Oct 2, 2026
Chainlink released CCIP 2.0, allowing institutions to run or hire their own verifiers that must approve cross-chain transfers alongside Chainlink's default network, giving enterprises more control over security for token transfers.
Crypto scammers created a counterfeit version of the Upbit-backed GIWA blockchain and tricked DYORSWAP into integrating it, leading to the theft of approximately 767 ETH (about $2 million) from over 1,300 wallets that bridged funds to the fake Layer 2 network. DYORSWAP has paid over 200 ETH in compensation to affected users.
THORChain declined Bitget's formal request to block addresses linked to the $387.5 million hack, stating it 'doesn't censor by design' and comparing itself to Bitcoin's permissionless nature, while approximately $6 million in stolen funds moved through the protocol.
Backpack CEO Armani Ferrante announced plans to expand tokenized stock access on Solana from approximately 200 symbols to 10,000, enabling shares to move between traditional brokerage accounts and decentralized finance platforms.
AlphaFi, a yield aggregation protocol on the Sui blockchain, is shutting down operations following an oracle misconfiguration. The SUI Foundation is reportedly assisting with the wind-down process, with new deposits and loans disabled.
Switchboard's oracle service for Solana ended support on September 25, giving applications only six days' warning to migrate their price feed infrastructure. The tight deadline has raised questions about which Solana applications still rely on Switchboard's data.
Ethena has started using Binance's tokenized stocks (bStocks) as spot collateral for its $4.9 billion USDe stablecoin, hedging them with short positions in Binance equity perpetual futures. This marks Ethena's first expansion of its basis trading strategy beyond crypto assets into traditional equities, potentially opening access to a $150 trillion market.
Evercrest Technologies, developer of KelpDAO, filed a civil claim in British Columbia against LayerZero Labs, its Canadian entity, and CEO Bryan Pellegrino over the April 2026 rsETH bridge exploit that caused roughly $292 million in losses. The lawsuit alleges LayerZero failed to disclose technical vulnerabilities and endorsed the setup used in the exploit.
BlackRock introduced three investment portfolios as blockchain-based tokens through Ondo Finance, marking the asset manager's latest push into tokenized traditional finance. The portfolios are based on model strategies developed by BlackRock.
Cosmos Hub validators stopped block production for nearly 25 hours following a governance attack on Neutron that initially led to losses of approximately $9.5 million, moving 1.23 million ATOM from attacker wallets after restart.
Onchain prediction market protocol Trueo announced it will move its primary deployment from Base Layer 2 to Ethereum mainnet, citing greater integration potential and network effects. Ethereum co-founder Vitalik Buterin welcomed the move, praising Trueo as an 'ethical' market contender.
Oracle provider Pragma rated six price feeds as critical risk on September 18 following a $3.5 million exploit on Starknet's lending protocol. The assessment revealed a gap between oracle valuations and the liquidity lenders need to sell collateral.
Ondo Finance has introduced a feature allowing eligible institutions to directly convert existing shares and ETFs into tokenized equivalents on blockchain, or redeem tokens for underlying shares. The service is live on Ethereum and BNB Chain through integration with Alpaca.
Pendle has opened a new market enabling DeFi users to trade fixed and variable yields on tokenized private infrastructure assets through the NGI+ token, bridging institutional-grade infrastructure investments with decentralized finance.
Binance Wallet has introduced Pre-Access campaigns via PancakeSwap, enabling eligible retail investors to subscribe to tokens that provide indirect economic exposure to private companies before they go public. The initiative targets approximately 1,300 private firms valued above $1 billion, representing roughly $4.7 trillion collectively.
Binance has expanded into the $9.6 trillion-a-day foreign exchange market by launching its first FX perpetual futures contract, offering round-the-clock trading of USD-Brazilian real pairs with up to 100x leverage, unlike traditional FX markets which operate on limited schedules.
XRP Ledger developers are employing mathematical proofs to verify whether the network's forthcoming lending market can be drained or become insolvent. Protocol research firm Common Prefix announced the testing initiative on September 17.
Fraudulent YouTube tutorials claiming to teach users how to build crypto arbitrage bots using Anthropic's Claude AI drained more than $517,000 in Ethereum from at least 224 victims, as blockchain intelligence reports a 440% surge in hackers using AI to hide malicious code on blockchains.
The Hong Kong Monetary Authority plans to introduce a wholesale central bank digital currency by the end of 2026 as part of Project EnsembleTX, enabling round-the-clock settlement for tokenized deposits and interbank payments.
Neutrl launched a redemption portal on September 17, 2026, allowing holders to redeem NUSD and sNUSD tokens at 51 cents on the dollar. The move comes as Strata scheduled a 48-hour valuation update that would write the junior tranche (jrNUSD) to zero while senior tranche withdrawals settle at revised share values.
