AGP Executive Report

Crypto Scam Warnings: Northern Ireland police say a woman in her 70s in Newry lost £250,000 after “master manipulators” pushed her into a fake crypto scheme, then malware let fraudsters take more money. Security & Fraud Tactics: A separate report highlights how AI voice cloning scams can mimic loved ones to demand crypto payments fast, underscoring why families should verify requests before sending funds. Regulation & Retirement Risk: U.S. AG Raoul leads a coalition of states opposing a Trump retirement rule that could steer millions into volatile alternatives like crypto, arguing it weakens protections for workers and retirees. Market & Corporate Moves: Bitcoin slipped below key levels as Strategy sold 32 BTC for about $2.5M, while Strive announced a $4.2B fundraising expansion to buy more bitcoin. Policy Fight in the Spotlight: JPMorgan’s Jamie Dimon again attacked the CLARITY Act, saying it lacks protections and could create deposit-risk issues for banks. Tech/Infrastructure: Zcash shares fell near $572 after an emergency patch (Zebra 4.5.1) flagged consensus fragility, reminding traders that network fixes can move prices quickly. Exchange Access: Coinbase expanded India access with direct INR deposits and withdrawals via IMPS, aiming to speed rails between banks and crypto markets. Legal Watch: The U.S. Supreme Court asked the Trump administration to weigh in on a Robinhood IPO dispute tied to claims involving meme stocks and crypto.

Coinbase India Expansion: Coinbase launched direct INR deposits and withdrawals in India via IMPS, cutting out P2P workarounds and enabling spot trading plus perpetual futures with local INR order books. Crypto Scams & Enforcement: A Malaysian IT consultant lost nearly RM1.5M after a Facebook-to-WhatsApp USDT scheme; Nepal police arrested a man trading illegal crypto using Binance and Bybit; and Thailand police blocked hundreds of thousands of gambling URLs ahead of the World Cup. DeFi Security Incident: Gravity Bridge halted after a reported $5.4M exploit, with teams urging validators to stop operations while funds move. Regulation Watch: The U.S. stablecoin debate continues as Fed governor Christopher Waller said dollar-backed stablecoins could spread U.S. monetary influence, while others argue tokenized deposits may replace them. Tokenization Momentum: Asset managers are accelerating tokenization projects, and DTCC’s planned Stellar integration points to more onchain securities infrastructure. Market Flows: U.S. Bitcoin spot ETFs saw $1.42B weekly outflows as BTC struggles amid macro jitters.

Cross-Chain Security: Cosmos-linked Gravity Bridge was halted after a reported $5.4M exploit tied to a signing key compromise, with funds including USDC and WETH reportedly laundered via ChangeNOW and Binance. Regulation Pushback (US): California AG Rob Bonta joined a 23-state coalition opposing a Trump Labor Department proposal that could steer retirement money into riskier assets like crypto. Crypto Fraud Crackdown (Argentina): Authorities arrested 24 in “Operation Fake Coins,” seizing 8M USDT after WhatsApp-based fake investment platforms allegedly caused about ARS 3B in losses. Market/Identity Use Case: Worldcoin’s WLD jumped on World ID’s human-only ticket access partnership with Thirty Seconds to Mars, aiming to curb bot ticket snatching. Vietnam Lending Reform: Vietnam’s Finance Ministry proposed letting SMEs pledge digital assets, virtual assets, and IP as collateral, shifting banks toward cash-flow and credit-rating based lending. Hardware Wallet Security: UKEY says it will launch a hardware-driven wallet security ecosystem in Q3 2026, focusing on private-key isolation and seed backup/recovery. EU Sanctions Watch: The EU is weighing a temporary freeze of its Russian oil price cap as Middle East tensions push prices higher.

US-Iran Tensions: Trump postponed a final call on an Iran proposal after a Situation Room meeting, keeping talks on Strait of Hormuz access and nuclear terms alive. Crypto Market Mood: Bitcoin bounced off a 7-week low as ETF flows and geopolitics shifted sentiment, though traders flagged pressure from outflows. Sanctions & Seizures: Treasury Secretary Scott Bessent said the US seized nearly $1B in Iranian crypto under “Operation Economic Fury,” while Tether previously froze $344M tied to IRGC-linked addresses. Regulation Fight: The CLARITY Act cleared a Senate Banking hurdle, with debate heating up over whether stablecoin yield should face bank-style oversight. DeFi Security: Gravity Bridge was hit again, losing about $5.4M in a cross-chain exploit, while DxSale saw a $7.3M drain tied to older pool contracts. Fraud Crackdown: The SEC charged Nathan Fuller with a $12.3M crypto fraud using fake AI trading bots. Tech + Privacy: Circle froze ~$12.6M in Zama’s cUSDC contract after a court order, highlighting how disputes can trap pooled funds. XRP Utility: XRPL transactions jumped 35% in Q1 2026, with XRP utility rising alongside tokenized RWA activity.

