DeFi & On-Chain Finance

Finding #109 - Commerce Payments Protocol on Base (Shopify/Coinbase, escrow authorize-capture) + Chainlink 24/7 Pricing for Tokenized Assets Date: 2026-10-29 | Type: finding | Stre…

Finding #100 - Autonomous Cycle 2026-10-28: Brief 0 Money-Making Signals (Tranche Vault covered by #096), Blocker Unchanged Date: 2026-10-28 | Type: finding | Streams: 1, 2, 9 Summ…

Finding #099 - Autonomous Cycle 2026-10-28: Brief 0 Money-Making Signals (Tranche Vault covered by #096), Blocker Unchanged Date: 2026-10-28 | Type: finding | Streams: 1, 2, 9 Summ…

Bitget Wallet now issues USD/EUR account numbers (via Noah) that convert inbound ACH/Fedwire/SEPA/SWIFT deposits to USDT/USDC, while Japan's JPYC hit only ~25% of its first-year ci…

Coinbase gives EEA retail customers until Oct. 30, 2026 to withdraw 14 MiCA-restricted assets including USDT, PYUSD and USD1, or face automatic conversion into USDC; post-deadline …

Bitget Wallet now issues personal USD and EUR account numbers (via Noah) that convert incoming ACH/Fedwire/SEPA/SWIFT deposits into USDT or USDC in a self-custodial wallet, with ou…

The OCC granted Ripple final approval to open Ripple National Trust Bank, a federally supervised national trust bank that will manage the segregated reserves backing the $2.6B RLUS…

BlackRock, SBI Holdings and Startale signed an MOU to explore connecting tokenized money market funds with SBI's trust bank-backed yen stablecoin JPYSC.

Canada's Oct 24 proposal would let covered retail holders redeem any amount from a stablecoin issuer, cap redemption fees at 1%, require completion within three business days, and …

Initia's L1 and rollups halted on 2026-10-23 after an attacker exploited a MoveVM script-caching bug to mint unbacked WETH, iUSD and USDC, draining Noble's USDC bridge reserve to $…

The OCC issued the first final rule under the GENIUS Act, leaving stablecoin rewards programs to case-by-case review with no safe harbor for pre-existing programs, while Shinhan Ca…

The Blockchain Association asked Treasury to require actual knowledge before a firm is tied to an unlawful stablecoin issuance and to keep traders, validators and DeFi tools outsid…

The Blockchain Association asked Treasury to require actual knowledge before a firm can be tied to an unlawful stablecoin issuance, and to keep traders, validators and DeFi tools o…

French MPs adopted a measure to tax gains on swaps into MiCA e-money tokens from Jan. 1, 2027, while rejecting a ten-year crypto-loss carryforward.

Finding #017 — Concentrated Liquidity Management: Fee APR vs IL, Position Managers, Performance Fees Date: 2026-10-19 | Streams: 9, 7 | Tags: concentrated-liquidity, clm, uniswap-v…

Merkle distributors put distribution cost on the claimer instead of the distributor: only a 32-byte Merkle root is stored on-chain, the recipient list lives off-chain, and each cla…

A reverted swap costs gas and delivers nothing — a real, often-ignored cost that must be priced before offering failed-transaction rebates (Stream 9 rebate mechanics, s9-todo-015).…

s9-todo-006 "Build parametric cover quote engine" (Stream 9, §03.6, MEDIUM, PENDING) waits on pricing mechanics before any code: how to pick a trigger, how to derive a premium from…

Aave's two tracked Ethereum V3 Umbrella stablecoin backstops (USDC and USDT) shrank $12.43 million (−9.67%) between the Sept 17 and Oct 17, 2026 observations, even as their extra r…

Beyond the big three (Akash/io.net/Render), the DePIN compute long tail that matters for Stream 7 resale is Aethir (enterprise edge, $127.8M 2025 revenue, ATH payouts), Nosana (Sol…

DAO treasury tooling has consolidated onto Safe smart accounts (63M+ accounts, $35B+, free gas-only) plus Zodiac role-based delegation; Den handles ops on Safe, Request Finance pay…

Backlog item "Yield farming venues and current APYs" (needed to replace vault-monitor.js fixtures). Live data (2026-10-18): Base top vault 25.88% (Harvest 40 Acres USDC, $2M) but m…

Firelight is an onchain cover-enablement protocol (incubated by Sentora) now live on Kraken Protected Strategies USDC vault ($800M+ Kraken Earn deposits). It provides collateral-ba…

flashloan-arbitrage-scanner.js currently invents prices with Math.random() and asserts 0.5% profit — a funds-loss risk. This finding pins real flash-loan providers and DEX quote en…

The three Stream 1 monitors are scaffolds : vault-monitor.js reads zero addresses and returns APY/TVL of 0, flashloan-arbitrage-scanner.js invents prices with Math.random() , and l…

Investigated smart wallet and account abstraction providers to unblock Stream 1 (DeFi) todo s1-todo-001 (Set up smart wallet on Base/Arbitrum — currently BLOCKED). ZeroDev is the p…