Swiss digital asset bank Sygnum has unveiled the ETH Alpha Fund, a product that aims to grow investors’ Ether holdings by 8% to 10% a year after fees, roughly three to four times what the bank says plain staking currently pays. The fund opened to investors on November 2 and was announced publicly on November 12.

The pitch is aimed at professional and qualified investors in approved markets, including Switzerland. It targets institutions that hold ETH for the long term and want more of it, without selling what they already own.

How the ETH Alpha Fund tries to beat staking

Sygnum estimates that conventional ETH staking currently yields about 2% to 3% annually. To lift that figure, the fund layers several strategies on top of native staking. These include options premiums, arbitrage between trading venues, and income from derivatives funding rates. Specialist investment firms run the trading side. Sygnum’s own social post describes the fund as market-neutral, meaning the trading is designed to earn returns without betting on the direction of ETH’s price.

Markus Hämmerli, Sygnum’s head of asset management and the fund’s lead, framed the product around a shift in how institutions think. “Institutions that hold ETH for the long term increasingly think in ETH, not dollars,” he said.

An ETH-denominated target is not a dollar target

The distinction matters. The fund books profits and losses in ETH, so success is measured by the number of tokens held at year-end. The 8–10% figure is an investment objective, not a guaranteed payout, and it includes staking income.

Investors still carry full exposure to Ether’s market price. NewsBTC offered a simple illustration: an investor who starts with 100 ETH and earns 8% ends with 108 ETH. If Ether’s dollar price drops 20% over the same period, that holding is still worth about 13.6% less in dollar terms. That is arithmetic rather than a forecast, but it shows why a growing token balance and preserved purchasing power are different goals. With ETH trading near $1,938 and down almost 4% on the day, according to crypto.news’ price ticker, the point is far from academic.

Custody, liquidity and the fine print

Combining staking with trading strategies makes the product harder to assess than a simple staking position. Staking carries its own risks, including inactivity penalties, slashing and reliance on a service provider. Options and arbitrage income come from entirely different sources and bring their own risks.

Sygnum says trading runs through Sygnum Protect, which keeps collateral at the bank rather than on exchanges. That addresses one counterparty concern, though investors will still want to understand the full chain of providers involved.

Liquidity terms are also restrictive. According to the product page cited by NewsBTC, the ETH Alpha Fund requires a minimum subscription of $100,000 or its ETH equivalent. Subscriptions and redemptions are monthly and require advance notice. There is also an investor-level gate of up to 10%, whose mechanics the page does not explain. A treasury that may need cash on short notice would have to weigh those dealing terms against its horizon.

What to watch next

The launch fits a broader push to package Ethereum for institutions. Sygnum’s pitch is that staking alone leaves yield on the table for investors who think in ETH terms. Whether the ETH Alpha Fund can deliver 8–10% after fees will only be clear once it builds a performance record, ideally one that shows how the trading strategies hold up when markets turn volatile.

Explore more on this topic with Vexel Search.

The latest Binance hack seizure marks the biggest step yet in a US effort to claw back stolen crypto. The Department of Justice said Thursday it has court authorization to seize or restrain more than $1.2 billion of the $6.3 billion in cryptocurrency taken from Binance in the Oct. 29 attack.

That sum is part of a larger pool. US authorities and private-sector partners have frozen more than $2.7 billion in stolen assets since the breach, according to the DOJ. Investigators are still trying to recover more, the department said. Put simply, a bit under half of the stolen total has been frozen, and about a fifth is now covered by court-approved seizure or restraint authority.

Who is blamed for the Binance hack

The FBI attributed the attack to TraderTraitor, a North Korean hacking group, in a cyber alert. Kim Yo Jong, sister of North Korean leader Kim Jong Un, denied that North Korea was involved. The attribution is the FBI’s finding, and the denial is on the record alongside it.

Binance, for its part, said it covered the affected assets with its own funds. It added that a new proof-of-reserves snapshot showed customer assets backed at least one-to-one, according to a Thursday post on X. If that holds, the practical effect of the theft falls mainly on the exchange rather than its customers. Any assets the government recovers would not change that backing claim.

