Centrifuge and Resolv said on Feb. 25 that they are deploying up to $100 million of JAAA, a tokenized AAA-rated credit fund, as leveraged collateral on Aave Horizon – marking decentralized finance’s (DeFi) largest real-world asset (RWA) loop trade to date.

Resolv – a protocol that maintains the USR stablecoin with a total value locked of $162 million – is adding JAAA (an on-chain version of Janus Henderson’s AAA-rated CLO investment fund) to its system using Centrifuge’s tokenization technology. Centrifuge currently has a TVL of $1.35 billion.

Instead of just holding the fund, Resolv will use JAAA as collateral inside Aave’s lending markets to generate yield and support its stablecoin. Aave is the largest DeFi protocol, with nearly $28 billion in total value locked, according to DeFiLlama, while Aave Horizon is its institution-focused deployment.

The move shows how tokenized assets are increasingly being used in real financial products rather than just existing on-chain. It also comes as the tokenized RWA market continues to grow, with distributed asset value now above $25 billion, up about 7% over the past month, according to RWA.xyz.

“Resolv allocating to JAAA and deploying it through Aave Horizon demonstrates the next phase of tokenization: utility at scale,” Nadim Chamoun, director of business development at Centrifuge Labs, told The Defiant.

Chamoun added that the strategy allows Resolv to manage risk more actively while earning the difference between traditional credit yields and on-chain borrowing rates.

For Resolv, the move is also part of a broader effort to diversify the sources of its returns. “Economically, diversification across markets makes clear sense for scalable capital allocators,” Tim Shekikhachev, co-founder of Resolv Labs, told The Defiant. “On-chain yields move with crypto leverage cycles, while global fixed-income markets are anchored in broader macro conditions.”

Shekikhachev added that when crypto rates fall, tokenized credit like JAAA can help balance returns.

“What’s finally unlocked now is that the full supply chain is functioning at scale: capital flows from Resolv USR, through Centrifuge’s tokenization infrastructure, into Aave Horizon’s leverage layer,” he said. “Ultimately, this ends up in AAA-rated assets managed by Anemoy and Janus Henderson, an industry leader in this segment. DeFi won’t replace traditional finance — it will scale by plugging into it.”

Key Takeaways

• The Catalyst: A sharp Bitcoin Rebound forced a short squeeze, reclaiming the critical $68,000 level after testing lows near $64,700.
• The Signal: Circle reported a 77% revenue jump, confirming massive Circle USDC expansion and deepening Market Liquidity.
• The Outperformer: NEAR Protocol surged 17% following the launch of ‘Confidential Intents,’ signaling a capital rotation into high-utility infrastructure.

In online crypto circles, a persistent debate has emerged around whether a quantitative trading firm could nudge Bitcoin’s price at the moment U.S. markets open. Proponents point to a recognizable 10:00 a.m. Eastern Time pattern as potential evidence of coordinated selling, while critics caution that such a signal is not definitive proof of manipulation and may reflect broader market mechanics. The discussion intensified a day after a court-appointed administrator overseeing Terraform Labs’ affairs filed a suit against Jane Street, alleging insider trading tied to Terra’s May 2022 collapse. The intersection of high-speed trading, ETF liquidity, and opaque hedging strategies has kept traders watching the clock as BTC moves through daily cycles.

Key takeaways

• Allegations focus on a recurring 10:00 a.m. ET window at the market open, but analysts say this does not constitute conclusive manipulation or a sole driver of BTC’s price trajectory.
• Public filings show Jane Street’s exposure to BlackRock’s IBIT ETF, alongside stakes in Bitcoin mining firms, suggesting hedging and liquidity strategies rather than a simple directional bet.
• Industry voices argue that a single institution cannot control a global, liquid market as fragmented as Bitcoin, even if some trading strategies amplify volatility around open hours.
• Delta-neutral approaches—holding spot exposure while selling futures—are cited as a common method for capturing spreads rather than betting on direction, according to market observers.
• The discourse features a mix of on-chain data, trading analytics, and public posts from market observers, underscoring the complexity of disclosures and how net exposure can be obscured.
• Contextual factors such as geopolitical risk and competition for investor attention from AI-related equities are cited as broader drivers of BTC price moves beyond any single firm’s activity.

