The week’s biggest stories include LayerZero’s admission of the single-verifier flaw behind the $292M KelpDAO exploit, a deepening Bitcoin ETF sell-off following the CLARITY Act milestone, a wave of cross-chain bridge exploits draining over $25M combined, and India’s Parliament flagging “thousands of crores” leaving the country via crypto.
Welcome to this week’s cryptocurrency market update. If last week was about the CLARITY Act clearing committee and THORChain’s $10.8M exploit freezing cross-chain DeFi, this week the fallout deepened on multiple fronts.
LayerZero publicly admitted a single-verifier configuration flaw was behind the $292 million KelpDAO exploit; the Verus bridge was breached for $11.58 million before the hacker returned $8.5 million in a negotiated deal; Bitcoin ETFs continued hemorrhaging capital in what is now a multi-week exodus; and Strategy pushed past 843,000 BTC in holdings.
India dominated the regulatory conversation this week as Parliament revealed massive crypto capital outflows, Binance challenged the legal basis for withdrawal restrictions, and Gujarat’s Deputy CM uncovered a dark web crypto network linked to terror financing. Let’s get into it.
Top headlines for this week
Below are the major headlines, giving an overview of what happened in the crypto market this week.
LayerZero admits single-verifier flaw behind $292M KelpDAO exploit
The most consequential DeFi post-mortem of the week came from LayerZero, which publicly detailed the single-verifier configuration flaw that enabled the $292 million KelpDAO rsETH bridge exploit.
The cross-chain messaging protocol confirmed that a compromised verifier infrastructure, combined with a configuration that relied on a single verification layer rather than a multi-verifier setup, created the opening the attacker exploited.
The admission is significant not just for the scale of the loss but for what it reveals about the state of cross-chain security infrastructure in 2026. Protocols building on LayerZero had the option to configure multi-verifier setups, but KelpDAO’s single-verifier choice turned a compromised node into a $292 million attack vector.
The incident has reignited the broader debate about whether cross-chain bridge designs are fundamentally secure enough for the value they carry.
Cross-chain bridge exploits pile up: Verus, Echo, and THORChain recovery
Bridge security was the dominant theme of the week, and it was not limited to LayerZero. TheVerus Ethereum bridge was breached for $11.58 million after an attacker exploited a validation flaw in the cross-chain verification system. The breach revived fears over the structural risks of cross-chain infrastructure, coming just days after the THORChain exploit that drained $10.8 million the prior week.
In a partial resolution, the Verus hacker returned $8.5 million in ETH after a negotiated deal with the protocol team, leaving roughly $3 million unrecovered. Separately, the Echo exploit saw $821K moved through Tornado Cash after an eBTC mint, adding another entry to the week’s exploit ledger.
Meanwhile, THORChain moved into recovery mode, launching a governance vote to determine how the community will cover the roughly $10 million in losses from the prior week’s hack as developers prepared a software patch to restart the network. The Monero DEX RetoSwap also suspended trading after a $2.7 million exploit in the Haveno protocol.
Five separate exploit or fund-movement events in a single week is an unusually high concentration. Cross-chain infrastructure is clearly the primary attack surface for 2026.
Bitcoin ETF exodus deepens after CLARITY Act “sell the news” moment
The Bitcoin ETF outflow cycle that began the prior week accelerated. Bitcoin ETFs recorded heavy outflows, including $649 million on May 18 alone, following $1 billion the prior week, as institutional traders executed a classic “sell the news” trade after the CLARITY Act cleared the Senate Banking Committee. Bitcoin dropped $6,000 in the selloff.
The combined multi-week outflow pattern now represents the most sustained institutional pullback since the initial ETF launch hype faded. The CLARITY Act’s passage, which was supposed to be a bullish catalyst, instead triggered profit-taking as traders who had positioned ahead of the vote locked in gains.
Whether this is a temporary deleveraging or a more structural shift in institutional appetite will become clearer as Bitcoin tests key support levels in the days ahead.
Strategy adds 24,869 BTC, now holds 843,738 Bitcoin
Michael Saylor’s Strategy made its largest weekly purchase in recent memory, adding 24,869 BTC and bringing total holdings to 843,738 Bitcoin. The purchase came against the backdrop of the ETF exodus, effectively positioning Strategy as the buyer absorbing what institutions were selling.
Strategy’s preferred stock STRC hit a $10.5 billion market cap this week to lead global preferred stocks, validating the Bitcoin treasury strategy in equity markets even as the underlying asset faced selling pressure. Separately, Strive added 382 BTC to its holdings, and a self-storage company called West Main made headlines for buying approximately 0.129 BTC (roughly 13 million sats), illustrating how the Bitcoin treasury trend is trickling down to even the smallest businesses.
