Bitcoin held near $82,000 after a weekend flash crash that briefly pushed the price from $81,600 down to $80,750 before a recovery. Sentiment remains under pressure from inflation data: September CPI rose 3.7% year over year, against a forecast of 3.6%.
Spot bitcoin ETFs recorded a third consecutive week of outflows totaling $228.6 million, while Ethereum ETFs lost roughly $320 million. Despite fears of a "Black Monday," the VIX spiked 21.5% on Friday, yet BTC held above $80,000. According to CoinGecko, the crypto market closed Q3 with market capitalization up 39.6% to $2.96 trillion.
Institutional Flows: Third Straight Week of ETF Outflows
US spot bitcoin ETFs saw net outflows of $228.6 million for the week of October 13–16, following $681.1 million the prior week — roughly $910 million over two weeks. Ethereum ETFs wrapped up a third red week with about $320 million in outflows. October's cumulative bitcoin ETF outflow stands near $615 million.
The week's worst session came on Wednesday, with a $261.4 million outflow coinciding with the September CPI release of 3.7% year over year versus a 3.6% forecast. BTC briefly dipped below $80,000, and around $950 million in leveraged positions were liquidated in 24 hours. Still, cumulative net inflows into spot bitcoin ETFs since January 2024 remain at $57.3 billion.
Outflows are now spreading beyond BTC and ETH. Spot XRP ETFs posted $1.84 million in outflows, ending a 13-week inflow streak, while Solana ETFs lost $25.52 million — their worst week on record. XRP retreated from $1.40 to $1.27; SOL slipped from $110 to the $101–102 range. Decrypt, CryptoPotato
Weekend Flash Crash and Market Fragility
A weekend flash crash hit BTC, ETH, and perpetuals tied to AI stocks. Bitcoin fell from $81,600 to $80,750 before recovering to $82,000; ETH dropped from $2,420 to $2,360, then returned to $2,410. AI-linked perpetuals also sold off — SOXL −5.45%, SNDK −3.6%, MU −3.42% — though losses were quickly erased.
Over the week, the S&P 500 lost 2%, Nasdaq 100 and Nikkei roughly 5%, and KOSPI nearly 14%. Analysts warn of elevated volatility heading into Monday. The move coincided with Ukraine's strike on the St. Petersburg oil port and announced attacks on Russian energy facilities.
Fear indicators moved sharply on Friday: the VIX jumped 21.5% to 19.99 as the S&P 500 fell 1.09%, its largest one-day rise since June 5. Traders bought 9,200 November calls at strike 20 ($1.7 million) and 12,500 at strike 23 ($1.1 million), betting on VIX above 23. Since 1990, the VIX has risen 20%+ on a Friday 32 times — and fell the following Monday 25 times, with a typical decline of 4.5%. Meanwhile, BTC's implied volatility (BVIV) actually eased 1% to around 40%. CoinDesk
Security: Q3 Hacks Hit $1.18 Billion
A Hacken report found that cyberattacks on the crypto industry cost $1.18 billion in Q3 2026 across 107 incidents — up 55% from the previous quarter. Smart contract exploits accounted for 48% of losses; access control failures and operational errors made up 40%. A full 77% of quarterly losses stemmed from compromised vendors, delayed patches, or systems outside current security audits.
Hacken warns that audit badges give investors a false sense of security. The report underscores how supply-chain vulnerabilities continue to erode trust and intensify demands for rigorous auditing.
In a separate incident, the Cysic bridge was halted after an attacker exploited a message-processing flaw and minted 10 million CYS on BNB Smart Chain without a corresponding deposit on October 17. The foundation paused the bridge and blacklisted the recipient address roughly 76 minutes later, freezing about 2.8 million CYS; approximately 7.2 million left the address. The mainnet and user wallets were not affected, and final losses are still being assessed. Unaffiliated estimates suggest around $727,000 was moved to Ethereum. CoinDesk, Cointelegraph
On-chain investigators ZachXBT and Specter reportedly traced roughly 2,700 ZEC (about $3.8 million) from the Bitget hack into the shielded Ironwood Zcash pool. Transfers from the CryptoBilis Ledger incident and $12 million from Triple-A were also noted. Bitget confirmed approximately $387.5 million reached attacker addresses in the September 24 breach; these追踪 findings remain unconfirmed.
Regulation: Tokenization Pushback and Federal Frameworks
Nine major US companies — including Broadcom, Verizon, and UnitedHealth — filed objections to trading tokenized versions of their shares on OKXICE, the OKX and ICE joint venture. The objections come under the SEC's five-year Innovation Exemption, which gives issuers 30 days to veto third-party tokenization. Nasdaq separately said it does not want its shares listed on the venue without real-time best-price display. TD Securities analysts reported low issuer interest and concerns about the temporary nature of the regulatory framework — a first major precedent of issuer resistance to share tokenization.
The CFTC proposed a new "crypto asset market" registration category under its jurisdiction, covering exchanges with credit, margin, or leveraged retail trading. The framework includes anti-manipulation, client protection, and proof-of-reserves requirements. Basic spot exchanges will largely continue operating under state money-transmitter licenses, since the CFTC lacks universal federal registration authority.
