Bitcoin is sitting just above $78,000 after August's 24% run, with ETFs pulling in $217 million on Monday as BlackRock's IBIT does most of the heavy lifting. Mistral just lined up five of Europe's biggest companies to prepay for compute that doesn't exist yet. Anthropic and OpenAI are both racing to let their agents click buttons on your behalf inside real websites. And Strategy ended a 10-week buying pause with a $370 million Bitcoin purchase. Let's get into it.
Mistral pulled off something interesting last week, and I'm still not sure whether to call it brilliant or reckless. They announced European Compute Units, which is basically a forward sale of data center capacity that hasn't been built yet. ASML, Amadeus, Capgemini, Caisse des Dépôts, and CMA CGM all signed on as anchor customers. Five CEOs, on stage, committing to a five-year lockup with no early exit, paying now for compute that will come online later.
The target is up to 1 GW of capacity by 2030, with about 200 MW by the end of 2027. The first facility is 44 MW near Paris, funded by an $830 million loan. There's talk of a 1.4 GW campus starting in 2028. Microsoft threw in money for Nvidia chips, deliberately without taking equity. And Mistral has not disclosed pricing, exact capacity per customer, or delivery dates. The commitments are, as far as we can tell, verbal handshakes from executives.
And yet, this isn't happening in isolation. Mistral also signed a hundreds-of-millions-of-euros deal with HUMAIN in Saudi Arabia to build sovereign AI infrastructure there, with a focus on Arabic frontier models, cybersecurity, and voice. And separately, BNP Paribas is working with Mistral on a European answer to Anthropic's Mythos, that restricted cybersecurity model US banks get access to and European banks don't.
What's really being sold here is sovereignty. Europe watched Anthropic gate Mythos, watched the Brussels negotiations stall, and decided the answer isn't better diplomacy, it's owning the stack. Compute, models, jurisdiction, all of it. The forward-sale structure is clever because it transfers delivery risk to the buyers while financing the build. But it also means five of Europe's most important companies are now materially invested in Mistral not screwing this up. That's either a moat or a hostage situation, depending on how the next 24 months go.
Two big shifts in agentic AI this week, and they both cross the same threshold: agents are no longer just reading the web, they're logging into it as you.
Anthropic rolled out Claude Cowork with a built-in browser inside the desktop app. It's separate from your Chrome or Firefox, doesn't touch your tabs or passwords, but you can migrate logins over. It's rolling out to Pro, Max, and Team plans this week. Claude in Chrome also went generally available.
OpenAI countered with authenticated website access in ChatGPT Work. When the agent hits a login wall, it pauses, prompts you for credentials through a secure form, and those credentials go directly to a remote cloud browser, not the model. Sessions persist. The agent can now book DMV appointments, check reimbursements, set up utilities, submit forms inside your accounts.
Here's the part nobody's really answering yet. When an agent clicks submit on a form inside your bank account, what actually happened? There's a good piece making the rounds arguing that the security question isn't preventing prompt injection, it's producing verifiable evidence of what the agent did. A cryptographic receipt at the moment of action, signed, with the exact tool call, arguments, identity, and authorization scope. Something an auditor or regulator can check without touching production systems.
And we're already seeing the attack surface open up. There's a fake Claude desktop app in circulation right now spreading malware called RevStealer, which targets more than 50 crypto wallets along with browser passwords and cookies. So the same week Anthropic ships a real built-in browser, attackers ship a fake one that empties your wallet. The agents are getting more capable faster than the verification layer around them. That gap is where the next few years of security incidents are going to live.
Something quietly significant is happening in Bitcoin custody. For the first time in about 15 years, self-custody is declining. Bloomberg cited data showing fewer coins held outside exchanges and funds, and the driver is BlackRock's IBIT. By late 2025, IBIT had facilitated over $3 billion in Bitcoin deposits via in-kind ETF creation, which lets holders swap their coins for shares without triggering capital gains. It's a tax-efficient off-ramp from cold storage into Wall Street's custody stack.
Now, self-custody is still enormous. Roughly 13.83 million BTC, about 66% of supply, worth around $1.09 trillion, remains in non-custodial wallets. But the direction of travel is what matters. And the SEC is about to make it easier. A crypto custody rule proposal went to the White House's OIRA for review on August 25. Publication is expected by October, followed by a 60-day comment period. If it lands the way people expect, it opens the door to banks, broker-dealers, and crypto-native firms all offering qualified custody under a modern framework.
Meanwhile, on the other end of the ideological spectrum, the ecash world keeps quietly shipping. Macadamia Wallet launched bearer ecash transfers on iPhone for EU users. It's the first fully native iOS wallet built on Cashu, with iMessage integration, NFC tap-to-pay, and multi-mint support. Whoever holds the tokens owns the value. No identity, no KYC, settlement back to Bitcoin over Lightning when you melt the tokens.
So you have two futures unfolding in parallel. Whales exiting into IBIT shares because it's cleaner for taxes and estate planning. And a small but real cohort building actual digital cash on iPhones in Europe. Both are Bitcoin. Neither one is going away. But the center of gravity, in dollar terms, is clearly moving toward Wall Street.
The ETF picture right now is basically the IBIT show. Last week, global crypto fund inflows hit $3.2 billion, the biggest week since October 2025. US spot Bitcoin ETFs took in about $1.92 billion of that, and BlackRock's IBIT captured roughly 68 to 69% of the Bitcoin flows. On August 27, IBIT pulled in $277.6 million on a day when the entire spot Bitcoin ETF market netted $242.3 million. Every other fund combined lost $35 million. IBIT alone was 115% of the market's net inflows that session.
Over a nine-session run starting August 17, IBIT delivered about $2.3 billion of the total $3.05 billion in Bitcoin ETF inflows. IBIT now manages around $62 billion in assets. The entire US spot Bitcoin ETF category is around $101 billion. So one product is more than 60% of the entire regulated Bitcoin ETF market in the United States.
And Strategy is back. After a 10-week pause, Michael Saylor's company bought 4,603 Bitcoin for $369.7 million between August 24 and 30. That brings holdings up, and the purchase was funded by selling 4.53 million MSTR shares, which netted $602.8 million. The proceeds got split between Bitcoin, STRC buybacks, and cash. Strategy also spent $635 million buying back STRC because the perpetual preferred is trading at $97.34, below its $100 par value. Meanwhile, Strive bought 1,800 Bitcoin for $143 million and is now the fifth-largest public corporate holder at 23,156 BTC.
The concentration risk is real. If IBIT sneezes, the whole ETF narrative catches a cold. But zoom out and you have institutional buyers, corporate treasuries, and preferred-stock financial engineering all pointing the same direction. September has historically been brutal for risk assets, and traders are already calling it Rektember. But the buying structure underneath this rally looks different from previous cycles. Less retail, less leverage, more balance sheet.
Watch what Europe does with Mistral over the next 18 months. If those forward compute contracts actually deliver working sovereign infrastructure, the model gets copied. If they don't, five CEOs have some very awkward board meetings ahead.