Zero-click browser vulnerability drains millions from unpatched devices by targeting stored recovery phrases.

Continue reading at DailyCoin.

Massive liquidations shake digital assets as growing fears over AI spending ripple through global markets.

Continue reading at DailyCoin.

The crypto market’s recovery near $3 trillion reflects renewed Bitcoin momentum and broader altcoin gains. Market dominance, ETF flows, and economic conditions may help indicate whether the recovery can last.

Continue reading at DailyCoin.

Strong September gains and renewed institutional demand put Bitcoin in focus as markets look ahead to Q4.

Continue reading at DailyCoin.

• EU regulators are examining Binance’s use of MiCA’s reverse solicitation exemption to determine whether its current approach complies with the framework.
• The review follows Binance’s failure to secure a MiCA license, raising questions over its continued EU operations after the July 1 transition deadline.

Binance is facing regulatory scrutiny across Europe over its use of MiCA’s reverse solicitation exemption, a legal provision that allows non-EU companies to serve European clients, but only when those clients independently seek out the relationship without any solicitation or marketing from the firm.

The European Securities and Markets Authority, alongside national regulators in France, Germany, and Greece, is now examining whether Binance’s current service model genuinely meets those conditions. 

Significantly, the review follows Binance’s failure to secure a MiCA license this summer. A setback that should have required the exchange to wind down its EU operations from July 1. It limits the activity to help existing customers transfer or sell their holdings.

What Reverse Solicitation Actually Means, and Why It Matters

Reverse solicitation became prominent in Europe after Brexit, when UK-based firms tried to use it to continue serving EU clients without separate licensing. The provision is narrow by design. ESMA said the exemption should be regarded as the exception and not be used to circumvent MiCA requirements. Moreover, crypto firms cannot simply claim it; clear requirements and guidelines must be met.

Binance’s position is that it operates under reverse solicitation in EU countries where it holds no local licence, with customers onboarding of their own volition. Its Abu Dhabi-regulated entity, active since December 2025, serves traders outside countries where local licences previously existed. 

Local licences in France, Spain, and Poland have since lapsed under the MiCA regime. In addition, Binance said it complies with applicable regulatory requirements and is actively working toward MiCA authorisation. That process is still ongoing.

What Enforcement Could Look Like?

If regulators conclude that Binance’s use of the exemption doesn’t hold up, enforcement action, including fines, could result. Binance is not the only firm under review; smaller platforms are also being examined.

This is not Binance’s first significant regulatory confrontation. The exchange paid a record $4.3 billion fine in the US in 2023. Also pleaded guilty to criminal charges related to money laundering and breaching international financial sanctions.

For the broader crypto market, this probe adds another layer of regulatory uncertainty in one of the world’s largest trading regions. If enforcement action follows and Binance faces restrictions on EU operations, liquidity and trading volume across European markets could take a meaningful hit. Particularly for retail traders who rely on Binance as their primary platform. 

Crypto Market Highlights

MetaMask Staking Begins Lido Validator Exit After Security Incident

• OFAC sanctioned seven TRON addresses linked to an alleged Tren de Aragua money-laundering network.
• The seven addresses received about $6.1M in crypto inflows since March 2022, according to TRM Labs.

The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has sanctioned seven TRON blockchain addresses linked to an alleged ATM jackpotting and money-laundering operation connected to Tren de Aragua (TdA).

The action, announced on September 30, designated eight individuals and two Mexico-based companies tied to the alleged scheme, while also targeting TdA leader Juan Gabriel Rivas Nunez, known as “Juancho.” The seven TRON addresses were added to OFAC’s Specially Designated Nationals and Blocked Persons List.

According to Treasury, the operation used malware to force U.S. ATMs and interactive teller machines to dispense cash without charging a customer account. The stolen money was then moved between TdA members and associates to hide its origin, including through cryptocurrency transactions.

Treasury said reported losses from alleged TdA jackpotting attacks in the U.S. reached $40.73 million across more than 1,500 attacks as of August 2025. The Justice Department has also indicted 98 people since October 21, 2025 for alleged involvement in ATM jackpotting schemes.

Seven TRON Addresses Received $6.1M Since 2022

Blockchain analytics firm TRM Labs found that the seven sanctioned TRON addresses received about $6.1 million in total inflows since March 2022. The largest share, around $2.1 million, went to an address attributed to Eric Gabriel Cardenas Arzola.

TRM said all seven addresses were deposit addresses hosted by a centralized cryptocurrency exchange. The addresses received funds from multiple sources and later transferred money to other addresses associated with TdA. TRM also cautioned that the full $6.1 million cannot necessarily be attributed to the alleged ATM jackpotting operation.

The seven addresses subsequently sent funds to other TdA-linked addresses, which in turn transferred about $35 million to a network U.S. authorities have associated with Venezuelan national Jorge Figueira, who has been charged with laundering about $1 billion. Figueira has not been convicted, and those charges remain allegations.

