Crypto Transaction Weekly News Review - September 28 - October 4, 2026

Security and Incidents: The Bitget Ledger Closes, September's Toll Is Counted

1. Bitget Completes Withdrawal Restoration With the Loss Settled at $387.5M

Event date: September 29 - October 2, 2026

Source: Bitget announcements; CertiK and BigGo summaries, September 30 - October 1.

Summary: Bitget closed out the restoration sequence that followed the September 24 supply-chain breach. Bitcoin withdrawals resumed first, Ethereum-family withdrawals restarted on September 29, USDT followed on September 30, and the remaining tokens, fiat services and peer-to-peer activity came back at 08:00 UTC on October 2. Along the way the exchange raised its loss estimate from $351.6M to $387.5M - the revision reflecting previously uncounted Zcash and TRON transfers rather than a new wave of theft - replenished its protection fund above $300M on September 30, and published a proof-of-reserves report showing a 131% reserve ratio across 19 covered assets.

My take: The restoration ran to schedule, which is what an exchange owes its users after a breach of this size. The number that matters going forward is not the restoration calendar but how much of the $387.5M is ultimately frozen or recovered - bounties of 5% of frozen and 5% of recovered funds are still working.

2. Chainalysis Points to North Korea; the Routing Split Hardens Into a Record

Event date: September 28 - October 1, 2026

Source: Chainalysis statement, October 1; Bitquery swap analysis, September 29; Volity and BigGo reporting, September 28 - October 1.

Summary: On October 1, Chainalysis formally attributed the Bitget breach to North Korea-linked actors and said it will keep labelling attacker addresses as the trail extends. Bitquery's independent swap analysis had found that by September 29 roughly 90.5% of the stolen XRP had been converted into Bitcoin. The routing response stayed split: Bitget asked THORChain to block attacker wallets, yet an attacker-linked wallet still converted roughly $6.3M of Ether into 75.2 BTC through it on September 28, while NEAR Intents rejected more than $50M in related swaps before itself suffering a smaller breach days later.

My take: The split is now a documented case study: one routing protocol kept processing and one kept blocking, and the blocker got hit too. Attribution to a state-backed group also means the funds will not sit still - expect continued hopping through swaps and mixers for months.

3. CertiK Counts September at $766.4M - the Worst Month of 2026

Event date: September 30, 2026

Source: CertiK monthly report; CryptoTicker and BigGo summaries, September 30.

Summary: CertiK's September tally came in at $766.4M across 99 incidents, 58 of them exploits, roughly 3.5 times August's $215M and the highest monthly figure of the year. Two events carried more than 92% of it: the Bitget breach and the September 6 Liquid Network peg-out compromise. Around $270.6M counted as returned or frozen, leaving roughly $495.8M net. The quarter closed at $1.26B across 247 incidents - up 53.9% from Q2's $819.4M - with the year-to-date tally near $2.68B across 656 incidents.

My take: Concentration is the story again: a month with dozens of incidents is effectively the story of two of them. For anyone tracking operational risk in transfers, exploits - not phishing - are where the money moves, and the systems around keys (caches, signing machines, vendor software) are where it leaks.

4. Core Lightning Tells Node Operators to Upgrade After Attack Reports

Event date: October 2, 2026

Source: Blockonomi security listing, October 2.

Summary: The Core Lightning team warned Bitcoin node operators to upgrade after reports of attacks targeting lightning nodes, adding a second infrastructure-security story to a week already dominated by the Bitget aftermath.

My take: September's pattern - attackers hitting the plumbing around assets rather than the assets - is spreading to routing infrastructure. If you run payment infrastructure of any kind, patch cadence is now a treasury control, not a maintenance chore.

Stablecoins and Payments: A New Issuer Arrives With the Biggest Backers

5. Open USD Launches With Stripe, Visa, Mastercard, Shopify and Coinbase Behind It

Event date: September 30, 2026

Source: Open Standard launch materials; CoinGabbar, CoinSlope and UseTheBitcoin roundups, September 30 - October 1.

Summary: Open USD (OUSD) went live on September 30, issued by Open Standard through Stripe's Bridge across Ethereum, Solana, Base and Tempo. The founding partners are Coinbase, Mastercard, Shopify, Stripe and Visa, holding equal starting equity, with more than $1B in liquidity committed. Reserves are held at BlackRock, Lead Bank and BNY. Businesses can mint and redeem for free, and the token trades on Coinbase, Kraken and Uniswap.

