Ripple has received early approval for an EU Markets in Crypto-Assets (MiCA) license in Luxembourg, positioning it to offer compliant crypto-asset services for European payment rails. The approval is expected to speed up processing across Europe’s payment networks. The company also plans to open institutional onramps this quarter. The move marks a key step in Ripple’s EU compliance rollout.

The number of tokenized equity holders on the Solana blockchain has surpassed 1 million for the first time. The milestone signals a new high in adoption of real-world asset tokenization on the network. It also reflects market validation of Solana’s infrastructure for supporting compliant security tokens.

Payy’s bridging protocol was hit by a security exploit that has frozen its crypto card services, putting users’ account balances at risk. The attacker allegedly used a vulnerability in the bridge contract to move assets illegally, including stablecoins such as USDC. Affected users are unable to make payments or withdraw funds. The incident underscores serious weaknesses in Payy’s asset custody and cross-chain bridge security, directly disrupting crypto payment apps that rely on its services.

Bitget CEO Gracy Chen said the exchange’s $351M security incident affected several major blockchain networks, including Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC and Base. Tokens impacted include ETH, XRP, BNB, AVAX, USDT and USDC. Bitget said its on-chain cold wallets were not breached and that Bitget Wallet operates independently and was not affected. The exchange has contacted each affected chain’s foundation, with some confirming freezes on suspected hacker addresses, according to Chen.

Bitget’s CEO said in a livestream that the exchange suffered a security incident in which assets were stolen from hot wallets, involving ETH, XRP, BNB, AVAX, USDT and USDC across seven blockchains including Ethereum and the XRP Ledger. XRP was described as the largest single-chain loss. On-chain analysis indicates the attack method matches techniques used by DPRK-linked hacker groups, the CEO said.

An exchange said a vulnerability in a third-party back-end tool allowed forged instructions to bypass its wallet approval process, resulting in the theft of about 103 million XRP and 31,890 ETH worth about $357 million. The estimate was slightly revised up from a previous $351.6 million. It has suspended withdrawals because it is not yet certain the flaw has been fully patched and fears resuming withdrawals prematurely could lead to another theft. The attacker IP characteristics match VPN patterns commonly used by known North Korea-linked hacking groups, the exchange said.

Between Sept 15–20, about 11.7M XRP (~$20M) was stolen from D’CENT App Wallet users, affecting 6,678 wallets. The attacker used keys already under their control to execute valid-signature transactions in six coordinated waves, with 5,001 accounts deleted to claim reserve balances. About 5.6M XRP was routed to Ethereum via THORChain, while the rest moved through Binance and NEAR Intents and was often off-ramped within hours. As of Sept 21, attacker wallets still held about 1.3M XRP; D’CENT said its hardware wallets were not impacted and has not announced reimbursement.

CFTC Chair Mike Selig said the agency is using its existing statutory authority to establish a crypto-asset regulatory market structure. He said the move is intended to provide a clearer rule framework for digital assets. He did not provide a specific timeline or detailed measures.