OFAC’s action blocks property and interests in property of the designated persons that are in the United States or under the control of U.S. persons. The designation also means U.S. persons generally cannot conduct transactions involving the blocked property unless authorized by OFAC.

Binance's reliance on "reverse solicitation" is under review by EU regulators as it remains without a MiCA licence.

Continue reading at DailyCoin.

Lido confirmed MetaMask Staking infrastructure was compromised, though MetaMask says it has found no immediate threat to wallets.

Continue reading at DailyCoin.

CTO at Bitnuk talks about the infrastructure, security and compliance challenges reshaping crypto exchanges in 2026.

Continue reading at DailyCoin.

• MetaMask Staking has started exiting its Ethereum validators from Lido following a security incident affecting part of MetaMask’s infrastructure.
• The final validators are expected to complete their exit by October 7, 2026, according to Lido.

MetaMask is responding to a security incident affecting part of its infrastructure, and while the wallet provider has been clear that no immediate threat to user wallets has been identified, the precautionary steps it’s taking are significant enough to pay attention to.

As a direct response to the incident, MetaMask Staking, formerly known as Consensys Staking, has begun exiting its Ethereum validators from the Lido protocol. The exit process is being carried out in coordination with clients, partners, and external security advisors. Lido confirmed the exits began this week, with the final validators expected to complete their exit by October 7, 2026.

The nature of the incident, its cause, and the full scope of affected infrastructure have not been disclosed. In addition, MetaMask has confirmed it is actively remediating the issue internally while working alongside external partners.

What Happens to the ETH?

The Ethereum withdrawn from MetaMask Staking’s validators will not disappear. It will likely return to the Lido protocol gradually as each validator completes the exit, withdrawal, and re-entry cycle. According to Lido Finance developer Will Shannon, that process could take up to 45 days due to an extended entry queue currently affecting the network.

Furthermore, Lido has been clear that no action is required from stETH holders. The protocol’s diverse Node Operator set, combined with its ad hoc reserve fund holding over 6,750 stETH, is designed to absorb and contain exactly this type of disruption without impacting normal protocol operations.

One important clarification MetaMask has made, its staking operations are non-custodial. Moreover, the company does not manage withdrawal keys for staked ETH on behalf of clients. The exit process is a protective measure rather than a fund recovery operation.

The Implication

A security incident at MetaMask’s infrastructure level, even one where no direct wallet threat has been confirmed, carries weight. MetaMask is one of the most widely used Ethereum wallets in the world. Any compromise of its backend infrastructure raises questions about how attackers gained access and what data or systems were exposed.

The validator exit from Lido also means foregone staking rewards and possible downtime penalties if validators are taken offline quickly to reduce network penalty risk, a financial cost the company is absorbing to protect client assets. Also, the investigation is ongoing, and the next update will matter significantly for how the market and the broader Ethereum staking community respond.

Crypto Market Highlights

HSBC RedCoin Takes Shape With Phased Stablecoin Rollout in Hong Kong

• HSBC RedCoin marks a major stablecoin move by a traditional bank in Asia, with the name reflecting HSBC’s Hong Kong roots.
• The rollout will be phased, beginning with P2P and P2M payments before moving to corporate and institutional applications.

HSBC has officially named its forthcoming Hong Kong stablecoin HSBC RedCoin. It is one of the most significant moves by a traditional bank into the digital asset space in Asia. The name reflects the bank’s Hong Kong heritage. The launch strategy is deliberately phased. It starts with person-to-person and person-to-merchant payments before expanding into corporate and institutional use cases aligned with Hong Kong’s evolving digital asset landscape.

In addition, the announcement came alongside a survey of over 1,000 local customers. The findings tell a more nuanced story than a simple headline about stablecoin adoption.

What the Survey Actually Shows?

74% of respondents could identify at least one stablecoin use case, a higher number than most banks would have expected. Digital asset trading and tokenised investments led the list at 57%, followed by P2P transfers at 53%, with cross-border remittances and merchant payments both sitting at 52%.

On the understanding side, 60% correctly defined a stablecoin as a fiat-backed digital asset. 26% assumed stablecoins were government-issued, and 10% viewed them as interest-bearing, a feature not included in Hong Kong’s current regulatory framework.

What’s Still Holding People Back

When asked what would build their trust, respondents pointed to fraud protection (53%), seamless cash conversion (51%), and reserve transparency (39%). Also, the two most powerful confidence-boosters, however, were stronger regulatory clarity at 62% and enhanced education at 55%.

That is why HSBC is launching a comprehensive public education series across its banking apps, website, and social media. It is focused on scam prevention and transparent redemption mechanisms. The bank isn’t just launching a product. It’s trying to build the trust infrastructure around it at the same time.

HSBC RedCoin is not arriving in a vacuum. Traditional financial institutions are accelerating their stablecoin strategies globally, from Circle’s partnerships with Visa and Mastercard to JPMorgan’s own tokenisation efforts. For HSBC, one of Hong Kong‘s three note-issuing banks. Notably, naming a stablecoin is a statement of intent rather than just a product launch.

