Author: Gabby

MAP Protocol’s native token, MAPO, suffered a catastrophic 96% drop after a vulnerability in the Butter Network cross-chain bridge allowed an attacker to mint an astronomically large number of tokens. The exploit, which took place on the Ethereum and BNB Chain networks, resulted in the creation of approximately one quadrillion MAPO tokens—vastly exceeding the legitimate supply of around 208 million.

Blockchain security firm Blockaid reported that the attacker manipulated a Solidity contract flaw to produce these tokens and then quickly dumped about 1 billion of them on Uniswap liquidity pools. This selling pressure caused MAPO’s price to plummet from roughly $0.003 to nearly $0.0001 in a matter of hours. The attacker managed to drain approximately 52 ETH (worth around $180,000) from the pools but still holds close to a trillion MAPO tokens, posing a persistent threat to other liquidity pools and exchange markets.

The root cause of the exploit was traced to a collision in the abi.encodePacked function used to validate cross-chain retry messages. Blockaid explained that the bridge’s verification process lacked proper length prefixes for dynamic-byte fields, allowing the attacker to repackage a legitimate signed message into a forged retry request. The protocol accepted this altered payload, leading to the unauthorized mint. Notably, the project confirmed that the light client, oracle multisig, and MAPO token contract itself were not compromised.

In response, Map Protocol paused its mainnet and initiated a migration process. The team announced plans to release a new contract address and an asset snapshot timeline, while tokens associated with the attacker’s wallets will be excluded from future conversions and invalidated during migration. These measures aim to restore integrity to the token supply.

This incident adds to a growing list of cross-chain bridge exploits within the DeFi sector. Earlier in the week, the Verus Protocol Ethereum bridge lost over $11.5 million in a similar forged-transfer attack. Meanwhile, the TON-TAC bridge successfully recovered about 80% of the $2.68 million stolen in a May 11 exploit, though the bridge remains suspended pending an independent audit.​ The repeated vulnerabilities underscore the persistent risks in interoperability infrastructure, highlighting the need for more robust validation mechanisms.

The landscape for Ethereum scaling solutions is undergoing a significant transformation, as evidenced by the recent decision of Syndicate Labs to cease operations. The company cited a fundamental shift in the rollup market, where demand for infrastructure supporting custom application-specific chains has dwindled. Rather than relying on reusable platforms like Syndicate’s smart sequencer technology, many projects are now opting for in-house consulting teams to develop custom chains.

Syndicate Labs, which had secured $20 million in a Series A funding round led by Andreessen Horowitz in 2021, was established to facilitate customizable Ethereum appchains and rollups. However, over the past year, the ecosystem has seen a consolidation of liquidity and users among a few major layer-2 networks, leaving smaller players struggling for relevance. According to L2Beat data, total value locked in rollups has declined roughly 36% from its peak above $50 billion in October, with Arbitrum One, Base, and OP Mainnet now commanding about 75% of the market.

A study by 21Shares published in December revealed that layer-2 activity had plummeted by 61% since June, with many smaller chains operating at minimal usage levels. The asset manager described these as zombie chains due to their slowing transaction activity. This trend has made it increasingly difficult for companies like Syndicate Labs to sustain their business models.

The shutdown announcement follows a difficult period for Syndicate Labs, including a bridge exploit in late April. While the company asserted that the closure decision was independent of the exploit, the incident undoubtedly added pressure. The exploit involved a leaked private key that allowed an attacker to upgrade bridge contracts on two networks and drain approximately 18.5 million SYND tokens, valued at around $330,000, along with roughly $50,000 in user assets. Subsequent reports indicated that the upgrade key was stored in a password manager without extra encryption, and the bridge lacked multisignature approvals or automated circuit breakers for upgrades.

Following the exploit, Syndicate Labs pledged full compensation to affected users and outlined plans to enhance key management practices, introduce hardware or multisignature protections, and improve monitoring around contract upgrades. Nevertheless, the SYND token has continued to suffer. Within hours of the closure announcement, it dropped another 21% to a record low near $0.012, representing a loss of about 99.5% from its peak of $2.61 in September 2025.

The broader crypto sector has seen similar shutdowns this year due to weak activity and funding challenges. Mobile DeFi superapp Legend announced its wind-down in May, citing scaling difficulties, while projects like Step Finance, Polynomial, Balancer Labs, and Seamless Protocol have also curtailed operations. This trend highlights the intense competition and evolving dynamics within the decentralized finance and layer-2 ecosystem.

Italian authorities have cracked a sophisticated tax evasion scheme involving Bitcoin Ordinals and BRC-20 tokens, with blockchain analytics firm Chainalysis confirming that the public ledger left an indelible trail. The Guardia di Finanza in Foggia and Rome traced over €1 million in undeclared gains from a suspect who had used these novel crypto assets to generate and conceal income.

