Skip to content

Daily Digest - September 3, 2026

Thursday digest: morning proof pressure, then evening updates on Ontology recovery, Thailand wallet checks, Silicon exits, Kalshi geofencing, Coinbase Canada derivatives, Move oracle risk, Remixpoint, USDC quantum migration, and Solana fees.

digestcryptodefiregulationsecuritytokenizationprediction-marketsgithubagent-skills

BTC $77,262.17, ETH $2,389.39, SOL $99.63, XRP $1.35, HYPE $81.19, DOGE $0.081545, AAVE $126.90, ZEC $813.24, LINK $11.13, UNI $5.83.

Thursday morning is about proof under pressure.

The last three published digests leaned hard into stablecoin rulebooks, tokenized equities, chain halt politics, ETF flow, Robinhood Chain, and broad macro. This one keeps only the pieces that changed overnight, then rotates toward identity proofs, sports-team equity access, DAO income quality, DEX fee capture, frozen-chain recovery, stablecoin seizure process, Supreme Court escalation, long-running crypto malware, Washington spending, and DeFi sanctions problem.

The useful question: when crypto asks institutions, users, courts, and regulators to trust it, what evidence is actually good enough?

Price snapshot via Coinbase BTC/ETH spot data and CoinGecko simple-price data around 04:15 HKT.


1. World Open-Sourced ProveKit For Private Identity Claims

The Block reported that World open-sourced ProveKit, a zero-knowledge identity toolkit already used in World ID.

This is the right identity story after another week of KYC leakage.

ProveKit lets users prove claims such as age, nationality, or valid document ownership without revealing the underlying personal data. World says proofs can run on phones and browsers, typical phone proofs finish in seconds, and a tested low-end device completed in under 30 seconds.

The product read is simple: if apps only need a yes/no claim, asking users to leak the whole document is bad architecture. ZK identity still needs issuer trust, device security, and regulator comfort, but it gives builders a cleaner default than repeated passport upload.

2. Securitize And Socios Moved Fan Tokens Toward Real Equity

The Block reported that Securitize and Socios.com are partnering on regulated tokenized equity offerings tied to minority interests in professional sports teams.

That is a different beast from normal fan tokens.

Socios has already worked with more than 70 sports organizations, mostly soccer clubs. Securitize brings issuance, investor onboarding, ownership records, and transfer infrastructure across the U.S. and Europe. The first project is expected to use Securitize authorized European Trading and Settlement System under the EU DLT Pilot Regime.

The hard question is eligibility. If the product gives fans actual economic exposure, it also needs securities disclosures, transfer limits, custody clarity, and honest language about minority rights.

3. Arbitrum DAO Put Numbers Behind The App-Chain Thesis

The Block reported that Arbitrum DAO accrued $6.19 million of income in the first half of 2026, with protocol revenue gross margins above 97%.

The prior Robinhood Chain story was about headline fees. This one is about where those fees go.

Arbitrum income came from Arbitrum One transaction fees, Timeboost priority auctions, Expansion Program licensing fees, and treasury returns. Robinhood Chain launched mainnet on July 1, and the licensing program sends 10% of net protocol revenue from certain Arbitrum-stack chains back to the ecosystem.

The live signal is stronger than the H1 report. The Block said Robinhood Chain users paid a record $3.75 million in fees on Sept. 1, with DEX volume above $1.5 billion and TVL just over $750 million. App chains are starting to look like revenue-share assets, not only branding surfaces.

4. Uniswap Hit Seven Million Swaps, But Fee Capture Stayed Fuzzy

CryptoSlate reported that Uniswap handled more than 7 million swaps in one day, roughly 82 swaps per second.

Activity is no longer the whole story.

Uniswap protocol fees now span v2 and v3 pools on 11 chains, with v4 fee controllers active on Ethereum, Arbitrum, Base, BNB Chain, Polygon, Optimism, and Robinhood Chain. Blockworks previously measured about $44 million of LP fees over 30 days and about $4 million accruing to the protocol.

The gap is the point. Public data does not yet tie the Sept. 1 swap record to fee-enabled pools, volume, and protocol revenue in the same window. Seven million swaps is a usage win. UNI value capture still needs cleaner accounting.

