Menu
MCAP $2.94T ▼-2.12%
BTC $86,494 ▲+0.51%
ETH $2,752 ▼-0.19%
BNB $787.24 ▼-1.70%
XRP $1.580 ▲+4.77%
SOL $118.15 ▲+0.36%
DOGE $0.0999 ▲+0.14%
ADA $0.251 ▲+2.85%
TRX $0.3415 ▼-0.69%
LINK $13.01 ▲+0.37%
AVAX $11.01 ▲+0.90%
HYPE $96.54 ▲+3.82%
DOT $1.170 ▲+0.16%

Blockchain

Centrifuge tokenizes New York Life’s high-yield bond strategy on Avalanche

Centrifuge tokenizes New York Life’s high-yield bond strategy on Avalanche

, , , , , , ,

DeFiCrypto Coin Show News Team·September 22, 2026·3 min read

New York Life Investment Management is moving a US high-yield corporate bond strategy onto Avalanche through a partnership with tokenization firm Centrifuge, restricting access to qualified institutional buyers who will subscribe and redeem using USDC. The deal extends blockchain-based fund infrastructure beyond the Treasury products that have dominated tokenization to date, pulling actively managed credit onto public rails from a manager overseeing more than $300 billion in assets.

  • NYLIM, which manages over $300 billion in assets, is tokenizing a high-yield corporate bond strategy with Centrifuge.
  • The product runs on Avalanche, with subscriptions and redemptions settled in USDC rather than traditional cash transfers.
  • Access is limited to qualified institutional buyers, not retail investors, under the terms of the September 17 announcement.
  • $300B NYLIM’s total assets under management behind the pilot
  • Sep 17 date the tokenization partnership was announced
  • USDC stablecoin used for fund subscriptions and redemptions

New York Life Investment Management is taking one of its fixed-income strategies onchain, partnering with Centrifuge to tokenize a US high-yield corporate bond product, according to a report by newsbtc.com. The firms confirmed the plan will run on Avalanche, with qualified institutional buyers able to move in and out of the fund using USDC instead of wire transfers.

This is not a retail crypto play. Centrifuge is supplying tokenization infrastructure around an institutional strategy that NYLIM already manages through traditional channels.

NYLIM Brings $300 Billion in Assets to an Onchain Test

NYLIM oversees more than $300 billion in assets, a scale that puts this pilot well beyond the boutique asset managers that have driven most tokenization experiments to date. Using Avalanche gives the fund a blockchain settlement and ownership layer, while USDC acts as the digital-dollar rail for subscriptions and redemptions.

For institutions, that combination can compress the operational lag between committing cash and holding fund interests, particularly as tokenized products are increasingly designed to settle outside conventional market hours. The structure mirrors the mechanics behind tokenized Treasury funds, but applies them to a materially different asset class, according to the announcement from Centrifuge and NYLIM.

Access Stays Limited to Qualified Institutional Buyers

The product is not open to the public. Eligibility is restricted to qualified institutional buyers, a limitation that matters when gauging how far this tokenization effort actually reaches.

What stands out is the asset type moving onchain rather than the distribution model. Tokenized Treasury products have already become the clearest proof point for institutional blockchain adoption.

High-yield corporate bonds carry a different risk and return profile than government debt, and bringing them onto the same rails signals that tokenization is extending into actively managed credit rather than staying confined to cash-like instruments.

Efforts to route mainstream fund yield through blockchain infrastructure point to a broader pattern of asset managers testing where blockchain settlement adds value without changing who can buy in.

Centrifuge Adds a Major Manager to Its Credit Tokenization Roster

The September 17 announcement adds NYLIM to the group of established asset managers testing how conventional investment products can be issued and serviced on public blockchain rails. Centrifuge has built its business around structuring exactly this kind of institutional-grade tokenization, positioning itself as infrastructure rather than a consumer-facing product.

No timeline for launch, minimum investment size, or target fund capacity has been disclosed publicly beyond the partnership announcement itself. That leaves open how quickly qualified institutional buyers will actually deploy capital into the tokenized structure once it goes live.

The CCS read. The real signal here is not the blockchain plumbing but NYLIM’s willingness to let a $300 billion manager’s credit strategy touch public rails at all. If a high-yield fund settles cleanly in USDC on Avalanche, expect other credit managers to treat tokenized Treasuries as the warm-up act rather than the endpoint.