Crypto Perps Breakthrough: The CFTC approved Kalshi’s first regulated U.S. Bitcoin perpetual contract and granted Coinbase no-action relief, pushing crypto derivatives closer to mainstream 24/7 trading. Stablecoin Clash: JPMorgan’s Jamie Dimon escalated his fight with Coinbase over the CLARITY Act, warning banks won’t accept stablecoin deposit-style yield without protections. Regulatory Deadline Warning: Sen. Cynthia Lummis says the “window” to pass U.S. crypto rules could close until 2030 if Congress stalls, leaving developers exposed. Texas Bitcoin Pivot: Texas named a Strategic Bitcoin Reserve advisory committee as it moves from ETF exposure toward direct BTC custody. Security & Scams: A Latvian-Ukrainian probe shut down a Kharkiv call-center scam that targeted Europeans with fake crypto “recovery” offers. Fraud Sentencing: A Texas man was sentenced to 70 months for wire fraud schemes that laundered proceeds via cryptocurrency. Crypto Market Context: XRP Ledger RWA growth lifted XRPL’s RWA market cap to $2.25B, while broader market coverage flagged ongoing geopolitical pressure and ETF outflows.

Regulated Crypto Derivatives: The CFTC approved Kalshi’s first U.S. bitcoin perpetual futures (BTCPERP) and issued guidance that opens a clearer onshore path for crypto perps, while Coinbase also received a no-action letter for certain perp/option structures. Policy Oversight Debate: A Brookings fellow warned the Clarity Act could expand regulation without real oversight capacity at the CFTC, raising the risk of “regulation without meaningful oversight.” Crypto Security Threats: Socket flagged a supply-chain “TrapDoor” attack with dozens of malicious packages across npm, PyPI, and Crates.io aimed at developers’ wallet keys and cloud credentials. Scam Surge / Cyber Fraud: The FBI’s 2025 Internet Crime report put crypto fraud losses at $11.36B in the U.S., while India’s cyber scams keep climbing, with millions of complaints and huge underreporting. Crypto Crime Case: A Russian hacker allegedly used a jailbroken Gemini to run a five-year fraud/credential theft campaign tied to a 17,000+ member MAGA Telegram channel and an empty crypto wallet. Texas Bitcoin Moves: Texas named members for a Strategic Bitcoin Reserve Advisory Committee as the state continues shifting toward direct BTC custody.

Crypto Crime & Scams: Somerset voters will weigh a $33M budget that includes a by-law to ban crypto ATMs, while local sheriff offices warn about jury-duty scams that push victims toward Bitcoin kiosks. Regulation Push (US): Treasury Secretary Scott Bessent urged Congress to move the CLARITY Act, pitching it as “bring it on shore” and reiterating the administration won’t back a CBDC. SEC/CFTC Courtroom: The SEC says an AI crypto trading bot was a $12M Ponzi scheme; meanwhile the CFTC is trying to vacate a $5M Gemini penalty. Prediction Markets Clash: Kalshi sued Minnesota to block a prediction-market ban, escalating a fight over who regulates event contracts. Insider Trading Case: US prosecutors charged a Google engineer with using confidential search data to profit about $1.2M on Polymarket. Market/Network Stress: Sui suffered another network outage that halted block production, and crypto sentiment is rattled by ongoing geopolitical jitters.

Aviation Intelligence Meets Crypto-Adjacent Tech: Wingbits launched wingbits.ai, letting users deploy AI agents that monitor live and historical flight data in plain language and trigger alerts for things like military entries and GPS interference. Litecoin Payments Upgrade: Nexus Wallet added native Litecoin gift card purchasing plus privacy features like Tor and MWEB, aiming to make everyday spending easier. Prediction Market Insider Trading Crackdown: US prosecutors charged Google engineer Michele Spagnuolo with using confidential internal search data to win about $1.2M on Polymarket bets. Cyber Enforcement Hit: Dutch police seized 800 servers tied to a pro-Russian cyberattack network, arresting hosting operators in a sanctions-linked crackdown. Crypto Crime & Scams: UK sanctions targeted crypto and illicit finance networks in Kyrgyzstan/Georgia tied to Russia’s war-evasion; meanwhile, Florida residents were warned about jury-duty impersonation scams demanding crypto payments. Market Pressure: Bitcoin slid below $73K as Iran-US tensions sparked risk-off trading and heavy ETF outflows. Korea Tightens Exchange Controls: South Korea’s DAXA ordered exchanges to invalidate suspicious shared API keys amid concerns over automated trading abuse. Institutional Push: Samsung affiliates agreed to buy a combined 4% stake in Dunamu (Upbit operator), signaling deeper corporate involvement in Korean digital assets.

