Legislative Momentum Builds: Lummis Unveils Standalone Crypto Tax Bill

The turbulent intersection of digital assets and US policy saw a significant leap forward today as Senator Cynthia Lummis (R-WY), long recognized as one of Congress’s most vocal crypto advocates, introduced a dedicated crypto tax bill targeting many of the industry’s legislative pain points.

The proposed bill aims to modernize taxation related to digital assets, addressing the current lack of clarity that has left investors, miners, and companies in a perpetual gray zone. Key provisions include:

• De minimis exemption: Digital asset purchases and capital gains up to $300 per transaction would be exempt from taxation, with an annual cap set at $5,000. This exemption could make smaller everyday crypto payments more practical and attractive.
• Deferral of tax on mining/staking rewards: Taxes on cryptocurrency obtained through mining or staking would be deferred until the assets are sold, addressing long-standing complaints about “phantom income” and unexpected tax burdens.
• Exemptions for charitable contributions: Donating digital assets to recognized charities would become easier and more tax-efficient, as these contributions would be exempt from immediate taxation.
• Exemption for crypto lending: Crypto deployed in lending agreements would not be subject to immediate capital gains tax.

Senator Lummis stated, “This groundbreaking legislation is fully paid for, cuts through bureaucratic red tape, and establishes common-sense rules that reflect how digital technologies function in the real world. My legislation ensures Americans can participate in the digital economy without inadvertent tax violations.”

The legislative move comes after crypto provisions were excluded from the most recent US Senate budget package, frustrating industry stakeholders. Recent analysis by PwC notes that more than 45 million Americans have engaged with cryptocurrencies, yet the Internal Revenue Service (IRS) guidance remains limited and, at times, confusing. Clearer regulations such as those proposed in this bill may foster further adoption and help the US maintain its lead in Web3 innovation as Europe and Asia also advance their crypto compliance regimes.

Security Under Attack: Malicious Firefox Extensions Target Crypto Users

In parallel to regulatory advances, the crypto sector continues to face significant cybersecurity threats. Recent research from cybersecurity firm Koi Security revealed a widespread and ongoing phishing campaign exploiting Mozilla Firefox browser extensions.

Over 40 fake extensions—designed to mimic trusted wallet tools such as MetaMask, Coinbase Wallet, Trust Wallet, Phantom, Exodus, OKX, MyMonero, and Bitget—have been identified. These malicious extensions were engineered with the specific intent of harvesting wallet credentials and siphoning user funds.

“So far, we were able to link over 40 different extensions to this campaign, which is still ongoing and very much alive,” Koi Security reported. Some of the fraudulent extensions were uploaded as recently as last week.

Once installed, the malware-laden extensions quietly intercept credentials when users interact with cryptocurrency-related websites, transmitting sensitive data to attacker-controlled servers. The campaign appears active since at least April 2024 and is evolving rapidly, with new variants targeting naive and experienced users alike.

Global losses to phishing and malware attacks in crypto surpassed $700 million in 2023, according to SlowMist. The persistence and sophistication of this latest campaign highlight the urgent need for vigilance, better browser store curation, and enhanced user education. Experts recommend always downloading extensions from official sources, enabling two-factor authentication, and regularly auditing permissions. Mozilla and other browser vendors are working swiftly to remove the offending add-ons and notify potentially affected users.

Regulatory Milestone: Ripple Labs Pursues US National Bank License

In a pivotal movement for mainstream crypto acceptance, Ripple Labs officially revealed it is pursuing a national banking license in the United States. The announcement came via CEO Brad Garlinghouse’s post on the social platform X (formerly Twitter), following exclusive reporting by The Wall Street Journal.

The move follows similar regulatory ambitions by stablecoin giants like Circle Internet Group, evidencing a race among major crypto firms to integrate with traditional financial infrastructure under federal oversight. If approved by the Office of the Comptroller of the Currency (OCC), a national bank charter would allow Ripple to operate much like established banks—holding deposits, engaging in payments, and offering crypto-related banking products directly to US customers, subject to rigorous federal and state regulations.

Ripple has long been at the center of regulatory discussions, especially over the status of its XRP token. In 2023, a partial legal victory against the US Securities and Exchange Commission (SEC) provided the company with momentum to expand its services. The new charter would also cover Ripple’s USD RLUSD stablecoin, already approved by the New York Department of Financial Services. Garlinghouse emphasized that the license would set a “unique benchmark for trust in the stablecoin market” and strengthen consumer protections.

According to market analysts, the entry of licensed crypto-native banks would help bridge the gap between decentralized finance (DeFi) innovations and legacy banking systems, potentially unlocking broader institutional adoption and signaling regulatory acceptance. Recent data from Galaxy Digital shows US-based stablecoins and crypto payment rails facilitating more than $2 trillion in transactions in Q1 2024 alone—a figure expected to accelerate with further regulatory clarity and banking involvement.

Conclusion: Crypto Maturation Accelerates on All Fronts

The complex world of crypto continues to mature, both legislatively and operationally. As the US Senate debates progressive tax reforms and companies like Ripple strive for legitimacy under the national banking framework, persistent threats such as phishing and wallet credential theft remain pressing challenges. Increased regulation, proactive security measures, and user education must evolve together to ensure sustainable, trustworthy growth.

For investors, developers, and users alike, the convergence of legislative progress, tighter security practices, and mainstream banking integration signals a rapidly approaching new era for the digital asset ecosystem—one where innovation, protection, and regulation work in tandem.