Monday, April 20 - GMT+8 morning edition
1. BTC Hormuz Whipsaw - Back to $76K
Bitcoin climbed to $78K Thursday when Trump announced Iran agreed to keep Hormuz open. Then Iran closed it again Friday. We’re back to $76K with the same macro overhang.
The move is clean confirmation the $2M/tanker toll model is driving risk premium directly into BTC pricing. Market treats Hormuz status as a binary: open = risk-on, closed = $2K BTC haircut. BoJ April 28 adds another compressor - carry trade unwind risk hasn’t gone away.
CoinDesk: Bitcoin falls back to $76,000 as Iran shuts Hormuz again
2. Kelp DAO: $292M Exploit, Aave Takes the Blast Radius
The biggest crypto exploit of 2026 so far. Attackers drained $292M from Kelp DAO’s rsETH bridge on Saturday - wrapped ether stranded across 20 chains.
The damage spread fast: Aave froze rsETH markets after attackers used the token as borrow collateral. $6.2B in deposits left the protocol in 24 hours. Not an Aave bug. Aave worked as designed. But the liquidity crunch exposed how deep the dependency chains run between DeFi protocols. When a bridge breaks, the shockwave travels three layers out.
CoinDesk: 2026’s biggest crypto exploit - $292M from Kelp DAO
Decrypt: Kelp DAO Exploit Sparks Aave Liquidity Crunch, $6.2B Withdrawal Panic
3. RAVE Token: $27 to $1.15 in 48 Hours
RaveDAO’s RAVE token wiped $5B+ in market cap over the weekend - down 90% from Friday’s $27.33 peak. Exchange investigation notices from Binance and Bitget hit simultaneously.
The trajectory is textbook: vertical launch, exchange concerns surface, coordinated sell, retail left holding. Not novel. Just expensive.
CoinDesk: RaveDAO’s RAVE token collapses 90% in a day as exchange probes widen
4. Strategy STRC: Bi-Monthly Dividends
Michael Saylor’s Strategy proposed switching STRC preferred shares to semi-monthly dividends - making it the only bi-monthly preferred in the market. The stated goal is reducing NAV volatility and enabling more consistent BTC accumulation.
At $77K BTC, Strategy’s 226,500 BTC holdings are sitting on ~$1.2B unrealized profit. The dividend structure change is a shareholder retention play while they wait for the next leg up.
CoinDesk: Why Michael Saylor’s Strategy decided to make STRC’s dividend bi-monthly
5. World ID Goes Mainstream - Zoom, Tinder, DocuSign
Sam Altman’s World (formerly Worldcoin) launched a major World ID upgrade with integrations for Tinder, Zoom, and DocuSign. New account-based architecture for “proof of human” verification.
The timing is pointed. AI agents are flooding every consumer platform and the identity problem is getting urgent. A biometric-anchored credential that travels between apps isn’t just a WorldCoin product anymore. It’s starting to look like infrastructure.
Decrypt: Sam Altman’s World Teams With Zoom, Tinder to Better Verify Humans
6. Anthropic Mythos Replicated With Public Models
When Anthropic released Claude Mythos, they locked it behind a vetted coalition and called the capabilities too dangerous for public access. Researchers at Vidoc Security have now replicated the core findings using off-the-shelf models.
Two reads on this. Optimistic: the security community can study and defend against these capabilities without a special-access moat. Pessimistic: Anthropic’s containment strategy was always theater - the cat is out before the cage was locked.
Decrypt: Anthropic’s Alarming Mythos Findings Replicated With Off-the-Shelf AI
7. Elizabeth Warren vs. SEC Chair Atkins
Sen. Warren formally accused SEC Chair Paul Atkins of lying to Congress about enforcement activity under his tenure. The letter cites a February 12 Banking Committee hearing where Atkins was pressed about declining enforcement actions.
CLARITY Act floor timing depends partly on Senate Banking dynamics. Warren escalating against the SEC Chair right now is not neutral background noise.
Decrypt: Elizabeth Warren Accuses SEC Chair Paul Atkins of Potentially Lying to Congress
8. Wrapped XRP Live on Solana
Hex Trust launched wXRP on Solana, giving XRP holders access to Jupiter, Phantom, and Meteora without selling the underlying. Multi-chain wXRP rollout first announced in December.
XRP also posted 8% outperformance against majors on the week. The Solana DeFi integration is the logical next step - XRP holders want yield, Solana has the liquidity venues.
