AGP Executive Report

Trump Crypto Windfall: New U.S. financial disclosures say Donald Trump earned about $1.4B from crypto ventures in 2025, with World Liberty Financial and $TRUMP meme-coin licensing/royalties driving much of it, while critics raise fresh ethics and conflict-of-interest questions. Regulation Watch: Brazil’s Central Bank approved tighter prudential rules for virtual asset service providers starting 2027, pushing risk management, capital reserves, and more disclosures. UK Rule Update: The FCA published final policy positions for the UK’s new cryptoasset regime, with authorizations starting Sept. 2026 and a full start date in Oct. 2027. Security & Scams: Ukraine prosecutors exposed a fraudulent crypto exchanger network, seizing over UAH 20M; meanwhile U.S. local agencies issued renewed scam alerts, including crypto-related impersonation and phishing. Institutional Infrastructure: Ondo launched tokenized access to BlackRock’s IVV ETF and Micron shares with Broadridge handling proxy voting. Privacy Tech: Fhenix acquired Sunscreen to expand quantum-safe privacy for Web3.

US Crypto Ethics Scrutiny: Trump’s 2025 financial disclosure puts crypto at the center of his business empire, showing at least $1.4B from crypto ventures and a major $635M “meme coin” licensing deal—sparking fresh conflict-of-interest alarms. FBI on Nancy Guthrie Case: The FBI says some Nancy Guthrie ransom notes were fake, but others may be legitimate, while still treating the disappearance as kidnapping-for-ransom. France “Wrench Attacks” Surge: France reports 77 crypto-linked kidnapping/extortion incidents in 2026 (up from 45 in all of 2025), with about 200 arrests, as criminals increasingly target victims via leaked identities. MiCA Enforcement Pressure: The EU banking watchdog (EBA) is consulting on how it will calculate fines for issuers of “significant” tokens ahead of the July 1 MiCA licensing deadline. Stablecoin Sanctions: Tether froze USDT in 131 TRON wallets tied to ISIS-K after OFAC sanctions. DeFi/Exchange Updates: Taiko reopened its bridge after a $1.7M exploit recovery, and dYdX launched Arcus on Robinhood Chain as DYDX slid. Consumer Protection: Alaska signed new rules for crypto kiosks, including licensing, warnings, limits, and fraud refund pathways.

US Crypto Income Scrutiny: A new federal disclosure says President Donald Trump took in nearly $1.2B from crypto businesses in 2025, including $500M+ from World Liberty Financial and $600M+ from Trump-branded “meme” coin sales—both reportedly plunging in value since. Regulation Watch: The CLARITY Act faces a tighter Senate path as Polymarket odds slide, while Jefferies warns of near-term crypto market volatility tied to the bill’s timing. Institutional Tokenization: Tradeweb and Canton completed a real-time tokenized U.S. Treasuries trade using USDCx, signaling more production-like atomic settlement for onchain cash-and-bonds workflows. Security & Scams: PeckShield reports $75.9M in June crypto hack losses across 40 incidents; meanwhile, the FBI says all three Nancy Guthrie ransom notes were fake, including one demanding crypto that was never claimed. Cybercrime Enforcement: OFAC sanctioned networks tied to Brazil’s PCC for laundering drug proceeds through the U.S. financial system. Asia Policy: Taiwan passed a sweeping crypto law requiring licenses for virtual asset service providers and tougher cybersecurity and custody rules.

US Crypto Politics: New US Office of Government Ethics filings say Donald Trump earned about $1.4B+ in 2025 from crypto and memecoin ventures, led by World Liberty Financial and $TRUMP royalties—renewing conflict-of-interest questions as the White House denies any issue. Taiwan Regulation: Taiwan’s legislature passed a Virtual Asset Service Act creating a licensing framework for crypto exchanges and stablecoin issuers, with reserve, audit, and cybersecurity requirements. Terror Finance Case: A New York woman was charged after allegedly sending ~$30K in crypto to Palestine Islamic Jihad, with prosecutors saying she made about 80 transfers. Crypto Crime Crackdown: NYC prosecutors say they’re pushing back on rising crypto-linked crimes, including dark-web drug markets where crypto is the payment method. Security & Scams: PhonePe’s open-source Nika tool targets cross-file security flaws in Java apps, while multiple reports highlight ongoing scam pressure and the need for safer wallet practices. Market/Legal: UK investors filed a £150M lawsuit against Binance and CZ over alleged unauthorized derivatives sales. AI Export Controls: Anthropic says US export controls were lifted for Claude Fable 5 and Mythos 5, after earlier restrictions tied to cybersecurity concerns.

