Morning prices: BTC $76,644, ETH $2,468.53, SOL $101.22, HYPE $82.08, ZEC $1,467.58, LINK $11.39, UNI $7.19, AAVE $125.85, BNB $726.84, TRX $0.3339, ADA $0.2021.
Friday morning is about crypto’s post-CLARITY route getting split across agencies, courts, audits, and developer testnets.
The last three digests were heavy on the failed CLARITY vote, Fed pressure, Arc’s mainnet launch, stablecoin policy, tokenization plumbing, account-abstraction drift, and RWA collateral.
This one avoids another BTC/ETH/ETF loop. The fresh thread is narrower and more useful: the SEC is giving tokenized securities a five-year path, House tax writers moved a crypto bill 38-5, U.K. enforcement hit P2P hubs, France kept DAC8 reporting alive, S&P Global bought OpenZeppelin, Ethereum rehearsed a bigger gas target, Circle’s institutional chain got memecoin stress-tested, Bitcoin’s quantum debate moved into wallet operations, NEAR crossed $70 million in private execution TVL, and Ethereum Classic exposed client-governance risk.
The useful question: when Congress stalls, who actually writes the next operating rules - agencies, exchanges, courts, auditors, wallet teams, or node operators?
Price snapshot via CoinGecko simple-price data around 00:18 HKT.
1. The SEC Gave Tokenized Securities Venues A Five-Year Exemption
CoinDesk reported that the SEC issued a blanket five-year exemption for venues listing and trading tokenized securities without registering as exchanges.
This is the most concrete U.S. crypto-policy move after the CLARITY vote failed. It doesn’t solve every market-structure fight, but it gives tokenized securities builders a defined lane instead of another year of guesswork.
The five-year clock matters. It is long enough for venues, custodians, transfer agents, broker-dealers, and issuers to test real workflows. It is short enough for the SEC to keep leverage if the design creates custody, disclosure, market-surveillance, or investor-protection problems.
The U.S. didn’t pass the big bill. It still found a way to move one part of the market forward.
2. The SEC Is Preparing For 24-Hour Trading
CoinDesk reported that the SEC used a Sept. 17 roundtable to examine around-the-clock trading in U.S. equity markets.
Crypto already treats Sunday night liquidity as normal. The equity market does not. If tokenized stocks, tokenized funds, and blockchain-based venues keep gaining room, the old trading-day boundary starts to look more like a product choice than a law of nature.
This is not only a convenience question. Twenty-four-hour trading changes market-maker staffing, clearing workflows, outage plans, volatility controls, investor disclosures, and settlement operations.
The SEC is asking the right operational question: what breaks when the stock market borrows crypto’s uptime expectation?
3. A U.S. Crypto Tax Bill Cleared Committee 38-5
Cointelegraph reported that the House Ways and Means Committee advanced the Digital Asset Tax Certainty Act in a 38-5 vote.
The bill would reshape federal tax rules for stablecoins, mining, staking, crypto lending, transaction fees, and digital asset transfers. It also includes a de minimis exemption for qualifying network or transaction fees of $10 or less.
This is less dramatic than a market-structure bill, but it may be more usable for operators in the near term. Tax ambiguity hits exchanges, custodians, staking products, lending desks, wallets, accountants, and ordinary users at the same time.
The policy read is simple. CLARITY failed in the Senate, but crypto tax work still has bipartisan room in the House.
4. The FCA Raided Three London P2P Crypto Hubs
crypto.news reported that the U.K. Financial Conduct Authority targeted three London premises suspected of running illegal peer-to-peer crypto trading businesses.
The Sept. 10 operation involved HM Revenue & Customs and the Metropolitan Police. The FCA issued cease-and-desist letters at all three sites and said no P2P crypto trading businesses are currently registered with the regulator.
This is where the U.K.’s new regime meets street-level enforcement. Personal P2P trades are one thing. Running a business without registration is another, especially when cash, informal brokers, and money-laundering risk sit in the middle.
The message to firms is not subtle: authorization guidance is arriving, and enforcement is already awake.
5. France Kept DAC8 Crypto Reporting Alive
crypto.news reported that France’s Council of State rejected an emergency request from Bull Bitcoin and Paymium to suspend France’s DAC8 crypto tax-reporting decree.
The court said the companies had not shown enough urgency to freeze the rules. Their broader annulment case remains active.