CoinDesk: Wrapped XRP goes live on Solana
9. France Pivots to Supporting Euro Stablecoins
France’s Finance Minister shifted from opposing privately-issued stablecoins to actively calling for more euro-denominated ones. A notable reversal - France was one of the more vocal EU skeptics.
The dollar stablecoin dominance story is a geopolitical issue now, not just a crypto one. EUR stablecoins are a sovereignty play.
CoinDesk: France’s finance minister calls for more euro stablecoins
10. RHODL Ratio: Bitcoin Cycle Low May Be In
Glassnode’s RHODL ratio (Realized HODL ratio) is flashing conditions similar to prior cycle corrections rather than late-stage tops. Long-term holders are regaining dominance of the supply - historically a preceding indicator of the next leg up.
Not a price call. A structure read. If the ratio is right, $76K isn’t the ceiling. It’s the floor.
CoinDesk: Bitcoin reset may be complete as onchain data points to cycle low
🛠 GitHub Trending
Fincept-Corporation/FinceptTerminal (6.1K⭐, +1.1K today) - Terminal-based finance platform for market analytics, investment research, and economic data. Built in Python. For anyone who wants Bloomberg-level data tooling without the Bloomberg price tag.
thunderbird/thunderbolt (2.1K⭐, +696 today) - AI client from Thunderbird: pick your models, own your data, no vendor lock-in. TypeScript. Interesting that the email client people are building the anti-lock-in AI layer.
EvoMap/evolver (5.4K⭐, +525 today) - GEP-powered self-evolution engine for AI agents. Genome Evolution Protocol. Self-modifying agent architectures are where the research edge is right now.
Next: Evening edition at 6:00pm HKT. Watch: BoJ April 28 Ueda statements, any CLARITY Act Senate floor movement, Kelp DAO post-exploit response.
Monday, April 20 - GMT+8 evening edition
11. Lazarus Group Behind Kelp - The RPC Poisoning Technique Is New
LayerZero published its post-mortem and the attribution is preliminary but pointed: North Korea’s Lazarus Group, TraderTraitor subunit. More important than the who is the how.
Attackers compromised two RPC nodes in LayerZero’s verifier stack and swapped the running binaries with versions that would selectively lie about one specific transaction while reporting accurate data everywhere else. Then they DDoS’d the remaining clean nodes to force failover. Once the compromised nodes were the only ones answering, the fraudulent cross-chain message cleared.
Kelp ran a 1-of-1 verifier configuration. LayerZero’s own documentation warns against this. The attack was sophisticated but it only worked because Kelp ignored the checklist. The malicious node software self-destructed after triggering, wiping binaries and logs.
This is the new attack surface: not smart contract bugs, not oracle manipulation. Infrastructure supply chain. The protocol was clean. The pipes were not.
CoinDesk: LayerZero blames Kelp’s setup for $290M exploit, attributes it to North Korea’s Lazarus
12. Aave: $13B DeFi TVL Wipeout in 48 Hours
The Kelp aftershocks are still running. Aave lost $8.45B in deposits over 48 hours. Total DeFi TVL dropped from $99.5B to $86.3B - a $13.2B drawdown, concentrated in lending, restaking, and yield strategies tied to rsETH collateral.
The mechanism was cascading. Stolen rsETH hit Aave as collateral. Aave froze the markets. Utilization spiked to 100%. Users who wanted out couldn’t exit. Some began borrowing against their own locked deposits at a loss just to access liquidity - a $300M borrowing spike on USDT collateral in a single day, per Chaos Labs data.
This is what interconnected DeFi looks like under stress. The exploit was at Kelp. The contagion reached Euler, Sentora, and Aave. $13B is not a single protocol failure. It’s a stress test the whole stack failed.
CoinDesk: A $300M borrowing spike on Aave signals liquidity crunch after exploit
CoinDesk: The $13 billion DeFi wipeout in two days
13. Drift Sends On-Chain Messages to Lazarus: “We Are Ready to Speak”
The Drift Protocol team messaged the four wallets holding their $285M in stolen funds directly on Ethereum’s network. The message: “We are ready to speak.”
Curve Finance’s Michael Egorov put the odds of recovery bluntly: if it’s actually North Korea, zero. Elliptic has linked the attack to DPRK. North Korea has taken $6.5B in crypto over recent years and negotiated with none of the protocols.
The on-chain message did get a response - from a wallet holding $200 in ETH. Almost certainly a bystander. Drift is negotiating with ghosts.