There is precedent for these actions, though on a far smaller scale. In November 2025, the DOJ announced an enforcement action targeting about $15 million in crypto linked to North Korean hackers known as APT38. The latest Binance hack seizure is roughly eighty times larger.

FaceStealer: deepfakes and bogus fixes

The DOJ also announced a second, separate operation. US authorities seized cloud infrastructure used in FaceStealer, a North Korean social engineering campaign that stole more than $400 million in crypto over the past 18 months.

The scheme relied on trust built over video calls. The DOJ said the hackers used secretly recorded footage of earlier victims, along with AI-generated deepfakes of prominent crypto figures, to look credible. They then pushed targets to install malware by presenting it as a technical fix for a supposed problem on the call.

Targets were mainly people working in crypto and Web3. The hackers also increasingly went after open-source software developers and maintainers, seeking access to their devices and to their software repository accounts. Those accounts matter because compromising one can open a path into code that many other people use.

Under a federal warrant, the FBI seized more than 900 webcam videos of FaceStealer victims. It also published a public advisory with guidance on protecting against the scheme and on what to do after a compromise. The DOJ said the group behind the campaign is known publicly by several names, including Sapphire Sleet, UNC1069, Dangerous Password, CryptoCore, APT38, BlueNoroff and Stardust Chollima.

What the Binance hack seizure signals

The two announcements show US authorities working both ends of North Korea-linked crypto crime: moving against stolen funds after a major theft, and dismantling the infrastructure used for earlier campaigns. A seizure or restraint order is not the same as money returned, and the DOJ did not say how much of the $1.2 billion will ultimately be recovered or who would receive it. Investigators say work to trace the remaining funds continues.

Explore more on this topic with Vexel Search.

The Gemini KAST deal, reported on the eve of Gemini’s third-quarter earnings, would hand the exchange’s already shuttered U.K. and European operations to a Singapore stablecoin payments company for less than $10 million. Gemini has not confirmed the sale, and the picture is murkier than some headlines suggest.

What is actually known about the Gemini KAST deal

The sale was first reported by CoinDesk and picked up by Bitcoin Magazine and Bitcoinist on Nov. 12. Gemini declined to comment. A KAST spokesperson would not discuss the transaction, according to Bitcoin Magazine, but said the company is actively looking at acquisitions as its revenue and footprint grow. Neither firm has publicly confirmed a sale, and no regulator has announced approval of a change of control.

https://www.youtube.com/watch?v=videoseries

Bitcoinist adds a detail that lends the report some weight. A KAST job listing, published roughly a month earlier, sought a European general manager to oversee the transition of Gemini employees in the U.K. and the EU. That is circumstantial evidence rather than confirmation, but it points to preparations well before the news broke.

It is also unclear exactly what is being sold. The reports do not specify which legal entities, how many staff or which regulatory authorisations are included. What is clear is that Gemini’s core U.S. exchange is not part of it.

The end of a retreat that began in February

The sale would complete the pullback Gemini announced on Feb. 4. The Nasdaq-listed company, which trades as GEMI, approved a plan to wind down operations in the U.K., the EU and other European jurisdictions, and Australia. It said it would keep operating in the United States and Singapore.

The plan included cutting up to 200 jobs, about 25% of its global workforce at the time, and carried an estimated $11 million in mostly cash restructuring charges. Co-founders Cameron and Tyler Winklevoss said the company would “double down on America” after foreign markets proved hard to win and expensive to serve. Customers in the U.K., European Economic Area and Australia were told their accounts would close on April 6, with withdrawals-only access starting in early March.

The reported price puts the exit in perspective. A sale under $10 million is smaller than the $11 million Gemini expected to spend on restructuring. It is better read as recovering something from a business already shut down than as a windfall.

Why licences matter more than customers

The units’ customers are gone, so the likely draw is regulatory standing. Both sources note that buyers of shuttered crypto businesses often want the permissions more than the operations. An established, authorised entity can offer a faster route into a market than applying from scratch.

