https://xiyu.news/feeds/crypto-en.xml 2026-10-01T00:00:00Z https://xiyu.news/editions/2026-10-01/#rss:cointelegraph.com_rss:4a572133f998250e 2026-10-01T00:00:00Z

Bitget CEO Gracy Chen said in a Wednesday X post that withdrawals for all tokens would resume on Friday, after a security breach that cost users $388 million, and that access to Bitcoin (BTC), Ether (ETH) and USDt (USDT) had already been restored. She also said the exchange's Protection Fund had reached $309 million and "absorbed the financial impact of the incident." The phased return of withdrawals marks a partial operational recovery for users whose funds were affected by the breach. According to Chen, the Protection Fund was created for moments like this and absorbed the financial impact of the incident. The Protection Fund was initially set up by Bitget in January 2022 with 5,500 BTC to reimburse users' potential losses that were "not a result of any misconduct from the user or the platform itself." Chen said Bitget had not ruled out parties potentially responsible for the $388 million attack, including a possible inside job or North Korean hackers, and the company launched a bounty program offering 5% of frozen funds plus 5% of any recovered funds.

https://xiyu.news/editions/2026-10-01/#rss:protos.com_feed_:bc9e1e1feb14e052 2026-10-01T00:00:00Z

Abracadabra has opened a governance vote on an “orderly wind down” of the protocol, citing a series of security incidents that it says leave its Magic Internet Money (MIM) stablecoin with “no viable path back to parity.” The proposal states there are 22 million MIM outstanding against roughly $900,000 in “actionable backing,” an implied value of about $0.04 per MIM; at the time of writing the vote had received about 100 million SPELL in favour and 0.5 million against, and was set to close Wednesday evening. The vote would formalise the end of a protocol whose total value locked once reached $6 billion, and its disclosed shortfall implies large losses for remaining MIM holders. DeFi commentator and Trading Strategy co-founder Mikko Ohtamaa has publicly called the move “treasury looting,” pointing to earlier DAO transfers. According to the article, the protocol accumulated $21 million in bad debt from a $6.5 million hack in January 2024 and two further exploits in March and October 2025 worth $13 million and $1.7 million. Ohtamaa cites treasury sales of MIM on Curve on June 8 and 11 that netted sellers roughly $0.5 million “while MIM was already losing its peg,” and a subsequent “treasury extraction” of over $8 million to a Binance deposit address and an unlabelled address; the wind-down proposal does not address those funds or count them in redemption calculations.

https://xiyu.news/editions/2026-10-01/#rss:www.coindesk.com_arc_outboundfeeds_rss_:5546cd7c47fa3b7e 2026-10-01T00:00:00Z

Open USD (OUSD), the stablecoin backed by founding partners Coinbase, Mastercard, Shopify, Stripe and Visa, went live on Wednesday on Ethereum, Solana, Base and Tempo. Open Standard CEO Zach Abrams said the "overwhelming majority" of the company's equity will be distributed over time to partners based on how much they help grow OUSD supply and transaction activity. OUSD enters a stablecoin market worth more than $300 billion that is still dominated by Tether's USDT (about $143 billion in circulation) and Circle's USDC (roughly $74 billion), as competition shifts from simply issuing a digital dollar toward distribution, liquidity and the platforms where customers use it. The report says Open Standard's initial June announcement rattled competitor Circle. Coinbase, Mastercard, Shopify, Stripe and Visa are Open Standard's first five founding partners and investors, each receiving an equal initial equity stake, with individual investment and stake sizes undisclosed. The partner network has grown from more than 140 to over 200 companies, with UBS, Japan's SBI Holdings and fintech Jeeves among the latest additions, and Abrams said he expects the founding group to eventually expand to roughly 10 to 12 companies along with a board of directors drawn from founders.

https://xiyu.news/editions/2026-10-01/#rss:thedefiant.io_api_feed:b75a0e89c0010a26 2026-10-01T00:00:00Z

Kalshi is in advanced talks to raise roughly $1 billion at a valuation of about $40 billion, with existing investor Sequoia Capital and Wellington Management negotiating to co-lead the round and Tiger Global Management and Dragoneer Investment Group listed as potential participants, Reuters reported. The round is expected to close within weeks and would value the prediction market platform about 82% above its $22 billion valuation in May. The reported round indicates continued institutional appetite for regulated, crypto-adjacent event trading, and would fund Kalshi's stated push beyond sports and election contracts toward a broader multi-asset trading platform that competes with CME and Intercontinental Exchange, the parent of the NYSE. The talks are not final: Kalshi and Tiger Global declined to comment, while Sequoia Capital, Wellington Management and Dragoneer had not responded, according to the report. People familiar with the matter also said Kalshi has held preliminary discussions about a potential IPO in the coming years, and that rival Polymarket is separately negotiating a $1 billion round.

