Connect with us
DAPA Banner

Crypto World

Since FTX, Institutions No Longer Want to Keep Crypto on Exchanges

Published

on

Ray Dalio Warns of World Order Breakdown: Is Crypto at Risk?

Institutions are accelerating their adoption of crypto, with major players steadily entering the market and expanding their exposure to digital assets. But while participation is rising, the way these institutions engage with the ecosystem has fundamentally changed.

The old model, where funds parked large amounts of capital directly on crypto exchanges, is being replaced. In its place is a new architecture where trading and custody are no longer intertwined.

“Counterparty risk awareness in crypto comes in cycles, and the recent major cyber-attack has triggered one of the largest waves of exchange derisking since FTX. It is yet another reminder that separating crypto custody from exchange trading is essential for security,” says Dominic Lohberger, Sygnum Chief Product Officer.

How FTX Broke Institutional Trust in Exchange Custody

Before 2022, the dominant strategy was simple. Deposit funds onto an exchange, execute trades, and leave capital there for convenience and speed. Exchanges acted as both trading venues and custodians. That model worked, until it didn’t.

Advertisement

The collapse of FTX exposed a critical flaw. Investors were taking on massive, often invisible counterparty risk. FTX operated as an exchange, custodian, lender, and clearinghouse all in one

What had been considered operational efficiency was suddenly recognized as a structural vulnerability. Customer assets were not held in verifiable, on-chain, segregated accounts. When the firm filed for bankruptcy, clients discovered their funds had been diverted to Alameda.

The damage extended well beyond FTX’s direct users. Galois Capital, a former registered investment adviser, shut down after half its assets were stuck on FTX when the exchange collapsed.

In September 2024, the SEC fined Galois $225,000 for failing “to comply with requirements related to the safeguarding of client assets.”

The Celsius bankruptcy added another layer of alarm. A US bankruptcy court ruled that customer deposits into Celsius Earn Accounts became the property of the debtors’ estate, not the depositors.

Investors who believed they were holding assets learned they were, in legal terms, unsecured creditors.

Research from Coalition Greenwich found that institutional-grade cold storage and exchange wallets were equally popular before the FTX collapse. That changed overnight.  

The industry mantra “not your keys, not your coins” evolved from a philosophical stance into a compliance requirement.

What Off-Exchange Settlement Actually Looks Like

The traditional crypto trading model required institutions to deposit funds into an exchange before placing a trade. The exchange held both the assets and the execution function, thereby concentrating risk in a single entity. 

Off-exchange settlement, or OES, flips this model. This new class of infrastructure is designed specifically to isolate risk. Assets remain with a third-party custodian or in a self-custodied wallet. 

Advertisement

Instead of holding assets on exchanges, institutions now store them with third-party custodians. These custodians, often regulated entities or specialized infrastructure providers, secure funds in segregated wallets.

Trading still happens on exchanges, but with a key difference. Exchanges are granted limited access to a trading balance or credit line, typically backed by assets held in custody. 

The exchange can execute trades, but it cannot unilaterally move or withdraw the underlying funds. Settlement happens separately, often on a net basis after trades are completed.

Subscribe to our YouTube channel to watch leaders and journalists provide expert insights

Advertisement

The Rise of Risk Isolation Models

In traditional finance, this separation between custody and execution has existed for decades. Crypto lacked this structure until several companies, including Fireblocks and Copper, built it.

The former launched Fireblocks Off Exchange in November 2023. Off-Exchange offers Collateral Vault Accounts (CVAs). 

These are on-chain wallets secured by Multi-Party Computation (MPC) cryptography. When an institution deposits assets into a CVA, the connected exchange receives a trading credit.

Copper’s ClearLoop is an off-exchange settlement solution in which assets remain in Copper’s MPC (Multi-Party Computation) custody. Trades settle on Copper’s own infrastructure.

