LayerZero Admits $292M Flaw, Bitcoin ETF Sell-Off, Cross-Chain Hacks Grow

The week’s greatest tales embody LayerZero’s admission of the single-verifier flaw behind the $292M KelpDAO exploit, a deepening Bitcoin ETF sell-off following the CLARITY Act milestone, a wave of cross-chain bridge exploits draining over $25M mixed, and India’s Parliament flagging “1000’s of crores” leaving the nation by way of crypto.

Welcome to this week’s cryptocurrency market replace. If final week was concerning the CLARITY Act clearing committee and THORChain’s $10.8M exploit freezing cross-chain DeFi, this week the fallout deepened on a number of fronts.

LayerZero publicly admitted a single-verifier configuration flaw was behind the $292 million KelpDAO exploit; the Verus bridge was breached for $11.58 million earlier than the hacker returned $8.5 million in a negotiated deal; Bitcoin ETFs continued hemorrhaging capital in what’s now a multi-week exodus; and Technique pushed previous 843,000 BTC in holdings. 

India dominated the regulatory dialog this week as Parliament revealed large crypto capital outflows, Binance challenged the authorized foundation for withdrawal restrictions, and Gujarat’s Deputy CM uncovered a darkish internet crypto community linked to terror financing. Let’s get into it.

Prime headlines for this week

Under are the key headlines, giving an overview of what occurred within the crypto market this week.

LayerZero admits single-verifier flaw behind $292M KelpDAO exploit

Probably the most consequential DeFi autopsy of the week got here from LayerZero, which publicly detailed the single-verifier configuration flaw that enabled the $292 million KelpDAO rsETH bridge exploit. 

The cross-chain messaging protocol confirmed {that a} compromised verifier infrastructure, mixed with a configuration that relied on a single verification layer moderately than a multi-verifier setup, created the opening the attacker exploited.

The admission is important not only for the size of the loss however for what it reveals concerning the state of cross-chain safety infrastructure in 2026. Protocols constructing on LayerZero had the choice to configure multi-verifier setups, however KelpDAO’s single-verifier alternative turned a compromised node right into a $292 million assault vector. 

The incident has reignited the broader debate about whether or not cross-chain bridge designs are essentially safe sufficient for the worth they carry.

Cross-chain bridge exploits pile up: Verus, Echo, and THORChain restoration

Bridge safety was the dominant theme of the week, and it was not restricted to LayerZero. TheVerus Ethereum bridge was breached for $11.58 million after an attacker exploited a validation flaw within the cross-chain verification system. The breach revived fears over the structural dangers of cross-chain infrastructure, coming simply days after the THORChain exploit that drained $10.8 million the prior week.

In a partial decision, theVerus hacker returned $8.5 million in ETH after a negotiated cope with the protocol crew, leaving roughly $3 million unrecovered. Individually, the Echo exploit noticed $821K moved by way of Twister Money after an eBTC mint, including one other entry to the week’s exploit ledger. 

In the meantime, THORChain moved into recovery mode, launching a governance vote to find out how the group will cowl the roughly $10 million in losses from the prior week’s hack as builders ready a software program patch to restart the community. The Monero DEX RetoSwap additionally suspended trading after a $2.7 million exploit within the Haveno protocol.

5 separate exploit or fund-movement occasions in a single week is an unusually excessive focus. Cross-chain infrastructure is clearly the first assault floor for 2026.

Bitcoin ETF exodus deepens after CLARITY Act “promote the information” second

The Bitcoin ETF outflow cycle that started the prior week accelerated. Bitcoin ETFs recorded heavy outflows, together with $649 million on Could 18 alone, following $1 billion the prior week, as institutional merchants executed a traditional “promote the information” commerce after the CLARITY Act cleared the Senate Banking Committee. Bitcoin dropped $6,000 within the selloff.

The mixed multi-week outflow sample now represents essentially the most sustained institutional pullback for the reason that preliminary ETF launch hype pale. The CLARITY Act’s passage, which was presupposed to be a bullish catalyst, as a substitute triggered profit-taking as merchants who had positioned forward of the vote locked in features. 

