Blockchain & Digital Assets Briefing — October 2, 2026
The SEC proposed a new route for adviser and fund crypto custody, while Ethereum launched a privacy-focused API-payment tool. Security updates for Lightning and cross-chain infrastructure underscore the gap between expanding adoption and operational risk.
Written by NPDev Labs with AI assistance and reviewed before publication. How we work.
U.S. policy · Proposal | SEC proposes tailored crypto custody rules for advisers and funds
The SEC proposed rules that could permit self-custody in specified circumstances and state trust companies as custodians; comments are due 60 days after Federal Register publication. These are not final rules. Why it matters: A clearer custody framework could expand regulated access, but firms cannot yet rely on the proposed permissions. Source:
Security · Reported | NEAR Intents pauses cross-chain services after reported $3.8 million exploit
NEAR Intents attributed the incident to an Omni deposit/withdrawal integration bug, said the contract-side flaw was patched, and pledged reimbursement; CoinDesk reported several network deposits and withdrawals remained restricted on October 1. The loss figure is reported, not an independent audit. Why it matters: Cross-chain workflows remain vulnerable to integration failures even when the underlying chain is not compromised; check service status before routing transfers. Source:
Bitcoin security · Advisory | Core Lightning operators urged to upgrade amid reports of attacks on older nodes
Core Lightning urged operators on 26.06.7 or earlier to upgrade; its September 22 release notes confirm 26.06.8 fixed responsibly reported vulnerabilities, while reports of active targeting surfaced October 2. The specific attack mechanism was not disclosed. Why it matters: Node operators should prioritize the released patch rather than wait for full exploit details; the release predates this new warning. Source:
Markets · Observed | Bitcoin holds near $87,000 after weaker U.S. jobs report
CoinDesk reported bitcoin already higher and roughly 2% up over 24 hours near $86,600 after the U.S. reported 29,000 September payroll additions versus 90,000 expected. The jobs surprise coincided with, but does not alone prove the cause of, the move. Why it matters: Rate expectations remain a plausible macro driver, but do not confuse post-report price action with a demonstrated causal link. Source:
Ethereum · Confirmed launch | Ethereum Foundation introduces zkAPI for private metered API payments
The Foundation says zkAPI is running on Ethereum mainnet: users deposit credits and use zero-knowledge proofs for bounded API access without linking billing identity to prompts. The API provider still sees requests; proxy mode also exposes traffic to the relay. Why it matters: It demonstrates an onchain payment rail for AI usage with narrower data linkage, not anonymity from every service involved. Source:
EU stablecoins · Advocacy | Circle presses EU to revise MiCA stablecoin reserve rules
Circle asked the European Commission to reconsider mandatory bank-deposit minimums and preserve cross-border co-issuance in the MiCA review, according to its summarized consultation response reported October 2. This is an issuer request, not a regulatory change. Why it matters: Reserve composition and cross-border issuance rules could reshape which stablecoin models can operate at scale in Europe. Source:
South Korea · Proposal | South Korea proposes detailed tokenized-securities rules for 2027
South Korea’s Financial Services Commission proposed capital, OTC-license and retail-purchase requirements for tokenized securities; public consultation runs to November 11, with a planned February 2027 effective date. No live rollout is implied. Why it matters: The draft puts concrete compliance thresholds around tokenized stocks and bonds, but final requirements may change after consultation. Source:
Bottom line
Regulatory pathways are becoming more specific, while the immediate operational story is security: proposals need consultation, and live infrastructure still needs patches and incident response.
As of
October 2, 2026 at 15:04 UTC