Sep 25, 2026 · Crypto & Web3 Daily Digest
Crypto, regulation, and Web3 headlines compiled for Sep 25, 2026, with summaries, links, and commentary.
I. Regulation & Policy
1. Fed Issues Two GENIUS Act Stablecoin Proposals on Reserves, Capital, and Bank Issuance Applications (Regulation)
Summary:
On Sep 24, 2026 (U.S. Eastern), the Federal Reserve Board released two proposed rules to implement the GENIUS Act framework for Board-supervised payment stablecoin issuers, opening a 60-day public comment period after Federal Register publication. The first proposal would require issuers to fully back stablecoins with permissible reserve assets such as short-term Treasury bills and other high-quality liquid assets, and would set standardized capital, risk-management, and custody-related standards while clarifying permissible stablecoin activities for supervised banks. The second would create a tailored application process for supervised banks seeking to issue payment stablecoins, including business plans, financial information, and appeal/hearing procedures. CoinDesk and Bitcoin.com continued coverage on Sep 25 noting additional detail on redemption timing and operational-risk capital tiers in secondary reporting; final text remains subject to comment, with the broader GENIUS framework oriented toward effectiveness around early 2027.
Links:
- Federal Reserve — Board requests comment on GENIUS Act stablecoin proposals
- CoinDesk — U.S. Federal Reserve moves on proposals to implement GENIUS Act for stablecoins
Commentary:
Another federal banking piece of the U.S. stablecoin puzzle is now in draft form—issuers face clearer capital and reserve rails, and higher compliance costs.
2. CFTC Updates Crypto FAQ: Eligible Tokenized Assets for Customer Funds and Swap Margin; Onchain Records Allowed (Regulation)
Summary:
On Sep 24, the Commodity Futures Trading Commission updated its crypto FAQs to clarify that futures commission merchants and derivatives clearing organizations may invest customer funds in tokenized forms of assets already permitted under Regulation 1.25, provided the token grants the same or functionally equivalent legal and economic rights as the traditional asset and meets liquidity, concentration, maturity, and custody requirements. Qualifying tokenized assets may also be used as margin for uncleared swaps. New recordkeeping answers state that regulated entities may create and maintain regulatory records on a blockchain or distributed ledger; if using a public permissionless network, firms must still ensure records can be retrieved and produced if the network or a block explorer is disrupted. Chairman Mike Selig welcomed the FAQ update as clarity for the industry after the Senate failed last week to advance the CLARITY Act.
Links:
- CoinDesk — U.S. commodities firms can invest in tokenized assets, use blockchain records: CFTC
- TokenPost — CFTC Says Eligible Tokenized Assets May Support Customer Funds
Commentary:
Tokenized Treasuries and money-market funds move from narrative into the derivatives customer-fund toolkit—rights equivalence and custody proof remain the hard gates.
3. New York Sues Polymarket as Illegal Gambling; Platform Countersues in Federal Court Claiming CFTC Preemption (Regulation / Litigation)
Summary:
On Sep 24, New York Attorney General Letitia James and Governor Kathy Hochul announced a lawsuit against QCX LLC (Polymarket US), alleging its prediction markets are an unlicensed gambling operation that lacks New York State Gaming Commission approval and is available to users aged 18–20 despite the state's 21+ mobile sports-betting age limit. The state seeks an injunction, forfeiture of illegal gains, restitution, and penalties of up to three times the company's gains. Hours later, Polymarket sued state officials in Manhattan federal court and sought removal of the state case, arguing that the Commodity Exchange Act gives the CFTC exclusive jurisdiction over event contracts on designated contract markets and that state gambling laws are preempted. Legal Sports Report and others followed on Sep 25; Polymarket said it would continue operating in New York. The case joins prior New York actions against Kalshi, Coinbase, and Gemini on a similar state-versus-federal jurisdiction theme.
Links:
- NY Attorney General — Lawsuit Against Polymarket for Illegal Gambling Operation
- Legal Sports Report — New York Sues Polymarket, Prompting Federal Countersuit
Commentary:
Prediction markets are shifting from product fights to a constitutional-scale clash of state gambling law versus federal derivatives law—the map of U.S. event-contract compliance is at stake.
