Menu
MCAP $2.91T ▲+0.72%
BTC $85,389 ▲+4.69%
ETH $2,731 ▲+2.59%
BNB $786.76 ▲+1.89%
XRP $1.520 ▲+5.91%
SOL $116.69 ▲+4.08%
DOGE $0.0996 ▲+11.87%
ADA $0.245 ▲+5.36%
TRX $0.3486 ▲+1.68%
LINK $12.91 ▲+2.80%
AVAX $10.71 ▼-4.29%
HYPE $94.42 ▲+0.49%
DOT $1.160 ▲+0.41%

Blockchain

Attacker uses single wallet to steal $1.55M in FET and mint 408.5M NTX tokens

Attacker uses single wallet to steal $1.55M in FET and mint 408.5M NTX tokens

, , , , , ,

BlockchainCrypto Coin Show News Team·September 21, 2026·4 min read

A single wallet has been tied to both the $1.55 million theft of FET tokens from a SingularityNET-linked bridge and a subsequent mint of 408.5 million NTX tokens, according to an on-chain forensic report. The pairing indicates two separate compromised credentials were exploited in a coordinated operation rather than two unrelated incidents, a distinction that matters for any institution holding exposure to Fetch.ai, SingularityNET or NuNet infrastructure.

  • The attacker drained 8,721,530 FET, worth about $1.55 million at the time, from SingularityNET’s Ethereum-side bridge contract on Saturday (September 19).
  • Twenty-nine minutes later, a NuNet minter key dormant since March 2023 created 408,532,878 NTX, roughly 42% of NuNet’s documented token supply, and sent it to the same wallet.
  • Bitvavo suspended WMTX deposits and withdrawals on Sunday (September 20) and later halted trading, though the forensic evidence does not establish WMTX was compromised through the same mechanism.
  • $1.55M value of FET drained from the bridge contract in one transaction
  • 408.5M NTX minted, equal to about 42% of NuNet’s supply
  • 547.89 ETH attacker’s holdings by 1:10 UTC Sept. 20, worth roughly $1.44 million

The attack emptied TokenConversionManagerV3, the legitimate Ethereum-side lock-and-release component of SingularityNET’s bridge, according to an on-chain forensic report prepared by Athena and first detailed by CryptoSlate. Fetch.ai subsequently paused its AGIX-to-FET conversion service and Ethereum-side bridge contract as a precaution.

Fetch.ai said the affected infrastructure belonged to SingularityNET, primarily its Ethereum-Cardano bridge. The company’s own contracts and standard FET transfers kept operating throughout.

NuNet Minter Sends 408.5 Million NTX to the Same Wallet That Received Stolen FET

Investigators found that the FET loss traced to a compromised backend authorization key rather than a flaw allowing an attacker to bypass the bridge contract itself. The withdrawal transaction carried a valid signature from the address the contract was configured to trust, letting its conversionIn function release the full FET balance to an attacker-controlled wallet.

The NuNet activity supplied the strongest link tying the two thefts to one operation. At 20:50 UTC, 29 minutes after the FET withdrawal, the dormant minter key created 408,532,878 NTX and sent the entire batch to the wallet that had just received the stolen FET.

A later forensic pass pushed the timeline earlier still. At 19:36 UTC, 45 minutes before the FET drain, the NuNet minter sent 0.3667 ETH directly to the eventual receiving wallet, while a separate attacker-linked account moved 24.3 million NTX into it, and NTX sales through MetaMask’s swap infrastructure had already begun.

Uncapped Conversion Function Let Attacker Withdraw 8.72 Million FET in One Transaction

The contract’s own design amplified the damage once the key was compromised. Its 1 million FET transaction cap applied only to tokens moving out of Ethereum and was never enforced on conversionIn, letting the attacker withdraw all 8.72 million FET at once instead of in capped increments.

The signed authorization message also failed to bind a specific recipient, meaning a valid signature could redirect funds to any address the caller chose.

Liquidity constraints then shaped how much value the attacker could extract.

The stolen FET was swapped largely into Ethereum, while more than 217 million of the newly minted NTX was sold through decentralized venues before pools thinned; four later sales of 38.55 million NTX combined added only about 0.30 ETH, and a 10 million NTX transaction routed through Mayan Protocol produced roughly 940 USDT.

Bitvavo Halts WMTX Trading While Credentials Remain Unrotated

Bitvavo suspended WMTX deposits and withdrawals on Sunday (September 20) citing an active security incident, then temporarily halted trading, while telling customers their balances remained safe. Historical SingularityNET material shows WMTX shares infrastructure with FET and NTX through the Ethereum-Cardano bridge ecosystem, but the forensic report examined only the FET and NTX activity in detail.

Roughly five hours after the attack, the report’s first tracking window found the compromised FET bridge authorizer and NuNet minter credentials had still not been rotated or revoked. By then the FET bridge itself was empty and inactive.

That leaves a narrow but consequential window open. Refilling the FET conversion contract while the same authorizer stays trusted risks exposing fresh liquidity to another signed withdrawal, and NuNet faces a parallel risk as long as the compromised wallet retains minting authority.