Advertisement

Both systems have gained significant traction. Deribit became the first exchange to fully integrate Fireblocks OES in February 2024. HTX followed in April 2025. 

“Since the launch, HTX has onboarded numerous institutional clients and recorded a 200% increase in trading volume, validating market demand for secure off-exchange settlement models,” the press release read.

Copper’s ClearLoop now connects several live exchanges, including Coinbase, OKX, Bybit, Deribit, Bitget, and more, facilitating over $50 billion in monthly notional trading volume. The Bybit hack of 2025 further demonstrated the advantages of off-exchange settlement.

How Bitcoin ETFs Made the Separation Permanent

The approval of spot Bitcoin (BTC) ETFs in January 2024 did more than open a new investment vehicle. It hardwired the custody-execution separation into the most visible crypto product on Wall Street.

Advertisement

For instance, like many other ETFs, BlackRock’s iShares Bitcoin Trust ETF (IBIT) uses Coinbase Custody Trust Company, LLC. The structure is built so that Bitcoin sits in cold storage vaults, entirely separate from any trading venue. 

Creation and redemption of ETF shares follow an operational process in which assets move between the vault and trading balances within defined settlement windows. The exchange where IBIT trades on the secondary market never touches the underlying Bitcoin.

This is not an optional design choice. It is how ETFs work by definition. The custodian holds the asset. The authorized participant handles creation and redemption. The exchange handles price discovery. Three roles, three entities, no overlap.

Off-Exchange Trend Rises, but Coinbase Holds the Crown

While the shift away from exchange custody is real, the data suggest a more nuanced transition rather than a full-scale replacement. 

Advertisement

Despite the rise of off-exchange models, Coinbase remains the dominant force in institutional crypto custody. The firm currently holds custody for over 80% of global crypto ETF assets.

It also serves as custodian for eight of the top 10 publicly traded companies with Bitcoin (BTC) on their balance sheets. 

This dominance is further reinforced by regulatory momentum. In April 2026, the Office of the Comptroller of the Currency granted Coinbase conditional approval to charter Coinbase National Trust Company, a move that would allow it to operate as a federally regulated crypto custodian upon full approval.

Follow us on X to get the latest news as it happens

Advertisement

The significance of this shift is twofold. First, it strengthens Coinbase’s position as a qualified custodian, a key requirement for institutional investors such as asset managers, pension funds, and ETF issuers.

Second, it signals that while institutions are reducing exposure to exchange risk, they are not abandoning centralized players altogether.

Instead, capital is consolidating around a smaller group of regulated, systemically important custodians. This creates a hybrid market structure:

Advertisement
  • Off-exchange infrastructure reduces direct counterparty risk
  • Regulated exchanges and custodians continue to anchor institutional trust
  • Market power concentrates in platforms that can offer both compliance and scale

In effect, the post-FTX evolution isn’t about eliminating intermediaries. It’s about redefining which intermediary institutions are willing to trust.

What Would Happen If an FTX-Scale Collapse Occurred Today

Amid growing attention toward off-exchange models, a natural question emerges: would an FTX-style failure still have the same impact on institutional capital?

Under the old model, an exchange collapse froze all deposited assets. Institutions became unsecured creditors in a years-long bankruptcy proceeding.

Under the current OES infrastructure, the outcome would differ substantially. If an exchange using Fireblocks OES collapsed, the institution’s assets would remain in its CVA. The principal never entered the exchange’s balance sheet. 

Fireblocks’ disaster recovery mechanism, powered by Coincover, also enables institutions to ensure operational security by eliminating single points of failure. The only exposure would be unsettled profit-and-loss from recent trades.

Advertisement

With ClearLoop, the English Law Trust would shield client assets from both exchange and Copper insolvency. Again, an institution’s loss would be limited to any unsettled trading obligations, not the total portfolio.

At FTX, institutions lost their entire deposited balance. Under OES, the same scenario would expose them to days of unsettled P&L at most. That is the difference the new plumbing makes.

