The application of new European tax rules on cryptocurrencies is already causing protests in France. The non-custodial exchange platform Bull Bitcoin has initiated proceedings before the Council of State to request the annulment of the French decree which applies the DAC8 directive. The company believes that this reporting system could expose users to surveillance and security risks. According to her, the consequences would go far beyond the tax framework and could concern nearly 135 million Bitcoin holders in Europe.
In brief
- Bull Bitcoin has contacted the Council of State to request the annulment of the French decree applying the DAC8 directive.
- The platform believes that DAC8 creates a sensitive database linking users' identities to their cryptocurrency transactions.
- The first reports imposed by DAC8 must be sent to the tax authorities before September 30, 2027.
- Bull Bitcoin warns of the risks of data leaks, in a context marked by the increase in cyberattacks and kidnappings linked to cryptocurrencies.
- This procedure could become a first major legal test of the application of DAC8 in France.
Bull Bitcoin attacks French decree before the Council of State
Bull Bitcoin announced that it had seized the Council of State in order to annul the French decree implementing the new reporting obligations for crypto-assets, resulting from the transposition of the European directive DAC8. The platform indicated in a press release having filed a summary motion on February 24, before sending a legal brief detailing its arguments. It specifies that it wants to use all available remedies to suspend, delay, modify or cancel the effects of this regulation which transforms the “Know Your Customer” to “Kill Your Customer” according to the company.
We cannot allow this invasion of privacy to shake the very foundations of civilization. We must draw a red line and refuse any further concessions before it is too late. It is imperative that someone takes a stand. However, it appears that no one else is willing or able to do this. It is therefore up to Bull Bitcoin to lead this fight.
Francis Pouliot, CEO of Bull Bitcoin. Source: company press release.
Bull Bitcoin considers that the new obligations imposed on digital asset service providers go well beyond tax-related needs. She believes that the systematic collection of identity data and transaction information could lead to the creation of a vast database linking legal identities to addresses used for transactions. She believes that this centralization represents a significant risk for holders of Bitcoin and other cryptocurrencies.
The platform also highlights that this risk occurs in a context marked by large-scale data breaches in the sector. She recalls in particular that in May 2025, Coinbase had noted that a cyberattack had affected less than 1% of its monthly active users, with a potential cost of up to $400 million in refunds.
DAC8 requires automatic sharing of tax data
Entered into force on January 1, 2026, DAC8 requires providers of cryptocurrency-related services to collect their users' identity information as well as their transaction data. The companies concerned will then have to automatically transmit this information to national tax authorities, who will share it with their counterparts in other Member States of the European Union.
France has integrated the DAC8 into its national law thanks to decree nᵒ 2025-1276signed on December 19, 2025. The first reports covering the calendar year 2026 must be submitted before September 30, 2027. After this deadline, European tax administrations will begin to automatically exchange the information collected.
Bull Bitcoin also criticizes the articulation between DAC8 and the Crypto Asset Reporting Framework (CARF), developed by the Organization for Economic Cooperation and Development. According to the platform, these two systems are gradually strengthening international exchanges of data relating to cryptocurrency transactions. She believes that this development increases the risks in the event of a leak of sensitive information.
Concerns related to the security of cryptocurrency holders
To justify its appeal, Bull Bitcoin also highlights the physical risks to which users could be exposed if these databases were to be compromised. The platform claims that an information leak could make it easier to identify Bitcoin holders, as well as their loved ones.
These concerns come as France is among the countries most affected by kidnappings targeting crypto-asset holders. In April, RTL reported that the French police had recorded 41 kidnappings linked to cryptocurrencies since the start of 2026. At the same time, the cybersecurity company CertiK indicated that so-called “wrench” attacks had increased by 75% in 2025, with 72 verified cases worldwide. France alone had 19 confirmed attacks, while Europe accounted for around 40% of recorded incidents.
Bull Bitcoin considers that DAC8 could accentuate these risks if the information collected were to be disclosed during a cyberattack. The platform claims that this centralization of data goes beyond just tax objectives and could have direct consequences for holders of Bitcoin and other digital assets.
The procedure initiated before the Council of State could now become a first legal test of the application of DAC8 in France. Its outcome will be closely monitored by industry players, as the first reporting obligations approach and the debate on the balance between tax control and protection of crypto users continues to intensify.
Maximize your Tremplin.io experience with our 'Read to Earn' program! For every article you read, earn points and access exclusive rewards. Sign up now and start earning benefits.
