Latest news

Showing 51–100 of 1153

August 30, 2026

Regulation

Vietnam Says Five Crypto Exchange Applicants Cleared Initial Review, but No License Issued Yet

Vietnam says five crypto exchange applicants have passed an initial review, but the country has not issued its first license under its digital-asset pilot. Applicants must meet a 10 trillion dong ($383 million) charter-capital threshold and security requirements, while new penalties for unlicensed services and AML failures take effect Sept. 1. Domestic investors will not be fined on Sept. 1 for using overseas or unlicensed platforms; that six-month countdown starts only after the first provider is licensed.

Regulation

Sber plans to widen crypto-backed loans to include USDT and Ether

Sber plans to add USDT and Ether to crypto-backed loans Sber, Russia’s largest bank, plans to accept Tether’s USDT and Ether as collateral alongside Bitcoin for crypto-backed lending, deputy chairman Anatoly Popov said. The bank will adapt existing products as Russia’s new crypto law takes effect, adding the assets after the Bank of Russia permits them for public trading. Core provisions of the law start on Sept. 1.

Stablecoins

BIS chief says stablecoins still fall short as money, backs tokenized deposits

BIS chief says stablecoins still fail as money BIS General Manager Pablo Hernández de Cos said at Jackson Hole on August 28 that stablecoins still fall short as credible money at scale, citing failures in par redeemability, elasticity, interoperability and financial integrity. He urged central banks to prioritize tokenized deposits for everyday payments, warning that dollar-pegged stablecoins raise monetary sovereignty and digital dollarization risks.

Tokenization

Stellar’s Tokenized Asset Market Climbs Near $4 Billion as Institutional Activity Expands

Stellar’s tokenized asset market nears $4B in 2026 surge Tokenized real-world assets on Stellar have climbed about 360% this year to nearly $4 billion, led by Spiko at $1.55 billion, with Realize, Tradable, Franklin Templeton and Ondo each above $500 million. The network is adding institutional flow too: DTCC plans to connect its tokenization service to Stellar, while Tradable plans to bring up to $1 billion in private credit; Stellar’s XLM token is still around $0.18, down about 11% YTD.

Security

Avici Users Lose $500,800 in Solana Card Exploit as AVICI Token Drops 49%

Avici card-funding exploit drains $500.8K from users, AVICI token tumbles A flaw in an outdated Rain contract led to a $1.1 million Solana exploit across multiple programs, including $500,800 taken from 1,685 Avici users. Avici said only card-funding contracts were affected, not its self-custodial wallets, and pledged full refunds; the breach sent AVICI down 49% from its 24-hour high to a record low of $0.217 before rebounding to $0.305.

August 29, 2026

Security

Polygon Reveals PoS Vulnerabilities Patched Through Austin and Kyoto Hard Forks

Polygon discloses patched PoS client vulnerabilities Polygon said it privately fixed several security flaws in its PoS network before disclosing them, using the Austin and Kyoto hard forks now active on mainnet. The issues affected Bor and Heimdall and included denial-of-service risks, validator resource exhaustion, and checkpoint processing flaws; Polygon said none were exploited on mainnet. Nodes on older versions have already fallen out of consensus and must upgrade to Bor v2.10.0 and Heimdall v0.11.0 to rejoin the canonical network.

Tokenization

Stellar’s Tokenized RWA Market Climbs to Nearly $4 Billion in 2026

Stellar’s tokenized RWA market nears $4B after 360% growth in 2026 Tokenized real-world assets on Stellar rose about 360% this year to $3.996 billion as of Aug. 29, up from $868.8 million at the end of 2025, based on a Stellar-maintained Dune dashboard. The market is concentrated among a few issuers, led by Spiko at $1.55 billion, followed by Realiz, Tradable, Franklin Templeton and Ondo. Stellar also held about $490 million in non-US government debt as of Aug. 20, the Stellar Development Foundation said, citing RWA.xyz data.

