Form 8-K of October 26: what Datavault AI told the US securities regulator Nasdaq-listed Datavault AI Inc. filed a Form 8-K with the US Securities and Exchange Commission on October 26, 2026,
Nasdaq-listed Datavault AI Inc. filed a Form 8-K with the US Securities and Exchange Commission on October 26, 2026, reporting an event of October 20, 2026. The core of the filing: in June 2026 the company requested the withdrawal of Bitcoin from a wallet held at Biconomy Pte. Ltd., based in Singapore, to an external account. As of the date of the report, that withdrawal had not been completed according to the company. The filing states that the company was “unable to complete the withdrawal”.
The filing names no reason why the withdrawal did not come about. Neither does it state who is responsible. No public statement from Biconomy on the matter is available. Anyone reading this case therefore reads only one thing to begin with: a company's account of its own situation, given in a mandatory document to the securities regulator.
For investors in Germany the case is instructive all the same, whatever its outcome. It demonstrates a distinction that blurs in everyday use at every trading platform: the distinction between a figure shown in an account and a coin position someone actually controls. Bitcoin was quoted at $80,440, or 72,249 euros, on Wednesday afternoon (CoinGecko).
The word that matters in the document is "off-chain". According to the 8-K, the Bitcoin were credited to the account “through an off-chain transfer”, so by a transfer that took place outside the blockchain. Technically that means there was no transaction in the Bitcoin network leading from one address to another. There was an entry in a provider's internal database.
An off-chain transfer is any rebooking between two accounts at the same provider that its own bookkeeping system handles instead of sending it to the blockchain. That is nothing unusual and nothing wrong in itself: every large trading platform books purchases and sales between its customers this way, because it is faster and cheaper than a network transaction. The difference becomes visible only at the moment someone wants to pull the coins out.
A credit, after all, establishes a claim against the provider. A Bitcoin address to which only the holder has the private key establishes control. As long as everything runs smoothly, both states feel the same, because the app displays the same figure either way. Only the payout separates them.
A credit is an entry in a ledger. Whether a coin position sits behind it is shown only by the payout.
According to the 8-K, the process begins on September 25, 2025. On that day Datavault AI concluded a securities purchase agreement with Scilex Holding, which is also listed. Scilex undertook to acquire 15,000,000 shares and a pre-funded warrant over 263,914,094 shares. The consideration came to $150 million, payable in Bitcoin, set at a price of $112,915.52 per Bitcoin. That works out at around 1,328.43 Bitcoin.
Less than that was then credited. On September 26, 2025 and on November 25, 2025, according to the report, Scilex booked 1,309.04 Bitcoin to the wallet held at Biconomy, by off-chain transfer. The document explains the difference of 19.39 Bitcoin with cash advances that Scilex had granted the company between signing and final closing.
Between September 26, 2025 and January 30, 2026, Datavault AI sold 491.431 Bitcoin of that back to Scilex, for around $40.5 million in cash. That buy-back also ran off-chain, according to the report. Deducting it from the credited holding leaves 817.609 Bitcoin.
That figure is not undisputed. The quarterly filing as at March 31, 2026 showed 837 Bitcoin on the balance sheet, according to the industry outlet TFTC. The gap of around 19 Bitcoin between the two statements is not resolved in the publicly available documents. Only a range is therefore reliable: this concerns roughly 818 to 837 Bitcoin. At the price of October 28, 2026 that corresponds to a value of around $66 million to $67 million.
In June 2026 the company wanted to move the holding. According to the 8-K, it applied to withdraw Bitcoin from the wallet held at Biconomy to an external account. Four months later, at the date of the report, that process had by its own account still not been completed.
The document says no more about it. It names neither a justification from the provider, nor a date by which a resolution might be expected, nor the current state of any clarification. That gap belongs to the news and is not filled in here: what passed between the two sides does not emerge from the public documents.
The documented part suffices for the assessment. Between the first credit in September 2025 and the withdrawal attempt in June 2026 lie around nine months in which the holding stood in the books as an asset. On the record, it was not tested during that time whether it could also be pulled out.
The accounting consequence is in the same document. On October 20, 2026 the audit committee of the board and management concluded that four sets of financial statements should no longer be relied upon: the quarterly report for the third quarter of 2025 (filed November 14, 2025), the 2025 annual accounts (March 18, 2026), the quarterly report as at March 31, 2026 (May 15, 2026) and the quarterly report as at June 30, 2026 (August 19, 2026).
The reason is a question of attribution. On renewed review, the company concluded that the Bitcoin from the Scilex transaction did not meet the conditions for recognition as its own digital asset. Instead of an asset, the transaction is now booked as a receivable from the issue of its own shares, in technical terms a subscription receivable, and reported as a reduction of equity. For this the document refers to ASC 505-10-45-2 and to Rule 5-02.29 of Regulation S-X.
