Connect with us
DAPA Banner

Crypto World

CFTC’s first self-custody no-action letter signals new era for XRP derivatives

Published

on

XRP Price Glitch Sends XRP to $126 on CNBC Broadcast

The CFTC’s first no-action letter for a self-custodial wallet and a joint SEC-CFTC move classifying XRP as a digital commodity give non-custodial XRP infrastructure a clearer path into regulated derivatives.

Summary

  • The CFTC issued its first-ever no-action letter for a self-custodial crypto wallet provider on March 17, granting Phantom Technologies regulatory relief without requiring broker registration.
  • XRP treasury firm Evernorth flagged the move as a pivotal moment for XRP, noting the ruling’s core principle — that non-custodial platforms are not financial intermediaries — aligns directly with XRP’s design architecture.
  • XRP was simultaneously classified as a “digital commodity” in a joint SEC-CFTC framework released on March 17, pushing the token above $1.50 before it pulled back to $1.41.

A regulatory development that passed largely unnoticed last week is drawing fresh attention from the XRP (XRP) community. On March 24, XRP-focused treasury firm Evernorth flagged that the U.S. Commodity Futures Trading Commission had quietly issued its first-ever no-action letter for a self-custodial crypto wallet software provider — a move Evernorth described as being “hidden by the SEC commodity classification” announced the same day.

The CFTC published Letter No. 26-09 on March 17, granting no-action relief to Phantom Technologies Inc., the developer behind the Phantom wallet — one of Solana’s most widely used self-custodial wallets. The letter stated that Phantom could facilitate derivatives trading access for its users without registering as an introducing broker or associated person, provided it never takes custody of user funds.

Advertisement

Evernorth summarized the significance of the ruling in a post on X: “The core principle: if you don’t hold customer funds, you’re not a financial intermediary.” The firm argued this framework has direct implications for XRP’s infrastructure, given Ripple’s long-standing design philosophy around non-custodial settlement.

Chart analyst @ChartNerdTA amplified Evernorth’s post with the headline “XRP Was DESIGNED For This,” pointing to the convergence of the CFTC no-action letter and XRP’s simultaneous commodity classification as compounding regulatory tailwinds for the token.

XRP Commodity Designation Provides Institutional Framework

On the same date as the Phantom letter, the SEC and CFTC issued a joint interpretive release classifying XRP as a “digital commodity,” formally placing the Ripple-associated token outside the scope of U.S. securities law. Ripple’s Chief Legal Officer Stuart Alderoty responded swiftly on X, stating: “We always knew XRP wasn’t a security — and now the @SECGov has made clear what it is: a digital commodity.”

Advertisement

XRP’s trading volume surged 125% to $3.22 billion on March 17 as the commodity designation was published, pushing its market cap to approximately $93.4 billion and briefly overtaking BNB’s position in the global rankings. The token is currently trading at $1.41, with a 24-hour volume of $2.29 billion and a market cap of $86.4 billion.

The Phantom no-action letter falls under CFTC Letter 26-09, issued by the agency’s Market Participants Division. It allows self-custodial wallets to offer front-end interfaces for CFTC-regulated derivatives — such as futures contracts on designated contract markets — without triggering broker registration requirements, as long as the wallet operator imposes proper risk disclosures, never controls user funds, and maintains records and compliance policies comparable to those of a registered introducing broker.

The implications for XRP are strategic rather than immediate. Evernorth noted that the ruling establishes a regulatory pathway for non-custodial platforms — like those built on the XRP Ledger — to interface with regulated derivatives markets without being reclassified as financial intermediaries. The firm described this as a “significant milestone, particularly for self-custody solutions.”

The CFTC‘s posture under newly confirmed Chairman Brian Quintenz has shifted toward a pro-innovation stance, with the agency advancing a Memorandum of Understanding with the SEC on March 11, 2026, to streamline oversight for dually registered firms and reduce regulatory fragmentation across digital asset markets.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Friday’s eth.limo Hijack Caused by Social Engineering on EasyDNS

Published

on

Friday’s eth.limo Hijack Caused by Social Engineering on EasyDNS

Ethereum Name Service gateway eth.limo has revealed that the domain hijacking on Friday was caused by a social engineering attack directed against EasyDNS, its domain name service provider. 

According to a postmortem published by eth.limo on Saturday, an attacker impersonated one of its team members to initiate an account recovery process with easyDNS, granting access to the eth.limo account and allowing them to alter domain settings.

“The NS records were changed and directed to Cloudflare… Once we understood that a DNS hijack had taken place, we immediately notified the community as well as Vitalik Buterin and others. We then began contacting EasyDNS in an attempt to respond to the incident,” the company said.

Eth.limo serves as a Web2 bridge, providing access to around 2 million decentralized websites using the .eth domain name. Hijacking the service could allow an attacker to redirect users to malicious websites. Ethereum co-founder Vitalik Buterin warned users Friday to avoid his blog until the incident was resolved.

Advertisement

Mark Jeftovic, CEO of easyDNS, has publicly accepted responsibility for the incident in its own postmortem report. 

“We screwed up and we own it,” said Jeftovic on Saturday. 

“This would mark the first successful social engineering attack against an easyDNS client in our 28-year history. There have been countless attempts.”  

Both companies have pointed to the Domain Name System Security Extension (DNSSEC) in thwarting the hacker’s attempts to do further damage. 

The attacker couldn’t produce valid cryptographic signatures, so Domain Name System resolvers rejected the attacker’s forged DNS responses, causing users to see error messages instead of being redirected to malicious sites. 

Advertisement

“DNSSEC was enabled for their domain when the attackers attempted to flip their nameservers, presumably to effect some manner of phishing or malware injection attack, DNSSEC-aware resolvers, which most are these days, began dropping queries,” Jeftovic said. 

Source: eth.limo

In its postmortem, eth.limo noted that because the attacker lacked the signing keys, they were unable to bypass the safeguards, which likely “reduced the blast radius of the hijack. We are not aware of any user impact at this time. We will provide updates if that changes.”

easyDNS makes changes since the attack

Jeftovic described the social engineering attack as “highly sophisticated,” and said easyDNS is still conducting a post-mortem on how the breach occurred, and has already begun rolling out changes to prevent a recurrence.

Source: easyDNS

“In eth.limo’s case, we will be migrating them to Domainsure, which has a security posture more suited toward enterprise and high-value fintech domains, TLDR there is no mechanism for an account recovery on Domainsure, it’s not a thing,” he added.

“On behalf of everyone here, I apologize to the eth.limo team and the wider Ethereum community. ENS has always had a special place in our heart as the first registrar to enable ENS linking to web2 domains and we’ve been involved in the space since 2017.”

Related: RaveDAO denies manipulation as Binance, Bitget probe RAVE trading activity

Advertisement

The eth.limo incident is the latest in a series of domain hijackings targeting crypto projects. Days earlier, decentralized exchange aggregator CoW Swap lost control of its website after an unknown party hijacked its domain. 

Steakhouse Financial, a DeFi advisory and research firm, similarly disclosed at the end of March that it had lost control of its domain to an attacker.

Magazine: Will the CLARITY Act be good — or bad — for DeFi?