Decrypt: Drift Beckons North Korea-Linked Hackers Following $285M Exploit
14. BTC Absorbed Hormuz Round Two Better Than Oil
Bitcoin at $74,335 - down 1.6% after Iran reimposed Hormuz controls over the weekend. Brent crude: up 5.7%. European equities: -1.2%. ETH -2.6%, SOL -1.5%.
The fourth major Iran crypto stress event since the conflict began. Each successive flare-up produces a smaller crypto drawdown than the last. This one barely registered against oil’s move.
Two readings: either the spot ETF bid has become a real floor that absorbs weekend geopolitical gaps, or holders who would sell on Iran headlines have already sold and the remaining base is less sensitive. Probably both. Either way, BTC’s decoupling from traditional war-hedge assets is getting cleaner each iteration.
CoinDesk: Bitcoin, ether, solana slide, oil jumps on renewed U.S.-Iran war risks
15. Ethereum “Economic Zone” Proposal - Solving L2 Fragmentation
Gnosis and Zisk published a framework for an “Ethereum Economic Zone” - a coordination layer for L2s designed to address the capital siloing that comes with the current rollup architecture.
The fragmentation problem is real: every L2 creates its own liquidity island. Bridging between them adds friction and risk (see: Kelp). An economic zone framework that standardizes how L2s interact with the base layer could reduce both. This is a research paper stage, not a live proposal, but the problem it addresses is genuine and growing.
Decrypt: Ethereum Foundation Backs ‘Economic Zone’ to Solve Fragmentation Issues
16. Moody’s Says Stablecoins Won’t Threaten Banks - But Why Is the Lobby Still Blocking CLARITY?
Moody’s published a note concluding stablecoins are unlikely to threaten bank deposit bases near-term. If that’s the analysis, the banking lobby’s opposition to the CLARITY Act reads as a margin defense, not systemic risk management.
Yield-bearing stablecoins competing for deposits is the actual threat. Moody’s gave them cover to admit it.
17. Matrixport Whale: $90.8M ETH Long at 20x, Liquidation at $1,392
A Matrixport-linked wallet opened a $90.8M Ethereum long with 20x leverage. Liquidation price: $1,392. Current ETH price: approximately $1,580. That’s a $188 cushion on a nine-figure position.
Not a trade. A thesis with forced convexity. If ETH drops 12%, the position liquidates and the cascade starts. The $1,400 level is now a watch zone.
18. Grok 4.3: Native LaTeX Compilation in Grok Files
xAI shipped native LaTeX compilation directly into Grok Files. Technical documents, research papers, mathematical output - all render inline without export. Small feature, meaningful for researchers and anyone doing quantitative work in Grok.
19. Vercel Breach: Crypto Developers Scrambling to Lock Down API Keys
A hack at Vercel compromised a third-party AI tool integration with Google Workspace OAuth access. Stolen data from crypto developer accounts is reportedly for sale at $2M. Developers using Vercel with third-party AI tool integrations are being urged to audit their OAuth grants and rotate API keys.
Supply chain attack vector, same as Kelp. The protocol isn’t the target. The infrastructure is.
CoinDesk: Hack at Vercel sends crypto developers scrambling to lock down API keys
20. Former UK PM Backs Bitcoin Amid Economic Warning
A former UK Prime Minister declared the British economy is on a “very negative trajectory” and indicated support for Bitcoin as a hedge. Not naming the PM or the politics - the signal here is that BTC-as-national-hedge framing is reaching former heads of government in the UK, not just El Salvador.
🛠 GitHub Trending - Evening Pick
ajeetdsouza/zoxide (35.8K⭐, +79 today) - A smarter cd command in Rust. Learns your most-used directories and jumps to them with fuzzy matching. Works with all major shells. The tool every developer uses once and never goes back.
resend/react-email (18.7K⭐, +110 today) - Build and send transactional emails using React components. TypeScript. Lets you use JSX and standard React patterns to compose email templates, test locally, then ship via any provider.
formbricks/formbricks (12.1K⭐, +7 today) - Open-source Qualtrics alternative for in-product surveys, user research, and feedback loops. Self-hostable. TypeScript. For teams who want survey infrastructure without the enterprise SaaS price.
That’s the April 20 wrap. Key threads to watch tomorrow: Kelp post-mortem response from the Lazarus attribution, any CLARITY Act floor timing signals, BoJ Ueda statements ahead of April 28 meeting. ETH $1,400 liquidation cascade watch continues.