The privacy argument is real. France has had a grim run of physical attacks against crypto holders, and centralized tax data can become a target if the records leak. The tax argument is real too. DAC8 forces crypto asset service providers to collect reportable transaction and customer data for EU users.
Europe’s crypto reporting fight is now also a personal-security fight.
6. S&P Global Bought OpenZeppelin
CoinDesk reported that S&P Global agreed to acquire OpenZeppelin as it expands deeper into onchain technology risk.
That is a loud signal from a quiet part of the stack. Tokenized finance needs more than prices and legal wrappers. It needs smart-contract review, protocol-risk analysis, upgrade scrutiny, incident response, and standards that bank committees can understand.
S&P already pushed into crypto data through Kaiko. Buying OpenZeppelin adds code-risk muscle to the same institutional-risk map.
The old ratings business measured issuers and instruments. Tokenized finance forces it to measure software too.
7. Ethereum’s Glamsterdam Rehearsal Hit A Bigger Capacity Target
CoinDesk reported that an Ethereum test network raised its gas target toward 200 million gas ahead of a proposed Oct. 6 public test for Glamsterdam.
Yesterday’s Ethereum story was about faster payload propagation. Today’s story is the other half of the same scaling problem: can the network carry more work per block without making validation brittle?
Capacity upgrades are not just numbers on a dashboard. They touch home validators, block builders, clients, fee markets, RPC providers, indexers, and app latency.
The useful signal is sequencing. Ethereum is testing networking and block capacity together, because scaling one without the other only moves the bottleneck.
8. Circle’s Arc Got A Day-One Memecoin Stress Test
CoinDesk reported that Circle’s Arc blockchain was dominated by memecoin activity on its first day.
That materially changes yesterday’s Arc story. The launch pitch was institutional settlement, USDC gas, stablecoin distribution, and BlackRock-adjacent credibility. The first live user behavior looked a lot more like every other open crypto rail: traders found the casino first.
This doesn’t mean Arc failed. It means permissioned validators and institutional branding don’t automatically create institutional usage.
If Circle wants Arc to be settlement infrastructure, it has to prove that serious flows can become louder than the first wave of speculative noise.
9. Bitcoin’s Quantum Migration Looks Like A Wallet Problem
crypto.news reported that Ledger CTO Charles Guillemet argued Bitcoin does not face an immediate quantum-computer crisis, but it does face a long migration problem.
The hard part is not only choosing a post-quantum signature scheme. Wallets, hardware devices, backups, multisig, watch-only flows, old coins, lost coins, and user migration all have to survive the transition.
The SHRINCS draft shows why. It can use smaller stateful signatures, but a reused signing slot can expose enough information for forged signatures. Its stateless fallback is safer operationally, but much larger.
Quantum risk still sounds abstract. Wallet-state failure is not abstract at all.
10. NEAR Crossed $70 Million In Confidential TVL
crypto.news reported that NEAR surpassed $70 million in confidential total value locked, triggering the first snapshot under its private-execution incentive program.
The milestone came through Confidential Intents, NEAR’s private execution system for cross-chain transactions. The first reward pool sets aside 333,333 milestone tokens for eligible users.
This belongs beside the Zcash and Bitcoin privacy stories from the last few days, but the angle is different. Zcash is monetary privacy. Bitcoin is future signature safety. NEAR is testing whether private execution can attract usable cross-chain flow.
Privacy is moving from ideology back into product design. That is a healthier debate.
11. Ethereum Classic Had A Client-Trust Fire Drill
crypto.news reported that several Ethereum Classic mining pool nodes briefly moved to a disputed Core Geth v1.13.0 release before returning to the maintained Argos client.
Classix said 96 commits were pushed within 56 hours without outside review before the release was promoted as a security update. The disputed client also reenabled MESS and changed discovery infrastructure. No blocks, funds, or services were reported affected.
This is a small network-governance story with a large lesson. Node clients are not ordinary app updates. A rushed release can change consensus, networking, miner behavior, and ecosystem trust.
The incident ended quietly. That is good. The warning should not be wasted.
GitHub Trending
Fresh GitHub API results for repos created after Sept. 16 were filtered against the September tracker. I skipped bought-star promotion, game cheats, spoofing tools, suspicious cookie validators, and thin clones.