Tickers mentioned: $BTC, $IBIT

Sentiment: Neutral

Market context: The dialogue unfolds amid a broader crypto environment characterized by liquidity fluctuations, evolving ETF dynamics, and ongoing regulatory and macro influences shaping how traders price risk and opportunities.

Why it matters

The debate touches on the core questions facing crypto markets: how liquidity, disclosure, and algorithmic trading intersect with real-world price discovery. If a large player can influence the clock at which liquidity sweeps occur or how efficiently a spot market absorbs ETF-related flows, that could have implications for price integrity and market education. Yet the consensus among many analysts is that Bitcoin’s price formation remains a product of multiple forces, including macro risk appetite, capital allocation shifts, and competitive attention toward AI-driven tech and growth narratives.

At stake is trust in market transparency. For traders, the issue highlights the importance of understanding how publicly reported positions, hedges, and complex derivatives can mask net exposure. For regulators and exchanges, it underscores the need for clear, timely disclosures that help market participants distinguish legitimate liquidity activity from attempts to edge the price. For investors, the episode reinforces a prudent approach: interpret open-hour moves in the context of the broader market regime rather than attributing them to a single actor.

The discourse also intersects with ongoing legal and regulatory developments. The Terraform administrator’s lawsuit against Jane Street and the ongoing scrutiny of ETF structures like IBIT keep the conversation anchored in concrete questions about governance, disclosure requirements, and the boundaries of high-frequency market making in a frontier asset class. While proponents of a conspiracy narrative may highlight specific posts or data points, skeptics point to a broader pattern: markets are influenced by a constellation of participants with diverse strategies, and attribution to one firm oversimplifies the dynamics at play.

What to watch next

• Updates in the Terraform-related litigation against Jane Street, including any new filings or court rulings that may illuminate insider-trading claims.
• New or amended 13-F filings from Jane Street that shed light on hedging strategies, including positions in IBIT and mining-related equities, and any disclosed derivatives that could affect net Bitcoin exposure.
• On-chain and market data around the 10:00–10:30 a.m. ET window to assess whether any statistically significant patterns persist in the near term.
• Regulatory or industry guidance on disclosure practices for large ETF components and liquidity providers that could affect how market participants interpret “hidden” exposure.
• Monitoring broader market signals—geopolitical developments, liquidity conditions, and AI-sector performance—that could influence Bitcoin independently of any singular trading desk.

Sources & verification

• Court-appointed administrator filing related to Terra/Labs and Jane Street, alleging insider trading tied to the May 2022 collapse.
• Jane Street’s 13-F filings showing holdings in BlackRock’s IBIT ETF and stakes in Bitcoin mining companies such as Bitfarms, Cipher Mining, and Hut 8.
• Public posts and commentary from market observers, including Bechler’s discussions on 10:00 a.m. ET moves and the contention that IBIT-related hedging could conceal net exposure.
• CryptoQuant head of research Julio Moreno’s analysis on whether the described activity is unique to a single firm or part of delta-neutral trading patterns commonly used to capture spreads.
• Industry analysts’ assessments of whether a single actor can meaningfully drive BTC price given the structure and depth of the market, including critiques of the “10 a.m. dump” narrative by researchers such as Alex Krüger.

