ETFs, Regulation, and Security in the Crypto Market

Cryptocurrency News
6 min read time
|Updated: 2026-09-03
ETFs, Regulation, and Security in the Crypto Market
As of September 3, the crypto market is showing a more cautious outlook. Bitcoin is trading at around $77,000, Ethereum near $2,400 and XRP around $1.33, while the $3.52 billion recorded by US spot Bitcoin ETFs in August has brought institutional demand back into focus. On the regulatory side, Thailand’s new Travel Rule for crypto transfers and, on the security side, the international operation targeting the Sality botnet infrastructure are among the other major developments of the day.

Market Perspective: Flow Persistence Is Being Tested After a Strong August

Bitcoin gained approximately 25% in August, while US spot Bitcoin ETFs recorded $3.52 billion in net inflows over the same period. This represents a significant acceleration from the $172 million recorded in July. However, ETF flows turned negative again in the opening trading sessions of September, showing that the strength of the monthly data did not carry into the new month at the same pace.
This distinction matters because monthly totals provide a broader indication of institutional demand, while daily flows can react more quickly to changes in short-term risk appetite. Despite the strong August inflows, Bitcoin ETFs remain at approximately $1.77 billion in net outflows for 2026 so far.
Thailand’s Travel Rule and the Sality operation highlight two separate trends related to the infrastructure of the crypto market rather than direct price catalysts. On one side, regulations designed to increase the traceability of identities and transaction information are expanding. On the other, cooperation between public authorities and the private sector is strengthening in response to malware targeting cryptocurrency transfers.

Bitcoin ETFs Recorded $3.52 Billion in Net Inflows in August

US-listed spot Bitcoin ETFs recorded a total of $3.52 billion in net inflows in August, making it their strongest month of 2026. After attracting only $172 million in July, the funds ended 16 of August’s 21 trading days with positive flows. They also recorded nine consecutive sessions of net inflows between August 17 and August 27.
The increase in total net assets from $76.29 billion at the end of July to $99.61 billion at the end of August shows that growth in the ETF market was not limited to Bitcoin’s price appreciation. Monthly ETF trading volume also increased by approximately 49% to $58.63 billion over the same period.
However, it is still too early to conclude that the August data represents a permanent change in the direction of institutional demand. The $236.46 million daily net outflow recorded at the beginning of September shows that fund flows remain sensitive to macroeconomic conditions and short-term risk sentiment.
For that reason, the more meaningful indicators in the coming period will not only be total monthly inflows, but also how many consecutive trading sessions maintain the same flow direction and how changes in total net assets differ from Bitcoin’s underlying price movement.

Thailand Adopts Travel Rule for Cryptocurrency Transfers

Thailand’s Securities and Exchange Commission has issued a new Travel Rule for digital asset transfers. Under the framework, digital asset operators will be required to collect certain information about the parties sending and receiving assets, conduct counterparty checks and transmit transaction information alongside digital asset transfer instructions.
One of the most notable parts of the regulation concerns transfers involving self-hosted or self-custodial wallets. Digital asset operators in Thailand will be required to verify ownership of or control over the relevant wallet when customers send assets to or receive assets from such wallets.
Importantly, this does not mean that the regulation prohibits the use of self-custodial wallets. Instead, the new framework introduces additional verification and risk-management requirements for service providers when transfers involve these wallets. Information accompanying digital asset transactions will also have to be retained for at least five years.
The rules will take effect on February 27, 2027. The roughly six-month transition period gives operators time to adapt their information transmission, data retention and transaction-monitoring systems to the new requirements.

Sality Operation Disrupts Malware Network Targeting Crypto Transfers

The US Department of Justice announced that Sality botnet infrastructure had been disrupted as part of an international operation involving authorities in Bulgaria, Hungary and Romania, together with CrowdStrike and the Shadowserver Foundation. First observed in 2003, Sality evolved into a peer-to-peer botnet used to distribute different types of malware to compromised devices.
According to CrowdStrike, the network was capable of distributing malicious payloads to more than 15,000 infected machines worldwide. One of its main tools over the past eight years, EggJagger, monitored Bitcoin or Ethereum addresses copied to a user’s clipboard and replaced them with addresses controlled by the attacker.
This method represents a particular security risk for cryptocurrency transfers. Even when a user copies the correct wallet address, malware can replace the clipboard content before the transaction is confirmed, causing assets to be sent to a different address. CrowdStrike estimates that EggJagger redirected at least 12.1 million rubles, or approximately $150,000 worth of cryptocurrency, through this technique.
The operation significantly restricted the Sality operator’s ability to communicate with infected devices and distribute new malicious payloads. However, this does not mean that malware previously installed on compromised devices has been removed automatically. The operation therefore weakened the botnet infrastructure, while device-level detection and remediation remain a separate part of the security process.

CoinTR Insight

Today’s three developments show why the crypto market cannot be evaluated through price movements alone. Strong Bitcoin ETF inflows throughout August highlight the institutional-demand channel, while Thailand’s Travel Rule demonstrates how compliance infrastructure for digital asset transfers is becoming more detailed. The Sality operation also shows why transaction security needs to be considered not only at the blockchain level, but across the user’s device and the entire transfer process.
During periods when ETF flows can change direction quickly from one day to the next, liquidity conditions need to be assessed separately from headline price movements. CoinTR’s deep liquidity infrastructure and USDT/TRY trading flow support a market structure in which transactions can be executed more carefully under changing market conditions.

Forward-Looking Takeaway

  • Persistence of ETF flows: The $3.52 billion in net inflows recorded in August represents a strong monthly figure. However, following the outflows seen at the beginning of September, consecutive positive or negative sessions will be more informative than individual daily movements when assessing the persistence of institutional demand.
  • Thailand’s implementation process: The Travel Rule will take effect on February 27, 2027. How digital asset operators implement self-hosted wallet verification, information transmission and data-retention systems before that date will determine the framework’s practical impact.
  • Device security after Sality: Preventing the botnet operator from issuing new instructions is an important step, but existing malware can remain active on infected devices. The longer-term impact of the operation will therefore become clearer as infections are identified and affected systems are remediated.
larkLogo2026-09-03
Legal Notice
The information, comments, and evaluations contained in this content do not constitute investment advice. This content is not intended to be prescriptive in any way and is intended to provide general information. It does not constitute investment advice. CoinTR cannot be held responsible for any transactions made based on this information or any losses that may arise.
Recommended