TLDR Crypto 2026-08-24

CFTC Chair Brian Selig announced the agency will invoke its existing statutory authorities to establish a crypto asset markets regulatory regime if the CLARITY Act continues to stall due to Democratic opposition in Congress. The statement positions the CFTC to set market structure rules unilaterally, bypassing the legislative process rather than waiting on comprehensive crypto legislation. Coinbase CEO Brian Armstrong said crypto regulatory clarity will arrive through one of two paths: a Senate bill requiring 60+ votes on September 15, or new CFTC and SEC rules on September 16.

Bitcoin gained $14,264 in a single week to close at $77,387 (up 22.7%), its largest-ever dollar gain, driven by the Treasury's buyback expansion. The Crypto Fear & Greed Index hit 78, its highest since December 2024, while spot bitcoin ETFs pulled in $1.92 billion in net inflows for the week ended Aug 21, the strongest since October 2025. Strive CEO Matt Cole called bitcoin's simultaneous breakout against both the dollar and gold (bitcoin-to-gold ratio now 16.73oz, highest since May) a sign of the strongest cycle yet, tied to a broader hunt for scarcity in an AI-driven world.

Infinex has launched per-wallet 2FA controls, allowing users to assign distinct security postures to individual wallets rather than applying a single account-level setting. Wallets with 2FA enabled form a security zone where intra-zone transfers require no authentication code, while moving funds to wallets outside the zone triggers verification, enabling a hot/cold wallet split within one interface. Infinex also added wallet secret export, letting users retrieve seed phrases or private keys after passkey signing and 2FA confirmation, with the secret rendering inside Turnkey's hosted export iframe and decryptable only within Turnkey's secure enclave, so neither Infinex nor Turnkey can access the plaintext. Together, these features resolve the friction trade-off that uniform account-level 2FA imposed on active DeFi users who need both custody security and frictionless daily transaction flow.

Solana's Friday mainnet upgrade cut target slot time from 400ms to 350ms under proposal SIMD-0525, which plans further cuts to a final 200ms target in three more 50ms stages. The change reduces confirmation latency but doesn't increase throughput, since each slot now carries proportionally less work. Full finality remains far slower (~12.8 seconds today) pending the separate Alpenglow overhaul, which aims to eventually bring finality down to about 150ms.

Hyperliquid remains geoblocked from US markets because its permissionless infrastructure conflicts with CEA requirements for registered DCMs, DCOs, and FCMs, the exchange, clearinghouse, and broker roles that TradFi separates across entities. HyperCore's modular stack mirrors this separation: the protocol handles matching and settlement, deployers set contract specs (staking 500k HYPE bonds and earning up to half the fees their markets generate), and builders onboard users as FCM equivalents. The Hyperliquid Policy Center has lobbied the CFTC and SEC to allow regulated firms to access HyperCore through permissioned HIP-3 DEXs, bearing KYC/AML obligations as builders and deployers. Trump's announcement validating this onshoring approach means US traders may gain access to Hyperliquid's perpetuals infrastructure through regulated wrapper products rather than waiting for the protocol itself to register.

Base crossed $5B in DeFi TVL (DeFiLlama) and surpassed every other network in monthly stablecoin card spend (Paymentscan), with $2.5B USDC deployed across 16 lending venues, $2.1B of which is concentrated in Morpho Blue. AI agents executed 7.3 million of the 14 million total x402 transfers logged across all chains over the past 30 days, and Blockrunai cleared 1 million x402 transactions per day on Base, underscoring the chain's dominance in machine-to-machine payment rails. App-layer economics are materializing: Venice crossed $100M in annualized revenue, and o1 Exchange recorded $200M in cumulative trading volume with over 25,000 tokens launched and $1M in creator fees distributed. Base Batches 004 opens applications through September 9, targeting 10 early-stage teams with up to $100K each and a NYC Demo Day.

New research on Ethereum's PoS consensus identifies two attack vectors that let adversarial proposers exploit head vote timing in LMD-GHOST to strip honest validators of attestation rewards. The head-vote timing game has a proposer delay block broadcast to near the 4-second mark in a 12-second slot, pushing honest validators to attest the parent block instead. Prysm experiments measured a 15.06% average total reward loss for honest participants under this manipulation. A second vector, the K-block withholding attack, allows adversaries holding consecutive proposer slots to extend a private competing chain and release it to trigger reorganizations, voiding honest attestation rewards on the reorganized blocks. Researchers propose a distance-weighted head reward mechanism that grants partial credit for attestations pointing to recent canonical ancestors, reducing timing-game losses from 15.06% to 4.71% without modifying core consensus rules.

BounceBit is permanently shutting down its Evmos-based L1 after a protocol-level authorization flaw allowed an attacker to drain approximately 286.5 million BB tokens from nine mainnet accounts, with no private keys or wallets compromised. The YZi Labs-backed project, whose 2024 seed round was co-led by Blockchain Capital and Breyer Capital, will reissue BB as a BEP-20 token on BNB Chain using a pre-exploit snapshot. The 286.5 million exploited tokens will not be recognized in the new issuance, zeroing out the attacker's position. CeDeFi, Prime, and RWA products operated by the team were unaffected by the breach.

Send has selected Wirex, which processes over $20 billion in transactions for 8 million users and recently passed $2 billion in annualized onchain card spend, as its card infrastructure provider, citing instant settlement, 0% FX conversion, and shared commitment to self-custody.

Plasma One and Wirex offer the cleanest one-click PDF/CSV exports, while KAST, Avici, Bitpanda, Revolut, Crypto.com, and Nexo also support usable exports.

Grayscale filed its fifth SEC amendment converting its Zcash Trust ($260M+ AUM, running since 2017) into The Zcash ETF.

The agent-side spending stack for x402 payments has made strong progress, with spending parameters and policies now getting locked down.