Market reaction and key details

Bitcoin (CRYPTO: BTC) has long been a magnet for debate over who moves the market and when. In recent weeks, observers have spotlighted a recurring pattern that some traders interpret as a 10:00 a.m. ET “dump” coinciding with the U.S. market open. Proponents of the theory argue that a firm with deep liquidity, such as Jane Street, could deploy algorithmic sales to reap benefits from ETF inflows and to acquire spot Bitcoin at a discount on the open. A prominent critic of the narrative, however, notes that a single actor is unlikely to set the tone for a market as diffuse as Bitcoin’s, where liquidity is drawn from a wide array of exchanges and participants across multiple jurisdictions.

One thread of the debate centers on Jane Street’s disclosed exposure to the IBIT ETF, alongside positions in mining-related equities. Bechler, a crypto influencer, suggested that if Jane Street carries roughly $790 million in IBIT, the actual net Bitcoin exposure could be largely hedged away, masked by options and futures combinations rather than a straightforward long or short bet. This line of reasoning emphasizes that public filings reveal only a fragment of a much larger, more complex risk posture, where hedges might offset or even invert visible positions.

Yet others push back on the idea that the activity is unique to Jane Street. CryptoQuant’s Julio Moreno cautioned that many funds employ delta-neutral strategies—buying spot exposure while selling futures—to capture spreads without committing to a directional bet. In practice, these maneuvers can appear as divergent price actions around the open while serving to maintain neutral exposure in volatile markets. Moreno’s observations underscore a broader point: the mechanics of hedging frequently blend with price movement in ways that are not easily ascribed to a single firm’s choice of timing or size.

In the eyes of some researchers, even a credible pattern around the open does not translate into a bear-market engine powered by one institution. Nick Puckrin of Coin Bureau argued that Bitcoin’s price dynamics are inherently multifactorial, and a solitary actor—even one as large as Jane Street—cannot unilaterally dictate longer-term moves. He framed the conversation as part of a more nuanced reality: price action is shaped by geopolitical risk, global liquidity conditions, and the ongoing competition for attention among high-growth tech sectors, including AI.

As the market digests these viewpoints, the intersection of legality, disclosure, and market structure remains a live area of inquiry. The Terra-related lawsuit and the ongoing discourse about ETF flows highlight the need for transparency in how large players interact with both spot markets and derivative instruments. The broader takeaway is not a verdict on manipulation, but a reminder that the Bitcoin market’s depth and fragmentation make it resistant to easy explanations or simple villains.

[PRESS RELEASE – San Francisco, CA, February 26th, 2026]

SolanaCDN delivers 3.8x faster shred propagation through a global mesh of 35,000+ nodes, provided as a public good for the Solana network

Pipe Network today announced the launch of SolanaCDN, a free, open-source Solana validator client with an integrated CDN acceleration layer. Built as a fork of Anza’s Agave, SolanaCDN gives every Solana validator access to faster shred propagation through Pipe’s global network of 35,000+ PoP (Point-of-Presence) nodes.

The client and CDN layer are both completely free. Pipe Network is providing SolanaCDN as public good infrastructure for the Solana ecosystem.

The problem SolanaCDN solves

Validator performance on Solana is heavily influenced by network geography. Validators closer to block producers see shreds earlier, vote sooner, and earn more rewards. Validators in less connected regions face slower propagation, missed votes, and reduced leader slot revenue regardless of their hardware.

SolanaCDN addresses this by giving validators a second, faster path for shred delivery alongside native gossip. Shreds and vote packets route through Pipe’s global mesh, which continuously measures every network path and routes traffic along the fastest available route in real time.

Native gossip still runs underneath. SolanaCDN adds a parallel fast lane.

Performance

SolanaCDN delivers 3.8x faster propagation than standard Turbine, with a P50 cross-region latency of approximately 78ms compared to the roughly 300ms baseline on standard gossip.

The client also ships with Pipe-built optimizations available out of the box before the CDN layer is enabled: optimized shred coalescing for leaders (Fast Shreds), snapshot downloads from Pipe’s global network, and restore progress with real-time ETAs during validator catchup.