Whether or not this can be a non permanent deleveraging or a extra structural shift in institutional urge for food will develop into clearer as Bitcoin checks key assist ranges within the days forward.

Technique provides 24,869 BTC, now holds 843,738 Bitcoin

Michael Saylor’sStrategy made its largest weekly purchase in latest reminiscence, including 24,869 BTC and bringing whole holdings to 843,738 Bitcoin. The acquisition got here towards the backdrop of the ETF exodus, successfully positioning Technique as the client absorbing what establishments have been promoting.

Technique’s most well-liked inventory STRC hit a $10.5 billion market cap this week to guide world most well-liked shares, validating the Bitcoin treasury technique in fairness markets even because the underlying asset confronted promoting stress. Individually, Attempt added 382 BTC to its holdings, and a self-storage firm referred to as West Essential made headlines for getting roughly 0.129 BTC (roughly 13 million sats), illustrating how the Bitcoin treasury development is trickling right down to even the smallest companies.

SpaceX IPO submitting reveals 18,712 BTC treasury value $1.45B

Elon Musk’s SpaceX filed for an IPO that exposed a Bitcoin treasury holding of 18,712 BTC valued at $1.45 billion, unchanged since 2024. The submitting confirmed SpaceX as one of many largest company Bitcoin holders, although the unchanged place since 2024 indicators a maintain technique moderately than energetic accumulation.

The disclosure issues as a result of it’s the first time SpaceX’s BTC holdings have appeared in a public regulatory submitting, transferring from rumor to documented truth. It additionally provides one other main Musk-linked entity to the Bitcoin steadiness sheet economic system alongside Tesla’s current BTC place.

Goldman Sachs exits Ethereum, XRP, and Solana ETF positions

In a notable institutional reversal, Goldman Sachs cut its Ethereum ETF holdings by 70% and utterly exited its XRP and Solana ETF positions. The transfer marked a pointy pivot from the financial institution’s earlier optimism on altcoin ETF merchandise and means that conventional finance urge for food for something past Bitcoin ETFs is thinning.

Goldman’s exit from Solana and XRP positions is especially telling given the narrative that institutional adoption would broaden past Bitcoin into the broader crypto ecosystem. If one of many world’s largest funding banks can not discover cause to carry these positions, it raises questions concerning the near-term institutional demand for non-BTC crypto merchandise.

India regulatory highlight: Parliament listening to, Binance response, and terror-linked crypto community

India was the middle of regulatory gravity this week. Parliament’s 7th VDA meeting revealed that “1000’s of crores” are leaving the nation by way of crypto channels, framing the capital flight narrative as a nationwide safety concern moderately than only a tax compliance challenge.

Binance responded by stating that India has no regulation limiting crypto withdrawals, pushing again towards the implication that exchanges are enabling unlawful capital flight. The alternate’s public authorized stance is important as a result of it immediately challenges the framing from India’s parliamentary committee.

In the meantime, Gujarat’s Deputy Chief Minister uncovered a darkish internet crypto community linked to terror financing, including a nationwide safety dimension to India’s crypto coverage debate. The mixture of Parliament flagging capital outflows, Binance difficult the authorized framework, and a terror-linked crypto community being uncovered in the identical week places India at a regulatory inflection level.

CoinSwitch also made a splash this week with what’s being referred to as its most aggressive mainstream advertising and marketing push but, strolling into India’s residing rooms with a primetime play that would reshape how crypto is marketed within the nation.

Regulation and coverage strikes: CFTC, Japan, Congress, and Crypto PAC

The regulatory panorama past India was equally energetic. The CFTC took Minnesota to court docket over its prediction market ban, increasing the federal company’s state lawsuit marketing campaign and organising a authorized battle over whether or not states can prohibit federally regulated prediction markets like Kalshi and Polymarket.

Japan’s FSA gave choose overseas stablecoins a regulatory passport, making a authorized pathway for accredited stablecoins to function beneath Japanese monetary guidelines. This is among the most constructive stablecoin regulatory strikes from a significant economic system this 12 months.