The CCS read. The real exposure here sits with anyone treating AI-agent token bridges as fungible custody infrastructure rather than distinct trust boundaries. NTX holders absorbed dilution equal to nearly half the prior supply before any exchange froze trading, while WMTX got caught by association rather than evidence. Institutions building positions across the Fetch.ai, SingularityNET and NuNet complex should be pricing each bridge’s key-management practices separately, not as a single ASI Alliance risk.

Fetch.ai has not said when AGIX-to-FET conversions or its Ethereum-side bridge will resume, and Bitvavo has said WMTX trading and transfers stay restricted until it completes its own assessment. Whether either team has rotated the compromised authorizer and minter keys since the report’s five-hour snapshot remains the next verifiable marker for institutions tracking the affected infrastructure.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

Fairshake deploys $30 million to oust Sherrod Brown over CLARITY Act stall

Fairshake deploys $30 million to oust Sherrod Brown over CLARITY Act stall

, , , , , ,

Legal & CrimeCrypto Coin Show News Team·September 21, 2026·3 min read

Fairshake, the crypto industry’s largest political action committee, has earmarked $30 million to defeat Sherrod Brown’s bid to reclaim his Ohio Senate seat, tying the spending directly to the CLARITY Act’s failed cloture vote. For institutional investors, the move signals that U.S. market structure legislation now rides on midterm election results rather than a lame-duck Congress, with Fairshake still holding roughly $130 million to enforce that outcome.

  • Fairshake has committed $30 million against Brown, a plan first reported by the New York Times and confirmed by journalist Eleanor Terrett.
  • Crypto interests spent more than $40 million against Brown in Ohio during the 2024 cycle, four times any other Senate race that year, per the Associated Press.
  • Fairshake opened 2026 with about $193 million and still held roughly $130 million as of August, funded almost entirely by Coinbase, Ripple and Andreessen Horowitz.
  • $30M Fairshake’s new earmark against Brown versus its $130M reserve
  • $517M crypto, AI and betting corporate spending this cycle versus $461M in all of 2024
  • 60 votes needed for CLARITY Act cloture, which the bill failed to reach

Fairshake is preparing its most aggressive campaign yet against a sitting or former lawmaker, according to a report from Cryptopolitan. The PAC confirmed the $30 million figure to Terrett, citing a Fairshake spokesperson, and the effort has been described as a “revenge spend.” The trigger is Democrats’ role in stalling the CLARITY Act, the industry’s top legislative priority for digital asset market structure.

Brown’s Return Threatens the Senate Banking Committee Gavel

A Brown win would go beyond an Ohio seat. It could restore his seniority and put him back in line for the gavel of the Senate Banking Committee, a post he held from 2021 to 2025.

During that tenure Brown slowed crypto-related legislation to a pace that frustrated industry lobbyists, a record Fairshake is now campaigning against directly. Politico reported in May that Brown lacks a direct path back to that seniority, since Senate Democratic rules tie standing to a member’s current entry into the party conference.

Restoring it would require the caucus to carve out an exception.

Brown is running against Republican Sen. Jon Husted, who took the seat when JD Vance became vice president. Husted faces his own headwinds, as anti-data center lobbyists ramp up spending tying him to unpopular AI infrastructure sites.

Bernie Moreno’s 2024 Win Set the Template for Ohio Spending

This is a rematch. Crypto interests poured more than $40 million into Ohio during the 2024 cycle, a sum the Associated Press said was four times what the industry spent in any other Senate race that year. Republican Bernie Moreno won with more than $230 million in outside backing against $154 million for Brown, and Brown lost 46% to 50%.

Senate GOP campaign arm chair Sen. Tim Scott of South Carolina credited the industry directly for the result at a blockchain event, per the Associated Press.

Thank you to all of y’all for getting rid of Sherrod Brown. Literally, the industry put Bernie Moreno in the Senate.

Sen. Tim Scott, chair of the National Republican Senatorial Committee

Brown has since softened his rhetoric. Campaign manager Patrick Eisenhauer told Politico that Brown “recognizes that cryptocurrency is a part of America’s economy” and would “keep an open mind.”

The shift has not moved advocacy group Stand With Crypto, which still ranks Brown “strongly against crypto.”

Corporate Political Spending Tops $517M Ahead of November 3

Fairshake’s war chest sits inside a broader surge. Crypto, AI and online betting firms account for at least $517 million in corporate election spending this cycle, according to Public Citizen data cited by Cryptopolitan, already surpassing the $461 million corporations spent across all of the 2024 cycle.

President Donald Trump has said he will deploy his $400 million MAGA Inc. super PAC to protect vulnerable Republicans, adding a third major funding stream to the midterms.

The stakes trace back to September 15, when the CLARITY Act’s cloture vote failed to reach the 60 votes needed to advance, a setback we covered in The CLARITY Act’s Window Is Closing. That failure, following the bill’s earlier progress detailed in our committee-passage coverage, is what converted a policy fight into an election-spending campaign.

The CCS read. Fairshake’s spending pattern tells institutional allocators more than any Washington vote count. A PAC willing to commit a quarter of its reserves to one Senate race, after already outspending every other 2024 contest fourfold in the same state, is betting that Congress, not the SEC or CFTC, will end up writing crypto’s rulebook. That bet is now the clearest signal of where regulatory clarity actually gets decided.

