Web3 Weekly: September 22–28, 2026 — The Fed proposes GENIUS Act stablecoin rules as Bitget loses $387.5 million
A September 22–28 briefing on the Federal Reserve's two GENIUS Act stablecoin proposals, the SEC's and CFTC's staff guidance and Hester Peirce's exit, five capital moves led by Binance's $100 million stake in Circle, Solana's Alpenglow testnet and devnet rollout, and roughly $408 million lost across three security incidents.
The seven days from September 22 to 28, 2026 moved the writing of crypto rules further into the agencies and further from the statute book. The Federal Reserve proposed the first federal rules for the payment stablecoin issuers it supervises under the GENIUS Act, and opened a 60-day comment clock 1. The SEC's Corporation Finance division answered six questions about how it classifies tokens and when marketing becomes an investment contract — as staff guidance with no legal force, not as a rule 2. The CFTC updated its own crypto FAQ set and issued an advisory on event contracts that settle on whether a named person says particular words 34. On the day the SEC published its FAQs, Commissioner Hester Peirce set her departure for October 2, leaving the agency with two members 5.
Capital and infrastructure moved on the same premise that the openings already exist. Binance paid $100 million for a stake in Circle and renewed a five-year commercial agreement under which Circle pays it a monthly fee for USDC distribution 6. Four venture rounds disclosed in the window totalled $59.5 million, led by HIFI's $37 million Series A 7. Solana's Alpenglow consensus replacement went live on testnet and then on devnet, with mainnet still pending 8. No new Layer 2 mainnet or public testnet launched in the window, and the largest losses came from the newest surfaces: about $387.5 million from an exchange, $18.43 million from a launchpad on a young chain, and roughly $2 million from a counterfeit mainnet for a Layer 2 that has not launched 91011.
Weekly event matrix
| Organization / Project | Category | Amount / Scope | Disclosed date | Substantive impact |
|---|---|---|---|---|
| U.S. Federal Reserve | Proposed rules | Two proposals, 60-day comment | Sep 24, 2026 | Reserve backing, capital, custody and an application process for Board-supervised stablecoin issuers under the GENIUS Act 1 |
| U.S. SEC, Corporation Finance | Staff guidance | Six Q&As | Sep 25, 2026 | Classification of staking receipt tokens, wrapped tokens, marketing statements and buybacks; explicitly no legal force 2 |
| U.S. SEC | Personnel | Commissioner departs Oct 2 | Sep 25, 2026 | Agency drops to two commissioners; two-member quorum rules apply 5 |
| U.S. CFTC | Staff FAQ update | Two topics | Sep 24, 2026 | Tokenized forms of permitted investments may back customer funds; blockchain records can satisfy recordkeeping 3 |
| U.S. CFTC | Staff advisory | Mention-market contracts | Sep 22, 2026 | Designated contract markets must show such contracts are not readily susceptible to manipulation 4 |
| ESMA and the ESAs | Supervisory priority | New USSP from 2027 | Sep 23, 2026 | Artificial intelligence and tokenisation become an explicit EU supervisory priority 12 |
| New York State / Polymarket | Litigation | Suits filed both ways | Sep 24, 2026 | Whether event contracts are illegal gambling moves to court 13 |
| Kalshi | Court ruling | Second appellate loss | Sep 25, 2026 | Sports contracts held subject to state regulation 14 |
| Binance / Circle | Strategic placement | $100M, 1.24M shares at $80.84 | Sep 22, 2026 | Exchange buys into the USDC issuer and renews the USDC distribution agreement for five years 6 |
| HIFI | Series A | $37M | Sep 24, 2026 | Left Lane Capital leads stablecoin payments and tokenized capital-markets infrastructure 7 |
| Atum | Seed | $13.5M | Sep 22, 2026 | Variant and PayPal Ventures back a stablecoin settlement coordination layer with no custody 15 |
| Infini | Seed | $6M | Sep 22, 2026 | AI financial agents delivered on stablecoin settlement rails 16 |
| infiniFi | Seed | $3M+ | Sep 23, 2026 | Electric Capital leads; token generation event set for Q4 2026 17 |
| NYSE / Blockchain.com | Market infrastructure | Exploration | Sep 23, 2026 | A regulated exchange and a crypto venue explore selling tokenised stocks 18 |