II. Markets & Major Tokens
4. Bitcoin Consolidates Near $84,000 as Alts and Compute/DeFi Lead (Markets)
Summary:
CoinDesk reported on Sep 25 that bitcoin traded near $84,342 on Friday, little changed since UTC midnight after climbing from below $63,000 in August to nearly $87,000 on Tuesday and then stalling. About 93 of CoinDesk 100 constituents rose, with the CoinDesk 80 up roughly 4.7% while large-cap gauges lagged. The CoinDesk compute index gained about 9.5% over 24 hours and the DeFi select index about 8.7%, versus roughly 2.5% for the broad benchmark; Quant (QNT) was reported up about 39% over 24 hours, with ONDO and LDO also strong. CoinMarketCap’s altcoin season index rose to about 56 from about 45 a week earlier, a roughly three-month high. Tradingpedia and Decrypt put BTC roughly in the $83,600–$84,600 band and ETH near $2,680–$2,720. Markets largely shrugged at the same-day Bitget exchange hack headlines.
Links:
- CoinDesk — Altcoins rally as bitcoin consolidates near $84,000
- Tradingpedia — Bitcoin Clears $84,000 as ETH and XRP Lead Crypto Rally
Commentary:
Classic post-BTC-rally rotation into alts is back—sustainability hinges on whether rates and leverage re-synchronize against risk assets.
5. Large BTC/ETH Options Expiry Passes Quietly; Implied Volatility Near Year Lows (Markets)
Summary:
CoinDesk’s derivatives desk said more than about $17 billion notional of bitcoin and ether options expired Friday on venues including Deribit with limited spot impact. Over the prior 24 hours, the most active BTC strikes clustered around $70,000 and $90,000 calls, with ETH attention near the $2,800 call—broadly bullish positioning. BTC and ETH 30-day implied volatility kept sliding toward support levels seen for much of the year, suggesting options traders were not pricing disorderly swings. Bitcoin.com, citing Greeks.live, separately put a roughly $14 billion bitcoin options expiry on Sep 25 (figures vary by coverage scope), with max pain often cited near $79,000; after settlement, gamma may shift higher and change short-term volatility structure.
Links:
- CoinDesk — Altcoins rally… (derivatives and options expiry sections)
- Bitcoin.com — Bitcoin Price Eyes $96.7K as ETF Demand and Spot Volume Rise
Commentary:
A soft landing on expiry reduces forced-selling narratives—the next test is whether ETF spot demand can absorb the $84k–$85k supply zone.
III. Institutions, ETFs & Tokenization
6. Spot Bitcoin ETFs Take In About $191M Thursday; Six-Day Inflows Near $2.84B; YTD Flows Turn Positive (Institutions)
Summary:
Per SoSoValue data cited by Bitcoin.com and ChainCatcher on Sep 25, U.S. spot bitcoin ETFs recorded about $190.65 million of net inflows on Thursday, Sep 24—the sixth straight inflow session—bringing the six-day total to about $2.84 billion. BlackRock’s IBIT led with about $162.63 million, followed by Fidelity’s FBTC ($12.86 million) and Morgan Stanley’s MSBT ($10.16 million); WisdomTree’s BTCW was among the few net outflows (~$4.02 million). Spot ether ETFs added about $66.01 million (fifth straight inflow day), with Solana, XRP, and HYPE products also green. CoinDesk said U.S. spot bitcoin ETFs had plunged to about $5.8 billion of year-to-date net outflows around Jul 13 and have since swung to roughly $800 million of YTD net inflows; nearly $4 billion has arrived since August, though full-year totals still trail 2024 and 2025.
Links:
- Bitcoin.com — BlackRock Leads $191M Bitcoin ETF Inflows
- CoinDesk — Bitcoin ETFs have erased a $5.8 billion hole
Commentary:
Flat price plus multi-day ETF absorption sits beside rising short narratives in derivatives—the post-expiry question is whether the six-day inflow streak holds.
7. Ondo Launches BlackRock-Powered Intelligent Portfolio Tokens; ONDO Rallies Hard (Institutions / RWA)
Summary:
Ondo Finance said on Sep 24 it launched Ondo Intelligent Portfolios: single transferable onchain tokens that wrap portfolio strategies developed by BlackRock for Ondo, available to eligible non-U.S. investors. The first three tickers are BLKHIon (high income), BLKDIGon (diversified growth), and BLKGRWon (high growth). Ondo manages, sponsors, and administers the products; holdings, weights, and rebalances are visible onchain and tokens can move peer-to-peer across wallets, exchanges, and DeFi. Disclosures stress that BlackRock is not the adviser, manager, sponsor, or distributor, exercises no investment discretion, owes no fiduciary duty to token holders, and has a potential conflict of interest. Decrypt’s Sep 25 Morning Minute said ONDO rose about 30% on the news; CoinDesk also flagged record ONDO futures open interest alongside a local price high.
