Blog

Crypto exchange Kraken says it filed 56 million crypto-transaction forms with the U.S. Internal Revenue Service (IRS) for the 2025 tax year. Roughly 18.5 million of them covered transactions worth less than $1, and over half were for $10 or less.

Only 8.5% of the newly introduced Form 1099-DAs cleared $600, the threshold that triggers reporting for non-employee compensation, and 74% were for less than $50, the company said in a Wednesday blog post.

Each form is also sent to the customer and creates a reconciliation task for the taxpayer who receives it. On top of that, standard tax software does not handle crypto transactions. Kraken estimated the additional burden on an active crypto holder at $250-$500 a year for dedicated tax software, on top of standard filing costs.

“The hours taxpayers spend reconciling these micro-transactions, often with incomplete data, generate costs wildly disproportionate to any revenue the IRS will collect from them,” Kraken said.

The Tax Foundation estimates individual returns already cost Americans a combined $146 billion in time and expenses, the exchange said, and the National Taxpayers Union Foundation puts the average time for non-business filers at about 13 hours and $290 per return.

Brokers reporting for 2025 provide gross proceeds without cost basis, meaning the form shows what was sold, but not what it was bought for. Kraken said it fielded thousands of client questions about forms that captured only one side of the calculation.

Two problems

Kraken pointed to two parts of the tax code that cause problems. One is the lack of a de minimis, or low-level, exemption for crypto payments, which means even small purchases with crypto can trigger a taxable event that needs to be declared.

“Imagine you walk into a Steak ’n Shake and pay for a $7.99 meal with Bitcoin through a payment app. You have triggered a taxable event,” Kraken wrote as an example. “You are technically required to look up the cost basis of the specific Bitcoin you spent, calculate whether you had a gain or loss on that fraction of a coin, and report it on Form 8949.”

That’s the same argument libertarian think tank Cato Institute recently made. According to the institute, buying a cup of coffee every day with BTC “can result in over 100 pages of tax filings.”

The second issue is staking. Rewards earned on staked assets are treated as ordinary income at the moment of receipt, based on the token’s market price that day. Most holders keep those tokens instead of selling them, meaning they owe tax on tokens that haven’t been sold.

If the token price falls between receipt and filing, the tax can exceed the asset’s current value. Kraken calls this phantom income and says a large share of the sub-dollar 1099-DAs it issued were staking distributions.

Legislation moving through Congress includes a de minimis provision, but is limited to stablecoins. Kraken is pushing for a broader inflation-indexed exemption, paired with anti-abuse guardrails to prevent structuring.

The exchange is also asking Congress to let taxpayers elect when staking rewards are taxed, either at receipt under current rules or at sale, when a gain or loss is realized.

Kraken says its systems and those of other exchanges already support both reporting methods, but the choice needs to be authorized.

The North Korean state-run Lazarus Group is running a new campaign known as “Mach-O Man” that turns routine business communication into a direct path to credential theft and data loss, security experts warned Wednesday.

The collective, with cumulative loot estimated at $6.7 billion since 2017, is targeting fintech, cryptocurrency and other high-value executives and firms, Natalie Newson, a senior blockchain security researcher at CertiK, told CoinDesk on Wednesday.

In the past two weeks alone, the North Korean hackers have siphoned more than $500 million from the Drift and KelpDAO exploits in what appears to be a sustained campaign. The crypto industry needs to start viewing Lazarus the same way banks view nation-state cyber actors: “as a constant and well-funded threat, not just another news headline,” she said.

“What makes Lazarus especially dangerous right now is their activity level,” Newson said. “KelpDAO, Drift, and now a new macOS malware kit, all within the same month. This isn’t random hacking; it’s a state-directed financial operation running at a scale and speed typical of institutions.”

North Korea has turned crypto theft into a lucrative national industry, and Mach-O Man is just the latest product from that process, she said. While Lazarus created it, other cybercrime groups are also using it.

“It is a modular macOS malware kit created by Lazarus Group’s infamous Chollima division. It uses native Mach-O binaries tailored for Apple environments where crypto and fintech operate,” she said.

Newson said Mach-O Man uses a delivery method known as ClickFix. “It’s important to be clear because a lot of coverage is mixing up two separate things,” she noted. ClickFix is a social engineering technique where the victim is asked to paste a command into their terminal to fix a simulated connection issue.

It works by Lazarus sending executives an “urgent” meeting invite over Telegram for a Zoom, Microsoft Teams or Google Meet call, according to Mauro Eldritch, a security expert and founder of threat intelligence firm BCA Ltd.

The link leads to a fake, but convincing, website that instructs them to copy and paste one simple command into their Mac’s terminal to “fix a connection issue.” In doing so, the victims provide immediate access to corporate systems, SaaS platforms and financial resources. By the time they find out they were exploited, it is usually too late.

There are several variations of this attack, security threat researcher Vladimir S. said on X. There are already cases where Lazarus attackers have hijacked decentralized finance (DeFI) projects’ domains with this new malware by replacing their websites with a fake message from Cloudflare, asking them to enter a command to grant access.

“These fake ‘verification steps’ guide victims through keyboard shortcuts that run a harmful command,” said Certik’s Newson. “The page looks real, the instructions seem normal, and the victim initiates the action themselves — which is why traditional security controls often miss it.”

Most victims of this hack will not realize their security has been breached until the damage has been done, at which time, the malware will have already erased itself as well.

“They likely don’t know it yet,” she said. “If they do, they probably can’t identify which variant affected them.”

Memecoin season keeps printing life-changing trades for people willing to take a shot.
An anonymous wallet bought 2.79 billion ASTEROID tokens for $575 on April 17 and sold the entire position for 503 ETH on Tuesday, worth roughly $1.17 million, according to on-chain tracker Lookonchain. The round trip took five days and produced a return of more than 2,000x.

ASTEROID is an Ethereum-based memecoin branded as “First Shiba In Space.” It is themed after a Shiba Inu drawing by Liv Perrotto, a teenage cancer patient who died in January 2026 after a five-year battle with the disease.

Two years before her death, Perrotto sketched the dog while serving as a volunteer on SpaceX’s Polaris Dawn ground support team. The design, inspired by Musk’s own Shiba Inu named Floki, flew on the Polaris Dawn mission in September 2024 as the crew’s zero-gravity indicator.

Before she passed, Perrotto had written down eight questions she hoped to ask Musk. The final one asked whether Asteroid could become SpaceX’s official mascot. Her mother shared the list publicly after her death, and media personality Glenn Beck amplified it on April 16. The post went viral, reached Musk, and he said “ok” in response to making Asteroid the official SpaceX mascot.

That response ignited the token. ASTEROID’s market cap ran from roughly $50,000 to more than $20 million within hours of Musk’s reply, then pushed past $100 million over the following days on more than $100 million in 24-hour trading volume.

At its peak the token briefly entered the top 200 cryptocurrencies by market cap. As of European morning hours on Wednesday, it trades at $0.0004435 with a $186.5 million market cap and $24 million in 24-hour volume.

The token has no formal SpaceX endorsement, no licensing arrangement, and no confirmed Musk involvement beyond the social media replies.

It trades on Uniswap against wrapped ether with a market cap of $186.5 million and 24-hour trading volume of $24.3 million. Price is up 20.69% over 24 hours, 28.54% over six hours, and has climbed about 10x from the wallet’s entry point on April 17, according to DEX Screener data.