That route is not automatic. Licences do not simply pass to a new owner, and a transfer of a licensed firm in the U.K. or EU typically requires a change-of-control review by local regulators. Until that happens, KAST cannot assume it will be able to operate through the acquired entities.

What KAST gets, and what it wants

KAST was founded in July 2024 by former Circle executive Raagulan Pathy. It offers dollar-denominated accounts, cross-border payments and cards that let users hold and spend stablecoins. In March it said it had raised $80 million in a Series A co-led by QED Investors and Left Lane Capital, earmarked for expansion, licensing and compliance. It also claimed more than one million users and nearly $5 billion in annualized transaction volume. Those figures have not been independently verified.

Seen that way, the Gemini KAST deal fits KAST’s stated plans. KAST has not publicly described a European acquisition, though, so its intentions remain inference rather than announcement.

A smaller-scale crypto dealmaking market

The transaction also reflects a broader shift in crypto mergers and acquisitions. Bitcoinist cites advisory firm Architect Partners, which counted $2.2 billion across 67 announced crypto deals in the third quarter, an 83% drop in deal value from the previous quarter. The market’s headline numbers are shrinking, and smaller deals aimed at licences, distribution and existing capabilities look increasingly common.

What to watch Thursday evening

Gemini reports third-quarter results after the market close on Nov. 12, with a conference call at 8:30 a.m. ET on Friday. Investors will look for signs that the February cuts are lowering costs and moving the company toward the profitability it targeted. The Winklevoss twins put $100 million of bitcoin into the company earlier this year after its stock came under pressure, so the numbers will show how the business looks once the overseas wind-down is done.

The open questions are whether Gemini acknowledges the sale in its earnings materials, which entities and staff are covered, and whether European regulators approve KAST as a new owner. Until then, the deal remains a reported one.

Explore more on this topic with Vexel Search.

Tron, Tether and blockchain analytics firm Chainalysis have launched a new crypto crime task force, and its central promise is speed: freezing illicit USDT on the Tron network before criminals can move it. The group, called the Digital Crime Task Force (DCTF), was announced on November 12.

The timing is awkward. It arrives only weeks after a near-identical effort, the T3 Financial Crime Unit, reportedly fell apart. T3 was built by Tron, Tether and rival analytics firm TRM Labs.

What the new crypto crime task force says it will do

According to the announcements, the DCTF will combine transaction monitoring, investigative intelligence and closer coordination with law enforcement. Its stated priority is to shrink the gap between spotting a suspicious transaction and acting on it. Stolen or scammed funds often hop between wallets, get swapped into other assets or cross to other blockchains within minutes. Once that happens, recovery gets much harder.

The targets include investment fraud, romance scams, crypto hacks, terrorist financing and North Korean cyber operations. Chainalysis will supply the blockchain intelligence and investigative tools. Tether, as issuer of USDT, holds the power to freeze tokens, and Tron is the network where much of that stablecoin activity takes place.

Tether CEO Paolo Ardoino pointed to the company’s record, saying it has frozen more than $7 billion tied to illicit activity while working with over 360 law enforcement agencies across 73 countries. Tron founder Justin Sun framed the effort as protecting ordinary people who use USDT for payments, business transactions and cross-border transfers.

Why AI scams add urgency

The launch also leans on Chainalysis data about fraud. The firm’s figures show AI-enabled scams were 4.5 times more profitable than conventional schemes in 2025. Impersonation scams rose by more than 1,400% year over year. Tools that generate convincing messages and impersonate trusted people let fraudsters operate at greater scale, which leaves less time to catch the money.

The shadow of T3

The T3 unit launched in September 2024, and Binance later joined. The group said it had helped freeze roughly $250 million in illicit assets. Reports say it nonetheless suffered from slow response times and coordination problems before being discontinued. The sources do not detail exactly what went wrong or why TRM Labs is no longer involved, so the reasons behind the breakup remain unclear.