5. TAC Has Been Frozen For More Than 10 Days

CryptoSlate reported that the TAC network has remained halted at block 24,671,475 since an Aug. 22 staking-pool exploit.

This is the chain-halt story with the clearest supply math.

The TAC postmortem put the drain at 2.985 billion TAC, or 28.6% of supply. The foundation plans to replace a 1.258 billion TAC shortfall from treasury reserves, remove about 65.1 million incident-linked TAC frozen on TAC, and separately handle 1.662 billion attacker-held TAC on BNB Chain.

The proposed fix is not a full rollback. It is a targeted state edit at the halt block, meant to preserve 7,772 legitimate transactions. That may be more surgical, but users still need to know when block production resumes and how the external-chain balance is resolved.

6. Tether Freeze Power Is Heading To Court

CoinDesk latest board said a lawsuit challenges Tether for allegedly freezing $42.4 million USDT before a U.S. seizure warrant. Other reports say two Thai businessmen sued in the Southern District of New York over the freeze.

This is stablecoin enforcement turning into due-process risk.

The plaintiffs allege Tether acted on an informal Homeland Security request months before a warrant arrived. Tether and law enforcement will likely frame issuer freeze power as essential for stopping stolen funds and sanctions flows. Users and counterparties will ask who checks that power before money becomes unusable.

Stablecoins work because issuers can honor redemptions. They become political instruments when issuers can also blacklist balances before a court order.

7. New Jersey Asked The Supreme Court To Settle Prediction Markets

CoinDesk reported that New Jersey asked the U.S. Supreme Court to decide whether states can regulate sports betting offered through prediction markets such as Kalshi.

This is no longer a scattered state fight.

New Jersey wants to overturn an April appeals ruling that favored Kalshi and treated federal commodities law as likely preempting state gambling enforcement. Nevada recently won a separate appeals ruling pointing the other way, and dozens of related cases are still moving through state and federal courts.

If the Court takes the case, prediction markets get a national answer. If it waits, platforms keep scaling inside a legal split where the same product can look like a CFTC event contract in one venue and unlicensed gambling in another.

8. CrowdStrike And Federal Authorities Hit Sality Crypto-Theft Network

Reuters coverage carried by Devdiscourse said U.S. officials and CrowdStrike are dismantling Sality, a Russian cybercrime operation that has run for roughly two decades. CoinDesk latest board framed the case as malware that secretly stole crypto for eight years.

This belongs in the digest because crypto theft is still endpoint security before it is wallet security.

Sality spread as a botnet and survived for years by infecting machines, stealing credentials, and keeping infrastructure alive. The takedown shows why exchanges, wallets, and custody desks cannot treat user signed it as the end of the risk story.

The next wallet UX fight is not only better signatures. It is better detection when the signing machine is already compromised.

9. Crypto Political Spending Hit A New Midterm Scale

CryptoSlate reported that crypto corporations contributed $206 million to the 2026 midterm cycle, while crypto, AI, and online betting together accounted for $344 million.

The industry is paying for durability.

Stablecoin legislation already passed, the SEC is rewriting rules, and the Senate faces a Sept. 15 cloture vote on the CLARITY Act. The new ask is broader than ending enforcement-first policy. Founders want banking access, payment rails, tax fixes for tiny machine-scale transactions, noncustodial protections, and a market-structure statute that future regulators cannot casually unwind.

Money bought attention. Sept. 15 will show whether it bought enough votes.

10. Hyperliquid U.S. Route Now Has A Lazarus Problem

CryptoSlate reported that wallets linked to North Korea linked Lazarus Group sold more than $30 million of bitcoin through Hyperliquid over three weeks, then converted proceeds into ETH and SOL before funds moved to other exchanges.

The timing is brutal.

The same week, Bloomberg reporting said Hyperliquid Labs was in advanced talks with Kraken parent Payward over a regulated U.S. entry point. CME and ICE had already warned Washington that pseudonymous, always-on markets could help sanctioned actors avoid enforcement.

The detail that matters is market linkage. A U.S. wrapper that routes to the same offshore liquidity pool has a very different risk profile than a regulated venue with separate controls, surveillance, and eligible products. Lazarus just made that distinction impossible to dodge.