| CME Group | Listings | BCH and UNI futures | Sep 22, 2026 | October 19 target, pending regulatory review 19 |
| Solana / Anza | Consensus upgrade | Testnet then devnet | Sep 24–25, 2026 | Alpenglow replaces TowerBFT on testnet and devnet; mainnet not activated 8 |
| Chainlink | Protocol release | CCIP 2.0 | Sep 28, 2026 | Transfer security becomes configurable; the separate Risk Management Network stops double-checking 20 |
| Bitget | Exchange breach | ~$351.6M, later ~$387.5M | Sep 24, 2026 | Approval systems were spoofed rather than keys stolen; withdrawals paused 9 |
| Robinhood Chain | Launchpad extraction | $18.43M across 53 launches | Sep 27, 2026 | An anti-sniping exemption was used to buy out token supply 10 |
| GIWA (Dunamu) | Counterfeit mainnet | 766 ETH, about $2M | Sep 27, 2026 | A fake bridge for a Layer 2 that has not launched drains roughly 1,300 wallets 11 |
Web3 financing and capital deployment
Five items were disclosed in the window, and they do not belong in one bucket. One is a strategic placement into a listed company; the other four are venture rounds that total $59.5 million.
Binance — $100 million for a stake in Circle (September 22). Circle disclosed in a regulatory filing that on September 17 it issued and sold roughly 1.24 million shares to Binance at $80.84 per share, giving Binance a $100 million position in the issuer of USDC, a dollar-pegged stablecoin with a market capitalisation near $75 billion 6. The commercial half matters more than the equity half. Circle and Binance expanded and renewed their partnership for five years, with either side able to terminate early under specified circumstances, and Circle agreed to pay Binance a monthly incentive fee while Binance promotes USDC on its platform 6. Read the structure, not the headline: this is an issuer paying its largest distributor, and it is a purchase of publicly traded stock, not a venture round. It does not belong in a Web3 venture total.
HIFI — $37 million Series A (September 24). Left Lane Capital led the round for a New York company whose APIs combine money movement, compliance and settlement across bank rails and digital assets 7. HIFI says it processes more than $7 billion in annualised volume across 87 countries. Two credentials are doing the work in this round: the company took part in DTCC's July production trades in DTC-tokenised securities, and it has a Visa partnership for stablecoin-funded payouts 7. This is the largest fresh venture round of the week and the clearest statement of where institutional money still goes: settlement plumbing with named bank partners.
Atum — $13.5 million seed, out of stealth (September 22). Variant and PayPal Ventures led, with Abstract Ventures, Road Capital, Mirana Ventures, First Commit, Credibly Neutral and the adviser Charlie Songhurst 15. Atum describes itself as a coordination layer for stablecoin payments: it issues no currency, runs no blockchain, favours no rail and takes no custody, and settlement providers compete to fulfil each payment 15. The company says it supports agentic payments through protocols including x402 and MPP, and its founder previously led Visa's crypto product team 15.
Infini — $6 million seed (September 22). Reforge, Fortwest Capital, Enlight Capital, NextGen Digital Venture, SNZ Capital and Vernal participated in the round for a Hong Kong platform that pairs stablecoin settlement with AI financial agents for consumer accounts, cards, payroll, transfers and corporate treasury 16. The company launched a mobile app alongside the raise and says the money will go to payment rails, licensing and compliance work 16.
infiniFi — more than $3 million seed (September 23). Electric Capital led, with New Form Capital, Generative Ventures, Fasanara Capital, 2Square, 4th Revolution Capital, DCFGod and The Rollup 17. The protocol says it has generated more than $9 million in yield for users and reached an all-time high of $180 million in total value locked, and that it has now paid out more in yield than it has raised in outside capital across a $3 million pre-seed and this round 17. Its token generation event is confirmed for the fourth quarter of 2026, which makes this a round priced against a token rather than against equity alone.
