Latest news

00:11 Security

Chainalysis links North Korea and Iran to most of this year’s onchain malware surge

Chainalysis says North Korea and Iran drove most of a 420% jump in onchain malware State-linked hackers were behind about two-thirds of new cases where malware instructions or infrastructure data were stored on public blockchains, Chainalysis said. The firm linked previously unattributed activity across Tron, Aptos and BNB Smart Chain to UNC5342, a North Korea-linked group, warning that blockchain storage makes campaigns harder to disrupt because the data can stay accessible after takedowns.

23:10 Regulation

US Treasury sanctions BitBank over alleged Iran-linked Bitcoin transfers

US Treasury sanctions BitBank over alleged IRGC bitcoin transfers The US Treasury on Sept. 17 sanctioned crypto exchange BitBank, saying it is owned by already-sanctioned Iranian financier Babak Zanjani and was used in June and July to send hundreds of millions of dollars in Bitcoin to the IRGC. OFAC also designated BitBank developer Pishtaz Simorgh Electronic Trade Company and several Zanjani associates, in a move Treasury said shows crypto infrastructure providers are also within sanctions reach.

22:40 Security

Revolut says no direct ransom demand followed breach affecting about 680 European clients

Revolut says it got no direct ransom demand after client data breach Revolut said it has not received any direct contact from hackers after a breach exposed data from about 680 European clients, pushing back on reports of a 6,000 XMR, roughly $3 million, ransom demand. The company said attackers used months of social engineering while posing as government authorities to obtain verification files, identity documents and transaction records; customer funds and internal systems were not affected.

22:12 Regulation

SEC opens five-year pilot for tokenized U.S. stock trading on public blockchains

SEC opens 5-year U.S. pilot for tokenized stock trading The SEC unveiled an “innovation exemption” that lets qualifying Tokenized Securities Venues trade real U.S. stocks on public blockchains for five years without registering as national securities exchanges. The pilot allows smart contracts and liquidity pools, but keeps access permissioned, caps volumes and listings, requires tokenized shares to preserve voting and dividend rights, and lets issuers block third-party tokenizations with 30 days’ notice.

22:11 Market

BitMEX Delists XBTUSD, Ending the Bitcoin Contract That Shaped Perpetual Futures

BitMEX delists XBTUSD after more than 10 years BitMEX has settled and delisted XBTUSD, the Bitcoin contract it launched on May 13, 2016 and described as the world’s first perpetual swap. The product became the template for perpetual futures now used by exchanges including Binance, Bybit, OKX and Hyperliquid, which BitMEX says account for more than 75% of crypto trading volume. BitMEX itself is set to shut down on September 23.

21:26 Regulation

CFTC extends relief for passive crypto trading software after CLARITY Act setback

CFTC extends no-action relief for passive crypto trading software The CFTC’s Market Participants Division issued Staff Letter 26-25 extending no-action relief to eligible passive crypto-trading software providers, so they can connect users to regulated derivatives markets without registering as introducing brokers. The relief bars custody, order-routing discretion and trading signals, and can be changed or withdrawn because it reflects division staff, not the full Commission’s binding view.

20:11 Regulation

US Sanctions Iranian Exchange BitBank Over Alleged Bitcoin Transfers to IRGC

US sanctions Iranian crypto exchange BitBank over alleged IRGC transfers The U.S. Treasury sanctioned Iranian crypto exchange BitBank on Thursday, alleging it moved hundreds of millions of dollars in bitcoin to the Islamic Revolutionary Guard Corps between June and July. OFAC also designated BitBank’s software developer, Pishtaz Simorgh Electronic Trade Company, and three associates of previously sanctioned financier Babak Zanjani, who Treasury said controlled the platform; it also said Hormuz Safe used BitBank since June to transfer collected payments.

