“Against a backdrop of daily data leaks and a surge in kidnappings targeting crypto-asset holders, building such a database endangers the physical safety of millions of holders and their loved ones.”
Bull Bitcoin said it filed a summary petition before the Conseil d'État on Feb. 24, followed by a substantive legal brief outlining its arguments. The exchange said it intends to pursue “every legitimate avenue to suspend, delay, annul or amend the effects of DAC8 and its global counterpart, the CARF.”
The Crypto-Asset Reporting Framework (CARF) is a global crypto tax reporting framework developed by the Organisation for Economic Co-operation and Development (OECD) that provides a common standard for jurisdictions to collect and exchange information on crypto transactions.
Bull Bitcoin warns DAC8 leak could expose crypto holders
Under DAC8, crypto service providers must submit their first reports covering the 2026 calendar year by Sept. 30, 2027, after which tax authorities in EU member states will automatically exchange the information.
France implemented DAC8's crypto reporting rules through Decree No. 2025-1276, signed Dec. 19, 2025.
France has emerged as one of the countries most affected by so-called wrench attacks, in which victims are threatened or assaulted to force the transfer of digital assets. In April, RTL reported that French police had counted 41 crypto-related kidnappings since the start of 2026.
Wrench attacks increased by 75% in 2025 to 72 verified cases worldwide, according to cybersecurity company CertiK. France saw the most incidents during 2025, with 19 confirmed wrench attacks, while Europe accounted for roughly 40% of global incidents.
Bull Bitcoin’s warning also comes after major crypto firms have suffered customer data breaches. In May 2025, Coinbase said that less than 1% of its transacting monthly users were affected in an attack that may cost the exchange up to $400 million in reimbursement expenses.