The immigration news out of California on Tuesday drew national attention within hours: ICE agents shot a man during a targeted traffic stop near Interstate 5 in Patterson, California, dashcam footage of the incident was obtained and published by KCRA Sacramento, and the FBI immediately took over as the primary investigating agency.

KCRA Sacramento was first to obtain the dashcam footage; KTVU Fox 2 also published the video alongside detailed reporting on the sequence of events. The Stanislaus County Sheriff’s Office confirmed it was assisting the investigation but was not involved in the original stop. ICE officers say they were executing a targeted arrest operation. The shooting happened at the intersection of Sperry Avenue and Rogers Road in Patterson, approximately 90 miles south of Sacramento, and closed the intersection for several hours.

The footage obtained by KCRA shows at least three agents positioned around a black SUV near Interstate 5. The vehicle reverses, with its passenger-side door striking another car on the road. Agents raise their firearms. The car then turns left across a lane divider while one agent moves out of its path. The footage does not contain audio and does not clearly capture the moment gunfire occurs. Multiple news organizations published the video Tuesday afternoon. ICE’s account — that Hernandez drove toward agents — is broadly consistent with the visible movement in the footage, though the full sequence of events is now subject to an FBI investigation rather than a DHS one.

Why the FBI’s Role Matters

DHS has faced a credibility problem in 2026 following incidents where its initial accounts of ICE use-of-force were contradicted by independent video. Most visibly, the Minneapolis shooting of a Venezuelan man in January 2026 — originally described by DHS as occurring after he attacked officers with a shovel — was directly contradicted by new video released by the city. Two ICE officers were subsequently suspended, with the agency stating they “appeared to have made untruthful statements.” The FBI’s immediate assumption of primary investigative authority in Patterson reflects the heightened scrutiny now applied to federal use-of-force incidents involving immigration enforcement, and removes DHS from controlling the evidentiary record.

What the Patterson Shooting Adds to the 2026 Immigration Enforcement Debate

As crypto.news has reported, immigration enforcement policy is one of several US political pressures contributing to economic uncertainty in 2026, with broader market effects tracked across sectors. As crypto.news has noted, political volatility from the Iran war and domestic enforcement controversies has been a consistent factor in the bitcoin price consolidation that has kept BTC range-bound below $73,000 through the first quarter. The FBI investigation is ongoing and no charges have been filed; the full sequence of events on Tuesday remains under active review.

Worldcoin price is trading at $0.2602, down 3.77% on the day, with the lower boundary of a six-month descending channel now pressing directly on price — and the all-time low at $0.2415 offering the only remaining floor before uncharted territory.

The descending channel has been defined by two parallel downward-sloping trendlines since October 2025. The upper boundary sits near $0.4052, and the lower boundary is pressing toward the $0.24 zone. The daily Supertrend at $0.3088 has acted as a rolling resistance ceiling throughout the channel structure, rejecting every recovery attempt in recent weeks. Worldcoin (WLD) has not produced a sustained daily close above the Supertrend since late 2025.

The chart pattern is unambiguous. WLD has produced a textbook descending channel on the daily timeframe across six months, with consistent lower highs and lower lows. The lower trendline is now converging with the all-time low at $0.2415, creating a critical confluence zone. A daily close below $0.2415 would confirm a new historic low for WLD and open a path toward territory the token has never traded on a closing basis.

The daily MACD histogram has crept to 0.0012, barely above zero, while the MACD line at -0.0263 remains above the signal at -0.0375, producing a tentative early crossover. Both lines are still below zero, which means no confirmed bullish reversal signal has printed. The marginally positive histogram indicates only that downward momentum has slowed, not reversed.

Analyst @bpaynews noted on X that WLD “eyes a move near $0.30 as momentum stays bearish on MACD,” adding: “Watch for key level at $0.30 or $0.25.”

Key Levels and Price Targets

Immediate support: $0.2415, the all-time low. A confirmed daily close below this level represents structural deterioration, with no prior support below it on a daily close basis.

Extended downside target: $0.20, the psychological level that aligns with the projected lower boundary of the descending channel over the coming weeks.

Bull case: a daily close above the Supertrend at $0.3088 is the minimum required for a structural shift in bias. A sustained recovery from that level opens the medium-term path toward the upper channel boundary at $0.4052. Invalidation: $0.3088.