Links:
- PR Newswire — Ondo Launches Intelligent Portfolios, Powered by BlackRock
- Decrypt — Morning Minute: BlackRock Leans Deeper Into Tokenization with Ondo
Commentary:
Tokenization is moving from single-fund wrappers to full portfolio strategies onchain—brand-and-IP licensing with crypto rails carrying operational liability may become the institutional template.
IV. Security Incidents
8. Bitget Hot/Warm Wallet Breach: Losses Revised to About $387.5M; CEO Says Pattern Resembles North Korea-Linked Groups (Security)
Summary:
Bitget detected unauthorized outflows from some hot wallets around 18:31 UTC on Sep 24, initially estimating about $351.6 million affected. On Sep 25, the exchange and outlets including Decrypt, Cointelegraph, and Reuters said onchain tracing—including Zcash and TRON assets omitted from the first tally—confirmed about $387.5 million transferred to attacker-controlled addresses, among the largest exchange thefts of 2026. CEO Gracy Chen said attackers compromised a critical wallet-backend system, spoofed transaction data, and triggered the authorization process; private-key compromise was ruled out. Cold wallets remained secure; Bitget said its User Protection Fund of more than about $464 million covers the loss, deposits and trading continue, and withdrawals stay paused pending security review. Chen said IP/VPN choices and onchain patterns closely resemble known North Korea-linked techniques, without confirmed attribution; Mandiant and SlowMist are assisting, and a recovery bounty program is live. Roughly 103 million XRP (~$157 million) was reported as the largest single-chain piece of the haul.
Links:
- Decrypt — Bitget Hack Losses Climb to $387M
- CoinDesk — Bitget's $352 million hack happened via spoofed transfers, not private keys
- Reuters — Bitget pauses withdrawals after $350 million stolen in hack
Commentary:
Forged backend “withdrawal slips,” not stolen vault keys, expose operational trust boundaries—protection funds can backstop balances, but withdrawal restoration and recovery speed set the trust cost.
9. Limit Break Payment Contract Bug Triggers Zero-Price NFT Transfers; Whitehat Claims 23,155 NFTs Moved to Safety (Security)
Summary:
The Crypto Times reported on Sep 25 that a vulnerability in Limit Break’s Payment Processor marketplace contracts on Ethereum enabled large numbers of 0 ETH NFT transfers. Whitehat operator Quit (associated with Yuga Labs) claimed about 23,155 NFTs were moved into safe custody and that about 660 WETH was lost before it could be protected—figures not yet audited in an official Limit Break statement. Revoke.cash’s incident page still listed $0 confirmed stolen and about 3,832 zero-ETH transfers around the same window. Magic Eden warned wallets that traded on its former Ethereum marketplace and still approve Payment Processor V2 may be exposed. As of the report, Limit Break’s main account had not posted a formal incident notice, and the root cause remained undisclosed.
Links:
Commentary:
Stale marketplace approvals are again the attack surface—users should revoke suspicious allowances immediately, and divergent whitehat versus tracker totals counsel skepticism of any single tweet.
Today's Summary
- The Fed opened GENIUS Act stablecoin rulemaking for comment, while the CFTC clarified tokenized assets and blockchain records for derivatives customer-fund use—administrative crypto rulemaking kept moving.
- Bitcoin consolidated near $84,000 as alts and compute/DeFi led; a large options expiry passed relatively quietly with soft implied volatility.
- Spot bitcoin ETFs absorbed about $2.84 billion over six sessions and swung YTD flows positive; Ondo × BlackRock portfolio tokens pushed institutional strategies fully onchain.
- Bitget’s loss estimate rose to about $387.5 million with suspected North Korea-linked tactics, even as protection-fund messaging helped contain market panic.
Daily Framing:
A split-risk day of stablecoin-rule progress and exchange-security shock—regulation and tokenization products advanced, ETF spot demand underpinned prices, but hot-wallet backend compromise showed infrastructure trust remains fragile.
This digest is compiled from real-time search results and is for reference only. Date: Sep 25, 2026 (Friday)