MiCA Rollout: Strike gets MiCA authorization for all 27 EU states, while Binance faces EU service restrictions after its license bid faltered ahead of the July 1 cutoff. UK Court Fight: About 1,700 UK investors sue Binance and CZ in London High Court over alleged unauthorized retail derivatives sales, seeking at least £150M. Stablecoin Push: Visa, Mastercard and Coinbase back the Open Standard consortium launching Open USD, aiming for low-cost minting/redemption under the GENIUS Act. Regulation Abroad: Curaçao Gaming Authority issues new crypto rules for licensed online gambling and warns operators about unlicensed sites. Security & Scams: McAfee flags “Silent Swap,” a malicious browser extension that swaps wallet addresses via fake “Google Notes” installers. Exchange Fallout: Dutch prosecutors seek to liquidate Knaken after it failed MiCA licensing, leaving ~30,000 customers unable to access funds. Fraud Sentences: Netflix scam director Carl Rinsch gets 30 months; another US case targets a crypto Ponzi operator, with guilty plea expected. Identity Tech: EMVCo seeks feedback on verifiable digital credentials for card-based authentication.

SEC Enforcement: The SEC secured a $5.4M default judgment in the NanoBit “pig butchering” crypto fraud case, after operators allegedly used WhatsApp impersonation to trick investors into depositing funds into a fake platform. UK Regulation: The UK’s FCA rolled out sweeping final crypto rules covering trading, custody, stablecoins, lending and staking, with authorization requirements kicking in by Oct 25, 2027. EU MiCA Fallout: Binance founder CZ says Greece’s MiCA license bid was near approval before political intervention; Binance then withdrew and plans to suspend EU services July 1. Stablecoin Flows: Circle burned $250M USDC on Ethereum and minted $910M on Solana, signaling a major liquidity migration toward Solana. Security & Scams: Mozilla researchers showed a Claude Code attack that can hijack developer machines via poisoned Git repos; meanwhile, Berks County warned residents about fake law-enforcement calls demanding crypto payments. Quantum Policy: Trump signed executive orders to accelerate quantum computing and transition federal agencies toward quantum cryptography. Market Watch: CryptoQuant flagged negative Binance ERC-20 stablecoin netflows alongside Bitcoin hovering near ~$59.5K.

Regulation Push: The White House is lining up law enforcement groups to keep the CLARITY Act moving, aiming to narrow objections to Section 604 that critics say could over-exempt parts of DeFi. Court Watch: The U.S. Supreme Court declined a First Amendment challenge to the SEC’s old gag rule, leaving the constitutional question unsettled. EU Compliance Deadline: MiCA’s July 1 cutoff is pressuring unlicensed crypto firms, with some exchanges pulling back from Europe. Stablecoin Rollout: Thailand is preparing a baht-backed 1:1 stablecoin framework after pilots, with public consultation expected before end-2026. Institutional Adoption: Morgan Stanley got OCC conditional approval for a digital-asset trust charter, while BlackRock integrated Ethena’s USDe into Aladdin, boosting ENA. Security & Crime: Chainalysis proposed new standards for blockchain tracing, and Europol reported a $47M crypto freeze in an infostealer takedown; meanwhile, scams tied to wallet recovery tools and phishing continue to surge. Market Structure: Bernstein expects an acquisition wave as prediction-market platforms consolidate trading infrastructure. Crypto & Violence Case: U.S. prosecutors added narcoterrorism charges in the Marset case, tied to alleged drug trafficking and crypto wallet access. Scam Incident: In Pasay, two foreign suspects allegedly robbed a condo owner of nearly P200,000 via online banking, mobile wallet, and crypto accounts.

Cybersecurity Patch Push: curl 8.21.0 shipped with 18 security fixes, including a long-running libcurl mTLS connection-reuse flaw that could let some auth checks be bypassed. Credential Theft Campaigns: LokiBot is back in a multi-stage delivery chain using JScript, PowerShell, .NET injection, and process injection to steal passwords and crypto wallet data. AiTM Phishing Hits Cloud: an adversary-in-the-middle kit copied the AWS login flow and captured AWS console credentials plus MFA codes in real time. Crypto Crime & Scams: fake “wallet recovery” tools are spreading malware after Google searches for seed-phrase help; meanwhile, Europol says it froze $47M in crypto during a global infostealer takedown. Policy Pressure: Sen. Elizabeth Warren warned the U.S. CLARITY Act could worsen how adversaries misuse crypto, pointing to CoinEx-linked Iran flows. Regulation Watch: Dubai’s VARA hit its 50th crypto license, but only 39 firms were fully operational by end-2025. Market Mood: Bitcoin is under heavy pressure after a worst-quarter-for-hacks report and continued volatility signals. Consumer Safety: WhatsApp is rolling out warnings before chats with unknown numbers to reduce scam outreach.