What falls outside the total. No fund close and no public-company treasury placement was disclosed in the window. The reported Polymarket financing from early September remains unconfirmed and is not counted. Note also that Binance's purchase of Circle stock is not venture capital, however often it is filed alongside it; on the definitions this issue uses, fresh venture money this week was $59.5 million across four rounds.
Regulatory actions and market structure
The Federal Reserve drafts the first stablecoin rules for issuers it supervises
On September 24 the Federal Reserve Board asked for public comment on two proposals that would turn the GENIUS Act into operative rules for payment stablecoin issuers under its supervision 1. The first would require full backing by permissible reserve assets such as short-term Treasury bills and other high-quality liquid assets, add standardised capital requirements for credit and operational risk, set risk-management standards, and cover firms that safekeep the assets backing stablecoins 1. It would also clarify which stablecoin activities Board-supervised banks may conduct. The second proposal creates a tailored application process for Board-supervised banks that want to issue stablecoins, requiring a business plan and financial information, and establishes how appeals, hearings and final determinations work 1.
Two things to hold apart. These are proposals, not rules: they take effect, if at all, only after the comment period closes 60 days after publication in the Federal Register, and after the Board votes again 1. And they bind only issuers the Federal Reserve supervises, not every dollar stablecoin.
The SEC answers six questions, as staff, not as a rule
The SEC's Division of Corporation Finance published a set of crypto-asset FAQs dated September 25 2. The document says plainly at the top that the answers are staff views, are not a rule or a statement of the Commission, and have no legal force and create no new obligations 2. Read it with that in mind.
The substantive answers that matter for projects:
- Staking receipt tokens. A receipt for a digital commodity that is not itself subject to an investment contract is a digital tool, because it evidences ownership of the underlying asset. If it is issued by a protocol-based liquid staking provider, it can instead be classified as a digital commodity 2.
- What a receipt must not do. A receipt changes none of the rights of the deposited asset, and the issuer must not be able to transfer, lend, pledge, rehypothecate or otherwise use it, or subject it to third-party claims 2.
- Marketing. Staff say that promoting a crypto system's current utility, or describing its potential in indefinite aspirational statements that say nothing about profit, would not by itself create representations about essential managerial efforts 2.
- Someone else taking over the promises. If another party assumes the issuer's representations to perform essential managerial efforts, the asset does not separate from the associated investment contract — whether the assumption is affirmative or by operation of law 2.
- Buybacks. For a functional system, announcing a buyback is not a promise of managerial effort; for a non-functional one, it can be, if the issuer presents it as creating yield or return 2.
- Secondary platforms. A trading venue listing an asset becomes a promoter only if it meets the Securities Act Rule 405 definition of promoter 2.
The same day, Commissioner Hester Peirce announced her resignation effective October 2 5. That leaves the commission with two members, Chairman Paul Atkins and Mark Uyeda, which is enough to act as a quorum but leaves no minority seat filled 5. For anyone relying on this agency's crypto agenda, the practical point is not who leaves but what she leaves behind: a body of staff guidance and staff-level clarifications that the next two members can revise.
The CFTC opens two doors and closes none
On September 24 the CFTC's Market Participants Division, Division of Market Oversight and Division of Clearing and Risk updated the FAQs on registrant and registered-entity activity in crypto 3. Two topics were added: whether customer funds may be invested in tokenised forms of permitted investments, and whether blockchain technology can satisfy a registrant's recordkeeping obligations 3. The answers sit on top of earlier staff positions — Staff Letter 25-39 on tokenised collateral and Staff Letter 26-05, a no-action position on digital assets accepted as margin collateral — and the original FAQ set was released on March 20, 2026 3. Chairman Michael Selig framed the update as regulatory clarity for the crypto industry 3.
On September 22, the Division of Market Oversight issued a staff advisory on "mention market" contracts, which settle on whether a person says particular words, appears at an event, or interacts with another person 4. The division's stated concern is that settlement turns on conduct that may be neither independently generated nor externally verifiable, creating heightened manipulation risk 4. The advisory sets out the limited circumstances in which such contracts may be listed and reminds designated contract markets of their obligation under Core Principle 3 to list only contracts not readily susceptible to manipulation, with a complete contract-specific analysis when submitting products under Part 40 4. This is direction to exchanges on how to file a product — not a prohibition, and not an enforcement action.
