A $550,000 community audit contest uncovered two critical vulnerabilities in XRP Ledger features that could have drained user accounts without private keys. The findings reveal how Ripple’s audit-before-release model diverges sharply from the broader crypto industry’s patch-after-exploit norm.

XRP Ledger version 3.3.0 shipped on August 6, 2026, carrying five proposed amendments and a bundled cleanup patch. On paper it looked like a routine infrastructure release. Underneath, the update represented the conclusion of a six-month security gauntlet that caught two account-draining bugs, rewrote two entire feature implementations from scratch, and paid hundreds of thousands of dollars to outside researchers who found problems the internal team had missed. The process raises a pointed question for the wider blockchain industry: if Ripple can catch critical flaws before deployment, why does so much of crypto still treat security audits as a post-launch checkbox?

This piece breaks down what the two critical vulnerabilities actually were at a technical level, examines how the audit-vote-activate pipeline compares to competing chains’ security models, and assesses whether the findings strengthen or undermine the case for XRPL as institutional-grade infrastructure.

What the Sherlock contest actually found

The scope covered five pillars of upcoming XRPL functionality: Batch Transactions, Permission Delegation, Multi-Purpose Token (MPT) DEX integration, Confidential Transfers for MPTs, and Sponsored Fees and Reserves. Sherlock, a Web3 security firm that ranks researchers by performance and structures engagements as adversarial contests, opened the audit on April 13, 2026, with a $550,000 RLUSD prize pool. The contest page on Sherlock’s platform listed the engagement as “XRP Ledger – April 2026 Contest – 550,000 RLUSD,” signaling that Ripple paid the bounties in its own stablecoin.

Over two weeks, participants submitted reports that surfaced 96 valid findings: 2 critical, 6 high, 29 medium, and 59 low-severity issues. Ripple distributed $309,000 in RLUSD to contributors. The remaining pool covered Sherlock’s operational costs and lower-tier findings that did not meet the payout threshold.

The contest marked the first formal collaboration between Sherlock and Ripple, and it arrived at a moment when the XRP Ledger’s feature pipeline was expanding faster than at any point in its history. Five amendments shipping simultaneously meant five distinct attack surfaces, each with its own transaction logic, authorization model, and cryptographic requirements. For context, Sherlock’s audit contest model has previously been used by protocols including Aave, Euler, and Olympus DAO, but an engagement covering C++ protocol-level code for a layer-one blockchain was atypical for a platform more commonly associated with Solidity smart contracts.

The severity distribution itself tells a story. The 29 medium-severity findings suggest a category of bugs that would not individually compromise accounts but could create unexpected behavior under specific transaction sequences. The 59 low-severity issues likely include code quality concerns, documentation gaps, and edge cases that could compound under adversarial conditions. The two critical and six high-severity bugs, however, represented exploitable vulnerabilities that warranted immediate remediation.

The Batch amendment bug that could have emptied accounts

The most dangerous vulnerability predated the Sherlock contest by two months. On February 19, 2026, security researcher Pranamya Keshkamat and Cantina’s autonomous AI audit tool Apex independently identified a signature-validation flaw in the original Batch amendment while it was still in its validator voting phase.

The technical failure was precise. Batch Transactions allow up to eight operations to execute atomically under a single outer transaction. The outer transaction’s signature-validation code contained an early-exit condition that could be satisfied without properly verifying who was authorizing the inner transactions. In practice, an attacker could have constructed a Batch transaction containing inner Payment operations targeting a victim account, draining it down to its reserve balance, without ever holding that account’s private keys. The same logic gap would have permitted unauthorized AccountSet, TrustSet, or AccountDelete operations.

The vulnerability disclosure report published on xrpl.org detailed the mechanics: the signer check in the outer transaction could pass without confirming that the entity submitting the batch actually controlled the accounts referenced in the inner transactions. This meant that the atomicity feature designed to improve user experience could have been weaponized to empty any account on the network in a single transaction.

RippleX responded with an emergency release. Rippled version 3.1.1, published on February 23, 2026, four days after discovery, marked both the original Batch amendment and its companion fixBatchInnerSigs as unsupported, preventing validators from voting on or activating them. No funds were lost because the amendment had not yet cleared the 80% validator threshold required for activation. The replacement, BatchV1_1, shipped in version 3.3.0 with the early-exit condition removed, additional authorization guards added, and the signing check scope tightened to verify each inner transaction against the correct signer independently.

Permission Delegation’s silent fee-drain exploit

The second critical vulnerability operated through a subtler mechanism. A September 2025 disclosure documented how the original Permission Delegation implementation allowed an attacker to silently bleed a victim account’s XRP balance without accessing its keys.

The exploit relied on a design feature of the XRP Ledger’s transaction processing that has existed since the network’s earliest days. On XRPL, a transaction that fails with a “tec”-class error still incurs a fee charge, while errors caught earlier in the pipeline, before signature verification, do not. This distinction exists because tec-class failures indicate transactions that were properly formed and signed but failed for business-logic reasons, and the fee prevents spam. Permission Delegation’s original code checked whether a delegate account held the relevant permission before it verified the transaction’s signature. An attacker could repeatedly submit invalid offline-signed transactions with elevated fees against a delegated account, and each failed transaction would still deduct the fee from the victim’s balance.

The economic impact would have compounded quickly. Because the attacker could set arbitrarily high fees on these transactions, a sustained attack could drain an account far faster than normal transaction fees would suggest. The victim would see their balance declining with no corresponding outbound payments, making the attack difficult to diagnose without examining raw transaction metadata.

The fix reclassified the relevant error from tec to ter and reordered the checks so that no fee can be deducted before signature verification passes. The replacement amendment, PermissionDelegationV1_1, carries a default “No” designation in the 3.3.0 registry, meaning validators must actively vote to enable it. This conservative default reflects the sensitivity of the original flaw: even after the rewrite, Ripple chose to require explicit validator opt-in for the feature.

