ARK Invest, led by Cathie Wood, bought 161,513 shares of Circle Internet Group (NASDAQ: CRCL) on Tuesday for about $20.45 million, according to Investing.com. Circle shares ended the session down 20.11%. ARK's biggest sale of the day was Twist Bioscience Corp (NASDAQ: TWST), trimming 190,100 shares worth roughly $8.46 million. The firm also sold 54,640 shares of Roku Inc (NASDAQ: ROKU) for about $5.34 million and 18,620 shares of Teradyne Inc (NASDAQ: TER) for about $5.66 million. In addition, ARK cut its Bullish (BLSH) stake by a combined 41,064 shares across the ARKK, ARKW and ARKF ETFs, totaling about $1.62 million.

SpaceX, the aerospace company led by Elon Musk, is preparing to submit its IPO prospectus as early as this week, according to The Information. The report said the company is targeting a public listing in June.

ChainThink reported that developments in the Middle East shifted repeatedly from late March 25 into the morning. During U.S. market hours, rumors circulated that units of the U.S. 82nd Airborne Division were preparing to deploy to the region, souring risk sentiment. WTI crude jumped above $93 a barrel, while U.S. equities sold off. President Trump later said the United States was in talks with Iran, adding that Iran had "begun rational dialogue" and agreed to "never possess nuclear weapons." Oil prices and U.S. Treasury yields pulled back from their highs, and stocks pared part of the earlier decline. The three major U.S. indices still finished lower, with small caps outperforming large caps. After the close, Trump again lifted expectations for progress, saying U.S.-Iran talks were "likely very close to reaching an agreement" and reiterating Iran's pledge not to obtain nuclear weapons. Reports said the U.S. planned to propose a one-month ceasefire and had put forward 15 negotiating proposals. WTI fell more than 6% within an hour in after-hours trading, nearly wiping out the day's gains. Nasdaq 100 futures rose more than 1%. Cryptocurrencies were relatively steady. Bitcoin briefly moved above $69,000 early today before rebounding and was last at $70,634.74.

BlockBeats reports that Middle East developments swung sharply overnight into the morning of March 25, driving fast-moving moves across markets. During regular U.S. trading, news that units of the U.S. 82nd Airborne Division were poised for deployment to the region hit risk sentiment. WTI crude jumped above $93 a barrel and U.S. equities sold off. Later, U.S. President Trump said Washington was in talks with Iran, claiming Iran had "begun rational dialogue" and agreed to "never possess nuclear weapons." Oil prices and U.S. Treasury yields retreated from their highs, and equities pared some losses. All three major U.S. indexes still finished lower, with small caps outperforming large caps. In after-hours trading, Trump again lifted expectations for a deal, saying U.S.-Iran talks were "likely very close to reaching an agreement" and repeating that Iran had agreed to never possess nuclear weapons. Reports said the U.S. planned to propose a one-month ceasefire and presented 15 negotiation proposals. WTI slid more than 6% within an hour after hours, nearly wiping out the day's gains, while Nasdaq 100 futures rose more than 1%. Crypto markets were comparatively steady. Bitcoin briefly traded above $69,000 earlier today before rebounding, and was last at $70,634.74.

A malicious build of the widely used Python package LiteLLM briefly appeared on PyPI, where a routine "pip install litellm" could trigger broad credential theft on affected machines. The tainted releases, v1.82.7 and v1.82.8, abused Python's .pth mechanism to execute on every interpreter startup, even if LiteLLM was never imported. The malware targeted high-value secrets, including SSH keys; cloud credentials for AWS, GCP and Azure; Kubernetes configuration and cluster secrets; API keys, .env files and CI/CD secrets; Git credentials and database passwords; shell history and crypto wallets. Stolen data was collected, encrypted, and exfiltrated to attacker-controlled infrastructure. LiteLLM is downloaded about 97 million times per month, and the biggest exposure stemmed from transitive dependencies. Projects that pull it in indirectly, such as via "pip install dspy", could also be impacted, sharply widening the potential blast radius. Although the attack window was under an hour, it was only uncovered because of a bug in the malware itself. A recursive fork bomb reportedly crashed a developer's machine, drawing attention to the compromise. Without that defect, the campaign could have persisted for days or weeks. Investigators describe a three-stage payload: (1) collection of sensitive files, environment variables, and cloud metadata; (2) exfiltration via an AES-256 and RSA encrypted archive sent outbound; (3) persistence attempts, including Kubernetes takeover and system-level backdoors. In Kubernetes environments, it tried to deploy privileged pods across nodes, mount host filesystems, and establish durable access. The packages were uploaded directly to PyPI without a corresponding GitHub release, pointing to a compromised maintainer account or leaked API token. Related research links the incident to a wider campaign targeting open-source infrastructure. During the episode, a GitHub issue thread was briefly flooded with bot spam and then closed, fueling concerns about maintainer compromise. The malicious versions have since been removed from PyPI, but the impact may already be material. Early reports cite real financial losses, including claims of millions in stolen cryptocurrency, according to Brian Roemmele.

Robinhood said it has approved a new $1.5B share repurchase program, marking an additional return-of-capital initiative as the company's stock has climbed nearly 80% over the past year.

Robinhood's board has approved a new $1.5 billion share repurchase program, Reuters reported. The authorization follows an initial $1 billion buyback launched in May 2024, which was expanded by $500 million in April 2025. Shares are up nearly 80% over the past year, even as the broader software sector has sold off. Crypto trading was a key growth engine in 2024: notional volumes surged more than 400% year over year, reaching $71 billion in Q4 alone. The move underscores management's view that the market is undervaluing the company as it commits additional capital to retire its own stock.

Robinhood has authorized a $1.5 billion share buyback, following a run-up that has lifted the company's shares nearly 80% over the past year.

ChainCatcher cited Coinglass data showing $170 million in total liquidations across the market over the past 24 hours. Long positions accounted for $118 million, while short positions made up $51.7967 million. By asset, Bitcoin saw $48.2297 million in long liquidations and $15.105 million in shorts. Ethereum recorded $23.5653 million liquidated from longs and $12.2581 million from shorts. In total, 80,335 users were liquidated globally during the period. The largest single liquidation was on Hyperliquid XYZ:SP500USD, totaling $6.4509 million.