This Saturday's market review starts with prices. Bitcoin is consolidating near $84,000 after the expiry of September options with a notional volume of roughly $16 billion: the asset has slipped back below the weekly high of $87,392 set on 21 September, while the 24 September close was around $84,378 according to CoinGecko (Bitcoin Insider). Ether trades around $2,680, Solana around $120, XRP around $1.55, and total market capitalization is roughly $2.98 trillion. The scale matters: $16 billion is the notional value of options, not the number of BTC sold. The expiry closed, rolled or replaced hedges, so the market can look calmer for a while, and holding above $80,000 will now depend on real demand, while rising open interest without spot demand remains the key signal. Recent liquidations are a reminder: $617 million of positions were closed on Thursday, mostly leveraged longs, and roughly $557 million in shorts were liquidated on 21 September when price broke above $87,000.

Macro remains the main brake. US 10-year Treasury yields reached 5.230%, the highest since June 2007, while the 30-year yield exceeded 5.51%, a level not seen since 2004 (Cryptopolitan). The move came on strong data: real consumer spending rose 3.4% year over year in the second quarter, and the September manufacturing PMI reached its highest level since 2021. The Fed raised rates unanimously to 3.75–4.00% on 16 September, 16 of 18 FOMC participants in the dot plot expect at least one more hike before year-end, and markets price the probability of an October hike at roughly 70%. Additional pressure comes from the dollar near 101, its highest since July, and a US record diesel price of $6.50 per gallon, with the oil/10-year yield correlation at its strongest since at least 1985. Partly offsetting the backdrop is a US-China agreement to cut tariffs on $30 billion of goods each: the truce is extended by two months, AI talks are launching and a trade council is being created.

Institutional demand: a seventh straight inflow session

The market's main support is flows into US spot Bitcoin ETFs. Between 21 and 25 September the funds took in $2.39 billion of net inflows, with inflows on all five trading days: $999 million, $714.7 million, $346.9 million, $190.7 million and $134.5 million (Bitcoin.com News). The streak began on 17 September and totals about $2.98 billion. Year-to-date net flows turned positive after the CLARITY Act vote collapse, when outflows of $450.4 million and $295.9 million were recorded on 15–16 September. According to Farside data, IBIT attracted about $1.16 billion over the week, FBTC $701.6 million, ARKB $294.7 million and Morgan Stanley MSBT $203.3 million; on Friday, $96.99 million went to IBIT and $49.32 million to FBTC, while Bitwise BITB saw an $11.8 million outflow. Ether ETFs took in $689.8 million over the week, Solana ETFs $188.1 million and XRP ETFs about $75.6 million. Cumulative inflows since launch stand at $58.0 billion, fund assets at $108.42 billion and average holder cost at $81,722. September 21 was the best day since October 2025, with roughly $3.26 billion flowing in across BTC, ETH and SOL for the week. Momentum is nevertheless cooling: daily amounts fell about 87% over the week.

Security: Bitget and bridges

The day's main risk is security. After the 24 September incident, Crypto News Flash reports that Bitget raised its estimate of assets moved to the attacker's addresses from $351.6 million to roughly $387.5 million after adding Zcash and TRON, and announced a bounty of 5% for frozen funds and another 5% for returned funds. The attack was detected at 18:31 UTC and compromised hot wallets; cold reserves and private keys were not compromised, user balances were unaffected, losses are covered by a Protection Fund of more than $464 million, and trading and deposits kept working during the withdrawal suspension. Affected assets include XRP, ETH, USDT, ZEC, USDC, USDT0, XAUt, BNB, AVAX and TRX; roughly $318,000–$320,000 of stablecoins have been frozen — 99,990 USDC from Circle and 218,023 USDT from Tether, with source estimates differing slightly. Withdrawals will resume in stages: BTC on 28 September, ETH on the 29th, USDT on the 30th, and other tokens plus fiat on 2 October. CEO Grace Chen allowed for a possible link to North Korea based on similar IP addresses and VPN usage, but the exchange says this was not an internal attack and authorship is unconfirmed; Mandiant and SlowMist are investigating and the company intends to use the Bybit LazarusBounty channel.

There is a separate sting in the tail: CoinDesk writes that the attacker moved about $83 million in stolen XRP from three wallets, with roughly $75 million remaining in wallets Ripple cannot freeze because of XRP Ledger rules. The attacker moved about 103 million XRP in total across five accounts, with around 54 million XRP leaving the original accounts, and XRP lost roughly 4% over a day. Grace Chen publicly asked THORChain to deny service to the attackers' addresses, but THORChain has no administrative key, and a year ago the network did not freeze transactions even after its own $10.7 million exploit. TRM Labs has previously called THORChain the "bridge of choice" for laundering large thefts: according to MistTrack, nearly $1.2 billion of Bybit hack proceeds passed through it. Bitget has opened a tracking dashboard and an API with the attackers' addresses across EVM, XRP Ledger, Zcash and TRON networks.

