The fight over DAC8 is now a constitutional lawsuit. Bull Bitcoin CEO Francis Pouliot argued in court that the EU directive builds a mandatory pan-European database of every crypto user’s identity and transaction history. This centralized honeypot of wealth data, he said, directly fuels physical violence.
France expects 150 to 180 crypto kidnappings in 2026 alone, averaging one every 2.5 days in Q1. Pouliot describes France as the crypto kidnapping capital of the world. Corrupt officials have already been convicted for selling government-held user lists to gangs, who use them to select high-value targets for extortion.
"They have convicted people in France, government bureaucrats, for selling lists of crypto users to gangs."
- Francis Pouliot, TFTC: A Bitcoin Podcast
The legal case filed in France aims to repeal, delay, or mitigate DAC8 using proportionality arguments and the EU Charter. Pouliot said the state already has tools for warranted investigations and doesn’t need a mandatory annual dump of every citizen’s crypto wealth to tax authorities.
On Rabbit Hole Recap, hosts framed the lawsuit as a tactical shift from building privacy tech to fighting in court. Pouliot secured his firm’s regulatory license before filing the suit to establish standing to fight from within the system.
David Bennett on Bitcoin And highlighted a French national agency breach in early 2026 that exposed 19 million accounts. Bennett argued that when the state mandates collection of data it cannot protect, it draws a map for kidnappers.
"When the state mandates the collection of data it cannot protect, it effectively draws a map for kidnappers."
- David Bennett, Bitcoin And
The broader crypto industry faces a 'cuckoldry' problem, Pouliot said, where large firms like Coinbase cheer for regulations to build moats against smaller competitors. Those rules often smuggle in expanded surveillance powers under the guise of institutional adoption.
If the French challenge fails, Pouliot plans to take the fight to the European Court of Justice.

