Oct 2, 2026
The European Banking Authority has urged the European Commission to bring crypto lending and borrowing services under the EU's Markets in Crypto-Assets (MiCA) regulation. The EBA's recommendations include potential leverage caps, certification requirements for firms connecting users to DeFi lending platforms, and possible restrictions on facilitating lending with unauthorized stablecoins.
Oracle provider Pragma rated six price feeds as critical risk on September 18 following a $3.5 million exploit on Starknet's lending protocol. The assessment revealed a gap between oracle valuations and the liquidity lenders need to sell collateral.
XRP Ledger developers are employing mathematical proofs to verify whether the network's forthcoming lending market can be drained or become insolvent. Protocol research firm Common Prefix announced the testing initiative on September 17.
Neutrl launched a redemption portal on September 17, 2026, allowing holders to redeem NUSD and sNUSD tokens at 51 cents on the dollar. The move comes as Strata scheduled a 48-hour valuation update that would write the junior tranche (jrNUSD) to zero while senior tranche withdrawals settle at revised share values.
Nostra Finance, a lending protocol on Starknet Layer 2, paused its money market after an attacker exploited a manipulated price feed for its NSTR token to steal $3.5 million. The exploit is notable as NSTR's entire market cap is under $600,000.
Aave Labs announced plans to launch the Aave V4 RWA Hub on Avalanche, a dedicated real-world asset credit market that would allow institutions to borrow USA₮ stablecoins against tokenized collateral. Both the hub and USA₮ listing require Aave DAO approval, with no launch date specified.
Indian agricultural warehouse company Arya.ag is putting records for approximately $2 billion in stored crops and grain-backed loans onto an Avalanche-based blockchain. The initiative tokenizes grain deposits, warehouse receipts, and loans for agricultural lenders in India.
Compound Foundation opened a permissioned lending market on September 8 that restricts access to institutional borrowers only, effectively splitting the protocol into separate retail and institutional liquidity pools with loan-to-value ratios up to 87%.
Visa announced it will make more data available to companies lending on the blockchain, responding to strong demand for stablecoin-linked payment cards. The payments giant is pairing its settlement capabilities with expanded data services for the emerging crypto lending sector.
Visa announced it will integrate VisaNet settlement data with onchain lending infrastructure to help stablecoin-linked card issuers and fintech companies access working capital. The system uses payment and blockchain transaction records to automate lending decisions as demand for stablecoin cards increases.
DeFi lending platform Anthias has proposed a solution to address bad debt issues, projecting lower monthly debt accrual under current market conditions. However, user USDC funds remain inaccessible, and reserve transfers and supplier cash access have not been verified.
A new proposal for the Aave decentralized lending protocol would grant bounded emergency roles with one-way safety controls, allowing markets to be frozen but not unfrozen. The current Risk Steward release cannot yet invoke these emergency safety calls.
DeFi protocol Notional Finance suffered a $1.7 million exploit on September 4, with an attacker draining approximately $69,000 in DAI and $1.66 million in USDC from a legacy escrow contract through an integer overflow bug. The stolen funds were reportedly moved to Tornado Cash.
Curve DAO approved funding for yRisk to manage risk for crvUSD and Llamalend with 125,000 frxUSD and 568,181 CRV tokens on Sept. 2. yRisk is operated by two developers from Yearn and Resupply, the latter of which suffered a $9.6 million exploit in 2025.
Laser Digital, Nomura's digital asset subsidiary, is partnering with Keyring Network to develop institutional-grade onchain fixed-income products for decentralized lending markets. The first markets are being prepared for Euler Finance, though neither company disclosed committed capital or fee terms.
The Neuberger Securitize High Income Tokenized Fund (HINC), which holds high-yield corporate bonds and CLO tranches, is now accepted as collateral on Loopscale, allowing eligible investors to borrow USDG against their positions on Solana.
Cronos validators halted the blockchain and erased 10,000 blocks to reverse a price manipulation exploit on the Tectonic lending protocol that resulted in over $70 million in losses. The controversial rollback saved $69 million in frozen assets but sparked debate about blockchain immutability.
