Citi × Coinbase: stablecoin payments expansion. Two rails, US-first. Virtual Accounts on Citi BaaS (fiat → stablecoin auto). Spring checkout (stablecoin → fiat, Citi settles). Merchants don't custody the tokens. Read the PR. Separate from today's Clearing DCO.

~$2M / 766 ETH drained. Scammers stood up a fake OP-Stack “GIWA mainnet” on reserved Chain ID 9134 before Dunamu’s real L2 launched. DYORSWAP listed it. 1,335 wallets bridged in. Official GIWA: mainnet is NOT live. Drop unofficial RPCs.

Coinbase Clearing LLC just got CFTC DCO registration. USDC-native clearinghouse. Fully collateralized futures, options, and swaps only. Completes the FCM + DCM + DCO stack. Margin books and single-stock perps still stay with partners. Read the order. Don't confuse this with leverage clearing.

Senate PSI: 84% of 846 Iran-linked sanctioned wallets ran almost entirely on USDT. One OFAC-named oil-smuggler pair moved $603M USDT over 4 years. Tether: ~$550M Iran-linked freezes in 2026. Report: freezes still lag designations. Read the primary. Don't treat issuer freeze as instant.

~$292M Kelp bridge drain ran on a single verifier. Chainlink just shipped CCIP 2.0. Apps can add their own signer on top of the default 16-node set. If you move size cross-chain, ask who has to sign before it clears.

$18.43M linked to one serial rug crew on Robinhood Chain 53 launches in ~2 months. Same money conveyor. 70–200 wallets sniping 70%+ supply (mostly Pons V2). Fake pre-launches before the real CA. Biggest single extraction ~$3.12M. Funds mostly parked on ETH.

🚨 Zano: inflation bug in Gateway Addresses. ~24h chain rollback. @zano_project: CEASE all ZANO + Confidential Assets activity NOW. Damages to be reimbursed. No exploit total published yet.

🚨 Magic Eden sale path: ~3,832 NFTs yanked from hundreds of wallets. @CirrusNFT watched sell-to-self for 0 ETH. @0xQuit: whitehat. stash in 0x71cF… "safe", return later. @MagicEden quiet so far. Revoke Payment Processor approvals now.

🚨 Meter exploit: unbacked MTR/MTRG mint. Mainnet + bridge paused. @Meter_IO: Sep 23 21:14 UTC attacker hit a block validation flaw, minted unbacked MTR + MTRG, dumped on DEXs, bridged out. Blockaid on BNB Passport: ~$2.3M unbacked wrapped MTRG minted / partly sold on PancakeSwap. Stop Meter activity. No claim / refund DMs.

portal status: Sep 22-23 outlets: Apply.fbijobs.gov + Special Agent Applicant Portal unavailable. live Fri Sep 25 ~00:26 CEST: apply 403, fbijobs.gov 503. still sick. applied / work there: expect spearphish about verifying clearance / application.