9 min read · 12 sources

FinCEN is finally walking away from two of its most contentious rulemakings. The Treasury bureau formally withdrew both its 2023 proposal to classify international crypto mixing services as a “primary money laundering concern” under Section 311 of the USA PATRIOT Act, alongside its dormant 2020 effort to mandate counterparty identity verification on self-hosted wallet transactions above $3,000.

For engineers building non-custodial software and onchain infrastructure, this removes a lingering compliance sword of Damocles. FinCEN explicitly pointed to public comments warning that blanket mixer restrictions would kill legitimate privacy use, backing up its decision with findings from a July 2025 President’s Working Group report.

The withdrawal does not alter active Bank Secrecy Act obligations for money services businesses, but it marks an official retreat from regulating raw privacy-preserving math as de facto money laundering.

NU7 cuts target block time from 75 seconds to 25 seconds, dropping three-confirmation finality from 225 seconds down to 75 seconds.

FinCEN pulls Section 311 mixing rules and self-hosted wallet reporting

Source: theblock.co ↗

The withdrawn FinCEN rules represent the death of two distinct eras of regulatory overreach. The 2020 proposal - originally rushed out by the Trump administration during the holiday break - would have forced banks and MSBs to verify customer names and physical addresses whenever transacting with an unhosted wallet for amounts exceeding $3,000, while logging currency transaction reports (CTRs) for transfers above $10,000. That would have required custody providers and exchanges to inject intrusive, synchronous KYC flows into raw transaction broadcasts.

The 2023 proposal took an even broader swing by utilizing Section 311 of the USA PATRIOT Act. Instead of targeting bad actors, it attempted to label any cross-border protocol facilitating transaction obfuscation as a money laundering threat. That effectively treated privacy pools, zero-knowledge relays, and coinjoin implementations as hostile infrastructure.

Because neither rule was ever finalized, production architectures do not have to adapt backward. However, compliance teams at centralized venues will no longer have to design pre-execution address verification systems to satisfy pending federal rules. FinCEN noted it will still track mixer activity for criminal exploitation on an ad-hoc basis, but formal rulemaking designating mixers en masse is dead for now.

Henri Stern steps in to run Stripe crypto and stablecoins

Source: x.com ↗

Privy founder Henri Stern has stepped in to lead crypto and stablecoins at Stripe. He takes on a dual role aimed at converting Stripe’s sprawling web3 acquisitions into an open, modular developer platform for enterprise fiat-to-crypto routing.

Stripe’s existing stablecoin footprint is already substantial. Meta uses it for real-time creator settlements, Ramp runs parallel fiat and stablecoin flows for global corporate cards, and Deel routes cross-border contractor payouts over the same rails. Rather than treating stablecoins as isolated payment alternatives, Stern’s mandate is building an orchestration layer that binds Stripe’s constituent components - Bridge (stablecoin movement), Privy (embedded authentication and non-custodial key management), Tempo, and Open USD - into a single API.

The architectural focus is on/offchain execution, embedded wallet life-cycles, and programmatic asset issuance via Stripe Link, explicitly targeting agentic spend pipelines where autonomous software services trade balance sheets. Stripe has quietly positioned itself for this with an OCC conditional trust charter in the US alongside MiCA and EMI approvals in the EU, insulating the platform from ongoing US GENIUS Act compliance fallout.

Polymarket ships Protocol V2, scrapping legacy Gnosis contracts

Source: x.com ↗

Polymarket is discarding its foundational architecture. The company announced Polymarket Protocol V2, ripping out the legacy Gnosis Conditional Tokens Framework (CTF) that has powered its prediction markets since 2019.

The old Gnosis setup relied on deeply nested contract wrappers that fractured state across multiple adapters as the platform scaled. Protocol V2 flattens that topology into a unified codebase: one ERC-1155 positions contract, a single pUSD collateral contract, one core exchange, and a centralized router handling execution logic across all market topologies.

+--------------------------------------------------------------+
|                     Polymarket Router                        |
+--------------------------------------------------------------+
                               |
         +---------------------+---------------------+
         |                                           |
+------------------+                       +-------------------+
|  OracleAggregator|                       |   Core Exchange   |
| (UMA, Chainlink) |                       | (Binary, Neg-Risk)|
+------------------+                       +-------------------+
         |                                           |
+------------------+                       +-------------------+
| Position State   |                       | Collateral Pool   |
| (ERC-1155 IDs)   |                       | (pUSD Contracts)  |
+------------------+                       +-------------------+

Key technical shifts include:

• Embedded Metadata: Position condition identifiers are packed straight into ERC-1155 token IDs, letting off-chain indexers and automated market makers derive settlement context without querying peripheral adapter contracts.
• Pluggable Oracles: The new OracleAggregator module abstracts dispute settlement, natively supporting UMA and Chainlink while permitting custom resolution backends per market.
• Expanded Topologies: Native contract support for Binary, Atomic Neg-risk, Incremental Neg-risk, and Combinatorial markets without bespoke sidecar contracts.
• Bridge Compatibility: Native cross-chain position bridging, allowing positions and collateral to transit L2 environments cleanly.

The protocol contracts are upgradeable behind a governance multisig and were audited by Certora and SigmaPrime, backed by a $5 million bug bounty.

Zcash cuts block times to 25 seconds on NU7 testnet

Source: coindesk.com ↗

Zcash has deployed its NU7 upgrade to public testnet at block 4,465,026, ahead of an expected November 5 mainnet rollout. The core change is a hard fork reducing target block intervals from 75 seconds down to 25 seconds.

Tripling block frequency directly shrinks settlement latency: standard three-confirmation transaction finality drops from 225 seconds to 75 seconds. To prevent this from accelerating inflation, NU7 reduces per-block mining rewards to exactly one-third of their previous emission, preserving the hard-coded ZEC issuance curve.

