Bull Bitcoin, a non-custodial Bitcoin exchange, has launched a significant legal challenge against the French government, petitioning the Conseil d'État to annul a national decree that implements the European Union's DAC8 directive. The summary petition was filed on February 24, 2026, targeting Decree No. 2025-1276, which transposes the EU's crypto tax reporting rules into French law. Bull Bitcoin argues that these regulations pose severe threats to privacy and physical safety for millions of European crypto holders.

The core of Bull Bitcoin's argument centers on the creation of what it describes as a 'mass database' that links individuals' legal identities and home addresses with their crypto transaction histories. The exchange contends that such a centralized repository of sensitive financial data constitutes disproportionate mass surveillance and creates a dangerous 'honeypot' for criminals. This concern is particularly acute in France, which has seen a notable increase in 'wrench attacks' and kidnappings targeting crypto holders, where victims are physically coerced into transferring digital assets.

The DAC8 directive, which came into force on January 1, 2026, mandates that crypto-asset service providers (CASPs) within the EU collect and report extensive user data to national tax authorities. This data includes full customer identity, home address, birth date, tax identification number, and detailed transaction information. The first reporting period covers the 2026 calendar year, with initial data exchanges between EU member states scheduled for September 2027. Bull Bitcoin highlights that the French decree expands these reporting obligations, potentially affecting between 40 and 135 million Europeans, including holders and their relatives, who could become targets if this data is compromised.

Bull Bitcoin's CEO, Francis Pouliot, has publicly rebranded the implications of DAC8 from 'Know Your Customer' to 'Kill Your Customer,' underscoring the perceived existential threat to user safety and privacy. The company emphasizes that while it supports legitimate tax investigations through targeted requests, it vehemently opposes the creation of a broad, untargeted surveillance database.

This legal action by Bull Bitcoin, operating through its French entity Léonod SARL, marks the first formal challenge against DAC8 within the European Union. The exchange, which secured its MiCA license in June 2026, operates on a non-custodial model, meaning users retain control of their private keys. This commitment to self-custody and user sovereignty underpins their opposition to what they view as an overreaching regulatory framework. Bull Bitcoin has stated its intention to pursue all legitimate avenues to suspend, delay, annul, or amend the effects of DAC8 and its global counterpart, the Crypto-Asset Reporting Framework (CARF), developed by the Organisation for Economic Co-operation and Development (OECD).

The outcome of this legal battle in France could set a significant precedent for crypto regulation across Europe, potentially influencing how other EU member states implement and interpret DAC8. Bull Bitcoin's challenge is not merely a domestic legal dispute but a broader statement on the balance between regulatory oversight and the fundamental rights to privacy and security in the digital asset space. The company is financing these legal proceedings and aims to establish a judicial precedent on the proportionality of automated mass financial-data collection, hoping to inspire coordinated resistance across Europe.

Original announcement: Bull Bitcoin