News

Weekly Review 13.08.2026: CASP Register, Coldcard

Weekly review for the Baltic and Nordic segment: MiCA Crypto Alliance launches searchable tool for ESMA CASP register, legal analysis outlines two recovery paths for Coldcard victims, and the redrawn EU map continues to impact regional exchanges after the 1st July deadline.

Toms Ābeltiņš

13 August 20266 min read

There's no single fresh headline event in our segment over the past 24-48 hours, so we're summarising the week's developments with precise dates: the ESMA CASP register's searchable CASP Tracker launched on 5th August; legal analysis on two Coldcard incident recovery paths published on 6th August; broader context - the end of the MiCA transition period on 1st July. With a watchlist.

Over the past 24-48 hours (12th-13th August), there hasn't been a single fresh, definitively datable headline event in our segment - crypto exchanges and CASPs serving the Baltics and Nordics, hardware wallets, crypto cards, and tax tools. Therefore, today's release is a weekly review: we're summarising the precisely dated developments of the past few days (5th-9th August) and updating the watchlist. This format is fairer than presenting old events as fresh news, and it allows the reader to clearly see what's new and what's context.

ESMA CASP Register Becomes Searchable (5th August)

On 5th August, the MiCA Crypto Alliance launched the CASP Tracker tool (casptracker.eu) - a searchable directory that transforms the raw data from ESMA's official authorisation register into a user-friendly format. The Tracker allows filtering by company name, country, supervisory authority, authorisation date, and specific licensed service. Data is sourced directly from the ESMA register, which is updated weekly (the last update before publication was on 31st July).

According to the tool's creators, ESMA added 15 new service providers to the register at the end of July, including BNY's Belgian entity alongside other banks, payment companies, and crypto-native firms. An important disclaimer: the Tracker is not the official source - the ESMA register itself remains definitive for final verification.

For our segment, this is practically useful. Baltic and Nordic users who want to verify whether a specific exchange or custodian is legally permitted to serve EU clients now have a simple way to compare advertisements with actual licence status. This is particularly important in a region where the number of authorised CASPs is small (see "Context" section).

Coldcard Incident: A Lawyer's View on Recovery Paths (6th August)

In the hardware wallet category, the fallout from the Coldcard (manufacturer Coinkite) firmware vulnerability continues to unfold. The incident itself isn't new - we covered it in a previous weekly review - but on 6th August, a new, practically significant element emerged: a legal analysis of potential recovery paths for victims.

The analysis distinguishes between two paths. The first is blockchain tracing and asset recovery: a significant portion of the stolen bitcoins has been consolidated into a few addresses that remain unspent, and analysts have already provided investigators and industry compliance teams with hundreds of addresses suspected to be controlled by the attackers. The second path involves claims against the manufacturer Coinkite (Canada) - on grounds of breach of contract, negligence, or product liability; the company's CEO has already publicly apologised and stated that Coinkite takes full responsibility for the firmware flaw.

Various media outlets estimate the scale of the incident differently - from approximately USD 89 million to USD 116 million - as the full extent of losses is still being clarified. For Baltic and Nordic self-custodians, this case remains a timely reminder of the importance of firmware provenance and update hygiene, as well as the fact that even hardware wallets are not an absolute guarantee.

Broader Context: MiCA Transition Deadline Redraws EU Map

Industry analysis published on 6th August reminds us that the MiCA transition ("grandfathering") period ended on 1st July 2026 in all EU member states and the EEA, without extensions or national exceptions. By April 2026, over 185 crypto service providers had obtained authorisation (according to analysis by the Spanish tax authority); at the same time, some firms unwilling to invest in compliance left the European market, and the largest stablecoin, USDT, was gradually delisted from EU trading venues following its issuer's decision not to apply for authorisation.

This is context, not fresh news, but it directly impacts our segment: it determines which exchanges and custodians are legally permitted to serve Baltic and Nordic clients today.

Context and Watchlist

Number of Baltic CASPs remains small. According to Bank of Lithuania data (January 2026), Lithuania had issued only 3 CASP licences, compared to approximately 850 crypto companies registered before MiCA. This is a structural background, not news, but it explains why licence verification tools are valuable in the region.
Bitcoin Suisse and the Nordics. Last week, we reported that Bitcoin Suisse, after obtaining MiCA authorisation, chose the Nordics as its first EEA market. We are monitoring specific launch dates and service offerings.
Consequences of USDT delisting. We are observing how the delisting of stablecoins from EU trading venues affects Baltic and Nordic exchange listings and liquidity.
Tax tools (Koinly, Blockpit, Divly). No fresh product news for our segment this week; we are monitoring autumn tax season updates relevant to LV, LT, EE, and the Nordics.
ESMA register weekly updates. We are tracking whether new Baltic or Nordic CASPs appear in upcoming updates.

Outlook for Next Week

Key checkpoints: new entries in the ESMA CASP register (especially Baltic and Nordic firms), further steps in the Coldcard/Coinkite recovery and legal process, and potential regulatory announcements regarding the enforcement of the transition period's end. If a definitively datable Tier A event emerges, we will revert to the classic daily review format.

Summary for Market Participants

Firstly, before placing funds with any exchange or custodian, verify its CASP status directly in the ESMA register (CASP Tracker is useful for quick orientation, but the register itself is definitive). Secondly, for hardware wallet users - review firmware provenance and update practices in light of the Coldcard incident. Thirdly, note that after 1st July, it is no longer legal to serve EU clients without a MiCA licence, so some previously available services in the region may change or disappear.

Norriwire Briefing