Market

Upbit Keeps Lead in South Korea as Bitcoin Rally Lifts Local Crypto Trading

Upbit tops South Korea’s crypto market with $1.04B daily spot volume Upbit handled about $1.04 billion in 24-hour spot trading volume, more than Bithumb, Coinone and Korbit combined, as Korean retail traders returned to local exchanges after bitcoin climbed above $80,000 in late August. Bithumb logged roughly $632.6 million, while Coinone and Korbit posted about $67.9 million and $11 million, respectively.

ETF & Funds

New US Filings Add Three More XRP-Linked ETF Products

SEC filings list three more XRP-linked ETFs U.S. fund filings dated Aug. 27 and Aug. 28 listed three XRP-linked ETFs: ProShares’ unlevered XRP ETF, its 2x leveraged Ultra XRP ETF (UXRP), and Morningstar Funds Trust’s Cyber Hornet S&P 500 and XRP 75/25 Strategy ETF, ticker XXX. The filings add to XRP’s presence in regulated products, though the unlevered ProShares fund’s series registration does not by itself confirm the ETF has launched or is trading.

DeFi

Aave reviews stricter CRV risk limits after Curve exploit volatility

Aave weighs tighter CRV limits after Curve exploit volatility Aave risk managers and contributors are reviewing new restrictions on CRV after the Vyper zero-day exploit drove volatility higher around a loan of more than $60 million. Proposed and deployed steps include AIP-288 cuts to LTV, LT and debt ceilings on V3 Ethereum and Polygon, plans to set LTV to 0 on V2 via AIP-286, disable CRV borrows on V3, and reduce CRV liquidation thresholds on V2 Ethereum by 6% to limit insolvency risk and push migration to safer setups.

Stablecoins

BIS Chief Says Stablecoins Fall Short as Scalable Payments Money

BIS renews warning that stablecoins are not credible money at scale BIS General Manager Pablo Hernández de Cos said stablecoins do not credibly function as a means of payment at scale and argued tokenized bank deposits are a stronger alternative. A new Financial Stability Institute study also found major gaps in stablecoin issuer rules across the US, EU, UK, Hong Kong and Singapore, highlighting risks around bank funding, AML controls, interoperability and monetary sovereignty.

Stablecoins

Neutral Suspends NUSD Redemptions After Reserve Liquidity Problems Emerge

Neutral freezes NUSD minting and redemptions amid reserve liquidity problems DeFi protocol Neutral said some investment positions used to manage reserves have become illiquid, leaving about $27 million in assets available for immediate use while recovery from the rest remains uncertain. The protocol said the issue was not caused by a hack or smart-contract exploit and has halted related contracts after legal advice; key NUSD functions have been suspended since Aug. 13. Neutral plans to launch an early-redemption process for NUSD and sNUSD in early September, pending a new redemption contract, an external security audit, and legal and financial reviews.

Security

Core Lightning pushes node operators to install 26.06.7 after security review

Core Lightning issues emergency security update for node operators Core Lightning urged node operators to upgrade to version 26.06.7 after developers found several security vulnerabilities during a 10-day review that included AI-generated reports. The Aug. 28 release fixes verified issues, but technical details are under a two-week embargo, giving operators until mid-September to patch before the flaws are disclosed. Legacy versions 26.04 and older no longer receive security fixes.

Security

Fogo Foundation Reports 400 Million Token Theft as FOGO Falls About 20%

Fogo Foundation says attacker stole 400M FOGO tokens The Fogo Foundation said on Aug. 28 that an unidentified attacker compromised the organization and transferred out 400 million FOGO tokens, about 4% of the token’s 10 billion initial supply and more than 10% of circulating supply. FOGO fell about 20% to $0.00745 after the disclosure, while the foundation said the blockchain itself was not affected and it has asked exchanges, law enforcement and forensics firms to help trace and block the stolen funds.