At the White House, Patrick Witt, executive director of the Presidential Council on Digital Assets, is leaving public service with no successor named — following earlier departures of Harry Jung and Bo Hines. SEC Chair Paul Atkins responded by reaffirming the agency's commitment to comprehensive crypto market structure rules. The CLARITY Act failed to advance in the Senate on September 15, falling short of 60 votes.
Courts, Taxes, and Enforcement
Crypto.com and Novig filed separate federal lawsuits against Missouri on October 16, challenging cease-and-desist letters from Attorney General Catherine Hanaway. The platforms argue their sports contracts are swaps under CFTC jurisdiction and that federal law preempts state rules. Missouri requires a license, a 10% AGR tax, and fees up to $500,000; similar letters went to Kalshi, Polymarket, Robinhood, and Underdog.
Latvia's Saeima passed income tax amendments on October 15 introducing an investment-account regime: taxation applies to net withdrawals above contributions rather than individual trades. A one-time asset declaration at market value as of December 31, 2026 carries a 10% tax, filed April 1–May 31, 2027, with payment due by July 23. Crypto tax payments may become possible in 2027.
In this week's legal roundup: an SDNY judge rejected CFTC and Gemini's request to vacate a $5 million consent order; the EBA classified USDC as the first significant e-money token under MiCA, with dual EBA and ACPR oversight from November 12; and London's High Court ruled that claims over roughly 61,000 BTC (~$5 billion) confiscated from Zhimin Qian are governed by Chinese law.
Richard Heart, founder of HEX, was detained in Istanbul on October 14. Police seized $7.15 million in cash, weapons, and nine luxury vehicles. HEX's market cap fell from $561 million to $315 million over the week. An Interpol Red Notice had been issued two years earlier at Finland's request on tax fraud charges.
Tokenization and Institutional Infrastructure
DTCC will open commercial access to its Tokenization Service at the end of October 2026, covering assets totaling $30 trillion. The first phase runs only on closed platforms — Canton Network and private Hyperledger Besu — with 25 instruments including Treasuries, ETFs, and Russell 1000 equities. Public networks Stellar and Circle Arc are planned for the first half of 2027.
Stablecoin payments reached $482 billion in 2026, up 45% year over year, according to Allium — even as total supply barely moved at $305 billion (+0.4% YTD). Transactions rose 71% to 1.04 billion, while the average payment size fell from $544 to $462. Visa, Mastercard, and Stripe are connecting crypto to fiat payment systems, signaling a shift from hedging toward real payment use.
Meanwhile, Uniswap earned approximately $14.81 million in protocol revenue in September, with about 53% (~$7.9 million) coming from Robinhood Chain, launched July 1. Tokenized stock trading was a significant fee source — a sign that a fast-launch L2 can already outpace older ecosystems in revenue.
Corporate and Network Developments
Michael Saylor hinted at continued bitcoin purchases for Strategy, which controls 848,250 BTC (4.04% of supply) worth $69.45 billion. The company bought only 250 BTC over the reporting week and directed $192.4 million to repurchasing Series STRC preferred shares with yield jumping to 12.31%. MSCI will decide on Strategy's index inclusion November 11; JPMorgan estimated potential outflows of $2.8 billion. MSTR fell 9.56% to $136.83, with MNAV down to 0.83x.
Ethereum's Glamsterdam upgrade activates on the Hoodi testnet October 26, raising the gas limit from 60 million to 200 million (3.3x). The upgrade includes enshrined proposer-builder separation and block-level access lists. Toni Wahrstätter suggested 300 million as a possible next step (unconfirmed).
On the XRP Ledger, the fixCleanup3_4_0 upgrade may activate October 23 after securing more than 80% validator support for 14 days, bundling around 25 fixes including vulnerabilities in liquidity pool token returns. Three changes for planned lending functions have not yet reached majority support.
Ripple-ecosystem highlights: Evernorth Holdings began trading on Nasdaq under XRPN, holding roughly 473 million XRP; Standard Chartered launched institutional custody for RLUSD via DIFC Dubai; and Cross River Bank integrated RLUSD and XRPL settlement on October 16.
Flows, Regulation, and What's Next
Per Chainalysis, the US became a net importer of bitcoin in 2026 for the first time since 2022, while dollar-denominated stablecoins continued to be exported. Transactions of $10 million+ brought 53,200 BTC into the country; transfers below $10,000 showed net outflows. Chainalysis links the shift in part to spot bitcoin ETFs launched in early 2024.
Former Mt. Gox CEO Mark Karpeles announced a low-cost device to detect spy implants in Ledger wallets without opening them, using a low-power radio signal and resonance testing. The device follows a scandal involving manipulated hardware sold through an Asian intermediary, with independent researchers estimating losses above $90 million. Ledger introduced stricter intermediary rules on October 15, banning sales of returns.
Bitget added Russia and Belarus to its restricted jurisdictions list on October 16, announcing account closures with individual deadlines — some users received an October 21 withdrawal cutoff, per Interfax. The move follows the September 24 breach involving approximately $387.5 million in unauthorized transfers.
The bottom line: ETF outflows, record hack losses, and regulatory fragmentation are weighing on sentiment, but BTC's resilience above $80,000 and Q3's 39.6% market cap gain suggest the longer-term trend remains intact. Monday's open will be the first test of whether weekend volatility carries over.