Ohio voters decide the race on November 3, and the outcome will determine whether the CLARITY Act gets revived in the next Congress or whether the SEC and CFTC write digital asset rules through enforcement instead.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

NEAR@3.33 ($NEAR) thumbnail

NEAR’s Confidential Intents hits $70M TVL, triggering NEAR@3.33 reward program

, , , , , , ,

BlockchainCrypto Coin Show News Team·September 21, 2026·3 min read

NEAR’s privacy-focused swap product, Confidential Intents, crossed $70 million in total value locked on September 17, automatically triggering the first reward snapshot of a new token incentive program called NEAR@3.33, according to a NEAR-issued release distributed via PR Newswire.

  • Eligibility requires a confidential balance over $100 and an active swap history on near.com
  • A 2% per-wallet cap is built in to prevent any single holder from concentrating the reward pool
  • Conversion is locked until NEAR’s three-day volume-weighted average price reaches $3.33 or higher, tying the payout to sustained price performance rather than the TVL milestone alone
  • $70M Confidential Intents TVL that triggered the snapshot
  • 333,333 milestone tokens unlocked in Drop 1
  • $3.33 three-day VWAP required before tokens convert to NEAR

The milestone unlocks 333,333 tokens for eligible participants, but those tokens do not convert into spendable NEAR right away. NEAR is currently trading above the $3.33 threshold, though the program requires that level to hold as a three-day average, not just a momentary spot price.

A Reward Gated on Both Usage and Price

The structure is unusual in that it stacks two separate conditions. Reaching the milestone required genuine product usage, real deposits into Confidential Intents crossing the $70 million line, while the payout itself is withheld until the token clears a specific price bar for three consecutive days. That design ties the reward closer to durable price strength than to a single trigger, though it also means eligible users who already qualify for Drop 1 have no guaranteed timeline for when, or whether, their tokens convert.

Alex Shevchenko, GM of NEAR Intents, framed the milestone as part of a broader industry shift: “Confidentiality is quickly becoming a core requirement for the industry, and NEAR is becoming the rail to make it the new default.”

Part of NEAR’s Broader Privacy and Payments Push

NEAR@3.33 follows NEAR AI’s general availability launch of Confidential Intents’ underlying confidential execution infrastructure earlier this year, and comes days after NEAR Foundation joined the x402 Foundation to help build open payment standards for AI agents. Together, the moves point to a 2026 strategy centered on privacy-preserving infrastructure as NEAR Protocol’s core institutional pitch, rather than throughput or fees alone.

The CCS read: Gating token conversion on a sustained price average rather than the TVL trigger alone is a deliberate anti-dump design, but it also means Drop 1 recipients are effectively speculating on NEAR holding $3.33 for three straight days before they see anything spendable.

Watch NEAR’s three-day VWAP over the coming sessions. NEAR has not disclosed how many wallets currently qualify for Drop 1, or whether additional TVL milestones and drops are planned beyond this first one.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

NEAR x x402 ($NEAR) thumbnail

NEAR joins x402 Foundation to help build payment rails for AI agents

, , , , , , ,

BlockchainCrypto Coin Show News Team·September 21, 2026·3 min read

NEAR Foundation has joined the x402 Foundation, the Linux Foundation body building open infrastructure for how autonomous AI agents pay for goods and services, placing NEAR alongside AWS, American Express, Cloudflare, Google, Mastercard, Microsoft, Shopify, Stripe and Visa.

  • NEAR joins x402 Foundation members that already include AWS, American Express, Cloudflare, Google, Mastercard, Microsoft, Shopify, Stripe and Visa
  • NEAR’s stated role is not the payments layer itself but the infrastructure around it: cross-chain liquidity, confidential execution, private inference, and agent discovery and coordination
  • NEAR Intents already settles liquidity across more than 30 chains and 180 assets; NEAR AI runs private inference across more than 40 frontier models
  • 30+ chains reachable through NEAR Intents
  • 180+ assets supported for cross-chain liquidity
  • 40+ frontier models available through NEAR AI’s private inference

x402 gives agents a shared, open way to pay across blockchains and existing payment rails, according to a post on NEAR’s official blog. NEAR’s stated role is the infrastructure around that payments layer rather than the payments rail itself.

Why Standards Set Now Tend to Stick

NEAR’s announcement frames the timing as deliberate. The blog post argues that the rails governing how agents move value and prove their work are being decided in this early cycle, and draws a comparison to how the internet’s early architecture was chosen once and lived with for decades.

NEAR co-founder Illia Polosukhin said the alliance is meant to help “make agent-native payments a shared standard,” while bringing NEAR AI’s infrastructure to the x402 ecosystem.

Part of a Broader AI Infrastructure Push

The x402 membership is one piece of a wider 2026 push from NEAR’s AI arm. NEAR AI has also shipped Confidential Intents, its confidential execution infrastructure, and launched IronClaw 1.0, an AI agent harness the company positions as its own internal assistant architecture, both detailed on NEAR’s blogs this year.