Europe: a supervisory priority rather than a MiCA ruling
ESMA will add a Union Strategic Supervisory Priority on digital innovation from 2027, announced September 23, with an initial focus on how supervised entities use artificial intelligence and tokenisation 12. A supervisory priority directs national supervisors' attention and resources; it is a convergence tool, not a rule, and it creates no new obligation on a crypto-asset service provider 12. On the same day, the three European Supervisory Authorities called for vigilance over external dependencies, cyber threats and private credit risks in a joint statement 21.
The scoped negative finding, unchanged in shape from recent issues: nothing on ESMA's publication surface between September 22 and 28 concerned MiCA technical standards, passporting or crypto-asset service provider supervision 22. That finding covers that one page and this window; it says nothing about national regulators, whose authorisation decisions are published on their own sites.
Prediction markets lose in court twice, and a regulated exchange starts exploring tokenised stock
New York's gambling regulator and Polymarket sued each other over whether the venue's contracts are illegal gambling, reported September 24 13. A day later, an appeals court ruled against Kalshi, holding that its sports contracts are subject to state regulation — a second appellate loss on the same question 14. For a US event-contract venue the operative risk is now judicial and state-level rather than federal, and the CFTC's mention-market advisory this week adds product-design duties on top.
One more market-structure item, filed under exploration rather than approval: the New York Stock Exchange and Blockchain.com said on September 23 that they would explore selling tokenised stocks 18. An announced exploration is not a product, a filing or an approval.
No crypto enforcement action on the SEC's press-release surface
The SEC's press releases dated September 22 and 23 concerned a censure of OTC Link LLC over Regulation SCI compliance failures, updated market statistics, and an alleged investment scheme, none of which is a crypto measure 23. The crypto-facing output of the week arrived instead as the staff FAQs described above. A quiet enforcement surface is not the same as quiet regulation, and this issue does not read it as a change in posture.
Layer 2 networks and scaling
No Layer 2 network launched a mainnet or a public testnet in the window, on the surfaces checked for this issue. That is the beat's result this week, and it is worth stating plainly rather than filling with adjacent news: the Optimism work below is a contract change to chains that already run, not a launch.
Optimism's Upgrade 20 cutover is not confirmed here. The upgrade, approved by governance on September 16, was scheduled to execute its L1 contract cutover during this window as an L1 smart-contract change and not an L2 hardfork 24. No dated first-party record of the execution had been published when this issue closed, so it is carried as scheduled rather than complete. What the upgrade does is unchanged by that: fault proofs move from output roots anchored to an L2 block number to super roots anchored to a timestamp, with new game types 5 and 9, which is the format a future multi-chain dispute system needs. It does not enable interoperability — no shared dispute-game migration is called, each chain keeps its own registry and factory, and applications proving withdrawals through
viem/op-stack need version 2.51.0 or later 24. Node operators need no op-node or op-reth configuration change.GIWA is still not live, and that gap has now been exploited. GIWA is Dunamu's Ethereum Layer 2, built on OP Enterprise; the company said on September 27 that its mainnet has not launched and that its official bridge supports only a testnet 11. The full account is in the security section below, because that is what it is. For this beat the relevant fact is the one GIWA stated: a pre-launch network's name is already known well enough to be counterfeited.
Major protocol upgrades and infrastructure
Solana's Alpenglow reaches testnet and devnet, with mainnet still unset
Anza started Alpenglow's activation on Solana's public testnet on September 22, completed the testnet handoff on September 24 at slot 444,625,255, and activated the upgrade on devnet on September 25 at slot 504,148,999, where Alpenglow's genesis block was set and TowerBFT was retired 8. Two stages are done; the one that matters to holders is not.