The featured-repo tracker ruled out recent repeats including tsouth89/omakade, AMAP-ML/DreamX-Creator, mahdidavoodi7/react-native-continued-task, productdevbook/cizgile, mizorewww/course2md, tianyupaipai-cmd/pai-voice, daffainfo/vol-rs, rileycx/strafe, and ih8d8/yt-dlp-manager.

Fresh picks from the GitHub repository search API and updated-repo search. I filtered out Cloudflare-bypass tooling, Web3 wallet farmers, game cheats, thin class projects, and low-context clones.

  • backnotprop/plannotator (8,374 stars) - A visual review surface for coding-agent plans and diffs. It matters because teams need a better handoff than pasting giant patches into chat.
  • dreamers-laboratory/agent-fleet-manager (168 stars) - A fresh Python engine for repeated information gathering with worker fleets. Useful signal: multi-agent research keeps moving from demo prompts into schedulable collection systems.
  • antfu/eslint-plugin-slop (34 stars) - New ESLint rules for catching low-quality AI code patterns. It is below the normal star bar, but the category is right: teams are starting to lint agent behavior, not just syntax.

Agent Skills Spotlight

I reviewed three recently updated agent-skill repos before featuring them and wrote security notes in the vault.

modelstudioai/skills, about 55 stars. Security: Review before global install, self-updating workflows, Bailian API use, or billable media/training operations.

ModelStudio Skills is a broad Aliyun Model Studio / Bailian collection for model docs, model recommendation, finance data, prompt and video production, fine-tune/deploy workflows, and curated community skills. The strongest part is coverage: it packages real cloud workflows rather than just prompt advice.

Security notes: The repo includes shell scripts, Python media pipelines, bl CLI calls, ffmpeg/uv dependencies, GitHub clone/pull behavior, billable cloud operations, API-key-backed workflows, and CI jobs with write privileges. Python subprocess calls use argument lists in the reviewed provider, and training/deploy docs include billable-operation gates, but selected-skill install is much safer than enabling the whole pack globally. Review note: 1. Projects/skill-reviews/2026-09-03-modelstudio-skills.md.

resemble-ai/detect-skill, about 72 stars. Security: Review before private media or sensitive text use.

Resemble Detect gives agents a direct workflow for deepfake detection, media intelligence, audio source tracing, investigation agents, and AI-text detection through Resemble APIs. The useful rule is strict: no authenticity verdict without a completed detection result.

Security notes: The repo is a single markdown skill plus README and license, with no package manifest or shipped executable code. It uses curl, RESEMBLE_API_KEY, optional jq/Python parsing, and HTTPS calls to Resemble endpoints. Main risks are API-key exposure, uploading private files, third-party retention if zero-retention mode is omitted, and sending sensitive text to a detector. Review note: 1. Projects/skill-reviews/2026-09-03-resemble-detect-skill.md.

neondatabase/agent-skills, about 85 stars. Security: Safe for docs-guided use; review before MCP, CLI, project creation, .env edits, object storage, or production database operations.

The Neon pack covers Lakebase Postgres setup, branching, connection strings, object storage, functions, AI Gateway, and egress optimization. It is especially useful for agents building apps because it encodes the boring failure modes: pooled versus direct URLs, branch-first migration testing, scale-to-zero, and read replicas.

Security notes: The repo ships markdown skills, plugin manifests, a hosted Neon MCP config, Node validation/sync scripts, and a Git hook that stages generated plugin copies. The sensitive surfaces are DATABASE_URL, unpooled migration URLs, S3-style object-storage keys, AI Gateway tokens, OAuth-backed MCP access, and object deletion/copy operations. Review note: 1. Projects/skill-reviews/2026-09-03-neon-agent-skills.md.

Morning Read

Read World ProveKit release, then the TAC recovery math, then New Jersey Supreme Court escalation.

The number to remember is 1.662 billion.

That is the attacker-held TAC still sitting on BNB Chain while the main TAC network remains frozen. The second number is $42.4 million, because the Tether freeze lawsuit shows how much stablecoin policy can hinge on process rather than reserves.

The Thursday read is that the crypto proof layer is widening. Identity proofs need to prove only the claim. DAO revenue needs to prove where fees accrue. DEX activity needs to prove value capture. Chain recovery needs to prove exactly which balances change. Stablecoin issuers need to prove seizure process. Prediction markets need to prove which regulator wins.

