regulation
Deutsche Bank targets Asia crypto custody for 2027 after October 12 BaFin-MiCA nod
Deutsche Bank opens BTC, ETH, USDC, EURC and EURAU custody in Germany within weeks after an October 12 BaFin MiCA nod. Asia expansion follows in 2027.
regulation
Deutsche Bank opens BTC, ETH, USDC, EURC and EURAU custody in Germany within weeks after an October 12 BaFin MiCA nod. Asia expansion follows in 2027.
protocol
Kinexys by J.P. Morgan put JPMD, its dollar-deposit token, live on Ethereum mainnet on October 19, extending it beyond Base and opening EVM-wide institutional transfers.
infrastructure
Nine blockchain organizations formed the Quantum Alliance on October 15 to set open post-quantum readiness criteria across networks, wallets, zk systems, and cross-chain compatibility.
protocol
Balaji Srinivasan's Network School takes over the Farcaster app and protocol repos; users must accept moderation rules recorded in an access NFT or drop to read-only.
OpenAI reports a GPT-5.6 Sol research model derived keys from 362 public developer seed phrases, found one funded Sepolia account, and used it to pay deployment gas without authorization.
regulation
The European Banking Authority designates Circle's USDC the first significant EMT under MiCA, taking direct responsibility for reserve and liquidity rules from France's ACPR on November 12.
regulation
Turkish intelligence and police detained Hex and PulseChain founder Richard Schueler at an Istanbul residence on October 14 under a Finnish Interpol Red Notice. Hex falls 25%.
governance
Starknet opens a 7-day Snapshot poll on Oct. 15 asking STRK holders whether to research an independent post-quantum Layer 1; early tally shows 177.6M STRK cast with 99.91% in favor.
ZKsync says its single-GPU Airbender Prime prover kept pace with 7,200 consecutive Ethereum mainnet blocks on an RTX PRO 6000 Blackwell. Vitalik Buterin's response: raise the next bar.
regulation
Nasdaq-listed PDC, led by former FTX Europe chief Patrick Gruhn, filed a notice October 14 to run a tokenized-securities venue; trading could begin after a 30-day review.
regulation
De Nederlandsche Bank authorised Qivalis B.V. as an electronic-money institution on October 14, the MiCA prerequisite to issue the consortium's euro-denominated EMT.
protocol
The NFT marketplace will close its website and wind Blend lending down on Nov. 12; smart contracts and the BLUR fee switch stay live. BLUR fell ~20% to $0.015.
infrastructure
Interactive Brokers has turned on Ethereum staking for eligible clients through its Client Portal, with Zerohash as the staking infrastructure provider announced as a launch partner in June.
The October 8 audit covers Universal Router PRs #469–#470 and v4-periphery #516: 17 issues, 2 Medium (one resolved, one disputed), 7 Low, 8 Notes. One finding could silently disable per-hop slippage.
exploit
A single wallet booked about $1.28M on Papertrade in its first hours by moving Hyperliquid's ETH midpoint. The 1000x venue says it is tightening open-interest caps.
infrastructure
Euronext Amsterdam-listed SWI, now at a €6.1B valuation, will repurpose Genesis Digital's 1.3GW mining fleet for AI/HPC and sell its Kazakhstan sites.
October 8 differential audit covers PR #457 (cross-chain via Across) and PR #497 (per-hop slippage) — one low finding on router allowances, fixed in PR #461.
protocol
StarkWare CEO Eli Ben-Sasson and the Starknet account say the project is actively considering a move from Ethereum L2 to a standalone L1 to chase 2027 post-quantum security. No proposal yet.
regulation
Conduit filed in SDNY on October 6, saying Tether's T3 unit froze $2.76M USDT on September 24, 2025 without a court order and keeps earning yield on reserves.
protocol
A last-minute Prysm patch switches the validator default to 200M gas so Sepolia's October 6 Glamsterdam activation actually tests the higher capacity target.
on-chain
Beaconcha.in puts the ETH exit queue at 850,736 ETH on Oct 2, a ~14.77-day wait. MetaMask Staking's precautionary exits account for ~523,000 ETH across 17,000 validators.
infrastructure
Blast, the Blur-team Ethereum L2 that peaked at $2.3B TVL in 2024, said on Oct 2 that operating costs exceed revenue and will wind down operations.
regulation
In its MiCA review submission, Circle argues the 30/60% bank-deposit floor concentrates credit risk and asks the Commission to replace it with a liquidity test.
regulation
SEC Release 34-106577 on Oct 2 approves listing of six 3x daily leveraged ETPs including bitcoin and ether, but trading waits for S-1 effectiveness.
protocol
Ethereum Foundation and Open Anonymity Project launched zkAPI on Oct 1, letting users pay OpenAI/Ollama-compatible endpoints from an ETH vault without the gateway linking requests to the deposit.
regulation
The Independent Community Bankers of America filed suit in D.C. district court on Oct 2 to block an OCC rule letting crypto firms obtain national trust charters.