Neither NYLIM nor Centrifuge has disclosed a launch date, minimum ticket size, or expected fund capacity beyond the September 17 announcement, leaving the pace of institutional uptake as the open question heading into the product’s rollout.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

Spaces launches Trust Anchor for blockchain-verified Bitcoin identities without intermediaries

Spaces launches Trust Anchor for blockchain-verified Bitcoin identities without intermediaries

, , , , , , ,

BitcoinCrypto Coin Show News Team·September 22, 2026·1 min read

Spaces has launched Trust Anchor, letting wallets and apps confirm human-readable Bitcoin identities such as alice@bitcoin directly against the blockchain instead of through a company-run resolver. Separately, Spaces released version 0.4.2 on September 16, 2026, which puts the protocol’s off-chain issuance system on Bitcoin’s mainnet for the first time, with the handle @bitcoin as its first production operator.

  • The Trust ID credential stays valid for 14 days before a wallet needs to rescan it to add contacts or catch a rotated key.
  • Spaces sells @bitcoin handles at a flat $25 on a first-come, first-served basis, with no revocation, rerouting or recovery once issued.
  • A Princeton study of the earlier Namecoin system found only 28 of roughly 120,000 registered names avoided being squatted.
  • $25 flat @bitcoin handle price, sold first-come
  • 14 days Trust ID validity window before wallets must rescan it
  • $979B Q1 2026 global retail crypto volume, down 11% year over year

Spaces, a protocol that attaches human-readable names to B

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

Attacker uses single wallet to steal $1.55M in FET and mint 408.5M NTX tokens

Attacker uses single wallet to steal $1.55M in FET and mint 408.5M NTX tokens

, , , , , ,

BlockchainCrypto Coin Show News Team·September 21, 2026·4 min read

A single wallet has been tied to both the $1.55 million theft of FET tokens from a SingularityNET-linked bridge and a subsequent mint of 408.5 million NTX tokens, according to an on-chain forensic report. The pairing indicates two separate compromised credentials were exploited in a coordinated operation rather than two unrelated incidents, a distinction that matters for any institution holding exposure to Fetch.ai, SingularityNET or NuNet infrastructure.

  • The attacker drained 8,721,530 FET, worth about $1.55 million at the time, from SingularityNET’s Ethereum-side bridge contract on Saturday (September 19).
  • Twenty-nine minutes later, a NuNet minter key dormant since March 2023 created 408,532,878 NTX, roughly 42% of NuNet’s documented token supply, and sent it to the same wallet.
  • Bitvavo suspended WMTX deposits and withdrawals on Sunday (September 20) and later halted trading, though the forensic evidence does not establish WMTX was compromised through the same mechanism.
  • $1.55M value of FET drained from the bridge contract in one transaction
  • 408.5M NTX minted, equal to about 42% of NuNet’s supply
  • 547.89 ETH attacker’s holdings by 1:10 UTC Sept. 20, worth roughly $1.44 million

The attack emptied TokenConversionManagerV3, the legitimate Ethereum-side lock-and-release component of SingularityNET’s bridge, according to an on-chain forensic report prepared by Athena and first detailed by CryptoSlate. Fetch.ai subsequently paused its AGIX-to-FET conversion service and Ethereum-side bridge contract as a precaution.

Fetch.ai said the affected infrastructure belonged to SingularityNET, primarily its Ethereum-Cardano bridge. The company’s own contracts and standard FET transfers kept operating throughout.

NuNet Minter Sends 408.5 Million NTX to the Same Wallet That Received Stolen FET

Investigators found that the FET loss traced to a compromised backend authorization key rather than a flaw allowing an attacker to bypass the bridge contract itself. The withdrawal transaction carried a valid signature from the address the contract was configured to trust, letting its conversionIn function release the full FET balance to an attacker-controlled wallet.

The NuNet activity supplied the strongest link tying the two thefts to one operation. At 20:50 UTC, 29 minutes after the FET withdrawal, the dormant minter key created 408,532,878 NTX and sent the entire batch to the wallet that had just received the stolen FET.

A later forensic pass pushed the timeline earlier still. At 19:36 UTC, 45 minutes before the FET drain, the NuNet minter sent 0.3667 ETH directly to the eventual receiving wallet, while a separate attacker-linked account moved 24.3 million NTX into it, and NTX sales through MetaMask’s swap infrastructure had already begun.

Uncapped Conversion Function Let Attacker Withdraw 8.72 Million FET in One Transaction

The contract’s own design amplified the damage once the key was compromised. Its 1 million FET transaction cap applied only to tokens moving out of Ethereum and was never enforced on conversionIn, letting the attacker withdraw all 8.72 million FET at once instead of in capped increments.

The signed authorization message also failed to bind a specific recipient, meaning a valid signature could redirect funds to any address the caller chose.

Liquidity constraints then shaped how much value the attacker could extract.

