TLDR Crypto 2026-09-17

Deutsche Bank plans to launch an institutional-grade crypto custody service pending regulatory approval, with a rollout expected later this year. The service will let institutional and corporate clients hold and transfer bitcoin, ether, and select stablecoins, with a roadmap extending into tokenized financial instruments.

Federal prosecutors charged two Robinhood employees with fraud for alleged insider trading conducted on Hyperliquid, the decentralized perpetuals exchange. The employees were allegedly trading perpetual futures on tokens they knew were going to be listed. The activity happened between 2025 and 2026 and netted the pair approximately $50,000 each.

Circle opened Arc's public mainnet Wednesday, an EVM-compatible Layer 1 with sub-second finality where gas is paid in USDC, launching with Aave V4, Morpho, and Uniswap among more than 100 applications live from day one. Founding validators including BlackRock, DTCC, ICE, Mastercard, and Visa will join in phases, and Circle and DTCC plan to tokenize DTC-custodied assets on Arc starting in the second half of 2027. Circle also completed the genesis mint of 10 billion ARC tokens this week as a technical milestone, though a public token launch remains undecided as the network plans a move from proof of authority to proof of stake in 2027. Arc ships with Arc Studio, an AI coding agent for smart contracts, and Arc App Kits, an SDK for payments, swaps, onramps, and yield.

X launched its Cashtag Partner Program in the US, converting ticker symbols for stocks, ETFs, and cryptocurrencies into trade entry points within the platform's timeline. Tapping a supported Cashtag surfaces a price chart and related posts, then a "Trade" button routes users to partner brokerages including Interactive Brokers, Moomoo, Gemini, Kraken, and Coinbase. Execution occurs at each brokerage's own app or website rather than within X itself, making this a referral and discovery funnel rather than an in-app trading product. For Gemini, Kraken, and Coinbase, the integration embeds a social-discovery-to-onboarding pipeline directly inside X's financial conversation layer.

If you're reading this ad, you know they work. TLDR subscribers make a deliberate choice to open their inbox every weekday. You reach crypto developers, Web3 founders, and blockchain investors at the precise moment they're most receptive to new information shaping their work. Become a TLDR sponsor.

0x Protocol's review of 84,163 Uniswap v4 hooks across six chains found only 19.4% safe, with 54.2% classified as malicious and 26.4% probable malicious, a dataset drawn from routing ~70% of the firm's $42.67 billion in annual volume through Uniswap liquidity. Malicious hooks exploit the gap between quote-time and settlement-time execution, spoofing aggregators and wallets to display one price while delivering up to 50% less at fill. A single hook on Base extracted $143,037 from users across 6,516 trades by charging an 18% median fee on 60.6% of fills. The permissionless design that grants builders custom AMM logic also removes routers' ability to trust quoted prices without independent execution verification.

Falcon Finance's virtual Visa debit card, live since July 20 for KYC-verified users in 90-plus jurisdictions, lets holders spend USDf minted against collateral including stablecoins, major crypto, tokenized gold, and tokenized equities like Ondo's COINon and xStocks' TSLAX without selling the underlying position. The card charges a $0 annual fee and no extra Falcon markup beyond Visa FX charges, and counts spend toward Falcon Miles Season 2, but earns 0% on card balance since yield stays in separately staked sUSDf. It's issued by a third-party EMI rather than Falcon directly, remains virtual-only with no published cashback or ATM fee schedule, isn't a bank deposit or deposit-insured, and blocks Russia, Belarus, China, Singapore, and the US.

x402 is an open payment specification, originated at Coinbase, that embeds pricing, authorization, and settlement into API workflows, allowing machines and AI agents to pay for calls using stablecoins without OAuth flows or account setup. As delegated purchasing authority expands from narrow API credits to broader agentic decisions, the protocol stands to reshape how APIs, data, and compute are priced and traded between software systems. Cloudflare, AWS, Google, and Fastly are each integrating agent payment capabilities into their existing infrastructure businesses, competing on different layers of the value capture stack. Outstanding questions around data precision, service quality guarantees, trust mechanisms, and payment rail neutrality will determine whether x402 matures into a unified market or fragments across competing implementations.

Six months of measured Ethereum L1 execution gas data show plain ETH transfers consuming 13,815 million gas per day, roughly 1.6x more than all Uniswap L1 activity, which ranked second at 8,491 million gas per day. Among rollups posting to L1, Robinhood consumed 665 million gas per day, approximately 2.3x more than Base (271M) and 3.1x more than Arbitrum One (214M), making it the top rollup gas consumer by a wide margin. Order book DEX Lighter's primary instance ranked above both major rollups at 286 million gas per day across 41,184 daily transactions, while smaller rollups including World Chain, Unichain, and Ink each fell below 22 million gas per day. All figures are lower bounds derived from verified direct activity measured through mid-September 2026.

A €10 deposit from Wise into Anodos's virtual EUR account arrived within seconds for a fixed €0.90 fee, though spending still requires converting the EUR balance to USD to fund the card since direct EUR spending isn't yet supported.

Erebor Bank offered free USDC and USDT-to-USD conversion at par as a client acquisition tactic targeting crypto firms.

Fitch Ratings found that Malaysia has become one of the most open Islamic crypto markets globally.

Looking at install growth across 23 crypto card apps from July to September: Krak roughly tripled from 20,000 to 60,000, Plasma One's Android app launched in July and already reached 50,000, and Bitget Wallet grew from about 110,000 to 150,000.