---
title: "Sector Rotation - Week of July 21: Crypto's Venue Layer Emptied and Refilled in the Same Seven Days"
published: 2026-07-29T18:44:44.695947+00:00
type: sector_rotation
scope: cex
canonical: https://moonwire.org/insights/sector-rotation-2026-07-27.html
tags: [sector_rotation, cex, exchanges, regulation, mica, security, derivatives, weekly]
---

# Sector Rotation - Week of July 21: Crypto's Venue Layer Emptied and Refilled in the Same Seven Days

> Crypto's venue layer changed hands rather than shrank this week: BitMEX, Movement Labs, Poolin and BitMart have all folded or filed in July, while in the same seven days fifteen new providers joined Europe's MiCA register, a state lender announced a crypto desk of its own and a commercial bank plugged into J.P. Morgan's chain. Attention rotated out of stablecoin policy into the venue-and-counterparty complex, and the sectors whose tone turned negative were the three that describe where a trade is custodied, cleared and leveraged.

## Key takeaways

- Four venues folded or filed in July - BitMEX, Movement Labs, Poolin and BitMart - while fifteen new providers joined Europe's MiCA register in the same seven days, among them BNY Mellon's Belgian unit and BitPay [[1]](/s/7-n8ObcOY0umz7_Vvx2dJQ) [[2]](/s/FF7uaJ-TRXerlSavtYd3Jg).
- The exits came with timetables: BitMEX force-closes any open position on September 23, BitMart halts trading August 26 [[3]](/s/mp-Lp2eYRz6j97HIYSQHkg) [[4]](/s/U5iF0SuET7mVbppOZf1ZeA). Nansen's onchain read is that BitMart's ETH and stablecoin balances were already leaving before the wind-down was announced [[7]](/s/U-pl5uAwR2O4UbX9IGnJbg).
- The venue function is being rebuilt by licence-holders: Kraken's parent acquired an embedded-wallet business, Sberbank announced crypto trading and custody by December 1, KB Kookmin plugged into J.P. Morgan's Kinexys, and TRX futures opened on a CFTC-regulated venue [[8]](/s/4b9JwrT_TBa2Bb8ydX4pcg) [[9]](/s/IPyD65amRSuMEU8swGWrjQ) [[10]](/s/gR4gU0dfjNCh-K9yFW2WUA) [[12]](/s/iePD3RbORtGx68iZWZgPyw).
- The licence has a price: EU sanctions on 14 platforms with a first-time enforcement mechanism, Binance's Android app off Google Play in parts of Europe, and a Thai criminal complaint against Bitkub over an undisclosed 2021 hack [[14]](/s/bHfNB95HRtqUac4cuV-5XA) [[16]](/s/1FmHOegaSimhR0LRnNT2Vw) [[17]](/s/Gnt15doPQzadkDeUyJE48A).
- The dissent came from Changpeng Zhao - 'Brutal... Hope this marks the bottom. Stay SAFU!' - and from Ansem, who told followers the lows are already in [[27]](/s/7QNk_DwTSFCnin-VrIOx6g) [[28]](/s/GjpbR0OoSOmVDGvGQs4EVg).

Crypto's venue layer did not shrink this week. It changed hands.

The Block put the exits in one line: BitMEX, Movement Labs, Poolin and BitMart have all folded or filed in July [[1]](/s/7-n8ObcOY0umz7_Vvx2dJQ). In the same seven days, fifteen new crypto-asset service providers were added to Europe's MiCA register — among them BNY Mellon's Belgian unit and BitPay — taking the licensed total to 309 [[2]](/s/FF7uaJ-TRXerlSavtYd3Jg). Read together, that is the week: the seats being vacated are unlicensed or offshore ones, and the entities arriving to sit in them turn up holding paper.

That pairing is what a price chart cannot show you, and it is why this week's coverage rotated the way it did. Attention moved out of stablecoin policy — the sector that led the conversation a week earlier — and into the venue-and-counterparty complex: centralized exchanges, DeFi and derivatives all gained share of voice, with security climbing into the leading group behind them. Of the sectors that led coverage in both weeks, the three whose tone turned negative were exactly the three that describe where a trade is custodied, cleared and leveraged. Layer-1 tone moved the other way.

## Column one: the exits, and how orderly they were

The distinguishing feature of the exits below is that each arrived with a public timetable or a court filing rather than as a sudden halt.