The stolen FET was swapped largely into Ethereum, while more than 217 million of the newly minted NTX was sold through decentralized venues before pools thinned; four later sales of 38.55 million NTX combined added only about 0.30 ETH, and a 10 million NTX transaction routed through Mayan Protocol produced roughly 940 USDT.

Bitvavo Halts WMTX Trading While Credentials Remain Unrotated

Bitvavo suspended WMTX deposits and withdrawals on Sunday (September 20) citing an active security incident, then temporarily halted trading, while telling customers their balances remained safe. Historical SingularityNET material shows WMTX shares infrastructure with FET and NTX through the Ethereum-Cardano bridge ecosystem, but the forensic report examined only the FET and NTX activity in detail.

Roughly five hours after the attack, the report’s first tracking window found the compromised FET bridge authorizer and NuNet minter credentials had still not been rotated or revoked. By then the FET bridge itself was empty and inactive.

That leaves a narrow but consequential window open. Refilling the FET conversion contract while the same authorizer stays trusted risks exposing fresh liquidity to another signed withdrawal, and NuNet faces a parallel risk as long as the compromised wallet retains minting authority.

The CCS read. The real exposure here sits with anyone treating AI-agent token bridges as fungible custody infrastructure rather than distinct trust boundaries. NTX holders absorbed dilution equal to nearly half the prior supply before any exchange froze trading, while WMTX got caught by association rather than evidence. Institutions building positions across the Fetch.ai, SingularityNET and NuNet complex should be pricing each bridge’s key-management practices separately, not as a single ASI Alliance risk.

Fetch.ai has not said when AGIX-to-FET conversions or its Ethereum-side bridge will resume, and Bitvavo has said WMTX trading and transfers stay restricted until it completes its own assessment. Whether either team has rotated the compromised authorizer and minter keys since the report’s five-hour snapshot remains the next verifiable marker for institutions tracking the affected infrastructure.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

Fairshake deploys $30 million to oust Sherrod Brown over CLARITY Act stall

Fairshake deploys $30 million to oust Sherrod Brown over CLARITY Act stall

, , , , , ,

Legal & CrimeCrypto Coin Show News Team·September 21, 2026·3 min read

Fairshake, the crypto industry’s largest political action committee, has earmarked $30 million to defeat Sherrod Brown’s bid to reclaim his Ohio Senate seat, tying the spending directly to the CLARITY Act’s failed cloture vote. For institutional investors, the move signals that U.S. market structure legislation now rides on midterm election results rather than a lame-duck Congress, with Fairshake still holding roughly $130 million to enforce that outcome.

  • Fairshake has committed $30 million against Brown, a plan first reported by the New York Times and confirmed by journalist Eleanor Terrett.
  • Crypto interests spent more than $40 million against Brown in Ohio during the 2024 cycle, four times any other Senate race that year, per the Associated Press.
  • Fairshake opened 2026 with about $193 million and still held roughly $130 million as of August, funded almost entirely by Coinbase, Ripple and Andreessen Horowitz.
  • $30M Fairshake’s new earmark against Brown versus its $130M reserve
  • $517M crypto, AI and betting corporate spending this cycle versus $461M in all of 2024
  • 60 votes needed for CLARITY Act cloture, which the bill failed to reach

Fairshake is preparing its most aggressive campaign yet against a sitting or former lawmaker, according to a report from Cryptopolitan. The PAC confirmed the $30 million figure to Terrett, citing a Fairshake spokesperson, and the effort has been described as a “revenge spend.” The trigger is Democrats’ role in stalling the CLARITY Act, the industry’s top legislative priority for digital asset market structure.

Brown’s Return Threatens the Senate Banking Committee Gavel

A Brown win would go beyond an Ohio seat. It could restore his seniority and put him back in line for the gavel of the Senate Banking Committee, a post he held from 2021 to 2025.

During that tenure Brown slowed crypto-related legislation to a pace that frustrated industry lobbyists, a record Fairshake is now campaigning against directly. Politico reported in May that Brown lacks a direct path back to that seniority, since Senate Democratic rules tie standing to a member’s current entry into the party conference.

Restoring it would require the caucus to carve out an exception.

Brown is running against Republican Sen. Jon Husted, who took the seat when JD Vance became vice president. Husted faces his own headwinds, as anti-data center lobbyists ramp up spending tying him to unpopular AI infrastructure sites.

Bernie Moreno’s 2024 Win Set the Template for Ohio Spending

This is a rematch. Crypto interests poured more than $40 million into Ohio during the 2024 cycle, a sum the Associated Press said was four times what the industry spent in any other Senate race that year. Republican Bernie Moreno won with more than $230 million in outside backing against $154 million for Brown, and Brown lost 46% to 50%.