The target is roughly 150-millisecond finality — the point at which a transaction cannot be reversed — against about 12.8 seconds under TowerBFT, and that figure describes settlement, not how fast blocks are produced 8. Votor replaces votes submitted as onchain transactions with messages sent directly between validators and aggregated into certificates, so blocks finalise after one or two voting rounds instead of votes accumulating over 32 slots 8.
Two points worth correcting in how this has circulated. The change is visible in block data: the devnet genesis block lists 17 vote transactions and its next child block lists none, so validator votes disappear from blocks without any corresponding decline in user activity 8. And the September 28 date that has been read as an Alpenglow activation target is not one: Anza's feature-gate tracker lists Alpenglow as pending, mainnet activations for a new minor release begin two full epochs after 95% of stake adopts that version, and the tentative Agave v4.3 schedule uses September 28 as a window for resuming mainnet feature activation generally — a release-wide milestone 825.
For application teams the work is narrow and real: indexers and trading systems using Geyser or gRPC streams must separate candidate blocks inside a slot using the new
bank_id field and reconcile feeds from different providers by blockhash, because bank_id is local to each node; the confirmed and finalized commitment levels become equivalent after activation; and timeouts and retry logic built around the old finality delay need revisiting 8.Chainlink makes bridge security configurable and retires its second check
Chainlink released CCIP 2.0 on September 28, letting companies add their own security checks to cross-chain transfers on top of Chainlink's default verifier network of 16 independent node operators 20. Firms can run their own verifier or hire providers including Infosys and Nethermind. The release lands five months after the $292 million Kelp DAO hack, which was blamed on a LayerZero bridge setup that relied on a single verifier and which LayerZero attributed to North Korea's Lazarus group; Kelp said it would move rsETH to Chainlink 20.
The part to read carefully is what was removed. Chainlink's Risk Management Network, a separate set of nodes that double-checked transactions, no longer plays that role, on the company's argument that an independent check can now come from the optional verifiers 20. A user who configures nothing now appears to rely on one verification network where there were previously two. Existing users were moved automatically, and Chainlink has not named an institution using the new verifiers yet; Aave and Maple have adopted other features in the release 20.
Ethereum: a 2030 roadmap, and a testnet date that has not moved
Vitalik Buterin published a plan for Ethereum's direction to 2030, reported September 27, describing a network whose security and scaling work shifts increasingly onto cryptographic proofs rather than a single chain executing everything 26. This is a direction document, not a schedule and not a client release, and no activation follows from it. The concrete Ethereum date in play remains Glamsterdam on the Sepolia testnet, still listed for October 6 and still unconfirmed by client release tags.
CME adds two more single-asset crypto contracts
CME Group said on September 22 that it plans to launch Bitcoin Cash and Uniswap futures on October 19, pending regulatory review, with standard 250 BCH contracts and micro 25 BCH contracts 19. The two would be the exchange's tenth and eleventh single-asset crypto contracts. A planned listing pending review is a timetable entry: the contract does not exist until the review clears and the launch happens.
Security incidents
Three incidents in the window account for roughly $408 million in losses, and two of the three were in infrastructure that had not reached a normal production stage.
| Project | Amount | Method | Time | Status |
|---|---|---|---|---|
| Bitget (centralised exchange) | ~$351.6M, later revised to ~$387.5M | A backend system was manipulated so that approval controls signed transfers out of hot and warm wallets; private keys were not stolen | Detected Sep 24, 18:31 UTC | Withdrawals paused; the exchange says its $464M user protection fund covers the loss; proceeds split into new wallets and partly swapped into bitcoin |
| Robinhood Chain (memecoin launches) | $18.43M across 53 launches | Creators of a group of Pons V2 launches waived the launchpad's anti-sniping tax for a set of wallets, which then bought most of each token's supply | Reported Sep 27 | Onchain analysis by the pseudonymous analyst Wazz; no recovery reported |
| GIWA (pre-launch Layer 2) | 766 ETH, about $2M | A counterfeit mainnet and bridge using the real chain ID, with the bridge code changed once wallets connected | Reported Sep 27 | The network says its mainnet has not launched; roughly 1,300–1,335 wallets affected |
Bitget, September 24. Attackers moved an estimated $351.6 million out of Bitget's hot and warm wallets across Ethereum, the XRP Ledger, Arbitrum, Avalanche, Optimism, BNB Chain and Base 9. The exchange detected the transfers at 18:31 UTC, paused withdrawals, and said the loss falls within its user protection fund, with cold wallets unaffected 9. Bitget's account is that the attacker compromised a backend system, manipulated the transaction data shown to its authorisation process, and caused it to approve the transfers — the same class of failure as the February 2025 Bybit theft, where the information used to approve a transfer was altered rather than keys taken 9. The company later put the loss higher, at $387.5 million 27.