That history makes the DCTF’s emphasis on speed look like a direct answer to T3’s reported weaknesses. It is also the main test. Identifying suspicious transactions is only one step. The harder part is turning an alert into a freeze, with the right legal and operational sign-offs, before the money moves on.

What to watch

The announcement offers no performance targets, timelines or funding details, and the sources do not say whether other exchanges or companies will join. The partnership also keeps a notable structural feature: a stablecoin issuer, a blockchain’s backers and an analytics vendor working closely together. That gives the group real levers for freezing funds. It also means its success will be judged on results rather than press releases.

For now, this crypto crime task force is a stated intention to be faster and more proactive than its predecessor. Whether it delivers will show in how quickly frozen-fund figures grow, and in whether this alliance lasts longer than the last one.

Explore more on this topic with Vexel Search.

ZIG Finance has launched a tokenized product that gives eligible institutional investors exposure to Saudi SME credit, a corner of emerging-market lending that large investors have long found difficult to reach. The zEMS Vault is the first product to come out of the company’s partnership with Laser Digital, the digital assets arm of Japanese banking group Nomura.

How the zEMS Vault is built

The vault is a layered structure in which each participant covers a different part of the process. Beehive originates the underlying loans. It describes itself as the first peer-to-peer lending platform in the MENA region regulated by the DFSA, with more than a decade of SME lending experience across the Gulf. Zamanat is the structuring partner and Sharia advisor, while ZIG Markets handles issuance, curation and distribution. Khalij is expected to join as Sharia certification partner, and an independent calculation agent has yet to be appointed.

On the technology side, the vault is tokenized by KAIO, a platform developed by Laser Digital and WebN, and issued on BNB Chain. KAIO handles compliance and the full product lifecycle, including KYC checks at both subscription and redemption. The platform already hosts tokenized funds from managers such as BlackRock, Brevan Howard and Hamilton Lane, and says it has processed more than $500 million in volume.

Why institutions have hesitated on Saudi SME credit

According to ZIG Finance, institutions have held back from emerging-market private credit because of worries about underwriting standards, portfolio construction and risk oversight. The zEMS design tries to answer those worries by bundling local origination, a governance framework and compliant distribution into one product.

ZIG Finance co-founder Abdul Rafay Gadit was frank about the limits of that pitch. The aim, he said, is not to remove credit risk but to make it transparent and manageable. Laser Digital’s role is that of Risk Framework Advisor, helping design the vault’s risk governance and providing tokenization advisory. Its CEO, Jez Mohideen, called the launch an early test of whether private credit can be brought onchain in a form institutions will approve.

The fine print matters

The disclosures are as telling as the announcement. The vault is open only to eligible institutional investors in selected jurisdictions. It does not guarantee returns, is not principal-protected and does not give investors direct ownership of the underlying assets. Credit risk stays with the underlying SME borrowers.

Laser Digital has also made clear that it has not assessed or rated any underlying loan or borrower. Responsibility for credit selection and risk management sits with ZIG Finance and the originator. Despite Nomura’s name recognition, then, the advisory role is not an endorsement of the loan book itself.

A template for other markets

The larger story is the repeatability ZIG Finance is aiming for. The company says more products are in the pipeline, with other regional markets and asset classes under consideration. KAIO’s chief executive, Shrey Rastogi, described the goal as a repeatable model for bringing new markets and credit strategies onchain. Zamanat’s CEO, Umair Tariq, framed it as a steady source of financing for Saudi businesses that could become an established part of global private credit portfolios.

Whether that ambition is met will depend on investor appetite and on how the underlying loans perform, neither of which the launch announcement can show yet. For now, the vault is a concrete test of whether Saudi SME credit can be packaged onchain in a way that institutional compliance teams are willing to sign off on.

Explore more on this topic with Vexel Search.

File photo: Nomura Holdings – NYC (55283758308).jpg by ajay_suresh, CC BY 4.0, via Wikimedia Commons.

Deutsche Bank has switched on its long-awaited crypto custody service, giving European institutional and corporate clients a way to hold digital assets with Germany’s largest lender. The launch, confirmed on Wednesday, November 11, comes about two months after the bank first said it would enter the business.

