Datavault AI (NASDAQ: DVLT) stock fell 49.55% on October 27, 2026, after a Form 8-K filed with the SEC disclosed that 817.64 BTC — booked on the company's balance sheet as a digital asset — cannot be withdrawn from Singapore-based exchange Biconomy Pte. Ltd., where it has been frozen since June 2...
"People shouldn't have to trust that their bitcoin is there, they should be able to verify it." — Block Inc., announcing its proof-of-reserves dashboard, April 2026
Datavault AI (NASDAQ: DVLT) stock fell 49.55% on October 27, 2026, after a Form 8-K filed with the SEC disclosed that 817.64 BTC — booked on the company's balance sheet as a digital asset — cannot be withdrawn from Singapore-based exchange Biconomy Pte. Ltd., where it has been frozen since June 2026. The company's audit committee concluded that the bitcoin never qualified as Datavault's own asset under GAAP, forcing a restatement that cuts reported assets by $92.2 million at year-end 2025 and $49 million as of June 2026. Four consecutive financial statements — Q3 2025, FY 2025, Q1 2026, and Q2 2026 — can no longer be relied upon.
The episode is not an exchange hack. No private keys were compromised. No smart contract was exploited. The failure is structural: a Nasdaq-listed company accepted $150 million in bitcoin via off-chain transfer into a custodial wallet it did not control, recorded the balance as its own asset, and discovered months later that it could not move the coins. This case crystallizes the counterparty risk embedded in corporate bitcoin treasury strategies — a category that now encompasses roughly 200 public companies holding over 1.26 million BTC collectively, according to industry trackers.
In September 2025, Datavault AI entered a securities purchase agreement with Scilex Holding Company (NASDAQ: SCLX). Scilex agreed to purchase $150 million worth of Datavault shares and warrants, paying in bitcoin. Between September and November 2025, Scilex transferred 1,309.04 BTC to a Datavault account at Biconomy via off-chain credits — meaning the balances changed within the exchange's internal ledger rather than through verifiable transactions on Bitcoin's blockchain.
This distinction matters. An on-chain transfer moves bitcoin from one address to another, producing an immutable, publicly auditable record. An off-chain, intra-exchange transfer merely updates a database entry within the exchange's systems. The recipient sees a balance, but the exchange retains actual custody of the private keys.
Datavault subsequently sold 491.4 BTC back to Scilex for approximately $40.5 million in cash, leaving 817.64 BTC nominally in its Biconomy account.
In June 2026, Datavault requested a withdrawal of its remaining bitcoin from Biconomy to an external wallet. As of the October 26 SEC filing, the withdrawal remained incomplete. The company provided no explanation for why the transfer failed, when access might be restored, or whether Biconomy had communicated a reason for the freeze.
Biconomy Pte. Ltd. is a Singapore-based cryptocurrency exchange that is not registered or regulated by any major financial authority, according to third-party reviews. The exchange's Trustpilot page shows numerous user complaints about frozen accounts and pending withdrawal requests. The filing did not establish whether Biconomy lacks the bitcoin to fulfill the withdrawal, is withholding it due to a dispute, or faces operational or regulatory constraints.
The result: a Nasdaq-listed company has $65 million in bitcoin on its books (at current prices) that it cannot move, sell, or verify on-chain.
On October 20, 2026, Datavault's management and audit committee concluded that the bitcoin credited through Scilex's $150 million investment should not have been recorded as a digital asset. Under GAAP, an asset must be controlled by the reporting entity. Datavault never held the private keys to the bitcoin. The coins sat in Biconomy's custody, credited via internal ledger entries that Datavault could not independently verify on the Bitcoin blockchain.
The restatement reclassifies the bitcoin as a subscription receivable — essentially, an amount owed by Scilex that was never properly delivered. The financial impact:
All four filings were declared non-reliant. The stock, which had already been declining, dropped from $0.13 to $0.067 in a single session — a 49.55% decline.
Datavault is a micro-cap company, but its failure mode is not unique to small firms. The corporate bitcoin treasury sector has expanded to approximately 200 public companies holding over 1.26 million BTC — more than 6% of Bitcoin's 21-million-unit cap — worth roughly $100 billion at current prices, according to mid-2026 data from industry trackers.
The sector is under pressure. A September 2026 report from DWF Ventures found that 16 of the 20 largest digital asset treasury companies by assets under management now trade below modified net asset value (mNAV). The market, which once paid 1.5x to 3.4x for leveraged crypto exposure through listed companies, now demands discounts. Strategy (NASDAQ: MSTR), the template for the category with approximately 847,363 BTC, saw its mNAV fall below 1.0 for the first time in June 2026, standing at approximately 0.98 as of October 8.
