Blockchain & Digital Assets Briefing — October 28, 2026

Bitcoin reclaims $81,000 into the Fed decision as ETF inflows return

Bitcoin rose about 0.8% from midnight UTC to roughly $81,400, recovering after slipping below $80,000 on Tuesday, with ether up 0.9% near $2,330. The bid came from a broader risk-on move: South Korea's Kospi jumped 6.6% and SK Hynix rose about 11% after a sevenfold profit increase, while Nasdaq-100 futures added 0.5%. U.S. spot bitcoin ETFs took in $176 million on Tuesday, a second straight day of inflows, according to Farside Investors. The Federal Reserve announces its rate decision at 18:00 UTC, with CME FedWatch showing about a 92% probability of no change. Liquidations rose 38% to $183.6 million while open interest grew only 1.3%, a sign of turnover without much new positioning.

Why it matters: The move is macro beta, not a crypto-native catalyst. ETF flows have flipped back positive but remain momentum-driven, and a Fed hold is already priced — so the statement and press conference, not the decision itself, are the event. With U.S. midterms a week away, expect headline-driven volatility in a market that just showed how thin liquidity is below $80,000.

DTCC launches tokenization for U.S. stocks, ETFs and Treasuries on Canton and Besu

The Depository Trust & Clearing Corporation went live Wednesday with a tokenization service on the Canton Network and its own private Besu blockchain. It initially covers select Russell 1000 large-cap stocks, ETFs and U.S. Treasury bills, notes and bonds; DTCC's product page says 34 securities are available to tokenize at launch, backed one-for-one by securities held at its Depository Trust Company subsidiary. Tokens carry the same CUSIP, legal rights and protections as the underlying shares and can move 24/7 between DTC-registered wallets. Twenty firms have signed access agreements, including JPMorgan, Citi, Morgan Stanley, Bank of America and UBS. DTCC's roadmap adds Stellar and Circle's Arc chain next year, plus corporate actions and digital-cash settlement.

Why it matters: This is the difference between a pilot and plumbing. Because DTC sits at the center of U.S. clearing and custody — with roughly $30 trillion in assets under custody on its own figures — tokenized shares now inherit existing ownership law instead of asking investors to trust a new claim structure. That is the opposite approach to crypto-native venues fighting issuers over consent, and it sets the compliance baseline rivals will be measured against.

Sources: ; ;

Bithumb breach and an Amplitude incident expose the vendor perimeter at two major exchanges

Bithumb, South Korea's second-largest crypto exchange, said an outsider broke into the internal mobile system employees use for work and messaging and stole personal information. No crypto funds were reported lost; the exchange says the compromised system is separate from its trading platform and that it is still analyzing whether member data was involved, after reporting the intrusion to the Korea Internet & Security Agency and the Personal Information Protection Commission. The Financial Supervisory Service is assessing three financial firms: Daishin Securities reported personal and credit data for 38,490 customers leaked, and Mirae Asset Global Investments said it blocked abnormal access. Separately, Coinbase said a security incident at analytics vendor Amplitude affected contact data for a "small subset" of customers, that it found no evidence of unauthorized access to its own systems, and that funds were not affected.

Why it matters: Neither incident moved customer assets, but both show where the attacks land: employee tooling and third-party SaaS, not the exchange wallet. Contact data is the raw material for phishing and social-engineering campaigns that later target withdrawals, and South Korean regulators now count 16 financial firms hit this month. For Bithumb it is also a second control failure this year, after a February crediting error worth roughly $40 billion at the time.

Sources: ;

Moody's assigns A2 and P-1 deposit ratings to Ripple's RLUSD

Moody's Ratings assigned an A2 long-term and P-1 short-term deposit rating to Ripple USD, the stablecoin issued by Ripple subsidiary Standard Custody & Trust Company. The agency cited reserves held mainly in Treasury bills, other short-term U.S. government assets and cash — most of it with custodian BNY — with a target of 103% coverage of tokens in circulation, and noted that eligible institutional holders can redeem at par within two business days. It also flagged gaps: Standard Custody is not a bankruptcy-remote entity, and RLUSD holders do not currently have a direct ownership interest in the reserves, a point the GENIUS Act stablecoin law due to take effect in 2027 is expected to address. The rating follows final OCC approval for Ripple's national trust bank.

Why it matters: Stablecoin risk is being converted into language that treasury and collateral desks already use. An investment-grade deposit rating makes RLUSD easier to justify as collateral or settlement balances, but the same report spells out the structural caveats — no bankruptcy remoteness, no direct claim on reserves — that a rating does not fix. Expect issuers to compete on ratings as much as on reserve yields from here.

Google Cloud previews a dedicated MPC custody service, with Alphabet securing its own ETH and SOL

Google's Multi-Party Compute service is in private preview, with several major financial institutions testing it and parent company Alphabet using it to secure its own digital assets on Ethereum and Solana. The product bundles MPC-based signing, transaction policies and key recovery into a purpose-built service, rather than requiring customers to assemble those pieces from Cloud KMS and Cloud HSM. Google did not name the testing institutions or the assets Alphabet holds, and says commercial availability is planned for early 2027 with pricing undisclosed. Rich Widmann, Google Cloud's director of digital assets strategy, framed it around regulated institutions needing "scalable, proven infrastructure" as tokenization scales.