At launch the service supports five assets: Bitcoin, Ether and three stablecoins. These are Circle’s dollar-backed USDC, Circle’s euro-backed EURC and AllUnity’s EURAU. The bank holds the wallets and private keys on behalf of clients, who can store and transfer the assets through the service.

What clients actually get

The offer is aimed at professional money, not individual savers. Retail customers are excluded from the initial rollout. According to crypto.news, the target client list set out in September includes institutional investors, asset managers, hedge funds, brokers, corporations and sovereign institutions. Customers reach the platform through Deutsche Bank’s Autobahn corporate banking system.

The bank describes the technical setup as hardware-protected private key storage, warm and cold wallets, multiple approval controls and separate storage arrangements for client assets. It has said it uses outside technology providers for selected technical services. Its main partner is Swiss crypto infrastructure firm Taurus, with which it began working in 2023 on custody and tokenization technology, around the time it applied for a digital asset custody license in Germany.

Several details remain unknown. The bank has not named its first customers or published what it charges to hold digital assets, so the commercial appeal is hard to judge from public information.

The regulatory path behind the launch

The timing follows a clear regulatory sequence. Deutsche Bank announced its plans on September 16, subject to clearance. Its entry in the European Union’s Markets in Crypto-Assets Regulation (MiCA) register, covering crypto custody and transfer services, is dated October 12 and names Germany’s financial watchdog BaFin as its regulator. Going live roughly a month after that registration suggests the bank had its technology largely ready and was waiting on the paperwork.

That matters because regulatory uncertainty and the operational risk of managing private keys are often cited as reasons conventional organizations have stayed out of digital assets. A custodian that is a supervised bank operating under MiCA offers those organizations a more familiar structure than a crypto-native platform. Bitcoinist framed the launch as exactly that kind of on-ramp. That is commentary rather than a measured result, and client uptake is the real test.

Beyond storage: tokenization and Asia

Deutsche Bank is presenting custody as a starting point. Alongside the launch it signed a memorandum of understanding with Deutsche Asset Management, its majority-owned asset manager, to explore tokenized money market funds, crypto exchange-traded commodities and stablecoins. An MoU only commits the two sides to explore these ideas, and no products have been announced.

Paul Maley, the bank’s global head of trust and securities services, said the medium-term aim is “a fully integrated, regulated ecosystem that supports the custody, tokenisation, and settlement of digital assets.” Gerald Podobnik, co-head of the corporate bank, told Reuters in October that the bank would start in Germany and then expand to Asian financial centers in 2027. Nothing in the launch coverage suggests that timetable has changed.

The stablecoin lineup is also worth noting. Two of the three are euro-denominated, and one of them, EURAU, comes from AllUnity, a venture that Cointelegraph describes as Deutsche Bank-backed. That points to a bank pairing its custody offer with euro-based digital cash as well as the dollar tokens that dominate the market.

For now, the bank’s crypto custody offering is narrow, limited to professional clients and a handful of assets. But a major European lender has gone from announcement to a regulated, working service within weeks, which sets a reference point for other banks weighing the same move. What remains to be seen is how many clients sign up, and what the pricing looks like.

Explore more on this topic with Vexel Search.

File photo: Deutsche-Bank-Frankfurt-am-Main.jpg by Raimond Spekking, CC BY-SA 4.0, via Wikimedia Commons.

Kraken’s parent company, Payward, has pushed deeper into the market for tokenized stocks, adding blockchain-based versions of more than 200 UK and EU-listed companies to its xStocks platform. The catch is that investors in the UK, home to some of the biggest names on the list, cannot buy them.

Payward announced the expansion on Wednesday, November 11. According to the company, eligible users can trade the new tokens on Kraken and on participating platforms in the xStocks Alliance. Reports on the launch say the rollout covers the FTSE 100 and Germany’s DAX 40, with household corporate names such as Shell, HSBC, LVMH, Airbus, SAP and Siemens among the offerings.

