Drift Hack Fallout, Morgan Stanley Unveils MSBT, Sun–WLFI Battle Heats Up

Crypto swung onerous once more this week as Drift Protocol formally pinned its $285 million exploit on a North Korean state-affiliated group, Morgan Stanley launched its spot Bitcoin ETF, Circle minted a document $3.25 billion USDC on Solana in seven days, and the CLARITY Act drew public backing from each the Treasury Secretary and the SEC Chair. 

Justin Solar went public in opposition to Trump-backed World Liberty Monetary over a frozen $70 million token place, Bhutan saved trimming its bitcoin reserves, and three extra protocols had been drained.

Welcome to this week’s cryptocurrency market replace. If final week was outlined by the shock of the Drift exploit and Bitcoin’s first inexperienced month-to-month shut since September 2025, this week was in regards to the fallout, the institutional counter-push, and a contemporary spherical of political drama inside crypto itself.

On this version, we cowl the DPRK attribution on the Drift hack and the USDC freeze debate round Circle, Morgan Stanley’s MSBT Bitcoin ETF debut, Technique and Bitmine including to their treasuries, Bhutan’s strategic bitcoin gross sales, the CLARITY Act push from the Treasury and the SEC, India’s contemporary tax notices, CME itemizing AVAX and SUI futures, CZ’s memoir revelations, the Twister Money and Arizona prediction market circumstances, the Justin Solar vs WLFI standoff, and a string of latest exploits at Denaria, Aethir, and RaveDAO. Let’s get into it.

Drift Hack: DPRK attribution confirmed, Circle below hearth

The most important story of the week continues to be the Drift exploit, however the framing has now modified. Drift Protocol formally confirmed what on-chain analysts had suspected since April 1. The $285 million drain was the work of UNC4736, a North Korean state-affiliated risk group additionally tracked as AppleJeus and Citrine Sleet. The SEAL 911 staff, Elliptic, and TRM Labs independently landed on the identical conclusion. 

Fund flows used to stage and check the operation hint again to the Radiant Capital attackers, and the on-chain laundering sample matches earlier DPRK-linked operations, together with the Bybit heist from earlier this yr.

Drift has frozen all remaining protocol capabilities, eliminated compromised wallets from the multisig, and introduced in Uneven Analysis and OtterSec to steer a coordinated restoration plan. Attacker wallets have been flagged throughout main exchanges and bridges, however no materials restoration has been introduced but. The DRIFT token continues to be sitting roughly 98% under its all-time excessive.

The second half of this story is Circle. ZachXBT printed a detailed analysis of leaked server information from the DPRK crypto community and accused Circle of being “asleep” whereas greater than $230 million in stolen USDC was bridged by way of CCTP from Solana to Ethereum throughout US hours. Circle publicly defended its freeze process, arguing that untimely intervention on energetic investigations can tip off attackers and compromise restoration. The irony is that in the identical seven-day window, Circle minted a document $3.25 billion USDC on Solana, making this each Circle’s greatest Solana week on document and its most reputationally uncovered one.

Morgan Stanley’s MSBT and the Treasury Firm race

The institutional aspect of the market saved transferring. Morgan Stanley confirmed on April 8 that its spot Bitcoin ETF would debut the identical day below the ticker MSBT, and the product pulled in roughly $32 million on its debut session. It’s a modest quantity subsequent to IBIT, however the sign issues greater than the scale. Morgan Stanley is the primary of the old-guard wirehouses to place its personal identify on a spot Bitcoin ETF moderately than simply distributing another person’s.

On the company treasury aspect, Technique restarted its accumulation program with a 4,871 BTC buy, retaining Michael Saylor’s publicly said a million BTC aim firmly on the desk. Bitmine pushed its ether treasury previous 4.8 million ETH, cementing its place as the biggest company ETH holder. Ether Machine, nonetheless, walked away from its $1.6 billion SPAC merger with Dynamix, a reminder that not each treasury firm story ends in a public itemizing.

Bhutan went the other way. The sovereign miner moved $22 million in bitcoin midweek and adopted it with a $180 million sale, signaling a transparent shift in how the nation is managing its digital asset reserves. It’s not panic promoting, however it’s a strategic trim, and it aligns with a broader wave of miner promoting that has saved a lid on spot value motion.

CLARITY Act positive aspects public backing from Treasury and SEC

Washington had a loud week on crypto coverage. Treasury Secretary Scott Bessent publicly known as for swift passage of the CLARITY Act, warning that failing to cross it could hand market construction management to different jurisdictions. A day later, SEC Chair Paul Atkins backed fast-track approval of the bill, echoing the identical framing.

The Senate aspect lined up behind them. Senator Invoice Hagerty mentioned the Senate may advance the crypto bill in April, and Senator Cynthia Lummis urged action on the CLARITY Act earlier than the 2026 midterms, warning that the political window after November can be narrower than folks assume. Between the Treasury, the SEC, and two Senate crypto champions all pushing in the identical path in the identical week, CLARITY is as near a coordinated coverage dash as crypto has seen in Washington this yr.