Why both rewrites shipped in a single release

Packaging two security-rewritten amendments alongside three entirely new features in one version was a deliberate choice. RippleX published xrpld 3.3.0 on August 6, 2026, with the code for all six proposals (including a bundled cleanup amendment called fixCleanup3_3_0) present but none of them activated. Under the XRP Ledger’s amendment process, each proposal must sustain more than 80% validator support for two consecutive weeks before going live.

This separation between code availability and feature activation is a structural advantage that most smart-contract platforms lack. On Ethereum, a deployed contract is live the moment it hits the blockchain. On XRPL, code can ship, undergo further review during the voting window, and still be blocked if validators lose confidence. The Batch and Permission Delegation rewrites had already survived the Sherlock contest, a Halborn re-audit that found zero critical or high-risk issues, and months of internal testing. The voting period adds yet another layer of defense before any code touches real funds.

The version also retired five legacy amendments, including Clawback, fixDisallowIncomingV1, fixInnerObjTemplate, fixNFTokenReserve, and fixUniversalNumber, removing dead code paths that could otherwise accumulate as latent attack surface over time.

The five feature amendments in 3.3.0 represent the broadest single expansion of XRPL capabilities to date. Confidential Transfers bring EC-ElGamal encryption and zero-knowledge proofs to Multi-Purpose Tokens, shielding individual balances and transfer amounts from public view while preserving compliance access for authorized parties. Sponsored Fees allow applications to cover network costs on behalf of users, addressing the onboarding friction that has kept consumer-facing applications off decentralized networks. DynamicMPT lets issuers modify token properties after creation, supporting evolving regulatory and business requirements. Together with the Batch and Permission Delegation rewrites, these features target a specific audience: regulated financial institutions that need privacy, atomic settlement, and delegated operations without sacrificing auditability.

Audit before release versus patch after exploit

The contrast between Ripple’s approach and the broader industry’s security track record is stark. DeFi exploits exceeded $840 million across more than 50 incidents in the first five months of 2026, a 70% year-over-year increase over the same period in 2025. North Korea-linked actors accounted for 76% of global crypto hack losses in the first four months of the year. And the most damning statistic: 70% of exploited contracts had been audited but lacked any form of post-deployment monitoring. Only 4% of tracked projects combined audits, active bug bounties, and third-party monitoring controls together.

The Ethereum ecosystem, home to the largest concentration of smart-contract value, operates under a fundamentally different security model. Contracts deploy to mainnet through an immutable transaction. If a vulnerability surfaces afterward, the options are limited: deploy a new contract and migrate users, implement a proxy upgrade pattern that introduces its own attack surface, or accept the risk. The Wormhole bridge hack of 2022 cost $320 million because a deprecated verification function remained in production code. Ronin’s August 2024 exploit cost $12 million because a contract upgrade failed to initialize operator weights correctly. In both cases, audits had been performed; the failures happened after deployment.

The KelpDAO hack on April 18, 2026, which drained approximately $293 million, was the largest single DeFi exploit of the year. The Drift Protocol exploit on Solana on April 1, which cost roughly $286 million, was the largest ever recorded on that chain. These figures are not fringe events. They represent the baseline failure rate of an industry that has collectively lost $16.69 billion to hacks, bridge exploits, and security incidents according to DeFiLlama data.

XRPL’s amendment voting process inverts this sequence. Code ships in a release, but features remain dormant until validators approve them. During the voting window, researchers, node operators, and competing auditors can examine the live codebase with full context. If a problem surfaces, validators simply withhold their votes. No emergency patch, no migration, no proxy contract. The February 2026 Batch bug followed exactly this path: the amendment was in its voting phase, the vulnerability was identified, and an emergency release prevented activation. Zero funds at risk, zero user impact.

This is not to say that the XRPL model is flawless. The amendment process works for protocol-level features but does not extend to applications built on top of the ledger. A poorly coded trust line or MPT integration could still lose funds. And the 80% validator threshold creates its own risks: if too few validators upgrade to a new version, legitimate security patches can stall. But for core protocol changes, the audit-vote-activate pipeline represents a materially different security posture than deploy-and-hope.

What this means for XRPL’s institutional pitch

Ripple has spent 2026 building an institutional infrastructure stack at an aggressive pace. The $1.25 billion acquisition of Hidden Road, a multi-asset prime broker rebranded as Ripple Prime, gave the company a regulated on-ramp for traditional finance. RLUSD reached a $1.72 billion market capitalization in under a year and moved more than $18 billion in transaction volume during Q1 alone. Goldman Sachs disclosed a $153.8 million position across four XRP ETFs. Ripple secured a full Electronic Money Institution license from Luxembourg in February, UK Financial Conduct Authority permissions in January, and a MiCA Crypto-Asset Service Provider license on July 6.

The institutional DeFi features arriving in version 3.3.0 are the technical counterpart to this business development push. Confidential Transfers address the privacy requirements of banks that cannot expose transaction details on a public ledger. Sponsored Fees solve the onboarding friction that has kept retail banking applications off decentralized networks. Permission Delegation, once its rewrite clears the voting process, enables the kind of controlled access models that compliance departments require.

But institutional adoption depends on trust, and trust in blockchain infrastructure ultimately comes down to security track record. The fact that Ripple caught two critical bugs, rewrote two entire feature implementations, paid outside researchers $309,000 to find problems, and still delivered all five features on schedule is a stronger institutional selling point than any individual feature. It suggests a security culture where finding bugs is rewarded and where shipping is subordinate to verification.

Over 300 financial institutions across 55 countries currently use RippleNet, with active On-Demand Liquidity corridors in more than 70 markets. For those institutions, the Sherlock audit results are not abstract. They are evidence that the code running their cross-border payments has been stress-tested by adversarial researchers with financial incentives to break it. Ripple’s four-phase quantum-resistance roadmap, targeting completion by 2028, further signals that the company is engineering for institutional time horizons measured in decades, not deployment cycles.

The opposing case: why skeptics are not convinced

The strongest argument against reading too much into the Sherlock audit runs in two directions.

First, finding 96 bugs before release can be framed as evidence of thorough testing or evidence of sloppy development. Both the Batch and Permission Delegation vulnerabilities were in the original implementations, meaning they cleared internal review before external researchers caught them. The February 2026 Batch bug was not identified by Ripple’s own team but by an independent researcher and an AI tool. If external auditors are the primary safety net, the internal development process may have quality gaps that will eventually produce a vulnerability that no external reviewer catches in time.