The bridge security dispute continues: NewsBTC reports that Evercrest Technologies (KelpDAO) has filed a lawsuit in the Supreme Court of British Columbia against LayerZero Labs, its Canadian branch and co-founder Bryan Pellegrino over the April exploit that drained 116,500 rsETH worth about $292 million through a bridge. The claims — negligence, careless misrepresentation and defamation — are unproven, with LayerZero pointing to a single-verifier configuration on KelpDAO's side as the single point of failure. On 18 April, attackers deceived the verifier into signing a forged cross-chain transfer, after which rsETH left Kelp's infrastructure; users withdrew more than $650 million, and about 0.14% of applications on the LayerZero network were affected. Against that backdrop, projects holding about $14.5 billion in assets announced migration from LayerZero to Chainlink CCIP — BitGo and WBTC moved roughly $7.4 billion, and the state of Wyoming moved the FRNT token under a multi-year exclusive contract. LayerZero has raised its default minimum to three verifiers on both endpoint versions.

Regulation: the agenda has shifted from Congress to agencies

First, the Fed and stablecoins. On 24 September the Federal Reserve published two proposals under the GENIUS Act running to 392 pages. The first requires full reserve backing of payment stablecoins by issuers supervised by the Fed, with a tiered surcharge for operational risk: 2% on the first $20 billion in circulation, 1.5% on the next $30 billion and 1% above $50 billion, plus 25% of three-year average non-reserve income. Reserve valuations must be recalculated daily by 17:00 in the issuer's Fed district. The second sets out an approval procedure for bank-owned stablecoin subsidiaries that are members of the federal insurance system. If reserves are insufficient, the issuer must notify the Fed and submit a recovery plan within 24 hours, and redemptions must begin by 17:00 the next business day, which, CryptoSlate estimates, opens the risk of a 48-hour run. Once liquidation begins, issuance stops, redemption fees are prohibited, and ordinary redemptions are served within two business days. Comments are accepted 60 days after publication in the Federal Register. This concerns a market of about $307.3 billion, where USDT holds roughly $183.7 billion, USDC about $76.4 billion, and these two assets account for 97.7% of pairs on the 12 largest exchanges. For comparison, the OCC proposed the opposite compromise in March: immediately halting new issuance and applying forced liquidation only after 15 business days. These first Fed proposals effectively set the cost of capital and the speed of redemption for the entire US-supervised stablecoin market.

Prediction markets are losing ground. On 25 September a unanimous panel of the Sixth Circuit Court of Appeals ruled that Kalshi had not proven that its sports contracts qualify as swaps under the Commodity Exchange Act, and that federal law does not preempt the gambling laws of Ohio and Tennessee (Unchained). The court affirmed Ohio's denial of a defense, vacated the bond issued for Kalshi in Tennessee, and remanded the cases; the decision runs to 49 pages. The court also rejected the preemption argument, recognizing geofencing as a way to comply with both regimes. This is the second appeals court siding with the states after the Ninth, and the New Jersey appeal at the US Supreme Court awaits Kalshi's response by 9 November. The stakes are visible in the numbers: 69% of Kalshi's retail sports demand comes from states without legal online sportsbooks, with California and Texas contributing 44%; the cases cover more than 90% of Kalshi's volume and 95% of its 2025 revenue, and executed volume from 1 July to 20 September is estimated at $31.1 billion. In Michigan a state court had already ordered Kalshi on 1 September to block sports contracts, with penalties of up to $500,000 per day, and Kalshi representative Dani Lever called the ruling unworkable because of conflicting state rules.

In parallel, New York is going after Polymarket. Attorney General Letitia James and Governor Kathy Hochul have sued QCX LLC, which operates as Polymarket US, alleging that the platform has been accepting bets on sports and other events without a New York State Gaming Commission license since December 2025. The lawsuit points to the admission of users aged 18–20 against a minimum age of 21 for mobile betting in the state, and demands a permanent injunction, restitution, forfeiture of revenue and a penalty triple the profit. The platform is valued at more than $20 billion. Prosecution of the largest prediction venue by the state with the largest budget raises the risk for the entire industry.