19:15 Stablecoins

StablecoinX to End ENA Lock-Up Permanently on Oct. 5 Under New Waiver

StablecoinX wins permanent waiver on ENA lock-up from Oct. 5, 2026 StablecoinX said a waiver signed with Ethena OpCo and the Ethena Foundation will permanently remove the 48-month lock-up, vesting and scheduled unlock rules on its ENA holdings from Oct. 5, 2026, aligning them with other holders. Sales are still restricted: the company must give five business days’ notice for approved funding sales, and the Ethena Foundation keeps consent rights over sales, transfers, loans, hedges and other uses.

19:13 Regulation

CFTC Broadens No-Action Relief for Passive Crypto Derivatives Software

CFTC widens no-action relief for passive derivatives software The CFTC’s Market Participants Division on Sept. 17 extended conditional no-action relief to “passive software” providers, letting some wallets, browser extensions and websites market derivatives, transmit orders to registered venues and collect transaction-based fees without registering as introducing brokers. The relief bars custody, trade-routing discretion and trading advice, and lasts until the Commission adopts formal rulemaking or guidance.

17:27 Tokenization

RWA Futures Reached Crypto Scale After 142-Fold Volume Surge, OKX and Token Terminal Say

RWA futures volume matches crypto after 142-fold surge, OKX and Token Terminal say Real-world asset futures volume jumped from $760 million in October 2025 to $107.6 billion in July 2026, roughly matching crypto futures at $105.7 billion for the first time in the period tracked by OKX and Token Terminal. The report links the shift to the Oct. 10, 2025 liquidation event that wiped out more than $19 billion in leveraged crypto positions, with growth led by oil, semiconductor and pre-IPO contracts rather than core crypto markets.

13:56 Companies

S&P Global Agrees to Buy OpenZeppelin to Expand Into Onchain Security

S&P Global to acquire smart contract security firm OpenZeppelin S&P Global has agreed to buy OpenZeppelin to expand its risk assessment business into onchain technology risk, while keeping the smart contract security firm as a standalone business unit. Financial terms were not disclosed, and the deal remains subject to closing conditions; S&P Global said it is not expected to have a material impact on its financial results.

13:56 Regulation

UK to Add 500 Financial Crime Officers in £500 Million Enforcement Expansion

UK to add 500 financial crime officers with £500M anti-money laundering push The UK will recruit 500 officers and spend more than £500 million over three years to expand financial crime enforcement across police forces, the NCA and the CPS, with digital assets now named as part of the illicit finance threat. The program is not crypto-specific, but authorities say it will cover crypto fraud, laundering and asset recovery; in Operation Atlantic, investigators traced more than $45 million in stolen crypto but froze just over $12 million.

13:27 Regulation

SEC Approves Limited Pilot for Onchain Trading of Tokenized U.S. Stocks

SEC allows limited onchain trading of tokenized U.S. stocks The SEC on Sept. 17 approved a temporary exemption letting qualifying Tokenized Securities Venues trade tokenized NMS stocks through automated market makers and liquidity pools. The pilot imposes symbol and volume caps, plus disclosure, recordkeeping and tech-safeguard rules, as the agency gathers trading data to shape longer-term regulation for tokenized stock markets.

12:13 Security

Chainalysis reports 420% jump in malware activity using blockchains as infrastructure

Chainalysis says state-linked hackers are increasingly using blockchains as malware infrastructure Malicious blockchain writes rose 420% over the past 12 months, with state-linked hackers making up roughly two-thirds of new activity each quarter, Chainalysis said. The firm said North Korea-linked operators used Tron, Aptos and BNB Chain to route infected devices to encrypted server details, while suspected Iran-linked actors hid command-and-control directions in Bitcoin transactions.

10:56 Court

French Court Refuses Emergency Pause on DAC8 Crypto Data-Sharing Decree

French court rejects bid to pause DAC8 crypto data-sharing decree France’s Council of State has refused an emergency request from Bull Bitcoin and Paymium to suspend a decree enforcing the EU’s DAC8 crypto tax-transparency rules, saying the applicants failed to prove sufficient urgency. The ruling keeps the decree in force for now, while a separate lawsuit challenging its legality on constitutional and privacy grounds remains active.