According to Chainalysis, the investigation began as a routine probe into unreported earnings. However, analysts soon discovered that the suspect had exploited Bitcoin Ordinals—which allow data to be inscribed onto individual satoshis—and BRC-20 tokens, a token standard that uses text inscriptions to create and transfer assets without smart contracts. The individual minted, listed, and sold these tokens, funneling profits back into a main Bitcoin wallet while also receiving public subsidies.

Chainalysis emphasized that the technical novelty of cryptocurrencies does not equate to anonymity. Despite the complexity of Ordinals and BRC-20 tokens, every transaction remains permanently recorded on the blockchain. In this case, exchange records combined with on-chain patterns enabled investigators to link wallet activity to a specific individual.

This incident underscores ongoing gaps in crypto tax reporting on a global scale. A 2026 study published in the Review of Accounting Studies found that IRS data captured only 32% to 56% of estimated U.S. crypto owners, based on survey comparisons. Similarly, a National Bureau of Economic Research working paper on Norway revealed widespread noncompliance even among investors using exchanges that share identity data with authorities. The paper suggested that enforcement should be targeted or low-cost, as many crypto investors owe relatively small amounts.

The U.S. Internal Revenue Service has projected a gross tax gap of $696 billion for tax year 2022, with underreporting accounting for $539 billion of that figure. Lawmakers are now debating measures to address crypto tax complexities, such as the PARITY Act, which would require the Treasury to study small crypto payment tax relief and issue guidance without creating an immediate exemption. Additionally, Kraken filed 56 million crypto tax forms for 2025, with the majority tied to transactions under $50, prompting the exchange to call for higher reporting thresholds and simplified rules for low-value transactions.

Staking rewards are also under scrutiny, as 18 bipartisan House lawmakers have urged the IRS to revisit its 2023 guidance before 2026, proposing that taxpayers be allowed to defer some staking and mining tax liabilities. Chainalysis reiterated that while crypto users may turn to new asset types to hide gains, public blockchains leave permanent records that investigators can trace, as demonstrated in this Italian case.

In a recent statement, Kate Fraher, the former chief risk officer of Silvergate Bank, has openly disputed the official narrative surrounding the bank’s closure and her settlement with the U.S. Securities and Exchange Commission (SEC). Fraher asserted that regulators never actually demonstrated that the bank’s anti-money laundering measures were flawed. She explained that she resolved the SEC’s claims to escape a prolonged legal struggle, not because the accusations were valid.

Fraher’s remarks come shortly after the SEC, now under Chair Paul Atkins, eliminated its long-standing policy that prevented settling defendants from publicly denying the agency’s allegations. This policy, in effect since 1972, had drawn criticism for silencing defendants. Fraher described this change as allowing her to finally speak the truth about her case. She stressed that the SEC’s process is designed to exert maximum pressure and has real human consequences, noting that she personally experienced being “de-banked” and had her own credit lines revoked during the investigation.

The SEC had sued Silvergate, Fraher, and former CEO Alan Lane in July 2024, accusing them of misleading investors about the bank’s compliance with anti-money laundering rules, particularly concerning transactions linked to FTX. The SEC claimed Silvergate missed roughly $9 billion in suspicious transfers. Under the settlement, Silvergate paid a $50 million civil penalty, Lane paid $1 million, and Fraher paid $250,000 plus accepted a five-year ban from serving as an officer or director of a public company. Former CFO Antonio Martino is still fighting the charges.

Contrary to the widely held belief that Silvergate’s collapse was triggered by FTX’s downfall in 2022, Fraher maintained that the bank remained operationally sound after restructuring in early 2023. Even after a 70% deposit outflow following FTX’s bankruptcy, she argued that Silvergate kept appropriate capital levels and reduced staff to continue safely. Instead, she attributed the bank’s liquidation to intense pressure from U.S. financial regulators and policymakers, which made its business model unsustainable. This echoes claims from crypto industry figures who referred to the situation as “Operation Chokepoint 2.0,” an alleged campaign to cut off crypto companies from the banking system.

Venture capitalist Nic Carter had previously reported that Silvergate insiders described informal regulatory demands to slash crypto-related deposits to just 15% of total liabilities. Carter argued that the bank’s voluntary liquidation, rather than a forced FDIC receivership, suggested it was pushed toward closure by supervisory pressure, not insolvency. He linked Silvergate’s failure to the subsequent collapses of Signature Bank and Silicon Valley Bank during the 2023 regional banking crisis, noting that scrutiny on crypto-focused banks intensified after FTX, even without proven criminal wrongdoing related to Silvergate’s ties to FTX.

Fraher praised SEC Chair Atkins and Commissioner Hester Peirce for ending the gag order, which she called unconstitutional. Peirce has also criticized the policy, arguing that it undermines transparency and investor protection. In a recent statement, she emphasized that both regulators and defendants should be free to discuss enforcement cases openly after settlements are reached.

Charles Hoskinson, the founder of Cardano, issued a stark warning on May 21 that the network’s scientific foundation could crumble if a key funding proposal fails. In a translated social media post directed at the Japanese Cardano community, he expressed deep concern that a negative outcome would lead to the loss of researchers and the shuttering of their lab. He emphasized that building this team took years and that rebuilding it would be nearly impossible without stable funding.

