exploit
Datavault AI (DVLT) can't withdraw BTC from Biconomy; stock halves, $92.2M to restate
Datavault's 8-K says a June 2026 bitcoin withdrawal from Biconomy never completed. Shares close down 49.6%; FY2025 total assets to be restated down $92.2M.
Datavault AI (Nasdaq: DVLT) filed an 8-K on October 26, 2026 disclosing that a June 2026 withdrawal of bitcoin held on the Biconomy exchange had not completed as of the filing date, and that the BTC previously carried on its books as a cryptocurrency asset must be reclassified as a subscription receivable from Scilex Holding. The restatement cuts reported total assets at December 31, 2025 by $92.2 million. DVLT closed Tuesday October 27 at $0.067, down 49.6% on roughly 250 million shares traded — about an eightfold volume spike. Reporting: CoinDesk, The Block. The 8-K is on EDGAR (accession 0001104659-26-118772).
What happened
- September 2025: Datavault signed a securities purchase agreement with Scilex Holding for 15 million common shares and a pre-funded warrant on more than 263.9 million shares, paid in bitcoin: $150 million notional, credited as roughly 1,328.43 BTC to a Datavault wallet at Biconomy Pte. Ltd. via off-chain book entry. No on-chain transfer took place.
- September 2025 to January 2026: Datavault sold part of the position back to Scilex for about $40.5 million cash.
- June 2026: Datavault requested a withdrawal to an external account. The withdrawal has not completed. The 8-K gives no reason; CoinDesk reports Biconomy had not responded to inquiries as of Wednesday afternoon in Asia.
- October 26, 2026: Datavault files the 8-K. Prior financial statements covering more than a year cannot be relied upon. Going-concern evaluation is being reassessed. No restatement timing is set.
Accounting mechanics
Because Scilex paid in BTC held at an exchange that has not released the funds, Datavault's auditors treat the balance as money owed by Scilex for the shares, not as a company crypto asset — a subscription receivable reducing stockholders' equity.
Restatement reductions in total assets per the 8-K:
| Period end | Reduction |
|---|---|
| Sep 30, 2025 | $8.1M |
| Dec 31, 2025 | $92.2M |
| Mar 31, 2026 | $57.1M |
| Jun 30, 2026 | $49.0M |
The size of the reduction varies with how much BTC Datavault had sold back to Scilex at each quarter-end, and the valuation of what remained.
Impact
- Operating liquidity: Datavault told the SEC it had been counting Biconomy-held balances as funds available to run the business. That assumption is now withdrawn.
- Public filers' BTC assumptions: DVLT is the latest Nasdaq-listed name whose "bitcoin treasury" turns out to be an exchange IOU rather than self-custodied coins. The 1,328 BTC credited by Scilex never left Biconomy; the credit was an internal book entry.
- Biconomy counterparty risk: The exchange's name is spelled inconsistently in the filing — including as "Bitconomy" — which does nothing to clarify who holds the keys.
What to watch
- Whether Biconomy publicly addresses the withdrawal, provides proof-of-reserves for the Datavault account, or files for any form of restructuring.
- Whether the SEC or Nasdaq opens an inquiry into Datavault's prior "bitcoin treasury" disclosures given the off-chain nature of the holding.
- The restated 10-K/10-Q filings and the auditor's language on going concern.
- Whether Scilex contests the receivable classification.
Context
Public companies that announce bitcoin on the balance sheet rarely disclose where the coins live. When the custodian is an exchange that credits off-chain balances rather than a qualified custodian producing on-chain attestations, the holding is a counterparty claim, not a bitcoin position. Datavault joins a line of filers whose treasuries turned out to be IOUs the moment the exchange stopped paying out — Celsius, FTX, and more recently several yield-platform depositors who found their claims subordinated in bankruptcy. The pattern argues for reading where the keys are before reading how big the headline number is.