Tokenized shares: two models, the same rights?
Two tokenized shares with voting rights launched on the same day in the US: Ondo makes you an indirect holder via Broadridge; Securitize enrolls you in its registry.
Robinhood Chain: What is Real and What is Marketing in its L2
Robinhood launched its L2 on Arbitrum: 13,900 smart contracts in its first days but ~$95 million deposited. What is real and what is marketing.
World Liberty and the OCC: The Knot Blocking the CLARITY Act
The U.S. banking regulator (OCC) is one step away from licensing World Liberty Financial, owned by the Trump family, while the Senate fails to vote on the crypto law.
Aptos: The $3,000 Flaw That Could Have Exposed 70 Billion
Ethical hackers with a $3,000 server found a flaw in the Aptos Move VM that could have exposed 70 billion. Nothing was stolen: this is how the disclosure happened.
How the funding rate works in a perp DEX
The funding rate anchors the perpetual to the spot price, but it is calculated differently on each platform and hides basis trade risks that guides omit.
Prompt injection in DeFi: the unpatchable flaw confirmed by OWASP
The OWASP report from Jun-11-2026 reclassified prompt injection from a threat to a fact: an unpatchable design flaw, and in DeFi, signatures cannot be undone.
Strategy's Trilemma: Saylor sells BTC to save STRC
Faced with three incompatible promises, Strategy sold 3,588 BTC for 216 million to pay dividends and shield STRC: sacrificing the creed, not the credit.
SpaceX on Hyperliquid: Did it nail the price before the IPO?
SpaceX went public at $135 on June 12, but on Hyperliquid it had been trading at $172 for weeks — and the on-chain market was right. Post-mortem of the convergence.
Gravity Bridge: 5.4 Million Stolen Without Stealing the Key
The 5.4 million theft from Gravity Bridge was not a leaked key: it was the debut of registry poisoning in cross-chain bridges.
Polymarket: the contract held, the web did not
On June 25, 3.1 million was stolen from Polymarket through a frontend provider, without touching the contract — just as the CFTC debuts its first federal framework.
AI Agent Permissions in DeFi: EIP-7702, x402, and Blast Radius
An AI agent that signs can empty your wallet with a single malicious prompt: permission patterns, what changed with EIP-7702, and how x402 reduces risk.
msUSD: The Reserve Verifier as a Single Point of Failure
On June 20, 2026, msUSD lost 88% in a single day without touching reserves: it was enough for Accountable to turn off its feed, the sector's new single point of failure.