Senate GOP campaign arm chair Sen. Tim Scott of South Carolina credited the industry directly for the result at a blockchain event, per the Associated Press.

Thank you to all of y’all for getting rid of Sherrod Brown. Literally, the industry put Bernie Moreno in the Senate.

Sen. Tim Scott, chair of the National Republican Senatorial Committee

Brown has since softened his rhetoric. Campaign manager Patrick Eisenhauer told Politico that Brown “recognizes that cryptocurrency is a part of America’s economy” and would “keep an open mind.”

The shift has not moved advocacy group Stand With Crypto, which still ranks Brown “strongly against crypto.”

Corporate Political Spending Tops $517M Ahead of November 3

Fairshake’s war chest sits inside a broader surge. Crypto, AI and online betting firms account for at least $517 million in corporate election spending this cycle, according to Public Citizen data cited by Cryptopolitan, already surpassing the $461 million corporations spent across all of the 2024 cycle.

President Donald Trump has said he will deploy his $400 million MAGA Inc. super PAC to protect vulnerable Republicans, adding a third major funding stream to the midterms.

The stakes trace back to September 15, when the CLARITY Act’s cloture vote failed to reach the 60 votes needed to advance, a setback we covered in The CLARITY Act’s Window Is Closing. That failure, following the bill’s earlier progress detailed in our committee-passage coverage, is what converted a policy fight into an election-spending campaign.

The CCS read. Fairshake’s spending pattern tells institutional allocators more than any Washington vote count. A PAC willing to commit a quarter of its reserves to one Senate race, after already outspending every other 2024 contest fourfold in the same state, is betting that Congress, not the SEC or CFTC, will end up writing crypto’s rulebook. That bet is now the clearest signal of where regulatory clarity actually gets decided.

Ohio voters decide the race on November 3, and the outcome will determine whether the CLARITY Act gets revived in the next Congress or whether the SEC and CFTC write digital asset rules through enforcement instead.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

NEAR@3.33 ($NEAR) thumbnail

NEAR’s Confidential Intents hits $70M TVL, triggering NEAR@3.33 reward program

, , , , , , ,

BlockchainCrypto Coin Show News Team·September 21, 2026·3 min read

NEAR’s privacy-focused swap product, Confidential Intents, crossed $70 million in total value locked on September 17, automatically triggering the first reward snapshot of a new token incentive program called NEAR@3.33, according to a NEAR-issued release distributed via PR Newswire.

  • Eligibility requires a confidential balance over $100 and an active swap history on near.com
  • A 2% per-wallet cap is built in to prevent any single holder from concentrating the reward pool
  • Conversion is locked until NEAR’s three-day volume-weighted average price reaches $3.33 or higher, tying the payout to sustained price performance rather than the TVL milestone alone
  • $70M Confidential Intents TVL that triggered the snapshot
  • 333,333 milestone tokens unlocked in Drop 1
  • $3.33 three-day VWAP required before tokens convert to NEAR

The milestone unlocks 333,333 tokens for eligible participants, but those tokens do not convert into spendable NEAR right away. NEAR is currently trading above the $3.33 threshold, though the program requires that level to hold as a three-day average, not just a momentary spot price.

A Reward Gated on Both Usage and Price

The structure is unusual in that it stacks two separate conditions. Reaching the milestone required genuine product usage, real deposits into Confidential Intents crossing the $70 million line, while the payout itself is withheld until the token clears a specific price bar for three consecutive days. That design ties the reward closer to durable price strength than to a single trigger, though it also means eligible users who already qualify for Drop 1 have no guaranteed timeline for when, or whether, their tokens convert.

Alex Shevchenko, GM of NEAR Intents, framed the milestone as part of a broader industry shift: “Confidentiality is quickly becoming a core requirement for the industry, and NEAR is becoming the rail to make it the new default.”

Part of NEAR’s Broader Privacy and Payments Push

NEAR@3.33 follows NEAR AI’s general availability launch of Confidential Intents’ underlying confidential execution infrastructure earlier this year, and comes days after NEAR Foundation joined the x402 Foundation to help build open payment standards for AI agents. Together, the moves point to a 2026 strategy centered on privacy-preserving infrastructure as NEAR Protocol’s core institutional pitch, rather than throughput or fees alone.

The CCS read: Gating token conversion on a sustained price average rather than the TVL trigger alone is a deliberate anti-dump design, but it also means Drop 1 recipients are effectively speculating on NEAR holding $3.33 for three straight days before they see anything spendable.