The CCS read: A seat at the x402 table alongside AWS, Stripe and Visa is a real credibility signal for NEAR’s AI infrastructure pitch, even though the announcement stops short of committing to a specific product integration or timeline.

Watch for NEAR AI to publish integration details or a reference implementation showing how x402 payments actually route through NEAR Intents, which would move this from membership to functioning infrastructure. None of NEAR’s announcement discloses financial terms of the x402 membership.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

ACINQ patches three Eclair flaws that let peers drain entire channel balances

ACINQ patches three Eclair flaws that let peers drain entire channel balances

, , , , , ,

BitcoinCrypto Coin Show News Team·September 21, 2026·3 min read

ACINQ has patched three peer-triggered flaws in its Eclair Lightning Network software that could have let malicious counterparties siphon a node operator’s entire local channel balance straight into a Bitcoin transaction fee. The bugs, fixed in Eclair 0.14.3 on September 14, matter to institutional Lightning operators because they show fund-loss risk can hide in routine channel operations, not just in exotic attack scenarios.

  • ACINQ released Eclair 0.14.3 on September 14, 2026, patching three separate peer-triggered vulnerabilities.
  • The worst flaw let an adversarial peer propose a closing fee larger than the victim’s local balance, sending the entire balance to miners.
  • Eclair now caps automatically estimated channel-opening and splice fees at 50 satoshis per vByte by default.
  • 0.14.3 Eclair release version that patched all three flaws
  • 3 distinct peer-triggered vulnerabilities fixed in one update
  • 50 sat/vB new default ceiling on automatically estimated fees

ACINQ, the Bitcoin technology firm behind Eclair and the Phoenix Wallet, said the vulnerabilities could be exploited by malicious nodes during channel closures, splicing and on-the-fly funding, and it strongly recommended operators upgrade, according to reporting from CryptoSlate. The most severe of the three centered on cooperative channel closures, where Eclair was responsible for setting the closing fee.

Malicious Peer Could Route an Entire Balance to Miners

In the flawed version, an adversarial peer could propose a closing fee larger than the victim’s actual local channel balance. Eclair’s fallback fee-negotiation logic could accept that proposal, wiping out the operator’s output entirely and effectively converting the whole balance into a transaction fee collected by Bitcoin miners rather than returned to the node.

The patch closes that gap by rejecting any closing-fee proposal that exceeds an operator’s own configured maximum. Bitcoin Optech flagged 0.14.3 as a security release addressing closing, splicing and on-the-fly funding issues.

Splicing and On-the-Fly Funding Carried Separate Fund-Loss Paths

A second flaw could strand funds mid-splice, the process of resizing a channel’s underlying funding transaction without closing it. If Eclair signed its half of a splice first and the peer withheld its own signature, the node’s latest channel state could depend on a transaction the victim had no way to publish.

That same gap opened a route to losses on payments still in flight: an attacker could let the incoming leg of a relayed payment expire, then publish an older channel state and use the payment secret to collect the outgoing leg for itself. Eclair now force-closes using the newest state that is backed by a fully signed funding transaction, closing that timing window.

The third bug hit on-the-fly funding, a feature that opens a channel while forwarding a payment. A malicious wallet could time payment expiries so it collected the outgoing payment on-chain while the incoming leg expired, leaving the relay operator to eat the loss; Eclair now checks relay fees and expiry buffers before committing funds.

BTCPay Server Reports Separate Bots Probing Exposed LND Nodes

The Eclair fixes land as operators of Bitcoin’s other major Lightning implementation face a distinct threat. Payment processor BTCPay Server said earlier in September that it observed bots repeatedly probing servers where administrators had manually re-enabled external access to LND.

The attackers targeted an unauthenticated password-change endpoint during the brief window when an LND wallet sits locked, and a successful hit would let them replace the wallet password and request an administrator macaroon controlling the node.

BTCPay responded by issuing unique passwords per LND wallet and blocking unauthenticated wallet-management routes at its network edge, while advising operators against manually exposing the LND API at all.

Together the two incidents point to attackers systematically probing Lightning software for weaknesses that let them seize or redirect funds. As more builders ship Bitcoin-adjacent code quickly, the burden of catching these edge cases before deployment falls increasingly on protocol maintainers rather than automated tooling.

The CCS read. For institutions running or custodying Lightning liquidity, the lesson is operational, not speculative: patch cadence and default fee ceilings now function as risk controls comparable to key management. Firms that let node software drift unpatched are effectively underwriting counterparty risk against every peer they route through, a cost that belongs on the same ledger as custody and slippage.

ACINQ has not disclosed whether any operator lost funds to the closing-fee exploit before the September 14 patch, leaving that question open for node operators reviewing their own historical channel closures against the fixed logic in Eclair 0.14.3.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

Visa closes meme coin rewards loophole ahead of merchant code deadline

Visa closes meme coin rewards loophole ahead of merchant code deadline

, , , , , ,

BlockchainCrypto Coin Show News Team·September 21, 2026·3 min read

Visa has ordered payment processors to stop routing meme coin credit card purchases through a merchant code meant for digital media, closing a rewards loophole that a grace period was set to end this week. The move follows an investigation showing customers used Apple Pay and Google Pay to buy tokens on Visa and Mastercard credit cards with no separate identity check.

