The crypto market on October 12 was defined by a collision of security concerns and accelerating institutional adoption. The most prominent development was a hardware-wallet incident linked to a reseller that put self-custody practices back under the spotlight, while cross-border regulators sharpened their focus on the fast-growing stablecoin sector.
At the same time, corporate treasuries continued to expand their digital-asset holdings, and traditional financial institutions pushed further into regulated crypto services across multiple jurisdictions. The combination painted a picture of an industry maturing in infrastructure while still confronting foundational security questions.
Ledger Confirms Unauthorized Implant in Devices Sold by a Reseller
Ledger reported that all confirmed cases in a suspected drain of user funds are tied exclusively to devices sold by the Southeast Asian reseller CryptoBilis. On-chain investigators traced as much as $93 million taken through the exploitation, and Tether froze $10 million in USDT connected to the incident.
Ledger stated that its own internal systems and direct sales channels were not affected. The company advised customers who bought devices through CryptoBilis not to use uninitialized hardware and to move their funds to new keys.
The incident strikes at the trust that underpins hardware wallets as a self-custody tool and fuels an ongoing debate about the security of distribution channels — a reminder that the weakest link in cold storage can sit outside the device itself. It involves assets including BTC, ETH and USDT, according to CoinDesk and Decrypt.
XRP Ledger Patches a Decade-Old Payment-Engine Bug
Developers of the XRP Ledger shipped emergency patch 3.4.1 to fix an integer-overflow vulnerability that had existed in the payment engine since 2015. The flaw was never exploited on the public network, but it theoretically could have undermined the XRP supply cap.
Because of its severity, the fix was applied outside the standard amendment-voting process after coordination with the Foundation, RippleX and validators. The patch, released on September 25, was adopted by more than 80% of trusted validators.
Eliminating a potential systemic threat to the integrity of XRP's issuance model is significant for network confidence, as reported by CoinDesk and Cointelegraph.
Ontology Restarts Mainnet After a 43-Hour Security Halt
Ontology halted mainnet block production for nearly 43 hours as a preventive measure following a security warning tied to an unnamed project in its ecosystem. The network resumed operations after checks were completed.
Ontology said the network's own funds were not affected and did not disclose details of the ecosystem project's incident, per The Defiant.
FSB Warns on Cross-Border Stablecoin Risks
The Financial Stability Board told the G20 that cross-border oversight and crisis-management mechanisms for stablecoins remain underdeveloped. It cautioned that a run on stablecoins could spill into traditional markets through forced sales of reserve assets.
The FSB called for stronger information-sharing between jurisdictions and joint crisis planning, noting that stablecoin regulation is complete in only some jurisdictions.
- Cross-border supervisory and crisis-response mechanisms are seen as immature.
- Contagion risk to traditional markets runs through forced reserve liquidations.
- The board urged better cross-border information-sharing and contingency planning.
The global warning underscores latent systemic risks in a rapidly expanding sector, as covered by CoinDesk and CryptoSlate.
Standard Chartered Brings RLUSD Custody to Dubai
Standard Chartered, through its regulated DIFC branch in Dubai, began offering institutional custody for RLUSD, the stablecoin issued on the XRP Ledger. The bank also plans a collateral-mirroring arrangement with LMAX that would let clients post RLUSD as trading collateral without moving tokens off bank custody.
The rollout depends on final documentation, testing and regulatory approvals. The move deepens the link between traditional banking and stablecoins and expands institutional infrastructure for RLUSD, according to CoinDesk and Decrypt.
Kraken Clears Final Dubai Hurdle
Payward, Kraken's parent company, secured full Market Approval from Dubai's VARA. The UAE launch is set to include spot and margin trading with AED pairs, direct AED deposits and withdrawals, staking, xStocks and institutional services such as Kraken Prime and OTC.
Derivatives and additional yield products are planned for a later stage, subject to further approvals. The license expands Kraken's regulated footprint in a strategically important Middle East market, reported by Cointelegraph and Crypto.News.
