
A September 29–October 5 briefing on the SEC's crypto custody proposal, ESMA's MiCA review recommendations, the CFTC's Fundsz judgment, $117.1 million in fresh venture equity led by Jeeves, Blast's wind-down, and the MetaMask incident that pushed Ethereum's staking exit queue to its longest wait of 2026.
| Organization / Project | Category | Amount / Scope | Disclosed date | Substantive impact |
|---|---|---|---|---|
| U.S. SEC | Proposed rules | Crypto custody framework; 60-day comment | Oct 1, 2026 | First tailored custody regime for registered advisers and regulated funds; would allow self-custody in limited cases and state trust companies as custodians 1 |
| U.S. SEC / Cboe BZX | Listing order | Six 3x leveraged ETPs | Oct 2, 2026 | Lifts the 2x ceiling on U.S. crypto funds; the products cannot trade until their registration statements take effect 89 |
| U.S. CFTC | Court judgment | About $31.5M | Sep 30, 2026 | Default judgment and consent orders close the Fundsz digital-asset and precious-metals fraud case 10 |
| ESMA | Consultation response | MiCA review recommendations | Sep 30, 2026 | Proposes stricter marketing rules, DeFi criteria and limits on services tied to non-compliant stablecoins 2 |
| U.S. Treasury / OFAC | Sanctions | A network of more than $2M | Oct 5, 2026 | Designates a Hamas military-wing member, two France-based individuals and two charities; secondary-sanctions risk for banks 3 |
| ICBA / OCC | Litigation | Complaint filed | Oct 2, 2026 | A community-bank group challenges the OCC's national trust charters for crypto firms 11 |
| Blast | Network wind-down | TVL from $2.2B to $32M | Oct 2, 2026 | Ethereum Layer 2 to close; users must withdraw through its interface by Oct 26 7 |
| Base | Network upgrade | Cobalt / B20 expansion | Sep 30, 2026 | Adds issuer compliance checks, corporate-action handling and conditional transactions for tokenized assets 12 |
| DogeOS | Rollup testnet | Chikyū public testnet | Sep 30, 2026 | An EVM-compatible ZK-rollup on Dogecoin opens to developers; native proof verification depends on a draft soft fork 13 |
| Starknet | Mainnet upgrade | v0.14.4 | Oct 5, 2026 | Raises the proof size one transaction can carry to 1.1 billion L2 gas; breaking changes for prover and full-node operators 14 |
| Zcash | Testnet upgrade | NU7 | Oct 5, 2026 | Target block time falls from 75 to 25 seconds; fees are split and Sprout is disabled ahead of a Nov 5 mainnet target 15 |
| MetaMask | Security incident | About 523,000 ETH of validators exited, an outside estimate | Sep 30, 2026 | Precautionary exit of Lido-operated validators; Ethereum's exit queue reaches its longest wait of 2026 4 |
| NEAR Intents | Exploit | $3.8M | Oct 1, 2026 | A bug in an Omni deposit integration drained funds across 11 chains; the whole amount was returned 1617 |
| Unnamed Base vault | Exploit | 1,783 wstETH, about $6M | Oct 4, 2026 | An attacker's contract reached a vault's permission list and borrowed deposits; access control failed, and Aave and Base worked as designed 18 |
| Kalshi | Reported round | About $1B at about $40B | Sep 29, 2026 | Advanced talks; the round has not closed. Sequoia and Wellington are in line to lead 1920 |
| Jeeves | Equity round | $110M | Sep 29, 2026 | CoinFund leads a stablecoin-native banking platform that is expanding payouts to 190 countries 6 |
| Ethereum | Testnet schedule | Glamsterdam on Sepolia | Oct 6, 2026 | Sepolia activation set for 13:53:36 UTC; Hoodi and mainnet dates undecided 21 |
| Project | Amount | Method | Time | Status |
|---|---|---|---|---|
| MetaMask | About 0.36 ETH diverted; about 523,000 ETH of validators taken out of service, an outside estimate | Compromise of part of its staking infrastructure; block-production payment address changed | Disclosed Sep 30 | Wallets and customer funds unaffected, the company says; final validator exits by Oct 7, with restaking possibly taking 45 days 4 |
| NEAR Intents | $3.8M | Bug in an Omni deposit integration | Oct 1 | Deposits and withdrawals paused across 11 chains, the contract patched, and the full amount returned; investigation closed Oct 4 1617 |
| Unnamed Base vault | 1,783 wstETH, about $6M | An attacker's contract entered a Safe multisig permission list; deposits borrowed and redeemed via Aave V3 | Oct 4 | No operator statement and no recovery announced; about $31.7M remained in the vault 18 |
| Bitget (follow-up to the previous issue) | About $387.5M | Attackers compromised two third-party security products, then gained privileged access without stealing private keys | Sep 24 | About $1.1M frozen; protection fund rebuilt above $300M from the exchange's own capital 33 |
sec.gov
coindesk.com
cftc.gov
coindesk.com
cointelegraph.com
blockhead.co
community.starknet.io
coindesk.com
coindesk.com
decrypt.co
cryptoticker.io
reuters.com
blockhead.co
blog.ethereum.org
esma.europa.eu
home.treasury.gov
sec.gov
This story was produced automatically by a channel. One sentence is all it takes for Neodrop to keep producing for you.