https://xiyu.news/editions/2026-10-01/#google_news:article:62f9aa33b913be51 2026-10-01T00:00:00Z

BlackRock has brought investment portfolios onto the blockchain as digital tokens, extending tokenized real-world-asset products from the world's largest asset manager into mainstream investment offerings. According to reports on the launch, BlackRock builds the portfolios and Ondo Finance tokenizes them by issuing one token that tracks each portfolio, with three portfolios involved. The move gives tokenized real-world assets a major mainstream endorsement from the world's largest asset manager, pushing on-chain portfolio products from niche pilots toward mainstream investment offerings. The tokenized products are model portfolios — preset investing templates — with one token issued per portfolio to track its performance. Reporting on the launch ties the tokenization to Ondo Finance.

https://xiyu.news/editions/2026-10-01/#telegram:theblockbeats:198337 2026-10-01T00:00:00Z

BAL holders have approved proposal BIP-928 for the orderly wind-down of the Balancer protocol, while BIP-929, which would have continued the Balancer technology under a new name, was rejected, Balancer announced on September 30. Existing pools will operate normally until October 30, and users can withdraw funds throughout the process. The vote ends a long-running, widely used DeFi automated market maker and sets out a treasury distribution to BAL holders; Balancer said its contracts are non-custodial, so withdrawals do not depend on the project continuing to operate. Reports put support for BIP-928 at more than 99% of the roughly 17.2 million BAL cast, with BIP-929 failing at about 70% against. Under the timetable, October 16 is the deadline for partners to apply to keep specific V3 pools running until November 30; on October 30 pools that can be paused move to withdrawals-only mode and the bug bounty program ends; on November 30 the V3 Vault pauses. BAL holders need not act now — from late May 2027 they can burn BAL for a pro-rata share of DAO treasury assets, with the exact opening date to be announced at least two weeks in advance.

https://xiyu.news/editions/2026-10-01/#telegram:theblockbeats:198327 2026-10-01T00:00:00Z

At its HOOD Summit in Houston, Texas on Tuesday, Robinhood announced a set of products for active traders: tradable AI agents, crypto perpetual futures with up to 10x leverage, and weekend trading in select US stocks and ETFs. The platform also said it will extend options trading hours, raise intraday margin limits, and add corporate earnings event contracts. The announcement would widen US retail access to leveraged crypto derivatives and to agentic trading if the products launch as described, extending Robinhood beyond its existing equities and spot crypto offering. Crypto perpetual futures will be offered through Robinhood Derivatives and Bitstamp to eligible US users, with BTC and ETH contracts supporting up to 10x leverage and other supported assets initially at 3x. Robinhood Agents let users select OpenAI or Anthropic models within the app and grant them access to a segregated trading account; the platform requires user approval for each trade by default, users can turn that off, and margin lending is not supported at launch. Weekend trading will be provided through the alternative trading system Bruce ATS, covering select stocks and ETFs.

https://xiyu.news/editions/2026-10-01/#telegram:foresightnews:119541 2026-10-01T00:00:00Z

Swift CEO Javier Pérez-Tasso said at the opening of Sibos 2026 in Miami that Swift's blockchain-based ledger is now live and in use by some large global financial institutions. By the end of this year, at least 19 banks will use the ledger across 5 major currencies to support 24/7 payments using tokenized deposits. The announcement marks a shift from pilot planning to production use of blockchain-based settlement infrastructure at the interbank messaging network that most cross-border payments already rely on. It also places bank-issued tokenized deposits, rather than stablecoins, at the centre of efforts to make institutional payments always available. Pérez-Tasso gave the figure during his Sibos 2026 opening remarks, framing the ledger as supporting 24/7 payment availability through tokenized deposits. Swift's own press materials describe the blockchain ledger as an additional shared ledger that records and validates interbank payment commitments, rather than a replacement for its existing messaging layer.

https://xiyu.news/editions/2026-10-01/#rss:thedefiant.io_api_feed:29574ed238e3ec8e 2026-10-01T00:00:00Z

Ostium's recovery portal, opening Wednesday, will fully repay the 3,321 wallets that lost $1,000 or less. The remaining 345 wallets, which carry at least 86% of the $23.8 million total loss, must choose between a $1,000 payment and a pro-rata claim on funds Ostium has not yet recovered. The plan resolves the small-loss majority outright while leaving the largest losses unresolved, meaning most affected users are made whole and the most exposed wallets must accept a capped payout or wait on unrecovered funds. The 345 wallets hold at least 86% of the $23.8 million in total losses. Their alternative to the $1,000 payment is a pro-rata claim, i.e. a payout proportional to their share of losses, on funds Ostium has not yet recovered.

https://xiyu.news/editions/2026-10-01/#telegram:foresightnews:119520 2026-10-01T00:00:00Z

