US spot Bitcoin exchange-traded funds extended their net inflow streak to seven sessions on Friday, a run that began the same week the Coldcard hardware wallet vulnerability entered public view. Bloomberg Intelligence analyst James Seyffart noted the timing but cautioned against drawing a direct line between the exploit and fund flows.

The inflows represent the longest uninterrupted stretch since March, when the initial wave of post-launch allocations cooled. Data from the ten US-listed spot products show cumulative net creations across the period, though daily figures varied. BlackRock's IBIT and Fidelity's FBTC continued to absorb the bulk of new capital, while smaller issuers saw mixed activity.

What triggered the move

Coldcard maker Coinkite disclosed a firmware vulnerability on Tuesday that could allow physical extraction of private keys under specific conditions. The company pushed a patch and urged users to update, but the disclosure rippled through custody desks. Some allocators reportedly reviewed self-custody exposures, though no major fund has publicly cited the exploit as a reallocation driver.

We're hearing questions from LPs about hardware wallet risk, but the ETF flow data doesn't yet show a clear substitution pattern," said a prime brokerage source who requested anonymity to discuss client conversations.

How desks are positioning

Custody conversations have shifted toward qualified custodians and multi-party computation setups since the exploit. Several institutional allocators told this desk they are evaluating whether to move portions of self-custodied bitcoin to ETF shares for operational simplicity, particularly where mandate restrictions limit direct crypto holdings.

The ETF structure offers regulated custody, daily liquidity, and familiar settlement — attributes that align with pension and endowment mandates. But the products carry management fees and lack the cryptographic sovereignty that drew many early bitcoin adopters.

| VanEck Bitcoin Trust | HODL | +12 | 0.9 |

Price interaction — did spot follow

Bitcoin traded at $64,312 on Friday, down 0.5% in 24 hours and unchanged over seven days, per CoinGecko. The price action suggests ETF inflows have not yet translated into sustained spot bidding pressure. Total crypto market cap held at $2.28 trillion with Bitcoin dominance at 56.6%, indicating the flows absorbed existing supply rather than chasing new highs.

Trading volume across major spot venues averaged $18.7 billion daily, consistent with the prior week. Funding rates on perpetual swaps remained near neutral, signaling no aggressive leveraged positioning behind the ETF-driven demand.

Why the timing matters

The inflow streak began before the Coldcard disclosure, complicating any causal narrative. Monday's data will show whether the exploit accelerated allocations or merely coincided with pre-existing rebalancing. Several desks flagged the upcoming quarterly reporting cycle as a more likely catalyst — allocators often adjust ETF positions ahead of disclosure deadlines.

Next filing dates and flow catalysts

Monday's ETF flow release from Bloomberg and Farside Investors will provide the first post-weekend read. The SEC's 13F filing window opens next month, revealing institutional holder shifts as of June 30. Any major custodian announcements — new qualified custody integrations or insurance expansions — could also redirect flows.

For now, the streak stands as the clearest signal of sustained institutional appetite since the ETF launch. Whether it reflects a structural shift from self-custody or routine portfolio management will take more than one exploit to resolve.