BlackRock submitted May 8 paperwork to the SEC seeking to launch two tokenized money market funds, including a blockchain share class for the $6.1 billion BSTBL treasury fund and a new vehicle called BRSRV. The tokenized BSTBL class is slated for Ethereum, while BRSRV is designed for multi-chain deployment and targets short-term US government obligations.

Elastic Security Labs identified TCLBANKER, a Brazilian banking trojan that monitors 59 bank, fintech, and crypto domains and triggers remote control when targets are visited. The malware spreads by taking over victims’ WhatsApp Web sessions and Outlook accounts to message their contacts with phishing lures and the trojanized installer.

Aave moved from crisis containment to coordinated stabilization after the rsETH exploit, including liquidating eight attacker-linked positions on 6 May across Ethereum and Arbitrum. The protocol said recovered rsETH collateral was routed to the Recovery Guardian, while broader DAO actions targeted the release of about 30,766 ETH (nearly $71 million) for affected users. Even with liquidity stabilizing above $15 billion after TVL fell from nearly $26 billion to $14.2 billion, U.S. court restraints and governance steps could continue to weigh on confidence.

Consensys senior counsel Bill Hughes says passing the Digital Asset Market Clarity Act of 2025 (CLARITY) could help shift more crypto industry activity back to the United States by setting clearer rules. He cited over $2.4 trillion in US-dollar on-ramp volume from July 2024 to June 2025, while noting most trading still occurs on non-US exchanges, including Binance at over 38% of centralized volume in December 2025.

Ethereum's portion of global DeFi total value locked (TVL) fell from 63.5% in January 2025 to 53% by May 2026, even as it still holds about $45.50 billion in TVL. Over the same period, Solana (6.76%), BNB Chain (6.55%), Bitcoin (6.16%), Tron (6.01%), Base (5.31%), and Hyperliquid (1.82%) increased their shares, leaving non-Ethereum chains at roughly 47% combined. A May 9 post from Base creator Jesse Pollak highlighted the multichain ambition, writing, "bring every financial instrument onchain."

TrustedVolumes, an Ethereum-based liquidity provider, said a hacker stole about $5.9 million on Thursday by exploiting a weakness in its custom order-settlement setup. The funds reportedly included 1,291 WETH, around 16.9 WBTC, roughly 206,000 USDT, and just under 1.27 million USDC. Both 1inch and Blockaid stated the 1inch protocol was not compromised and that no 1inch user funds were impacted.

Iran entered the final night of February 2026 amid a near-total internet shutdown, yet the Iran-based crypto exchange Nobitex continued operating without interruption. Analysts estimate the platform routes billions in flows, including about $5 billion in observed volume between 2025 and March 2026, while Nobitex says it serves roughly 11 million users. The exchange has been tied by multiple investigations to sanctions-evasion mechanisms and high-risk counterparties, raising questions about why it has not been individually added to OFAC's SDN List.

LayerZero said Friday it mishandled communications in the three weeks after the April 18 Kelp DAO bridge exploit that drained about $292 million in rsETH. The company also acknowledged it should not have permitted its DVN to operate as a sole verifier for high-value transactions and announced security changes, including ending support for 1/1 DVN configurations.