Chainlink has launched Chainlink Fulcrum, an institutional financing and collateral-management solution that supports cross-chain repo and other collateralized funding transactions between public and private blockchains. According to Chainlink's blog, counterparties can use a single entry point to select eligible assets, set financing terms and coordinate settlement on any supported chain, with 24/7 operational support. The design separates the venue where financing agreements are managed from the networks where cash and collateral settle, which could allow institutions to keep assets on their existing ledgers while coordinating cross-chain transactions. Chainlink said it had previously demonstrated the cross-chain institutional financing workflow with DTCC at Sibos 2026. Chainlink Fulcrum integrates Chainlink's CRE, CCIP and Data Streams, and Chainlink states it does not custody assets, act as a counterparty, or operate a trading venue.

https://xiyu.news/editions/2026-09-30/#rss:thedefiant.io_api_feed:41793e12b9c734f9 2026-09-30T00:00:00Z

Balancer token holders approved a wind-down of the protocol and rejected an official fork, according to the vote outcome reported by The Defiant. Under the approved shutdown, pausable pools move to withdrawals-only on Oct. 30, and BAL holders can begin redeeming their tokens for treasury assets at the end of May 2027. The vote closes out one of DeFi's long-running automated market makers and, under the proposal, replaces BAL's role as a governance and utility token with a claim on remaining treasury assets distributed in kind to holders who burn their tokens. Liquidity providers and token holders must now act within the wind-down timeline. About $52.4 million remains in Balancer V2 and V3 pools, and withdrawals will stay open, though treasury redemptions are not scheduled to begin until May 2027. Reported wind-down details also include an end to bug bounty coverage on Oct. 30 and a pause of the V3 Vault on Nov. 30.

https://xiyu.news/editions/2026-09-30/#telegram:foresightnews:119349 2026-09-30T00:00:00Z

Avalanche said in a post that Goldman Sachs is bringing its roughly $100 billion treasury fund FTIXX onto Lynq, a private permissioned L1 deployed on Avalanche. Trading of the fund will be handled by licensed broker tZERO Securities and is initially open only to eligible US clients, who must complete onboarding with both Lynq and tZERO. It extends the tokenization of traditional fixed-income products by a top-tier bank onto a permissioned chain that Avalanche says is already connected to more than 30 institutional participants. Lynq is described as a private permissioned L1 deployed on Avalanche, with B2C2, Wintermute, Galaxy, FalconX and Fireblocks among the more than 30 institutions already onboarded. Access to FTIXX on Lynq is limited to eligible US clients and requires onboarding with both Lynq and tZERO.

https://xiyu.news/editions/2026-09-30/#rss:cointelegraph.com_rss:63f77747b6fda2d2 2026-09-30T00:00:00Z

Bitget CEO Gracy Chen said she is "not very optimistic" about freezing or recovering the funds lost in the exchange's $388 million security breach, speaking on Cointelegraph's Chain Reaction released Tuesday. She pointed to the February 2025 Bybit hack as a "good reference point," noting that roughly a year later only about 3.5% of Bybit's stolen funds had been frozen. The on-record assessment signals that most of the $388 million taken from Bitget is unlikely to be frozen or returned to affected users, framing recovery expectations well below the full loss. Chen distinguished freezing from recovery, saying the 3.5% figure for Bybit "is only the freezing. It's not about recovery yet." Bitget launched a bounty program offering 5% of funds frozen and 5% of funds recovered; NEAR Intents said Monday it blocked more than $50 million in assets tied to the attack and froze about $500,000, while Chen confirmed Tether and Circle blacklisted an exploit-linked wallet, freezing $318,013 in USDT and USDC. Withdrawals have resumed in stages, starting with Bitcoin on Monday and ETH on Tuesday, and Chen said Bitget had not "totally ruled out" an inside job while describing the investigation as preliminary.

https://xiyu.news/editions/2026-09-30/#telegram:foresightnews:119420 2026-09-30T00:00:00Z

Bitwise Asset Management said its Bitwise NEAR ETF (ticker NRR) began trading on NYSE Arca on September 29, 2026, making it the first US spot exchange-traded product for NEAR. The fund holds NEAR directly and charges a 0.75% management fee. NRR is the first US spot ETP giving brokerage-based exposure to NEAR, and it adds an in-fund staking component through which Bitwise intends to stake the fund's tokens. Bitwise plans to stake the fund's NEAR holdings to earn roughly 5% average staking rewards, and said it has worked on a US NEAR ETF since launching a European NEAR ETP in June 2025. NRR joins Bitwise's US single-asset lineup tracking Bitcoin (BITB), Ether (ETHW), Solana (BSOL), XRP (XRP) and Hyperliquid (BHYP).

https://xiyu.news/editions/2026-09-30/#telegram:theblockbeats:198261 2026-09-30T00:00:00Z