Security

Ripple Maps Four-Stage Quantum Security Upgrade Path for XRP Ledger

Ripple lays out four-stage quantum security plan for XRP Ledger Ripple developers have outlined a four-stage plan to prepare the XRP Ledger for quantum-resistant cryptography as concerns grow over future threats to wallet and transaction security. The roadmap starts with identifying exposed parts of the network and testing replacement cryptography, then moves to running current and quantum-resistant security in parallel before broader migration, with an emergency path if quantum capabilities advance faster than expected.

Infrastructure

Solana Validators Pass Faster Disinflation Plan After Late Kraken Vote Shift

Solana validators approve faster disinflation after late Kraken vote flip Solana validators passed SGP-0002 with 67% support, clearing the two-thirds threshold by about 0.33 percentage points after Kraken shifted most of its roughly 8.9 million SOL voting stake from no to yes in the final hours. The change doubles Solana’s annual disinflation rate from 15% to 30% while keeping the 1.5% terminal inflation target, pulling the timeline to reach that floor forward from about 5.7 years to 2.8 years.

August 28, 2026

DeFi

Aave proposal seeks roughly 52,000 AAVE net increase in Safety Module reward allowances

Aave proposal would add about 52,000 AAVE to Safety Module allowances TokenLogic has submitted a direct AIP to raise the stkAAVE reward allowance so it covers all rewards already earned plus 90 days of emissions at the unchanged rate of 150 AAVE a day. The proposal says stkAAVE’s current allowance covers just 8.4% of claimable rewards, while also resizing sunset module allowances: topping up stkABPT v1 and stkGHO, and cutting stkAAVEwstETHBPTv2 to 2,500 AAVE, releasing about 14,400 AAVE of unused approval.

Prediction Markets

Ninth Circuit Says Nevada Can Police Kalshi’s Sports Event Contracts

Ninth Circuit backs Nevada oversight of Kalshi sports contracts A U.S. appeals court in the Ninth Circuit unanimously ruled that Nevada regulators can oversee Kalshi’s sports event contracts, rejecting Kalshi’s argument that CFTC regulation alone controls its federally licensed exchange. The decision deepens a split with an earlier federal ruling involving New Jersey, raising the chance the U.S. Supreme Court may ultimately decide whether state gambling laws apply to prediction markets.

Stablecoins

Bullish Extends $100 Million Stablecoin Facility to USD.AI for GPU-Backed Lending

Bullish extends $100M stablecoin facility to USD.AI for GPU-backed loans Bullish has given USD.AI a $100 million stablecoin debt facility to fund non-recourse loans for middle-market AI infrastructure operators, secured solely by the financed GPU hardware rather than other corporate assets. Bullish also plans to list USD.AI’s yield-bearing token sUSDai on its institutional exchange and support trading with a market-making program, creating a secondary market for compute-backed debt.

Bitcoin

500 BTC From Clifton Collins-Linked Wallet Group Transferred to Coinbase Prime

500 BTC from Clifton Collins-linked wallet group sent to Coinbase Prime A wallet tied to the Bitcoin stash linked to convicted Irish drug dealer Clifton Collins transferred 500 BTC worth about $39.56 million to Coinbase Prime on Aug. 28, blockchain tracker Lookonchain said. The coins came from a group of wallets that once held about 6,000 BTC and were long thought inaccessible after private keys were reportedly lost. A Coinbase Prime deposit does not confirm the Bitcoin was sold.

Market

HyENA to Close All Markets by Sept. 2 After More Than $4 Billion in Trading

HyENA to shut all markets by Sept. 2 HyENA will delist all of its markets between Aug. 31 and Sept. 2, removing one market per hour and automatically settling open positions as margin is returned to users’ spot balances. The Hyperliquid-based platform said HLPe depositors can redeem via Upshift at a 1:1 rate, and linked the shutdown to changes in Hyperliquid’s stablecoin setup that reduced opportunities for USDe-backed margin products.