- nMaas8388/github-ranking-audit (192 stars) - A Python audit tool for GitHub search-ranking signals across repo name, description, topics, README, stars, forks, and activity. Useful for open-source maintainers who want discoverability checks without turning the repo into SEO sludge.
- thruwire/foreman (83 stars) - A fresh software-factory “foreman” built around TypeSpace’s Jev model. Below the usual new-repo star bar, but worth tracking because agent supervision and task routing are becoming their own dev-tool category.
- pengchujin/MacTV (58 stars) - A macOS SwiftUI menu-bar utility for controlling TVs used as Mac displays through HDMI-CEC. Not crypto, but it is a clean productivity signal from the fresh feed after filtering the junk.
Skills Spotlight
I reviewed three fresh agent-skill repos before featuring them and wrote security notes in the vault.
Worldbuilder013/HEXIS (52 stars) | Security: Review before running machines
HEXIS compiles SKILL.md workflows into extended finite state machines, then runs them through local tools or an OpenCode-backed executor. The idea is sharp: make agent procedures less vague by turning them into states, guards, and tool actions.
Security notes: This is a high-trust runner, not a passive skill. The local executor runs model-produced bash through subprocess.run(..., shell=True), and the OpenCode backend can execute native read, write, edit, grep, and bash tools inside the job directory. It reads model endpoint credentials from env vars and warns that traces and prompts can contain tool arguments and shortened results. Use disposable workspaces and scoped keys. Review note: 1. Projects/skill-reviews/2026-09-18-hexis.md.
ccai40359-wq/seanswarm (34 stars) | Security: Safe as protocols, review helper scripts
seanswarm is a compact workflow pack for research fan-out, dual-read document review, single-writer development delivery, and visual acceptance gates across Claude Code, Codex, Cursor, ZCode, and similar hosts.
Security notes: Most of the repo is markdown playbooks and agent role templates. The helper scripts are small and readable: verify-model.mjs calls an OpenAI-compatible endpoint using an env var key, fetch-hard.mjs runs curl and falls back to r.jina.ai, and the screenshot hook writes temporary dirty flags under /tmp. It includes URL guards against localhost and private IPs. Review before wiring hooks or sending private URLs through the fetch helper. Review note: 1. Projects/skill-reviews/2026-09-18-seanswarm.md.
ARahim3/cachebeat (45 stars) | Security: Safe with cost-control caveats
cachebeat is a tiny Claude Code skill that keeps Anthropic prompt cache warm by starting an inactivity-based heartbeat monitor for long idle sessions.
Security notes: The repo contains only README.md and SKILL.md. There are no package manifests, dependencies, network clients, telemetry, or install scripts. The applied skill starts a persistent monitor that reads Claude Code transcript JSONL files and emits heartbeat lines; it can waste quota if abandoned or misconfigured. Use the built-in max-hours guard and stop it when the session won’t be resumed. Review note: 1. Projects/skill-reviews/2026-09-18-cachebeat.md.
Morning Read
Read the SEC exemption, then S&P Global’s OpenZeppelin deal, then Bitcoin’s quantum migration problem.
The number to remember is 38-5.
That was the House tax committee vote. It captures the morning better than another price quote because it shows the new pattern: the big market-structure bill failed, but smaller rule paths are still moving.
This morning’s read is that crypto’s next rules are being written in pieces. The SEC is testing exemptions and 24-hour trading. Congress is still working tax. The FCA is raiding unregistered operators. France is enforcing DAC8. S&P is buying smart-contract risk expertise. Ethereum is testing capacity. Bitcoin is planning for a migration that may take years.
The market wanted one clean bill. It got a messy operating map instead.
Evening Update: Settlement Clocks, RWA Futures, And Faster Chains
Evening prices: BTC $78,067, ETH $2,510.51, SOL $106.23, HYPE $89.16, ZEC $1,478.66, LINK $11.87, UNI $9.16, AAVE $135.97, BNB $749.09, TRX $0.3366, ADA $0.2154.
Friday evening is about regulated venues trying to make crypto’s operating clock less weird.
The morning digest already covered the SEC tokenized-securities exemption, 24-hour U.S. trading talks, crypto tax work, FCA enforcement, France’s DAC8 fight, S&P buying OpenZeppelin, Ethereum capacity tests, Arc’s launch behavior, Bitcoin quantum migration, NEAR confidential TVL, and Ethereum Classic client risk.