Nostra Finance, a lending protocol on Starknet Layer 2, paused its money market after an attacker exploited a manipulated price feed for its NSTR token to steal $3.5 million. The exploit is notable as NSTR's entire market cap is under $600,000.
NEAR Protocol enabled private perpetual futures by default on September 17, routing all deposits through a confidential layer that masks positions. The feature is powered by Hyperliquid's infrastructure and represents the industry's first 'confidential by default' perpetuals trading.
An investigation reveals that Solana network validators are accepting payments starting at 10 SOL ($1,000) per month to provide quantitative traders with early access to pending transactions, enabling front-running opportunities through maximal extractable value (MEV) exploitation.
Chainflip protocol plans to restart operations by converting Tron liquidity provider balances into separate on-chain claims after a $736,000 exploit. The protocol has committed to making providers whole but has not disclosed repayment timing or funding source.
Blockchain finance platform Theo has launched thSLVR, a tokenized silver product that generates returns from silver lease commitments. The yield-bearing token is backed by $40 million in active leases, allowing investors to lend underlying silver to institutions and receive lease income.
Payward, the parent company of cryptocurrency exchange Kraken, announced plans to bring onchain perpetual futures markets on Hyperliquid to eligible U.S. clients using regulated infrastructure. The offering would utilize CFTC-regulated Bitnomial for deployment, clearing and settlement, with NinjaTrader Clearing carrying customer accounts, making it the first U.S.-regulated venue to offer such products.
DeFi Development, a Solana treasury management company, has opened a $300 million stock offering called CHAD, selling up to 30 million shares with a 13% dividend. The offering is backed by the company's Solana holdings, though actual proceeds and SOL allocation remain undetermined.
Federal prosecutors charged two Robinhood engineers, Hefu Chai and Huaisong Xiang, with commodities fraud and wire fraud for allegedly using confidential information about upcoming cryptocurrency listings to profit approximately $50,000 each through perpetual futures trades on the decentralized exchange Hyperliquid. The case extends traditional insider trading laws to decentralized crypto markets.
Federal prosecutors charged Hefu Chai and Huaisong Xiang with commodities fraud and wire fraud for allegedly using confidential information about upcoming Robinhood crypto listings to trade perpetual futures on Hyperliquid ahead of public announcements.
Decentralized exchange Balancer is proposing to shut down following a $130 million hack, with BAL token holders scheduled to vote September 25-29 on whether to claim proportional shares of over $9 million in remaining treasury assets or forfeit their claims.
A trading bot named Yoink intercepted approximately 2,900 rsETH worth $7.8 million during an exploit targeting a Gnosis Safe wallet on Ethereum. The bot's transaction beat the original attacker's into the same block, effectively hijacking the heist.
The House Ways and Means Committee voted 38-5 to advance the Digital Asset Tax Certainty Act, which would exempt crypto transactions under $10 from capital gains tax, clarify treatment of stablecoins, mining, staking, and lending, and apply wash sale rules to digital assets. The bill now moves to the full House.
Balancer, a major DeFi protocol, proposed winding down operations and distributing its approximately $9 million treasury to BAL token holders starting May 2027. The proposal would pause pools in October and cancel approved buybacks after the protocol failed to achieve sustainable revenue despite restructuring efforts.
Decentralized cross-chain swap protocol Chainflip paused its network after losing 736,442.17 USDT through six unauthorized payouts when an attacker exploited its handling of TRON transaction memos. The protocol has announced users will be made whole.
An attacker minted over 40 BTC worth of nBTC out of thin air on Nomic on June 25, but Osmosis took 74 days to discover the exploit, which left allBTC 36% unbacked. The incident contributed to an 8.3% decline in ATOM price amid shaken investor confidence.
Uniswap Labs has launched StablePair Hook, a Uniswap v4 dynamic-fee feature designed for stablecoin trading pairs like USDC/USDT. The hook enables liquidity providers to capture a portion of arbitrage profits generated from stablecoin trades, increasing their returns.
Solana memecoin platform Pump.fun introduced a Custom Pairs feature on September 9, allowing new tokens to trade against 93 quote assets including tokenized stocks like Nvidia, Tesla, and the S&P 500, expanding beyond its traditional SOL and USDC settlement options. The platform's mobile app also surpassed Robinhood Chain in Solana trading volume.
Steve Witkoff, President Trump's special envoy for peace, disclosed $107 million in 2025 income from a holding company that owned his stake in World Liberty Financial, a crypto venture he co-founded with Trump. The disclosure comes ahead of a Senate vote that Democrats have linked to conflict-of-interest concerns.
Compound Foundation opened a permissioned lending market on September 8 that restricts access to institutional borrowers only, effectively splitting the protocol into separate retail and institutional liquidity pools with loan-to-value ratios up to 87%.