That distinction highlights the real impact of crypto’s changing infrastructure. The industry hasn’t eliminated risk, but it has significantly reduced the scope of catastrophic loss tied to exchange failure.

Market Scale and What Comes Next

The institutional crypto custody market hit approximately $3.2 billion in 2024. It is projected to reach $27.8 billion by 2033 at a 26.7% compound annual growth rate. 

Advertisement

That growth reflects more than just new capital entering the market. It reflects a structural rebuild of how that capital is held, moved, and settled.

The next phase of that rebuild is already taking shape around tokenized collateral. Rather than locking up idle stablecoins or Bitcoin as margin on an exchange, institutions are beginning to use tokenized money market funds and yield-bearing stablecoins as on-exchange.

“Institutions aren’t chasing speculation; they’re chasing capital efficiency. Off-exchange settlement delivers that by putting custody and control back where they belong. As tokenised collateral and regulated venues converge, OES will become the default workflow for serious institutional participation,” Wing Cheah, Product Manager, Interchange, said.

Traditional banks are also entering the picture. In 2025, BBVA partnered with Binance to offer regulated off-exchange custody services to Binance’s institutional clients.

Nomura’s digital assets arm, Laser Digital, applied for an OCC license to open a national trust bank focused on crypto custody, spot trading, and staking for clients. 

Advertisement

These moves signal that the custody function is migrating from crypto-native firms into the broader financial system. Taken together, these developments point in a consistent direction.

The custody function is quietly migrating away from exchanges. Liquidity and price discovery remain on the trading venue, but the assets themselves increasingly do not.

What started as a post-FTX demand from a handful of institutional players is gradually becoming the default wiring of the market. The separation is not yet complete, but the direction has not reversed either.

The post Since FTX, Institutions No Longer Want to Keep Crypto on Exchanges appeared first on BeInCrypto.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Bitcoin (BTC) Surges Past $73K as ETFs Pour in $240M During Friday Rally

Published

on

Bitcoin (BTC) Price

TLDR

  • BTC escaped a bear pennant formation, climbing to a six-week peak of $73,300
  • Key resistance territory identified by Glassnode sits in the $78,000-$80,000 range
  • Prediction markets on Polymarket now show 26% probability of BTC hitting $80,000 this month
  • Institutional Bitcoin ETF buyers accumulated 3,350 BTC valued at $240 million on Friday alone
  • Geopolitical developments including U.S.-Iran détente and improving macro sentiment drove BTC up almost 9% weekly

Bitcoin surged beyond the $73,000 threshold on Friday, touching a six-week peak at $73,300 following a decisive breakout from what technical analysts had identified as a bear pennant formation on daily timeframes. The advance occurred alongside elevated trading volumes, suggesting genuine buying conviction rather than thin market manipulation.

Bitcoin (BTC) Price
Bitcoin (BTC) Price

The cryptocurrency pierced through the pennant’s upper boundary near $70,000, delivering a 7% single-session gain. During this advance, BTC successfully recaptured multiple significant moving average levels, notably the 200-week exponential moving average positioned at $68,350 and the 50-day exponential moving average sitting at $70,580.

Technicians have also spotted a symmetrical triangle developing on daily charts. Should this pattern complete its typical trajectory, the projected upside target reaches approximately $87,000—representing roughly 20% appreciation from current pricing. Additionally, the Relative Strength Index displays bullish divergence, indicating momentum has been gradually accumulating throughout the previous two months.

The immediate technical obstacle for Bitcoin sits at the 100-day exponential moving average hovering near $75,400. Failure to overcome this barrier could compromise the strength of the present breakout attempt.

What Onchain Data Says About $80K

Glassnode analytics establishes a more defined upper boundary for the near-term advance. The analytics firm’s risk assessment tools highlight substantial resistance clustering between the true market mean around $78,000 and the short-term holder acquisition cost basis approximating $80,000.