Second, the XRPL amendment model’s strength, the ability to prevent activation during the voting window, is also a speed constraint. Ethereum’s willingness to deploy and iterate has enabled a pace of innovation that XRPL cannot match. The five amendments in version 3.3.0 have been in development and review cycles for months. The original Batch amendment was proposed in 2025. For protocols competing for developer attention in fast-moving markets, a six-month security pipeline may be too slow to attract the builder ecosystem that drives network effects.

There is also a concentration risk in the validator set. The 80% activation threshold means that a relatively small number of validators, many of which are operated by entities with close ties to Ripple, control whether amendments go live. Critics argue this is not truly decentralized governance but a curated approval process dressed in consensus language. When Ripple’s own validator voted “yes” on lending amendments in recent weeks, it underscored how much influence the company retains over its nominally decentralized network.

Finally, the $309,000 payout from a $550,000 pool raises a practical question about incentive alignment. Top-tier security researchers command rates that exceed what contest models typically pay per hour of effort. If the most skilled auditors skip XRPL contests because the expected payout per finding is lower than private engagements, the adversarial review may be broad but not deep enough to catch the most sophisticated attack vectors.

These objections have weight. XRP traded near $1.03 in late July 2026, roughly 71% below its $3.65 cycle high set on July 17, 2025, suggesting the market has not yet priced in the institutional narrative. Whether the security track record translates into adoption depends on factors beyond code quality: regulatory clarity, competitive positioning against Ethereum layer-2 solutions, and whether institutions care more about pre-deployment audits than they do about ecosystem size.

The Iran conflict grounded flights, cratered Maldives tourism arrivals by double digits, and forced the Trump family’s crypto venture to shelve what was billed as the world’s first tokenized luxury hotel development. The episode exposes a structural question the real-world asset market has avoided: what happens to a token when the real world breaks?

On February 19, 2026, World Liberty Financial announced one of the most ambitious experiments in real-world asset tokenization: a partnership with BlackRock-backed Securitize and London-listed developer Dar Global to tokenize loan revenue from a Trump-branded luxury resort in the Maldives. Six months later, no token has been sold, no new launch date has been set, and the project sits in indefinite limbo. The reason is not a smart-contract exploit or a regulatory crackdown. It is a war. This piece examines what the delay reveals about the fragility of tying digital tokens to physical assets in unstable regions, the broader track record of the venture behind the deal, and whether the growing RWA market has priced in the risks that the real world routinely delivers.

The deal that was supposed to make history

The Maldives token project was conceived as a first-of-its-kind offering. Unlike previous tokenization efforts that wrapped completed properties in digital securities, WLFI and its partners proposed tokenizing the development phase itself. The token, designated MALD1 on the Securitize platform, would represent interests in loan servicing revenue tied to construction financing for Trump International Hotel and Resort, Maldives.

Dar Global, a subsidiary of Saudi Arabia’s Dar Al Arkan Real Estate Development Company and listed on the London Stock Exchange, is building the resort on a private island roughly 25 minutes by speedboat from Male. Plans call for approximately 100 ultra-luxury beach and overwater villas designed to offer what Dar Global described as “the highest levels of privacy, exclusivity, and sophistication.” Completion is targeted for 2030. The Trump Organization is licensing its brand and hospitality management standards, marking the brand’s first property in the Maldives.

WLFI and Securitize handle the tokenization layer, issuing securities under Rule 506(c) of Regulation D for accredited U.S. investors and Regulation S for non-U.S. persons in offshore transactions. Securitize, which has handled tokenized fund issuances for BlackRock, Hamilton Lane, and Apollo Global, serves as the registered transfer agent and compliance engine for the offering.

Holders of MALD1 tokens would receive a fixed yield, a share of ongoing loan proceeds, and a cut upon any eventual sale of the underlying loan positions. The structure was carefully designed to offer economic exposure without conferring direct property ownership, sidestepping the legal complexities of cross-border real estate title transfer that have stalled earlier tokenization projects in multiple jurisdictions.

When the partnership was announced, Zachary Folkman, a WLFI co-founder, called it “a new model for how real-world value meets blockchain transparency.” The plan was to open sales to qualified investors by spring 2026. Spring came and went.

How a war grounded the token sale

The conflict between the United States, Israel, and Iran that escalated in early 2026 sent shockwaves far beyond the Middle East. Brent crude prices surged from around $70 to over $110 per barrel in March before settling into the $95 to $100 range, and global capital flows into risk assets slowed sharply. For the Maldives, the most immediate effect was the closure of key air corridors over the Gulf region. Airlines that route through the Persian Gulf, including major carriers from the Middle East and South Asia, suspended or rerouted flights, severing connectivity to the Indian Ocean archipelago that depends on air travel for virtually all of its tourist arrivals.

The numbers were stark. Tourist arrivals to the Maldives fell 23.4% in the first week of March 2026 compared with the same period in 2025, according to official data from the Maldives Ministry of Tourism. Average daily arrivals in early March dropped 41.5% compared with February averages. The Maldivian government projected a revenue shortfall of $80 million to $100 million if disruptions persisted for a single month, a serious figure for an economy where tourism accounts for more than 60% of foreign exchange receipts. Even as some viral claims of a 90% tourism collapse proved overstated, the real decline was severe enough to force the government to introduce new visa categories in an effort to attract visitors from unaffected regions.

For a token backed by loan revenue from a resort that does not yet exist, the implications were severe. Construction timelines depend on the movement of materials, labor, and capital through a region that was suddenly difficult to reach. Projected occupancy rates and revenue models, the very inputs that determine the value of MALD1’s yield, became unreliable. Selling a fixed-income token to accredited investors requires credible financial projections, and credible projections require a stable operating environment. No responsible issuer would price a yield curve against a tourism market in freefall.