Software Security: CrowdStrike, Google and Shadowserver disrupted the Glassworm botnet by cutting off its command-and-control access, after months of developer-targeted supply-chain attacks aimed at stealing crypto wallets and credentials. Cyber & Fraud Warnings: India’s DSCI is pushing orgs to stress-test against Anthropic’s “Mythos” security risk, while local law enforcement flagged rising crypto scams (Washoe County) and AI-generated fraud ads targeting older investors (Ireland). Regulation & Markets: Trump doubled down on making the U.S. the “crypto capital,” backing CFTC control of prediction markets and a “future-proof” market structure as the CLARITY Act momentum cools; meanwhile, XRP traders eye $20 but price action stays pressured. Institutional Moves: Samsung affiliates buy a 4% stake in Dunamu to expand digital-asset and tokenized securities plans; Orca launches permissioned pools for regulated tokenized real-world assets. Crime & Courts: Singapore charged former Hodlnaut CEO Zhu Juntao over alleged fraud tied to the Terra collapse; prosecutors charged a Google engineer with insider-style Polymarket trading worth about $1.2M. Infrastructure Politics: Lockhart, Texas considers rules for future data centers and crypto mining, while Warren, Michigan proposes a permanent data-center ban over water and utility concerns.

Philippines Regulatory Sandbox: Binance is officially back in the Philippines via the SEC’s StratBox, partnering with BlockShoals to test a “controlled and supervised” platform rollout under local oversight. Market Pressure: Bitcoin is trading under strain as geopolitical risk and weaker institutional inflows collide with ETF outflows, keeping volatility elevated. DeFi Security Alarm: OpenZeppelin’s Manuel Aráoz says AI coding agents make DeFi “unsafe,” warning defenders can’t keep up with machine-speed vulnerability hunting as hacks top $1.1B in a year. Crypto Payments Push: SoFi launches its dollar-backed stablecoin, SoFiUSD, to nearly 15M users on Ethereum and Solana, while Mastercard secures a New York BitLicense to expand regulated crypto payments. UK Sanctions on Crypto Networks: The UK targets Russia-linked crypto infrastructure and exchanges tied to sanctions evasion, including Huobi Global entities. Scam Crackdown: Cambodia sentences six Chinese nationals to life over a scam-linked killing of a South Korean student, highlighting the region’s forced “scam center” pipeline. X-FAB Meme-Like Surge: A Belgian chip stock jumps after a viral X post, a reminder that retail hype cycles still move markets fast.

Prediction Markets vs. States: Trump doubled down on CFTC “exclusive authority,” calling for “rules of the road” and blasting governors and AGs challenging prediction platforms—setting up a fresh federal showdown as Minnesota and others push back. Crypto Security & Scams: UK intelligence chief GCHQ warned Russia is relentlessly targeting critical infrastructure and public trust, while Uniswap users were hit again by fake sites draining at least $400K and a broader scam crackdown swept thousands of suspects. Sanctions Pressure: The UK announced new sanctions aimed at crypto exchanges and Russia-linked “A7” networks used to evade restrictions. Illicit Finance at Ground Level: Venezuela’s security forces dismantled an illegal mining center in Bolivar that was spiking local power demand, and the Philippines arrested 63 suspects in a call-center-style online investment scam hub. Market/Industry Signals: Data-center expansion headlines kept rolling (Louisiana’s $3.6B AI campus), while DMG Blockchain reported weaker Q2 results and Quantinuum filed for a major US IPO.