“Any rally into this zone is likely to encounter meaningful distribution pressure from recent buyers seeking to exit at or near breakeven,” Glassnode said in its latest Week Onchain report.

Their Entity-Adjusted URPD metrics indicate BTC has penetrated a comparatively sparse zone spanning $72,000 to $82,000, featuring diminished supply overhead throughout that corridor. Nevertheless, over 1.3 million BTC were accumulated within the $82,000-$85,000 band, potentially establishing a formidable ceiling.

Advertisement

Market observer Ali Charts highlighted on X that $75,300 functions as a “magnet” for Bitcoin pricing, observing substantial liquidity concentration positioned just beyond $72,000. He suggested a movement toward $75,300 might eliminate approximately $80 million in short positions, potentially initiating a liquidation cascade.

ETF Demand and Macro Backdrop

Regarding institutional participation, Bitcoin Archive documented on X that spot Bitcoin ETF products absorbed 3,350 BTC worth $240 million during a single trading session. These investment vehicles collectively control 721,090 BTC, representing approximately $56.75 billion in aggregate value.

Broader macroeconomic circumstances also turned favorable for Bitcoin’s trajectory this week. Diplomatic progress toward a U.S.-Iran ceasefire agreement lifted risk-sensitive assets across markets, propelling BTC toward a weekly appreciation approaching 9%—marking its strongest weekly performance since October 2025.

March Consumer Price Index data registered 3.3%, primarily attributable to a substantial 10.9% spike in energy sector costs. Core inflation measurements, however, advanced merely 0.2% month-over-month.

On decentralized prediction platform Polymarket, participants currently assign a 26% probability to BTC achieving $80,000 during April, representing a 5% increase over the preceding 24 hours. Meanwhile, the likelihood of reaching $75,000 stands at 76%.

Advertisement

Bitcoin ETF products maintained holdings of 721,090 BTC valued at $56.75 billion as of Friday’s close.

Source link

Advertisement
Continue Reading

Crypto World

Japan Unleashes $4B More on Rapidus as 2nm AI Race Tightens

Published

on

Brian Armstrong's Bold Prediction: AI Agents Will Soon Dominate Global Financial

TLDR:

  • Japan lifted Rapidus backing to $16.3B as its 2nm AI chip production deadline remains fixed for 2027.
  • New funds support Fujitsu-linked design work and strengthen Japan’s domestic AI semiconductor stack.
  • Hokkaido foundry progress cleared ministry review, unlocking another ¥631.5B in state support.
  • The Rapidus plan ties AI compute growth to supply chain security and sovereign chip production.

Japan has added another ¥631.5 billion to Rapidus, deepening one of the world’s largest state-backed semiconductor bets. 

The new funding lifts total public support to ¥2.6 trillion, or about $16.3 billion, through March 2027. Rapidus remains central to Tokyo’s effort to rebuild domestic 2nm chip production for AI workloads and advanced computing. 

The move also tightens Japan’s broader technology push around supply chain resilience and sovereign semiconductor capacity.

Rapidus AI chip funding accelerates Japan’s 2nm roadmap

According to Bloomberg, the latest capital will support Rapidus’ development work tied to Fujitsu, one of the startup’s earliest targeted customers.

The Economy Ministry said an external committee reviewed the Hokkaido foundry and approved its technical progress before the subsidy release.

Advertisement

Rapidus, launched in 2022, is building out a domestic 2nm manufacturing line with technology cooperation from IBM. The company still targets mass production in 2027.

The project also carries backing from major Japanese corporates, including Toyota, Sony, and SoftBank, reinforcing its strategic importance beyond pure commercial returns.

Tokyo’s funding pace shows how AI infrastructure demand now overlaps with national industrial policy. Advanced nodes increasingly underpin cloud compute, robotics, and high-performance AI inference.

Japan’s semiconductor strategy targets AI supply chain security

The additional subsidy also supports design-related work involving Fujitsu and IBM Japan through NEDO programs.