SEC Scam Alert: The SEC warned the public about Empire X Capital and Astra Financial Service Group, saying social-media pitches promise fast returns and referral commissions without authorization. AI Voice-Cloning Fraud: Experts say scammers can clone voices from short samples; they urge families to verify safety via a trusted contact method, use a safe word, and never send money under pressure. AI Cyber Threats: CrowdStrike reports prompt injection attacks hit 90+ organizations in 2025, with attacker movement averaging 29 minutes—plus a crypto-linked case where an AI-controlled wallet was drained. Bitcoin Market Pressure: US spot Bitcoin ETFs saw about $1.79B weekly net outflows, while Bitcoin stays sensitive to macro and geopolitical headlines. EU Enforcement: The EBA outlined a tougher MiCA penalty framework for non-compliant “significant” token issuers. Polymarket Hack Update: Loss estimates rose to about $3.1M as lawmakers scrutinize deceptive prediction-market practices. On-Chain Watch: Reports flagged 1,350 BTC withdrawn from Binance and 50,000 BTC deposited to exchanges at a loss, both signaling stress that needs careful wallet-label checks. Crypto Policy: The CLARITY Act’s odds reportedly fell to ~42%, keeping XRP’s main catalyst in limbo.

Crypto Wallet Recovery Scams: Security researchers warn that “free” tools promising to recover forgotten seed phrases/access codes are malware traps that steal passwords and documents. Signal Account Takeovers: The FBI and CISA say Russian-linked hackers are targeting Signal Backup Recovery Keys to restore message archives and hijack accounts. Gaming Fraud: Malwarebytes and NordVPN flag fake “GTA 6 VIP early access” sites taking crypto payments for nonexistent downloads. AI Casino Fraud: New reporting says AI-enabled scams are driving record crypto gambling losses, pushing operators toward real-time fraud detection. Linux Security: DirtyClone (CVE-2026-43503) is a public Linux root escalation flaw that can turn local access into full control. Regulation Pressure: Rep. Maxine Waters demands DOL withdraw a crypto 401(k) rule as fraud losses hit $11.4B. CLARITY Act Crossroads: Grayscale and Galaxy Research say Senate timing uncertainty could pressure bitcoin and digital-asset treasuries. Market & Macro: Fed officials now signal possible 2026 rate hikes, a headwind for risk assets like crypto. World Cup + Crypto: FIFA’s Kraken tie-in and Polymarket trading keep prediction markets in the spotlight—while scammers push fake “official” tokens.

EU Regulation Shock: Binance is set to suspend services across parts of the EU after failing to secure MiCA authorization by the July 1 deadline, with customers in multiple countries facing restrictions even as Binance insists it will pursue a license. Singapore Consumer Warning: MAS added Hyperliquid to its Investor Alert List for operating without regulatory authorization, stressing it’s not a ban but means MAS protections don’t apply. Prediction Market Security: Polymarket confirmed a second security incident after a frontend supply-chain compromise drained about $3.1M from 11–15 wallets, and pledged full refunds. Cyber & Scam Defense: SentinelOne detailed a North Korea-linked macOS implant (“Gaslight”) that tricks AI security tools into aborting analysis, while the FBI warned Russian hackers are phishing Signal users for backup recovery keys that can restore full message history. Crypto Policy Watch: CZ said U.S. crypto regulation will keep moving even if the Clarity Act stalls, and OKX is targeting Binance’s EU users after Binance’s MiCA troubles. Market Pressure: Bitcoin is trading near $60K as mining costs stay above price, and Cathie Wood argues AI is draining liquidity while capital outflows could spark the next BTC rally.

EU MiCA Shake-Up: ESMA says unauthorised crypto firms must immediately stop onboarding EU clients, halt marketing, and wind down services in an orderly way before/after the July 1 deadline. Binance EU Fallout: Binance will suspend most services for EU residents from July 1 after missing MiCA licensing, framing it as a suspension not a permanent exit. Cardano Security Incident: SecondFi took a final balance snapshot and began refund registration after a private-key generation flaw in its web wallet software; it warned users not to restore phrases elsewhere. Crypto Scam Crackdowns: Florida/Massachusetts victims saw a record $5.4M crypto recovery tied to romance-to-investment fraud, while local sheriffs warned of fake law enforcement calls demanding crypto payments. CLARITY Act Politics: Human-trafficking advocates urged lawmakers to revisit Section 604 over developer liability limits, while Galaxy Digital cut its CLARITY Act passage odds to 50-50. Sanctions & Illicit Flows: TRM Labs traced $3.84B in CoinEx-linked crypto flows tied to sanctioned Iranian entities over seven years. Market Mood: Bitcoin hovered near $60K amid extreme fear as traders debate whether the four-year cycle still holds. Investor Legal Watch: Rosen Law Firm is investigating FLOW and preparing a class action notice for eligible investors.