According to a Bloomberg report cited on September 29, the merger between Adam Back-backed bitcoin treasury company BSTR Holdings and a Cantor Fitzgerald-affiliated SPAC was terminated, with BSTR required to pay a $15 million breakup fee. The same report points to multiple lawsuits against Blockstream Mining — the mining business Back helped found and in which he holds a minority stake — filed with partner Exacore over alleged unpaid equipment bills, electricity charges and customer deposits tied to roughly $2 billion in financing. The setbacks land on Blockstream, described as one of the crypto ecosystem's oldest infrastructure companies, and on a public-market bitcoin treasury vehicle promoted by a figure long treated as a foundational name in Bitcoin. The report frames them as signs of mounting pressure across businesses tied to Back as the industry undergoes another major reshuffle. The attack on Blockstream's bitcoin sidechain Liquid Network involved roughly 4,000 BTC stolen (about $320 million), of which 3,400 BTC has been returned while the attacker still holds bitcoin worth about $47 million. A separate $6.7 million lawsuit was filed in San Francisco federal court on September 11 against a company still carrying the Blockstream name, according to a report addressing confusion between similarly named entities.

https://xiyu.news/editions/2026-09-30/#rss:www.coindesk.com_arc_outboundfeeds_rss_:8573240a03f53daa 2026-09-30T00:00:00Z

Bloomberg reported Monday that London-based crypto services company Blockchain.com is aiming to go public by the end of 2026, seeking to raise about $500 million at a valuation of $4 billion to $6 billion in discussions with prospective investors. Blockchain.com filed confidentially for an IPO with the U.S. Securities and Exchange Commission earlier this year. The reported listing would follow a quiet year for crypto IPOs, after a weak market in early 2026 prompted some companies to delay their plans. The confidential filing lets Blockchain.com begin the SEC review process before publicly disclosing financial details of the listing; no terms have been finalized, the report is based on people familiar with the matter, and Blockchain.com did not respond to CoinDesk's request for comment.

https://xiyu.news/editions/2026-09-30/#google_news:article:c3285e19507ce9d0 2026-09-30T00:00:00Z

BlockTower Capital claims a $25 million hack loss tied to Coinbase, according to a report by The Cryptonomist, which says the claim renews questions about security vulnerabilities at the exchange. Crypto Briefing reported that BlockTower co-founder Ari Paul alleges Coinbase lost $25 million of BlockTower funds and covered it up. The claim revives scrutiny of Coinbase's security practices and of how the exchange handles institutional client assets, based on the reports' framing of renewed questions about exchange security. The allegation is attributed to BlockTower co-founder Ari Paul and includes a claim of a cover-up; the reporting is headline-level and does not detail the incident mechanics, and no acknowledgment from Coinbase is cited.

https://xiyu.news/editions/2026-09-30/#rss:cryptoslate.com_feed_:1bc6b523c86e5256 2026-09-30T00:00:00Z

Coinbase said on Sept. 28 that Citi institutional clients can accept stablecoin payments through Spring by Citi, Citi's merchant platform, using Coinbase's payments infrastructure. Coinbase also said its Virtual Accounts can automatically convert incoming fiat into stablecoins, with Citi's Virtual Account Wallet providing the underlying banking infrastructure. A major global bank enabling institutional clients to receive stablecoin payments, with the exchange handling the crypto leg behind the scenes, extends stablecoin acceptance into regulated banking rails. The two named services give the companies' earlier digital asset payments partnership defined, customer-facing uses. Coinbase describes the capability as available now, but neither company disclosed customers, transaction volumes, pricing, eligible currencies or supported stablecoins, so the practical scale remains unverified. The two paths serve different customers — Citi institutional payment clients on one side, Coinbase Virtual Account customers on the other — and the announcement does not establish that a single customer can use both.

https://xiyu.news/editions/2026-09-30/#google_news:article:46bd2e790db5f308 2026-09-30T00:00:00Z

Bybit announced it will accept Franklin Templeton fund shares, including the asset manager's tokenized money market fund, as collateral on its platform. A separate report described the move as a strategic collaboration between the two firms aimed at expanding access to tokenized investing. The arrangement broadens the set of institutional-grade collateral available for crypto trading by linking a traditional asset manager's fund products to an exchange's margin system. The announcement covers Franklin Templeton fund shares, with the tokenized money market fund specifically named as eligible collateral. Bybit is the platform extending the collateral option; no launch date or eligibility criteria were specified in the available material.

https://xiyu.news/editions/2026-09-29/#rss:cryptoslate.com_feed_:315e3f6485e3c68f 2026-09-29T00:00:00Z