Advertisement

That expands the project from fabrication into a fuller domestic semiconductor design stack, a critical step for AI chip independence.

Japan’s push comes as governments seek alternatives to concentrated foundry exposure in Taiwan and South Korea. For Tokyo, the Rapidus buildout doubles as economic security policy.

The 2nm target places Rapidus directly in competition with leading global foundries serving AI chip demand, where process leadership determines power efficiency and model performance.

For crypto markets, the development matters because AI data-center expansion increasingly overlaps with GPU supply, mining hardware innovation, and tokenized compute infrastructure.

Advertisement

As Bloomberg reported, the latest review focused on execution milestones at the Hokkaido site, where Tokyo wants proof the 2027 manufacturing deadline remains on track.

Source link

Advertisement
Continue Reading

Crypto World

Iran’s Best War Tactic is Now a Liability at the Negotiating Table

Published

on

Iran’s Best War Tactic is Now a Liability at the Negotiating Table

The mines Iran scattered across the Strait of Hormuz are now preventing the country from widening access to the waterway, as Tehran cannot account for where all of them ended up, US officials say.

The revelation comes as senior delegations from both countries are set to meet in Islamabad for negotiations that will test whether any truce can survive.

Iran Can’t Find the Mines It Planted in the Strait of Hormuz

According to The New York Times, Iran used small boats to scatter mines across the strait after the US and Israel launched their strikes on February 28. US officials noted many mines may have been placed without recorded coordinates or in ways that allowed them to drift.

The haphazard placement created a problem Tehran did not anticipate. Foreign Minister Abbas Araghchi signaled that Tehran would allow vessels through the waterway, but “with due consideration of technical limitations.” American officials said that phrase referred directly to Iran’s inability to find or clear its own ordnance.

Advertisement

Follow us on X to get the latest news as it happens

Meanwhile, this directly undermines the toll system Iran announced. Under that framework, laden tankers must email cargo details to Iranian authorities and then pay $1 per barrel of oil in Bitcoin within seconds. The system was designed to bypass sanctions.

The Hormuz Letter highlighted that, at pre-war traffic of roughly 20 million barrels per day. This fee structure could generate approximately $7.3 billion annually. However, with uncharted mines still drifting through the strait, the toll’s revenue potential is largely theoretical for now.

Advertisement

US-Iran Ceasefire Talks Open Under Immense Pressure

Senior delegations from both countries have arrived in Islamabad for ceasefire talks. Vice President JD Vance leads the US team alongside Steve Witkoff and Jared Kushner. Meanwhile, Parliament Speaker Mohammad Bagher Ghalibaf and Araghchi head Iran’s delegation.

President Trump has demanded the “complete, immediate, and safe opening” of the strait as a condition for the ceasefire to hold. Yet neither side possesses mine-clearing capabilities. 

“The US military lacks robust mine removal capabilities, relying on littoral combat ships equipped with mine sweeping capabilities. Iran also does not have the capability of quickly removing mines, even the ones it planted,” the report read.

The mine problem feeds into a broader economic fallout. BeInCrypto recently highlighted that the Strait’s closure has also disrupted global fertilizer and aluminum supply chains, amplifying the damage well beyond oil prices.

Advertisement

Whether Islamabad produces a framework for sustained mine clearance and verified strait reopening will determine whether the ceasefire survives beyond its April 22 expiration.

Subscribe to our YouTube channel to watch leaders and journalists provide expert insights

The post Iran’s Best War Tactic is Now a Liability at the Negotiating Table appeared first on BeInCrypto.

Advertisement

Source link

Continue Reading

Crypto World

CFTC Wins Arizona TRO as Prediction Markets Criminal Case Pauses

Published

on

Brian Armstrong's Bold Prediction: AI Agents Will Soon Dominate Global Financial

TLDR:

  • Arizona must pause criminal charges against CFTC-regulated prediction markets after the federal TRO order.
  • The CFTC says federal law grants exclusive authority over event contracts and market enforcement.
  • Connecticut and Illinois now face similar federal lawsuits over state prediction market restrictions.
  • The ruling strengthens legal momentum for federally supervised crypto-linked trading platforms.