Watch NEAR’s three-day VWAP over the coming sessions. NEAR has not disclosed how many wallets currently qualify for Drop 1, or whether additional TVL milestones and drops are planned beyond this first one.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

NEAR x x402 ($NEAR) thumbnail

NEAR joins x402 Foundation to help build payment rails for AI agents

, , , , , , ,

BlockchainCrypto Coin Show News Team·September 21, 2026·3 min read

NEAR Foundation has joined the x402 Foundation, the Linux Foundation body building open infrastructure for how autonomous AI agents pay for goods and services, placing NEAR alongside AWS, American Express, Cloudflare, Google, Mastercard, Microsoft, Shopify, Stripe and Visa.

  • NEAR joins x402 Foundation members that already include AWS, American Express, Cloudflare, Google, Mastercard, Microsoft, Shopify, Stripe and Visa
  • NEAR’s stated role is not the payments layer itself but the infrastructure around it: cross-chain liquidity, confidential execution, private inference, and agent discovery and coordination
  • NEAR Intents already settles liquidity across more than 30 chains and 180 assets; NEAR AI runs private inference across more than 40 frontier models
  • 30+ chains reachable through NEAR Intents
  • 180+ assets supported for cross-chain liquidity
  • 40+ frontier models available through NEAR AI’s private inference

x402 gives agents a shared, open way to pay across blockchains and existing payment rails, according to a post on NEAR’s official blog. NEAR’s stated role is the infrastructure around that payments layer rather than the payments rail itself.

Why Standards Set Now Tend to Stick

NEAR’s announcement frames the timing as deliberate. The blog post argues that the rails governing how agents move value and prove their work are being decided in this early cycle, and draws a comparison to how the internet’s early architecture was chosen once and lived with for decades.

NEAR co-founder Illia Polosukhin said the alliance is meant to help “make agent-native payments a shared standard,” while bringing NEAR AI’s infrastructure to the x402 ecosystem.

Part of a Broader AI Infrastructure Push

The x402 membership is one piece of a wider 2026 push from NEAR’s AI arm. NEAR AI has also shipped Confidential Intents, its confidential execution infrastructure, and launched IronClaw 1.0, an AI agent harness the company positions as its own internal assistant architecture, both detailed on NEAR’s blogs this year.

The CCS read: A seat at the x402 table alongside AWS, Stripe and Visa is a real credibility signal for NEAR’s AI infrastructure pitch, even though the announcement stops short of committing to a specific product integration or timeline.

Watch for NEAR AI to publish integration details or a reference implementation showing how x402 payments actually route through NEAR Intents, which would move this from membership to functioning infrastructure. None of NEAR’s announcement discloses financial terms of the x402 membership.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

ACINQ patches three Eclair flaws that let peers drain entire channel balances

ACINQ patches three Eclair flaws that let peers drain entire channel balances

, , , , , ,

BitcoinCrypto Coin Show News Team·September 21, 2026·3 min read

ACINQ has patched three peer-triggered flaws in its Eclair Lightning Network software that could have let malicious counterparties siphon a node operator’s entire local channel balance straight into a Bitcoin transaction fee. The bugs, fixed in Eclair 0.14.3 on September 14, matter to institutional Lightning operators because they show fund-loss risk can hide in routine channel operations, not just in exotic attack scenarios.

  • ACINQ released Eclair 0.14.3 on September 14, 2026, patching three separate peer-triggered vulnerabilities.
  • The worst flaw let an adversarial peer propose a closing fee larger than the victim’s local balance, sending the entire balance to miners.
  • Eclair now caps automatically estimated channel-opening and splice fees at 50 satoshis per vByte by default.
  • 0.14.3 Eclair release version that patched all three flaws
  • 3 distinct peer-triggered vulnerabilities fixed in one update
  • 50 sat/vB new default ceiling on automatically estimated fees

ACINQ, the Bitcoin technology firm behind Eclair and the Phoenix Wallet, said the vulnerabilities could be exploited by malicious nodes during channel closures, splicing and on-the-fly funding, and it strongly recommended operators upgrade, according to reporting from CryptoSlate. The most severe of the three centered on cooperative channel closures, where Eclair was responsible for setting the closing fee.

Malicious Peer Could Route an Entire Balance to Miners

In the flawed version, an adversarial peer could propose a closing fee larger than the victim’s actual local channel balance. Eclair’s fallback fee-negotiation logic could accept that proposal, wiping out the operator’s output entirely and effectively converting the whole balance into a transaction fee collected by Bitcoin miners rather than returned to the node.