On-Chain and Fundamental Pressure

Nansen data shows the total balance of WLD held across centralised exchanges rose over 25% to approximately $742 million in the week ending March 27, as the Worldcoin team moved roughly $26 million in WLD to exchange wallets. Elevated exchange balances increase near-term selling risk, and that dynamic has not meaningfully reversed.

Binance announced the delisting of COIN-M futures for WLD in early April, removing a key leveraged trading venue and reducing derivatives liquidity. Nasdaq-listed Eightco Holdings disclosed a 277 million WLD position worth approximately $326 million on April 2, yet the disclosure produced no sustained upside response, reflecting the depth of sell-side pressure the market continues to absorb.

A daily close below $0.2415 opens a direct path to $0.20. Until WLD reclaims the Supertrend at $0.3088, the descending channel structure keeps the bias firmly bearish.

Bitcoin extended a sharp intraday move higher on Tuesday, rising about 6% within four hours as risk appetite improved in tandem with a broader rally in global equities after news of a two-week ceasefire between the United States and Iran. The swift price surge coincided with a wave of liquidations in Bitcoin futures, totaling roughly $280 million, as traders repriced risk in a volatile macro environment. Yet despite the immediate bounce, derivatives data indicate that the market has yet to establish a durable uptrend above key levels.

Bitcoin’s move has been closely correlated with S&P 500 futures, underscoring how macro headlines continue to drive crypto sentiment. President Donald Trump emphasized that Iran’s nuclear program could be deactivated in exchange for tariff and sanctions relief, a narrative that helped tilt sentiment toward risk-on assets. Still, observers warn the rally may be constrained by ongoing geopolitical uncertainties and a fragile ceasefire, with some voices labeling the truce a temporary pause rather than a lasting resolution. In a separate signal, Vice President JD Vance described the Iran ceasefire as a “fragile truce,” reinforcing the sense that the path forward remains uncertain.

Key takeaways

• The ceasefire between the US and Iran helped lift Bitcoin and global equities, but traders remain sensitive to the durability of that diplomatic development.
• Bitcoin futures saw a $280 million forced liquidation event during the rally, a reminder of the market’s leverage-driven risks even as prices move higher.
• Derivatives metrics show only modest bullish momentum: the two-month futures annualized premium sits near 3%, below the neutral 4% line that has held since late January.
• Put options dominate the options market recently, indicating persistent demand for downside protection even as the price rebounds.
• Regulatory and geopolitical headwinds — from the PARITY Act debates to ongoing energy and inflation dynamics — cap enthusiasm and leave room for abrupt reversals if the ceasefire falters.

Market dynamics: risk-on impulse meets fragile macro footing

Bitcoin’s roughly 6% jump in a matter of hours followed a broad upshift in risk assets after the announced two-week ceasefire. TradingView data illustrate a visible divergence between S&P 500 futures and Bitcoin, with BTC mirroring equities’ risk-on tone rather than moving decisively on the basis of crypto-specific catalysts alone. The immediate move, while sizable, appears tied to headlines rather than a broad change in fundamentals for the asset class.

In the futures market, activity highlighted the fragility of the move. According to data tracked by Coinglass and summarized by Cointelegraph, about $280 million of leverage-driven liquidations occurred as traders rushed to chase the rally. Open interest in Bitcoin futures rose 2.5% to roughly 593,930 BTC, underscoring continued appetite for premium exposure but also exposing participants to sharp reversals if funding dynamics shift. On the day, liquidations of $200 million to $300 million are not unusual in this regime, a pattern observed at several points over the past three months, though this $280 million instance is small relative to the overall futures market, which has hovered around tens of billions in notional exposure.

Two-month Bitcoin futures were priced with an annualized premium of about 3% over spot on Wednesday, a level that has lingered below the longer-run neutral zone of about 4% since late January. The muted premium indicates constrained willingness to fund aggressive bullish bets, even as spot markets gained momentum. In parallel, the options market has shown sustained demand for downside protection; put options have held the lead over call options over the past two weeks, though the gap has retreated from the fear extremes observed in late March.

Regulatory and geopolitical uncertainties temper the glow

Even with the current relief rally, the longer-term trajectory for Bitcoin remains entangled with policy and regulatory developments. The PARITY Act’s latest draft did not include tax exemptions for small Bitcoin payments or deferral options for mining-related gains, a setback that could limit wider mainstream adoption or create friction in payments and mining economics. At the same time, the administration’s regulatory posture continues to evolve, with ongoing scrutiny over crypto markets and tax treatment.