10:11 Security

Trader says fake Cloudflare check led to about $600,000 crypto loss

Trader cladzsol says fake Cloudflare check led to $600,000 loss Crypto trader cladzsol said he lost about $600,000 after malware infected his computer through a fake Cloudflare verification, though he said he managed to save roughly $400,000. Screenshots shared by Inside Calls show the site told him to press Win + R, paste a pre-copied command, and hit Enter — a ClickFix-style attack where the victim runs the malicious code themselves. Cladzsol later said the incident was not related to Arc.

09:42 DeFi

Aave ARFC outlines isolated V4 market for loans backed by custodied collateral

Aave ARFC proposes V4 market for custodied collateral via Anchorage and Chainlink An Aave ARFC proposes a new isolated Aave V4 Hub and Spoke that would let institutions borrow stablecoins against collateral kept offchain with Anchorage. The collateral would be mirrored onchain as a non-transferable Custodied Collateral Token, or CoCT, minted and burned through Chainlink’s CustodySync, while liquidation would be executed by the custodian as an OTC sale and settled back onchain. The initial listing proposed is a single BTC-backed CoCT instance.

07:11 Regulation

Hong Kong maps 2026 expansion for stablecoins, tokenized assets and CBDC settlement

Hong Kong sets 2026 rollout for stablecoins, tokenized assets and CBDC settlement Hong Kong’s 2026 Policy Address maps out a wider regulated digital-asset market: regulated stablecoins would be allowed to trade on licensed virtual-asset platforms and settle tokenized money market funds, while the SFC plans rules for tokenized gold and other real-world assets. The HKMA also aims to launch 24-hour CBDC settlement under EnsembleTX around the end of 2026.

06:11 Companies

Anchorage Digital Adds Custody for Etherlink Assets Including Uranium-Backed xU3O8

Anchorage Digital adds custody for Etherlink assets, including uranium token xU3O8 Anchorage Digital Bank has added institutional custody support for Etherlink and seven Tezos layer-2 assets, including xU3O8, a token representing physical uranium. Clients can hold xU3O8, WXTZ, stXTZ, USDT, USDC, USDSM and wrapped Ether in segregated accounts at the federally chartered bank, using the same custody controls and processes as their existing digital asset holdings.

05:41 Regulation

FCA Sets UK Crypto Authorization Start for October 2027 as Bank Transfer Limits Remain

FCA sets Oct. 25, 2027 start for UK crypto authorization regime The UK’s Financial Conduct Authority published final guidance on which crypto firms will need authorization when the new regime starts on Oct. 25, 2027, covering stablecoin issuance, trading platforms, dealing and arranging, custody, and staking. Applications open Sept. 30, 2026 and existing registrations will not convert automatically, but banks will still be free to block or limit transfers to crypto platforms.

04:42 Web3

Circle launches Arc mainnet with BlackRock, Visa and Mastercard among validators

Circle launches Arc mainnet with BlackRock, Visa and Mastercard as validators Circle has launched the mainnet of Arc, a USDC-based layer-1 blockchain with 11 founding validators including BlackRock, DTCC, ICE, Mastercard and Visa. The network is EVM-compatible, charges transaction fees in USDC rather than a separate gas token, and went live with more than 100 apps and institutional integrations; Circle said its testnet handled over 700 million transactions in under a year.

04:11 Prediction Markets

South Korea Books 26 Polymarket Users in 17.6 Billion Won Gambling Probe

South Korea books 26 Polymarket users in alleged illegal gambling probe South Korean police booked 26 Polymarket users over 17.6 billion won ($12.7 million) in alleged illegal bets, with 18 cases referred to prosecutors by Sept. 15. Investigators said public blockchain data let them identify users despite the platform lacking a real-name customer list, and argued Polymarket wagers can fall under Article 246 of the Criminal Act, which carries fines or up to three years in prison for habitual gambling.