Bloomberg reported on August 13 that the token sale had been indefinitely postponed, with sources attributing the delay directly to war-driven travel disruptions. Dar Global’s CEO, Ziad El Chaar, offered a carefully worded statement about reviewing schedules but provided no timeline for resumption. The absence of a target date is itself a signal: the company does not know when conditions will allow a credible offering.

WLFI’s track record under scrutiny

The Maldives delay does not exist in isolation. It arrives at a moment when World Liberty Financial’s broader trajectory has drawn increasing skepticism from investors, regulators, and industry analysts.

WLFI launched its governance token sale in October 2024, initially targeting $300 million by selling 20 billion tokens at $0.015 each. Early demand was anemic: only $11 million trickled in during the first phase, and the team slashed its target to $30 million. Then momentum shifted, driven in part by the political attention surrounding the Trump family’s involvement. A second tranche of 5 billion tokens at $0.05 each brought the total raise to $550 million from more than 85,000 participants.

The Trump family’s financial interest in the project is substantial. According to public disclosures, the family receives 75% of net proceeds from WLFI token sales. Trump himself is listed as “co-founder emeritus,” and his 2025 income from the venture was reported at roughly $800 million, making World Liberty Financial one of the most lucrative crypto ventures in history by founder returns.

But the token’s secondary market performance has been punishing. WLFI peaked at approximately $0.331 in September 2025 and then entered a sustained decline, falling to around $0.055 by late July 2026, a drop of roughly 83%. Public estimates indicate that WLFI holders have absorbed $674 million in combined realized and unrealized losses. In April 2026, Forbes reported that WLFI had borrowed $75 million on its own platform, prompting one analyst to warn investors not to become “exit liquidity.”

Governance disputes have compounded the price decline. In April 2026, Tron founder Justin Sun, one of WLFI’s largest individual investors with approximately $75 million in purchases, filed a federal lawsuit alleging that WLFI froze 540 million of his unlocked tokens and 2.4 billion locked tokens and excluded him from governance activities. Sun claimed the contract contained an undisclosed blacklist function that was never disclosed to investors. WLFI countersued in May, accusing Sun of defamation and alleging that he engaged in short selling to suppress the token price and made straw purchases on behalf of undisclosed third parties. The litigation remains unresolved, and the WLFI token fell 15% to a record low after Sun publicly accused the project of embedding a backdoor.

On the product side, WLFI’s USD1 stablecoin has been a notable success by supply metrics, reaching $5.3 billion in circulation by mid-2026. It became a settlement asset on Binance’s perpetual futures markets and was selected as the payment vehicle for Abu Dhabi investment firm MGX’s multibillion-dollar Binance stake. However, concentration risk is pronounced: Binance holds approximately 87% of all USD1 in circulation, raising questions about the stablecoin’s decentralization claims and its vulnerability to a single exchange relationship.

When tokenized assets meet physical reality

The Maldives delay crystallizes a category of risk that the RWA tokenization industry has largely discussed in theory but never confronted in practice. Tokenized U.S. Treasuries or money-market funds, the segments that dominate the current $26 billion to $34 billion RWA market, are backed by assets that exist as electronic entries in regulated custodial systems. They do not depend on weather, geography, or geopolitics. Their yields are predictable because the U.S. government’s capacity to service its debt is, for practical purposes, not affected by whether flights are operating over the Persian Gulf.

Tokenized real estate is fundamentally different. The underlying asset is immovable, jurisdiction-specific, and vulnerable to physical disruption. A resort in the Maldives faces cyclone risk, sea-level rise, political instability in the host country, and, as the current episode proves, conflict in adjacent regions that can sever the transportation links on which the entire business model depends.

The MALD1 token adds additional layers of abstraction. Investors do not own a share of the resort. They own a token representing a share of servicing income from loans used to finance the resort’s construction. If construction delays push the completion date past 2030, if occupancy projections prove optimistic in a region shaken by conflict, or if Dar Global encounters financial difficulties, the yield that makes MALD1 attractive could shrink or vanish entirely. The investor is three steps removed from the physical asset: token to loan servicing rights to loan to resort to tourist spending. Each link in that chain introduces its own failure mode.

This is not a hypothetical concern. The history of tokenized real estate is littered with projects that promised liquidity and delivered illiquidity. Industry analyses of the first wave of tokenization projects, roughly 2019 through 2023, identified three recurring failure modes: legal non-recognition of tokenized title, tiny investor pools restricted to accredited buyers with five-figure minimums, and the absence of market-making infrastructure to support secondary trading. Less than 10% of tokenized real estate projects from that era showed meaningful secondary market volume. Projects that prioritized speed over structural integrity during 2025 faced enforcement actions, platform shutdowns, and investor litigation, particularly when tokens moved to unverified wallets and triggered anti-money laundering investigations.

The MALD1 structure addresses some of these issues. Securitize is a regulated transfer agent with deep experience in compliance infrastructure. The loan-revenue model avoids the title-transfer problem. But no amount of structural engineering can hedge against a war that closes airspace and craters the tourism market on which the underlying asset depends.

The case for WLFI and tokenized hospitality

A fair analysis requires stating the opposing case at full strength. Proponents of the Maldives project, and of RWA tokenization more broadly, would argue that the delay is precisely what a responsible issuer should do. Launching a token sale into a disrupted market would expose investors to mispriced risk and potentially trigger regulatory scrutiny. By waiting, WLFI and Securitize are protecting investors, not failing them.

There is also a structural argument. Deloitte projects that tokenized real estate will reach $4 trillion in value by 2035, implying a 27% compound annual growth rate. If that projection holds, first movers in luxury hospitality tokenization will have secured a durable competitive advantage. The Maldives project, precisely because it tokenizes the development phase, offers investors exposure to the highest-growth period of a real estate asset’s lifecycle, when value appreciation is steepest.

The broader WLFI ecosystem, despite its token price decline, has delivered real products. USD1 is one of the largest stablecoins in circulation. The subsidiary WLTC Holdings applied in January 2026 for an OCC national trust bank charter covering stablecoin issuance, redemption, and custody. If approved, it would give WLFI a regulated banking entity, a significant competitive moat that few crypto-native ventures can match.