My take: This is the most consequential stablecoin launch since the first wave of payment tokens: the distribution is the product. Free mint-and-redeem plus merchant networks that reach hundreds of millions of card users attacks the transfer-fee problem from the issuer side - and it lands in the same quarter the Fed is finalizing redemption rules for exactly this structure.

6. Fiserv's Digital Asset Platform Goes Live With North Dakota's Roughrider Coin

Event date: October 1, 2026

Source: Fiserv announcement; UseTheBitcoin roundup, October 1.

Summary: Fiserv announced that its digital asset platform went live with financial-institution clients, with Roughrider Coin - the dollar-backed stablecoin of state-owned Bank of North Dakota, issued by VersaBank and settling on Solana - becoming its first live deployment. The platform positions banks to issue their own branded dollar tokens on bank-grade rails.

My take: After SoFi's card-settlement move last week, a core processor going live with a state-backed bank-issued stablecoin is the second proof that the bank channel is choosing deposit-token-style instruments over direct nonbank stablecoin adoption. The two models will compete for the same settlement flow.

7. Coinbase Powers Citi's Stablecoin Rails

Event date: September 28, 2026

Source: Coinbase and Citi announcements, September 28; CryptoSlate, September 29; Volity week summary, September 29.

Summary: Coinbase revealed it is providing the infrastructure for Citi's new stablecoin payment rails, with Coinbase Virtual Accounts gaining automatic fiat conversion through Citi's systems. The same day, Citi separately extended its 24/7 dollar clearing and token services to Japan and the UAE. Customer stablecoin usage figures were not disclosed.

My take: The exchange-bank convergence is now bidirectional: Binance bought Circle equity last week, and now the largest US exchange is quietly running plumbing for a money-center bank. The companies that own the conversion layer between banks and chains are becoming the tollbooths of the next payment stack.

8. Visa's Stablecoin Card Spending Hits a Record $1.17B Month

Event date: September 30, 2026

Source: CryptoSlate, September 30.

Summary: Stablecoin-linked cards processed a record $1.17B in monthly spending in September, which the report described as hyper-growth mode, with average transaction size also rising - more money through fewer payments.

My take: Card settlement is where stablecoin volume stops being trading-adjacent. A $1.17B month is still small against Visa's total, but the composition shift - bigger tickets, fewer payments - suggests spending rather than top-ups is driving it.

9. USDCx on Aleo Goes Live in Ledger: Privacy Joins the Stablecoin Menu

Event date: October 1, 2026

Source: Aleo and Ledger announcements; UseTheBitcoin roundup, October 1.

Summary: USDCx on Aleo became supported in the Ledger Wallet app, bringing a privacy-preserving stablecoin to a mainstream self-custody audience. The token wraps USDC value with Aleo's private-transaction features.

My take: Regulated issuers have so far kept privacy at the compliance boundary. A privacy variant of a fully reserved stablecoin reaching hardware-wallet users tests how far that boundary stretches - watch whether issuer freeze functions survive the privacy layer, because that answer decides whether institutions can touch it.

Regulation and Policy: Custody, Redemption Coverage, Taxes and a State MoU

10. SEC Proposes Custody Rules for Advisers and Funds

Event date: October 1, 2026

Source: SEC rule release; UseTheBitcoin roundup, October 1.

Summary: The SEC proposed new rules and amendments addressing how registered investment advisers and regulated funds can custody digital assets, opening the comment path for how qualified custodians must hold tokens, including stablecoin positions managed on behalf of clients.

My take: Custody is the quiet constraint on every institutional stablecoin product launched this month. If the final rule accepts on-chain attestations and MPC arrangements, the WisdomTree and Open USD generation of products integrates cleanly; if it demands segregated cold custody only, several of them re-architect.

11. The Fed's Two-Day Clock Does Not Reach the $76B Sitting on Exchanges

Event date: September 29, 2026

Source: CryptoSlate analysis of the Fed proposals, September 29.

Summary: Follow-up analysis of the Federal Reserve's GENIUS Act implementation proposals sharpened the coverage question: the two-business-day redemption guarantee binds supervised issuers, but it would not govern the roughly $76B in stablecoins held on exchanges - positions where the user's counterparty is the exchange, not the issuer. The analysis also noted the proposals would make circulation a capital cost for supervised issuers, with a 24-hour restore-backing window before a liquidation fork for issuers below par.