Attribution is not settled. Bitget's chief executive has described North Korean involvement as "very likely" and cited IP addresses tied to VPN services associated with a North Korean group; TRM Labs says it has not definitively attributed the theft, while noting onchain overlaps with wallets used to launder proceeds from earlier attacks including Bybit and AFX Bridge 9. The proceeds were split within hours into new wallets holding round amounts of roughly 10,000 ETH or 20 million XRP, most of which had not moved by the following morning, and a smaller share passed through THORChain into bitcoin 9. That route ran into a governance refusal this week: THORChain declined Bitget's request to block the hacker's addresses, and about $6 million reached bitcoin 28. For anyone screening deposits, TRM's own guidance is the operative one: check not only transfers from tagged addresses but funds several hops downstream, because proceeds move through bridges and cross-chain swap services and tend to arrive at exchanges indirectly 9.
Robinhood Chain, reported September 27. An onchain analyst linked $18.43 million extracted across 53 token launches on Robinhood Chain to a single operation 10. The method described is a configuration exploit rather than a contract bug: the creators of a group of Pons V2 launches waived the launchpad's anti-sniping tax for a set of wallets, and those wallets bought most of each token's supply 10. The figure comes from a pseudonymous analyst's onchain review rather than from a regulator or the chain operator, so treat the total as a single-source estimate and the mechanism as the durable lesson.
GIWA, reported September 27. Scammers deployed a counterfeit mainnet for GIWA and a bridge to match, using the legitimate chain ID before the real mainnet existed, then changed the bridge code after wallets connected and drained 766 ETH, about $2 million, from roughly 1,300 wallets 11. GIWA said its mainnet has not launched and that the mainnet connection details circulating online were false 11. The attack worked on a name rather than on code: nothing was compromised, because nothing was live.
Editorial view: the industry is already operating inside a rulebook that is still being drafted
Take the week's US instruments together and note what kind each one is 1234. Two proposed rules that need a Federal Register publication, a comment period and a second vote. Two staff FAQ updates and one staff advisory, each of which says on its face that it is not a rule and has no legal force. One personnel change that will leave the agency responsible for two of those documents with two members. Not one binding new obligation on crypto firms took effect in this window.
Now set the commercial events beside that 6718. A $100 million placement into a stablecoin issuer, an exchange and a crypto venue exploring tokenised stock sales, and the week's largest venture round going to a company whose selling points are a DTCC production trade and a Visa partnership. All of it is justified by openings that already exist — the SEC's five-year tokenized-stock exemption and a stablecoin statute whose implementing rules are still drafts. This reading is the author's, inferred from those documents and announcements, not a statement by any of the agencies.
The consequence for a compliance team is a split posture. The permissions you can use now are mostly temporary or staff-level: an exemption with an expiry date, a FAQ answer that the next two commissioners can revise, a no-action position that lapses when rules arrive. The obligations that will bind you are still in comment periods. That is a window to build in and a poor basis for a five-year plan, and this week's direction of travel — more agency instruments, fewer commissioners to issue them — does not shorten the window.
The second pattern is where the money was lost 91011. Roughly $408 million in three incidents. The largest did not break cryptography; it broke the systems that decide a transfer is authorised, which is a controls problem. The other two happened in surfaces with the least maturity and the least governance: a launchpad on a young chain and a network that had not launched at all. That is again the author's reading of three incidents, not an industry statistic, and three incidents do not establish a trend.