Congress opened an investigation into insider buying and selling risks on Kalshi and Polymarket, bringing prediction market integrity beneath federal scrutiny on the similar time the CFTC is combating state-level bans. The Crypto PAC additionally launched its 2026 midterm push as Hester Peirce, often known as “Crypto Mother,” exited the SEC, closing a chapter of crypto-sympathetic dissent throughout the fee.

BitGo CEO fired again at Senator Warren over her characterization of BitGo as a “crypto financial institution,” rejecting the label and the regulatory implications that include it.

ZachXBT investigations: BlockDAG presale diversion and $RIVER bounty

On-chain investigator ZachXBT had a busy week. He exposed BlockDAG and ZKP for allegedly diverting $25 million in presale funds, claiming the cash was used to gasoline a separate undertaking referred to as Spartans moderately than the undertaking the traders thought they have been funding.

ZachXBT additionally placed a $10,000 bounty on Heisenberg Guru, a determine tied to the $RIVER scandal, enlisting the crypto group to assist determine and find the person. These investigations proceed to place ZachXBT because the de facto accountability mechanism in an area the place regulatory enforcement typically lags months or years behind the scams themselves.

Institutional and alternate strikes

Blockchain.com moved toward an IPO with a confidential SEC submitting, becoming a member of the rising record of crypto firms positioning for public markets in 2026. Venice Token (VVV) surged 24% after a Robinhood itemizing, demonstrating that alternate listings stay some of the dependable short-term catalysts for token value motion.

Bybit launched USD1 Maintain & Earn with 45 million WLFI rewards, pushing the Trump-linked stablecoin additional into alternate infrastructure. Gemini added USDT0 assist throughout Ethereum, Solana, and Tron, increasing omni-chain stablecoin entry. Polymarket’s ops pockets was drained of $700K, although consumer funds have been unaffected.

Authorized battles and fraud

Swan Bitcoin was sued for $970 million over an alleged Prime Belief tipoff, one of many largest crypto-related civil lawsuits filed this 12 months. Unsealed court docket filings revealed Jane Avenue merchants joked about their “edge” earlier than executing a $192 million UST dump, including a dangerous human factor to the Terra collapse litigation.

A $6.7 million crypto “wrench attack” hit a Kraken and Coinbase consumer, with stolen funds combined on-chain. Bodily crypto theft continues to escalate alongside digital exploits, a development that underscores the safety dangers of self-custody at scale.

Information you might need missed

• CJP Token rockets 400% on Pump.enjoyable: The “Cockroach Janta Occasion” meme token surged 400% as its viral political satire captured Gen-Z consideration on social media, one other reminder that meme coin markets commerce on consideration cycles, not fundamentals.
• Crypto PAC launches 2026 midterm push: With Hester Peirce exiting the SEC, the crypto trade’s political motion committee is gearing up for midterm elections with a deal with electing pro-crypto candidates to Congress.
• Monero DEX RetoSwap suspends buying and selling: The Haveno-based decentralized alternate halted all buying and selling after a $2.7 million exploit, highlighting that privacy-focused DEXs face the identical safety challenges as their clear counterparts.
• Polymarket ops pockets drained $700K: An operational pockets compromise drained $700K from Polymarket, although the prediction market confirmed consumer funds weren’t affected.
• West Essential Self Storage buys 0.129 BTC: The smallest Bitcoin treasury buy to make headlines this 12 months, proving that the company Bitcoin treasury playbook is being adopted at each scale.

Buzz of the Week

The excitement this week belongs to the cross-chain safety disaster. 5 separate exploit or fund-movement occasions throughout Verus, Echo, THORChain, RetoSwap, and LayerZero’s KelpDAO autopsy hit inside a seven-day window. That isn’t a coincidence. It’s a sample.

LayerZero’s public admission {that a} single-verifier configuration flaw enabled the $292 million KelpDAO exploit is a very powerful disclosure of the week, not as a result of it was a shock, however as a result of it formally documented what the DeFi group has been warning about for years. 