SpaceX IPO filing reveals 18,712 BTC treasury worth $1.45B
Elon Musk’s SpaceX filed for an IPO that revealed a Bitcoin treasury holding of 18,712 BTC valued at $1.45 billion, unchanged since 2024. The filing confirmed SpaceX as one of the largest corporate Bitcoin holders, though the unchanged position since 2024 signals a hold strategy rather than active accumulation.
The disclosure matters because it is the first time SpaceX’s BTC holdings have appeared in a public regulatory filing, moving from rumor to documented fact. It also adds another major Musk-linked entity to the Bitcoin balance sheet economy alongside Tesla’s existing BTC position.
Goldman Sachs exits Ethereum, XRP, and Solana ETF positions
In a notable institutional reversal, Goldman Sachs cut its Ethereum ETF holdings by 70% and completely exited its XRP and Solana ETF positions. The move marked a sharp pivot from the bank’s earlier optimism on altcoin ETF products and suggests that traditional finance appetite for anything beyond Bitcoin ETFs is thinning.
Goldman’s exit from Solana and XRP positions is particularly telling given the narrative that institutional adoption would broaden beyond Bitcoin into the wider crypto ecosystem. If one of the world’s largest investment banks cannot find reason to hold these positions, it raises questions about the near-term institutional demand for non-BTC crypto products.
India regulatory spotlight: Parliament hearing, Binance response, and terror-linked crypto network
India was the center of regulatory gravity this week. Parliament’s 7th VDA meeting revealed that “thousands of crores” are leaving the country through crypto channels, framing the capital flight narrative as a national security concern rather than just a tax compliance issue.
Binance responded by stating that India has no law restricting crypto withdrawals, pushing back against the implication that exchanges are enabling illegal capital flight. The exchange’s public legal stance is significant because it directly challenges the framing from India’s parliamentary committee.
Meanwhile, Gujarat’s Deputy Chief Minister uncovered a dark web crypto network linked to terror financing, adding a national security dimension to India’s crypto policy debate. The combination of Parliament flagging capital outflows, Binance challenging the legal framework, and a terror-linked crypto network being exposed in the same week puts India at a regulatory inflection point.
CoinSwitch also made a splash this week with what is being called its most aggressive mainstream marketing push yet, walking into India’s living rooms with a primetime play that could reshape how crypto is marketed in the country.
Regulation and policy moves: CFTC, Japan, Congress, and Crypto PAC
The regulatory landscape beyond India was equally active. The CFTC took Minnesota to court over its prediction market ban, expanding the federal agency’s state lawsuit campaign and setting up a legal battle over whether states can restrict federally regulated prediction markets like Kalshi and Polymarket.
Japan’s FSA gave select foreign stablecoins a regulatory passport, creating a legal pathway for approved stablecoins to operate under Japanese financial rules. This is one of the most constructive stablecoin regulatory moves from a major economy this year.
Congress opened an investigation into insider trading risks on Kalshi and Polymarket, bringing prediction market integrity under federal scrutiny at the same time the CFTC is fighting state-level bans. The Crypto PAC also launched its 2026 midterm push as Hester Peirce, known as “Crypto Mom,” exited the SEC, closing a chapter of crypto-sympathetic dissent within the commission.
BitGo CEO fired back at Senator Warren over her characterization of BitGo as a “crypto bank,” rejecting the label and the regulatory implications that come with it.
ZachXBT investigations: BlockDAG presale diversion and $RIVER bounty
On-chain investigator ZachXBT had a busy week. He exposed BlockDAG and ZKP for allegedly diverting $25 million in presale funds, claiming the money was used to fuel a separate project called Spartans rather than the project the investors thought they were funding.
ZachXBT also placed a $10,000 bounty on Heisenberg Guru, a figure tied to the $RIVER scandal, enlisting the crypto community to help identify and locate the individual. These investigations continue to position ZachXBT as the de facto accountability mechanism in a space where regulatory enforcement often lags months or years behind the scams themselves.
Institutional and exchange moves
Blockchain.com moved toward an IPO with a confidential SEC filing, joining the growing list of crypto companies positioning for public markets in 2026. Venice Token (VVV) surged 24% after a Robinhood listing, demonstrating that exchange listings remain one of the most reliable short-term catalysts for token price action.
Bybit launched USD1 Hold & Earn with 45 million WLFI rewards, pushing the Trump-linked stablecoin further into exchange infrastructure. Gemini added USDT0 support across Ethereum, Solana, and Tron, expanding omni-chain stablecoin access. Polymarket’s ops wallet was drained of $700K, though user funds were unaffected.
Legal battles and fraud
Swan Bitcoin was sued for $970 million over an alleged Prime Trust tipoff, one of the largest crypto-related civil lawsuits filed this year. Unsealed court filings revealed Jane Street traders joked about their “edge” before executing a $192 million UST dump, adding a damaging human element to the Terra collapse litigation.
A $6.7 million crypto “wrench attack” hit a Kraken and Coinbase user, with stolen funds mixed on-chain. Physical crypto theft continues to escalate alongside digital exploits, a trend that underscores the security risks of self-custody at scale.