A receivable from a share issue is the amount a buyer still owes for newly issued shares. It does not sit on the asset side next to the bank balance; it reduces equity for as long as it is outstanding. In economic terms that means the company has issued shares and has so far received no consideration it can dispose of.
The report quantifies the expected corrections for each reporting date individually. Total assets accordingly fall by $8.1 million as at September 30, 2025, by $92.2 million as at December 31, 2025, by $57.1 million as at March 31, 2026 and by $49.0 million as at June 30, 2026. The company expressly describes this determination as preliminary and unaudited; it could still change in the course of the restatement.
The share reacted sharply. For October 27, 2026, industry outlets report a price decline; the figures range from just under 40 to around 50 percent in a single trading day. That range stands here because the sources differ.
Counterparty risk denotes the danger that the contractual partner fails to meet its obligation. Anyone leaving coins on a trading platform always bears that risk, however reliably the provider operates. The figure in the account is a claim against the company, and a claim is worth only as much as it can be enforced.
The phrase "not your keys, not your coins" means precisely this connection. It has become a cliché in the scene, yet it describes a tangible legal difference: with self-custody the private key lies with the holder, and nobody else can move the coins. With custody by a service provider the key lies there, and any movement depends on the provider executing it.
This is no argument against trading platforms. Without them hardly anyone would get hold of Bitcoin at all, and self-custody brings its own risks, foremost the irretrievable loss of the key. It is an argument for separating the two deliberately: the part that gets traded, and the part that stays put.
For providers addressing customers in the European Union, the Regulation on Markets in Crypto-Assets, MiCA for short, has applied since 2024. It requires authorisation as a crypto-asset service provider and attaches duties to that which bear precisely on the point at issue in this case.
Two points are central here. First, the segregation of customer holdings from the provider's own assets: customer crypto-assets are to be held separately so that they do not fall into the estate if the company gets into difficulty. Second, the custody and administration duties together with liability for the loss of customer crypto-assets. Both presuppose that there is a supervised body a customer can turn to at all.
A provider without EU authorisation is not automatically disreputable. It does stand outside this framework, however, and that changes the situation when something goes wrong. Anyone wanting to check which platforms hold the authorisation will find the current state in the national supervisor's register and in the ESMA register.
Authorisation is granted by the national supervisory authority, and the European Securities and Markets Authority, ESMA, brings together the registers of providers authorised under MiCA. A brand appearing in neither directory has no authorisation to show for the EU market. That check costs a few minutes and is more robust than any advertising promise on a landing page.
The way onto a platform is usually easy. What counts is whether the way out works just as reliably.
Since 2022 quite a few trading platforms have published a reserve attestation, known as proof of reserves. In it the provider demonstrates that it controls coins to a certain amount, usually via signed addresses or a third-party review, and sets the total of customer balances against that.
That is more than nothing, and it is less than the name promises. A reserve attestation is a snapshot at a reporting date. It shows holdings, but without an equivalent review of liabilities it says little about whether higher claims stand against those holdings. And it says nothing about whether an individual payout will actually be executed in case of doubt.
For precisely that reason, no attestation of this kind replaces the simplest test there is: actually withdrawing a small amount once and seeing whether it arrives. That test costs a network fee and delivers the only piece of information that counts when it matters.
This case changes nothing about the price. Bitcoin stood at $80,440 on Wednesday afternoon and was therefore practically unchanged against the previous day (CoinGecko). Datavault AI is a single company, and the holding concerned, around 818 to 837 Bitcoin, amounts to a vanishing share of the supply.
What does change is the urgency of a question many portfolios never face: is the holding sitting where it ought to sit? Anyone wanting to hold Bitcoin over years has different requirements from someone trading weekly. For the long-term part, self-custody via a dedicated device whose key never leaves it makes the case.
One point regularly causes hesitation in Germany: the worry that moving from the platform into your own wallet triggers tax. A transfer between two wallets of the same holder is no disposal, because no change of owner takes place. The holding period under Section 23 of the German Income Tax Act continues to run; it does not start afresh.
Documentation matters. Anyone transferring should record the acquisition date and acquisition cost per coin position in a way that can be evidenced later, because the platform no longer supplies that data automatically after a withdrawal. Aids for this are in our overview of crypto tax tools and portfolio trackers.
The Datavault AI case is not closed, and what stands between the company and the provider is not publicly clarified. What can be derived from it for your own portfolio does not depend on that.
The documents on the case are public: the Form 8-K report at the SEC and a presentation of the figures at TFTC.
(As of October 28, 2026. This article is not investment advice. Prices and fee structures change; check the terms with the provider before you buy.)