A federal judge in Arizona temporarily halted the state’s criminal case against federally regulated prediction markets on Friday. The order came after the Commodity Futures Trading Commission asked the court to stop Arizona’s enforcement push. 

The ruling preserves the status quo while a broader federal preemption fight moves forward. It also sharpens the legal divide between state gambling rules and federal event contract oversight.

CFTC Arizona TRO Freezes State Prediction Markets Charges

The U.S. District Court for the District of Arizona granted the temporary restraining order on April 10. The court barred Arizona from continuing criminal proceedings against CFTC-regulated designated contract markets.

According to the CFTC filing, the agency moved earlier this week for emergency relief. That motion followed its original complaint seeking to block Arizona from enforcing state law.

The dispute centers on whether federal law preempts state gambling and criminal statutes. The CFTC argues the Commodity Exchange Act gives it exclusive authority over event contracts.

Advertisement

Chairman Michael S. Selig said the order keeps the legal status quo intact while the court reviews jurisdictional questions. The agency also tied the case to broader concerns around state interference in federally supervised markets.

Arizona became the first state to pursue criminal counts tied to prediction market listings, including contracts offered by Kalshi. The restraining order now pauses that path, at least temporarily.

Federal Prediction Markets Fight Expands Beyond Arizona

The Arizona action forms part of a wider CFTC legal campaign. Last week, the agency filed related complaints against Connecticut and Illinois.

Those cases seek declaratory judgments confirming exclusive federal control over event contracts. The CFTC also wants permanent injunctions blocking states from enforcing overlapping laws.

Advertisement

The timing matters for crypto-linked prediction markets as well. Platforms like Polymarket and Kalshi increasingly overlap with digital asset users, stablecoin settlement, and onchain market infrastructure.

Recent court decisions have already strengthened the federal side. Earlier this week, an appeals court blocked New Jersey from shutting down Kalshi’s sports markets.

Friday’s Arizona TRO adds another legal marker in the same direction. For traders and exchanges, the immediate effect is procedural, but the broader question remains federal control over fast-growing prediction markets.

Advertisement

Source link

Continue Reading

Crypto World

Stablecoin Flows Emerge as Leading Signal for L1 Market Performance: Research

Published

on

Brian Armstrong's Bold Prediction: AI Agents Will Soon Dominate Global Financial

TLDR:

  • Artemis stablecoin factor posted 83.6% annualized returns with minimal dependence on Bitcoin direction.
  • The strategy gained 6.8% monthly across BTC down months, showing resilience during crypto market weakness.
  • Mid-cap chains including Polygon and Sei generated 84% of total stablecoin factor returns over five years.
  • Stablecoin flows remained Artemis’ least-correlated alpha factor with only 6.1% variance overlap.

Stablecoin flows are emerging as one of crypto’s clearest signals for layer-1 market rotation. 

New research from Artemis shows capital moving through stablecoins consistently preceded stronger relative returns across major chains. The firm’s five-year backtest found the strategy remained largely detached from broad crypto market direction. 

Results also showed the factor produced gains during months when Bitcoin posted losses.

Stablecoin Flows Predict L1 Returns Across Market Cycles

Artemis said its weekly rebalanced long-short factor generated a 1.67 Sharpe ratio over five years. The model delivered an annualized return of 83.6% during the test period.

The same backtest recorded a maximum drawdown of 43.9%. A volatility-targeted overlay lowered drawdown to 31.9% while reducing Sharpe to 1.17.

Advertisement

The data pointed to minimal dependence on Bitcoin’s broader trend. Artemis reported a market beta of -0.03 and an R² of 0.1%.