My take: This is the distinction most commentary missed last week: issuer redemption speed and exchange withdrawal speed are different promises held by different balance sheets. Bitget's breach week - withdrawals paused, then restored in phases - was a live demonstration of exactly the gap the rule does not close.

12. The ADAPT Act Puts Stablecoin Payments on the Tax Agenda

Event date: September 30, 2026

Source: Senate release via CoinGabbar, September 30.

Summary: Senator Steve Daines introduced the ADAPT Act, which would provide tax relief on qualifying stablecoin payments, drop gain-or-loss recognition for network fees of $10 or less, and extend wash-sale rules to digital assets. It is a proposal, not law.

My take: The de-minimis fee exemption is the technically important part: today every on-chain fee is technically a disposal event, which makes micropayments accounting-absurd. Pairing that relief with a wash-sale extension is a classic trade - a gift to payment users paid for by tightening trading rules.

13. NYDFS and Wyoming Agree to Coordinate Digital Asset Oversight

Event date: October 1, 2026

Source: DFS and Wyoming Division of Banking memorandum; UseTheBitcoin roundup, October 1.

Summary: The New York State Department of Financial Services and the Wyoming Division of Banking signed a memorandum of understanding to coordinate digital asset supervision - the two most active state regulators aligning on examinations, information sharing and stablecoin issuer oversight.

My take: State-level coordination matters for issuers more than any single rule: New York's trust framework and Wyoming's SPDI charter now reference each other, which lowers the cost of being licensed in both - and raises the bar for being licensed in neither.

14. El Salvador Accepts a No-Accumulation Limit to Unlock $138M From the IMF

Event date: October 2, 2026 (follow-up reporting October 4)

Source: IMF review documents; Cointelegraph, October 4; Blockonomi, October 2.

Summary: The IMF released $138M to El Salvador after the Board granted waivers over the country's past bitcoin accumulation, with documents showing the accumulation came from private donations rather than government purchases. The disbursement carries a written limit of no further accumulation beyond documented donations, and authorities committed to fully unwind residual public-sector exposure tied to the Chivo program.

My take: The sovereign-bitcoin experiment is being converted into a compliance story: keep custody of donated coins, buy nothing, unwind the retail wallet. For transfer-watchers the significant part is that IMF program conditionality now explicitly documents on-chain holdings - sovereign bitcoin is becoming a line item in program reviews.

Markets and Flows: A Cool ETF Week, Then a Jobs Report

15. Bitcoin ETFs Post a Third Positive Week at Roughly $241M as Ether Funds Bleed

Event date: September 28 - October 2, 2026 (trading week)

Source: SoSoValue daily data via ChainReport, CoinTab and HTX; Newslayer and Finway later prints; Decrypt, October 4.

Summary: US spot Bitcoin ETFs recorded their third consecutive positive week at approximately $241M net - a roughly 90% slowdown from the prior week's $2.39B. Daily prints ran +$31.07M, +$66.19M, -$148.69M, +$102.67M and +$189.84M, with BlackRock's IBIT (~$450M) outrunning the category total and Fidelity's FBTC (~-$168M) the largest drag. Later dashboard revisions put October 2 at $31.69M, which would cut the weekly total to about $82.9M - a tracker-level revision worth flagging. Ether ETFs posted roughly -$118M (some trackers print -$138M), ZEC ETFs saw their first negative week at -$93.56M, NEAR ETFs debuted at +$35.99M, and Solana products cooled to roughly +$2.4M after the prior week's record ~$188M. September's monthly total: $2.65B, the second-best month since October 2025.

My take: The headline deceleration is real but the composition matters more: one issuer absorbed more than the category's net total, which means the slowdown is concentrated redemptions elsewhere, not a broad exit. And when trackers revise a single day by $158M after the fact, weekly totals from one source should be quoted with their date-of-print, not as settled fact.

16. A 29,000 Jobs Print Sends Bitcoin Back to $87,000 - and Citi to $113,000

Event date: October 2, 2026 (weekend follow-through October 3 - 4)

Source: Bureau of Labor Statistics September jobs report; CryptoAdWorld and CryptoBase weekend reports; Blockonomi, October 2 - 4.