Twister Money, CFTC vs Arizona, and India’s tax push

Two enforcement tales sat subsequent to the legislative push. The DOJ rejected the Supreme Courtroom argument put ahead by Twister Money co-founder Roman Storm’s authorized staff, signaling the prison case will preserve transferring via the decrease courts. And the CFTC sued the state of Arizona, searching for an injunction to dam Arizona’s state playing legal guidelines from making use of to federally regulated prediction markets. This can be a direct federal preemption battle and the largest prediction market case within the US because the Kalshi ruling.

India made its personal transfer. The Revenue Tax Division started issuing Section 148A notices to crypto buyers for AY 2022-23, reopening previous evaluation years for anybody with materials crypto exercise throughout that interval. This isn’t a brand new coverage; it’s the enforcement of present legislation, however the timing issues as a result of it overlaps with a session paper on crypto regulation that the federal government has nonetheless not printed. 

Individually, a Crypto Occasions deep dive checked out how Russia is rewiring cross-border funds via Africa utilizing crypto rails, a reminder that the stablecoin story can also be more and more a geopolitics story.

Justin Solar vs WLFI: The political story of the week

Essentially the most explosive story of the week was Justin Solar publicly breaking with World Liberty Monetary. In an extended publish on X on April 12, the Tron founder accused the Trump-backed DeFi undertaking of embedding a hidden blacklist perform within the WLFI sensible contract and utilizing it to freeze investor tokens with out disclosure or due course of. Solar known as the design a “lure door marketed as an open door” and declared himself the “first and single largest sufferer.”

Roughly 545 million WLFI tokens tied to Solar have been locked since September 2025, when WLFI blacklisted his pockets after he moved round $9 million price of tokens via HTX and Binance. Solar mentioned on the time the transfers had been alternate deposit exams, not gross sales. 

With WLFI buying and selling close to $0.09, down greater than 74% from its debut, Solar’s frozen place is now price below $50 million, a paper lack of roughly $70 million on that tranche alone. His whole publicity to the Trump-linked crypto ecosystem nonetheless stands at round $175 million, together with $100 million within the TRUMP memecoin.

WLFI responded hours later, accusing Solar of “taking part in the sufferer” and shutting its publish with “See you in courtroom pal.” Solar demanded that whoever runs the official WLFI account establish themselves. That is the primary time a serious early WLFI backer has gone absolutely public in opposition to the undertaking, and it’ll reshape the political dialog round Trump-era crypto offers for the remainder of this cycle.

Derivatives, ETFs, and the CZ memoir sideshow

CME Group added AVAX and SUI futures to its crypto derivatives suite, giving institutional desks regulated publicity to 2 of the extra actively traded alt-L1s. Canary Capital filed an S-1 with the SEC for a spot PEPE ETF, whereas PEPE itself dropped 5% on the information. On Hyperliquid, oil perpetuals briefly dethroned bitcoin as probably the most traded market, a small however telling signal that 24/7 commodity perps are discovering an actual viewers inside crypto-native venues.

CZ’s memoir dropped and immediately generated two storylines. First, the revelation that Binance’s early $3 million funding in Terra had swelled to $1.6 billion on the peak earlier than the Luna collapse erased it. Second, a contemporary spherical of public sparring with OKX founder Star Xu, who disputed CZ’s model of occasions round a number of Binance-OKX flashpoints. Entertaining, but additionally a reminder that the post-FTX cleanup of exchange-era rivalries is just not truly over.

On the info aspect, XRP’s 365-day MVRV ratio fell to its lowest level because the FTX collapse, which means the common XRP holder from the previous yr is sitting in a loss. And VanEck’s head of digital asset analysis urged MARA shareholders to reject the reelection of one among its long-standing administrators, calling the board “too small and insular” for an organization of MARA’s measurement.

Extra exploits: Denaria, Aethir, RaveDAO, VDOR

The safety beat didn’t get any quieter. Denaria suffered a $165K exploit on Linea and paused person entry. Aethir’s adapter was drained for $400K, with the stolen funds bridged to TRON. The RaveDAO token spiked 250% after a suspicious on-chain deposit, triggering pump-and-dump issues and a pointy reversal. And VDOR, a Solana memecoin that had been loosely using Center East ceasefire headlines, crashed 93% in what seems like a basic rugpull.

On the defensive aspect, StarkWare introduced it’s engaged on making Bitcoin quantum-resistant utilizing STARK-based proof programs. Quantum threat has been the low-grade panic subject of the yr. It’s helpful to see not less than one staff shift from warning posts to precise engineering.

High Headlines of the week

Beneath are the most important headlines, giving an summary of what occurred within the crypto market this week.