In a broader sense, inflation dynamics and energy prices loom as important macro drivers. Brent crude has held near the mid-$90s per barrel, contributing to persistent inflationary pressure that complicates the Federal Reserve’s policy path. The Fed has signaled caution on rate cuts amid mixed labor-market signals, reinforcing the need for the market to watch macro indicators alongside crypto-specific catalysts. These tensions help explain why even a positive geopolitical development may not translate into a sustained, long-term Bitcoin rally until inflation pressures ease and policy clarity improves.

Beyond policy, market participants balanced claims of de-escalation with the real possibility that any halt in hostilities could be fragile or temporary. The mix of headlines, from potential strategic accommodations to regulatory ambiguity, has kept the downside risk intact while offering only a tentative basis for higher confidence in a durable uptrend.

What to watch next: potential forks in the road for BTC

The coming weeks will be pivotal in determining whether the ceasefire translates into a lasting macro tailwind for Bitcoin or whether the bear case remains intact. Key signals to monitor include: the trajectory of oil prices and broader inflation indicators, any concrete regulatory provisions that offer tax clarity or mining relief, and ongoing diplomatic developments that could alter risk premia across both traditional markets and crypto assets. The two-week ceasefire is a logistical pause, not a cure for structural risks hanging over BTC, making a move to higher levels contingent on more durable macro and policy shifts.

As the market digests these layers, traders will likely keep a close eye on whether Bitcoin can sustain price action above notable levels without becoming vulnerable to an abrupt shift in sentiment. The current data suggests the market remains susceptible to macro-driven reversals even as the near-term risk-on impulse lingers.

Looking ahead, observers should watch for a more decisive break in either direction. If de-escalation takes hold and inflation pressures ease, the case for a broader crypto rally strengthens. If not, the combination of regulatory headwinds and geopolitical risk could reintroduce pressure on Bitcoin and keep the 68,000 level in play as a potential corrective target should sentiment deteriorate again.

Bittensor price is trading at $325.1, down 3.04% on the day, after rejecting a multi-month descending trendline for the second time in two weeks — and the daily MACD has now confirmed a bearish crossover that shifts the near-term bias toward the downside.

Bittensor (TAO) has produced two consecutive failures at the $355 to $371 resistance zone in the past two weeks, forming a lower high on the second attempt and reinforcing the strength of the descending trendline that has capped every recovery since November 2025.

The first rejection came near $371 on March 25, following Bittensor’s halving event and reports of Grayscale Investments raising its TAO weighting to 43.06% in its AI-focused fund. The second attempt reached $355 on April 7, produced a lower high, and reversed. Both rejection points are visible as circled pivots on the daily chart, and TAO has since retraced to $325.1 without recovering above either level.

The daily MACD has confirmed the setup. The MACD line has crossed below the signal, reading 19.6 against a signal of 22.0, with the histogram at -2.4. Both lines remain above zero, which limits the severity of the crossover, but the signal confirms that momentum built during March’s AI-sector rally is fading.

On the 4H chart, the MACD remains technically bullish, with the MACD line at 6.8 above the signal at 5.8 and a histogram of 1.0. The 4H Supertrend at $313.8 continues to act as dynamic support. However, the 4H histogram has compressed sharply from earlier sessions, and a bearish crossover on that timeframe would add meaningful confluence with the daily signal.

Crypto analyst Michaël van de Poppe stated on X that TAO is “approaching one of those regions for dip buying in the coming weeks,” framing the current pullback as “just normal price behavior” following a triple-digit monthly rally. That view supports a base case in which $297.5 holds as a staging ground, not a breakdown level.

Key Levels and Price Targets

Immediate support: the 4H Supertrend at $313.8, followed by the structural demand zone at $297.5, visible on both the 4H and daily charts and flagged as a key floor during the March accumulation phase.

Extended downside target: $263.7, the daily Supertrend. Previous analysis flagged a potential corrective move toward $200 if the pattern repeats from prior golden-cross fractals, though that scenario requires a sustained close below $263.7 to come into scope.

Bull case: a confirmed daily close above $371 invalidates the double rejection and opens the path toward $400. Bear case: a break below $297.5 targets $263.7. Invalidation: $371.