An arbitrator ruled that crypto exchange Gemini was not at fault for the collapse of its Earn lending program, finding that the company did not mislead users or neglect due diligence in its partnership with Genesis Global Capital. The ruling covers one claim by one user, though Earn customers lost promised interest despite recovering principal.
The Cronos blockchain, linked to Crypto.com, suspended operations on August 30, 2026, following an exploit of Tectonic, its largest DeFi lending protocol. The attack, which began with a 100x pump of the TONIC token, resulted in approximately $75 million in losses.
The Cronos blockchain halted block production on Sunday after an attacker exploited Tectonic, its largest lending protocol, by artificially inflating the TONIC token price roughly 100-fold and using it as collateral to borrow approximately $75 million in assets. Validators paused the network, stranding most of the stolen funds.
The Cronos blockchain, linked to Crypto.com, suspended operations on August 30, 2026, following an exploit of Tectonic, its largest DeFi lending protocol. The attack, which began with a 100x pump of the TONIC token, resulted in approximately $75 million in losses.
Russia's largest bank announced plans to expand crypto-backed lending beyond Bitcoin, aiming to accept Ethereum and Tether's USDT as collateral as the country prepares new regulated crypto trading laws taking effect September 1.
DeFi lending protocol Moonwell suffered an $8.7 million exploit after an attacker manipulated the price of MAMO token to borrow real assets against inflated collateral, prompting the protocol to set borrow caps to 1 wei across Base markets.
An attacker exploited Term Finance's DAO governance system on August 23, 2026, purchasing enough voting power for approximately 2 ETH to gain control of strategy vaults and drain $8.5 million from the Ethereum-based fixed-rate lending protocol.
Ripple is collaborating with Clearpool and Cicada Partners to build institutional lending infrastructure on the XRP Ledger, using its RLUSD stablecoin to provide working-capital loans to fintech and payments companies. The initiative aims to bring real-world credit markets onchain through a native lending model.
Ripple is collaborating with Clearpool and Cicada Partners to build institutional lending infrastructure on the XRP Ledger, using its RLUSD stablecoin to provide working-capital loans to fintech and payments companies. The initiative aims to bring real-world credit markets onchain through a native lending model.
Evernorth is preparing to deploy its XRP holdings across the XRP Ledger ecosystem as a proposed native lending functionality undergoes review on the network. The company's Chief Business Officer Sagar confirmed the firm is eyeing DeFi opportunities tied to the potential new lending framework.
Ethereum DeFi platform Ether.fi has upgraded its non-custodial neobank with tokenized stock and metals trading, portfolio-backed borrowing via Aave at approximately 4% rates, and expanded fiat payment support across 30+ currencies. The Summer release also introduces programmatic ETHFI token buybacks funded from all revenue streams.
A major bank has enabled clients to borrow up to 25% of the value of their Bitwise Solana Staking ETF (BSOL) holdings, adding a lending function to the U.S.-listed crypto fund according to disclosures on the fund's official site.
Real-world asset (RWA) deposits in decentralized finance platforms surged to $7.4 billion in Q2 2026, more than tripling from the previous year, even as overall DeFi deposits fell approximately 15%. The growth was driven by tokenized Treasury funds and products like BlackRock's BUIDL and Sky's sUSDS, according to a CoinShares report.
Hyperscale Data has established a Bitcoin-backed DeFi financing program through Morpho Protocol, borrowing approximately $30 million at 4.9% interest to fund expansion of its AI data center in Michigan. The company also sold approximately 100 Bitcoin as part of its financing strategy.
Uniswap has expanded beyond token trading with the launch of Earn, a self-custodial lending feature that allows users to deposit USDC, USDT, and ETH into Morpho vaults to generate yield directly within the Uniswap app. The product uses vaults curated by Gauntlet and integrates with Morpho's $11.79 billion lending network.