Regional peers offer precedent for optimism. The Dubai Land Department launched a controlled tokenization pilot in February 2026 that explicitly tests governance, investor protection, and operational readiness for secondary market resale. Saudi Arabia’s Open World launched the country’s first licensed RWA Tokenization Center of Excellence in Al Khobar in January 2026, targeting energy, real estate, and carbon credits. The institutional infrastructure is being built, even if the Maldives project is temporarily sidelined.

What would invalidate the bearish thesis? If the Iran conflict resolves or de-escalates enough to restore Maldives air connectivity, if Dar Global delivers construction milestones on schedule, if the MALD1 token launches with strong investor demand and develops meaningful secondary trading, and if WLFI’s governance disputes with Justin Sun reach a resolution that restores market confidence, then the delay will look like prudent risk management rather than a structural flaw. Each of these conditions is plausible. Whether they are probable is a different question.

Bitcoin Red Team has expanded its AI-assisted security review to 501 Bitcoin-related open-source projects, logging 7,958 findings in its latest detailed tally after 108 hours of work. 

Calle, a pseudonymous Bitcoin developer involved in the effort, said on Aug. 13 that the team has now completed a basic scan of almost the entire Bitcoin open-source ecosystem and that much of the easier-to-find vulnerability surface has already been examined.

The headline numbers require an important distinction. The 7,958 findings do not represent 7,958 confirmed exploitable vulnerabilities. The team classified 1,280 as high or critical, while 24.7% of all findings had been dynamically reproduced and 29.4% had been reported upstream at the 108-hour mark. Maintainer review and human reproduction remain part of the verification process.

Kimi K3 has become a security force multiplier

Calle said two weeks of work with Moonshot AI’s Kimi K3 exposed how quickly modern models can examine years of accumulated open-source code. He described the situation as a “massive collision” between older software and frontier AI, adding “everything is broken, bitcoin is burning.” The wording is his characterization and should not be read as evidence that Bitcoin Core or every Bitcoin project is compromised.

Independent testing supports the narrower point that Kimi K3 has meaningful cybersecurity capability. A joint U.K. AI Security Institute and U.S. CAISI assessment found the model outperformed GLM-5.2 on exploit-development testing but remained behind the strongest U.S. closed models. Kimi K3 scored 32% on ExploitBench and reached arbitrary code execution on zero of 41 samples in that test.

Bitcoin Red Team’s earlier sweep found 4,962 potential issues across 390 Bitcoin projects, including 720 then classified as high or critical. The newer tally shows the review expanded materially after that first wave.

Maintainers are already validating and patching findings

The campaign has moved beyond automated scanning. BTCPay Server’s official GitHub release credited Bitcoin Red Team researchers Bruno Garcia and Ben Carman with reporting a critical vulnerability that was already being exploited. Version 2.4.2 fixed a two-factor authentication bypass affecting Greenfield Basic Authentication.

BTCPay later confirmed that attackers had obtained LND admin macaroon credentials from affected installations and used them to access connected Lightning wallets. The project said it was processing additional reports from Bitcoin Red Team, Project Loupe, Magic Grants and independent researchers while strengthening its scanning and review processes.

On Aug. 14, BTCPay announced another security-focused release candidate, v2.4.3-rc4, addressing vulnerabilities reported by those groups. In related coverage, BTCPay supporters backed a recovery bounty after the earlier exploit and the foundation pledged 0.21 BTC to the Bitcoin Red Team fund.

Those fixes give concrete evidence that maintainers are validating at least some serious Red Team reports. They do not validate every item in the 7,958-finding dataset. AI-assisted audits can produce false positives, duplicate reports and severity assessments that change after manual investigation, making verification central to interpreting the numbers.

Bitcoin projects face a faster security cycle

Calle argued that unmaintained projects should now be treated with greater caution because AI has sharply lowered the cost of finding and testing weaknesses. He also said response time is becoming a useful indicator of project health and that maintainers will increasingly need their own continuing AI audit pipelines rather than occasional external reviews. Those are Calle’s conclusions from the campaign rather than universal security rules.

The wider ecosystem is already moving in that direction. OpenSats has created a fast-tracked red-teaming grant route focused partly on reimbursing researchers for LLM costs. More than 40 Bitcoin and digital-asset organizations have also asked leading AI laboratories to give vetted open-source defenders controlled access to frontier models.

As crypto.news reported, the industry coalition warned Bitcoin developers could fall behind attackers without access to advanced AI models. The request does not seek unrestricted access. It proposes vetted researchers, secure environments, sufficient compute and direct communication channels with AI security teams.

The next phase is likely to move more slowly than the initial sweep. Automated discovery can scale quickly, while reproduction, responsible disclosure, patch development and regression testing require more time. Projects receiving reports must determine which findings are exploitable, how urgently users need updates and when technical details can safely become public.

For Bitcoin users, the takeaway is narrower than the largest numbers suggest. The Red Team has reported a large volume of potential weaknesses across Bitcoin-related software, not evidence that Bitcoin’s base consensus protocol has failed. The immediate security concern centers on wallets, Lightning infrastructure, payment software and libraries carrying older or lightly reviewed code.

A USENIX Security ’26 study has identified 65,340 high-risk address instances across Ethereum and BNB Smart Chain, linking them to 126,982.94 ETH and 17,726.7 BNB in native-token losses. 

The paper, presented at the 35th USENIX Security Symposium in Baltimore, estimates their dollar value at more than $574.8 million.

The dollar figure needs context. The researchers say they valued the token losses using reference prices of $4,408 per ETH and $847 per BNB rather than prices at the time of every transaction. They describe their findings as a “conservative lower bound” because the analysis covers only native ETH and BNB on the two networks and may miss less obvious cases.

Ethereum address misuse spans contract and private-key risks

The researchers divide “Address Misuse” into two categories. Contract Account misuse happens when users treat an address without deployed contract code as a contract address, often because the same address is used in another network context. The study identified 49,344 such instances, associated with losses of 22,738.41 ETH and 8,681.41 BNB.