Proof is not just cryptography now. It is records, court orders, revenue reports, incident math, and the audit trail around who gets to press pause.

Evening Update

BTC $77,549.00, ETH $2,390.77, SOL $100.04, XRP $1.36, HYPE $81.73, DOGE $0.082714, AAVE $128.96, ZEC $830.79, LINK $11.16, UNI $6.06.

The Asia and Europe day brought a different board than the morning.

The novelty gate ruled out another straight pass over bitcoin ETF flow, generic stablecoin legislation, tokenized equities, and the already-covered New Jersey petition. The fresh signal came from operational recovery, self-custody compliance, dying L2 exits, venue classification, state geofencing, Canadian leverage access, Move oracle blast radius, Japanese treasury concentration, post-quantum dependency, and the Solana activity-versus-revenue split.

The useful question tonight: what happens when the crypto promise of open infrastructure meets very ordinary chokepoints - software versions, geofences, liquidity exits, oracle dependencies, securities exemptions, and key-rotation calendars?

Price snapshot via CoinGecko simple-price data around 18:25 HKT.

11. Ontology Reopened, But Only On The New Software

CryptoSlate reported that Ontology restored mainnet operations on Sept. 2 after an emergency pause and made v3.1.5 mandatory for sync-node operators.

This is the follow-through the Sept. 1 halt needed.

The team now says malicious activity was found, but the public notices still do not identify the attack path, the affected component, or the recovery state across RPC providers, exchanges, wallets, and dapps. The release tells operators what to run. It does not yet tell users exactly what failed.

That gap matters. Chain restarts are not complete when blocks resume. They are complete when node operators converge, service providers reopen safely, and the postmortem is specific enough for other networks to learn from it.

12. Thailand Turned The Travel Rule Into A Wallet Check

CryptoSlate reported that the Thailand SEC issued a crypto Travel Rule that takes effect Feb. 27, 2027.

The important detail is not just sender and recipient data.

Licensed platforms will need to collect transfer information, pass originator and beneficiary data between operators, retain records for at least five years, and ask for added recipient location or entity details above 30,000 baht. Incoming transfers from self-hosted wallets above that threshold may also require proof that the customer controls the wallet.

Thailand is drawing the same line more regulators are drawing: self-custody remains allowed, but the regulated ramp increasingly demands attribution when coins touch a licensed platform.

13. Silicon L2 Shutdown Became A $9.75 Million Exit Test

CryptoSlate reported that Silicon Network is shutting down with about $9.75 million still onchain.

This is L2 consolidation with a deadline.

Silicon stopped new bridge deposits and gave users until Dec. 31 to withdraw before its network and explorer disappear. Assets bridged from Ethereum can return during the window, but tokens issued directly on Silicon depend on remaining network liquidity, which may become thin as the shutdown progresses.

Small L2 risk is not only security risk. It is exit risk. Users need enough gas, working bridges, reachable docs, live explorers, and liquid swap paths before the clock runs out.

14. The CFTC Told CME To Compete On Perps, Not Sue Them Away

The Block reported that the CFTC asked a federal court to dismiss the CME lawsuit over the agency approval of crypto perpetual futures from Kalshi.

This is the other side of the prediction-market fight.

CME says bitcoin perpetual futures from Kalshi should have been treated as swaps and that the CFTC created a shortcut around the usual rulebook. The CFTC says CME lacks standing because designated contract markets can list similar contracts themselves, and CME bitcoin and ether futures volumes were higher in June and August than in May.

The changed angle is competitive posture. Washington is no longer just deciding whether perps are allowed. It is deciding whether incumbents can use product classification to slow new retail futures venues.

15. Michigan Made The Kalshi Geofence Expensive

The Block reported that a Michigan state court issued a preliminary injunction requiring Kalshi to keep blocking state residents from sports-related event contracts.

This is not a repeat of the New Jersey Supreme Court petition. It is the enforcement consequence while that national question waits.

The order converts a June restraining order into a longer-running block and requires Kalshi to use a licensed third-party geolocation provider. Violations can cost $500,000 per day. Michigan says sports contracts are unlicensed betting. Kalshi says it is a federally regulated event-contract venue.

The market data makes the stakes obvious: The Block says Kalshi recorded $38.67 billion in August volume, versus $8.41 billion combined for Polymarket and Polymarket US. The biggest venue is now learning state-by-state perimeter defense in real time.

