The U.S. Commodity Futures Trading Commission has charged Cash FX Group S.A., its CEO and three other individuals over an alleged $950 million fraudulent investment scheme that solicited funds for purported forex and crypto trading.

The CFTC is the U.S. regulator of derivatives markets and brings civil fraud actions under the Commodity Exchange Act against fraudulent conduct in futures, swaps and other derivatives. Cash FX Group has previously been described as presenting itself as a Panama-based forex trading and education platform.

Grayscale's Zcash ETF has surpassed $1 billion in net assets, according to a Binance report. The milestone marks a notable institutional-adoption level for a fund giving regulated exposure to the privacy-focused cryptocurrency Zcash.

The report frames the $1 billion figure as an institutional-adoption milestone for a privacy-focused crypto asset, indicating meaningful demand for Zcash exposure through a regulated fund wrapper.

The fund is the Grayscale Zcash ETF, which trades under the ticker ZCSH and is passively invested solely in ZEC, the native token of the Zcash network; it was created by converting Grayscale's previously existing Zcash trust into an ETF wrapper rather than through a traditional new launch.

Magic Eden warned Friday that NFTs listed on its now-closed EVM marketplace between roughly February and October 2024 could be exposed to an exploit in Limit Break's Payment Processor V2. Yuga Labs Vice President of Blockchain 0xQuit said a whitehat operation rescued 23,155 NFTs worth more than $5.7 million, while 660 WETH could not be recovered.

Magic Eden urged anyone who listed or traded on its EVM marketplace to revoke the V2 contract's "approved for all" permissions on Ethereum, Polygon and Base via Revoke.cash, adding that no live Magic Eden listings were impacted. It noted that revoking will not return tokens that have already moved.

According to 0xQuit, the attacker used the bug to take 10 Meebits, 50 Otherdeeds, 10 World of Women NFTs and 235 Desperate ApeWives. Limit Break paused Payment Processor V3, which carried the same flaw, but V2 could not be paused, which forced the whitehat rescue; owners can reclaim rescued NFTs after revoking approvals.

Aave has enabled seven Coinbase-issued tokenized stock tokens — including Apple, Nvidia and Tesla — as collateral for USDC loans in a dedicated V4 market on Base. The market carries a 21 million USDC borrowing cap and access is restricted to eligible non-US investors.

The move brings tokenized equities into on-chain credit at one of the largest and most established DeFi lending platforms, letting eligible non-US users borrow USDC against tokenized stock exposure. The 21 million USDC cap and non-US eligibility requirement keep the market's initial scale limited.

The seven tokens are Coinbase-issued and are accepted only in a dedicated Aave V4 market on Base, where they back USDC loans rather than general-purpose borrowing. Access is limited to eligible non-US investors, and borrowing against the collateral is capped at 21 million USDC.

MultiversX said its mainnet resumed block production on Thursday, Sept. 24, about five days after an exploit-related halt, with its technical account @CodeMultiversX reporting a recovery upgrade had been deployed. As of the same Sept. 24 check, Kraken's incident page still listed EGLD as cancel-only trading with deposits and withdrawals paused, and showed no reopening time.

The chain's restart did not by itself restore the ability to trade EGLD or move it through Kraken: @CodeMultiversX warned that trading, deposits and withdrawals might remain paused at some exchanges for several more days while those platforms complete their own reopening processes, and directed users to check exchange updates.

Kraken's incident timeline predates the network halt — it first reported possible EGLD funding-gateway delays on Sept. 16 and moved EGLD pairs to cancel-only trading on Sept. 19, so the dates alone do not establish a cause for the exchange's original issue or its escalation. Cancel-only allows customers to cancel existing orders but bars new orders and trade execution, and MultiversX's statements do not fix the exact stop and restart times.

Google's Product Security team disclosed PageBreak, an internal AI agent built on Google's Gemini models that autonomously hunts exploitable vulnerabilities in Google's own first-party web applications. The agent has surfaced more than 500 confirmed cross-site scripting (XSS) flaws, each validated by a working exploit run against a live copy of the application, after starting as a pilot in November 2025 and becoming a full project in January 2026.

Google says the exploit-validation step gives PageBreak a near-zero false-positive rate, addressing the flood of plausible but bogus AI-generated bug reports — what Google calls "AI slop" — that security teams must now sift through. Run against applications built on Google's newer "high-assurance" web frameworks, PageBreak found only two bugs, which Google cites as evidence that building safer software upfront works better than patching holes afterward.

PageBreak was described in a blog post by information security engineer Michał Bentkowski, and its architecture pairs a hypothesis-generating agent with a suite of specialized, non-AI-written validators that attempt an actual exploit. Google says the approach leans on assets most organizations lack, including a single unified code repository spanning billions of lines and years of internal scanning infrastructure, so a small startup cannot simply copy it.