Externally Owned Account misuse involves addresses whose private keys are exposed or show strong onchain signs of compromised control. Researchers identified 15,996 EOA misuse instances associated with 104,244.53 ETH and 9,045.29 BNB in losses. More than 95% of EOA misuse losses came from the GitHub exposed-key subtype.

Two new attack paths account for about $15.7M

The first newly described attack takes advantage of deterministic contract-address creation. Attackers can promote a contract address on a testnet, wait for users to mistakenly send mainnet funds to the matching no-code address, and later deploy withdrawal code at the same location. Researchers linked 469 malicious contracts to 3,446.37 ETH and 431.79 BNB in losses.

The second uses EIP-7702 against accounts with already exposed private keys. Attackers delegate those EOAs to malicious code that automatically sweeps incoming funds. The paper found 17,270 cases, producing losses of 25.86 ETH and 33.45 BNB. Using the paper’s reference prices, the two newly described vectors together account for roughly $15.7 million.

The 99.11% figure is precision, not universal verification

The team mined 63,004 GitHub repositories created between January 2015 and May 2025, extracting 10.3 million unique candidate addresses and 16.3 million private keys after deduplication. It also used Ethereum Stack Exchange and Stack Overflow data before analyzing transactions on Ethereum and BNB Smart Chain.

Researchers manually sampled results and reported 99.11% overall detection precision. That does not mean every one of the 65,340 instances was individually manually verified. The authors acknowledge possible heuristic false positives and incomplete data, while ERC-20, NFT and other chains are excluded from the headline loss calculation.

EIP-7702 security concerns are widening

Ethereum’s official guidance warns that malicious EIP-7702 delegation can give hostile contract code control over assets. A separate USENIX Security ’26 study found more than 63% of analyzed EIP-7702 authorization transactions were associated with malicious EOA-targeted attacks, identifying 924 malicious contract accounts across seven supported chains.

As previously reported, EIP-7702 delegations were linked to automated wallet-draining activity after Ethereum’s Pectra upgrade. In related coverage, attackers later drained about $3.1 million from Polymarket users through phishing and malicious delegated execution.

The authors recommend wallet warnings for known exposed keys and cross-chain contract mismatches, stronger secret management for developers and clearer address-to-network documentation. They also propose considering chain identifiers in future contract-address derivation. Those are research recommendations, not adopted Ethereum or BNB Chain protocol changes.

The researchers plan to expand future work to additional chains and token types. Until then, the 126,982.94 ETH and 17,726.7 BNB totals are best read as measured native-token losses within the study’s defined scope, while $574.8 million remains a standardized valuation estimate.

The Commodity Futures Trading Commission will use its inaugural Innovation Advisory Committee meeting on Aug. 20 to examine crypto regulation, artificial intelligence and prediction markets as Congress delays action on a broader digital asset market structure bill. 

The three-hour meeting begins at 1 p.m. ET in Washington and will be streamed publicly, according to the CFTC release.

The timing gives the meeting a sharper policy role than a routine technology discussion. The CFTC agenda explicitly lists “opportunities to modernize existing rules using current statutory authority” and areas where regulatory action can “complement future congressional legislation.” However, the IAC is advisory. It will not vote on a crypto rule, and its recommendations do not automatically represent the Commission’s position.

CFTC crypto talks focus on what regulators can do now

The first 50-minute session, titled “Crypto’s Regulatory Evolution: From Uncertainty to Clarity,” will cover the lack of a comprehensive federal market structure framework, overlapping jurisdictions and recent regulatory efforts. It also lists cybersecurity, operational resilience and crypto infrastructure as areas needed for trusted markets.

That wording stops short of saying the CFTC will create the CLARITY Act through regulation. The agency can interpret and modernize rules within its existing authority, but Congress would be needed to change statutory jurisdiction more broadly. Earlier this year, the CFTC and SEC jointly issued an interpretation on how federal securities laws apply to crypto assets, showing how the agencies can provide guidance without waiting for a new statute.

As previously reported, the CFTC’s first Innovation Advisory Committee meeting will cover crypto, AI and prediction markets, but no proposed crypto rule is scheduled for a vote at the session.

CLARITY Act now faces a September 15 Senate test

The Digital Asset Market Clarity Act has not failed. Majority Leader John Thune filed cloture on the motion to proceed before the Senate left Washington. The Senate schedule says that motion will ripen at 2:15 p.m. on Sept. 15, one day after senators return for regular business.

As previously reported, the CLARITY Act faces a September 15 procedural vote and still needs enough support to clear the Senate’s 60-vote cloture threshold. Even successful cloture would only move the chamber toward considering the bill. Debate, amendments and a final vote would still follow, while any Senate text differing from the House version would require further congressional action.

SEC cancels its planned August 14 crypto meeting

The latest update changes the earlier narrative that the CFTC would follow an SEC meeting on new crypto offering rules. The SEC had scheduled an Aug. 14 open meeting to consider proposing a tailored offering regime for certain investment contracts involving crypto assets. On Aug. 13, however, the Commission formally canceled that meeting.

The SEC’s notice gave no reason and announced no replacement date. As previously reported, the planned session would have considered tailored rules for crypto investment contract offerings. Its cancellation does not withdraw the SEC’s wider crypto agenda, but no proposal will be considered at the previously scheduled Friday meeting.

What happens next for U.S. crypto regulation

The CFTC meeting remains scheduled for Aug. 20. Its crypto session will be followed by discussions on AI and prediction markets, including market surveillance, manipulation concerns and federal versus state jurisdiction. Members of the public can submit written comments through Aug. 27.

Chairman Michael Selig currently sits alone on a Commission designed for five commissioners, according to the CFTC’s official leadership page. The agency therefore lacks the bipartisan panel contemplated by its normal five-seat structure while major crypto and prediction-market policies are being developed.

The next concrete dates are Aug. 20 for the IAC discussion, Aug. 27 for comments and Sept. 15 for the CLARITY cloture test. The CFTC’s existing authority over crypto remains narrower than the framework Congress is considering. The Aug. 20 meeting can shape agency priorities, but it cannot substitute for legislation that changes the agencies’ statutory powers.

FG Nexus sold all of its digital assets before June 30, ending an Ethereum treasury strategy less than a year after it launched. 

