Weekly brief for the Baltic and Nordic segment: Swedish exchange Goobit/BTCX leadership change (Gustav Buder from Bybit) in the shadow of a MiCA appeal, and ESMA register movement to 323 CASPs.
Toms Ābeltiņš
6 min read
No clearly dateable major news in our segment over the last 24 hours, so we offer a weekly brief. Key event: Swedish exchange Goobit/BTCX announced a leadership change on 14th August - new CEO Gustav Buder from Bybit - against the backdrop of a MiCA licence rejection (2nd July) and subsequent appeal. Additionally: the ESMA MiCA register reaches ~323 CASPs (18th August) and our watch list.
Thursday, 20th August 2026. This is a Weekly Brief publication. Over the last 24 hours, there has been no clearly dateable, region-specific major news in our segment - crypto exchanges and CASPs, hardware wallets, crypto cards, and tax tools serving the Baltics (LV, LT, EE) and Nordics (FI, SE, NO, DK) - significant enough for a standalone daily news item. Therefore, we are summarising the most important, precisely dateable events of the past week: the leadership change at Swedish exchange Goobit/BTCX and the appeal against its MiCA decision, as well as the continued movement of the ESMA MiCA register. Ongoing stories are kept on our watch list with previous dates, rather than being repeated as fresh news.
Goobit/BTCX Changes Leadership in the Shadow of a MiCA Appeal
Stockholm-based crypto group Goobit Group AB, which has operated Sweden's first Bitcoin exchange BTCX since 2011, announced a leadership change on 14th August. Gustav Buder, previously Bybit's Nordic Market Lead, where he established a dedicated Nordic team and secured regional sponsorship deals, will become the new CEO from 15th August. The outgoing CEO, Christian Ander, who had been in the role since 22nd February 2022, will transition to the Chairman of the Board position. Buder's mandate, according to the company, emphasises product development, regulatory maturity, and expansion in the Nordic market.
The leadership change comes at a sensitive regulatory juncture. Sweden's Finansinspektionen (FI) rejected Goobit's MiCA authorisation application on 2nd July 2026, citing "incomplete internal controls and weaknesses in risk assessment" as the reason. The company filed an appeal with the Stockholm Administrative Court (Förvaltningsrätten) that same July. During the appeal process, BTCX is permitted to continue operations in Sweden; the final outcome and timeline are currently unknown.
Interpretations should be approached with caution. The fact that the regulator rejected the application specifically due to internal controls and risk management is concrete and documented; whether the new leadership can address these shortcomings and turn the appeal in their favour remains an open question. The appointment of an experienced Nordic market leader signals that Goobit is preparing for both compliance strengthening and more aggressive growth, but without a valid MiCA licence, the company's manoeuvrability in the unified EEA market remains limited. For Baltic users, the direct impact is currently indirect - BTCX has historically focused on Swedish retail - but the case illustrates how crucial regulatory compliance has become in the Nordic segment.
MiCA Register: Movement Continues, Concentration Remains
According to data from 18th August, the ESMA unified MiCA register contains approximately 323 active CASP legal entities (after removing revoked entries and consolidating duplicate LEIs). This represents a gradual increase from 321 CASPs in the 31st July update, when 12 companies were added to the register. Significantly for the region: recent updates still show no new firms from the Baltics or Nordics - additions are dominated by Germany, Spain, and France.
The uneven structure warrants separate mention. While Germany accounts for approximately 22% of all active CASP legal entities, it declares only about 7.2% of cross-border host-state links. In other words, the number of registered companies in one jurisdiction does not automatically translate into cross-border activity across the entire EEA. For our segment, this is a reminder that the total number in the register itself says little about the extent to which a particular platform genuinely serves Baltic and Nordic users - cross-border host-state notifications are what truly matter.
Context: Why the Swedish Case is Important for the Region
The Goobit rejection fits into a broader picture. According to a summary by Nordic industry media Kaupr, by the end of the MiCA transition period, 38 companies in the region (Nordics and Baltics) had received a licence, of which 35 were pure CASPs. The country breakdown was markedly uneven: Latvia 9, Lithuania 7, Norway 7, Denmark 5, Finland 4, Estonia 3, Iceland 2, and Sweden only 1. Sweden's Finansinspektionen proved to be the region's strictest regulator - by the deadline, the only approved local platform was Safello, while Latvijas Banka was by far the most active licensor.
In this context, the Goobit/BTCX story is not an isolated company event, but rather a specific example of how a strict local regulator and the unified MiCA regime together are reshaping competition. For local operators, compliance becomes an existential issue, not just a cost, and leadership changes at such times are often part of a broader reorganisation of compliance and positioning.
Watch List (Ongoing Stories, Not Fresh News)
These points are not news from the last 24 hours; we keep them under observation with precise previous dates.
Coldcard (Coinkite) incident: The depletion of funds caused by hardware wallet seed entropy errors was followed in daily briefs in early August and in the weekly brief on 9th August, when TRM Labs estimated total losses at around 116 million US dollars. The figures are still estimates and continue to be refined, so we treat this as an ongoing, rather than new, event. The regional conclusion remains unchanged: the risk is tied to specific Coldcard models and firmware versions, not to any Baltic or Nordic platform; affected seeds require migration to a new key.
Hardware wallets: The discovery of a laser attack on the Trezor Safe 7 and TROPIC01 chip (Ledger Donjon, 3rd June) remains in context; manufacturer Tropic Square promises improved versions by the end of 2026. No new information this week.
Crypto card segment: Kraken launched a Mastercard network debit card in the EEA and UK on 14th July; the product is formally available to Baltic and Nordic EEA users, but a separate regional rollout has not yet been announced.
ESMA register: We continue to monitor for future updates - the most important regional indicator will be the first new CASP authorisations for Baltic or Nordic firms after the end of the transition period.
Background
In the broader market, the price of Bitcoin broke out of its summer stagnation this week, approaching the 70,000 US dollar mark against the backdrop of several simultaneous macro factors. This is a global market signal, not an event specific to our segment, and does not directly affect the regional CASP, wallet, card, or tax tool landscape.
Summary for Market Participants
Regulatory compliance in the Nordic exchange segment has become a prerequisite for competition. The Goobit/BTCX case shows that even a long-established local platform operates in uncertainty without a MiCA licence, and leadership changes at such times are often part of a compliance reorganisation, not just a growth strategy.
Evaluate company announcements about the future separately from regulatory decisions. The appointment of a new, experienced CEO is a positive signal, but the outcome of the appeal and the licence status remain the decisive factors.
Follow not just the total number in the MiCA register, but cross-border host-state notifications - these are what truly determine how realistically a particular platform serves Baltic and Nordic users.
For hardware wallet users in the Baltics and Nordics, the reminder remains valid: check if your device model and firmware are affected by the Coldcard incident, and if necessary, migrate to a new, securely entropy-generated seed.