Why it matters: Key management is the bottleneck for institutions that want to sign blockchain transactions without building a cryptography team. Chainalysis attributes 43.8% of crypto stolen in 2024 to compromised private keys, and DeFiLlama counts about $16.7 billion of cumulative hack losses with roughly 40% tied to key compromise — so a hyperscaler offering split-key signing addresses a real gap. It also concentrates a new dependency: policy engines and recovery workflows would sit with one vendor.

Sources: ;

Datavault AI says it cannot withdraw bitcoin it counted as an asset, and will restate

Datavault AI disclosed in an 8-K that it has been unable to withdraw bitcoin from the exchange Biconomy since June, and that it will restate results. Under a September 2025 agreement, Scilex Holding was to buy $150 million of Datavault shares and warrants using bitcoin; 1,309.04 BTC was credited to Datavault's Biconomy account through off-chain transfers rather than onchain transactions, and Datavault later sold 491.4 BTC back to Scilex for about $40.5 million in cash. Datavault now says the bitcoin should have been recorded as an amount owed by Scilex, cutting reported assets by $92.2 million at the end of 2025 and $49 million as of June 2026. The stock closed at $0.067, down 49.55%, on about 244 million shares traded.

Why it matters: Digital-asset treasury strategies depend on the assets being real, verifiable and liquid. Here the BTC existed only as an exchange balance credited off-chain, so a failed withdrawal turned a balance-sheet asset into a receivable from a counterparty. Auditors and index providers are already scrutinizing treasury companies; this is the test case for why proof of onchain control, not an exchange statement, is the only durable evidence.

Sources: ;

Twenty-six issuers now object to the OKX–ICE tokenized stock venue

Intel, Oracle, IBM and IonQ became the latest issuers to object to trading of their shares on the planned OKXICE TSV venue, according to the venue's Oct. 26 public notice, bringing the total to 26 from nine on Oct. 15. Technology names dominate — Microsoft, Alphabet, Broadcom, Qualcomm, Arm, Cisco and now Intel and Oracle — alongside Goldman Sachs and Wells Fargo. The platform is a 50-50 joint venture between NYSE owner Intercontinental Exchange and OKX's U.S. holding company, and plans 24/7 trading of tokenized U.S. stocks through permissioned Uniswap v4 pools on OKX's XLayer chain, paired with stablecoins, under the SEC's innovation exemption. The notices do not explain the objections or their legal effect, and flag that SIPC protection for tokens held in self-custody is uncertain if the tokenizer's broker-dealer failed.

Why it matters: Tokenized equities have a consent problem that technology cannot settle. Each token is a claim on a share held by a third-party tokenizer through a broker-dealer, so issuer objections, and the unresolved question of whether self-custodied tokens count as customer property, go to the core of investor protection. Compare DTCC's model, where the token is issued against the depository's own custody: the fight over the next two quarters is over which structure regulators bless.

Sources: ;

Itaú becomes Brazil's first bank to formalize crypto brokerage under the new rules

Itaú Unibanco, Brazil's largest private bank, notified the central bank on Tuesday of its crypto trading and custody operations, ahead of an Oct. 30 compliance deadline — the first bank in the country to do so. Itaú offers 15 cryptoassets including bitcoin, ether and USDC, and has run the service since December 2023. Under Resolution 520, which took effect Feb. 2, banks already authorized by the central bank notify the regulator with an independent technical certification, while dedicated virtual-asset service providers must apply for authorization; firms that miss the deadline must stop crypto services within 30 days. Mercado Bitcoin has said it is seeking authorization, and the central bank has pushed to Nov. 6 the date from which authorized institutions may no longer transact with unauthorized providers.

Why it matters: Brazil is converting a large retail crypto market into a licensed banking channel, and the deadline is doing the work. Incumbents can notify while crypto-native firms must apply, which tilts the market toward banks — at a moment when post-election currency volatility has pushed local companies toward dollar stablecoins. Watch the Nov. 6 cutoff: it decides which exchanges Brazilian banks can still connect to.

Bottom line

Three threads. First, tokenization stopped being a pilot: DTCC is live with 34 securities and 20 banks, Moody's gave a dollar stablecoin investment-grade deposit ratings, and Google is productizing key management for institutions. Second, trust is still the weak link — Bithumb's employee system and Coinbase's analytics vendor were the entry points, and Datavault AI showed that bitcoin counted as an asset but held as an exchange IOU can evaporate into a restatement. Third, the policy calendar is crowded: Brazil's Oct. 30 notification deadline and Nov. 6 counterparty cutoff, a growing issuer revolt against the OKX–ICE venue, and today's Fed decision at 18:00 UTC with midterms a week out. The open question for the rest of the year is structural, not directional: whether tokenized assets are issued inside the depository, as DTCC now does, or around it, as the crypto-native venues propose.

As of

October 28, 2026, 15:10 UTC