  • Crossmint checkouts classified token purchases under merchant category code 5815, meant for e-books, streaming and music.
  • Chase disputed one charge with Visa, saying it was miscoded and should not have earned rewards.
  • New York Attorney General Letitia James’s office confirmed it is aware of and reviewing the matter.
  • 5815 digital-media code used instead of crypto’s required 6012 or 6051
  • 90% share of on-chain card payments Visa processes, per a May report
  • Feb 2025 SEC staff statement Crossmint cites to defend the coding

Visa’s directive targets a workaround built into checkouts run by Crossmint, a crypto payments firm whose technology powers card-based token buying on the Fomo and Robinhood Wallet apps. Processors including Checkout.com were told the code would no longer be accepted for those transactions, according to a source familiar with the matter.

The Block Found No Identity Check on Card-Funded Token Buys

An investigation by The Block found that customers could buy tokens with Visa and Mastercard credit cards through Apple Pay or Google Pay without any separate verification step. Because the charges ran under code 5815, they were never flagged as crypto and drew ordinary points and cash back instead.

Visa’s own rules call for codes 6012 or 6051 plus a quasi-cash signal on crypto purchases. Chase’s rewards terms treat those transactions like cash, with no points.

Chase Disputes a Charge as Letitia James’s Office Reviews

Chase told Visa that one charge tied to the workaround was miscoded, was never flagged as a cryptocurrency purchase, and should not have generated rewards. The bank opened a formal case with Visa disputing the classification.

A spokesperson for New York Attorney General Letitia James said her office is aware of and reviewing the matter. Visa told at least one industry participant that meme coin purchases simply do not fit the digital-goods code.

Crossmint Cites a February 2025 SEC Statement, Law Professor Disagrees

Crossmint defended its coding by pointing to a February 27, 2025, staff statement from the SEC’s Division of Corporation Finance, which described typical meme coins as “akin to collectibles” rather than securities offerings. The company said the 5815 classification was cleared with partners during onboarding and that its handling of digital goods has not changed.

Vanderbilt Law School professor Yesha Yadav pushed back on that framing, calling SEC guidance and card-network rules two separate regimes.

SEC guidance and card-network rules two different regimes.

Yesha Yadav, Vanderbilt Law School professor

After questions were raised about how Crossmint categorized the GENIUS and DEGEN tokens, both became unavailable through Apple Pay and Google Pay on Fomo and Robinhood Wallet. Meme coin buying continued on both apps, with the Crossmint checkout still live as of Saturday.

The CCS read. This closes one narrow rewards loophole, not the broader card-crypto integration that Robinhood Wallet, Fomo and issuers like the ones behind Brave’s Rewards Card are still building around. Expect processors to route future token purchases through proper quasi-cash codes rather than exit the business, since Visa’s own 90% share of on-chain card payments gives it more leverage over compliance than any single issuer dispute.

Chase’s dispute with Visa over the miscoded charge remains unresolved, and Letitia James’s office has not said whether its review will extend beyond the single transaction it confirmed examining. Rewards on meme coin purchases are expected to disappear once those transactions run under standard crypto codes, but whether Crossmint applies the same fix to tokens beyond GENIUS and DEGEN is still an open question.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

FCA raids three London sites running unregistered peer-to-peer crypto trading

FCA raids three London sites running unregistered peer-to-peer crypto trading

, , , , , ,

BlockchainCrypto Coin Show News Team·September 21, 2026·3 min read

The UK’s Financial Conduct Authority raided three London premises suspected of running unregistered peer-to-peer crypto trading operations, working alongside HM Revenue & Customs and the Metropolitan Police. For institutional investors tracking Britain’s incoming crypto regime, the operation matters less for its size than for the FCA’s blunt confirmation that no peer-to-peer crypto firm currently holds UK registration, meaning any such trading today sits outside the regulatory perimeter.

  • The FCA, HMRC and the Metropolitan Police inspected three London premises on Thursday, September 10, 2026, issuing cease-and-desist letters at all three.
  • 3 London premises inspected by FCA, HMRC and police on Sept. 10
  • 0 FCA-registered peer-to-peer crypto firms currently operating in the UK
  • 2027 October date when the full UK crypto regime is due to bite

The FCA disrupted suspected illegal peer-to-peer crypto trading at three London sites on Thursday, September 10, 2026, working with HMRC and the Metropolitan Police Service. Cease-and-desist letters were issued at every location and investigators gathered intelligence for potential follow-up action, according to the regulator’s press release published Thursday, September 17, first reported by newsbtc.com.

The action was taken under the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017. It targeted unregistered peer-to-peer businesses, not licensed UK exchanges.

Three Premises, One Set of Cease-and-Desist Letters

Peer-to-peer trading, where individuals buy and sell crypto directly with each other, requires registration in the UK if done by way of business. The FCA says unregistered P2P operators give criminals a route to move and launder illicit funds precisely because they sit outside anti-money-laundering controls.

