Bitget’s CEO said in a livestream that the exchange suffered a security incident in which assets were stolen from hot wallets, involving ETH, XRP, BNB, AVAX, USDT and USDC across seven blockchains including Ethereum and the XRP Ledger. XRP was described as the largest single-chain loss. On-chain analysis indicates the attack method matches techniques used by DPRK-linked hacker groups, the CEO said.

An exchange said a vulnerability in a third-party back-end tool allowed forged instructions to bypass its wallet approval process, resulting in the theft of about 103 million XRP and 31,890 ETH worth about $357 million. The estimate was slightly revised up from a previous $351.6 million. It has suspended withdrawals because it is not yet certain the flaw has been fully patched and fears resuming withdrawals prematurely could lead to another theft. The attacker IP characteristics match VPN patterns commonly used by known North Korea-linked hacking groups, the exchange said.

Between Sept 15–20, about 11.7M XRP (~$20M) was stolen from D’CENT App Wallet users, affecting 6,678 wallets. The attacker used keys already under their control to execute valid-signature transactions in six coordinated waves, with 5,001 accounts deleted to claim reserve balances. About 5.6M XRP was routed to Ethereum via THORChain, while the rest moved through Binance and NEAR Intents and was often off-ramped within hours. As of Sept 21, attacker wallets still held about 1.3M XRP; D’CENT said its hardware wallets were not impacted and has not announced reimbursement.

CFTC Chair Mike Selig said the agency is using its existing statutory authority to establish a crypto-asset regulatory market structure. He said the move is intended to provide a clearer rule framework for digital assets. He did not provide a specific timeline or detailed measures.

The U.S. SEC has introduced a five-year innovation exemption that would, for the first time, allow eligible tokenized securities venues to use permissioned automated market makers and liquidity pools on public, permissionless blockchains. SEC materials explicitly describe XRP as one of the digital commodities identified under the March 2026 interpretation. Securitize has reported more than $4B in tokenized assets in 2026 and has become closely integrated into tokenized capital markets. Industry participants expect the first related notices could be issued next quarter, signaling a shift from concept to corporate disclosures around “tokenized Wall Street.”

JustLend, a TRON-focused lending protocol, has about $3.84 billion in TVL, up about 16% from roughly $3.3 billion in the first quarter. Its token JST trades around $0.113, up about 31% for the quarter, and the protocol has completed three burn rounds totaling about 13.56 billion JST, funded by net protocol revenue. The V2 upgrade added isolated markets, ERC-4626 vaults and an adaptive interest-rate model; the protocol now has 18 active markets and has expanded beyond lending into sTRX liquid staking, Energy rentals and DAO governance.

The final vote on the U.S. CLARITY Act is scheduled for 2:15 p.m. ET tomorrow. Insiders say the bill is an updated version that has secured Democratic approval. Market estimates put the odds of passage at about 51%, leaving the outcome highly uncertain. Supporters say passage would establish a clearer regulatory framework for crypto assets, while a rejection would leave the regulatory vacuum in place.

The U.S. Commodity Futures Trading Commission (CFTC) has formally submitted bitcoin and broader crypto market rules to the White House for approval. The move marks a key step in developing the U.S. regulatory framework for crypto assets. The rules are expected to take effect after they are signed by the president, providing clearer compliance guidance for the industry.