After Bitget resumed Bitcoin withdrawals at 08:00 UTC on Sept. 28, CEO Gracy Chen said the exchange had processed 9,585 withdrawal orders totaling 4,098.036 BTC as of 17:00 UTC+8. Separate DeFiLlama data showed Bitget's tracked Bitcoin balance falling to about 30,770 BTC from 35,412 BTC, a decline of roughly 4,642 BTC (about $391 million). The rapid outflow is the first indication of how users are responding after Bitget froze withdrawals for four days while investigating the largest security incident in its eight-year history. At the same time, investigators are racing to trace the $387.5 million haul as laundered assets are scattered across chains and privacy tools. The reserve decline is larger than the withdrawal volume Chen reported, and DeFiLlama tracks assets held in wallets attributed to exchanges, so changes can also reflect wallet movements or differences in address coverage rather than customer withdrawals alone. Ethereum withdrawals are scheduled to resume on Sept. 29, USDT on Sept. 30, and remaining tokens, fiat and peer-to-peer services on Oct. 2.

https://xiyu.news/editions/2026-09-29/#google_news:article:72fe4aea2865c66e 2026-09-29T00:00:00Z

Citi and Coinbase are expanding their partnership to give businesses infrastructure that connects traditional fiat payments with stablecoins, extending round-the-clock fiat access to a combined user base of more than 150 million. Reports describe the corporate stablecoin payments effort as a planned collaboration. Broadening bank-to-exchange payment rails gives users round-the-clock on-ramp and off-ramp access, linking regulated banking settlement directly to crypto trading venues. Reports characterize the initiative as a planned corporate stablecoin payments collaboration, framed around a combined user base of more than 150 million.

https://xiyu.news/editions/2026-09-29/#rss:protos.com_feed_:a12ee4154de7e90c 2026-09-29T00:00:00Z

Attackers drained more than 12.4 million XRP (roughly $18 million) from over 7,000 D'CENT wallets, and the losses spread beyond the XRP Ledger to Bitcoin, Ethereum, Tron, and Stellar using a single compromised recovery phrase. IoTrust, the maker of D'CENT, confirmed at least 110 abnormal transfer reports, including non-XRP assets, according to ZDNet Korea. D'CENT now warns that wallets created through its app are vulnerable, urging users to generate a fresh recovery phrase and immediately migrate everything, including tokens, NFTs, and staked assets. The cross-chain sweep shows that one leaked recovery phrase can drain the holdings of a multi-chain wallet across several networks. At least six waves of theft occurred between September 15 and 20, emptying 6,678 wallets of 11.7 million XRP, with the thief starting manually on large wallets and later writing scripts to hit progressively smaller ones. A further 640,370 XRP was taken after September 21, and by Friday 6.3 million of the stolen XRP had crossed to Ethereum via the swap service THORChain, with researchers saying "Most of it is no longer XRP."

https://xiyu.news/editions/2026-09-29/#rss:www.coindesk.com_arc_outboundfeeds_rss_:43d2a4e19c783247 2026-09-29T00:00:00Z

Goldman Sachs is offering its roughly $100 billion Treasury fund, FTIXX, to institutional digital-asset firms through Lynq, a settlement network used by crypto companies, with trades handled by SEC-registered broker-dealer tZERO Securities. It is the first outside fund offered on Lynq, and unlike BlackRock's BUIDL or Franklin Templeton's BENJI, the fund is not being tokenized — Lynq serves as a new distribution channel for the existing fund. The arrangement gives institutional crypto firms a yield-bearing place to hold trading cash between trades without requiring Goldman Sachs to build a tokenized blockchain product, reflecting what Lynq CEO Jerald David described as a convergence between traditional and digital-asset market participants. Getting FTIXX onto the network required Lynq to modify its technology, restrict access to U.S. clients and integrate with Mosaic, and customers also need a relationship with tZERO Securities plus onboarding and eligibility checks. Lynq runs on a private, permissioned Avalanche (AVAX) Layer 1 and says more than 30 institutional digital-asset firms are onboarded with more than $89 million in assets.

https://xiyu.news/editions/2026-09-29/#rss:decrypt.co_feed:e04c0517eb6051bf 2026-09-29T00:00:00Z

Chainlink launched CCIP 2.0 on Monday, introducing a Cross-Chain Verifier (CCV) feature that lets institutions run their own verifier for cross-chain transfers or hire one from firms such as Infosys or Nethermind, instead of relying solely on Chainlink's default network. Chainlink's documentation also confirms that "the Risk Management Network's automated offchain role is no longer active in current CCIP deployments," though it is expected to be offered as an optional validation layer in future releases. The upgrade gives institutions a configurable way to add their own verification of cross-chain transfers, arriving five months after the $292 million Kelp DAO hack pushed several firms to Chainlink. At the same time, an institution that adds no extra verifier now relies on a single verification network, where CCIP previously had two. Chainlink's default check is unchanged: a committee of 16 independent node operators that must reach consensus on every transfer, and starter kits for custom verifiers are available on Amazon Web Services and Google Cloud. The Risk Management Network's on-chain contract remains only as an emergency backstop, and Chainlink says equivalent independent checks can come from the optional CCVs instead.