Washington's personnel shifts coincide with the failure of the legislative path. Hester Peirce has filed a resignation letter effective 2 October 2026 and will join the law faculty of Regent University in November; she led the SEC Crypto Task Force from 4 February 2025 and spent about eight years at the commission, with her second term having formally expired back in June 2025 (Cointelegraph). After her departure only Chair Paul Atkins and Mark Uyeda will remain, and no successor has been named. In parallel, the Blockchain Association is losing CEO Summer Mersinger on 16 October, with Kristin Smith returning as interim head on 17 October while keeping her presidency of the Solana Policy Institute; Mersinger stays an adviser until the end of 2026 and previously served as CFTC commissioner and worked on the GENIUS Act. Both decisions were announced roughly ten days after the CLARITY Act cloture failure on a 49–50 vote; shortly before that, Circle announced the departure of CFO Jeremy Fox-Gin and co-founder Sean Neville from the board. Losing two key industry voices at the moment regulation shifts from Congress to agencies looks symbolic.

At the same time, the agencies themselves keep easing regulatory risk. On 25 September the SEC's Division of Corporate Finance issued an FAQ: an announcement of a token buyback on a functional network is not by itself a promise of managerial efforts under the Howey test, whereas on a network that is not yet functional, a buyback presented as a way to earn income may point to an investment contract. Separate answers address the qualification of liquid staking receipt tokens and the fact that a trading venue does not become a token promoter merely by listing it. The document reflects staff views, has neither been approved nor rejected by the Commission, and carries no legal force (Crypto.News). The backdrop is a record: crypto token buybacks reached about $638 million by the end of August 2026 versus $545 million a year earlier according to Allium Labs, with Hyperliquid at roughly $370 million and Pump.fun at about $200 million together accounting for almost 90% of the total. The SEC has also introduced an "innovation exemption" for tokenized stocks, CFTC staff issued a no-action letter for passive software providers, and a broader CFTC package for crypto markets has been sent to the White House for review, though its text is not published. The OCC is rushing to finalize stablecoin rules by November, ahead of the January statutory deadline. The Senate came up 11 votes short of the 60 needed to advance the CLARITY Act, and Kristin Smith of the Solana Policy Institute argues that the agency route is now more realistic than legislation.

Technology and institutional infrastructure

Solana is approaching its most notable network upgrade. Anza moved testnet to Alpenglow on 24 September and devnet on 25 September at epoch 1167; no mainnet date has been set (CoinDesk). The protocol targets finality of roughly 100–150 milliseconds instead of the current ~12.8 seconds: the TowerBFT algorithm is replaced by the Votor system, approved by validators under SIMD-0326, with votes moved out of blocks into compact BLS certificates. Vote transactions previously took up to 75% of block capacity. The "20+20" fault-tolerance model yields about 100 ms with responses from validators holding at least 80% of stake and about 150 ms in fallback mode, and the 150 ms targets come from tests and simulations rather than real-market transactions. Reported transaction counts will therefore fall even if user activity stays the same, and data providers will have to distinguish competing blocks. Feature activations in mainnet may tentatively resume from 28 September; the SVM and smart contract structure are unchanged. In September the network also cut its target slot time from 300 ms to 250 ms.

XRP Ledger is waiting for its main throughput improvement to be postponed. The BatchV1_1 amendment lost the support of 30 of 35 trusted validators and regained the threshold on 25 September, restarting the two-week countdown and moving the earliest activation date from 29 September to 9 October 2026; the delegation amendment moves to 8 October (CoinDesk). Developers clarify that the problem did not affect mainnet and caused no loss of funds, and the fix shipped in the xrpld 3.4.1 release. The new fixBatchV1_2 amendment was filed with a default Yes vote at 94.29% consensus per XRPScan. The mechanics are worth repeating: Batch under the XLS-56 standard allows several transactions from different accounts to execute atomically in a single ledger close, but activation requires more than 80% support from trusted validators for two consecutive weeks, and falling below the threshold resets the timer. A two-week delay illustrates the general fragility of the amendment support threshold.