Moreover, the phased rollout, P2P and P2M first, wholesale corporate use cases soon after, reflects a careful read of where customer comfort actually sits right now versus where the institution wants to take it.

On the other hand, a bank of HSBC’s scale entering the stablecoin market with a named product, a survey-backed strategy, and a public education commitment signals that institutional stablecoin adoption in Asia is no longer a future conversation.

Crypto Market Highlights

Kalshi Eyes $40B Valuation in Fresh $1B Funding Push

• Ripple and CSD BR will employ the XRP Ledger to reflect ownership data for Brazilian investment funds.
• This initiative begins with BTG Pactual fund shares and might expand to include native issuance as well as other securities.

Brazil is integrating public blockchain technology into regulated financial infrastructure through a cooperation with Ripple and CSD BR. On September 29, CSD BR announced this initiative, which involves BTG Pactual investment fund shares. The operator has over BRL 22 trillion worth of assets registered. The XRP Ledger will reflect ownership data but will not substitute official records of CSD BR. CSD BR stated that the initiative marks the first use of public blockchain technology by the central securities depository for ownership mirroring. The operator has permission from Brazil’s Central Bank and CVM.

Tokenized Shares Will Be Subject to Institutional Controls

The shares issued by the fund will be based on the multi-purpose token standard of the XRP Ledger used by Ripple and CSD BR. The multi-purpose token standard allows for the setup of rules regarding financial assets and includes restrictions for approved participants as well as asset recovery processes. Corporate and banking institutions need to go through the verification process and anti-money laundering processes prior to gaining entry to the platform. CSD BR will control token issuance, participant approval, administration, and asset freezing. It will also manage clawbacks when regulatory or judicial action requires asset recovery. The blockchain infrastructure will be provided by Ripple together with the custody system.

Project May Be Expanding Beyond Brazilian Securities

This project can go further from simple record mirroring depending on whether the project meets its objectives at this stage. In subsequent stages, there may be the issuance of native financial instruments within the XRP ledger. Tokenized instruments would then be traded through the blockchain network by approved participants. These may include Real Estate Receivables Certificates which are known as CRIs and Agribusiness Receivables Certificates that are called CRAs. 

These are Brazilian fixed income securities which are backed by sector-specific receivables. Other tokenization activities in Brazil already have projects that are being undertaken by VERT and Mercado Bitcoin. For instance, VERT created a private credit platform which is based on XRPL, and it holds a BRL 700 million agribusiness receivables certificate. On the other hand, Mercado Bitcoin planned to tokenize more than $200 million worth of real-world assets.

Highlighted Crypto News:

Illinois Drafts Rules for 0.2% Crypto Transaction Tax

• Illinois has released draft rules for its 0.2% crypto transaction tax, including stablecoins and memecoins.
• The tax is scheduled to take effect on January 1, 2027.
• NFTs are excluded from the proposed digital asset tax rules.

The U.S. state of Illinois has released draft rules for its new 0.2% digital asset tax, giving crypto exchanges and other service providers more detail on how the levy could work when it takes effect next year.

The Illinois Department of Revenue (IDOR) posted the draft rules on September 28 and is accepting public comments through October 30, 2026. The rules have not yet been filed with the Secretary of State or submitted to the Joint Committee on Administrative Rules.

The underlying Digital Asset Tax Act was signed into law in June and is scheduled to take effect on January 1, 2027. It applies a 0.2% tax to the value of a digital asset involved in covered business activity received by an Illinois customer. Digital asset brokers are responsible for collecting the tax.

What the Draft Rules Cover

The proposed rules define taxable activity as the exchange, transfer or storage of digital assets through a business or for a customer. Exchanges include buying or selling crypto for dollars, trading one digital asset for another, converting fiat into crypto, converting crypto back into fiat and bridging assets between blockchains.

Transfers can also fall under the tax when a broker performs them for a fee. The draft specifically includes transfers between accounts belonging to the same customer when a digital asset broker facilitates the transaction for consideration. Direct peer-to-peer transfers without an intermediary are not covered.

The proposal also covers stablecoins and memecoins, while specifically excluding NFTs. Network or gas fees paid directly to miners and validators are not treated as taxable consideration. DeFi transactions generally fall outside the tax unless a platform receives qualifying fees, such as protocol fees.

The tax is based on the dollar value of the digital asset when the taxable activity is completed, rather than on whether the customer made a profit.

How It Compares With U.S. Federal Crypto Taxes

Illinois’ levy is separate from federal crypto taxation. The IRS treats digital assets as property, meaning sales and exchanges can create taxable capital gains or losses. Federal rules also require certain brokers to report digital asset transactions to the IRS through Form 1099-DA.

Illinois is currently the first U.S. state to enact a transaction-based tax specifically targeting digital asset activity. A separate Illinois bill, HB 5798, has been introduced to repeal the Digital Asset Tax Act, but it has not repealed the law.