regulation
US Treasury designated the A7 Network as a transnational criminal organization on Oct 1 and blocked its A7A5 ruble stablecoin, naming it as the pipe for $17B in sanctions-evasion flows used by Iran.
protocol
Co-author Jérôme de Tychey withdrew EIP-8363 from Hegota consideration Oct 1, conceding the fork scoping process is the wrong venue for an issuance-policy change. A separate track runs through 2027.
infrastructure
Lloyds Banking Group booked seven US-dollar settlements with Visa through Archax USDC, moved on Canton, with each flow landing in under an hour including weekends.
infrastructure
MetaMask disclosed an infrastructure incident Sept 30 and is exiting all its ETH validators from Lido by Oct 7, ~45-day return cycle. Sentora Morpho vaults shed ~$136M PYUSD/RLUSD.
governance
A Snapshot vote would liquidate remaining collateral to ETH and pay MIM holders roughly $0.04 per token, closing out a stablecoin whose effective backing has collapsed.
protocol
The DWS / Flow Traders / Galaxy joint venture ships USDAU under its BaFin e-money licence, live on Ethereum, Solana, Base, Polygon, Tempo and Arc.
protocol
Base's third mainnet upgrade lands validity transactions, composite allow/blocklist policies, ERC-8056 schedule multipliers, and a seizeWithMemo function for B20-standard tokens.
The Foundation for Verified Software and Verifereum will build a HOL4-verified compilation mode into the official Vyper compiler.
protocol
The self-custodial wallet returns two years after Aztec Labs shut down the original, now settling private DAI payments on its own zk-rollup with per-transfer caps.
explainer
Ten weeks in one post — the Coldcard $116M drain, the Liquid Network and Bitget breaches, SEC's Regulation Crypto Assets, THORChain's Monero swaps and more.
governance
The Ethereum Foundation named security researcher Pascal Caversaccio to its board on July 29, 2026 — a one-year voluntary term, expanding the Swiss foundation's board from three to four.
regulation
Paul Atkins told CNBC the SEC will move on crypto rulemaking under existing authority if the CLARITY Act does not pass the Senate; Project Crypto is already on the 2026 rulemaking agenda.
protocol
Vitalik Buterin's July 28, 2026 essay walks through Sora Suegami's diamond iO — the first iO construction whose overhead is measured in millions of years, not universe-lifetimes.
exploit
Allbridge Core paused its Solana deployment on July 19 after an attacker used a $1.12M Kamino flash loan and USDC/USDT swaps to drain roughly $1.65M and bridged to Ethereum.
exploit
Across said its Solana deployment was attacked at ~5:30 AM UTC on July 17. Users were kept whole; the loss sits with the Risk Labs relayer. Solana deposits paused.
protocol
Aave activated V4 on Avalanche on July 15 with one Liquidity Hub, three Spokes and a $15M Avalanche Foundation milestone-based incentive envelope.
governance
Uniswap Labs' Snapshot temperature check on activating v4 protocol fees closed July 12, 2026, with roughly 93% support. Binding on-chain vote runs the week of July 13.
protocol
The EF Protocol Support account announced its own dissolution on July 9, absorbing the team that ran All Core Devs into the new Protocol Layer cluster from the June 23 restructure.
regulation
Sony Bank's Connectia Trust NA — a $40M NY trust chartered to issue a USD-pegged stablecoin — cleared OCC conditional approval on July 7. Operations targeted for 2027 after final sign-off.
protocol
Karst (Upgrade 19) activated July 8 16:00 UTC across op, ink, zora, mode, lisk, metal, unichain, soneium, ethernity, tbn. Adds L2CM, promotes kona-client, ports five Osaka EIPs. op-geth EoS.
exploit
Summer.fi's Lazy Summer vaults lose $6.04M in an ERC-4626 donation attack. Root cause: a Silo Varlamore USDC vault token stale-priced since November's Stream Finance collapse. Vaults paused.
exploit
A flash-loaned donation to Summer.fi's Ark inflated FleetCommander.totalAssets() and let an attacker redeem $70.9M from a $64.8M deposit. Lazy Summer vaults paused; funds are moving to Tornado Cash.
exploit
An attacker skipped Hinkal's zk verification with a 'Proofless Deposit', drained ~$820K in USDC on Ethereum, and laundered 410 ETH via Tornado Cash plus 44.7 ETH bridged to Bitcoin over THORChain.
