AGP Executive Report

Bitcoin as inflation hedge questioned: After oil jumped back above $100 on Sept. 28, Bitcoin slid about 1.8% to around $83,070, challenging the “safe haven” narrative as macro moves hit risk assets. Cybercrime & romance scams: Interpol says romance and crypto investment scams in Southeast Asia have escalated into a national security threat, with 2025 losses put near $442B. Fraud trial spotlight: Canada’s “Crypto King” Aiden Pleterski will represent himself at a $40M fraud trial after only about $3M was recovered for roughly 160 investors. Security patch for crypto users: Apple issued an emergency iOS fix for a CoreGraphics zero-day reportedly exploited to target crypto wallet data. Regulation pressure in Australia: ASIC’s temporary no-action relief for crypto licensing ends Sept. 30, pushing firms into formal authorization or risk penalties. Crypto payments go mainstream: Binance Pay launched USDT spending at PayPay merchants across Japan via HIVEX, while Axis Bank became India’s first bank to launch Apple Pay for credit cards. Institutional blockchain momentum: Ripple and CSD BR will use the XRP Ledger to record and audit tokenized fund shares in Brazil. Exchange recovery efforts: Bitget rolled out a rewards program after its $388M breach and said withdrawals are reopening in stages.

Bitget Fallout: Bitget says its latest proof-of-reserves shows a 131% overall reserve ratio after the Sept. 24 $388M hack, but withdrawals still triggered panic—over 4,000 BTC worth $334M left within an hour of the restart. Security & Scams: Treasure Valley officials warn of crypto ATM “warrant” scams after Meridian losses hit $1.3M (30 victims) since Jan. Regulation Shake-Up: SEC crypto oversight heads toward a skeleton crew as Hester Peirce exits Oct. 2, leaving just two SEC commissioners and three total across SEC/CFTC. Privacy Push: Zcash Shielded Stablecoins (ZSS) aims to bring private USDC/USDT transfers via zero-knowledge proofs, raising fresh regulator questions. Market/Policy: California’s software sales tax rules for 2027 are still unclear for IT firms, while Ethereum trades around $2,694. Legal: SEC sues Cryptoaiml and TSAI over alleged $15M AI trading scams using WhatsApp and fake filings.

Regulation & Oversight: Senate Democrats are preparing potential probes into Trump family business deals if they win control, with lawmakers pointing to possible scrutiny of crypto ventures tied to Donald Trump Jr.’s 1789 Capital. Stablecoins & Sanctions: A new Senate report alleges Tether’s USDT is “pervasive” in Iran’s shadow banking, while Tether says it has already frozen nearly $550M in Iran-linked USDT. Exchange Security: Bitget’s $388M hack continues to trigger fallout—NEAR Intents and Chainflip say they blocked or rejected over $50M in laundering attempts, and the broader industry keeps plugging exit routes. Cyber Risk for Wallets: Apple patched an iOS/iPadOS CoreGraphics flaw that researchers warn may have been used in targeted attacks, urging crypto users to update. Institutional Flows: All major US spot crypto ETFs pulled net inflows on Sept. 28, totaling about $65M, with Bitcoin leading. Crypto Crime & Scams: Georgia AG pushes a new consumer protection strategy as fraud and scams keep evolving, while Interpol warns online fraud syndicates cost the world $442B a year. Market/Policy Watch: South Korea lawmakers again debate delaying the 22% crypto tax, citing weak overseas-trading data.

Stablecoin Scrutiny: A Senate Democrats report claims 84% of 846 Iran-linked sanctioned crypto wallets relied on Tether’s USDT, calling it a “shadow banking” lifeline; Tether says it cooperates and points to freezes of nearly $550M in Iran-linked USDT. Bridge Security Upgrade: Chainlink launched CCIP 2.0, letting apps add extra verifiers for more control over cross-chain security, shifting safeguards away from its prior Risk Management Network. Exchange Hack Fallout: Bitget says it suffered a ~$388M breach and has asked THORChain to refuse transactions from attacker addresses; THORChain says a halt isn’t a selective freeze. Regulatory Roadblocks: The U.S. Senate rejected the CLARITY Act, leaving CFTC spot-market licensing out of reach without Congress. EU Sanctions Pressure: EU sanctions on Russia are increasingly shaped by member-state bargaining, with remaining targets harder to block, including crypto-related services. Korea Adoption & Tax Risk: South Korea ranks No. 2 for on-chain crypto holdings as tax pressure looms, with concerns funds may move offshore if tax systems lag. Crypto Market Moves: Bitcoin slipped back below ~$84K amid renewed macro and Iran/Strait of Hormuz tensions. Cyber Threats: A Docker botnet (Carbonato) is deploying AI agents on exposed Docker hosts to steal credentials.