Anthropic announced Opus 5.5 for Work, a release of its Claude Opus model line aimed at workplace and enterprise use cases. The model is listed by OpenRouter as Claude Opus 5.5, succeeding Claude Opus 5.

The release pushes Anthropic's flagship Opus tier further into workplace and enterprise deployment, the segment where the company already sells Team and Enterprise plans.

OpenRouter describes Claude Opus 5.5 as Anthropic's flagship model for demanding reasoning, coding and long-horizon agentic work, with particular strength in multi-step changes across large codebases, code review and bug finding, and financial and scientific analysis.

US spot ETFs tracking Bitcoin, Ethereum, Solana, XRP and Zcash recorded about $3.04 billion in combined net inflows from Monday through Thursday, according to SoSoValue data. Bitcoin took in $2.25 billion and Ethereum $602.94 million, while Solana, XRP and Zcash products accounted for the remaining roughly $190 million, meaning nearly $793 million flowed outside Bitcoin.

The week marked a broadening of ETF demand beyond Bitcoin, with Bitcoin and Ethereum together absorbing about $2.85 billion, or almost 94% of the five assets' combined inflows. Bitfinex said the ETF demand re-emerged alongside corporate treasury buying, creating simultaneous sources of spot demand for the first time this year.

Bitcoin spot ETFs began the week with $999 million of inflows on Monday, the strongest single day of 2026 and the largest since about $1.2 billion on Oct. 6, 2025, representing roughly 11,530 BTC. Thursday added $190.65 million, the fourth straight positive session. SoSoValue's Sept. 24 snapshot showed the 12 US Bitcoin spot ETFs holding $108.92 billion in net assets and $57.43 billion in cumulative net inflows, while the 11 Ethereum ETFs tracked held $17.70 billion in net assets with $13.85 billion in cumulative inflows.

Ethena is adding Binance bStocks and equity perpetuals to the basis trade used for USDe's backing strategy, according to reports from Yahoo Finance and The Block. The move broadens the backing assets for the synthetic dollar beyond crypto basis trades.

The change alters the collateral composition and risk profile of USDe, a synthetic dollar whose backing has so far been tied to crypto basis trades. USDe holders and DeFi protocols that accept it as collateral are directly exposed to that shift.

Binance bStocks are tokenized stocks each backed 1:1 by a US share held at a regulated custodian, tradable 24/7 on Binance's spot market. Equity perpetuals apply crypto perpetual swap mechanics — funding rates and no expiry — to stock exposure.

Bitquery's Sept. 24 reconstruction of $201.4 billion in Solana DEX trades recorded between Aug. 24 and Sept. 22 classified 58.4% of that sample, or $117.7 billion, as circular or botlike activity. About $111.6 billion of the flagged amount — roughly 95% — involved buying and selling the same token through the same pool inside a single transaction.

The finding challenges the use of gross DEX volume as a stand-in for demand from independent traders, since a large share of recorded Solana turnover came from repeated round trips rather than distinct users. Bitquery also notes it did not measure executable liquidity, leaving the market depth actually available to outside traders unknown.

Bitquery identified two clusters of 20 and 50 wallets with strikingly similar trading records that together accounted for $26.3 billion of the flagged amount; it grouped wallets by volume and token counts without tracing their funding. The sample covered only trades priced in SOL, USDC or USDT in pools in its index, and Bitquery said fewer of its checks could run on Solana than on other chains it studied, so the figure reflects one window under its own rules rather than a rate for all Solana DEX trading.

Ondo Finance launched three on-chain portfolio tokens on Sept. 24 — Ondo High Income (BLKHIon), Ondo Diversified Growth (BLKDIGon) and Ondo High Growth (BLKGRWon) — built on portfolio strategies BlackRock developed for Ondo. The tokens are securities issued by Ondo Global Markets (BVI) Limited, not interests in BlackRock funds or in the underlying securities.

The products let holders gain economic exposure to diversified, model-driven baskets on-chain, while direct minting and redemption are reserved for eligible non-US investors who complete identity and anti-money-laundering onboarding. BlackRock does not manage the portfolios and owes no advisory or fiduciary duty to token investors.

BlackRock Fund Advisors supplies model allocations but does not make investment decisions for the on-chain portfolios; Ondo implements the models using tokenized assets, rebalances them on a preset schedule, and decides whether to apply any model changes, so a portfolio may differ from its corresponding model. Tokens remain transferable peer-to-peer around the clock, but possession alone does not qualify a holder to redeem with Ondo, and CryptoBriefing reported the ONDO token rose as much as 30% around the launch.