Nine Swiss financial institutions including UBS, SIX, and TWINT launched a formal pilot test of CHFD, a stablecoin pegged to the Swiss franc, on September 8. The participants plan to test various use cases including automated transactions and settlement between financial institutions.
DeFi lending platform Anthias has proposed a solution to address bad debt issues, projecting lower monthly debt accrual under current market conditions. However, user USDC funds remain inaccessible, and reserve transfers and supplier cash access have not been verified.
Cryptocurrency exchange KuCoin has launched KCUSD, a new stablecoin product offering a base annual percentage rate of up to 4% with daily returns on eligible stablecoin balances. The company plans to expand KCUSD's functionality to include collateral and trading utility.
DeFi insurance protocol Cozy Finance was exploited for approximately $170,000 on the Optimism network, with the attacker draining funds and bridging them out within 13 minutes. Blockchain security firm Blockaid flagged the attack early Monday, marking the second time Cozy Finance has been compromised.
Cryptocurrency platform Rocket has halted all deposits, withdrawals, and trading after an attacker exploited a dormant perpetual market to manipulate prices and withdraw approximately $287,000 in positive profit and loss from the platform's Bridge.
A new proposal for the Aave decentralized lending protocol would grant bounded emergency roles with one-way safety controls, allowing markets to be frozen but not unfrozen. The current Risk Steward release cannot yet invoke these emergency safety calls.
The total market cap of assets on Robinhood Chain has climbed to approximately $1.87 billion, with tokenized stocks accounting for $73 million in DeFi deposits. The blockchain launched less than a month ago.
Robinhood Chain posted $3.7 billion in 24-hour decentralized exchange volume on September 5, a new all-time high for the Arbitrum-based Layer 2 network launched in July 2026. Weekly DEX volume reached approximately $10.47 billion.
Connecticut's attorney general issued a consumer alert about unregulated offshore DeFi trading platforms after a state resident lost access to $200,000 deposited following a deceptive solicitation and was unable to recover the funds.
Andreessen Horowitz's crypto arm published a blog arguing that blockchain throughput has improved sufficiently and the industry should now prioritize other infrastructure constraints like fair execution for financial markets. The firm is backing initiatives including a blockchain-powered 24/7 federally licensed bank.
DeFi protocol Notional Finance suffered a $1.7 million exploit on September 4, with an attacker draining approximately $69,000 in DAI and $1.66 million in USDC from a legacy escrow contract through an integer overflow bug. The stolen funds were reportedly moved to Tornado Cash.
Paxos-issued stablecoin USDG has launched natively on Mantle, with the Ethereum layer-2 network joining the Global Dollar Network as a partner. Mantle will receive a share of revenue generated from USDG usage on its network.
Curve DAO approved funding for yRisk to manage risk for crvUSD and Llamalend with 125,000 frxUSD and 568,181 CRV tokens on Sept. 2. yRisk is operated by two developers from Yearn and Resupply, the latter of which suffered a $9.6 million exploit in 2025.
Hyperliquid is testing HIP-3, an upgrade that introduces optional permissioned markets using on-chain allowlists controlled by independent deployers. The venue-scoped controls allow operators to restrict trading access to their own markets without affecting existing permissionless markets.
Animoca-backed Pencil Finance completed a $1 million student loan financing cycle entirely on-chain, providing financing to approximately 6,600 underserved students in Southeast Asia. The milestone marks the first time student loan capital has moved from funders to borrowers and back entirely on blockchain.
Natural disasters are projected to cost over $450 billion globally this year with only 38% insured, prompting efforts to tokenize catastrophe bonds and lower minimum investment thresholds from institutional levels to as low as $5,000 for retail investors.
Cryptocurrency exchange Gate is entering the prediction market space by offering a white-label builder that allows businesses to add forecasting tools to their existing applications, responding to growing demand for prediction market features.
Laser Digital, Nomura's digital asset subsidiary, is partnering with Keyring Network to develop institutional-grade onchain fixed-income products for decentralized lending markets. The first markets are being prepared for Euler Finance, though neither company disclosed committed capital or fee terms.
Hyperliquid Strategies increased its committed equity facility with Chardan Capital Markets from $1 billion to $2.5 billion, according to an SEC filing. The expansion gives the HYPE treasury company additional capacity to raise capital through share sales.
Hyperliquid Strategies increased its committed equity facility with Chardan Capital Markets from $1 billion to $2.5 billion, giving the HYPE treasury company additional capacity to raise capital through at-the-market stock sales.
Wallets linked to North Korea's Lazarus Group moved more than $30 million in Bitcoin through decentralized exchange Hyperliquid over three weeks, raising sanctions compliance questions as the platform pursues US market entry through talks with Kraken parent Payward.