The Foundation's monthly 40.63M ENA release hits July 2. Three days later a 171.88M cliff — 2.82% of circulating supply — arrives from the Core Contributors and Investors buckets.
protocol
Robinhood launched its Ethereum L2 on July 1 on Arbitrum Orbit with Chainlink CCIP and Data Streams live day one, Uniswap and Pleiades AMMs, and 24/7 stock tokens in 120+ countries.
exploit
A flash-loan-assisted exchange-rate manipulation between GOOGLx and wGOOGLx on Edel's xStock lending market inflated collateral 78×, opening ~$403K of bad debt routed through Tornado Cash.
governance
Researchers flagged a June 25 Tornado Cash governance proposal that swaps the DAO treasury address for a lookalike — ~$23M in TORN and relayer balances at risk.
infrastructure
Loopring took its zk-rollup DEX relayer offline on June 28, 2026, ending the first production zkRollup on Ethereum. A whitelist-only smart contract upgrade returns L2 balances to L1.
governance
Snapshot closed GIP-151 on June 27 above 215% of quorum, authorising pro-rata redemption of GNO for the DAO's liquid treasury — over the cofounders' opposition.
infrastructure
A consensus bug sequenced an invalid block, halting Base's single sequencer for ~2 hours. Sequencing restored by 17:51 UTC; Beryl mainnet upgrade still set for 18:00 UTC.
protocol
The Ethereum Foundation laid off 54 staff (~20%) and slashed its 2026 budget 40% on June 23, reorganizing into five layer-clusters under a 5% endowment-spend target by 2030.
protocol
A June 21 ethresear.ch post by Clément Lesaege would let Ethereum validators vote to redirect 0–10% of staking rewards — ~50–70k ETH a year — to ecosystem funding via a splitter contract.
exploit
Taiko's chain state verification was compromised on June 22; proposers stopped producing blocks, the ERC20 Vault on Ethereum was drained for an estimated $1.7M, and all bridges are flagged unsafe.
exploit
Attacker farmed approvals from Ethereum's largest sandwich bot using 66 fake WETH/USDC/USDT tokens, then swept ~1,474 WETH, 2.87M USDC and 2M USDT in a single sweep tx.
protocol
Beryl ships a native B20 token precompile, cuts L1 withdrawal delay from 7 to 5 days, and lands Reth V2 with ~50% lower disk and +33% throughput. Sepolia live June 18, mainnet June 25.
exploit
On June 14, an attacker exploited a numRealTxs vs decoded_slots gap in Aztec Connect's immutable rollup contract and drained 909 ETH, 270,513 DAI and 167.89 wstETH.
protocol
Glamsterdam-devnet-5 and -6 are now running with every planned EIP — ePBS, BALs, gas repricing. Foundation engineers describe it as the last phase before testnet hardening.
regulation
On June 11, Japan's House of Representatives passed the FIEA amendment reclassifying crypto as financial instruments. Flat 20% tax (vs 55%), insider-trading ban, spot ETF path. Upper House next.
exploit
An attacker bought >50% of a 16,384-supply MiniMeToken, used a no-timelock Aragon Voting app to mint 10B TOP in a single tx, and swapped them for 944.2 WETH from a Balancer V1 pool.
exploit
Coordinated Ethereum + BSC attack on Humanity Protocol's Hyperlane bridge: 141.2M H drained, 200M minted on BSC, ~$36M stolen. Team blames a compromised employee laptop; H down ~86%.
exploit
Yuga's blockchain lead 0xQuit and researcher Coffee pulled 29 BAYC, 2 CryptoPunks and 37 other blue-chips out of Flooring before an attacker could redeem them through the fpToken bug.
protocol
IoTeX mainnet hard-forks at block 48,985,561 (~23:52 UTC on June 7). v2.4.0 'Yap' ships EIP-7702 account abstraction, EIP-7623 calldata repricing, EIP-2935 and EIP-2537.
governance
The Foundation proposes a $43.5M 2027 operating budget — $16M stablecoins/RWA, 1,740 ETH and 230M ARB — drawn from the DAO treasury. On-chain vote opens June 8.
exploit
Gnosis co-founder Martin Köppelmann confirms an active exploit on Gnosis Pay tied to Zodiac Delay Modifier v1.1.0 and Roles Modifier v2; Gnosis pledges to cover all user losses.
on-chain
Researcher 0xFlorent_ found an integer-overflow path in the HongCoin admin function and unlocked 1,003.62 ETH (~$2M) trapped in the 2016 ICO refund contract for nine years.
regulation
A U.S. federal TRO in Newton AC/DC Fund v. Ermilov forced Circle to blacklist Zama's cUSDC contract at 01:08 UTC on May 30, 2026, locking 12.6M USDC.
exploit
Cosmos-Ethereum Gravity Bridge lost ~$5.4M on May 30. Peckshield and on-chain analyst Specter call it a signing key compromise. Team halted validators; attacker holds ~2,102 ETH.
protocol
The Kohaku privacy SDK landed @kohaku-eth/railgun v0.0.1-alpha.22 on May 26 — brotli compression, ERC-4337 mempool relaying operational. Tornado Cash and Privacy Pools modules still in dev.
exploit
Bybit's primary ETH cold wallet lost about 401,000 ETH on Feb 21, 2025 via a Safe{Wallet} UI manipulation. Arkham and the FBI attribute the attack to Lazarus.
protocol
Pectra went live on Ethereum mainnet on May 7, 2025. Eleven EIPs ship together; EIP-7702 gives EOAs temporary contract code, EIP-7251 raises the validator effective-balance cap to 2048 ETH.