That structure became more visible during weaker crypto conditions. Across 30 BTC-negative months, the factor returned 6.8% monthly while Bitcoin fell 10.9%.

Artemis also measured annualized alpha at 73.8% after controlling for market exposure. The reported t-statistic reached 3.31 with significance at the 1% level.

The firm noted the strategy’s out-of-sample Sharpe estimate still held at 0.96 after applying a degrees-of-freedom haircut. That kept stablecoin flows among its strongest market-neutral crypto signals.

Advertisement

Mid-Cap Chains Drive Stablecoin Factor Alpha

Most of the gains came from the long side of the book. Artemis said 84% of returns originated from long exposure to chains attracting positive stablecoin inflows.

Mid-cap networks dominated the return profile. Polygon, Mantle, Optimism, BSC, and Sei contributed 84% of total factor returns.

The research also showed limited overlap with Artemis’ broader factor suite. Maximum pairwise correlation across the stack measured only 0.16.

Even after spanning regression against all other factors, the stablecoin signal retained a 2.54 t-statistic. Artemis said just 6.1% of variance overlapped with other models.

Advertisement

Performance also stayed resilient through distinct market phases. The factor returned 262% in 2021, 47% in 2022, and 315% in 2025.

Its only negative year came in 2024 with a 13% decline. Artemis linked that period to stagnant aggregate stablecoin supply growth before recovery resumed.

Advertisement

Source link

Continue Reading

Crypto World

EngageLab Flaw Opened 30M Wallet Apps to Android Data Theft: Microsoft

Published

on

Brian Armstrong's Bold Prediction: AI Agents Will Soon Dominate Global Financial

TLDR:

  • Microsoft found the EngageLab SDK bug could expose private wallet data across 30M Android installs globally.
  • The flaw abused Android intents to grant hostile apps persistent read and write provider permissions.
  • EngageLab fixed the issue in v5.2.1 by changing MTCommonActivity to non-exported status.
  • Google Play removed affected wallet apps, while Android added safeguards for already installed versions.

Microsoft has disclosed a severe Android SDK vulnerability that placed more than 30 million crypto wallet installs at risk. The flaw affected EngageLab’s widely used EngageSDK, which many wallet apps used for push messaging features. 

According to Microsoft’s security research, the issue enabled malicious apps on the same device to bypass sandbox protections. Google Play has since removed all identified apps using the vulnerable SDK versions.

EngageLab Android SDK Flaw Exposed Crypto Wallet Attack Surface

Microsoft said the issue centered on an exported Android activity called MTCommonActivity

The component was automatically added during manifest merging after developers imported the SDK. Because it appeared post-build, many teams likely missed it during review. That left production APKs open to hidden risk.

The vulnerable flow began when the activity received an external intent. Its onCreate() and onNewIntent() callbacks both routed data into processIntent()

Advertisement

That method extracted a URI string and forwarded it deeper into the SDK logic. The chain eventually rebuilt and launched a new intent.

Microsoft’s write-up noted the critical failure happened in a helper method. Instead of returning a safe implicit intent, it returned an explicitly targeted one. That changed Android’s normal resolution path and let hostile apps redirect execution. 

In practice, the vulnerable wallet app launched the malicious payload with its own privileges.

The risk worsened because the SDK used Android’s URI_ALLOW_UNSAFE flag. That allowed persistent read and write URI permissions inside the redirected intent. 

Advertisement

A malicious app could then gain access to non-exported content providers. From there, sensitive wallet files, credentials, and user data became reachable.

Microsoft Patch Timeline and Android Wallet Mitigation Guidance

Microsoft Security Vulnerability Research first identified the flaw in EngageSDK version 4.5.4 in April 2025. It then notified EngageLab under coordinated disclosure rules. 

The Android Security Team also received the report because affected apps were live on Google Play. The fix arrived months later in version 5.2.1 on November 3, 2025.