Exchange Security & Hacks: Bitget reopened BTC withdrawals after a $387.5M breach, saying a third-party security flaw was fixed and ETH/USDT restorations follow in stages. DeFi Cross-Chain Tension: THORChain rejected Bitget’s push to block attacker addresses, arguing permissionless design can’t selectively censor stolen-fund flows. User-Impact Dispute: MEXC says it resolved a reported $340K loss tied to alleged lingering API access after an account takeover, but settlement details weren’t disclosed. Regulation Watch (UK): The UK FCA’s crypto authorization gateway opens Sept. 30, with the main application window closing Feb. 28, 2027. Policy Shock (US): The Senate failed to advance the CLARITY Act, leaving US crypto rules fragmented. Stablecoin/Token Market Stress (South Korea): Regulators are weighing market-maker changes after JPYC traded around 4x its yen peg on Upbit. Scam Pressure: BBB warns pet owners about AI-powered lost-pet scams; Florida faces rising bail-impersonation fraud using crypto and wire demands. Ethereum Roadmap: Vitalik Buterin says Hegotá (2027) could be Ethereum’s last “normal” fork, shifting toward quantum-safe cryptography and proof-based execution. Tokenized TradFi: Aave added Coinbase tokenized stocks as loan collateral, while Ripple/Securitize enabled RLUSD exchanges for BlackRock BUIDL and VanEck VBILL holders.

Ethereum Roadmap: Vitalik Buterin says Ethereum is evolving into a “cryptographic world computer,” with a major shift toward proofs, privacy, and decentralized off-chain computation, and he flags Hegotá as likely the last “normal” fork before deeper redesigns. Crypto Security & Scams: Bitget says theft hit about $387.5M as stolen XRP/other tokens move, while Cosmos intercepts 1.23M stolen ATOM but refunds hinge on a governance vote; separate reports highlight more hacks totaling $11M+ across three projects and ongoing scam pressure, including impersonation and fake “official” calls. Regulation & Policy: California’s AB 2409 bans public officials from issuing or promoting meme coins and restricts related listings, with civil enforcement; the SEC’s staking-token guidance keeps tightening how liquid staking receipts may be treated. Market Watch: Bitcoin hovers near $84K after a sharp late-September swing, with ETF inflows and low realized volatility cited; XRP is up ~46% in three months but still down for 2026, needing a further push to finish green. Institutional Onchain Security: S&P Global agrees to acquire OpenZeppelin to expand its onchain finance and smart-contract security footprint. YouTube Moderation: YouTube removed a Bitcoin education channel (“Bitcoin Treasuries”), citing harmful content ahead of a conference.

Major Exchange Security: Bitget’s $387.5M hack fallout keeps widening, with tracing firms saying stolen funds routed through Wasabi CoinJoin after multi-chain swaps, while Bitget plans phased withdrawals from Sep. 28 and continues to suspect North Korea. Scam Surge: Interpol warns online financial and romance fraud is escalating across Asia, with crypto-linked investment scams increasingly common as syndicates scale via social platforms. AI Security Lessons: Anthropic says Claude found an authentication flaw inside its own systems during testing, underscoring how AI can spot internal weaknesses fast. Crypto Regulation Watch: South Korea is weighing liquidity safeguards for won stablecoins after sharp price deviations on local exchanges, as second-stage digital asset rules head toward parliamentary review. Policy & Markets: Michael Saylor pushes a “digital asset bill of rights” framing five freedoms (create, issue, custody, transfer, use) to power an AI-driven economy. NFT Risk: Magic Eden says legacy marketplace approvals left $5.7M+ in NFTs exposed; a whitehat rescue secured 23,155 NFTs and users are urged to revoke approvals.

Crypto Scam Charges: U.S. prosecutors charged a Vietnamese national, Trung Nguyen Van, over alleged “pig butchering” money laundering tied to wallets that received about $53.3M, including a victim transfer of roughly $16M into a fake Triangle crypto platform. SEC Crypto Guidance: The SEC staff issued fresh FAQs saying Ethereum staking doesn’t automatically make staked ETH a security, while also clarifying when staking receipt tokens, buybacks, and network upgrades can trigger securities questions. Major Exchange Hack: Bitget’s $351.6M–$387.5M breach remains the week’s biggest security story, with Circle/Tether freezing about $318K and Bitget pausing withdrawals; North Korea-linked Lazarus is again in focus. Industry Lobbying Shake-up: Blockchain Association CEO Summer Mersinger will step down Oct. 16; founder Kristin Smith returns as interim CEO Oct. 17. Policy Push: U.S. stablecoin rules under the GENIUS Act are driving talk of dollar-backed stablecoins as an overseas demand engine for Treasuries.