Derivatives and Institutional Context

Coinglass data shows TAO open interest has declined alongside price in recent sessions, consistent with long-side deleveraging rather than aggressive fresh short positioning. That configuration reduces the probability of a sharp squeeze near current levels and suggests the next directional move is more likely to be supply-driven than forced.

Grayscale has also filed with the SEC to convert its Bittensor Trust into a spot ETF and increased TAO’s weighting to 43.06% in its AI fund, making it the fund’s dominant holding. Neither development provides a near-term price floor, but both reduce the probability of a sustained breakdown below key support if broader risk appetite stabilises.

If $297.5 holds on a daily close basis, the base case is a re-test of the $355 trendline. A confirmed break below $297.5 shifts the primary target to $263.7.

TLDR:

• ZachXBT obtained leaked data from 390 accounts on a North Korean internal payment server via infostealer. 
• Over $3.5M moved through network wallets since late November 2025, with one Tron address frozen by Tether. 
• Three OFAC-sanctioned companies — Sobaeksu, Saenal, and Songkwang — appeared directly in the breached data. 
• Workers received IDA Pro cybersecurity training modules, pointing to capabilities beyond basic financial fraud.

A major breach of an internal North Korean payment server has revealed a sophisticated fraud network generating nearly $1 million per month.

On-chain investigator ZachXBT obtained data from an unnamed source, including 390 accounts, chat logs, and crypto transactions.

The leaked data exposed fake identities, forged legal documents, and crypto-to-fiat conversion methods. Since late November 2025, over $3.5 million moved through the network’s payment wallet addresses.

How the Payment Network Operated

The breach originated from a compromised device belonging to a DPRK IT worker infected by an infostealer. Data extracted from the device included IPMsg chat logs, fake identity documents, and browser history.

Investigators traced activity to a site called luckyguys[.]site, described as an internal payment remittance platform. The platform functioned similarly to a messaging app, allowing workers to report payments back to handlers.

Ten users on the platform still had the default password, 123456, unchanged. The user list included roles, Korean names, cities, and coded group names consistent with known DPRK IT worker operations.

Three sanctioned companies appeared in the data: Sobaeksu, Saenal, and Songkwang, all currently under OFAC sanctions.

ZachXBT posted on X that the remittance pattern was consistent across users. Workers transferred crypto from exchanges or services, or converted funds to fiat through Chinese bank accounts via platforms like Payoneer.

An admin account, PC-1234, then confirmed receipt and distributed credentials for various exchanges and fintech platforms.

One user identified as “Rascal” had direct message logs with PC-1234 detailing payment transfers and the use of fraudulent identities from December 2025 through April 2026.

Hong Kong addresses appeared in billing records, though their authenticity could not be confirmed. Two payment addresses were identified: one Ethereum address and one Tron address, the latter frozen by Tether in December 2025.

Using the full dataset, ZachXBT mapped the complete organizational structure of the network, including payment totals per user and group. He published an interactive org chart covering the December 2025 through February 2026 data range.

Training Modules and Broader Threat Context

Beyond financial fraud, the data revealed cybersecurity training activity within the group. According to ZachXBT’s post, the admin sent 43 Hex-Rays and IDA Pro training modules to the group between November 2025 and February 2026.

Topics covered disassembly, decompilation, local and remote debugging, and various cybersecurity subjects. One link sent on November 20 referenced using an IDA debugger to unpack a hostile executable.

A compromised device belonging to a worker identified as “Jerry” showed usage of Astrill VPN and multiple fake personas applying for jobs.

An internal Slack message showed a user named “Nami” sharing a blog post about a DPRK IT worker deepfake job applicant. Another screenshot showed 33 workers communicating on the same network through IPMsg.

Jerry also discussed plans to steal from a project called Arcano, a GalaChain game, with another worker through a Nigerian proxy.

Whether that attack proceeded remains unclear. The investigator noted this cluster is less sophisticated than groups like AppleJeus and TraderTraitor.

ZachXBT stated in a post that DPRK IT workers collectively generate multiple seven figures per month, and this data supports that estimate.

He added that threat actors are missing an opportunity by not targeting these lower-tier DPRK groups, citing minimal competition and low repercussion risk. He confirmed plans to continue publishing findings through his investigation platform.