In the patched release, EngageLab changed the vulnerable activity to non-exported. That single change blocks outside apps from invoking the component directly. Microsoft said it currently has no evidence of in-the-wild exploitation. Still, it urged developers to update immediately.

Advertisement

The report stressed that third-party SDKs can silently expand wallet attack surfaces. 

Crypto apps face elevated stakes because they often store keys, credentials, and financial identifiers. Even minor upstream library flaws can ripple across millions of devices. This case pushed total exposure above 50 million installs when non-wallet apps were included.

Microsoft also said Android added automatic protections for previously installed vulnerable apps. Those mitigations reduce risk while developers migrate to the fixed SDK. 

The company urged teams to inspect merged manifests after every dependency update. That review can catch exported components before release.

Advertisement

Source link

Continue Reading

Crypto World

XRP Price Flashes Multiple Bottom Signals As Bulls Defend $1.30.

Published

on

XRP Price Flashes Multiple Bottom Signals As Bulls Defend $1.30.

XRP (XRP) has been in an eight-month downtrend, with momentum and onchain indicators at levels that previously coincided with macro bottoms.

Data from TradingView reveals that the relative strength index (RSI) of the XRP/BTC ratio is at 24, the most oversold level since October 2025. 

Such low levels in the daily RSI have marked market bottoms for the ratio, ultimately leading to 65% to 345% XRP price breakouts against Bitcoin as seen late 2024 and 2025.

XRP/BTC daily chart. Source: Cointelegraph/TradingView

The chart above also shows that the XRP/BTC pair is trading within a long consolidation range, which has previously acted as a strong launching pad for the ratio.

The last time XRP bottomed against Bitcoin around this zone was in June 2025. It marked the beginning of a 61% increase in the XRP/BTC ratio, accompanying a 92% XRP price rally to a multi-year high of $3.66.

Advertisement

Other instances shown by the yellow bars in the chart reinforce the reliability of this level in marking macro bottoms for XRP/BTC. 

MVRV Z-Score suggests XRP price is bottoming

XRP’s MVRV Z-score is hovering near zero, a level that historically aligns with accumulation zones and market bottoms.

This indicates that most holders are close to breakeven, reducing sell pressure and signalling potential downside exhaustion. Similar patterns appeared in 2021, 2022 and 2024 before major rallies.

XRP MVRV Z-score vs. price. Source: Glassnode

Note that the last time XRP’s MVRV Z-score fell to similar levels in late 2024 coincided with a macro market bottom at $0.30 and preceded a multi-month rally, with the XRP/USD pair rising 500% to a multi-year high above $3. 

Meanwhile, the 0.80 MVRV pricing band, which has historically marked cycle bottoms, is currently at $1.14, coinciding with a 15-month low reached on Feb. 6.

Advertisement
XRP: MVRV pricing bands. Source: Glassnode

These onchain metrics suggest that XRP is undervalued and may continue the ongoing recovery, potentially rising toward $1.70 or higher

XRP price must hold above $1.30 

Meanwhile, XRP/USD remains cautiously bullish as long as it holds the $1.25-$1.30 support zone. 

“$XRP is sustaining the major support zone between $1.30-$1.25 levels since early Feb’26,” trader ChiefraT said in an X post on Friday, adding:

“If this zone continues to hold, then a short-term bounce towards $1.45 can’t be ruled out.”

XRP/USD daily chart. Source: Cointelegraph/TradingView

The importance of this support level is reinforced by cost basis distribution. The heatmap below shows that nearly 1.73 billion XRP were acquired around this price.

XRP cost-basis distribution heatmap. Source: Glassnode

Below that, the next line of defence is the $1.15 demand zone, where the 200-week simple moving average is. 

If XRP/USD drops below this level, it would be in a free-fall toward the measured target of the bear flag at $0.80, or 41% below the current price.

As Cointelegraph reported, holding $1.27-$1.30 would be a sign of strength among the bulls who must push the XRP/USD pair toward the $1.61 range high to regain control. 

Advertisement