Bull Bitcoin challenges French court ruling on DAC8 decree

Bull Bitcoin appeals against France\'s implementation of new EU cryptocurrency tax reporting rules

Bull Bitcoin has filed a request with the French Supreme Administrative Court (Conseil d\'État) to overturn France\'s relevant rules to implement the EU DAC8 cryptocurrency tax reporting framework. The trading platform believes the system could create a large centralized database that correlates people\'s legal identities and addresses to their cryptocurrency transactions-a result it says could increase personal safety risks for cryptocurrency holders.

DAC8 will be implemented from January 1, 2026, requiring eligible crypto service providers to collect customer identities and transaction details and then report them to the French tax authorities. Under the directive\'s information exchange model, these tax authorities will automatically share information with their counterparts in EU member states.

Core Points

Bull Bitcoin has filed a petition with France\'s Supreme Administrative Court challenging France\'s implementation of DAC8, arguing that it could lead to the creation of a \"massive database\" containing identity and address-related transaction data. France implements DAC8 through Decree No. 2025-1276 signed on December 19, 2025, and the relevant rules will take effect on January 1, 2026. According to DAC8, the first reports covering the 2026 calendar year must be submitted by September 30, 2027, after which time EU institutions will automatically exchange data. Bull Bitcoin said it filed a summary petition on February 24, followed by a substantive legal opinion, and hoped that the effects of DAC8 and the OECD\'s Global CARF Framework would be suspended, postponed, repealed or revised. The trading platform\'s appeal highlights concerns about data security incidents and criminal activity against cryptocurrency holders, including \"wrench attacks.\"

Why does Bull Bitcoin challenge DAC8 in France?

In announcing the petition, Bull Bitcoin positioned its legal action as a response to what it believed was an avoidable concentration of sensitive information. The trading platform said DAC8 could effectively link legal identity and home address to cryptocurrency transaction history, including transfers that may not be directly related to tax obligations. Bull Bitcoin also links its challenges to broader security and security issues. In its statement, it warned that establishing such a dataset is dangerous to the personal safety of cryptocurrency holders, especially given the industry\'s past data-related incidents and the increase in kidnappings of people believed to hold cryptocurrency assets. Legally, Bull Bitcoin said it first filed a summary petition on February 24 and later filed a substantive legal opinion setting out its arguments. The platform said it plans to pursue \"all legal avenues\" to gain court intervention-specifically requiring the ability to suspend, postpone, repeal or modify the effectiveness of DAC8 in France and its global counterpart framework (OECD\'s CARF).

DAC8 reporting schedule and data exchange mechanism

The trading platform\'s cases are within a specific implementation timetable. Under DAC8, encryption service providers must submit initial reports covering the 2026 calendar year by September 30, 2027. After the initial declaration, tax authorities of EU member states will automatically exchange the reported information. France\'s role in this system is crucial because it has promulgated one implementing measure: Decree No. 2025-1276 signed on 19 December 2025. With DAC8 coming into effect on January 1, 2026, the reporting process is moving from the planning stage to the actual data collection stage-which means the trading platform\'s challenges come at a time when compliance steps may be being concretized. Bull Bitcoin\'s argument not only emphasizes the way the report is structured, but also what information exchange might mean in practice. If records of identity-related transactions are compiled and shared across borders, the damage that any data breach (intentional or unintentional) may cause will extend beyond the scope of individual service providers or jurisdictions.

Alignment of CARF and OECD\'s role in global reporting

Bull Bitcoin\'s petition also explicitly mentions CARF, the \"Cryptographic Asset Reporting Framework\" developed by the Organization for Economic Co-operation and Development (OECD). Although DAC8 is EU-specific, CARF aims to provide a common reporting standard so that jurisdictions can collect and exchange information on crypto-related activities in a similar manner. This connection is at the heart of Bull Bitcoin\'s stated goal. The platform said it not only targets the direct impact of DAC8, but also challenges what it calls the \"global correspondence framework\" under CARF. For investors and users, the practical implication is that a legal battle in France may be relevant to how other countries interpret or apply similar reporting expectations-especially if CARF-based systems are widely adopted.

Linking regulatory data flows to wrench attacks and disclosure risks

Bull Bitcoin\'s warning draws a clear line between compliance reports and escalating criminal pressure against cryptocurrency holders. The platform pointed out that France is one of the countries most affected by the \"wrench attack\", in which victims are threatened or attacked and forced to transfer digital assets. Bull Bitcoin\'s concerns are also related to the risk of customer data leakage faced by the industry. The platform provides an example to highlight the possible consequences of any large-scale collection of sensitive records. The core contradiction of Bull Bitcoin\'s argument is simple: Tax transparency measures require identification details and transaction information, but the platform believes that if data protection fails-or simply the existence of identity-linked reports makes targeting more efficient-then the same capabilities could be exploited by criminals.

With Bull Bitcoin\'s case now before the French Supreme Administrative Court, the key issue facing market participants is how the court weighs tax enforcement goals with privacy, security and proportionality concerns. Before the court makes a ruling and any possible interim measures, close attention should be paid to the development of the pace of progress of the French compliance reporting process and whether similar challenges may arise in other parts of the EU as DAC8 enforcement continues.