Fee distribution is also being overhauled. NU7 routes 60% of transaction fees into a dedicated protocol reserve to subsidize long-term mining security, leaving 40% for the validating miner. The hard fork formally decommissions Sprout, Zcash’s original 2016 shielded pool implementation; users holding legacy Sprout notes must migrate balances to Orchard or Sapling before mainnet activation.

Node operators running either Zebra (Rust) or Zakura (C++) must deploy the latest releases immediately. SREs running node pools or custody infrastructure will need to adjust validation policies and increase reorg handling tolerance to handle three times the block ingress volume. A final decision on mainnet activation timing is scheduled for October 20.

Chainalysis deploys automated tracing on $387M Bitget exploit

Source: decrypt.co ↗

North Korea’s Lazarus Group has officially stolen over $1 billion in digital assets during 2026 alone, punctuated by the September 24 hack of exchange Bitget. Chainalysis confirmed North Korean attribution after dissecting the $387 million exploit, revealing a sophisticated dispersion pipeline executed across four base layers in under three hours.

The initial outflow partitioned funds across Ethereum (49.7%), XRP (40.8%), Zcash (7.6%), and Tron (1.8%) via 23 separate transactions. To turn the XRP into clean base layer assets, the attackers bypassed centralized exchange books entirely, leveraging cross-chain liquidity networks over a 36-hour window to swap XRP into Bitcoin before parking balances in unhosted clusters.

Chainalysis utilized internal automated tracing tools to map the incident. The tooling reportedly collapsed what historically required 20 or more engineering hours of bridge hop reconciliation and balance matching down to under 10 minutes. For incident response teams, this underscores how quickly state-sponsored adversaries can leverage automated cross-chain routers to decouple stolen liquidity from the underlying exploit vectors.

Near Intents extracts $3.8M recovery via on-chain ultimatum

Source: decrypt.co ↗

Cross-chain execution network Near Intents has recovered 100% of the $3.8 million drained during an exploit last week. The exploit took advantage of a state desynchronization bug between the protocol’s Omni deposit/withdrawal wrapper and its core settlement contracts, letting the attacker withdraw assets without properly burning underlying balances.

Near Intents halted its 35-chain routing engine immediately following the attack, but not before the exploiter bridged drained funds through KuCoin and out to the Bitcoin network. Recovery was orchestrated entirely through game theory: Near Intents general manager Alex Shevchenko publicly tracked the attacker’s funding lineage, flagged the source addresses, and broadcasted a 48-hour ultimatum carrying an implicit promise of deanonymization and law enforcement referrals.

The exploiter folded within the window, returning all funds alongside an on-chain note advising other developers to use white-hat disclosures instead. The incident capped an intensely volatile week for Near Intents, which had successfully blocked an inbound $50 million laundering attempt linked to the Bitget breach just days prior.

Ondo targets pre-IPO markets with tokenized notes

Source: theblock.co ↗

Ondo Private Markets has launched tokenized secondary exposure for private technology companies, leading off with debt notes pegged to the valuation of an undisclosed pre-IPO artificial intelligence firm.

The financial instruments are structured as tokenized debt notes whose yield and redemption payouts map to per-share equity value at liquidity events, such as an IPO or acquisition. The tokens provide zero voting power, carry no direct cap table ownership, and represent unsecured obligations of the issuing SPV. Access is strictly limited to non-US accredited investors.

Ondo claims $3.7 billion in total value locked across its existing tokenized equities and Treasurys footprint. According to the company, tokenized equities have reached a $42 billion market cap, roughly 35% of the wider $121 billion tokenized real-world asset (RWA) market. If the AI note trades stably on secondary markets, Ondo plans to roll out identical debt note wrapper contracts covering pre-IPO private equity in robotics, cybersecurity, biotech, and hardware infrastructure.

ZachXBT exposes $1B laundering ring in undercover sting

Source: theblock.co ↗

On-chain investigator ZachXBT revealed he personally deployed $349,700 USDC to infiltrate a Chinese OTC money laundering ring operating under the alias “Jimmy Green.” The network is allegedly responsible for clearing over $1 billion for the Lazarus Group, including the bulk of the $1.5 billion Bybit exploit.

ZachXBT posed as an OTC client requiring off-ramping services, eating an average 5% fee per transaction to track payout routing addresses. The operation mapped out a $12 million cluster directly linked to the Bybit drain, prompting Tether to blacklist and freeze 442,000 USDT tied to the operator’s settlement wallets. ZachXBT confirmed the collected telemetry was passed directly to federal law enforcement, noting his investigations have driven $75 million in cumulative asset freezes since 2022.

Fast news: ICE stock tokens, atomic L1/L2 calls, and CFTC comments

Source: threadreaderapp.com ↗

• OKX and ICE file for tokenized equities: OKX and New York Stock Exchange parent ICE filed an application through joint venture OKXICE to list 63 NYSE stocks on-chain, utilizing the SEC’s modernized framework for tokenized securities settlement.
• Atomic L1-to-L2 execution lands on Ethereum: Ethereum mainnet completed its first atomic cross-layer transaction, proving out execution guarantees where an L1 contract call and an L2 state update clear within the same execution sequence.
• Real crypto card math exposed: The open-source True Cashback Calculator breaks down how headline “5% crypto card cashback” promotions often produce negative real yield once accounting for monthly reward ceilings, cross-currency spread markups, and required token lockups.
• CFTC opens digital asset rulemaking: The CFTC issued an Advanced Notice of Proposed Rulemaking (ANPR) soliciting public comments on digital asset derivatives, margins, and market structure - the formal pre-drafting step required before publishing binding agency rules.