What the new tokenized stocks cover

The German slice of the launch is the most complete. Tokens now exist for all 40 companies in the DAX, including SAP, Siemens, Allianz and Deutsche Telekom. Deutsche Börse separately said the tokens can be traded on its affiliated 360X platform, with round-the-clock trading available on select venues. The same platform also lists a tokenized version of Xetra-Gold, an exchange-traded commodity linked to gold.

Payward says each token is backed one-to-one by a share held with a regulated custodian. The company’s partner GTN supplies the execution and custody infrastructure for the underlying shares. The two firms announced that partnership in July, with the aim of taking tokenized equities beyond US markets.

The tokens are designed to move across several blockchains, including Solana, Ethereum, TON, Ink and X Layer. Holders can shift them between compatible wallets and decentralized finance applications. Trading hours depend on the venue. Kraken’s European Economic Area offering runs 24 hours a day, five days a week, while some onchain venues trade continuously.

Exposure, not ownership

Buyers should understand what they are getting. Kraken’s risk disclosure states that xStocks tokens give holders exposure to a share’s price performance, but not voting rights or a legal claim on the underlying stock. For investors who mainly want price exposure and 24/7 access, that may be enough. For those who care about shareholder rights, it is a meaningful difference from owning the shares themselves.

The UK paradox

The most awkward detail is geographic. Reports agree that the new UK-listed tokens remain unavailable to investors in the UK, and one report adds that US investors are also excluded. The product is built around British and European blue chips, yet access is limited to eligible users elsewhere. The sources do not explain the regulatory reasoning, and Payward has not been quoted here on when, or whether, that will change.

Where xStocks stands in the market

Payward says the expansion lifts xStocks past 1,500 tokenized assets, with more than $45 billion in cumulative transaction volume and over 550,000 unique holders. Token Terminal data cited by Cointelegraph put xStocks’ market capitalization at $1.1 billion, about 22% of the $4.9 billion in tokenized stocks the firm tracks. That ranks it third, behind Binance’s bStocks at $1.5 billion and Ondo Finance at $1.4 billion. Another outlet describes the $1.1 billion figure as assets under management, so the exact measure varies by source, but the scale is consistent.

The size of the sector remains small next to traditional equity markets, and competition is tight. Still, widening beyond US shares is a clear attempt to differentiate xStocks from rivals.

Hong Kong next

Payward says it plans to add hundreds of Hong Kong-listed equities in the coming weeks. Mark Greenberg, the company’s chief commercial officer, framed the strategy in broad terms: “A portfolio should not have borders or trading hours,” he said, adding that “tokenizing every other international market is the next step.”

If that plan holds, the UK and EU launch is less a finish line than a template, with the same custody-backed model extended market by market. Whether regulators in excluded jurisdictions, starting with the UK itself, allow local investors to join in will help decide how far these tokenized stocks can really go.

Explore more on this topic with Vexel Search.

The XRP Ledger Foundation has sketched out a way to give users quantum-proof accounts without raising the base transaction fee, a design choice that could make migration far easier for ordinary holders. The proposal sits in the Foundation’s 2027 protocol roadmap, updated November 4, and remains a work in progress rather than a finished feature.

Why quantum-proof accounts are on the roadmap

The XRP Ledger currently supports two signature schemes, secp256k1 and Ed25519. Both rely on mathematics that a sufficiently powerful quantum computer could eventually break. The weak point is visibility: every time an account signs a transaction, its public key is recorded on the ledger. A future machine running Shor’s algorithm could, in principle, use that public data to recover the matching private key.

Such computers are not expected imminently, but the exposure is permanent. Any account that has already transacted has a public key on the record, which is why the Foundation is planning ahead instead of waiting.

How the proposed upgrade would work

Under the design, an account owner could attach a new signing key based on ML-DSA-44, a lattice-based algorithm that the US National Institute of Standards and Technology standardized in August 2024 under FIPS 204. The owner would then disable the original master key, so transactions could no longer be authorized with the older credentials. Addresses and balances would stay the same, and no funds would need to move.