02:41 Regulation

South Korea Budget Office Calls for Crypto Exchange Incentives Before 2027 Tax Start

South Korea budget office urges crypto tax incentives for domestic exchanges South Korea should offer policy incentives to push crypto investors toward domestic exchanges before virtual-asset income taxes start on Jan. 1, 2027, the National Assembly Budget Office said in a Sept. 17 report. The office also called for an automated tax calculation and filing system linked to exchanges, saying authorities still face gaps in tracking taxable income, especially for OTC trades and overseas platforms outside CARF.

01:11 Security

Hackers Claim Revolut Handed Over 680 Customer Files, Demand 6,000 XMR

Hackers demand 6,000 XMR over alleged Revolut customer data theft A group calling itself iamnotavillain told the Financial Times it is demanding 6,000 XMR, about $3 million, to keep files on roughly 680 Revolut customers off the market, after dropping an earlier bitcoin demand. The hackers claim Revolut handed over passports, selfies and transaction histories in response to fake law-enforcement requests sent through Italy’s PEC certified email system, rather than through a breach of its core systems; Revolut said customer funds and systems were unaffected and it had received no direct demand.

21:56 Regulation

House Committee Advances Bill to Revise US Crypto Tax Rules

House panel advances bill to rewrite parts of US crypto tax rules The House Ways and Means Committee approved the Digital Asset Tax Certainty Act and sent it to the full House, advancing a proposal to exempt qualifying crypto network or transaction fees of $10 or less from gain-or-loss calculations, simplify taxes for qualifying dollar stablecoins, and treat mining and staking rewards as ordinary income. The bill would also apply wash-sale rules to traded digital assets and let some taxpayers fix past returns through a disclosure program.

19:56 Regulation

Argentina Commits to OECD Crypto Reporting Regime With Data Sharing Due by 2029

Argentina to start sharing crypto account data under OECD CARF by 2029 Argentina has signed on to the OECD’s Crypto-Asset Reporting Framework and committed to begin automatic cross-border sharing of crypto transaction data by September 2029. The move does not create a new crypto tax, but it can widen reporting to Argentina’s tax agency, including for Argentine tax residents using qualifying exchanges abroad; the OECD said the sign-up brings total CARF participants to 77.

17:41 Court

Celsius Estate Sues BitMEX for 6,360 BTC Tied to March 2020 Liquidations

Celsius estate sues BitMEX over March 2020 liquidations, seeks 6,360 BTC The Celsius bankruptcy estate has sued BitMEX in New York bankruptcy court, seeking the return of 6,360 BTC now worth about $495 million over forced liquidations during the March 2020 Covid crash. The Sept. 12 complaint says Celsius lost 1,325.84 BTC on March 12, 2020, while fund JST — whose claims were assigned to Celsius — lost 5,034.33 BTC the next day, and alleges BitMEX designed its liquidation system to trigger customer losses while benefiting its insurance fund.

17:27 Security

Hackers Use HBO Max Reddit Account to Push 108 Malware Ads in Two-Day Campaign

Hackers hijack HBO Max Reddit account to run 108 malware ads Attackers used HBO Max’s verified Reddit account to push 108 malicious ads over about 48 hours, directing users to fake software downloads that told Mac users to paste commands into Terminal and Windows users into Run or PowerShell. Malwarebytes linked the campaign to “PasteSwitch,” an operation tied to info-stealing malware; Reddit paused the ads and opened an investigation, while victim numbers and any crypto losses remain unconfirmed.

16:25 Security

DCENT urges App Wallet users to move funds after abnormal transfers detected

DCENT urges App Wallet users to move funds after abnormal transfers detected South Korea-based IoTrust, the company behind DCENT, issued a critical notice after detecting abnormal transfers from its App Wallet on Sept. 16, urging users to move assets as soon as possible to a secure hardware wallet or another trusted address. The company said the issue appears limited to the App Wallet and is investigating the cause, scope, and any further steps for users.