BitMEX will shut on September 23 following a "strategic review" by operator HDR Global Trading; new registrations are already halted, risk limits begin August 26, and any position still open at closure is force-closed [[3]](/s/mp-Lp2eYRz6j97HIYSQHkg). BitMart will halt trading on August 26 and close its platform in January, having already begun suspending deposits and new orders; its BMX token fell nearly 60% in a day, and global CEO Nenter Chow said he was not consulted on the wind-down and learned of it when it became public [[4]](/s/U5iF0SuET7mVbppOZf1ZeA). Poolin, which The Block describes as once the world's largest bitcoin mining pool, filed Chapter 11 with a $52M stalking-horse bid for its Texas operations, against liabilities of $100M-$500M and more than 11,000 retail users holding roughly $163.7M in frozen IOUs dating to a 2022 withdrawal freeze [[5]](/s/jABWR-OeRzWaAncbAt5Hng). Storj Labs filed a voluntary Chapter 11 to clear legacy liabilities from earlier acquisitions, with STORJ down 19% on the day and the storage network still running [[1]](/s/7-n8ObcOY0umz7_Vvx2dJQ). Per Root data, 99 crypto projects have now failed in 2026 [[6]](/s/maOBgdmcRXafCyyL5SC2vA).

"Orderly," though, is a claim rather than a guarantee, and our corpus contains the counterweight in the same window. Nansen's onchain read of BitMart is that before the wind-down was announced, the exchange's ETH and stablecoin balances were already being moved out, leaving reserves dominated by far less liquid tokens [[7]](/s/U-pl5uAwR2O4UbX9IGnJbg). A published timetable and a solvent balance sheet are not the same object, and the sequence Nansen describes is the reason to check.

## Column two: the entrances that arrived in the same week

The same seven days, on the other side of the ledger:

- **A custody bank and a payments processor took out European licences.** BNY Mellon's Belgian unit and BitPay were among fifteen CASPs added to ESMA's MiCA register, bringing the licensed total to 309; OKX separately said Europe remains a long-term priority as it expands across the EEA [[2]](/s/FF7uaJ-TRXerlSavtYd3Jg).
- **An exchange parent bought infrastructure rather than a venue.** Payward, Kraken's parent, acquired Magic Labs' embedded-wallet business [[8]](/s/4b9JwrT_TBa2Bb8ydX4pcg).
- **A state lender announced a desk of its own.** Russia's Sberbank plans to launch crypto trading and custody infrastructure by December 1 [[9]](/s/IPyD65amRSuMEU8swGWrjQ).
- **A commercial bank plugged into a bank-run chain.** South Korea's KB Kookmin Bank plans to launch blockchain-based cross-border corporate payments next month using Kinexys by J.P. Morgan, supporting USD transfers across ten countries [[10]](/s/gR4gU0dfjNCh-K9yFW2WUA).
- **A stablecoin issuer bought the patents.** Circle acquired IBM's blockchain portfolio — more than 680 patent families and nearly 1,000 issued patents — and says the deal makes it the largest U.S. blockchain patent holder, strengthening the IP behind USDC, its payments network and Arc [[11]](/s/77pDo8xKQaKibgiHnNwwFg).
- **Derivatives kept moving onshore.** TRX futures went live on Bitnomial, giving eligible U.S. traders and institutions a CFTC-regulated market for TRX exposure [[12]](/s/iePD3RbORtGx68iZWZgPyw), while CFTC staff issued a no-action position on designated contract market procedures [[13]](/s/K40XxkhNTmStP8uU9K4BiA).

None of these is a rescue of a failed venue, and that is the point. The function — custody, settlement, clearing, the wallet itself — is being rebuilt by counterparties whose licence is the product.

## What the licence costs

The paper comes with obligations, and this week priced each of them.

The EU sanctioned 14 crypto platforms across Georgia, Panama, the UAE, the Marshall Islands, Kyrgyzstan and Belarus for aiding Russian sanctions evasion, and introduced a first-time enforcement mechanism able to ban transactions between local operators and any crypto provider helping Russia evade [[14]](/s/bHfNB95HRtqUac4cuV-5XA). HTX was named, effective August 23; the measure stops short of an asset freeze [[15]](/s/M6HsXIFKe_E1J1Uuie1Yfw). Binance's Android app is reportedly no longer available on Google Play in parts of Europe amid MiCA licensing restrictions [[16]](/s/1FmHOegaSimhR0LRnNT2Vw). Thailand's SEC filed a criminal complaint against Bitkub over an undisclosed $47M hack dating to 2021 [[17]](/s/Gnt15doPQzadkDeUyJE48A) — an enforcement action about disclosure rather than about the breach itself. And SEC Commissioner Hester Peirce issued a statement arguing that vaults and onchain lending strategies involving investment contracts and securities remain subject to federal securities law even when moved onchain [[18]](/s/MGJizPFUQRqawTGe8A9QmQ).