Public good infrastructure

Faster propagation is a network effect. Every validator running SolanaCDN improves shred delivery globally, which means faster block finalization, fewer forks, and fewer missed slots across the entire Solana network.

“Validator performance shouldn’t be determined by geography,” said David Rhodus, CEO of Pipe Network. “SolanaCDN gives every validator access to the same fast infrastructure. The more validators that run it, the faster Solana gets for everyone.”

Technical design

SolanaCDN is a fully compatible Agave fork. Validators can install it as a drop-in replacement for their existing client. The CDN layer is optional, activated with a single configuration flag, and is non-consensus by design. It does not modify block production, consensus logic, leader scheduling, or voting rules. All CDN operations are non-blocking and fail-safe. If the CDN layer is unavailable, the validator continues operating normally.

Built-in Prometheus metrics and CDN-versus-gossip race data give operators full visibility into performance changes in their environment.

Availability

SolanaCDN is available now. The source code is published on GitHub and the client is ready to run on Solana mainnet-beta.

Website: https://solanacdn.com

GitHub: https://github.com/pipenetwork/agave-solana

About Pipe Network

Pipe Network is a global edge infrastructure company built on Solana. The network operates 35,000+ hyperlocal PoP nodes globally, providing distributed storage with fast reads and real-time data delivery. Pipe’s overlay network tracks latency, loss, and jitter across every path in real time and routes traffic along the fastest one.

[PRESS RELEASE – Singapore, Singapore, February 26th, 2026]

Stablecoins have become a foundational layer for settlement, moving value across payments, remittances, and treasury operations worldwide. As these flows grow, the infrastructure behind dollar-denominated stablecoins matters as much as the assets themselves.

USDC and Circle Cross-Chain Transfer Protocol (CCTP) will be launching on Morph, bringing payment stablecoins and standardized cross-chain settlement to infrastructure built for payments.

USDC on Morph

USDC will be issued on Morph by Circle’s regulated affiliates, establishing it as a settlement asset across the network.

Issuance provides a consistent foundation for dollar-denominated activity. USDC on Morph will be canonical, with uniform behavior across applications and clear provenance at the protocol level.

For developers building payment applications, this simplifies dollar settlement by eliminating the need to manage bridge risk or fragmented liquidity. For institutions operating treasury systems, merchant platforms, or cross-border payment rails, USDC will provide access to a transparent stablecoin supported by Circle’s established on- and off-ramp infrastructure.

“Morph has spent the last several months meaningfully investing in our network’s core offering. As we have engaged with global leaders in the payment space, it’s clear that they need a widely-used, dollar-denominated stablecoin to meet their needs. For us, working with Circle to bring USDC to Morph was a clear choice,” said Colin Goltra, CEO of Morph.

CCTP: Cross-Chain Infrastructure

CCTP will enable USDC to move between supported blockchains using a burn-and-mint process that preserves supply integrity.

When USDC is transferred to Morph via CCTP, it will be burned on the source chain and minted natively on Morph. The asset will remain fully backed and verifiable under the same reserve framework.

Applications will be able to use Standard Transfer or Fast Transfer depending on their security and latency requirements, while maintaining consistent settlement behavior across networks.

Use Cases Across Payments

USDC and CCTP will support a range of payment and financial applications that rely on dependable dollar settlement and cross-chain access.

• Crypto Cards and Neobanks

Card programs and digital issuing platforms will be able to settle balances in USDC while enabling users to fund accounts from supported blockchains via CCTP.

Money movement platforms will benefit from transparent, stablecoin-based settlement with near-instant cross-chain transfers across regions.

Checkout providers will be able to accept payments from users across multiple chains while settling in USDC, simplifying reconciliation and reducing FX delays for merchants.

USDC will serve as collateral and a settlement asset across lending protocols and decentralized exchanges, with CCTP supporting liquidity movement between Morph and other supported blockchains, including connections to the Bitget ecosystem.