Tonight rotates toward Asia and Europe: Hong Kong’s wholesale CBDC settlement plan, Binance’s missing MiCA license, Singapore stablecoin payments funding, RWA futures volumes, Solana’s shorter slot target, Ethereum testnet-builder abuse, XRPL lending amendments, Galaxy’s Kamino vaults, WisdomTree’s tokenized Treasury distribution, bank-embedded crypto access, and Crypto.com’s Nadex securities-futures route.
The useful question: if crypto rails now run through banks, broker-dealers, clearing venues, wholesale CBDC tests, and regulated derivatives entities, how much of the stack still behaves like open crypto when stress hits?
Price snapshot via CoinGecko simple-price data around 18:45 HKT.
12. Hong Kong Wants 24/7 CBDC Settlement For Tokenized Deposits
crypto.news reported that Hong Kong plans to bring 24/7 wholesale CBDC settlement to tokenized deposits by around the end of 2026.
The plan sits under EnsembleTX. HKEX and the HKMA are preparing real-value wholesale CBDC transactions for after-hours derivatives trading, and the HKMA also plans tests involving more than HK$1.3 trillion in Exchange Fund Bills.
That makes Hong Kong’s tokenization push more concrete than another pilot headline. If tokenized deposits can settle through a central-bank money leg outside normal hours, the weekend-liquidity problem gets attacked closer to the source.
The hard part is integration. Venues can run nonstop, but collateral systems, risk teams, legal finality, and treasury desks still have to agree on what “settled” means at 2:00 a.m.
13. Binance Stayed Committed To MiCA Without A License In Hand
crypto.news reported that Binance declined to comment on a Wall Street Journal report about Christine Lagarde’s alleged role in its stalled Greek MiCA application.
The facts that matter for users are simpler. Binance withdrew the Greek application on June 24, missed the July 1 authorization deadline, and still has not announced a new MiCA approval route.
This is Europe’s crypto rulebook becoming a market-access test. MiCA was supposed to let firms use one member-state license across the bloc. If the largest exchange still can’t get through the front door, smaller venues should assume national politics, AML history, stablecoin risk, and ECB priorities can all shape the path.
Regulation is not only text on paper. It is also who gets passporting rights.
14. RWA Futures Volume Reached $107.6 Billion
crypto.news reported that real-world asset futures hit $107.6 billion in monthly volume in July, up 142 fold in nine months.
That roughly matched crypto futures volume of $105.7 billion for the same period. RWA open interest rose 167 fold to $1.72 billion, with equities making up 83% of RWA open interest.
The morning tokenization story was about securities venues getting regulatory room. This one shows the trader side: synthetic exposure to stocks, commodities, and private companies is already moving enough volume to sit beside ordinary crypto futures.
The risk is labeling. A product can feel like a crypto perp while tracking an offchain asset with different market hours, reference prices, corporate actions, and legal claims.
15. Solana Cut Its Slot Target To 250ms
crypto.news reported that Solana reduced its target slot time from 300 milliseconds to 250 milliseconds.
That moves the chain to four targeted slots per second and cuts each validator’s four-slot leader window from 1.2 seconds to one second. The expected epoch length falls from roughly 36 hours to 30 hours.
The useful detail is what did not change. Overall processing capacity remains roughly stable because compute and data limits fall with the shorter slot duration.
This is a latency tune, not a free throughput unlock. Faster clocks improve trading and app responsiveness, but they also pressure validators, networking, block propagation, and monitoring.
16. dtcpay Closed A $25 Million Series A With SBI
crypto.news reported that Singapore stablecoin payments company dtcpay completed a $25 million Series A after SBI Group joined as a strategic investor.
SBI invested through SBI Ventures Asset and the SBI-NTU-Kyobo Digital Innovation Fund in Singapore. MAS lists dtcpay as a Major Payment Institution authorized for six regulated payment services.
This fits the Asia theme neatly. Stablecoin payments are moving from merchant crypto checkout into regulated payment institutions, bank-linked investors, and cross-border commercial rails.
The question is whether these firms win by making crypto visible to users, or by making the crypto part disappear inside settlement and treasury operations.