Cryptocurrency exchange Bybit announced on July 31, 2026, that it will allow users to pledge six tokenized stocks (xStocks) as collateral across its margin trading, crypto loans, and institutional lending services. The tokenized equities include shares of Nvidia, Apple, Tesla, Robinhood, Circle, and Google.
Aave's risk management service LlamaRisk recommended winding down every reserve on six V3 blockchain markets, affecting approximately $98 million in supplied assets and $15.6 million in debt across 50 low-usage reserves.
Multiple cryptocurrency wallet providers are introducing Visa-branded payment cards that allow users to spend their digital assets in everyday transactions. BloFin Wallet announced a Visa card alongside perpetual contract trading features, while RedotPay launched an RLUSD card enabling 8 million users to spend against their XRP holdings through a margin loan structure.
Sky Frontier Foundation reported that Sky Protocol generated $107.35 million in Gross Protocol Revenue for the second consecutive quarter above $100 million. According to the foundation, Protocol Collateral rose 45.5% year-over-year to $12.32 billion, sUSDS supply increased 149% to $5.52 billion, and the protocol recorded its fifth consecutive quarter of positive surplus.
Lombard Finance has introduced its Bitcoin Onchain Credit Strategy, which allows Flow Traders to borrow stablecoins for market-making without posting its own onchain collateral. Bitcoin deposited through Lombard's Bitcoin Earn product instead serves as collateral coverage through a private underwriting structure on Cap's marketplace, with Flow Traders serving as the pilot partner.
SEC Commissioner Hester Peirce issued a public statement saying that crypto vaults and onchain lending strategies may fall under federal securities laws depending on their specific structure and activities. She cautioned that moving activities already within the scope of federal securities laws onchain does not remove them from those laws.
Cross-chain bridge protocol Allbridge Core has paused operations following a flash loan exploit that drained approximately $1.65 million from its Solana stablecoin liquidity pools. The attacker used a $1.12 million flash loan from Kamino to manipulate pool ratios before bridging funds to Ethereum.
Galaxy Digital launched Galaxy Curator, a Morpho-based vault curation service distributed via Fireblocks Earn, giving over 2,400 institutional clients access to curated onchain stablecoin yield strategies without managing DeFi infrastructure directly.
Hedera-based lending protocol Bonzo Lend (also referred to as Sauce Protocol) suffered approximately $9 million in losses after an attacker manipulated the price oracle for SAUCE collateral, allowing them to borrow assets far beyond deposited value. The stolen funds were bridged from Hedera to Ethereum.
DeFi lending infrastructure provider Morpho has integrated its protocol into Robinhood's consumer app, allowing retail users to earn approximately 7% yields on USDG stablecoin through onchain credit markets accessed via the Earn feature.
Stablecoin issuer Tether is launching gold-backed loans through a partnership with Ledn using its XAUT token and investing $20 million in Brazil's Mercado Bitcoin to expand blockchain financial services across Latin America. The moves come as Tether's former CIO seeks to sell his stake in the company.
Robinhood launched the public mainnet of Robinhood Chain, its Layer 2 blockchain, alongside new products including 24/7 tokenized stock trading, perpetual futures, onchain lending, and planned agentic crypto trading capabilities.
DeFi lending protocol Edel Finance halted its version-one protocol after an attacker exploited the wrapping mechanism for tokenized Alphabet stock, artificially inflating collateral values by 7,700% and extracting $403,000. The team stated no depositors would bear losses.
Blockrise CEO Jos Lazet has characterized 'anarchistic neobanks' as the next phase of Bitcoin adoption, as Bitcoin-native financial firms expand beyond traditional exchange and custody services into lending, payments, and banking.
Curve Finance has deployed the second version of its isolated lending protocol, Llamalend v2, on the Optimism network, supported by a 250,000 OP token grant. The launch marks the initial phase before a planned Ethereum mainnet deployment.
Solana-based decentralized exchange Raydium confirmed a $1.34 million exploit affecting five deprecated liquidity pools from its legacy Automated Market Maker V3 program that had been inactive since 2021. The attack exploited insufficient LP mint validation in the outdated code.