Building the Settlement Layer for Digital Dollars

To support teams bringing payment flows on-chain, Morph has launched the $150 million Payment Accelerator, providing funding, technical support, and access to payment partners and institutional onramps.

Together, USDC, standardized cross-chain settlement through CCTP, and direct ecosystem support position Morph as a settlement layer for real financial activity.

As stablecoins continue to underpin payments, treasury operations, and on-chain commerce, Morph is building the execution environment at institutional scale.

Money at the speed of life.

About Morph

Morph is an Ethereum-based, payments-first settlement layer and the native on-chain home of BGB, focused on building the foundation for global consumer finance on-chain. Morph supports real-world financial activity across payments, savings, identity, and rewards, enabling scalable, on-chain settlement for consumer and business use. Guided by the Morph Foundation, the network connects more than 120 million users through the Bitget and Bitget Wallet ecosystems.

Key Takeaways

• The Catalyst: Donald Trump’s State of the Union address reignited risk-on sentiment, directly preceding the $134 billion total crypto market inflow.
• The Flow: Institutional Inflows into ETH ETF products hit $157 million in a single session, marking a decisive reversal from previous outflow trends.
• The Signal: Treasury giant Bitmine added another $106 million in ETH, bringing total holdings to over $9 billion despite share price weakness.

Nearly half of the Bitcoin supply sits underwater, yet accumulation lags, which is keeping the price trapped in a fragile consolidation range for now.

Bitcoin climbed back to $68,000 after several days of decline, as markets reacted positively to Donald Trump’s State of the Union remarks. The crypto asset added fresh 4% gains on Thursday.

But data shows that BTC is still trapped in a structurally defensive consolidation, as the price oscillates between the $60,000 and $69,000, which is being deemed as the main demand zone. In fact, Glassnode experts stated that the market is stabilizing but not yet recovering.

Key Market Conditions

At a 46% drawdown from the all-time high, Bitcoin sits at a depth historically associated with mid-to-late bear market phases, where time itself often becomes a risk factor rather than a catalyst for upside. Nearly 9.2 million BTC are currently held at a loss. This means that half of the circulating supply is underwater, a condition that aligns with prior late-stage bear environments. However, it does not, on its own, point to renewed strength.

Despite the scale of unrealized losses, accumulation behavior remains muted, as evidenced by an Accumulation Trend Score persistently below 0.5 since early February. This indicates a lack of conviction-driven buying, particularly among larger entities whose participation is typically required to form a durable bottom.

Liquidity conditions further validate this fragility. Glassnode found that the 90-day Realized Profit/Loss Ratio has slipped below the critical 1.0 threshold, which appears to be a transition into an excess loss regime where realized losses dominate profits – a state that can persist for months and is associated with impaired capital rotation and higher downside risk.

Market breadth continues to deteriorate as fewer assets sustain positions above long-term trend baselines. Meanwhile, off-chain data mirrors these on-chain signals. For instance, spot markets have flipped decisively into sell-side dominance since cumulative volume delta across major venues plunged to cycle lows, thereby indicating active distribution rather than passive liquidity gaps.

In derivatives markets, leverage has largely reset, as perpetual funding rates compressed back toward neutral. This not only reflected reduced speculative excess but also highlighted the absence of renewed bullish conviction. A similar defensive posture was echoed by the options markets.

You may also like:

Additionally, dealer positioning suggested that while sharp moves can be mechanically amplified, the broader structure remains one of consolidation rather than directional resolution. As such, Bitcoin’s current regime is characterized by stabilization amid structural weakness, where neither sellers nor buyers have seized decisive control.

According to Glassnode, a durable upside recovery will require a clear reversal in these conditions – renewed spot absorption to counter active distribution, sustained accumulation from large entities to restore conviction, and a meaningful shift in institutional flows to reestablish a structural bid. Until such signals emerge, range-bound price action between established valuation anchors remains the dominant theme governing Bitcoin’s market structure.