The Nasdaq-listed company disclosed the completed exit in its Aug. 12 filing, which reclassified the digital asset business as discontinued operations.

The filing shows that FG Nexus received $60.956 million in cash from ETH sales during the first half of 2026. A further $14.983 million remained receivable at June 30 and was collected in July. The company held no cryptocurrency at quarter end.

FG Nexus records $45.2M loss from digital asset exit

FG Nexus reported a $45.207 million loss from its discontinued digital asset operations for the first six months of 2026. The total included a $41.167 million loss on ETH digital assets, a $2.793 million impairment on digital intangible assets and $1.789 million in general and administrative expenses.

Those figures matter because the $45.207 million should not be described as the realized loss from selling ETH alone. The business also recorded a $398,000 gain on digital intangible assets and only $144,000 of staking revenue. Its broader consolidated net loss for the first half reached $56.928 million.

In addition, FG Nexus announced its Ethereum treasury strategy in July 2025 and said its digital asset business began in August. By Sept. 28, the company reported holding 50,770 ETH, valued at about $207 million using its reference price at the time, with an average purchase price near $3,860.

As previously reported, FG Nexus raised $200 million while making Ethereum its primary treasury asset, with plans to generate returns through staking and other Ethereum opportunities. By June, however, the company was unwinding that position. Crypto.news later reported that FG Nexus moved another 10,000 ETH as its treasury losses widened.

Cash from ETH sales is being redirected toward real estate

FG Nexus announced on July 1 that its board had authorized management to exit digital assets and create a real estate operating subsidiary focused mainly on land lease manufactured housing properties. CEO Kyle Cerminara said the company intended to “reallocate all of our capital from digital assets to cash flow producing real estate over the near term.” That remains a forward-looking company plan.

The company is also considering a potential combination with FG Communities, but the quarterly filing says board discussions remain preliminary and no decision or definitive agreement has been reached. An independent special committee is reviewing the potential transaction and has retained a financial adviser to provide a fairness opinion.

The ETH liquidation has increased available cash. FG Nexus reported $24.9 million of cash and equivalents at June 30. After receiving the ETH sale receivable and $15.5 million from the redemption of FG Merger II shares, cash reached approximately $51.4 million by July 31.

What happens next for FG Nexus

The next test is whether FG Nexus can turn that liquidity into income-producing property assets. The company has not announced a definitive FG Communities transaction or disclosed completed acquisitions under the new manufactured housing strategy. Its existing Quebec property also remains held and used after an earlier nonbinding sale proposal became unlikely to close.

FGNX traded at $7.59 on Aug. 13, up about 8.9% from the previous close. The company had already announced its crypto exit on July 1, however, so the move cannot be attributed solely to the later quarterly disclosure.

The reversal closes a short corporate Ethereum experiment that once aimed to make FG Nexus a major ETH holder. It also shows the financial tradeoff in this particular treasury strategy: first-half staking generated $144,000, while the discontinued digital asset operation recorded a $45.207 million loss.

Gemini Space Station reported a $107.7 million net loss for the second quarter ended June 30, extending its run to four consecutive quarterly losses since its September 2025 Nasdaq listing. 

Revenue rose 37% year over year to $45.5 million, but the exchange’s core spot trading business weakened sharply as total volume fell to $3.8 billion from $11.3 billion a year earlier.

The company’s Aug. 13 SEC filing showed the loss narrowed 19% from $133.2 million in Q2 2025. Gemini’s operating loss was $76.9 million, improving 18% from the first quarter, while operating expenses declined 15% sequentially to $122.4 million. The reduction followed February workforce cuts and exits from several international markets.

Gemini Q2 revenue grew as exchange trading contracted

Transaction revenue declined 15% year over year to $17.8 million. Exchange revenue fell 38% to $12.5 million as retail and institutional activity slowed. Retail spot volume dropped 53% to $700 million, while institutional volume fell 68% to $3.1 billion.

The weaker exchange business was partly offset by other activities. Services revenue rose 149% to $23.5 million. Credit card revenue jumped 231% to $16.2 million, staking revenue increased 50% to $4 million, and over the counter revenue rose to $4.7 million from $611,000. Gemini’s first quarter results had already shown a growing reliance on credit cards and other non exchange products, as crypto.news reported.

Credit losses and crypto marks kept the loss elevated

The company recorded $20.1 million in transaction losses, up from $3.6 million a year earlier. The total included a $16.1 million provision for expected credit losses on its credit card portfolio. Gemini said about $10 million of the Q2 provision related to accounts originated during the first quarter and associated with identified fraud activity.

The company said it added fraud detection and account monitoring controls. Management said the elevated provision was concentrated in the affected cohort and “does not reflect broad based deterioration” in the credit portfolio. That remains Gemini management’s assessment. Separately, the company recorded a $60.7 million realized and unrealized loss on crypto assets and receivables, partly offset by a $35.7 million gain on related party crypto loans.

Gemini pushes stocks and prediction markets as assets fall

Assets on Gemini’s platform fell 54% year over year to $8.4 billion from $18.2 billion. The company attributed the decline to lower crypto valuations and select institutional custody outflows. Monthly transacting users rose 11% to 580,000 from a year earlier, although the figure slipped 2% from the first quarter.

The company is trying to reduce its dependence on spot crypto fees. Prediction markets generated $524,000 in Q2 revenue, while event contracts traded increased 93% from the first quarter and cumulative contracts surpassed 225 million. The company also launched commission free stock trading for eligible U.S. customers in July, expanding its push beyond crypto trading, as crypto.news reported.

What happens next for Gemini

The company’s U.S. expansion is supported by regulated derivatives infrastructure. The CFTC lists Gemini Titan as a designated contract market, while its registry shows Gemini Olympus became a registered derivatives clearing organization on April 29. Gemini said its clearinghouse went live on Aug. 4, allowing it to settle its own prediction contracts and explore additional U.S. derivatives products.

Management is scheduled to discuss the quarter on an earnings call at 8:30 a.m. ET on Aug. 14. Investors will be watching whether services growth can offset weaker spot trading and whether credit losses normalize. The company also remains a defendant in an investor class action over its IPO disclosures and strategy shift. The federal docket shows the case remains active.