Security

Avici attacker drains over $1 million from user accounts in live Solana exploit

Attacker drains over $1M from Solana neobank Avici An attacker drained more than $1.07 million from Avici customer accounts by bypassing the passkey-based authorization layer and adding a new admin to users’ collateral accounts before withdrawing funds, The Defiant reported. Avici acknowledged the incident at 18:42 UTC, nearly two hours after the first drain transaction, and said it is working with relevant partners, but has not said how many accounts were affected or whether users will be made whole.

Regulation

HMRC’s first UK crypto tax breakdown shows gains concentrated among a small group of filers

HMRC breaks out UK crypto gains for first time HM Revenue and Customs said 17,600 people declared £1.38 billion in taxable crypto gains in 2024-25, the first year crypto disposals were reported in a separate Self Assessment box. Just 240 filers who each made more than £1 million accounted for £717 million of the total, while 65% of taxpayers reported gains under £25,000. HMRC also sent 81,000 “nudge” letters to suspected under-payers over the past year and is due to start automatically receiving UK resident data from overseas exchanges from May 31, 2027.

Infrastructure

Ripple Urges XRPL to Drop Native XChainBridge Amendment in Favor of Axelar

Ripple recommends withdrawing XRPL bridge amendment XLS-38 Ripple has proposed scrapping XRPL’s native XChainBridge amendment, XLS-38, and relying on Axelar for cross-chain connections instead, saying Axelar already handles bridging for the XRPL EVM Sidechain and that no serious demand for XLS-38 emerged after more than a year. If adopted by validators, the move would eventually remove more than 10,000 lines of inactive code from XRPL.

Security

MANTRA post-mortem says Cosmos-EVM bug released 720.9 million tokens in August exploit

MANTRA says Aug. exploit released 720.9M tokens via Cosmos-EVM bug MANTRA Chain’s Aug. 28 post-mortem said an attacker exploited an unsigned-integer underflow bug in the shared cosmos/evm module, releasing about 720.9 million MANTRA worth roughly $3.6 million from a burn address and a legacy multisig on Aug. 20-21. MANTRA said no validator keys or multisigs were breached, no new tokens were minted, law enforcement is involved, and recovery updates are still pending.

DeFi

Aave ARFC proposes protocol-owned oracle upgrade for PT-srUSDe-22OCT2026 on CRE

Aave moves PT-srUSDe-22OCT2026 risk oracle stack to protocol-owned setup An Aave ARFC says the PT Risk Oracle stack for PT-srUSDe-22OCT2026 is now deployed on Ethereum and ready for activation, shifting discount-rate and eMode parameter updates to a protocol-owned pipeline using three Chainlink CRE workflows. The activation AIP would register two predeployed agents, grant them RISK_ADMIN roles, and cap moves at 100 bps for the discount rate and 50 bps for eMode parameters, with 48-72 hour delays and governance able to disable either agent.

Security

Core Lightning to Issue Embargoed v26.06.7 Security Release

Core Lightning plans embargoed v26.06.7 security release Christian Decker said Core Lightning will ship an embargoed v26.06.7 security release within about 24 hours, with binaries published immediately and source code withheld for 14 days to slow reverse-engineering. No vulnerability is known to be actively exploited. Operators who wait for source disclosure are advised to restart with the --offline flag, which keeps onchain enforcement while disabling peer connections.

Court

UK Court Orders Forfeiture of £1.03M in Crypto and Cash Tied to Deceased Launderer

Avon and Somerset Police seize £1.03M in crypto and cash under POCA A UK court let Avon and Somerset Police forfeit £1,032,487.86 from a deceased convicted money launderer, including 20.21 BTC, other crypto assets and cash in a bank account. The force said the tokens were traced to darknet marketplaces active between 2016 and 2019, making it its largest crypto seizure to date.