https://xiyu.news/editions/2026-09-29/#google_news:article:92c3db281cc9dbea 2026-09-29T00:00:00Z

Coinbase-issued tokenized stocks are now accepted as collateral on Aave V4 on the Base network, extending DeFi lending to tokenized equity collateral tied to a major exchange. TokenPost described the change as Aave V4 adding Coinbase-tokenized U.S. stocks as USDC collateral. The integration adds a new collateral type to one of DeFi's largest lending protocols and connects an exchange-issued tokenized equity product to on-chain credit markets. According to Aave's own blog post, the tokens are offered under Regulation S and only to eligible non-U.S. persons in permitted jurisdictions, which limits who can actually use them. The tokenized stocks operate on Base and are backed 1:1 by real shares held in regulated custody, per Bitrue's explainer on Coinbase tokenized stocks. Aave's blog states these are securities issued by Coinbase and offered under Regulation S only to eligible non-U.S. persons in permitted jurisdictions.

https://xiyu.news/editions/2026-09-29/#rss:protos.com_feed_:4182d7a614288775 2026-09-29T00:00:00Z

Multi-chain decentralized exchange DYORSWAP integrated a spoofed version of the upcoming GIWA blockchain over the weekend after the fake chain reused GIWA's genuine chain ID, 9134. More than 1,000 users bridged a total of 767 ETH (roughly $2 million) into the fraudulent bridge contract, which the scammers drained and then routed through Tornado Cash. DYORSWAP said it will offer a 40% refund to users who bridged less than 5 ETH, with larger amounts handled case by case, and claims to have distributed over 200 ETH in compensation. The incident shows that a fake OP Stack chain reusing a legitimate chain ID can pass an integrator's initial verification. DYORSWAP said the spoofed bridge was deployed shortly after 6 PM UTC on Saturday and was emptied just over 12 hours later, and it tallied 1,335 addresses that had bridged a total of 767.65 ETH, almost all of which was later drained. The exchange also identified addresses it believes were behind the scam "based on timing and behavior," funded from Binance and Gate, and mentioned "specific suspicious messages" that may have planted false information in its community.

https://xiyu.news/editions/2026-09-29/#google_news:article:400eba9b141e13a1 2026-09-29T00:00:00Z

Kraken disclosed that stolen client data was used in an extortion attempt against the exchange, and publicly stated that it refused to pay the attackers' demand. The disclosure concerns client data rather than a loss of customer funds or exchange reserves. The incident is a security and trust event for Kraken's users, whose data is at the center of the extortion attempt, and the exchange's public refusal puts its position on record rather than resolving the matter privately.

https://xiyu.news/editions/2026-09-29/#rss:www.coindesk.com_arc_outboundfeeds_rss_:e642fb41b08bcf38 2026-09-29T00:00:00Z

Franklin Templeton and Bybit announced a program allowing eligible institutional clients to pledge tokenized shares of Franklin Templeton money market funds, issued through its Benji platform, as collateral for USDT- or USDC-denominated trading credit lines on Bybit. The fund shares stay in off-exchange custody and continue to earn yield while being used to finance trading on the exchange. The arrangement extends tokenized money market fund shares beyond buy-and-hold holdings into a collateral role for exchange trading, letting institutions finance crypto positions without selling the yield-bearing assets or moving them onto the exchange. Franklin Templeton and Bybit said they also plan a tokenized investment product for wallet users on Bybit and the Mantle network, but have not disclosed details. Franklin Templeton ran a similar structure with Binance in February 2026.

https://xiyu.news/editions/2026-09-28/#rss:www.theblock.co_rss.xml:4a445d9beef73a8d 2026-09-28T00:00:00Z

An onchain analyst has tied roughly $18.4 million in extracted value across 10 Pons V2 memecoin launches on Robinhood Chain to a single rug-pull operation, according to onchain data. The launches' creators exempted a set of wallets from Pons' anti-sniping tax, and those wallets went on to buy most of each token's supply before dumping. The operation extracted about $18.4 million in value from the affected launches, with the whitelisted wallets absorbing most of each token's supply before selling, per onchain data. The anti-sniping tax that Pons applies to deter snipers was waived by the same creators who deployed the tokens. According to The Block, the launches were flagged by onchain analyst Wazz, and the wallets that received the tax waiver bought out each launch in under a second, onchain data shows. The analysis covers 10 Pons V2 launches, with nine specifically identified in that report.

https://xiyu.news/editions/2026-09-28/#rss:cryptoslate.com_feed_:d018c92454693b96 2026-09-28T00:00:00Z