The patch closes that gap by rejecting any closing-fee proposal that exceeds an operator’s own configured maximum. Bitcoin Optech flagged 0.14.3 as a security release addressing closing, splicing and on-the-fly funding issues.

Splicing and On-the-Fly Funding Carried Separate Fund-Loss Paths

A second flaw could strand funds mid-splice, the process of resizing a channel’s underlying funding transaction without closing it. If Eclair signed its half of a splice first and the peer withheld its own signature, the node’s latest channel state could depend on a transaction the victim had no way to publish.

That same gap opened a route to losses on payments still in flight: an attacker could let the incoming leg of a relayed payment expire, then publish an older channel state and use the payment secret to collect the outgoing leg for itself. Eclair now force-closes using the newest state that is backed by a fully signed funding transaction, closing that timing window.

The third bug hit on-the-fly funding, a feature that opens a channel while forwarding a payment. A malicious wallet could time payment expiries so it collected the outgoing payment on-chain while the incoming leg expired, leaving the relay operator to eat the loss; Eclair now checks relay fees and expiry buffers before committing funds.

BTCPay Server Reports Separate Bots Probing Exposed LND Nodes

The Eclair fixes land as operators of Bitcoin’s other major Lightning implementation face a distinct threat. Payment processor BTCPay Server said earlier in September that it observed bots repeatedly probing servers where administrators had manually re-enabled external access to LND.

The attackers targeted an unauthenticated password-change endpoint during the brief window when an LND wallet sits locked, and a successful hit would let them replace the wallet password and request an administrator macaroon controlling the node.

BTCPay responded by issuing unique passwords per LND wallet and blocking unauthenticated wallet-management routes at its network edge, while advising operators against manually exposing the LND API at all.

Together the two incidents point to attackers systematically probing Lightning software for weaknesses that let them seize or redirect funds. As more builders ship Bitcoin-adjacent code quickly, the burden of catching these edge cases before deployment falls increasingly on protocol maintainers rather than automated tooling.

The CCS read. For institutions running or custodying Lightning liquidity, the lesson is operational, not speculative: patch cadence and default fee ceilings now function as risk controls comparable to key management. Firms that let node software drift unpatched are effectively underwriting counterparty risk against every peer they route through, a cost that belongs on the same ledger as custody and slippage.

ACINQ has not disclosed whether any operator lost funds to the closing-fee exploit before the September 14 patch, leaving that question open for node operators reviewing their own historical channel closures against the fixed logic in Eclair 0.14.3.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

Visa closes meme coin rewards loophole ahead of merchant code deadline

Visa closes meme coin rewards loophole ahead of merchant code deadline

, , , , , ,

BlockchainCrypto Coin Show News Team·September 21, 2026·3 min read

Visa has ordered payment processors to stop routing meme coin credit card purchases through a merchant code meant for digital media, closing a rewards loophole that a grace period was set to end this week. The move follows an investigation showing customers used Apple Pay and Google Pay to buy tokens on Visa and Mastercard credit cards with no separate identity check.

  • Crossmint checkouts classified token purchases under merchant category code 5815, meant for e-books, streaming and music.
  • Chase disputed one charge with Visa, saying it was miscoded and should not have earned rewards.
  • New York Attorney General Letitia James’s office confirmed it is aware of and reviewing the matter.
  • 5815 digital-media code used instead of crypto’s required 6012 or 6051
  • 90% share of on-chain card payments Visa processes, per a May report
  • Feb 2025 SEC staff statement Crossmint cites to defend the coding

Visa’s directive targets a workaround built into checkouts run by Crossmint, a crypto payments firm whose technology powers card-based token buying on the Fomo and Robinhood Wallet apps. Processors including Checkout.com were told the code would no longer be accepted for those transactions, according to a source familiar with the matter.

The Block Found No Identity Check on Card-Funded Token Buys

An investigation by The Block found that customers could buy tokens with Visa and Mastercard credit cards through Apple Pay or Google Pay without any separate verification step. Because the charges ran under code 5815, they were never flagged as crypto and drew ordinary points and cash back instead.

Visa’s own rules call for codes 6012 or 6051 plus a quasi-cash signal on crypto purchases. Chase’s rewards terms treat those transactions like cash, with no points.

Chase Disputes a Charge as Letitia James’s Office Reviews

Chase told Visa that one charge tied to the workaround was miscoded, was never flagged as a cryptocurrency purchase, and should not have generated rewards. The bank opened a formal case with Visa disputing the classification.

A spokesperson for New York Attorney General Letitia James said her office is aware of and reviewing the matter. Visa told at least one industry participant that meme coin purchases simply do not fit the digital-goods code.