15:42 Security

Core Lightning Urges Node Operators to Turn Off Experimental Features After New Alert

Core Lightning tells node operators to disable experimental features Core Lightning issued a September 15 alert telling node operators to immediately disable any experimental features or risk losing funds while the team investigates a newly found issue. The advisory applies to CLN software used on Bitcoin’s Lightning Network, not Bitcoin’s main network, and comes weeks after a separate late-August patch for another set of bugs.

14:13 Regulation

US House Committees Review Crypto Tax Changes and Strategic Bitcoin Reserve Bill

US House committees begin work on crypto tax bill and Bitcoin reserve Two House panels have opened markup on crypto legislation: Ways and Means is reviewing the Digital Asset Tax Certainty Act to change tax treatment for small crypto rewards, US dollar stablecoin transactions, gains and losses on major tokens, and transfers under crypto lending agreements, while Financial Services is considering the American Reserve Modernization Act to create a Treasury-run Strategic Bitcoin Reserve and require regular disclosure of government-held Bitcoin. Both measures still need approval from the full House, Senate, and president to become law.

12:44 Security

Elastic links KREMLIN malware campaign to Ethereum-based infrastructure updates

Elastic says the KREMLIN malware campaign infected at least 1,515 systems, with 98.75% of victims in Brazil, using malicious Chrome and Edge extensions plus Ethereum smart contracts to keep its infrastructure updated. The researchers said the operators used on-chain contracts as a “dead-drop” to change command servers and payload locations without updating the malware itself, while the browser component altered Chromium Secure Preferences to load extensions without user approval and steal credentials, cookies and session data.

12:43 Regulation

Bulgaria enacts crypto tax reporting law to align with EU DAC8 rules

Bulgaria adopts EU-style crypto tax reporting rules Bulgaria has amended its Tax and Social Security Procedure Code to require crypto service providers to register with the National Revenue Agency and report customer identity and transaction data, including purchases, sales, transfers, exchanges and fiat flows. The rules apply from Jan. 1, 2026, with first annual filings due by June 30, 2027, as Sofia moves late to implement the EU’s DAC8 crypto tax transparency regime.

12:17 Bitcoin

Bitcoin Core 32.0 Enters Final Testing Ahead of October Release

Bitcoin Core 32.0 enters final testing before Oct. 10 release Bitcoin Core 32.0 has entered final testing ahead of its scheduled Oct. 10 release, bringing faster node sync, a new fee estimator, and fixes for two security issues. The update adds a second fee estimator that uses unconfirmed transactions to adjust estimates faster and suggest lower fees when possible, enables multi-threaded transaction and block verification with eight threads by default, and patches wallet and web server flaws that could enable command execution or memory exhaustion under certain conditions.

12:13 Security

BitMart opens feedback portal but offers no withdrawal process or fund update

BitMart opens user portal that does not process withdrawals BitMart has launched a “User Engagement Portal” for affected customers a week after hiring Alvarez & Marsal, but the channel only collects questions and proposals and does not process withdrawals or change account balances. The exchange also gave no new details on reserves, recovery timelines or refunds, while reiterating plans to appoint an independent third party to oversee operations and hold assets during the review.

11:12 Regulation

Malaysia’s Regulated Crypto Trading Reached RM17.14 Billion in 2025, Fitch Says

Malaysia’s regulated crypto trading rose 23% to RM17.14 billion in 2025 Trading on Malaysia’s licensed digital-asset exchanges reached RM17.14 billion ($4 billion) in 2025, up 23% from RM13.93 billion a year earlier, as Fitch said the country’s regulatory regime and Shariah framework give crypto a clearer path into Islamic finance than in some other markets. Securities Commission Malaysia had 10 regulated digital-asset operators across exchanges, custody and offering platforms by mid-2026.