XRP Ledger accounts can already rotate their regular signing keys, but swapping one conventional key for another does nothing against a quantum threat. The new method adds a different kind of signature. The Foundation’s study points to exchanges, custodians and institutions with large balances as the likeliest early adopters, and the roadmap also extends post-quantum protection to validators and validator list publishers.

Bigger signatures, same fee

The trade-off is size. According to the reported figures, the new keys and signatures together take up 3,732 bytes, compared with 105 bytes for a standard payment today. Counting history and database overhead, the Foundation estimates roughly 5,331 bytes of storage per protected transaction, against a 1,704-byte baseline.

Despite that, the proposal holds the base fee steady. XRP Ledger fees are destroyed rather than paid out to validators, so the extra storage burden would fall on the operators who run the network instead of on account holders. Other chains weighing post-quantum upgrades have had to grapple with larger signatures pushing costs onto users, so keeping fees flat removes one obvious barrier.

What still has to happen

The work is unfinished. Developers are resolving inconsistencies in which the Python prototype and the server and JavaScript implementations can generate different keys from the same seed. A migration study is scheduled for the first half of 2027, followed by further engineering, reviews and security audits. The Foundation estimates review, auditing and implementation expenses of $215,000 to $255,000, not counting development hours.

Any amendment would also need validator approval before reaching the main network. Ripple has separately targeted a full quantum-resistant transition by 2028, and the proposal is framed as part of that effort, though the timeline depends on testing and sign-off.

The catch: users must act

The scheme is voluntary, and its protection depends on owners disabling their old keys. An account that keeps both methods enabled stays partly exposed. Making the switch at scale will take clear tooling and incentives, especially for exchanges and custodians, which is the question the 2027 migration study is meant to examine.

For now, the plan is one of the more detailed post-quantum roadmaps in public view, pairing a standardized algorithm with a user-controlled migration and an unchanged fee. Whether quantum-proof accounts reach the mainnet on schedule will hinge on the unfinished engineering, the audits and the validators’ vote.

A newly published iOS flaw known as worse_query could let a malicious app read files belonging to other apps on an iPhone, including crypto wallet seed phrases, and Apple has not said whether its newest updates close the hole. Binance raised the alarm on Tuesday, Nov. 10, urging users to check what is installed on their phones.

What the iOS flaw does

The bug is a sandbox escape. iOS normally walls each app into its own container so that one program cannot browse another’s data. A researcher posting as forcequitOS put worse_query on GitHub on Nov. 8, and Cointelegraph reports the researcher credited another researcher, 0xjohnny. The project’s documentation lists reachable locations such as other apps’ data containers and shared app group folders. It says the technique works on iOS 26.0 through 26.7.2 and on iOS 27.2, a wider span than the three versions Binance named: 26.7.1, 27.0.1 and 27.2.

The researcher calls the release a proof of concept for developers and stresses that it is not a jailbreak and is not useful by itself. Someone still has to build it into an app. That has already happened: developer Christoph Kolbicz published a file manager based on it that lets users browse and edit app data on iOS 27 without jailbreaking, which he said he tested on iOS 27.0.1.

How worried should wallet users be?

Binance stressed that this is “an iOS-level issue, not unique to Binance,” and a spokesperson said the exchange has found no confirmed cases of attackers using worse_query to reach wallets or steal funds. The researcher has not reported any thefts either.

Blockchain security firm SlowMist offered a more measured reading. Its chief information security officer wrote that the flaw cannot steal assets on its own. The danger arises when a user installs and runs an untrusted app, such as a sideloaded or manually signed IPA file, and only if a wallet keeps mnemonic phrases, keystores or cached data in plain text on the device. Wallets that avoid writing secrets to readable files are not exposed in the same way, and hardware wallets keep private keys off the phone entirely.

Apple’s update leaves a gap

Apple released iOS 27.2.1 and iOS 26.7.3 on Nov. 9, one day after the code went public. The published security notes mention fixes for AirPlay, Bluetooth pairing, brotli and other components, but they do not name worse_query or describe a sandbox escape like this one. Whether the updated builds block the technique therefore remains unclear. Cointelegraph said it asked Apple for comment and had not heard back by publication.