Cross-chain bridges are essentially the most capital-dense and architecturally fragile parts of the crypto stack. When LayerZero says a single compromised verifier become a $292 million exploit, it’s successfully saying that the default safety configuration of some of the broadly used cross-chain messaging protocols was not sturdy sufficient for the worth it carried. Protocols that constructed on LayerZero had the choice to make use of multi-verifier setups. KelpDAO didn’t. The fee was $292 million.

The Verus hack and partial restoration provides a distinct dimension. The attacker returned $8.5 million of the $11.58 million stolen after a negotiated cope with the protocol crew. These “white hat restoration” negotiations have gotten a sample in 2026, a wierd center floor between theft and bounty applications the place attackers exploit, negotiate, maintain a portion, and return the remainder. It isn’t justice. It isn’t enforcement. It’s injury management dressed up as decision.

In the meantime, the Bitcoin ETF exodus continued to deepen. The “promote the information” sample following the CLARITY Act’s committee passage confirms one thing the market has been demonstrating all 12 months: regulatory milestones should not bullish catalysts. They’re exit liquidity occasions for merchants who positioned forward of them. 

The CLARITY Act passing committee was presupposed to be the greenlight for institutional capital. As an alternative, it was the sign for positioned capital to take revenue. That distinction issues for the way the market will commerce the subsequent legislative milestone.

Technique’s 24,869 BTC buy in the identical week that ETFs bled a whole lot of thousands and thousands is the counterweight. Michael Saylor continues to soak up what the market sells, and the STRC most well-liked inventory hitting $10.5 billion in market cap suggests the fairness market is rewarding the technique even when Bitcoin’s value motion is messy. SpaceX’s IPO submitting, which confirms 18,712 BTC on the steadiness sheet, provides one other main company holder to the general public file.

India’s week was essentially the most regulatory-intensive the nation has seen within the crypto house. Parliament revealing 1000’s of crores in crypto capital flight, Binance publicly stating there isn’t a Indian regulation limiting withdrawals, and Gujarat uncovering a terror-linked darkish internet crypto community all throughout the similar week creates an setting the place aggressive regulation turns into politically viable. 

CoinSwitch’s primetime advertising and marketing push touchdown in the course of this regulatory firestorm is both completely timed braveness or a wager that the worst of India’s crypto coverage uncertainty is behind it.

What to anticipate for subsequent week?

Subsequent week has a number of clear watch factors.

First, the CLARITY Act’s path from committee to the Senate ground stays the defining regulatory storyline for crypto in 2026. Look ahead to indicators from the Senate Majority Chief on ground scheduling and whether or not the July 4 signing deadline stays life like. Any delays or procedural holds will instantly shift market sentiment.

Second, the cross-chain safety fallout shouldn’t be over. LayerZero’s autopsy will power different protocols constructed on its messaging layer to audit their verifier configurations, and any extra disclosures of single-verifier setups may set off market reactions within the affected tokens. THORChain’s governance vote on loss protection may also land, and the way the group responds will set a precedent for decentralized incident administration.

Third, India’s regulatory trajectory after the Parliament listening to and the terror-linked community disclosure will decide whether or not the nation strikes towards tighter controls or clearer frameworks. The Binance authorized pushback provides a company dimension to a debate that has to date been pushed by policymakers and regulation enforcement.

And keep watch over the Bitcoin ETF stream knowledge. If outflows proceed for a 3rd consecutive week, the narrative shifts from “promote the information” to one thing extra structural. If inflows resume, the CLARITY Act thesis will get a second wind. The information will converse for itself.

Additionally Learn: Blockchain Group Pushes Congress to Fix Crypto Tax Confusion

Disclaimer: The data researched and reported by The Crypto Occasions is for informational functions solely and isn’t an alternative to skilled monetary recommendation. Investing in crypto belongings includes important threat as a consequence of market volatility. All the time Do Your Personal Analysis (DYOR) and seek the advice of with a certified Monetary Advisor earlier than making any funding choices.