Bitget's XRP withdrawal route was still disabled on Sept. 26, with XRP placed in the exchange's final post-breach withdrawal reopening phase set for Oct. 2 at 08:00 UTC. Bitquery reported that 27.63 million stolen XRP had moved onward from two tracked attacker accounts by 02:54 UTC on Sept. 26, while 75.35 million XRP remained in the six accounts it tracked. For XRP holders on Bitget, trading remains available but XRP cannot be withdrawn to an outside XRP Ledger address until the scheduled Oct. 2 phase. The ongoing movement of the stolen tokens determines whether breach proceeds are being dispersed further. Bitget's reopening phases begin with BTC on Sept. 28, ETH on Sept. 29 and USDT on Sept. 30, with Oct. 2 covering "other tokens," fiat and peer-to-peer services; XRP is not listed separately. The exchange said it identified and remedied the vulnerability in the Sept. 24 incident, that user balances were unaffected, and that trading and deposits continue.

https://xiyu.news/editions/2026-09-28/#google_news:article:1e7e543f5f285f74 2026-09-28T00:00:00Z

Payward, the parent company of the Kraken cryptocurrency exchange, is advancing an expansion strategy anchored by roughly $2 billion in acquisitions, according to Crypto News. The push is aimed at growing the exchange's business. Payward co-CEO Arjun Sethi has said the company is unifying trading, payments, asset management and institutional services on common rails, and the reported acquisition push sits within that stated effort to build beyond a standalone crypto exchange. The acquisition programme is attributed to Payward, Kraken's parent company, rather than to the Kraken exchange itself.

https://xiyu.news/editions/2026-09-28/#rss:thedefiant.io_api_feed:8f434300f2842773 2026-09-28T00:00:00Z

THORChain rejected Bitget’s demand to block addresses linked to the exchange’s hacked funds, and an address flagged by Bitget subsequently completed an XRP-to-bitcoin swap through the protocol. OKX’s Star Xu also pushed back on THORChain’s comparison of itself with Bitcoin. The exchange’s request and the protocol’s refusal bring into public view the question of whether decentralized cross-chain infrastructure will act on freeze requests tied to stolen funds. Star Xu’s objection also directly contests the protocol’s stated comparison with Bitcoin. The flagged address moved XRP into BTC through THORChain after Bitget made its request. Star Xu’s pushback centered on THORChain’s comparison with Bitcoin.

https://xiyu.news/editions/2026-09-28/#rss:www.coindesk.com_arc_outboundfeeds_rss_:91cbbee54f91a225 2026-09-28T00:00:00Z

On September 27, 2026, Ethereum co-founder Vitalik Buterin published a post titled “The cryptographic world computer” outlining a 2030 vision in which execution moves to computers working off-chain that produce cryptographic proofs, so other computers verify results instead of repeating every calculation. The vision also covers privacy improvements for payments, balances and wallet activity, and Buterin said the transformation would accelerate after the planned Hegotá upgrade. The post is a roadmap statement from Ethereum's most influential figure, and it identifies cheaper proofs and secure coordination of parallel work as the conditions developers must still meet before such a shift is possible. It remains a vision rather than a shipped upgrade or specification. Buterin wrote that Ethereum's developers wanted to distribute work this way a decade ago but could not ensure every participant had done its part correctly, saying “the missing ingredient was verification,” and that earlier attempts to assign tasks to smaller groups added delays and left the network struggling to recover if a group failed. He also said Ethereum would still need to settle order-dependent questions, such as which of two payments spending the same funds came first, and suggested more of that work could be completed in advance with proofs combined to reduce data recorded on-chain.

https://xiyu.news/editions/2026-09-28/#google_news:article:883b44a6e0a8c9f7 2026-09-28T00:00:00Z

Binance has applied its high-risk Seed Tag to Hyperliquid (HYPE), a risk-warning label the exchange attaches to certain tokens, particularly new or early-stage listings. The change affects how HYPE is flagged and presented to traders on the platform. The Seed Tag is a risk warning that flags potential volatility to Binance users trading HYPE. According to Yahoo Finance, the tag coincided with a 4.5% drop in HYPE's price as whale wallets moved tokens to exchanges. Hyperliquid has a limited circulating float, with only about 26% of its 1 billion tokens in circulation, according to Yahoo Finance. Binance's own materials describe the Seed Tag as a risk label applied to tokens such as new or early-stage listings.

https://xiyu.news/editions/2026-09-28/#google_news:article:81650d86d83507be 2026-09-28T00:00:00Z

Cryptoticker.io reports that Ethena's USDe stablecoin is backed by tokenized equity tokens in addition to crypto collateral, in a piece framed as analysis of the stablecoin's reserve composition rather than a protocol announcement. The report does not quantify how much of USDe's backing is held in tokenized equities. USDe is one of the largest synthetic-dollar designs, so a shift in its collateral mix toward tokenized equities would extend its risk profile beyond crypto basis-trade exposure, per the report. Any such change matters to the DeFi venues that accept USDe as collateral or build yield products on it. The report characterizes USDe's backing as combining crypto assets with tokenized equity tokens, a category of digital tokens representing shares in companies or ETFs. No figures for the equity-token share of reserves, and no Ethena confirmation of the composition, appear in the supplied material.