Regulation

California Legislature Passes Bill to Bar Officials From Issuing Meme Coins

California legislature passes bill to bar officials from issuing meme coins California lawmakers have approved AB 2409, a bill that would ban state and local public officials from issuing meme coins and, from Jan. 1, 2027, stop digital asset platforms from offering California residents official-linked meme coins issued on or after that date. The measure now goes to Gov. Gavin Newsom, with enforcement through civil actions led by the state attorney general and local prosecutors.

Security

Kraken restores accounts after sanctioned crypto dust attack disrupted users

Kraken restores users after sanctioned crypto dust attack Kraken said some users were briefly locked out after receiving microtransactions tied to sanctioned funds between Aug. 17 and Aug. 24, in what it described as a dust attack meant to trigger account restrictions. The exchange restored access, froze the funds and is coordinating with authorities, while HTX said a review found no official accounts were behind the transfers and it is investigating whether the sending wallet was misidentified or used by a third party.

Security

Brazil advances crypto threat alert network for banks and exchanges

Brazil central bank advances crypto threat alert system for banks and exchanges Brazil’s central bank is moving to deploy a crypto threat alert system built with Hypernative to help banks and local exchanges detect, process and respond to cyberattacks that use crypto as an exit rail. ABToken executive director Regina Pedroso said integration should start within two weeks, with Foxbit and Mercado Bitcoin among the participants after tests with undisclosed firms.

Security

CCC exploit on BSC linked to sell() function abuse, with losses estimated at $117,000

CCC token hit by $117,000 exploit on BSC Blockchain security firm TenArmorAlert said CCC suffered an estimated $117,000 exploit on Aug. 28 after an attacker manipulated the token contract’s sell() function to burn tokens held by its liquidity pool pair, triggering abnormal price movement. The firm flagged an attack transaction starting with 0x89d805064, but had not disclosed the full attack sequence, recovery plan, or any compensation proposal at the time of the alert.

Regulation

Bank of Russia Flags 2,600 Crypto Wallets in Anti-Scam Monitoring Push

Bank of Russia flags 2,600 crypto wallets over suspected illegal activity The Bank of Russia added 2,600 crypto wallets to a monitoring database used by banks and law enforcement after more than 1 billion rubles flowed into the addresses in H1 2026. The regulator said the wallets were linked to suspected illegal financial activity, while banks took restrictive measures against more than 500 payment details in the same period.

Security

The Sandbox Plans 1:1 Repayment After $700,000 SAND Bridge Exploit

The Sandbox to repay SAND holders 1:1 after $700,000 bridge exploit The Sandbox said it will reimburse eligible SAND holders on Base and BNB Chain with Ethereum-based SAND after an Aug. 21 exploit drained 14.744 million tokens, worth about $700,000, from an Ethereum vault. Claims are expected to open within two weeks and stay open for two weeks, with compensation funded from the treasury and no new tokens minted; two centralized exchanges holding more than 72% of eligible balances will pay affected customers directly.

Security

CoinGecko Report Says Audited Protocols Accounted for 88.44% of Crypto Hack Losses Since 2025

CoinGecko: audited protocols made up 88% of crypto hack losses since 2025 CoinGecko’s 2026 crypto security report found that protocols with independent audits accounted for 88.44% of the $3.63 billion stolen across 245 incidents tracked from January 2025 through July 2026. Auditors had cleared 147 of the breached platforms, while supply chain and infrastructure failures — not in-scope smart contract bugs — caused the biggest damage at more than $1.8 billion.

Security

Ledger disputes OneKey hack claim, says reproduced flaw had already been patched

Ledger says OneKey’s “hack” demo used an outdated Ethereum app Ledger pushed back on OneKey’s claim that it hacked a Ledger device, saying researchers reproduced a transaction-replacement flaw only on the old Ethereum app 1.22.1 and that the issue had already been patched in 1.22.2, with broader safeguards in Secure SDK 26.6.1. The flaw could let a compromised host show one transaction while getting another signed, but Ledger said it found no evidence of exploitation or losses and now recommends Ethereum app 1.22.3 or later.