16. Coinbase Took Regulated Crypto Derivatives To Canada

Cointelegraph reported that Coinbase launched crypto derivatives for eligible Canadian customers.

This is distribution, but only for a narrow customer set.

The product includes 23 crypto perpetual and dated futures, five commodity futures, and the Coinbase 50 Index, with up to 10x leverage. Access is limited to eligible Canadian customers, including investors with at least $5 million in net financial assets or registered advisers and dealers.

Canada is becoming a useful middle case: more open than the U.S. retail derivatives perimeter, but still gated by eligibility, exemptions, and tightening oversight around crypto ATMs and political donations.

17. Full Sail Shutdown Shows Oracle Incidents Travel

Cointelegraph reported that Sui DeFi protocol Full Sail will wind down after a Switchboard-linked incident removed about $91,000 from three vaults.

The direct loss was not huge. The dependency signal was.

Switchboard said it was investigating a potential compromise of Move-based implementations and halted its network on Aptos, Sui, IOTA, and Movement. Virtue, an IOTA stablecoin lending protocol, separately reported about $455,000 in losses and said VUSD backing was impaired.

For DeFi users, oracle risk is not an abstract vendor box. One shared implementation can push multiple chains into pause mode, impair a stablecoin, and kill the forward plan for a smaller protocol.

18. Remixpoint Made The Corporate Treasury Trade Bitcoin-Only

Cointelegraph reported that Japan-listed Remixpoint sold all ETH, SOL, XRP, and DOGE holdings, leaving about 1,506 BTC as its sole crypto position.

This is the cleanest Japan treasury signal of the day.

The company sold roughly $5.5 million of altcoins and booked a $736,000 gain, while keeping about $115 million of bitcoin. It said the move would clarify strategy and improve capital efficiency. It also earned 14.92 BTC from lending between Feb. 24 and Aug. 31.

The read is less altcoin bearish than governance practical. Public-company crypto treasuries are easier to explain when the board, auditors, lenders, and shareholders only need to underwrite one asset thesis.

19. USDC Quantum Problem Is A Coordination Problem

CryptoSlate reported that the Circle USDC quantum-migration problem spans 37 mainnet networks.

The better angle is operational, not apocalyptic.

Circle can harden keys it controls and design post-quantum support into Arc, but it cannot rotate customer keys, change custodian signing stacks, or rewrite signature rules on Ethereum, Solana, XRPL, and every other host chain. Its Aug. 31 disclosure told developers to inventory cryptography, identify vendor dependencies, and prepare key rotation.

Post-quantum migration will look less like a single upgrade and more like an industry-wide compatibility window. The slowest wallet, bridge, custodian, or chain becomes part of the effective USDC security perimeter.

20. Solana Throughput Record Did Not Bring Back 2025 Fees

CryptoSlate reported that Solana processed 5.2 billion non-vote transactions in August, 19% more than July.

The record looks strong until it meets the income statement.

21Shares calculated that Solana gross network revenue fell to $141 million in the first half of 2026 from $1.09 billion a year earlier. The difference is mix: the memecoin priority-fee and Jito-tip boom cooled, memecoins fell from 40% of spot trading volume in H1 2025 to 16% in H1 2026, and stablecoin swaps rose from 6% to 19%.

That is better product-market fit, but worse fee intensity. Solana is proving it can move huge activity. SOL still needs that activity to translate into durable validator income, burned fees, or staking demand.

Evening Read

Read the Thailand SEC Travel Rule rollout, then the Silicon shutdown clock, then the Michigan Kalshi injunction.

The number to remember is $500,000 per day.

That is the Michigan penalty hanging over Kalshi if the geofence fails. The second number is $9.75 million, because a disappearing L2 turns total value locked into a countdown, not a bragging point.

Tonight the read is that the next crypto bottleneck is coordination. Operators need the right Ontology binary. Thai platforms need sender and recipient data pipes. Silicon users need exits before Dec. 31. Kalshi needs geofences while federal and state courts disagree. Circle needs every wallet, bridge, custodian, and host chain to prepare for cryptographic migration. Solana needs activity that pays, not just activity that increments counters.

Open systems keep running only when the boring interfaces keep working.