ETFs, Regulation, and Security in the Crypto Market

Cryptocurrency News
6 min read time
|Updated: 2026-09-03
As of September 3, the
crypto market is showing a more cautious outlook. Bitcoin is trading at around $77,000, Ethereum near $2,400 and XRP around $1.33, while the $3.52 billion recorded by US spot Bitcoin ETFs in August has brought institutional demand back into focus. On the regulatory side, Thailand’s new Travel Rule for crypto transfers and, on the security side, the international operation targeting the Sality botnet infrastructure are among the other major developments of the day.
Market Perspective: Flow Persistence Is Being Tested After a Strong August
Bitcoin gained approximately 25% in August, while US spot Bitcoin ETFs recorded $3.52 billion in net inflows over the same period. This represents a significant acceleration from the $172 million recorded in July. However, ETF flows turned negative again in the opening trading sessions of September, showing that the strength of the monthly data did not carry into the new month at the same pace.
This distinction matters because monthly totals provide a broader indication of institutional demand, while daily flows can react more quickly to changes in short-term risk appetite. Despite the strong August inflows, Bitcoin ETFs remain at approximately $1.77 billion in net outflows for 2026 so far.
Thailand’s Travel Rule and the Sality operation highlight two separate trends related to the infrastructure of the crypto market rather than direct price catalysts. On one side, regulations designed to increase the traceability of identities and transaction information are expanding. On the other, cooperation between public authorities and the private sector is strengthening in response to malware targeting cryptocurrency transfers.
Bitcoin ETFs Recorded $3.52 Billion in Net Inflows in August
US-listed
spot
Bitcoin ETFs recorded a total of $3.52 billion in net inflows in August, making it their strongest month of 2026. After attracting only $172 million in July, the funds ended 16 of August’s 21 trading days with positive flows. They also recorded nine consecutive sessions of net inflows between August 17 and August 27.
The increase in total net assets from $76.29 billion at the end of July to $99.61 billion at the end of August shows that growth in the ETF market was not limited to Bitcoin’s price appreciation. Monthly ETF trading volume also increased by approximately 49% to $58.63 billion over the same period.
However, it is still too early to conclude that the August data represents a permanent change in the direction of institutional demand. The $236.46 million daily net outflow recorded at the beginning of September shows that fund flows remain sensitive to macroeconomic conditions and short-term risk sentiment.
For that reason, the more meaningful indicators in the coming period will not only be total monthly inflows, but also how many consecutive trading sessions maintain the same flow direction and how changes in total net assets differ from Bitcoin’s underlying price movement.
Thailand Adopts Travel Rule for Cryptocurrency Transfers
Thailand’s Securities and Exchange Commission has issued a new
Travel Rule for digital asset transfers. Under the framework, digital asset operators will be required to collect certain information about the parties sending and receiving assets, conduct counterparty checks and transmit transaction information alongside digital asset transfer instructions.
One of the most notable parts of the regulation concerns transfers involving self-hosted or self-custodial wallets. Digital asset operators in Thailand will be required to verify ownership of or control over the relevant wallet when customers send assets to or receive assets from such wallets.
Importantly, this does not mean that the regulation prohibits the use of self-custodial wallets. Instead, the new framework introduces additional verification and risk-management requirements for service providers when transfers involve these wallets. Information accompanying digital asset transactions will also have to be retained for at least five years.
The rules will take effect on February 27, 2027. The roughly six-month transition period gives operators time to adapt their information transmission, data retention and transaction-monitoring systems to the new requirements.
Sality Operation Disrupts Malware Network Targeting Crypto Transfers
The US Department of Justice announced that Sality botnet infrastructure had been disrupted as part of an international operation involving authorities in Bulgaria, Hungary and Romania, together with CrowdStrike and the Shadowserver Foundation. First observed in 2003, Sality evolved into a peer-to-peer botnet used to distribute different types of malware to compromised devices.
According to CrowdStrike, the network was capable of distributing malicious payloads to more than 15,000 infected machines worldwide. One of its main tools over the past eight years, EggJagger, monitored Bitcoin or Ethereum addresses copied to a user’s clipboard and replaced them with addresses controlled by the attacker.