Crossmint Cites a February 2025 SEC Statement, Law Professor Disagrees

Crossmint defended its coding by pointing to a February 27, 2025, staff statement from the SEC’s Division of Corporation Finance, which described typical meme coins as “akin to collectibles” rather than securities offerings. The company said the 5815 classification was cleared with partners during onboarding and that its handling of digital goods has not changed.

Vanderbilt Law School professor Yesha Yadav pushed back on that framing, calling SEC guidance and card-network rules two separate regimes.

SEC guidance and card-network rules two different regimes.

Yesha Yadav, Vanderbilt Law School professor

After questions were raised about how Crossmint categorized the GENIUS and DEGEN tokens, both became unavailable through Apple Pay and Google Pay on Fomo and Robinhood Wallet. Meme coin buying continued on both apps, with the Crossmint checkout still live as of Saturday.

The CCS read. This closes one narrow rewards loophole, not the broader card-crypto integration that Robinhood Wallet, Fomo and issuers like the ones behind Brave’s Rewards Card are still building around. Expect processors to route future token purchases through proper quasi-cash codes rather than exit the business, since Visa’s own 90% share of on-chain card payments gives it more leverage over compliance than any single issuer dispute.

Chase’s dispute with Visa over the miscoded charge remains unresolved, and Letitia James’s office has not said whether its review will extend beyond the single transaction it confirmed examining. Rewards on meme coin purchases are expected to disappear once those transactions run under standard crypto codes, but whether Crossmint applies the same fix to tokens beyond GENIUS and DEGEN is still an open question.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

FCA raids three London sites running unregistered peer-to-peer crypto trading

FCA raids three London sites running unregistered peer-to-peer crypto trading

, , , , , ,

BlockchainCrypto Coin Show News Team·September 21, 2026·3 min read

The UK’s Financial Conduct Authority raided three London premises suspected of running unregistered peer-to-peer crypto trading operations, working alongside HM Revenue & Customs and the Metropolitan Police. For institutional investors tracking Britain’s incoming crypto regime, the operation matters less for its size than for the FCA’s blunt confirmation that no peer-to-peer crypto firm currently holds UK registration, meaning any such trading today sits outside the regulatory perimeter.

  • The FCA, HMRC and the Metropolitan Police inspected three London premises on Thursday, September 10, 2026, issuing cease-and-desist letters at all three.
  • 3 London premises inspected by FCA, HMRC and police on Sept. 10
  • 0 FCA-registered peer-to-peer crypto firms currently operating in the UK
  • 2027 October date when the full UK crypto regime is due to bite

The FCA disrupted suspected illegal peer-to-peer crypto trading at three London sites on Thursday, September 10, 2026, working with HMRC and the Metropolitan Police Service. Cease-and-desist letters were issued at every location and investigators gathered intelligence for potential follow-up action, according to the regulator’s press release published Thursday, September 17, first reported by newsbtc.com.

The action was taken under the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017. It targeted unregistered peer-to-peer businesses, not licensed UK exchanges.

Three Premises, One Set of Cease-and-Desist Letters

Peer-to-peer trading, where individuals buy and sell crypto directly with each other, requires registration in the UK if done by way of business. The FCA says unregistered P2P operators give criminals a route to move and launder illicit funds precisely because they sit outside anti-money-laundering controls.

Detective Sergeant Sathish Alalasundaram of the Metropolitan Police Service said law enforcement continues adapting its tactics as criminals move funds across jurisdictions at speed. The FCA separately flagged its record on the issue, including prosecuting an unlawful crypto ATM network operator and supporting the arrest of two individuals accused of running an illegal exchange.

Zero Registered Firms Means All Current P2P Trading Is Unlawful

The practical shift here is narrower than the enforcement action might suggest. Because no peer-to-peer crypto business currently holds FCA registration, the regulator’s statement effectively puts every UK-based P2P operator on notice that it is, by definition, unregistered and therefore a target regardless of intent.

That is a harder line than April 2026’s operation, whose evidence is still being used to support separate criminal investigations rather than closing cases outright.

The open question the FCA’s statement does not answer is whether any firm will actually clear registration once a formal route exists, or whether the peer-to-peer model remains structurally incompatible with the compliance burden the regulator is building.

New Authorisation Gateway Opens Late September, Full Regime Waits Until 2027

The FCA’s broader authorisation gateway for crypto firms opens at the end of September 2026, giving compliant businesses a formal route into the regulated perimeter for the first time. Until then, and largely afterward too, UK crypto remains a high-risk, largely unregulated asset class outside anti-money-laundering and financial promotion rules.