Regulation

SEC Proposal Would Open Limited ICO Path as Market Appetite for Token Raises Fades

SEC proposes ICO exemption with raises up to $75 million The US SEC has proposed an exemptive framework that would let qualifying crypto projects sell tokens publicly without full securities registration, with fundraising caps of $5 million a year for early-stage issuers and $75 million for larger ones. The plan would also let the investment-contract relationship tied to a token sale end once an issuer finishes or permanently stops the promised development work, potentially easing regulatory uncertainty even as demand for token fundraising has cooled.

Infrastructure

Solana Vote Has Inflation Cut Above Threshold While Fee-Burn Plan Lags

Solana governance vote puts inflation cut on track, fee-burn overhaul behind Solana validators are partway through the chain’s first binding governance vote, with two of three proposals above the required two-thirds support as of Friday. SGP-0001, which would ratify a Solana Constitution and activate svmgov, had 95.33% support, while SGP-0002, which would double annual disinflation to 30% and bring the 1.5% terminal floor forward to 2029 from 2032, had 68.63%; SGP-0003, a fee change that could lift daily burns to 7,500-9,000 SOL, was below the bar at 62.63%.

Regulation

New Zealand’s ACT Party Pledges Crypto Tax Changes and Digital Asset Rule Overhaul

ACT proposes crypto tax breaks in New Zealand election pledge New Zealand’s ACT party has proposed waiving capital gains tax on qualified crypto assets held for more than a year and exempting low-value personal purchases made with crypto. The campaign pledge would apply to individual retail investors, while professional traders, businesses, and assets held for less than a year would stay under existing tax rules, alongside plans for stablecoin, tokenization, and startup sandbox reforms.

August 27, 2026

Prediction Markets

Polymarket Withdraws NFL Participation Contracts After CFTC Filing, While Crypto Bets Advance

Polymarket withdraws NFL player participation contracts after CFTC filing Polymarket’s US platform pulled two NFL Player Participation Contracts on Aug. 26, just a day after certifying them with the CFTC and a day before the proposed Aug. 27 listing date. The withdrawal came as the exchange also certified bitcoin, ether, and solana price contracts as swaps in the binary option subcategory. No public reason was given, and other sports filings from Aug. 25 remain certified, including NFL Starter Designation contracts.

Bitcoin

StarkWare Reports First Quantum-Safe Bitcoin Transaction on Mainnet

StarkWare mines first quantum-safe Bitcoin transaction on mainnet StarkWare said it has mined the first quantum-safe Bitcoin transaction on mainnet, using Bitcoin’s existing rules rather than a network upgrade. The Quantum-Safe Bitcoin method protects individual transactions by using off-chain “signature grinding” to produce a hash Bitcoin accepts as a valid signature, but StarkWare said it does not secure Bitcoin overall, cannot protect addresses with already-exposed public keys, and currently requires sending transactions directly to miners.

Court

Seoul Court Orders Bithumb User to Repay Proceeds From February BTC Miscredit

Seoul court orders Bithumb user to repay $140,400 after BTC miscredit The Seoul Central District Court ordered a Bithumb customer to return 194 million won, about $140,400, after the user sold Bitcoin that had been mistakenly credited during Bithumb’s February 6 system error. The court said the sale proceeds were unjust enrichment, marking Bithumb’s second win in two days as it tries to recover losses tied to an internal mistake that briefly showed roughly 620,000 BTC across hundreds of accounts.

Companies

Bitcoin Tops $80,000 as Charles Schwab Expands Crypto Accounts to Solana, Avalanche and Chainlink

Charles Schwab to add Solana, Avalanche and Chainlink to crypto accounts Charles Schwab said it will expand Schwab Crypto accounts to include Solana, Avalanche and Chainlink in the coming months, widening a lineup that has offered only bitcoin and ether since May. The move gives the three tokens access to a retail brokerage platform, and they outperformed the market on Thursday: SOL rose 12.9%, LINK 5.5% and AVAX 3.6%, while bitcoin traded around $80,020, up 2.1%.