JPMorgan Chase ended its banking relationship with prediction market Polymarket in October 2025 over regulatory concerns and told the company to find another bank, the Financial Times reported on Aug. 14. 

Polymarket has since moved to an unidentified banking partner.

The account closure did not end all business between the companies. Polymarket told the FT it maintains “a close, active relationship with JPMorgan across multiple entities, operational integrations and material handling of customer fund flows.” JPMorgan declined to comment. The company’s description of the remaining relationship has not been independently detailed publicly.

Bitwise Asset Management has partnered with Superstate to develop a system that could let investors hold shares of certain Bitwise funds as blockchain-based tokens, with its Solana staking ETF expected to be the first product considered for the structure.

Bitwise said Thursday that the planned framework would change how ownership of fund shares is recorded without changing the rights attached to the shares or the channels investors use to purchase them.

Under the proposed setup, shareholders could choose between holding their shares through the Depository Trust Company in traditional book-entry form or having their ownership recorded on a blockchain using Superstate’s transfer agency infrastructure.

“Shareholders could then elect to hold those shares either in traditional book-entry form through The Depository Trust Company or in tokenized form recorded on a blockchain and maintained through Superstate’s transfer agency infrastructure,” Bitwise said.

The asset manager, which oversees more than $9 billion in client assets across more than 70 investment products, cautioned that the tokenization capability is still being developed and its planned use with individual funds is not guaranteed.

Bitwise fund tokenization would preserve shareholder rights

Rather than creating a separate investment product tied to an existing fund, the planned Bitwise structure would provide another method for recording ownership of the same shares.

According to the company, investors choosing the blockchain option would retain the same shareholder rights as investors whose holdings remain in conventional book-entry form.

Tokenized shares, however, would not be freely transferable outside the blockchain-based system supporting them. Bitwise did not provide a launch date for the service or identify all of the funds that could eventually support tokenized ownership.

Superstate would provide the transfer agency infrastructure needed to maintain the blockchain-based ownership records. The fintech company works with issuers and asset managers on compliant securities issuance, recordkeeping and onchain market infrastructure.

Its role in the Bitwise project follows other fund tokenization work involving traditional and crypto-focused asset managers. In June, Superstate was selected to provide blockchain support for Invesco’s proposed Stablecoin Reserves Onchain Fund and maintain its blockchain-integrated shareholder registry.

Invesco’s filing described a structure connecting conventional fund records with onchain ownership tokens, while the portfolio itself was designed as a Rule 2a-7 government money market fund investing in cash, repurchase agreements and short-term U.S. Treasury securities.

The arrangement also built on an existing relationship between the two companies after Invesco took over day-to-day portfolio management of Superstate’s tokenized U.S. Treasury fund earlier in 2026. Superstate continued providing the product’s tokenization services through its FundOS platform.

Solana staking ETF is first in line for tokenization

Bitwise expects the Bitwise Solana Staking ETF, or BSOL, to be the first fund to use the proposed system, although the company said there is “no assurance” that tokenization of the product will ultimately launch.

BSOL began trading on NYSE Arca in October 2025 after the exchange completed the listing process for the fund. The ETF provides direct exposure to Solana while incorporating staking rewards generated from the SOL held by the product. Its market debut brought $69.45 million in first-day net inflows and lifted total assets to $288.92 million.

The fund is backed by SOL held in institutional cold storage and tracks the Compass Solana Total Return Monthly Index after fees and expenses. Bitwise set its management fee at 0.20% when the product launched.

By mid-May 2026, BSOL had accumulated about $861 million in assets and represented roughly 81% of the assets held across the Solana ETF products tracked at the time. The fund had crossed $500 million in assets within its first 18 days of trading.

Bitwise has continued adding staking to other proposed crypto investment products. In July, the asset manager amended its planned NEAR ETF to include staking and named NYSE Arca, BNY Mellon and Coinbase Custody in the filing.

Superstate has built out its onchain transfer agency business

Superstate’s work with Bitwise also extends its role as a transfer agent for securities represented directly on public blockchains.

The company registered Superstate Services LLC as a transfer agent with the U.S. Securities and Exchange Commission in March 2025, allowing its infrastructure to maintain ownership records for tokenized securities.

At the time, crypto.news reported that Superstate initially planned to use the service for its own USTB and USCC funds before making the infrastructure available to other securities issuers.

Superstate later expanded the model from funds to public equities. Its Opening Bell platform was introduced in May 2025 to allow SEC-registered shares to be issued and traded on public blockchains, initially using Solana. Unlike synthetic products that track the price of a stock, the platform was designed to work with issuer-authorized shares carrying ownership rights.

Galaxy Digital subsequently used the infrastructure to put its Nasdaq-listed shares onchain in September 2025. Superstate served as the registered transfer agent, updating Galaxy’s shareholder records when tokenized shares moved between verified wallets. The Galaxy structure treated the tokens as direct legal representations of the company’s shares rather than wrappers or synthetic instruments.

Superstate has also worked with fund managers on blockchain-native investment products. Coinbase Asset Management introduced its CUSHY digital credit fund in April using Superstate’s FundOS infrastructure, with tokenized shares designed for qualified institutional investors across Ethereum, Solana and Base.

Bitwise partnership follows recent staff cuts

The tokenization project was announced days after Bitwise confirmed a reduction in its workforce.

Earlier this week, the asset manager said it had cut 14% of its employees, leaving its global headcount at about 155 people.

Chief executive Hunter Horsley told The Block that the reductions were intended to better equip the company for its ongoing growth.

Bitwise has continued operating a large range of crypto investment products while expanding its ETF lineup. Alongside BSOL, the firm has filed for or launched funds covering several digital assets, with previous proposals including products tied to XRP, Sui, Aave, Zcash and Tron.

A filing earlier in 2026 also proposed 11 hybrid-structure ETFs covering assets including Aave, Zcash and Tron, with Coinbase Custody Trust Company named as custodian. At the time, the proposed funds had not yet received final ticker symbols.