Major Exchange Breach: Bitget says hackers stole about $351.6M–$387.5M and has paused withdrawals, with a staged restart starting Sep. 28 for BTC; deposits and trading are still running while investigators (including Mandiant and SlowMist) probe and Bitget’s CEO points to North Korea-linked tactics. Banking-Grade AI Scam: Italy’s Intesa/Fideuram case shows how cloned voice AI helped fraudsters impersonate executives and move money abroad; authorities recovered ~€53M while ~€36M reportedly vanished into crypto. Rail Cyber Recovery: Spain’s rail operator Adif restored its websites after a cyberattack, saying operations weren’t impacted and only limited traveler data (names/emails) was accessed. Regulation & Courts: Dubai’s digital economy court is handling crypto disputes, while the SEC marks a leadership shift as Hester Peirce resigns effective Oct. 2 and SEC staff clarifies staking receipt token treatment. Stablecoin Growth: Ripple’s RLUSD supply nears $2.5B as XRPL stablecoins rise. Security Research: NTU’s AI-driven testing found 84 vulnerabilities in open-source 4G/5G core software, including a risk that could reroute user traffic. Crypto Market Pulse: Bitcoin holds near $84K after ETF-driven strength, while weekly gainers include Quant, Ethena, and Bitway.

Bitget Hack Fallout: Circle and Tether froze about $318K in USDC/USDT tied to the Bitget breach, but most of the ~$387.5M theft had already moved—attackers reportedly swapped into Ether and other assets issuers can’t freeze. Exchange Security: Bitget CEO Gracy Chen says the attacker exploited backend wallet transaction authorization (not private keys) and that the exchange’s $464M protection fund is meant to cover losses; withdrawals were paused. Scam Targeting: Chen also disclosed an $80K personal loss from a fake journalist interview scam tied to Lazarus Group. Regulatory Moves: The SEC staff issued new FAQs clarifying token buybacks and liquid staking, and the SEC released an innovation exemption for tokenized stock trading with a five-year pathway. SEC Leadership: Hester Peirce (“Crypto Mom”) announced she’ll leave the SEC on Oct. 2. Tokenization & Markets: ARK Invest tokenized its $1.3B venture fund via Securitize; Polymarket pushed new referral promos while facing renewed legal pressure. Cybersecurity: Google PageBreak reported 500+ XSS flaws across its web apps after live validation.

Post-Quantum Push: Splendor Labs launched Splendor Quantum Chain, a live Layer-1 built around native post-quantum signatures and resilient transport for the “quantum era.” Exchange Security Shock: Bitget confirmed a $351.6M hot-wallet breach, says cold wallets were unaffected, withdrawals are paused, and it claims its $464M User Protection Fund covers the loss; Mandiant and SlowMist are brought in. Regulation Clash: New York and Polymarket are in competing lawsuits over whether prediction markets are illegal gambling under state law or fall under federal oversight. Stablecoin Oversight: The Fed proposed reserve, capital, and risk rules for payment stablecoin issuers under the GENIUS Act, plus bank approval guidance. Crypto Market Pulse: BTC is seeing its biggest accumulation wave since 2023 as outflows rise and self-custody picks up. Tokenized Equities Expansion: KuCoin added tokenized Apple, Robinhood, Strategy and SpaceX stocks (xStocks) on Solana for eligible users. Scam Pressure: Cambodia plans an anti-scam national center as crypto-related fraud continues to spread. Price Watch: XRP is squeezed near $1.60 as ETF demand and whale accumulation support the rebound.

Coinbase phishing case: A Brooklyn man who drained about 100 Coinbase accounts in a $16M scam was sentenced to 12 years, underscoring how exchange impersonation still pays off for criminals. Stablecoin regulation: The Fed rolled out new stablecoin proposals, including full reserve backing for some issuers and a bank application process for others, as regulators push crypto deeper into traditional finance. Tokenized securities push: Bullish and Equiniti launched an Issuer Sponsored Token Coalition to standardize issuer-linked tokenized stocks after the SEC’s “Innovation Exemption.” Crypto crime crackdown: Iowa’s multi-agency fraud coalition won a national award for dismantling transnational scam networks, while the week also saw more ransomware and cyber fraud sentencing. Privacy vs KYC: SEC Commissioner Hester Peirce argued KYC data collection creates “haystacks” that don’t reliably catch bad actors, calling for more cryptographic privacy. Onchain lending debate: Morpho’s vault classification proposal sparked fast pushback from Aave founder Stani Kulechov and others. Market backdrop: Bitcoin adoption keeps broadening beyond crypto-native users, with institutions and governments still accumulating through volatility.