The Block's research primer on proof of reserves frames the era this closes: in the weeks after FTX failed, nearly every major exchange rushed to adopt PoR, which pairs proof of assets with proof of liabilities so that a user can confirm their own balance was counted [[19]](/s/jkyFGiqeRhyLAIj99nkgAQ). Proof of reserves was the industry's self-issued licence. The register is the state-issued one.

## The counterparty tape underneath it

Security coverage climbed into the leading group this week, and the driver was not one large event but a steady tape of small ones:

- Roughly $11.8M drained from Triple-A's hot wallets, per onchain investigator Specter, with new deposits still being swept more than 31 hours after the first major outflows; the firm says customer funds are unaffected [[20]](/s/JW6C9qOQTRSRkrcda21Hvw).
- WEMIX suspended bridges and trading network-wide after an attacker breached a linked contract and moved about $724,000 [[21]](/s/ppnHUjQ7Th22Xp3WqSkWgg), having earlier flagged a possible unauthorised change to the ownership of its WEMIX$ contract [[22]](/s/KT1e90_zQNqtrbfqCep3eQ).
- A second VerusCoin Ethereum bridge exploit drained around $7.54M via unbacked payouts, matching May's incident in bridge, entry path and bug class but from a different attacker wallet, per Blockaid [[23]](/s/5v8aQauTQ0uk7Mou3yb9qQ).
- SparkKitty, an OCR-based stealer, reached both the App Store and Google Play and scanned users' photo galleries for seed phrases, per Kaspersky [[24]](/s/uxU3RW31Q-S-zbEPKRdLzQ).
- CertiK counted 52 crypto "wrench attacks" in H1 2026 with recorded exposure of $124M, more than a 1,000% rise year over year; France accounted for nearly two-thirds of incidents and home invasions rose to 20 from one [[25]](/s/VB7jIT_3SJuCVkqO62G3Qw).

Cointelegraph's read of the same CertiK data is the part worth keeping: the rise is not AI-driven hacking, it is a surge in old smart-contract exploits [[26]](/s/gxGkcVGJRIumhwYjiHi-4A). What grew this week is legacy code and physical coercion — two things a licence does not fix.

## Where the curated voices split

The dominant read of the closures across the week's coverage was distress. The dissent came from two named voices reading the same wreckage as a floor.

Changpeng Zhao's post on the closure cluster ran to eight words: "Brutal... Hope this marks the bottom. Stay SAFU!" [[27]](/s/7QNk_DwTSFCnin-VrIOx6g). Ansem, answering followers asking when a bull market starts, wrote: "3 to 6 months. the lows are ALREADY in. what's left is the boring sideways chop where nobody agrees on anything" [[28]](/s/GjpbR0OoSOmVDGvGQs4EVg). Neither presented venue failures as evidence of anything beyond sentiment, and that is exactly the disagreement: one column of this week's news treats the closures as an ending, and these two treat them as a sign the low is in.

## What would break this read

The changing-hands framing survives only while the exits stay scheduled. If the next venue to go does it without notice, without a withdrawal window and without a filing, this stops being a handover and becomes a straightforward solvency cycle — and Nansen's pre-announcement outflow pattern at BitMart [[7]](/s/U-pl5uAwR2O4UbX9IGnJbg) is the shape that would show it first.

Two other checkpoints from this week: whether Europe's register keeps adding banks and payment processors rather than crypto-native firms [[2]](/s/FF7uaJ-TRXerlSavtYd3Jg), and where liquidity actually lands when BitMEX's September 23 date arrives [[3]](/s/mp-Lp2eYRz6j97HIYSQHkg). If it turns up on CFTC-registered venues [[12]](/s/iePD3RbORtGx68iZWZgPyw), the handover is real. If it turns up at the next offshore platform, the licences are a European story rather than a market one.

---

*MoonWire surfaces and summarizes public crypto news.*

**General information only — not financial advice.** MoonWire Ltd. is not licensed by ASIC and holds no AFSL. This content does not consider your objectives, financial situation, or needs, and is not a recommendation to buy, sell, or hold any asset.

*This analysis is generated by artificial intelligence and may be inaccurate, incomplete, or fabricated. Independently verify before acting.*

© 2026 MoonWire Ltd. · [Terms](https://moonwire.org/legal/TOS) · [Risk Disclosure](https://moonwire.org/legal/RISK_DISCLOSURE)