Regional Banks Embrace Crypto: South Korea and Russia
Jeonbuk Bank, part of JB Financial Group, began issuing won-denominated business loans backed by Bitcoin — reported as a first among traditional South Korean lenders. Collateral is held at a dedicated registered custodian, and default handling involves a court-ordered sale of the collateral. The launch was enabled by amendments to the Civil Enforcement Rules that took effect on October 1.
The development is presented as unconfirmed in the source material and should be treated as such. It was covered by CoinDesk.
Separately, Russia's central bank added Sberbank to its registry of organizations authorized to conduct digital-currency exchange operations. Sberbank plans to launch its first crypto products on December 1, 2026, through existing digital client channels, with planned assets including Bitcoin, Ether and USDT. The bank had previously been added to a digital-depository registry, according to CoinGape and Crypto.News.
Corporate Treasuries Keep Expanding: Bitmine, Evernorth and Strategy
Bitmine Immersion Technologies bought 12,532 ETH (about $32 million) over the week, lifting its holdings to 6,028,946 ETH — roughly 4.9% of total Ether supply. The company intends to stop accumulating once it reaches 5%, with about 76,000 ETH left to that target. Roughly 5.07 million ETH, or 84% of its holdings, is staked, producing projected annual staking revenue of about $336 million, per CoinDesk.
On the XRP side, Evernorth Holdings began trading on Nasdaq under the ticker XRPN after completing its merger with SPAC Armada Acquisition Corp. II. Its treasury holds about 473 million XRP and roughly $300 million in gross cash, and it positions itself as a publicly traded XRP treasury focused on yield strategies and ecosystem participation. Backers include Ripple, SBI Group, Kraken and Pantera Capital, reported by Cointelegraph and Decrypt.
Strategy bought 250 BTC for about $21.5 million at an average price of $86,194, bringing its total holdings to 848,250 BTC. In the same period it repurchased about 1.93 million STRC preferred shares for roughly $192.4 million — a buyback many times larger than its new Bitcoin purchase. Most of the funds for the BTC purchase came from selling MSTR shares, per Unchained and Crypto.News.
Infrastructure and Ecosystem Moves: AI Repurposing, Sui Migration, ENSv2 and a Solana ETF
SWI Group raised €800 million (about $894 million) to convert Genesis Digital Assets — acquired out of FTX's bankruptcy — from Bitcoin mining into AI-focused data centers. The company previously took a controlling stake and renamed it SWI Digital. The move reflects the broader trend of redirecting mining capacity toward AI infrastructure, as reported by CoinDesk.
DATA Network, formerly Story, announced it will migrate its protocol to Sui and retire its own chain. The Sui Foundation is investing $30 million as part of the partnership. The Trace registry will join the Sui ecosystem, Walrus will become the default storage layer for DATA Foundation applications, and the $DATA token will migrate 1:1, including locked and vesting positions. The transition is covered by Cointelegraph.
ENS Labs published an executable proposal asking its DAO to activate ENSv2 on Ethereum mainnet. If adopted, new .eth registrations on v1 would be frozen — v1 BaseRegistrar controllers would be removed and registrator ownership handed to ETHRenewerV1 with no ability to register new names. Existing .eth owners are not required to migrate, and no migration deadline is set. The proposal involves atomically executing 15 timelock calls through the ENS DAO, with the v2 grace period after expiry shortened to 28 days, per The Defiant.
Pando Finance set an October 13 listing for its spot Solana ETF (02831) on the Hong Kong Stock Exchange, making it the second spot SOL ETF in Hong Kong. The minimum lot is 100 shares, the annual management fee is 0.6%, HashKey Custody Services handles asset storage and HashKey Exchange provides SOL trading, according to Crypto.News.
Takeaway
October 12 highlighted two forces moving in parallel: persistent security challenges, from a reseller hardware-wallet breach to a long-dormant XRP Ledger bug, and relentless institutional expansion across treasuries, custody, banking and regulated exchange products. Regulators, meanwhile, signaled that stablecoin oversight — especially across borders — still lags the market's growth.