Macro and Geopolitical Risks

In the near term, macro and liquidity factors may continue to dictate price behavior within this structurally defensive range. In a statement to CryptoPotato, Bitunix analysts said,

“If safe-haven flows strengthen the dollar, price could come under pressure and retest the 65–64K liquidity band below. Conversely, if capital rotates toward an anti-inflation narrative, short-term inflows could drive a sweep of overhead short liquidity near 69K. The core variable remains whether geopolitical risks escalate materially.”

Editor’s note: The following briefing outlines a new phishing campaign uncovered by Kaspersky that hijacks legitimate Google Tasks notifications to steal corporate credentials. The attackers impersonate trusted services, leveraging the @google.com domain and intra-company cues to evade standard filters and pressure users into acting quickly. Victims are invited to click a link and complete a fraudulent employee verification form, exposing sensitive credentials that could grant unauthorized access. This advisory highlights the evolving tactics criminals use to exploit familiar tools and the importance of vigilance in enterprise environments.

Key points

• Attackers abuse legitimate Google Tasks notifications to steal corporate credentials.
• The campaign uses the trusted @google.com domain to bypass filters and build trust.
• Users are directed to a fraudulent employee verification form after clicking a link.
• The social engineering hinges on urgency and internal process appearance to lower defenses.

Why this matters

By exploiting familiar services, the campaign exploits trust in everyday tools, increasing the likelihood that employees reveal credentials. This approach bypasses many security filters and highlights the need for awareness and layered defenses in organizations. The incident underscores why training, MFA, and robust verification processes are critical as attackers continue to adapt to legitimate platforms.

What to watch next

• Look for more phishing attempts that imitate enterprise tools via trusted notification channels.
• Watch for fraudulent forms asking for corporate credentials and verify URLs before interacting.
• Ensure MFA and mail-server security measures are in place to protect accounts.
• Report suspicious activity to IT and update security policies as needed.

Disclosure: The content below is a press release provided by the company/PR representative. It is published for informational purposes.

Kaspersky discovers new phishing campaign exploiting Google Tasks notifications to steal corporate credentials

February 26, 2026

Kaspersky has uncovered a new phishing scheme that abuses legitimate Google Tasks notifications to trick corporate users into revealing corporate login credentials. By leveraging Google’s trusted @google.com email domain and notification system, attackers bypass traditional email security filters and exploit users’ trust in familiar services.

In this campaign, victims receive an authentic-looking notification from Google Tasks with the subject line “You have a new task.” The message creates the illusion that the recipient’s company has adopted Google’s task management tool, pressuring them to act quickly. The notification often includes elements of urgency, such as a high-priority flag and a tight deadline, to prompt the victim’s immediate response.

Upon clicking the embedded link, users are directed to a fraudulent form disguised as an “employee verification” page, where they are asked to enter their corporate credentials under the pretense of confirming their status. These stolen credentials can then be used for unauthorized access to company systems, data theft, or further attacks.

“Google’s vast ecosystem of services gets exploited by scammers. The scheme with Google Tasks is part of a broader trend observed before and continuing into 2026, where cybercriminals misuse legitimate platforms to distribute scams and phishing. Notifications originating from legitimate domains naturally evade many spam and phishing filters, while the social engineering aspect – making it seem like an internal company process – lowers the victim’s guard,” comments Roman Dedenok, Anti-Spam Expert at Kaspersky.

Read the article about this tactic on Kaspersky’s blog.