DeFi

Aave V4 Deposits Climb to $806 Million as EtherFi Cash Expands on Optimism

Aave V4 deposits top $800M for the first time Aave’s live onchain dashboard shows V4 user deposits at $806 million, up 30% in seven days and marking a new all-time high. The protocol crossed $500 million on Aug. 19 and $600 million on Aug. 21 before moving above $800 million six days later, with the EtherFi Cash market on Optimism ranking as V4’s second-largest market at $257 million.

Security

Tron Address Poisoning Scam Drains $9.4M From 15 Users in Four Weeks

Single Tron address poisoning scammer stole $9.4M from 15 victims in four weeks An address poisoning operator drained 15 Tron users of a combined $9.4 million over the past four weeks, on-chain investigator Specter said on August 27. The two biggest victims lost $2.5 million each, and the stolen funds were swapped into USDD and funneled to one consolidation wallet. MetaMask and Trust Wallet have added protections for this scam on EVM chains, but those features do not work on Tron.

Regulation

Venezuela Arrests Three in Maracaibo Over Alleged Binance P2P USDT Arbitrage

Venezuela arrests three in Maracaibo over alleged Binance P2P USDT arbitrage Venezuela’s Bolivarian National Police arrested three men in Maracaibo last week for allegedly buying US dollars at the official BCV rate through regulated channels, converting them to USDT on Binance, and reselling via Binance P2P at the higher parallel rate. Police identified the suspects as Adrián Jesús Gómez, José Ángel Hernández, and Guillermo José Roldán, and said phones, a laptop and a motorcycle were seized before the case was handed to prosecutors.

Regulation

UK says 240 taxpayers reported seven-figure crypto gains in 2024-25

UK reports 240 crypto millionaires in 2024-25 tax year HMRC said 240 people in the UK each reported more than $1.4 million in crypto-related capital gains in the 2024-25 tax year, with their combined gains reaching about $975 million. Overall, around 17,600 individuals declared $1.9 billion in digital asset gains and $18.7 billion in disposals, as the government steps up crypto tax enforcement and prepares new reporting rules for service providers under the OECD framework.

Security

Coinspect Says Predictable Wallet Seed Phrases Enabled at Least $5.69M in Crypto Theft

Coinspect links wallet flaw to at least $5.69M in crypto theft Blockchain security firm Coinspect said a weakness in the CryptoJS library’s random number generator made seed phrases in at least five wallet apps predictable, exposing more than 2,000 recovery phrases across five blockchain networks. It tracked about $3.14 million stolen on May 27 and another $2.55 million drained between May 30 and July 13, with a further roughly $40,000 taken on July 20-21; the apps involved and full losses are still unconfirmed.

DeFi

Aave Horizon proposal seeks to add Midas’ mWIN as fixed-income collateral

Aave Horizon proposal seeks to add Midas’ mWIN as collateral An ARFC has been filed to onboard mWIN, a tokenized fixed-income portfolio managed by Wellington Management and issued by Midas, as collateral on Aave Horizon. The proposal says mWIN launched on Ethereum mainnet with $15 million in TVL within days, offers $10 million in dedicated instant USDC redemption capacity via Midas, and could expand Horizon’s real-world asset collateral into actively managed credit pending LlamaRisk review and a Snapshot vote.

Regulation

SEC Sends Planned Crypto Custody Rule to White House for Review

SEC sends crypto custody rule to White House review The SEC sent a planned crypto custody overhaul to the Office of Management and Budget on Aug. 25, starting White House review before any proposal can be published. The draft would cover investment advisers and investment companies holding digital assets for clients, while the SEC’s agenda tentatively points to October 2026 for a proposal; current custody rules remain unchanged for now.