• Technique’s 4,871 BTC Purchase: Michael Saylor’s Technique restarted its bitcoin accumulation program with a contemporary 4,871 BTC buy, pushing the corporate nearer to its publicly said aim of holding a million BTC on its stability sheet.
• Bitmine Hits 4.8M ETH: Bitmine continued stacking ether, crossing 4.8 million ETH in its company treasury and cementing its standing as the biggest publicly disclosed ETH holder amongst treasury corporations.
• Russia’s Crypto Backdoor By way of Africa: A Crypto Occasions investigation detailed how Russia is utilizing crypto rails and stablecoin routes via African jurisdictions to maneuver worth round Western sanctions, including a brand new geopolitical layer to the stablecoin dialog.
• MARA Governance Pushback: VanEck’s head of digital asset analysis publicly urged MARA shareholders to reject the reelection of a long-serving director, calling the board “too small and insular” for an organization of MARA’s scale.
• India Reopens Outdated Crypto Tax Years: The Revenue Tax Division began issuing Part 148A notices to crypto buyers for evaluation yr 2022-23, signaling contemporary scrutiny of previous crypto transactions even earlier than a proper regulatory framework is in place.
• XRP Holders Deep in Purple: XRP’s 365-day MVRV ratio dropped to its lowest studying because the FTX collapse, which means the common XRP purchaser over the previous yr is now sitting on an unrealised loss.
• CME Provides AVAX and SUI Futures: CME Group expanded its crypto derivatives suite with AVAX and SUI futures, opening regulated institutional publicity to 2 of the extra actively traded alt-L1s past BTC, ETH, SOL, and XRP.
• Oil Perps Dethrone BTC on Hyperliquid: Oil perpetuals briefly overtook bitcoin as probably the most traded market on Hyperliquid, as 24/7 commodity perps picked up severe quantity inside crypto-native venues.
• VDOR Memecoin Rugpull: A Solana memecoin known as VDOR, which had been loosely using Center East ceasefire headlines, crashed 93% in what seems like a textbook rugpull.
• Canary Information PEPE ETF: Canary Capital filed an S-1 with the SEC for a spot PEPE ETF, pushing the meme coin ETF race ahead at the same time as PEPE itself dropped 5% on the submitting.
• Denaria Exploit: Denaria suffered a $165K exploit on Linea and paused person entry shortly after the drain, pulling its frontend offline whereas the staff investigated.
• Aethir Adapter Hack: An Aethir adapter was drained for roughly $400K, with the stolen funds rapidly bridged over to TRON, following a well-recognized laundering sample seen in smaller DeFi exploits.
• RaveDAO Suspicious Spike: The RaveDAO token spiked 250% after a suspicious on-chain deposit, triggering pump-and-dump issues earlier than a pointy reversal worn out many of the transfer.
• StarkWare’s Quantum Repair: StarkWare introduced it’s engaged on making Bitcoin quantum-resistant utilizing STARK-based proof programs, shifting the quantum debate from warning posts to precise engineering.
• CZ Memoir vs Star Xu: CZ’s memoir dropped with the revelation that Binance’s early $3 million funding in Terra had grown to $1.6 billion earlier than Luna collapsed, and it additionally sparked a contemporary public feud with OKX founder Star Xu over their previous aggressive flashpoints.
• DPRK Server Knowledge Leak: ZachXBT printed an in depth breakdown of leaked server information from the North Korean crypto community, giving the clearest public look but at how DPRK-linked groups organise, launder, and transfer stolen funds throughout protocols.

Buzz of the week

The excitement this week belonged to the widening hole between crypto’s institutional glow-up and the governance mess beneath it. On one aspect, Morgan Stanley is on NYSE Arca with its personal bitcoin ETF, Circle is minting USDC on Solana at document velocity, CME is itemizing AVAX and SUI futures, the CLARITY Act has each the Treasury and the SEC publicly pushing for it, and Technique is shopping for bitcoin once more. Crypto has by no means had extra institutional cowl than it does proper now.

On the opposite aspect, the largest DeFi exploit of 2026 is formally a North Korean intelligence operation, Circle is defending the way it responded to that exploit, a Trump-backed DeFi undertaking is being accused by its largest early investor of hiding a blacklist backdoor, Bhutan is trimming sovereign bitcoin, and three extra protocols bought exploited in a single week.

The sample is identical one we flagged final week, simply louder. Institutionalization is just not slowing down, and neither is the safety and governance disaster beneath it. The CLARITY Act, if it passes, won’t repair the human layer. Social engineering, opaque sensible contract privileges, and centralized intervention selections by stablecoin issuers are going to maintain defining the danger floor of this cycle.

That’s the wrap for this week. See you subsequent Sunday.

Disclaimer: The knowledge researched and reported by The Crypto Occasions is for informational functions solely and isn’t an alternative to skilled monetary recommendation. Investing in crypto belongings entails important threat as a consequence of market volatility. All the time Do Your Personal Analysis (DYOR) and seek the advice of with a professional Monetary Advisor earlier than making any funding selections.