10:21 Security

MEXC says it intercepted 38.66 million USDT in July-August risk cases

MEXC says it intercepted 38.66 million USDT in July-August risk cases MEXC said in its July-August 2026 security report that it intercepted all 215 reports involving stolen or fraud-related funds flowing onto the platform, covering 38,655,490 USDT, with 42 cases involving judicial freezes. The exchange also said it restricted 20,752 risk-linked accounts, while its Futures Insurance Fund rose to 791.7 million USDT as of Sept. 1 and reserves for BTC, ETH, USDT and USDC remained above 100%.

10:18 Regulation

UK Banks Maintain Crypto Payment Limits Ahead of FCA Authorization Launch

UK banks keep crypto payment curbs despite FCA’s new licensing gateway UK banks will be able to keep blocking or capping payments to crypto exchanges even after the FCA opens applications for its new crypto authorization regime on Sept. 30. The framework, which covers stablecoin issuance, trading platforms, custody, dealing, arranging and staking, runs from Sept. 30, 2026 to Feb. 28, 2027, but does not require retail banks to process exchange payments; industry data suggests about 40% of UK bank-to-exchange transfers are already blocked or delayed.

10:13 Court

Swiftarc Capital Operator Sentenced to 11 Years in $25 Million Ponzi Scheme Case

Swiftarc Capital operator gets 11 years for $25M Ponzi scheme Siddharth Jawahar was sentenced to 11 years in prison and three years of supervised release after pleading guilty in January to three wire fraud counts tied to Swiftarc Capital LLC. Prosecutors said he raised more than $35 million, invested only about $10 million, and used the rest to repay earlier investors and fund private jets, luxury hotels, restaurants and other personal spending; the DOJ also said he tried to obstruct justice after his indictment.

10:11 Companies

Deutsche Bank targets 2026 launch for institutional Bitcoin and Ether custody

Deutsche Bank plans institutional crypto custody launch in 2026 Deutsche Bank said it plans to launch an institutional digital-asset custody service later in 2026, pending regulatory completion, initially for clients in Germany. The platform is set to support Bitcoin, Ether, USDC, EURC and EURAU, with the bank holding wallets and private keys for clients and enabling transfers to third parties.

09:44 Regulation

Japan FSA puts blockchain finance at the core of its 2026 policy agenda

Japan FSA makes on-chain finance a 2026 policy priority Japan’s Financial Services Agency has put blockchain-based on-chain finance at the center of its 2026 agenda, targeting payments, securities settlement, tokenization and cross-border transfers. The regulator plans an “On-chain Finance Forum for the AI Era” to examine technical and regulatory issues, while pushing public- and private-sector testing with a focus on user protection and financial system stability.

09:41 Regulation

Spain’s CNMV Chief Says EU DLT Rules Are Too Restrictive for Tokenized Securities

Spain’s CNMV chief urges EU to loosen DLT rules for tokenized securities Carlos San Basilio, president of Spain’s securities regulator CNMV, said the EU’s DLT framework is too restrictive and should raise or scrap its €6 billion cap on tokenized instruments, arguing it prioritizes testing over growth. Speaking at El Confidencial’s Digital Assets Forum, he said only five firms are registered under the regime. The European Commission has proposed lifting the ceiling to €100 billion.

09:11 Regulation

ECB invites online merchants to join 2027 digital euro pilot

ECB opens applications for 2027 digital euro merchant pilot The European Central Bank is inviting euro-area online and mobile merchants to join a 12-month pilot of beta digital euro payments starting in the second half of 2027, with applications open until Oct. 27. The test will examine checkout integration, user experience, technical performance and operations; the beta will mirror the draft legislation design but will not have legal tender status, and merchant feedback will feed into the ECB’s final design decisions.