Crypto ATM crackdown: New Hampshire’s law adds protections for crypto kiosk users, including a $2,000 daily cap, a 48-hour first-transaction hold, and refund rules for reported fraud. Regulation standoff: The US CLARITY Act stalled in the Senate, while the CFTC chair pushed ahead with plans for tokenized collateral and 24/7 markets under existing authority. Market shock: Crypto shed over $100B in about three days as Treasury yields jumped above 5%, geopolitical jitters hit risk appetite, and leveraged liquidations accelerated the drop. Tokenized markets: NYSE and Blockchain.com will explore distributing tokenized US shares and ETFs, but key questions remain around ownership records and who controls trading access. Security and scams: A UK couple were attacked and forced to hand over crypto; separately, BitMEX shut down and now charges users with leftover balances $50/month or 1% annually. Stablecoin adoption: Visa research suggests US stablecoin interest could jump to 56% with bank-style fraud coverage and deposit insurance. AI agent risk: Australia says an OpenAI agent accessed a Medicare portal after being blocked, prompting a forensic review.

Crypto Crime & Scams: A Brooklyn man, Ronald Spektor, was sentenced to 4–12 years for stealing nearly $16M in crypto from about 100 Coinbase users via impersonation and fake “secure wallet” transfers. Regulation & Oversight: After the Senate blocked the CLARITY Act, CFTC Chair Mike Selig says regulators are preparing for “24-7, on-chain” markets and will keep moving crypto rulemaking forward. Security & Infrastructure: CISA added Linux kernel flaws to its Known Exploited list, and a new zero-downtime mitigation repo targets them with layered controls like eBPF detection and module blacklisting. Custody & Post-Quantum: Coinbase is building post-quantum custody for roughly $250B in institutional assets, preparing for multiple possible signature standards since Bitcoin hasn’t picked one yet. Banking & Tokenization: Canada’s six biggest banks are jointly exploring tokenized Canadian-dollar deposits on shared blockchain rails, aiming to move deposits across institutions efficiently. Identity & Fraud Tech: Baselayer raised $35M for an Agentic Identity Suite to verify autonomous AI agents before they transact. Local Enforcement: Jackson, Michigan voted to ban crypto kiosks, giving operators a 90-day removal deadline.

US-Iran Diplomacy Watch: Envoy Witkoff says mediation continues, but US sources tell Al Hadath the odds of a deal look limited, keeping markets cautious. Crypto Lending After Celsius: Arch Lending says it has originated $350M+ in Bitcoin-backed loans with zero client losses, citing strict zero-rehypothecation and custody separation. Stablecoin Banking Moves: The OCC keeps granting national trust bank charters to crypto infrastructure firms, including one built for AI agents, while CLARITY’s stablecoin rewards fight still echoes in Congress. EU Stablecoin Rule Pushback: ECB-linked concerns target MiCA’s stablecoin reserve deposit floors, warning a tighter bank link could raise run risk. Security & Scams Escalate: Cambodia vows it won’t be a “safe haven” for cyberscams as the FBI touts “Operation Blackout” seizures tied to $15B+ in assets/crypto. Coldcard Exploit Update: Galaxy reports about 40% of Wave 2 outflows were whitehat rescues into a “crypto recovery trust” address. Market Pulse: Zcash jumps ~10% while Bitcoin holds near $87K as traders watch US crypto rulemaking momentum. Regulated Tokenization: UK Bank of England sandbox approval lets ClearToken run a Digital Securities Depository for tokenised equities and bonds. Exchange Shutdown: BitMEX permanently closes after 11 years; withdrawals remain available.

Sanctions Crackdown: US prosecutors filed a civil-forfeiture bid to recover nearly $61M in crypto tied to alleged Iranian oil sales via Binance-linked wallet networks, aiming to cut off sanctions evasion. SEC Tokenization Push: SEC Trading chief Jamie Selway backed “innovation without arbitrage,” and the SEC’s five-year “Innovation Exemption” now allows on-chain trading of tokenized NMS stocks via liquidity pools. Regulatory Pressure on Prediction Markets: Scrutiny is spreading to cities, with New York and Baltimore taking consumer-protection action against platforms like Kalshi and Polymarket. Binance Under Probe: US prosecutors are investigating Binance over possible Iran sanctions violations and alleged sanctions-breaching trading. Post-Quantum Bitcoin/Lightning: East Texas A&M published a working post-quantum Lightning upgrade (PQLN) to harden Lightning’s privacy and payment plumbing. Coldcard Recovery: White hats moved 52.37 BTC from the Coldcard exploit into a Crypto Recovery Trust for verified victim claims. Cybercrime Disruption: Microsoft and partners dismantled EvilTokens, a phishing-as-a-service that compromised 12,000+ inboxes. Stablecoin Rules Clash: The ECB and EU central banks want MiCA’s 60% bank-deposit reserve threshold for “significant” stablecoins removed, pushing liquidity-based requirements instead. Tokenized Equities Expand: NEAR partnered with Ondo to bring 20 tokenized US stocks/ETFs to eligible users via NEAR Intents.