Polymarket Breach: The prediction platform says hackers injected a malicious script into its frontend via a compromised third-party vendor, draining about $2.94M from roughly 11 users; Polymarket says it’s already contained the issue, removed the dependency, and will refund victims in full. EU Compliance Shock: Binance is restricting EU services after failing to secure a MiCA license by July 1, with customers in multiple countries told how to withdraw; the Financial Times reports Greece rejected its application over AML transparency concerns. Stablecoin Rule Shift (UK): The Bank of England replaces proposed holding caps with a £40B issuance guardrail per systemic stablecoin product, aiming to keep GBP payment rails usable while limiting banking outflows. Crypto Market Pressure: Bitcoin keeps testing the $59K area as risk-off sentiment bites, with analysts pointing to potential downside if support breaks. Cybercrime Crackdown: Law enforcement and partners disrupted StealC/Amadey malware infrastructure, taking down 66 domains and 296 servers and supporting legal action against alleged operators. Scam Warnings: Missouri Highway Patrol warns of WhatsApp “VIP Delivery Transit Program” scams using AI-made documents and gift-card payment demands. AI Agent Identity: Proof launched x401, an open protocol for cryptographic proof of verified human authorization for AI agents.

Crypto Security Breach: Polymarket says it contained a hack after a compromised third-party vendor injected a malicious script into some users’ frontends, and it’s refunding affected traders in full (with analysts pointing to nearly $3M drained from under 15 wallets). Regulation & Politics: U.S. senators are still split as the CLARITY Act fight drags on, with lawmakers pushing for a July path but warning time is running out; separate calls are growing for a probe into reports of a secret Trump-Emirati crypto deal. Market Moves: Tether’s USDT has overtaken Ethereum in market cap, hitting about $186B as ETH slips during a broader downturn; meanwhile Bitcoin is back under $60K amid liquidation pressure. Network Reliability: Coinbase’s Base resumed block production after a nearly two-hour outage caused by a consensus issue that sequenced an invalid block. Cybercrime Response: Nigeria’s FCID Lagos rolled out new strategies for cybercrime and cryptocurrency tracing, while BitGo cut about 15% of staff to focus on security, trading, stablecoins, and AI. Scam Warning: FBI reporting highlights how seniors are getting hit hardest by romance and investment scams, with crypto losses featuring prominently.

Kraken Legal Battle: Payward (Kraken’s parent) sued crypto derivatives firm PowerTrade, alleging about $7.2M was improperly removed via disputed “corrections” and retroactive trade cancellations that allegedly flipped its balance from surplus to near $2M deficit. Stablecoin Market Buildout: Uniswap and Spark plan a stablecoin FX layer to move liquidity between issuers and help idle capital earn yield, as stablecoins push deeper into payments. Android Banking Trojan: Researchers flagged Rokarolla, an Android banking trojan that can take near-total control, targeting 217 crypto and banking apps and harvesting credentials. Cybercrime Takedown: Europol’s Operation Endgame disrupted malware services SocGholish, Amadey, and StealC, freezing about $47M in crypto and recovering 27M login credentials. Crypto Security Policy: The FCC proposed rules that could end anonymous burner phones by requiring identity-linked verification, with suspicious devices flagged for enforcement. Institutional Expansion: SBI agreed to buy Bitbank for about $289M, aiming to create Japan’s largest exchange by custody. Quantum Readiness Push: New reporting says many orgs are still planning post-quantum migration despite clearer government road maps.

Crypto Market Mood: Bitcoin slid toward $62K and even below $60K as tech weakness and ETF outflows kept pressure on risk appetite. Regulatory Push: The U.S. White House accelerated post-quantum migration deadlines for federal systems, while the Pentagon outlined a 2030–2031 phaseout path for quantum-vulnerable crypto. Enforcement Spotlight: DOJ seized Huione Group cloud infrastructure tied to crypto fraud and money laundering, targeting the “backbone” behind illicit transfers. AI + Security: A federal judge allowed prosecutors to search ChatGPT records in a crypto fraud case, underscoring that AI chats can become legal records. Prediction Markets: Kalshi is reportedly in talks to raise capital at a ~$40B valuation as it fights Illinois rules. Institutional/Infra: Standard Chartered hosted a digital assets summit in Accra, betting stablecoins could reshape cross-border payments across Africa. Corporate Moves: Grayscale flagged 15 revenue-producing protocols as potential CLARITY Act beneficiaries. Cybercrime Crackdown: Europol’s Operation Endgame disrupted StealC/Amadey infrastructure and recovered millions of stolen logins.