The controversy stems from a vote by Japanese Delegate Representatives (dReps) who opposed the research proposal, casting a spotlight on Cardano’s decentralized governance system. This system allows dReps to decide on funding and strategic directions. Some community members argued that accepting dissenting votes is part of decentralization, but Hoskinson countered that the issue goes beyond personal disagreement—it strikes at the heart of Cardano’s identity as a science-driven blockchain. He stated that rejecting the proposal would effectively dismantle the ecosystem’s core.

Cardano has long marketed itself as a peer-reviewed, evidence-based blockchain, a claim that differentiates it from faster-paced competitors. The network’s official materials highlight its foundation in academic research. A significant cut to research funding would challenge this narrative and raise questions about how community voting can preserve the network’s unique model. The Cardano Foundation also underscores its role in supporting developers and institutions, further tying its brand to research and education.

Amid this governance dispute, Cardano’s native token, ADA, is trading under pressure at around $0.25, having dropped roughly 60% over the last 200 days. Hoskinson has previously discussed strategies like developer incentives and buybacks to boost the ecosystem. The funding vote adds another layer of uncertainty for investors, who are already focused on weak price action. Hoskinson has urged ADA holders to delegate to representatives who support long-term research, as the outcome will test how much control the community cedes to scientists and core developers during Cardano’s shift to decentralized decision-making.

The U.S. Department of the Treasury has taken action against two networks connected to the Sinaloa Cartel, accusing them of using digital currencies to handle funds from fentanyl trafficking. This move adds six Ethereum wallet addresses to the sanctions list, with one USDT-linked wallet reactivating in April after over a year of dormancy.

According to the Treasury, the sanctions were implemented through a joint operation involving the Homeland Security Task Force and the Drug Enforcement Administration. Treasury Secretary Scott Bessent stated that the administration remains committed to disrupting cartel financial operations tied to fentanyl, vowing to prevent narco-terrorists from exploiting financial systems to funnel drug profits into the U.S.

The sanctions specifically name Armando de Jesus Ojeda Aviles, accused of converting cash to cryptocurrency for the cartel, and Jesus Alonso Aispuro Felix, an associate involved in blockchain-based transfers of drug proceeds. Five of the six Ethereum addresses are linked to Ojeda Aviles.

Blockchain data shows limited recent activity among the listed wallets. Five addresses had been inactive for years, while one address ending in “e27cb” processed $894 in Tether’s USDT stablecoin on April 27 after more than a year without transactions.

The Treasury imposed these sanctions under two executive orders targeting illicit drug production and organizations classified as terrorists or terrorism supporters. It describes the Sinaloa Cartel as a Foreign Terrorist Organization responsible for massive fentanyl inflows into the U.S., contributing to tens of thousands of annual deaths.

Previous actions by U.S. agencies have targeted cartel-linked crypto operations. A July 2025 Justice Department report noted DEA seizures of over $10 million in crypto assets tied to the Sinaloa Cartel. In Latin America, Brazilian authorities have also cracked down on crime groups using digital assets. In August 2024, São Paulo civil police dismantled a money laundering operation linked to the PCC gang, involving a cryptocurrency exchange handling nearly 500 million Brazilian reais (about $88.6 million). Thirteen individuals were arrested, and 55 million reais in checks were seized.

Earlier Brazilian investigations in June 2023 raided six exchanges accused of laundering roughly $380 million. Another 2024 operation dismantled a $2.6 billion crypto laundering network. Despite these cases, crypto adoption in Brazil grew, with trading volumes rising 30% in 2024 as regulators advanced digital asset oversight.

Coinbase has achieved a 90% reduction in the time it takes to resolve account restrictions by overhauling its compliance processes with artificial intelligence, according to CEO Brian Armstrong. He explained that the exchange rebuilt almost all compliance workflows, leading to significant efficiency gains. While AI now handles repetitive tasks, human employees still review every decision to maintain security and improve the AI models over time.

This development is part of a broader shift at Coinbase toward an AI-first operational model. Earlier reports indicated the company planned to reduce its workforce by approximately 14% as part of Armstrong’s vision to create leaner, faster teams. The company has tested AI agents in communication tools like Slack and email to assist with strategy and creative work.

Beyond internal operations, Coinbase has integrated AI into customer-facing products. Its Agentic Wallets allow AI agents to hold funds, trade tokens, pay fees, and earn yields, all while incorporating guardrails and compliance checks. Armstrong has also highlighted the potential for machine-to-machine payments to drive demand for digital currencies, with Base and USDC central to that strategy.

The compliance update underscores Coinbase’s dual approach: using AI to enhance internal efficiency while also building products that enable AI agents to transact. Armstrong did not specify which types of restrictions improved most or how many cases were affected, but the announcement signals that Coinbase views AI as integral to account operations, not just trading or developer tools.