In July 2026, Strategy sold 3,588 BTC to fund preferred dividends — a reminder that debt-funded treasury strategies require cash on schedule even when the underlying asset does not generate yield.
Corporate bitcoin holders operate under several custody models, each with distinct risk profiles:
Qualified custodian (e.g., Coinbase Custody, Anchorage Digital, BitGo): Assets are segregated but legally sit on the custodian's books. In a custodian insolvency, recovery would proceed through bankruptcy courts. Insurance policies cover specific scenarios, not the full risk surface.
Exchange custody (e.g., Biconomy, Binance, Kraken): The company holds a balance on an exchange. The exchange controls the private keys. The user has a contractual claim, not cryptographic control. This is what Datavault used.
Self-custody (multisig): The company holds its own keys, typically in a multi-signature configuration requiring, for example, 3-of-5 key holders to authorize a transaction. This eliminates the custodian as a counterparty but introduces operational complexity and key-management risk.
Hybrid (custodian + on-chain verification): Chainlink launched CustodySync on October 26, 2026, with Anchorage Digital as its first partner, allowing institutions to verify custodied balances on-chain via Chainlink Proof of Reserve while keeping assets in qualified custody. This model addresses verification without requiring self-custody.
The Datavault case falls into the second category — exchange custody without on-chain verification. The company relied entirely on an unregulated exchange's internal ledger to confirm possession of a $92 million asset.
The mechanism that could have prevented Datavault's accounting error — or at least flagged it earlier — is on-chain proof of reserves. In April 2026, Block Inc. launched a public proof-of-reserves dashboard covering its 8,883 BTC corporate treasury (valued at approximately $681 million at launch) and 19,357 BTC held on behalf of Cash App and Square customers. The system uses on-chain cryptographic signatures to prove that Block actively controls the wallets it claims to hold.
Block's Q1 2026 report disclosed total holdings of 28,355 BTC across both customer and corporate accounts, representing a combined value of approximately $2.2 billion.
However, the industry's largest holder has not adopted the practice. Strategy executive chairman Michael Saylor flagged proof-of-reserves as a potential security risk in May 2025, arguing that publishing wallet addresses exposes sensitive transaction data. Strategy has not issued any proof-of-reserves attestation.
The gap is quantifiable. Of the roughly 200 public companies holding bitcoin on their balance sheets, fewer than a dozen provide any form of on-chain reserves verification. The remaining 190+ ask investors to trust exchange statements, custodian confirmations, or auditor attestations that may themselves rely on exchange-provided data — the same chain of trust that failed at Datavault.
Since fiscal years beginning after December 15, 2024, all U.S. GAAP reporting entities must account for qualifying crypto assets at fair value under ASU 2023-08 (codified as ASC 350-60). Companies must disclose the name, cost basis, fair value, and number of units for each significant crypto holding. Changes in fair value flow through net income each reporting period.
The standard improved transparency over the prior cost-less-impairment model. But ASU 2023-08 addresses valuation, not verification. It requires companies to disclose how much bitcoin they hold and what it is worth. It does not require them to prove they control the bitcoin — that is, that they hold the private keys or can execute an on-chain withdrawal on demand.
Datavault met the disclosure requirements of ASU 2023-08. It reported its bitcoin holdings at fair value. It disclosed quantities and cost bases. The problem was upstream: the bitcoin it disclosed was never under its control. The standard did not catch this because it was not designed to.
This creates an asymmetry. Investors in corporate bitcoin treasuries can now see mark-to-market gains and losses in real time, but they cannot verify whether the reported asset is under the company's control, sitting at a qualified custodian, or frozen at an unregulated exchange in Singapore.
The Datavault AI case is a $92 million lesson in the difference between a balance and an asset. A number on an exchange's internal ledger is a claim. Bitcoin under your own keys — or verifiably held by a regulated, attested custodian — is an asset. The distinction is not philosophical. It is the difference between a balance sheet that reflects reality and one that requires a four-quarter restatement.
The corporate bitcoin treasury sector has scaled to 1.26 million BTC across 200 public companies. The accounting framework (ASU 2023-08) addresses valuation. The custody verification framework — proof of reserves, on-chain attestation, qualified custodian requirements — remains voluntary, fragmented, and adopted by a single-digit percentage of participants. Until the gap closes, investors in bitcoin treasury stocks are pricing an asset whose existence they cannot independently verify.