To counter this and similar threats, Kaspersky recommends:

• Treat unsolicited invitations from any platform with suspicion, even if they appear to come from trusted sources
• Carefully inspect URLs before clicking
• Do not call any phone numbers indicated in suspicious emails – if you need to call support of a certain service, it is best to find the phone number on the official webpage of this service
• Report suspicious emails to the platform provider and use multi-factor authentication for all accounts
• For corporate users, Kaspersky Security for Mail Server with its multi-layered defense mechanisms powered by machine learning algorithms provides robust protection against a wide range of evolving threats and offers peace of mind to businesses in the face of evolving cyber risks
• For individual users Kaspersky Premium offers AI-powered anti phishing features designed to help avoid phishing attacks and improve overall cybersecurity

About Kaspersky

Kaspersky is a global cybersecurity and digital privacy company founded in 1997. With over a billion devices protected to date from emerging cyberthreats and targeted attacks, Kaspersky’s deep threat intelligence and security expertise is constantly transforming into innovative solutions and services to protect individuals, businesses, critical infrastructure and governments around the globe. The company’s comprehensive security portfolio includes leading digital life protection for personal devices, specialized security products and services for companies, as well as Cyber Immune solutions to fight sophisticated and evolving digital threats. We help millions of individuals and nearly 200,000 corporate clients protect what matters most to them. Learn more at www.kaspersky.com.

Blockchain sleuth ZachXBT on Thursday said a senior employee at onchain trading platform Axiom Exchange allegedly abused internal access to user data to track private wallets and potentially trade memecoins using inside information.

In a thread posted to X, ZachXBT said Broox Bauer, a New York-based senior business development employee at Axiom, used internal dashboards to look up sensitive user information — including linked wallet addresses — and shared that data with a small group that mapped trades of prominent crypto influencers.

Axiom, founded in 2024 by Mist and Cal and a member of Y Combinator’s Winter 2025 cohort, has generated more than $390 million in revenue to date, according to ZachXBT.

ZachXBT said he was retained to investigate allegations that internal tools were being misused. He did not say who retained him.

In audio clips shared in the thread, a person said to be Bauer allegedly claims he can track “any Axiom user” by referral code, wallet address or UID and “find out anything to do with that person.” In the same recording, he describes initially researching 10–20 wallets and gradually increasing activity “so it does not look that suspicious.”

Axiom did not respond to CoinDesk’s request for comment. In a post on X, Axiom said it was “shocked and disappointed” that someone on the team abused internal customer support tools.

“We have removed access to these tools and will continue to investigate and hold the offending parties responsible,” Axiom continued. “This does not represent us as a team, we have always tried to put the user first. We’ll share updates on our twitter as we learn more.”

The investigator alleged Bauer shared screenshots in April and August 2025 showing private wallet data tied to specific traders, including connected addresses and registration details. He also claimed a group compiled wallet addresses for multiple crypto key opinion leaders (KOLs) in a Google Sheet using data sourced from Axiom’s internal dashboard.

Several of the people named in the leaked material independently confirmed the accuracy of wallet information, according to ZachXBT.

The alleged strategy focused on traders known for accumulating large memecoin positions from private wallets before promoting tokens publicly. By identifying previously undisclosed wallets, the group could theoretically monitor accumulation patterns and position ahead of anticipated price moves.

ZachXBT identified what he said was Bauer’s primary wallet and mapped related addresses, noting that funds flowed to several deposit addresses on centralized exchanges. He cautioned, however, that without access to Axiom’s internal logs, it is difficult to establish high-confidence examples of insider trading based solely on onchain data.

The claims surfaced amid heightened scrutiny of trading practices in crypto. Earlier this week, a widely followed Polymarket bet on the identity of the firm in the investigation shifted sharply toward Axiom, with the market generating more than $30 million in volume.

Solana-based liquidity platform Meteora was the leading candidate at about 43% odds earlier in the week, with Axiom, Pump.fun, Jupiter and MEXC trailing at lower probabilities.

As of European morning hours Thursday, those odds shifted and Axiom became the frontrunner at 35%, followed by Meteora at 26% and the ‘others’ category at 15%.

While prediction market odds reflect trader sentiment, they offer no verified insight into the underlying evidence or the outcome of the investigation.