29 SEP 2026 · Today's briefing covers six developments shaping the crypto market across regulation, macro, and security — no hype, just the signals that matter.
The Bitget $387M hack investigation deepens. On-chain sleuth ZachXBT has linked five suspect accounts to the theft, one of them also tied to the April $292M Kelp DAO exploit. Laundered funds moved through bridges, cross-chain swaps, Wasabi mixer, TRON, Ethereum, and THORChain — but the attackers asked for customer support in Discord and Telegram using the same flagged wallets. North Korean involvement is suspected. Forensics teams Mandiant and SlowMist are still working the case.
THORChain formally refused Bitget's request to freeze attacker addresses, citing its permissionless design. The standoff crystallises a genuine unresolved tension: decentralised infrastructure can't distinguish between legitimate and illicit flows by design — but that design is now under fresh pressure from regulators and victims alike.
The breach exploited a third-party security vendor, not Bitget's core code. Cold wallets were untouched. Staged withdrawal restoration is underway, targeting full recovery by early October.
On the regulatory front, the CFTC registered Coinbase Clearing LLC as a derivatives clearing organisation — the first USDC-native, fully collateralised, 24/7 clearinghouse in crypto. Coinbase now holds FCM, DCM, and DCO registrations in-house. Separately, the SEC clarified that token buybacks without a centralised actor may not constitute investment contracts under the Howey test.
Macro headwinds are real: the 10-year Treasury yield crossed 5.23% and the 30-year hit 5.5% — levels not seen since 2007 and 2004. Elevated yields constrain risk appetite across all markets.
Watch for: North Korea attribution confirmation, ZachXBT's forthcoming data drop, and Coinbase's first clearinghouse product announcement. This episode includes AI-generated content.