Detective Sergeant Sathish Alalasundaram of the Metropolitan Police Service said law enforcement continues adapting its tactics as criminals move funds across jurisdictions at speed. The FCA separately flagged its record on the issue, including prosecuting an unlawful crypto ATM network operator and supporting the arrest of two individuals accused of running an illegal exchange.

Zero Registered Firms Means All Current P2P Trading Is Unlawful

The practical shift here is narrower than the enforcement action might suggest. Because no peer-to-peer crypto business currently holds FCA registration, the regulator’s statement effectively puts every UK-based P2P operator on notice that it is, by definition, unregistered and therefore a target regardless of intent.

That is a harder line than April 2026’s operation, whose evidence is still being used to support separate criminal investigations rather than closing cases outright.

The open question the FCA’s statement does not answer is whether any firm will actually clear registration once a formal route exists, or whether the peer-to-peer model remains structurally incompatible with the compliance burden the regulator is building.

New Authorisation Gateway Opens Late September, Full Regime Waits Until 2027

The FCA’s broader authorisation gateway for crypto firms opens at the end of September 2026, giving compliant businesses a formal route into the regulated perimeter for the first time. Until then, and largely afterward too, UK crypto remains a high-risk, largely unregulated asset class outside anti-money-laundering and financial promotion rules.

That gap between enforcement action today and a fully built regime nearly a year away is where institutional desks are watching most closely. Consumers can already check a firm’s status using the FCA’s Firm Checker tool, but no equivalent registration path for peer-to-peer trading yet exists to check against.

The regulatory contrast is notable set against how other jurisdictions are handling crypto policy. London is choosing enforcement first and authorisation second, a sequencing that puts pressure on unregistered intermediaries well before the licensing system they would need to join is finished. Verification tools like the Firm Checker sit in the same broader push toward provable legitimacy that projects such as peaq’s identity work for machines are pursuing on the technical side.

The CCS read. This raid does more to validate licensed UK exchanges than to threaten them. Every enforcement notice against an unregistered P2P operator widens the compliance gap in favor of firms that already meet AML and financial promotion rules, making the FCA’s authorisation gateway a competitive asset once it opens rather than just a cost center for institutional players positioning ahead of the October 2027 deadline.

The FCA’s authorisation gateway is due to open at the end of September 2026, but the regulator has not said whether any peer-to-peer crypto firm has applied for registration under the new framework or when the first such approval might arrive.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

Tools for Humanity launches World Money payments app with Stripe integration

Tools for Humanity launches World Money payments app with Stripe integration

, , , , , ,

BlockchainCrypto Coin Show News Team·September 21, 2026·3 min read

Tools for Humanity has launched World Money, a self-custodial wallet that pairs stablecoin payments and bank transfers with World ID verification and Stripe-powered fiat onboarding. The move pushes the World ecosystem beyond identity verification into everyday financial services, a shift institutional observers will watch as a test of whether biometric-ID infrastructure can double as payments rails.

  • Tools for Humanity launched World Money as a self-custodial wallet combining stablecoins, bank transfers and World ID verification.
  • Stripe infrastructure provides the fiat onboarding and off-ramp layer, letting users move conventional money into and out of stablecoins.
  • Verified World ID holders get zero-fee stablecoin transfers, though yield and card features remain restricted in parts of the U.S. and elsewhere.
  • 0% stablecoin transfer fee for World ID-verified users
  • Stripe supplies the fiat on-ramp and off-ramp, an unusual rail choice for a crypto wallet
  • World ID verification is the gate for the zero-fee tier, tying payments to biometric proof

Tools for Humanity, the company behind the World ecosystem, has rolled out World Money, a wallet built around stablecoin payments, bank transfers and its World ID verification layer, according to newsbtc.com. Stripe supplies the infrastructure that moves conventional money in and out of the app, while verified World ID users can send stablecoins with no fee attached. The launch reframes a project that started as a narrow biometric-verification tool into something closer to a general-purpose financial app.

World ID Moves From Proof-of-Personhood to Payments Gateway

World’s original pitch was narrow: verify that a user is human, issue a World ID, and let developers build on top of that proof.

World Money extends that identity layer into a live financial product rather than a verification credential sitting idle in a wallet. Once a user has an identity layer and a self-custodial wallet, adding payments is a logical next step, and stablecoins let people move dollar-denominated value globally without the price swings tied to tokens like Bitcoin or WLD. The company’s own announcement frames the zero-fee transfer tier as a direct reward for World ID verification, giving the credential a financial incentive it previously lacked. That design mirrors a broader pattern of crypto-native firms tying hardware or biometric verification to concrete perks.

Stripe Handles the Fiat Rails, Wallet Stays Self-Custodial

World Money keeps users in control of their own keys rather than holding balances inside a centralized custodian, according to the company. That self-custody choice keeps the product anchored to World’s blockchain architecture even as Stripe smooths over the fiat conversion that has historically been the friction point for crypto wallets.

Routing onboarding and off-ramping through Stripe rather than building proprietary banking rails signals a fintech-first design philosophy more than a crypto-maximalist one.

That combination, self-custody paired with mainstream payment infrastructure, has become a template other projects are testing as well.