Morpho, an onchain lending protocol, has secured $175 million in funding co-led by Paradigm, a16z crypto, and Ribbit Capital, with participation from Apollo Funds and VanEck. The round values the protocol at approximately $2 billion and will support technical development and integrations with traditional financial institutions.
Aave published an official postmortem tracing a $230 million exploit to a LayerZero bridge verification failure and announced a sweeping overhaul of its asset-listing standards as DeFi risks shift beyond smart contract bugs.
Ripple's institutional lending arm Ripple Prime closed a $200 million debt facility from asset manager Neuberger Berman to scale its crypto lending operations and launch margin trading services for institutional clients.
Aave has progressed to Phase II of recovering exploited rsETH funds following a $200 million bad debt event linked to the Lazarus Group, with $71 million in ETH returns moving forward despite no flaws in Aave's own contracts.
The Federal Trade Commission secured a $4.72 billion judgment against former Celsius Network CEO Alex Mashinsky, who agreed to pay $10 million and accept a permanent ban from the cryptocurrency and financial services industries following the collapse of the crypto lending platform.
A coalition of DeFi protocols including Aave, Compound, and others unveiled a detailed technical plan to eliminate bad debt and restore full backing for exploited rsETH tokens following the $290 million Kelp DAO hack, with pledges totaling over $300 million in recovery funds.
Aave governance proposed contributing 25,000 ETH to the DeFi United coalition working to cover losses from the $292 million Kelp DAO exploit. Multiple protocols and individuals have collectively pledged enough to cover the shortfall, with Mantle proposing a 30,000 ETH loan.
Aave's total value locked plunged $8 billion in 24 hours following the Kelp DAO exploit, with risk managers modeling two bad debt scenarios as users withdrew billions. The AAVE token fell nearly 20% to $89.50 amid contagion fears.
A coalition of DeFi protocols deployed a joint emergency mechanism to help Aave ETH lenders and loopers exit positions after the Kelp DAO bridge exploit created systemic risk across lending markets. The response demonstrates DeFi's architectural openness can produce rapid crisis solutions.
Attackers drained approximately 116,500 rsETH (roughly $292-293 million) from Kelp DAO's LayerZero-powered bridge, causing emergency freezes across multiple DeFi protocols including Aave, SparkLend, Fluid, and Upshift. The exploit represents 2026's largest crypto hack to date and impacted at least nine protocols.
Tether announced a $150 million recovery program for Drift Protocol following the $280 million exploit, with the funding contingent on Drift switching from USDC to USDT as its primary settlement asset. The total recovery plan reaches $147.5-$148 million when combined with other sources.
Law firm Gibbs Mura filed a class action lawsuit against Circle Internet Financial, alleging the stablecoin issuer failed to act swiftly to freeze stolen USDC tied to the Drift Protocol hack and was negligent in its response to the exploit.
Fireblocks introduced 'Earn,' a new platform enabling institutions to generate yield on stablecoins through direct access to Aave and Morpho-based lending protocols, incorporating institutional-grade approval workflows and policy controls.
WLFI token fell 12% to a record low after the Trump-backed project used billions of its own tokens as collateral to borrow $75 million in stablecoins on DeFi platform Dolomite, triggering concerns over insider access and depositor risks.
World Liberty Financial deposited 5 billion of its own WLFI tokens as collateral on Dolomite to borrow $75 million in stablecoins, which were then sent to Coinbase Prime. The move pushed the lending pool to 100% utilization and triggered a 12% token price drop to record lows.
Chaos Labs, a key risk management provider for Aave, announced its departure from the DeFi protocol following disputes over governance and the upcoming V4 upgrade. The exit follows recent departures of other major contributors including BGD Labs and ACI.
Aave deployed its V4 upgrade on Ethereum mainnet after a governance vote, introducing a hub-and-spoke architecture designed to concentrate liquidity and expand DeFi into real-world credit markets. The upgrade includes Aave Pro for advanced users and integrates Chainlink oracles.