News you might have missed
- CJP Token rockets 400% on Pump.fun: The “Cockroach Janta Party” meme token surged 400% as its viral political satire captured Gen-Z attention on social media, another reminder that meme coin markets trade on attention cycles, not fundamentals.
- Crypto PAC launches 2026 midterm push: With Hester Peirce exiting the SEC, the crypto industry’s political action committee is gearing up for midterm elections with a focus on electing pro-crypto candidates to Congress.
- Monero DEX RetoSwap suspends trading: The Haveno-based decentralized exchange halted all trading after a $2.7 million exploit, highlighting that privacy-focused DEXs face the same security challenges as their transparent counterparts.
- Polymarket ops wallet drained $700K: An operational wallet compromise drained $700K from Polymarket, though the prediction market confirmed user funds were not affected.
- West Main Self Storage buys 0.129 BTC: The smallest Bitcoin treasury purchase to make headlines this year, proving that the corporate Bitcoin treasury playbook is being adopted at every scale.
Buzz of the Week
The buzz this week belongs to the cross-chain security crisis. Five separate exploit or fund-movement events across Verus, Echo, THORChain, RetoSwap, and LayerZero’s KelpDAO post-mortem hit within a seven-day window. That is not a coincidence. It is a pattern.
LayerZero’s public admission that a single-verifier configuration flaw enabled the $292 million KelpDAO exploit is the most important disclosure of the week, not because it was a surprise, but because it formally documented what the DeFi community has been warning about for years.
Cross-chain bridges are the most capital-dense and architecturally fragile components of the crypto stack. When LayerZero says a single compromised verifier turned into a $292 million exploit, it is effectively saying that the default security configuration of one of the most widely used cross-chain messaging protocols was not robust enough for the value it carried. Protocols that built on LayerZero had the option to use multi-verifier setups. KelpDAO did not. The cost was $292 million.
The Verus hack and partial recovery adds a different dimension. The attacker returned $8.5 million of the $11.58 million stolen after a negotiated deal with the protocol team. These “white hat recovery” negotiations are becoming a pattern in 2026, a strange middle ground between theft and bounty programs where attackers exploit, negotiate, keep a portion, and return the rest. It is not justice. It is not enforcement. It is damage control dressed up as resolution.
Meanwhile, the Bitcoin ETF exodus continued to deepen. The “sell the news” pattern following the CLARITY Act’s committee passage confirms something the market has been demonstrating all year: regulatory milestones are not bullish catalysts. They are exit liquidity events for traders who positioned ahead of them.
The CLARITY Act passing committee was supposed to be the greenlight for institutional capital. Instead, it was the signal for positioned capital to take profit. That distinction matters for how the market will trade the next legislative milestone.
Strategy’s 24,869 BTC purchase in the same week that ETFs bled hundreds of millions is the counterweight. Michael Saylor continues to absorb what the market sells, and the STRC preferred stock hitting $10.5 billion in market cap suggests the equity market is rewarding the strategy even when Bitcoin’s price action is messy. SpaceX’s IPO filing, which confirms 18,712 BTC on the balance sheet, adds another major corporate holder to the public record.
India’s week was the most regulatory-intensive the country has seen in the crypto space. Parliament revealing thousands of crores in crypto capital flight, Binance publicly stating there is no Indian law restricting withdrawals, and Gujarat uncovering a terror-linked dark web crypto network all within the same week creates an environment where aggressive regulation becomes politically viable.
CoinSwitch’s primetime marketing push landing in the middle of this regulatory firestorm is either perfectly timed courage or a bet that the worst of India’s crypto policy uncertainty is behind it.
What to expect for next week?
Next week has several clear watch points.
First, the CLARITY Act’s path from committee to the Senate floor remains the defining regulatory storyline for crypto in 2026. Watch for signals from the Senate Majority Leader on floor scheduling and whether the July 4 signing deadline remains realistic. Any delays or procedural holds will immediately shift market sentiment.
Second, the cross-chain security fallout is not over. LayerZero’s post-mortem will force other protocols built on its messaging layer to audit their verifier configurations, and any additional disclosures of single-verifier setups could trigger market reactions in the affected tokens. THORChain’s governance vote on loss coverage will also land, and how the community responds will set a precedent for decentralized incident management.
Third, India’s regulatory trajectory after the Parliament hearing and the terror-linked network disclosure will determine whether the country moves toward tighter controls or clearer frameworks. The Binance legal pushback adds a corporate dimension to a debate that has so far been driven by policymakers and law enforcement.
And keep an eye on the Bitcoin ETF flow data. If outflows continue for a third consecutive week, the narrative shifts from “sell the news” to something more structural. If inflows resume, the CLARITY Act thesis gets a second wind. The data will speak for itself.
Also Read: Blockchain Group Pushes Congress to Fix Crypto Tax Confusion