Until that is settled, Binance’s advice is basic hygiene. Delete apps from untrusted sources, update iOS and every app to the latest official versions, and, if you suspect a compromise, move funds to a new wallet created on a clean device and reset all active login sessions.

The warning lands at a tense moment for the exchange, which Bitcoin Magazine says lost $6.34 billion in an Oct. 29 attack that began with a fake job interview. For ordinary iPhone users, the practical takeaway is narrower than the headline suggests: the risk hinges on installing software from outside the App Store and on how carefully a wallet app stores its secrets.

Explore more on this topic with Vexel Search.

File photo: Apple iPhone Duo.jpg by SimonWaldherr, CC BY 4.0, via Wikimedia Commons.

Six companies, including Coinbase and Kalshi, have asked a federal court to let them defend the US derivatives regulator in a lawsuit that could decide the future of stock perpetual futures in the United States. The proposed friend-of-the-court brief arrives days after a judge signaled the regulator may have overstepped.

According to the filing shared by a Coinbase legal representative, the group also includes Kraken’s parent company Payward, trading firms DRW Holdings and Jump Trading, and crypto investment firm Paradigm Operations. Their request to submit the brief is still pending.

How the dispute began

The CFTC announced on Nov. 3 that single-stock perpetual futures, often called stock perps, could begin trading on US-regulated exchanges for the first time. According to one report, applications from KalshiEX, Coinbase Derivatives and Bitnomial, which is linked to Payward, were filed in mid-September. The products were treated as approved when a 45-day review window closed on Nov. 2 without objection.

Stock perps let traders bet on the price of an individual company’s shares without owning them. Unlike conventional futures, they never expire. Positions can be held indefinitely, and periodic funding payments keep the contract price close to the underlying stock. The design is a staple of crypto markets, and this is its first approved move onto US-listed equities.

The Capital Markets Alliance Association (CMAA), a newly formed group whose members include Cboe and Citadel Securities, sued the CFTC shortly afterward. Its argument is that a contract with no fixed expiration date is not a security future at all. In its view, the product is a security-based swap, a category the Securities and Exchange Commission primarily oversees and one that carries tighter limits on retail trading.

A judge’s warning, but no halt

US District Judge Valerie Caproni gave the challengers an early boost. She said the CMAA was likely to succeed in arguing that the CFTC exceeded its statutory authority, and that the contracts appear to satisfy the definition of a swap. But she denied a temporary restraining order because the group had not shown imminent, irreparable harm. The CFTC’s approvals therefore remain in place while the case goes on.

That leaves an unusual situation. The products can trade, yet the only judicial view on the merits so far leans against the agency that allowed them. The CMAA is due to file its reply to the CFTC’s opposition to a preliminary injunction, the next major step in the case.

What the six firms argue

The companies in the proposed brief say nothing in the law requires a fixed expiration date for a contract to qualify as a security future. They contend that stock perpetual futures fit within the joint CFTC and SEC framework Congress created in 2000, and need not be moved wholesale into the SEC’s swap regime.

They also have a stake in the outcome. Coinbase and Kalshi are among the exchanges that sought to list the products, and supporters argue that regulated onshore access gives US traders an alternative to offshore venues. Critics from traditional finance, by contrast, point to concerns about market structure, leverage and risk to retail investors.

Why the ruling matters beyond one product

The case is also a test of whether decades-old commodity and securities statutes can absorb instruments built for crypto markets. If the court sides with the CMAA, retail access to stock perps could be curtailed and the onshore market slowed before it gets started. If the CFTC’s reading holds, other hybrid products that pair crypto-style design with traditional underlying assets may find an easier path to approval.

For now, trading continues on the approved platforms, but the legal footing remains uncertain. The judge’s early comments suggest the CFTC faces an uphill argument, and the six firms’ brief is an attempt to shift that balance before a decision on the injunction.

Explore more on this topic with Vexel Search.