex cycle in stark terms. Companies selling scarce inputs into the buildout (NVIDIA, Broadcom, Micron, TSMC, SK Hynix, GE Vernova) are up 107% YTD on average. The hyperscalers buying those inputs (Amazon, Google, Meta, Microsoft, Oracle) are up 4%. Hyperscaler consensus capex for 2026: $680 billion. Semiconductor free cash flow: $525 billion. Coatue projects $12 trillion in cumulative AI capex from 2026 to 2031. The spread between sellers and buyers (180%) is the widest in market history, wider than dot-com. This is the great cash flow transfer of the decade, and it has direct implications for Bitcoin mining: ASIC manufacturers compete for the same TSMC and Samsung foundry capacity that AI chip makers are hoarding.

BofA Pushes First Rate Cut to July 2027. No Relief in 2026.

Why it matters: The last remaining Wall Street hope for 2026 rate cuts just died. Warsh inherits a Fed that can't ease.

Bank of America killed the last remaining hope for 2026 rate cuts. Strong April payrolls (+115K vs +65K expected) and sticky inflation gave incoming Fed Chair Kevin Warsh zero room to cut. The unemployment rate hasn't budged from its trough in 38 months, unprecedented in any post-WWII business cycle. BofA's new call: first cut in July 2027, not September 2026. Meanwhile, Deutsche Bank's positioning report shows investors at only the 61st percentile despite a 16% rally off the March lows. Call skew is at the 99th percentile. $136 billion in fresh money just flowed into money market funds, the biggest inflow in four months. The market is being forced to chase, but the sideline cash pile keeps growing. Something has to break the stalemate: this week's CPI print on Tuesday and the Fed Chair transition on Thursday are the catalysts.

Bitcoin ETFs: $623M Weekly Inflow, Six Straight Weeks Positive

Why it matters: Institutional accumulation is relentless even as price struggles at the 200-day MA.

Spot Bitcoin ETFs pulled in $623 million in net inflows last week, marking six consecutive weeks of positive flows. Cumulative net inflows since the January 2024 launch are approaching $60 billion. IBIT alone holds over 806,700 BTC, roughly 3.8% of total supply. The ETF bid continues to absorb supply while BTC trades sideways under the 200-day moving average at $82,228. Something has to give. Either price catches up to accumulation, or the buyers are wrong. History suggests the former.

Lagarde Rejects Euro Stablecoins, Warns of "Digital Dollarization"

Why it matters: The ECB president just admitted that dollar stablecoins are a bigger threat to euro sovereignty than Bitcoin ever was.

Christine Lagarde told reporters she is "sceptical" of euro-denominated stablecoins and warned that dollar stablecoins threaten to digitally "dollarize" the eurozone. The stablecoin market now sits at $310 billion combined (Tether + USDC), overwhelmingly dollar-denominated. Lagarde's response is not to compete but to reject the category and push the digital euro instead. This is the central banker's dilemma in real time: they can see the threat, they can name the threat, but they cannot build anything that competes with it because the entire value proposition of stablecoins is operating outside central bank control.

42 npm Packages Compromised: The TanStack Supply Chain Attack

Why it matters: 84 malicious versions pushed in 10 minutes. Your software dependencies are your attack surface.

A coordinated supply-chain attack hit 42 TanStack npm packages, pushing 84 malicious versions in under 10 minutes. The injected code exfiltrated credentials and environment variables to an attacker-controlled server. TanStack powers millions of web applications. The attack was caught quickly, but the window of exposure was real. This is the same class of vulnerability that has hit the Bitcoin ecosystem before, compromised dependencies that silently steal keys. If you're running a node, a Lightning implementation, or any Bitcoin software: audit your dependencies, pin your versions, and verify your builds.

California Mayor Pleads Guilty as Illegal Chinese Agent. Her Platform Should Sound Familiar.

Why it matters: A sitting U.S. mayor just admitted to operating under Beijing's direction. The question is how many more there are.

Eileen Wang, the mayor of Arcadia, California, resigned Monday and agreed to plead guilty to one count of acting as an illegal agent of the People's Republic of China. She faces up to 10 years in federal prison. According to the plea agreement, Wang and her campaign manager Yaoning "Mike" Sun (already sentenced to four years) ran a propaganda website called "US News Center" from 2020 to 2022, publishing content at the direct instruction of Chinese government officials, including essays denying the Uyghur genocide in Xinjiang. They reported engagement metrics back to their handlers via WeChat.

Here is what makes this story worth more than a headline. Wang switched from Republican to Democrat for her 2022 City Council run, telling the LA Times she was "swayed by housing policies espoused by the left that voters seemed to need, such as rental assistance." She ran on community engagement, public safety, and progressive housing policy. Prosecutors say Chinese officials cultivated Wang with the explicit hope that she would advance in politics and help strengthen China's influence in California.

As Geiger Capital pointed out: "It will soon be common knowledge that China has been pushing harmful policies from inside of our own country." In 1984, Soviet defector Yuri Bezmenov described a four-stage playbook for ideological subversion: demoralization (15 to 20 years of corrupting education and media), destabilization (2 to 5 years of targeting the economy and institutions), crisis, and normalization. Bezmenov warned that most of the subversion work is done long before anyone notices, through "useful idiots" who adopt the policies without understanding their origin. Wang may be the first sitting U.S. official to plead guilty to this kind of influence operation. She will not be the last. The open question is how many policy positions Americans have adopted that were seeded, amplified, or funded by adversarial governments, not because the ideas were good, but because they were strategically useful.

Run Stratum V2 on Your Mining Setup

With 75% of hashrate now supporting Stratum V2, there's no better time to take control of your block templates.

Download the Stratum V2 reference implementation and configure your mining setup to build your own block templates. The SRI (Stratum Reference Implementation) is open-source and works with most modern ASIC firmware. Instead of trusting your pool operator to construct blocks honestly, you decide which transactions to include. It takes about 30 minutes to set up if you're already running a full node. This is what mining decentralization actually looks like in practice.