XRP supply also remains a regular source of pressure: up to 1 billion XRP worth roughly $1.54 billion will leave Ripple's escrow on 1 October at a price of about $1.54. About 31.98 billion XRP remain in escrow out of the original 55 billion, with around 11 billion in circulation against a maximum supply of 100 billion. Ripple has historically returned a significant portion of unlocked tokens to new contracts, so the actual increase in circulating supply is smaller. According to Santiment, whale balances rose from 12.37 billion XRP on 21 September to 12.80 billion on 24 September, with more than 470 million XRP accumulated over five days. The unlock is equivalent to roughly $1.5 billion of daily volume against weekly turnover of about $6.7 billion, while the 14-day RSI sits near 64 and the asset trades above its 50-day and 200-day moving averages. At the same time settlement infrastructure is growing: RLUSD turnover approached $2.49 billion, and the total volume of stablecoins on XRP Ledger rose 6% in a week to roughly $1.19 billion according to DefiLlama, with RLUSD accounting for more than 92% of the network's stablecoin supply — about $1.10 billion — and other stablecoins at roughly $90 million. The US issuer is Standard Custody & Trust Company under NYDFS supervision, the main custodian is BNY, and in August Ripple joined Clearpool and Cicada in a planned institutional credit fund denominated in RLUSD. That dominance of a single issuer strengthens Ripple's position while concentrating the network's liquidity risk.

Zcash is a separate challenge, having added roughly 102% in a month and trading around $1,535 after short liquidations in early September; the asset has been above $1,000 since 4 September. A vote of nearly 99.9% approved cutting the target block time from 75 to 25 seconds: NU7 is scheduled for testnet on 6 October, the mainnet decision falls on 20 October, and mainnet activation on 5 November. Separately, about 98.9% backed keeping the current halving schedule. The Grayscale Zcash Fund began trading on NYSE Arca on 25 August with around $304 million in assets and passed $1 billion roughly a month later, and the company scheduled a 3-for-1 ZCSH split with a record date of 28 September and distribution on 29 September. Co-founder Eli Ben-Sasson repeated his $5,000 year-end forecast while admitting he does not know why the price is rising — that is the founder's view, not an established fact.

Tokenized assets are definitively moving into DeFi. Aave V4 launched a venue on Base Equities Hub where qualified users outside the US can deposit seven tokenized stocks — Apple, Amazon, Alphabet, Meta, Microsoft, Nvidia and Tesla — as collateral and borrow USDC. The tokens were issued by Coinbase Onchain SPV Ltd and represent certificates on shares held by Alpaca Securities in segregated custody, with prices supplied by Chainlink. Access is limited to permitted jurisdictions under Regulation S, USDC remains the only borrowable asset, stock-against-stock positions are prohibited, and risk limits on collateral and USDC are set at launch, with further additions subject to management and risk review. This is the first time tokenized stocks have worked as collateral in a major DeFi protocol. A comparable infrastructure step has been made in traditional finance: Barclays, HSBC UK, Lloyds, Monzo, Nationwide, NatWest and Santander completed the first live client transactions with tokenized sterling deposits on shared infrastructure built by Quant with EY and Linklaters. Test scenarios included peer-to-peer transfers and mortgage refinancing, and the tokens represent existing commercial deposits, not stablecoins or a digital pound; UK Finance says digital asset settlements will also be tested in the coming months.

Corporate sector

CoinDesk reports that Binance invested $100 million in Circle as part of a strategic partnership extended by five years to promote USDC, with a focus on emerging markets. According to Kaiko, the number of spot markets quoting USDC on Binance rose from 140 to 329, monthly volume climbed from $20–40 billion to over $80 billion, and daily turnover of $5–10 billion is 10–20 times that of other venues. USDC market capitalization stands at about $74 billion against roughly $140 billion for USDT, so the deal strengthens USDC specifically in emerging markets. The first Binance and Circle partnership was announced in December 2024, and neither side framed the deal as a change to the USDC reserve model, describing it as distribution, integration and a business partnership. Circle previously announced the $400 million acquisition of Singapore-based Tazapay.

Two corporate decisions set the tone for the institutional side of the market. Strategy's board of directors approved amendments on 24 September making every calendar day a dividend record date for the STRC, STRF, STRK and STRD series, with payments moving to the next business day; rates and aggregate obligations are unchanged. A shareholder vote is expected on 28 October, with STRC the first series to move to daily payments from 1 November 2026 and the others from January 2027. The proposal is not yet in force: only a preliminary notice of vote has been filed. Against that backdrop the company repurchased its own STRC for $174 million this week, having already raised the payment frequency from monthly to twice a month back in June. STRC has been trading notably below its $100 par value, which CEO Phong Le links to leveraged positions collateralized by bitcoin. The second deal, according to The Defiant, is CleanSpark's closing of a $2.276 billion senior secured notes offering under Rule 144A among qualified institutional investors, with proceeds going to the Sandersville data center and the refinancing of existing credit lines. Announced late on 25 September, the deal is described as one of the largest financings of the year for a public bitcoin miner and shows mining companies moving toward institutional sources of capital.