Card and Yield Features Stay Blocked in the U.S. and Other Markets

Availability is not uniform. Some financial, yield and card-related features remain restricted in parts of the United States and other jurisdictions depending on local rules, according to the company’s announcement. That means World Money is not launching as one identical global product on day one, but as a staged rollout shaped by regulatory permission in each market.

The CCS read. The real signal here is not the app but the sequencing: World built the identity layer first, then attached payments to it once a verified user base existed to monetize.

The open question is which U.S. states and other restricted markets clear the yield and card features next, and whether Tools for Humanity discloses a timeline for closing that gap between its identity base and its financial product.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

SBI Group backs dtcpay’s $25M Series A for stablecoin merchant payments

SBI Group backs dtcpay’s $25M Series A for stablecoin merchant payments

, , , , , ,

BlockchainCrypto Coin Show News Team·September 21, 2026·3 min read

Singapore-based dtcpay has closed a $25 million Series A round, adding Japan’s SBI Group as a strategic investor alongside lead backer Vertex Ventures. The deal signals that traditional financial conglomerates are moving from watching stablecoin payments to funding the merchant infrastructure that runs on them.

  • dtcpay closed a $25 million Series A round with Vertex Ventures as lead investor.
  • SBI Group joined later as a strategic investor to complete the funding round, not as the lead.
  • dtcpay holds a Major Payment Institution license in Singapore, one of Asia’s key regulated payments hubs.
  • $25M total Series A round size for dtcpay’s payments buildout
  • $25M capital now earmarked for merchant and cross-border settlement tools
  • $25M round that pulled SBI Group onto dtcpay’s shareholder register

dtcpay, a Singapore payments company that lets merchants move between fiat currency and digital assets, has completed a $25 million Series A financing round. Vertex Ventures led the original raise, while SBI Group joined afterward as a strategic investor to bring the round to close.

That sequencing matters: SBI did not lead the deal, but its late entry as a named strategic backer carries weight given the group’s reach across Japanese banking, securities and digital assets.

dtcpay operates under a Major Payment Institution license issued in Singapore, placing it inside one of Asia’s most tightly regulated payments jurisdictions rather than in an offshore gray zone. The company says the fresh capital will fund further development of merchant payment and cross-border settlement infrastructure, per the dtcpay announcement.

Vertex Ventures Leads, SBI Group Follows With Strategic Weight

The distinction between leading and joining is the detail institutional readers should hold onto. Vertex Ventures put up the original capital that anchored the round, while SBI Group arrived later to complete the $25 million total as a strategic rather than financial-first investor.

For a payments company scaling across Asia, a strategic partner with SBI’s banking and securities footprint can open doors that a pure venture check cannot.

dtcpay is not positioning itself as another crypto exchange chasing retail speculation. It is building the merchant-facing settlement layer that sits on top of stablecoin rails, closer in function to a payments processor than a trading venue.

Stablecoins Replace Volatile Crypto As The Settlement Asset Of Choice

Dollar-denominated stablecoins have become the preferred bridge asset for payment companies because they let cross-border settlement move faster without exposing merchants to the price swings of assets like Bitcoin or Ethereum. A stablecoin can travel across blockchain rails while behaving economically like cash sitting in a bank account.

That combination, speed without volatility, is what makes stablecoin infrastructure attractive to a regulated Singapore institution rather than a crypto-native exchange.

dtcpay’s raise fits the same pattern: banks and payment groups are backing the plumbing, not the trading front end.

Consumer-Facing Fintech Bets Are Chasing The Same Rails

dtcpay’s approach mirrors a broader trend of fintech products embedding blockchain settlement behind familiar financial interfaces rather than asking users to adopt crypto directly.

The CCS read. SBI’s move reads less as a bet on dtcpay’s balance sheet and more as a hedge on which regulated Asian payments rail wins merchant adoption first. Expect SBI to use the stake for distribution into its own banking and brokerage network rather than treat it as a passive financial holding, positioning dtcpay as an entry point into Japanese institutional stablecoin flows.

dtcpay has not disclosed a timeline for deploying the $25 million or named which markets its cross-border settlement expansion will target next, leaving open whether SBI’s involvement extends into Japan’s own stablecoin regulatory framework in the coming quarters.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

Polymarket fires US CEO after $10 million fraud attempt exposes compliance gaps

Polymarket fires US CEO after $10 million fraud attempt exposes compliance gaps

, , , , , ,

BlockchainCrypto Coin Show News Team·September 20, 2026·4 min read

Polymarket’s $10 million fraud attempt and ongoing insider-trading investigations expose critical gaps in compliance at a prediction-market platform valued at $21 billion, raising questions about whether rapid growth in the sector has outpaced the regulatory infrastructure required of institutional trading venues. For crypto investors and institutions considering entry into prediction markets, the incident signals enforcement risk and operational fragility at the dominant US player.