17. Ethereum’s Glamsterdam Test Now Has A Builder-Abuse Warning
crypto.news reported that Ethereum developers confirmed Oct. 6 Sepolia activation for Glamsterdam while warning about possible builder abuse on testnet.
The worry is specific. Cheap test ether could let disposable builders win block auctions and withhold execution payloads during public testing. Client teams were asked to ship Sepolia-ready releases by Sept. 29, leaving seven review days.
This changes the morning Glamsterdam read. The capacity rehearsal is not just about 200 million gas and bigger blocks. It is also about whether proposer-builder separation behavior can be tested honestly in an environment where the economics are fake.
Testnets are supposed to be cheap. Sometimes that is the attack surface.
18. XRPL 3.4.0 Added Lending Amendments And Protocol Fixes
crypto.news reported that XRPL developers released xrpld 3.4.0 on Sept. 16 with lending changes and bundled protocol fixes.
The LendingProtocolV1_1 amendment adds closed-ended vaults and cash-basis accounting, though mainnet activation still needs sustained validator consensus. The fixCleanup3_4_0 package hardens paths across vaults, AMMs, multi-purpose tokens, escrow, signing, credentials, and permissioned trading.
That is a lot of surface area for one client release. Lending makes XRPL more financially expressive, but it also creates more places where accounting, permissions, and transaction sequencing have to be exact.
Server operators should treat this as infrastructure work, not token-news noise.
19. Galaxy Put Stablecoin Vaults On Kamino
crypto.news reported that Galaxy launched two stablecoin vaults on Kamino, one for USDC and one for USDT.
Galaxy says the strategies use institutional collateral standards, exposure limits, and market monitoring. It reported a $1.4 billion average loan book and 1,741 trading counterparties in Q2, while Kamino says it has originated more than $20 billion in loans with zero lender bad debt historically.
This is Solana DeFi getting a more institutional lending wrapper. The attraction is obvious: curated risk, familiar stablecoins, and a venue with existing loan flow.
The trade-off is trust in the curator. Users are no longer only assessing Kamino markets. They are assessing Galaxy’s standards, selection process, and risk monitoring.
20. WisdomTree And MoonPay Added A Tokenized Treasury Route
crypto.news reported that WisdomTree and MoonPay announced a collaboration to build another U.S. access route to WTGXX, WisdomTree’s tokenized Treasury money market fund.
MoonPay also plans to use WTGXX in stablecoin reserve management. The fund invests in cash, short-term Treasuries, Treasury-backed repos, and registered government money market funds, while MoonPay says its network has more than 35 million accounts and over 1,700 partner businesses.
Tokenized Treasuries are starting to look like distribution infrastructure. The important shift is not only that investors can hold a tokenized fund. It is that payment companies can use the product inside reserve and liquidity management.
That makes the boundary between stablecoin operations and tokenized money funds thinner.
21. Crypto Apps Kept Moving Into Regulated Market Access
crypto.news reported that Coinbase partnered with Stablecore to embed crypto trading, custody, staking, and stablecoin payments into bank systems whose integration footprint reaches more than 3,000 U.S. banks and credit unions.
crypto.news also reported that Crypto.com’s Nadex registration became effective Sept. 14, allowing the venue to trade security futures products while remaining separately regulated by the CFTC as a designated contract market and clearing organization.
Put those two together and the direction is hard to miss. Crypto exchanges want into banks, and crypto apps want into regulated stock-linked derivatives.
That can expand access, but it also makes product identity harder. A user may enter through a crypto brand, but the actual service could be bank software, custody infrastructure, staking rails, stablecoin payments, a CFTC venue, or an SEC-registered security-futures path.
The interface gets cleaner while the regulatory stack gets denser.
Evening Read
Read Hong Kong’s CBDC settlement plan, then the RWA futures volume jump, then Binance’s MiCA licensing problem.
The number to remember is $107.6 billion.
That was July RWA futures volume. It explains why today’s settlement stories matter. Tokenized markets are no longer waiting for a single perfect law, chain, or venue. They are spreading through wholesale CBDC pilots, exchange licensing fights, stablecoin payment companies, bank integrations, tokenized Treasury distribution, and derivatives wrappers.
This evening’s read is that crypto’s next expansion phase looks less like one new app and more like a messy stack of regulated access points.
The opportunity is larger distribution. The cost is that users, builders, and supervisors have to understand which layer actually carries the risk.