Action checklist by role
Founders and product leads
- If your token or a token you list is wrapped or staked, re-read your receipt design against the new staff answers: the issuer must not be able to transfer, lend, pledge or rehypothecate the deposited asset, or let it be subject to third-party claims, or the classification answer changes 2.
- Check any plan to hand off the promises you made to buyers. If another party assumes your obligation to perform essential managerial efforts, the asset does not separate from the investment contract, and staff say that applies whether the assumption is affirmative or by operation of law 2.
- If you run a launchpad or a token launch with a tax or transfer restriction, treat this week's $18.43 million extraction as a design review rather than a competitor's problem: the exploit was a whitelist exemption applied to the wrong wallets 10.
Investors and deal teams
- Normalise before comparing. The window contains $100 million for listed stock, $59.5 million of fresh venture money across four rounds, and nothing that is a fund close or a treasury placement 67151617.
- Read the strategic-investor lists rather than the amounts: a payments company's venture arm, a card network's, and a global exchange are all funding stablecoin distribution and settlement this window, which is a statement about where the margin is expected to sit 615.
- Where the round is priced against a token, note the event rather than the announcement: infiniFi's raise is disclosed alongside a fourth-quarter token generation event 17.
Compliance and legal
- Diary the Federal Reserve's comment window rather than the press release. Both proposals are open for 60 days after Federal Register publication, and the substance is in the reserve-asset list, the capital standards and the subsidiary application process 1.
- Do not file SEC staff FAQ answers as authority. They state that they are not a rule, not a statement of the Commission, and create no obligations, and they are the kind of guidance a differently composed commission can revise 2.
- If you list event contracts, the two duties added this window are separate: the CFTC's advisory makes the contract-design analysis contract-specific and places the anti-manipulation burden on the exchange, while appellate and state actions push sports and mention contracts toward state regulation 41314.
- Nothing on the ESMA surface in the window imposed a new obligation on EU crypto-asset service providers; check national regulators directly for authorisation and passporting changes 22.
Operators, developers and infrastructure teams
- Solana indexers and trading systems: implement
bank_idfor candidate blocks within a slot, reconcile multi-provider feeds by blockhash, and revisit timeouts written for a 12.8-second finality assumption —confirmedandfinalizedare the same once Alpenglow activates 8. - Do not schedule against a September 28 Alpenglow activation. Mainnet needs 95% of stake on the new minor version and two full epochs after that, and the date in Agave's schedule covers mainnet feature activation generally 825.
- Chainlink users relying on the Risk Management Network as a second check should re-examine that assumption, because it no longer performs that role and the second check is now something you configure or buy 20.
- Exchanges and custodians should screen incoming deposits against the Bitget exploiter tags and against funds several hops downstream, since proceeds are routed through bridges and swap services rather than sent directly 9.
- Optimism chain operators: stage the Fault Proof service changes before the L1 contract cutover, since the cutover date is not confirmed here 24.
Forward watchlist
- From Federal Register publication, 60 days: the comment window on both Federal Reserve stablecoin proposals 1.
- October 2, 2026: Commissioner Hester Peirce's last day at the SEC, after which the commission sits at two members 5.
- October 6, 2026 (unconfirmed): Glamsterdam on the Sepolia testnet; client release tags have not confirmed it.
- October 19, 2026: CME's Bitcoin Cash and Uniswap futures, if regulatory review clears 19.
- Undated: Solana's Alpenglow mainnet-beta migration after Anza's observation period 8; a dated record of the Optimism Upgrade 20 L1 contract cutover 24; Bitget's incident report and any attribution of the theft 9; the New York–Polymarket litigation 13.
- Fourth quarter of 2026: infiniFi's token generation event 17.
References
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17infiniFi Raises $3M+ Ahead of Q4 TGE | PR Newswire
prnewswire.com
- 18
- 19
- 20
- 21
- 22ESMA News | European Securities and Markets Authority
esma.europa.eu
- 23SEC.gov | Press Releases
sec.gov
- 24
- 25v4.3 Release Schedule | Anza
github.com
- 26
- 27
- 28
This story was produced automatically by a channel. One sentence is all it takes for Neodrop to keep producing for you.