Summary: September nonfarm payrolls came in at 29,000 against a roughly 90,000 consensus - a blowout miss that collapsed near-term rate-hike odds and sent Bitcoin from around $84,500 to just above $87,000 intraday on Friday before consolidating over the weekend near $86,500, up roughly 2.4% on the week. Citigroup had published a note on October 1 forecasting $5B of ETF inflows over twelve months and raising its twelve-month Bitcoin target to $113,000 from $82,000, while Strategy (MSTR) saw its own target raised 76% to $240 on October 2.

My take: The macro trade has reattached to crypto: a weak jobs number is now unambiguously bullish here, which cuts both ways - the same channel will transmit any inflation surprise downward. The $87,000 area has rejected three approaches; a fourth test with a dovish macro tailwind is the setup the market is watching.

17. The SEC Approves a 3x Leveraged Bitcoin ETF

Event date: October 2, 2026

Source: Cboe BZX approval; CryptoAdWorld, October 4.

Summary: The SEC approved the Cboe BZX proposal to list a 3x leveraged Bitcoin exchange-traded product from Volatility Shares - the first leveraged Bitcoin ETF approval since single-day leveraged products launched in 2023. The product tracks three times Bitcoin's daily performance.

My take: Approval logic has clearly shifted from asset risk to wrapper disclosure. A 3x daily-reset product in a 2% daily-range market is a volatility-selling machine with extra steps - fine for informed traders, hazardous as a hold. Expect strong first-week volume and a fast education curve.

Infrastructure and Data: TRON's Regulated Debut and a Faster Test Track

18. TRON DAO Rings the Cboe Closing Bell for the TRXS Staked TRX ETF

Event date: September 29, 2026

Source: TRON DAO press release, September 29; NewsBTC and BeInCrypto coverage.

Summary: TRON DAO marked the debut of the Canary Staked TRX ETF (ticker TRXS) - listed on Cboe since September 9 - by ringing the closing bell in Chicago on September 29. The product offers spot TRX exposure plus staking rewards earned through TRON's delegated proof-of-stake, with net rewards accrued to the fund's NAV. The chain's own stats at the event: over $94B in circulating USDT on TRON, roughly $6.1T in USDT transfers year-to-date, more than 405M accounts, over 15B total transactions and $28B TVL.

My take: A staked-ETF wrapper on a payment chain is a new genre: exposure to the fee-and-energy economy of stablecoin settlement rather than to a store-of-value narrative. If TRXS gathers assets, TRON's staking float gets a regulated, passive buyer - a structural change to how its energy market is capitalized.

19. TRON's Network Week: a $20M USDT0 Limit, Merchant Payments and a Node Upgrade

Event date: September 28 - October 4, 2026

Source: TRON DAO announcements, September 28 - October 4; Blockchain.News flash summaries.

Summary: TRON shipped a cluster of transfer-relevant updates in one week: the USDT0 cross-chain transfer limit to Ethereum was raised to target $20M per transfer via usdt0.to (September 28); WalletConnect Pay added USDT merchant acceptance on TRON through a single integration (September 30); the mandatory GreatVoyage-v4.8.2.3 (Anaxagoras) node upgrade optimized smart-contract storage and BN128 pairing (September 30); weekly stablecoin transfer volume approached $190B across nearly 100M transactions (October 1); and Q3 TVL grew $3.3B, up 13.2% (October 4).

My take: None of these moves the fee table - TRON's rental economics were already the cheapest settlement rail in the survey. What they move is capacity headroom: a $20M single-shot bridge limit and merchant-grade payment acceptance are institutional-scale features, and the Q3 TVL print says capital is arriving to use them.

What I'm Watching Next Week

• Ethereum's Glamsterdam upgrade hits the Sepolia testnet on October 6 - block processing and gas accounting changes get their first live-traffic test, with mainnet timing to follow.
• Bitget's recovery program: how much of the $387.5M moves from attacker addresses into frozen or recovered columns, and whether THORChain-facing flows prompt a governance response.
• Open USD's first week of measurable supply - whether free mint-and-redeem shows up in DefiLlama's issuer tables by the next Data Report.
• The comment-period clock on the SEC's custody proposal, and whether the token-taxonomy interpretation naming BTC, ETH, SOL, XRP and DOGE as commodities survives contact with issuers.
• TOKEN2049 Singapore on October 7-8 - historically a launch-density window for payment pilots targeting Asian settlement corridors.

Glossary