Anthropic, the $380 billion AI giant responsible for the Claude tool, has a new AI model called Mythos that could become a crypto hacking nightmare.

Concerned about global panic if it were to release its frontier model too soon, Anthropic handed early “Mythos” access to JPMorgan Chase, Apple, Microsoft, and a few dozen other blue chip tech companies.

Unfortunately, Anthropic didn’t grant guest list access to any crypto company for its paternalistic Project Glasswing.

One Bitcoin developer asked Anthropic directly, “Why not cooperation with bitcoin/crypto projects?” Anthropic declined to reply.

JPMorgan Chase got a head start. Crypto didn’t.

A wing of glass preventing Mythos from hacking crypto

Anthropic’s Glasswing cybersecurity sprint is permitting 50-60 companies early access to its unreleased model that “can find software vulnerabilities better than all but the most skilled humans,” according to the company. 

It is also donating $4 million worth of AI credits and is “committing” up to $100 million in AI credits for Glasswing.

According to Anthropic, which obviously has an incentive to praise the powers of its unreleased model for media and fundraising purposes, Mythos has strong reasoning and coding skills and is considerably more dangerous as a software hacking tool than most human developers.

Anthropic claims Mythos is “very autonomous” and has already found “thousands of high-severity vulnerabilities,” including bugs in “every major operating system and web browser.” 

It withheld details about most of those bugs, except a 27-year-old bug in OpenBSD Unix software and a 16-year-old flaw in FFmpeg video software.

Curiously, Anthropic has published professionally staged and videotaped promotional materials in which Anthropic stakeholders sound alarms about Mythos’ capabilities.

For media purposes, it carefully selected the name “Glasswing,” which refers to the Greta oto butterfly whose transparent wings resemble glass.

Bitcoin (BTC) rallied above $72,000 on Tuesday as BTC order book and derivatives data showed buyers returning to the market.

Bitcoin’s recent trading history suggests that holding the $70,000 level is the first task bulls need to master, but previous BTC price rallies were capped by short-term traders selling into the bullish momentum. Will this time be different?

Bitcoin spot demand remains positive

Bitcoin held above $71,300 on Wednesday as the spot market demand strengthened over the past few days. The order flow across major exchanges shows a clear shift toward investor accumulation.

The 30-day spot net volume delta for Bitcoin, which tracks the net difference between market buys and sells, has turned positive on both Binance and Coinbase after persistent selling in February.

Binance’s 30-day net volume moving average stands at $43.2 million, while Coinbase records $13.88 million. This marks a coordinated shift in behavior across the key crypto exchanges.

The derivatives data adds weight to the move. CryptoQuant data shows Binance’s cumulative volume delta (CVD) has increased to $5.6 billion on Wednesday, up $3.3 billion in April. The CVD measures the aggressive market orders, and the recent rise tracks an increase in taker-buy volume following Bitcoin’s brief drop below $65,000 on March 30.

The current cumulative net taker volume on Binance has reached its highest level since early February, when CVD stood near $74 million. This indicates stronger buyer conviction than the muted activity seen during the previous consolidation phase.

Related: Bitcoin fades three-week highs as BTC price shrugs off Iran war ceasefire

$72,000 is Bitcoin’s line in the sand

Bitcoin’s interaction with $72,000 continues to shape its short-term positioning. The level has acted as a resistance since Feb. 4, with failed attempts to reclaim it on March 4 and March 16. Both rallies were met with sharp selling from the short-term holders, who sold roughly 26,000 BTC and 31,000 BTC, respectively.

The current behavior shows a different pattern. After BTC’s rally to $72,000 on Tuesday, data shows short-term holder capitulation of nearly 3,000 BTC. The reduced selling pressure signals less urgency to exit positions at the current levels than in prior attempts.

The profitability metrics are also stabilizing. Bitcoin’s net realized profit/loss seven-day moving average sits at -$109 million, recovering from a low of -$2 billion on Feb. 7. The metric is approaching a positive bias for the first time since Jan. 22, indicating a gradual reduction in realized losses.

The reduced selling pressure and rising profitability point to a more balanced market in which buyers are gradually absorbing available supply. For a bullish expansion to occur, the trend needs to continue and the buyers need to defend the $70,000 to $72,000 zone over the next few days. 

Related: Cango sells 2,000 BTC, cuts Bitcoin production cost by 19% in March