Crypto Crime Escalates: Scammers are draining wallets by buying Google Ads for “Uniswap” and pushing near-clone phishing sites to the top of search, with losses reported at $400K+ and funds swapped out quickly after approvals. Regulatory Pressure: Spain ordered ISP blocks on prediction-market giants Polymarket and Kalshi for missing licensing and consumer safeguards, with access expected to be restricted for months. Compliance Tooling: Sumsub launched a Travel Rule self-service setup aimed at getting mid-size exchanges live faster with less engineering. AI Security Cross-Over: Anthropic’s Project Glasswing says its Mythos-class model has helped uncover 10,000+ high/critical software flaws, while also admitting safeguards still need work. Sanctions Watch: Britain hit Russia-linked crypto infrastructure with new sanctions targeting the A7 network and related payment routes. Local Fallout: Ukraine’s Odesa-region mayor was detained over alleged bribery tied to a power-plant project, with investigators claiming the cash was converted into crypto.

Regulation Watch (UK): The FCA is approving more cryptoasset firms—up to 13 approvals in the year to April 2026, with rejections collapsing—signaling a softer stance even as application counts drop. Payments Shock (US): Trump’s fintech order asks the Fed to consider giving crypto firms direct access to payment rails, a potential game-changer for XRP-style payment networks. Prediction Markets Clampdown (Indonesia): Indonesia blocked Polymarket, calling it online gambling in disguise, after bets tied to President Prabowo’s early exit. DeFi Recovery: Aave and Kelp DAO say rsETH operations are fully restored after the April $292M hack fallout. Security Threats: Lazarus upgraded a fileless, memory-only RemotePE RAT targeting crypto and fintech, while supply-chain “TrapDoor” malware continues to spread via developer package ecosystems. Market Mood: Arkham says it linked 53% of Zcash transactions to identifiable entities, reigniting privacy debate. Crypto Crime & Scams: Bitcoin Depot filed for Chapter 11, and regulators keep warning that scams are evolving fast.

DeFi Breach: Gnosis Safe users on Base and Ethereum just lost about $3.2M after attackers exploited a “SquidRouterModule” smart-contract mix-up, draining 86 safes in under two hours and swapping proceeds into DAI. Cybercrime Escalation: Security teams also flagged a fresh wave of developer-targeting malware—TrapDoor—pushing malicious packages through npm, PyPI, and Crates to steal credentials and wallet data. Regulation & Taxes: In Kenya, the crypto industry is pushing back hard on Finance Bill 2026 levies, warning new VAT and withholding taxes could slow digital payments growth. Market Mood: Risk-on sentiment lifted stocks to record highs as oil slid on renewed US-Iran Strait of Hormuz deal chatter, with crypto bouncing off Friday’s dip. Policy Tech Race: India’s RBI launched Q-SAFE to map quantum risks in banking and plan quantum-safe crypto upgrades. Politics Meets Crypto: Nigel Farage’s Russian hack claim is being called “unsubstantiated” by a former NCSC chief, keeping the controversy in the spotlight.

Crypto Market & Regulation: The SEC has reportedly paused its plan to let tokenized asset-linked stocks trade on crypto platforms, with concerns centered on third-party tokens that could trade without the public company’s consent—just as BlackRock CEO Larry Fink renewed pressure for faster approval of tokenized bonds and stocks. Prediction Markets Under Fire: A New York Times report says the Trump administration is “mowing down” oversight at the CFTC, while Polymarket access was blocked in Indonesia after a bet tied to Prabowo’s presidency circulated—odds on a Trump-Iran ceasefire extension on Polymarket plunged from 86% to 32% after Trump’s latest post. Ethereum Watch: Vitalik Buterin said the Ethereum Foundation will become smaller and more focused on decentralization, privacy, and censorship resistance amid weak ETH sentiment. Fraud & Crime: UK fraud losses hit £5.5bn, with a £4.8bn crypto money-laundering scheme flagged; meanwhile two men were fined $440k in New Zealand for using crypto-linked tactics to bypass overseas farmland rules.

Stablecoin Shock: StablR’s EURR and USDR both depegged on May 24 after a suspected private-key compromise let an attacker seize minting control and extract about $2.8M, pushing tokens off their pegs. Regulatory Pressure: The FDIC proposed tighter AML rules for certain stablecoin issuers, moving them closer to bank-style compliance. Market Access: Grayscale filed to convert its Zcash trust into a spot privacy-coin ETF (ZCSH), aiming to be the first US spot ETF for a privacy coin. US Policy Fight: A NYT report says CFTC officials who raised concerns about politically connected prediction-market firms were suspended and pushed out—while the Trump administration escalates state-level prediction market crackdowns. Geopolitics Meets Crypto: Bahrain sentenced nine to life for alleged IRGC-linked espionage and said crypto transactions helped finance the plot. Security Watch: Fake CAPTCHA pages are being used to trick users into installing malware.