This method represents a particular security risk for cryptocurrency transfers. Even when a user copies the correct wallet address, malware can replace the clipboard content before the transaction is confirmed, causing assets to be sent to a different address. CrowdStrike estimates that EggJagger redirected at least 12.1 million rubles, or approximately $150,000 worth of cryptocurrency, through this technique.
The operation significantly restricted the Sality operator’s ability to communicate with infected devices and distribute new malicious payloads. However, this does not mean that malware previously installed on compromised devices has been removed automatically. The operation therefore weakened the botnet infrastructure, while device-level detection and remediation remain a separate part of the security process.
CoinTR Insight
Today’s three developments show why the crypto market cannot be evaluated through price movements alone. Strong Bitcoin ETF inflows throughout August highlight the institutional-demand channel, while Thailand’s Travel Rule demonstrates how compliance infrastructure for digital asset transfers is becoming more detailed. The Sality operation also shows why transaction security needs to be considered not only at the blockchain level, but across the user’s device and the entire transfer process.
During periods when ETF flows can change direction quickly from one day to the next, liquidity conditions need to be assessed separately from headline price movements. CoinTR’s deep liquidity infrastructure and
USDT/TRY trading flow support a market structure in which transactions can be executed more carefully under changing market conditions.
Forward-Looking Takeaway
-
Persistence of ETF flows: The $3.52 billion in net inflows recorded in August represents a strong monthly figure. However, following the outflows seen at the beginning of September, consecutive positive or negative sessions will be more informative than individual daily movements when assessing the persistence of institutional demand.
-
Thailand’s implementation process: The Travel Rule will take effect on February 27, 2027. How digital asset operators implement self-hosted wallet verification, information transmission and data-retention systems before that date will determine the framework’s practical impact.
-
Device security after Sality: Preventing the botnet operator from issuing new instructions is an important step, but existing malware can remain active on infected devices. The longer-term impact of the operation will therefore become clearer as infections are identified and affected systems are remediated.
Legal Notice
The information, comments, and evaluations contained in this content do not constitute investment advice. This content is not intended to be prescriptive in any way and is intended to provide general information. It does not constitute investment advice. CoinTR cannot be held responsible for any transactions made based on this information or any losses that may arise.
Recommended
- Cryptocurrency NewsDigital Currency and Blockchain Bonds in Spotlight As of September 22, the crypto market has Bitcoin price trading at around $85,700, Ethereum near $2,740 and XRP around $1.52, while digital payment infrastructure and blockchain-based financial systems are among the day’s main developments. Saudi Arabia has ended its participation in the mBridge cross-border CBDC project, South Korea’s Hana Bank has issued a $100 million digital bond through Euroclear’s blockchain infrastructure, and Kakao Pay and KakaoBank have signed a memorandum of understan
2026-09-22
- Cryptocurrency NewsNew Steps in the Taxation of Tokenized Stocks and Cryptocurrency As of September 21, the crypto market has Bitcoin trading at around $81,300, Ethereum near $2,630 and XRP around $1.42, while ETF flows, tokenized securities and digital asset taxation are among the day’s key developments. US spot Bitcoin ETFs recorded $462.7 million in weekly net outflows, while spot Ether ETFs attracted $196.9 million in net inflows over the same period. The US Securities and Exchange Commission introduced temporary and conditional exemptive relief for certain tokenized stock
2026-09-21
- Cryptocurrency NewsBitcoin Core Update and Stablecoin Infrastructure in Focus As of September 17, the crypto market has Bitcoin trading at around $76,500, Ethereum near $2,430 and XRP around $1.30, while Bitcoin infrastructure, stablecoin-based blockchain networks and the UK’s new crypto regulatory regime are among the day’s key developments. Bitcoin Core 32.0 has entered its first release-candidate stage, Circle has launched Arc on public mainnet, and the UK Financial Conduct Authority has issued final guidance explaining which activities may require authorization under
2026-09-17