Balancer issued a warning on Aug. 31 for liquidity providers to withdraw from its deprecated V1 pools after a fixed-point rounding flaw led to approximately $234,000 being drained. The deprecated pools are non-pausable, leaving withdrawal as the only protection.
Cronos validators halted the blockchain and erased 10,000 blocks to reverse a price manipulation exploit on the Tectonic lending protocol that resulted in over $70 million in losses. The controversial rollback saved $69 million in frozen assets but sparked debate about blockchain immutability.
Blockchain security firm CertiK reported that crypto losses reached approximately $215 million in August 2026, with DeFi exploits accounting for $144.6 million. Major incidents included a $75 million price manipulation attack on Tectonic protocol that halted the Cronos Network and a $9.3 million exploit of More Markets on Flow EVM.
Blockchain security firm CertiK reported that crypto losses reached approximately $215 million in August 2026, with DeFi exploits accounting for $144.6 million. Major incidents included a $75 million price manipulation attack on Tectonic protocol that halted the Cronos Network and a $9.3 million exploit of More Markets on Flow EVM.
The Cronos blockchain, linked to Crypto.com, suspended operations on August 30, 2026, following an exploit of Tectonic, its largest DeFi lending protocol. The attack, which began with a 100x pump of the TONIC token, resulted in approximately $75 million in losses.
The Cronos blockchain, linked to Crypto.com, suspended operations on August 30, 2026, following an exploit of Tectonic, its largest DeFi lending protocol. The attack, which began with a 100x pump of the TONIC token, resulted in approximately $75 million in losses.
A bridge configuration flaw on Base and BNB Smart Chain allowed attackers to hijack LayerZero delegate permissions, mint trillions of phantom SAND tokens, and drain approximately $675,000 from the Ethereum vault.
A security vulnerability in an outdated Rain card smart contract led to approximately $1.1 million being drained from Solana-based platforms on August 28, with Avici suffering $500,800 in losses affecting 1,685 users. The exploit caused Avici's token to crash 49%.
Circle has launched Cross-Chain Transfer Protocol V2, reducing USDC transfer times from minutes to seconds, with Aptos among the first to integrate. Legacy V1 applications have until December 1 to migrate before old routes stop working, with burn limits beginning to fall on October 31.
DeFi lending protocol Moonwell suffered an $8.7 million exploit after an attacker manipulated the price of MAMO token to borrow real assets against inflated collateral, prompting the protocol to set borrow caps to 1 wei across Base markets.
Ethena Foundation opened governance vote to route effectively all net protocol revenue to ENA token buybacks, contingent on USDe supply reaching approximately double current levels, while buying out seed investors who sold tokens.
The Dallas Federal Reserve warned that tokenized deposits could reduce U.S. banks' lending capacity by $700 billion if depositors become 10% more rate-sensitive, as the technology enables faster fund movement in search of higher yields. Meanwhile, 40 Japanese banks are testing blockchain-based tokenized deposit settlement to replace the country's 53-year-old Zengin clearing system.
Hyperliquid activated its Aligned Quote Asset v2 framework on August 26, routing yield from billions in USDC reserves into automatic buybacks and burns of its HYPE token. Circle serves as technical deployer while Coinbase manages the treasury reserves.
Bitwise Asset Management launched Automated Token Portfolios (ATPs) on Base, allowing eligible non-U.S. investors to hold self-custodied portfolios of Coinbase-issued tokenized U.S. stocks. The first active strategy, Mag7X, includes four tokenized stocks from the Magnificent 7 companies.
Arcus, a decentralized exchange built by the dYdX team in partnership with Robinhood Crypto, has launched the pToken protocol on Robinhood Chain. The protocol tokenizes managed perpetual futures accounts into transferable ERC-20 tokens, offering fixed-leverage exposure to assets like bitcoin and Robinhood stock without requiring users to manage positions directly.
Kinetiq, which controls approximately 82.5% of Hyperliquid's liquid staking market, announced the launch of Elysium, a new Layer 2 chain built on top of the Hyperliquid ecosystem. The L2 aims to improve HyperEVM performance, revive spot trading, and create a new KNTQ buyback engine using HYPE as the gas token.
Franklin Templeton has partnered with Hong Kong-licensed HashKey Exchange to distribute its tokenized Franklin OnChain U.S. Government Liquidity Fund (grBENJI) to professional digital asset investors in Asia through HashKey's Earn service. The fund represents part of Franklin Templeton's $15 billion real-world asset tokenization portfolio.
An attacker exploited Term Finance's DAO governance system on August 23, 2026, purchasing enough voting power for approximately 2 ETH to gain control of strategy vaults and drain $8.5 million from the Ethereum-based fixed-rate lending protocol.
HumidiFi, one of Solana's busiest decentralized exchanges, suspended all trading on August 22 after an internal network incident compromised a portion of its own systems. The platform clarified that customer assets were not affected, only platform funds.