08:15 Court

Six Malaysians jailed in Singapore over S$4.9 million crypto-linked poker robbery

Six Malaysians sentenced over S$4.9M Singapore crypto poker robbery A Singapore court sentenced six Malaysian men to prison for an armed April 2024 robbery at a high-stakes poker game, where prosecutors said the group stole about S$4.9 million in cryptocurrency, cash and luxury goods. The two alleged ringleaders got 12 years and 11 months each, with 24 strokes of the cane and S$4,000 fines; police recovered about S$1.69 million, leaving roughly S$3.21 million unrecovered.

08:13 Companies

CoinEx to Close on Dec. 22, 2026 and Buy Back CET During Wind-Down

CoinEx to shut down on Dec. 22, 2026 after nine years CoinEx will wind down and close on Dec. 22, 2026, giving users until that date to withdraw funds. Founder and CEO Haipo Yang said he chose a “clean ending” over a sale, citing the prolonged crypto winter and rising compliance costs; the exchange will also repurchase CET at its original 0.005 USDT listing price with no cap from Sept. 15 to Sept. 29, then convert remaining balances at the same rate.

06:43 Altcoins

Zcash Vote Backs 25-Second Blocks and Fast NU7 Rollout

Zcash holders back 25-second blocks in NU7 vote Zcash token holders overwhelmingly backed cutting block time to 25 seconds from 75 seconds in a vote on the scope of the NU7 network upgrade, with about 2.4 million ZEC participating, above the 1 million ZEC threshold. CoinDesk reported that 99.9% of votes supported the change, while 99.3% favored launching NU7 as quickly as possible with only features ready by Sept. 30 if needed.

06:42 DeFi

Proposal Seeks to List Societe Generale-Backed EURCV on Aave V4 Ethereum Core

Aave moves to add Societe Generale’s EURCV to V4 on Ethereum A proposal has been filed to list EUR CoinVertible (EURCV), the euro stablecoin issued by SG-FORGE, on Aave V4’s Core Instance on Ethereum. The final asset configuration is still pending review by Aave’s Risk Service Providers, but the move would expand Aave’s euro-denominated collateral options with a MiCA-regulated token tied to Societe Generale’s banking group.

04:42 Security

Symbiosis exploit let attacker mint 46.1 billion syBTC from a 330-satoshi deposit

Symbiosis bridge exploit minted 46.1B fake syBTC from 330 satoshis A Symbiosis attacker used two bugs on Sept. 11 to mint about 46.1 billion syBTC after depositing just 330 satoshis, sending 12 fraudulent transactions across BNB Chain, Ethereum and Rootstock in about four minutes. Symbiosis said one flaw checked the wrong transaction data and another treated negative fees as additions; the attacker sold 4.39 WBTC on Uniswap V4 for about $336,000, while the team said it recovered roughly 15 BTC by Sept. 12.

04:10 Security

JAN3 halts Indra forward swaps after denial-of-service attack during open beta

JAN3 pauses Indra forward swaps after DoS attack on beta launch day JAN3 temporarily disabled forward swaps on Indra after a denial-of-service attack hit the new Bitcoin swap service within hours of its September 15, 2026 open beta launch, CEO Samson Mow said. Swaps already in progress may be delayed. The incident affected JAN3’s provider-run infrastructure, with no indication of a failure in Bitcoin or the Lightning Network protocols.

03:41 Regulation

U.S. Seeks Forfeiture of $61M in USDT Allegedly Tied to Iranian Oil Sales

U.S. seeks forfeiture of $61M in USDT tied to alleged Iranian oil sales Federal prosecutors in Manhattan filed a civil complaint on Sept. 14 seeking to seize about $61 million in USDT across 10 TRON addresses, alleging the funds came from sanctioned Iranian oil sales and were meant to support the Iranian government and the IRGC. The filing ties the wallets to a broader network accused of laundering more than $1.5 billion, and says Tether would burn the targeted tokens and reissue them for transfer to U.S. custody if forfeiture is granted.