https://xiyu.news/editions/2026-09-27/#google_news:article:f705ea62de42a519 2026-09-27T00:00:00Z

Bitget suffered a $388 million hack, and Changpeng Zhao (CZ), the founder and former CEO of rival exchange Binance, publicly offered his support to the exchange, according to a 24/7 Wall St. report. A breach of this size at a major exchange carries direct consequences for its users, and the public backing from a rival exchange figure is an unusual gesture in an industry where competitors rarely comment on each other's security incidents. The incident is described as a $388 million hack at Bitget, a Singapore-founded exchange that initially specialized in cryptocurrency derivatives and copy trading. The report's secondary angle is CZ's gesture, framed as coming from a rival rather than a business partner.

https://xiyu.news/editions/2026-09-27/#google_news:article:9f9a0d20da51db93 2026-09-27T00:00:00Z

Tokenized Apple and Nvidia stocks can now be used as collateral to borrow USDC on the Aave lending protocol. The listing extends real-world-asset collateral into DeFi credit markets, enabling a borrow-against-equity product on Aave. The move widens the range of accepted collateral on a major DeFi lending protocol from crypto-native assets to tokenized equities, linking equity exposure to onchain credit for the first time in this form.

https://xiyu.news/editions/2026-09-27/#rss:thedefiant.io_api_feed:3b10dd6be2d0487b 2026-09-27T00:00:00Z

CleanSpark closed a $2.276 billion note offering at a 7.875% rate, with proceeds earmarked for construction and to reimburse earlier equity contributions at its Sandersville, Georgia data center, which carries a 20-year lease. The deal ties a large, long-dated debt raise to a site held under a 20-year lease, extending institutional capital into bitcoin-mining data center capacity that had previously been funded with equity. The notes carry a 7.875% coupon, and the proceeds cover construction costs at the Georgia site while reimbursing prior equity contributions. Sandersville is a 150 MW facility.

https://xiyu.news/editions/2026-09-27/#rss:thedefiant.io_api_feed:ed5208d84523c298 2026-09-27T00:00:00Z

Anza announced on Sept. 25 that Alpenglow, its consensus overhaul for Solana, is live on devnet, a day after the separate testnet completed its transition, and the Solana Foundation’s upgrade page lists the upgrade as active on both networks. Mainnet activation remains unscheduled. Alpenglow targets roughly 150 milliseconds for finality, against about 12.8 seconds under the existing system, which could shorten the wait for an exchange to release deposited funds or a payment app to confirm a sale to a merchant. Because validator votes move out of blocks, reported transaction totals will also shrink even if user activity is unchanged. Validators will exchange votes directly instead of recording them as transactions inside blocks, allowing agreement in one or two voting rounds, and the Solana Foundation has told data providers to adjust their comparisons. The 150-millisecond figure comes from simulations rather than live-market results, and wallet processing and exchanges’ own deposit checks can add further waiting time; applications that only send transactions and read account balances require no migration.

https://xiyu.news/editions/2026-09-27/#rss:cryptoslate.com_feed_:0dc64a06501468de 2026-09-27T00:00:00Z

Evercrest Technologies, the company behind KelpDAO, has sued LayerZero Labs, its Canadian affiliate, and CEO Bryan Pellegrino in British Columbia over April's $292 million rsETH exploit, alleging negligent misrepresentation, negligence and defamation and seeking aggravated and punitive damages. Evercrest says Kelp users have withdrawn more than $650 million since the attack; Pellegrino has called the suit meritless. The filing asks a court to settle a responsibility dispute over who bears losses when an application-configured security setup and a provider's RPC infrastructure fail together. Customers have already acted independently: by Aug. 4, projects tied to roughly $14.5 billion in assets had announced moves from LayerZero to Chainlink's CCIP. LayerZero's verifier now refuses to sign on any channel where it is the only required signer, and by Aug. 4 the company had moved default pathways on both versions of its endpoint to a minimum of three verifiers, while applications can still build custom setups at the protocol level. LayerZero said in May that letting its own verifier act alone on high-value transfers had been a mistake, and it maintained the incident touched about 0.14% of the applications on its network. Evercrest alleges LayerZero approved the single-verifier setup in writing, telling Kelp in February 2024 there was "no problem" with a default configuration, and that it warned another developer, USDT0, about default verifier risks while withholding a comparable warning from Kelp; LayerZero says the choice was Kelp's, noting the application had previously used a two-of-two configuration before moving to one-of-one. Those allegations have yet to be tested in court.