  • Attackers used stolen debit cards to fund 4,000 deposits across Polymarket accounts, triggering 80% fraud rejection rates versus industry norms of 1%.
  • Polymarket’s US compliance chief resigned and the US division CEO was fired after an internal audit flagged $10 million fraud exposure.
  • More than 80 Polymarket accounts have been flagged by the New York Times for suspicious trading, while the CFTC separately opened investigations tied to nonpublic information on pardons, Iran contracts and Google search results.
  • $10M in attempted stolen-card fraud targeting Polymarket users in one operation
  • 80% fraud rejection rate at peak versus 1% industry standard
  • $21B current valuation for Polymarket, planning fundraising and potential public listing

In February, Polymarket suffered an attempted fraud operation targeting $10 million in user deposits, according to reporting by Cryptopolitan. Payment processor Checkout.com flagged a surge in suspicious debit-card activity linked to stolen cards being added to thousands of new accounts. Seven users drove most of the attack; one deposited nearly 4,000 times. The operation forced Polymarket leadership to confront a structural question: whether a $21 billion prediction-market operator had built compliance and market-integrity safeguards proportional to its ambition to become a regulated trading platform and go public.

Polymarket CEO pushed growth despite compliance warning signals

When fraud rates spiked to 80% of deposits above the 1% industry norm, internal debate erupted over whether Polymarket should relax its withdrawal-reversal policy to improve user experience. Some staff flagged money-laundering risk; executives argued existing controls were sufficient. CEO Shaney Coplan directed employees to press ahead with expansion regardless of regulatory friction, according to the Wall Street Journal report.

The consequences were swift. Andrew Clifford, head of US compliance, resigned after publishing an internal audit detailing the fraud exposure.

Justin Hertzberg, CEO of Polymarket’s US division, was fired along with other executives responsible for regulatory compliance and anti-money laundering policies. Polymarket later hired a former FBI agent to its risk team, appointed Warren Jenson, former Amazon finance chief, as its first CFO, limited debit-card linking capacity, and contracted Riskified for enhanced fraud detection.

By May, fraud rates returned to industry norms. A review by Sullivan & Cromwell concluded Polymarket complied with regulations, though the departures and remedial hires suggest internal governance had lagged operational growth.

Insider-trading investigations target 80 flagged accounts across political and corporate information

The fraud incident compounds a second integrity crisis: the New York Times first reported that more than 80 Polymarket accounts have been flagged for suspicious trading on nearly 30 subjects, including nonpublic information on government decisions and corporate announcements. One group bet $140,000 on an Israeli military action against Iran and converted the position into $600,000 in gains. A US Special Forces soldier allegedly used classified information to profit over $400,000 from trades on Venezuelan political outcomes.

WIRED reported that CFTC Chairman Michael Selig authorized investigations into trades linked to Biden pardons, Iran contracts and Google search results. According to the CFTC, misuse of material nonpublic information could result in an infraction of commodities law. Polymarket operates as a Designated Contract Market (DCM) and thus falls under full CFTC policing authority over prohibited trading practices including fraud, manipulation, disruptive trading and wash sales.

Kalshi has already taken enforcement action in similar cases, penalizing a political candidate who traded on his own candidacy and fining a MrBeast video editor after finding reasonable cause that he used nonpublic information about upcoming videos. Those precedents establish that the CFTC will prosecute insider trading on prediction markets with the same vigor it applies to commodity futures.

Prediction-market scale now material to crypto price discovery and institutional risk

Prediction markets moved $63.5 billion in volume during 2025, with Polymarket and Kalshi together handling $52.7 billion in the first 86 days of 2026, according to research firm Artemis.

Intercontinental Exchange owns a stake in Polymarket valued at approximately $1.6 billion, representing roughly 22% of the company’s holdings. That exposure means compliance failures at Polymarket now carry spillover risk for a major equity exchange.

A Stanford-SMU study found that Polymarket’s five-minute Bitcoin contracts were associated with suspicious settlement-time spikes in spot order flow and sharp price reversals, absorbing retail losses during manipulated cycles. Fifteen-minute contracts showed far weaker effects, suggesting that prediction-market design directly touches crypto price discovery at short time horizons.

Weak controls on prediction markets raise costs for banks, regulators and institutional traders seeking to enter the sector, fragment liquidity across jurisdictions and delay integration of prediction markets with crypto finance. JPMorgan closed Polymarket’s bank account in August over regulatory concerns. The New York City Council opened a probe into prediction-market marketing practices after reporting of fake trades promoted by influencers without clear disclosure of payment relationships.

The CCS read. Polymarket’s compliance gaps do not invalidate prediction markets as an asset class; they expose the infrastructure deficit. Institutional capital will not enter a venue where insider traders, account takeovers and stolen-card operations persist. The CFTC’s enforcement advisory signals that it will treat prediction-market violations the same as futures violations, meaning DCMs must now hire senior compliance talent and invest in surveillance. Polymarket’s $21 billion valuation assumes it can go public or raise at scale; regulators and banks will not permit that until the insider-trading investigations close and audit trails become institutional-grade.

Watch for the CFTC to file enforcement actions against the 80+ flagged Polymarket accounts and against any individual traders identified in ongoing investigations into Biden pardons, Iran contracts and Google information. The outcome will determine whether Polymarket can clear regulatory decks for a public offering and whether rival venues like Kalshi can establish themselves as the compliance-first alternative. The pending decision is whether Polymarket’s remedial hires and enhanced fraud controls satisfy CFTC expectations or whether the agency moves to suspend or revoke the platform’s DCM license.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

Load More