Wallet

Cyble reports that an Android banking trojan dubbed OverlayPhantom is targeting more than 180 banking, financial and cryptocurrency apps across 10 countries. The malware is spread via malicious URLs that mimic trusted apps, then shows convincing fake in-app screens to steal PINs and other credentials and enable account takeover.

Americanfortress has rolled out a beta of its compliance-oriented privacy infrastructure on Arbitrum, adding stealth-address tooling and name-based transfers aimed at institutional and high-volume DeFi use. The company says Arbitrum holds more than $15 billion in total value locked, and the beta includes a “Receive on Arbitrum Privately” campaign that will grant the first 500 eligible participants a lifetime FortressName.

On May 30, 2026, Coinbase-backed Ethereum layer-2 network Base introduced Base MCP, a tool that lets AI models such as ChatGPT and Claude propose actions on a user's Base account. The system supports swaps, balance checks, transfers, and dApp interactions, while requiring the user to approve or reject each transaction in a separate wallet flow. Base said the agents cannot access private keys or execute transactions on their own.

Fireblocks, Robinhood, and MetaMask have introduced the Open Transaction Layer (OTL), a shared standard intended to connect traditional finance and crypto participants. The initiative is designed to let MetaMask's 100 million users interact with tokenized equities and other institutional-grade assets from a self-custodial wallet, using common rails for identity, messaging, and transaction coordination.

On May 28, 2026, Trezor rolled out native stablecoin yield for USDC and USDT inside Trezor Suite v26.5.2, allowing users to deposit, withdraw, and claim rewards without leaving the app. The feature uses Morpho Vaults (USDC Prime and USDT Prime) curated by Steakhouse, with rates that vary based on borrowing demand and no lockup period. Trezor said the update is available on desktop now and targets more than 2 million users, while full mobile support is expected later in 2026.

South Korea’s Digital Asset Exchange Alliance (DAXA) has rolled out a new compliance standard requiring local crypto exchanges to revoke API keys suspected of being shared or misused. The move comes as the Financial Supervisory Service says automated trading represents about 30% of domestic crypto turnover, prompting tighter monitoring steps such as IP whitelisting and mandatory re-authentication.

Visa is processing roughly 90% of on-chain crypto card payments as total crypto card spending reached a record $7.8 billion. Monthly crypto card volume has risen 230% since May 2025, helped by card-based spending of stablecoins held in self-custody wallets. Visa's spending through Jupiter Global climbed 648% over the past two months, while central banks and financial firms also tested blockchain settlement rails via Project Agorá.

SoFi says it has introduced its SoFiUSD stablecoin directly inside its banking app, positioning itself as the first U.S. national bank to bring a stablecoin into a consumer banking platform. Users can buy, sell, hold, and convert SoFiUSD in-app, with initial support on Ethereum and Solana and a broader rollout planned over the coming weeks as app updates arrive.

x402 payment volume dropped from $5.15 million in November 2025 to $1.19 million by May 2026, while transaction counts recovered to 2.89 million in May at an average $0.52 each. The pattern points to agents making frequent sub-dollar payments for APIs, data, and compute, where manual wallet approvals can cost more than the transfer itself.

Ethereum co-founder Vitalik Buterin highlighted Kohaku's wallet feature that generates a new Ethereum address for each dapp a user connects to, arguing that relying on one global address is a privacy norm that needs to change. The approach aims to reduce onchain metadata linking across activities such as DEX use and lending, while Kohaku also advances privacy tooling through its v0.0.1-alpha.21 update that enables ERC-4337 relaying for Railgun transactions.