That gap between enforcement action today and a fully built regime nearly a year away is where institutional desks are watching most closely. Consumers can already check a firm’s status using the FCA’s Firm Checker tool, but no equivalent registration path for peer-to-peer trading yet exists to check against.

The regulatory contrast is notable set against how other jurisdictions are handling crypto policy. London is choosing enforcement first and authorisation second, a sequencing that puts pressure on unregistered intermediaries well before the licensing system they would need to join is finished. Verification tools like the Firm Checker sit in the same broader push toward provable legitimacy that projects such as peaq’s identity work for machines are pursuing on the technical side.

The CCS read. This raid does more to validate licensed UK exchanges than to threaten them. Every enforcement notice against an unregistered P2P operator widens the compliance gap in favor of firms that already meet AML and financial promotion rules, making the FCA’s authorisation gateway a competitive asset once it opens rather than just a cost center for institutional players positioning ahead of the October 2027 deadline.

The FCA’s authorisation gateway is due to open at the end of September 2026, but the regulator has not said whether any peer-to-peer crypto firm has applied for registration under the new framework or when the first such approval might arrive.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

Tools for Humanity launches World Money payments app with Stripe integration

Tools for Humanity launches World Money payments app with Stripe integration

, , , , , ,

BlockchainCrypto Coin Show News Team·September 21, 2026·3 min read

Tools for Humanity has launched World Money, a self-custodial wallet that pairs stablecoin payments and bank transfers with World ID verification and Stripe-powered fiat onboarding. The move pushes the World ecosystem beyond identity verification into everyday financial services, a shift institutional observers will watch as a test of whether biometric-ID infrastructure can double as payments rails.

  • Tools for Humanity launched World Money as a self-custodial wallet combining stablecoins, bank transfers and World ID verification.
  • Stripe infrastructure provides the fiat onboarding and off-ramp layer, letting users move conventional money into and out of stablecoins.
  • Verified World ID holders get zero-fee stablecoin transfers, though yield and card features remain restricted in parts of the U.S. and elsewhere.
  • 0% stablecoin transfer fee for World ID-verified users
  • Stripe supplies the fiat on-ramp and off-ramp, an unusual rail choice for a crypto wallet
  • World ID verification is the gate for the zero-fee tier, tying payments to biometric proof

Tools for Humanity, the company behind the World ecosystem, has rolled out World Money, a wallet built around stablecoin payments, bank transfers and its World ID verification layer, according to newsbtc.com. Stripe supplies the infrastructure that moves conventional money in and out of the app, while verified World ID users can send stablecoins with no fee attached. The launch reframes a project that started as a narrow biometric-verification tool into something closer to a general-purpose financial app.

World ID Moves From Proof-of-Personhood to Payments Gateway

World’s original pitch was narrow: verify that a user is human, issue a World ID, and let developers build on top of that proof.

World Money extends that identity layer into a live financial product rather than a verification credential sitting idle in a wallet. Once a user has an identity layer and a self-custodial wallet, adding payments is a logical next step, and stablecoins let people move dollar-denominated value globally without the price swings tied to tokens like Bitcoin or WLD. The company’s own announcement frames the zero-fee transfer tier as a direct reward for World ID verification, giving the credential a financial incentive it previously lacked. That design mirrors a broader pattern of crypto-native firms tying hardware or biometric verification to concrete perks.

Stripe Handles the Fiat Rails, Wallet Stays Self-Custodial

World Money keeps users in control of their own keys rather than holding balances inside a centralized custodian, according to the company. That self-custody choice keeps the product anchored to World’s blockchain architecture even as Stripe smooths over the fiat conversion that has historically been the friction point for crypto wallets.

Routing onboarding and off-ramping through Stripe rather than building proprietary banking rails signals a fintech-first design philosophy more than a crypto-maximalist one.

That combination, self-custody paired with mainstream payment infrastructure, has become a template other projects are testing as well.

Card and Yield Features Stay Blocked in the U.S. and Other Markets

Availability is not uniform. Some financial, yield and card-related features remain restricted in parts of the United States and other jurisdictions depending on local rules, according to the company’s announcement. That means World Money is not launching as one identical global product on day one, but as a staged rollout shaped by regulatory permission in each market.

The CCS read. The real signal here is not the app but the sequencing: World built the identity layer first, then attached payments to it once a verified user base existed to monetize.

The open question is which U.S. states and other restricted markets clear the yield and card features next, and whether Tools for Humanity discloses a timeline for closing that gap between its identity base and its financial product.

Get this in your inboxThe Crypto Coin Show newsletter covers the policy and market moves institutional crypto investors are pricing in.

Subscribe

Load More