There are weeks when crypto regulation moves gradually. This was not such a week.
The Hellenic Capital Market Commission reportedly rejected Binary Greece's MiCA application. Binance, after deploying 1,500 compliance staff globally, spending around $200 million annually on compliance, and waiting eighteen months in an Athens queue, now has six days to find a jurisdiction willing to say yes before the alternative becomes considerably less administrative.
France is the live option. The AMF has reportedly not been consulted by Binance officially. According to The Big Whale, everything is ready anyway. That sentence contains a lot of Europe.
Elsewhere, JPMorgan moved commercial bank deposits onto a public Ethereum Layer 2. Fidelity launched a money market fund built specifically to hold stablecoin reserves. Estonia, once the great VASP factory of Europe, has zero MiCA-compliant operators nine days before July 1. And jaredfromsubway.eth, the MEV bot responsible for an estimated 70% of Ethereum sandwich attacks over the past year, was drained for $7.5 million and responded by offering the attacker a 50% discount on the stolen funds.
The attacker considered this proposal, in the same way a cat considers tax policy, and moved 2,000 ETH through Tornado Cash.
So yes. A normal week.
The rest of the world kept building. Here is what happened.
Greece Said No to Binance. The ECB Reportedly Had Thoughts.
Reports from June 16 and 17, confirmed by The Big Whale and echoed across financial media, indicate that the Hellenic Capital Market Commission was prepared to reject Binary Greece's MiCA application.
The stated motive, unconfirmed by either the ECB or the HCMC, is that Binance's dominant stablecoin liquidity position in Europe could interfere with the digital euro rollout. The ECB has been publicly opposed to large private euro stablecoins since approximately the moment it realised they might work. Whether that concern reached Athens through formal channels or through the traditional European method of atmospheric pressure is not documented. The outcome is the same.
Binance's public position is that the HCMC found the application compliant during review and that an ESMA-level decision was expected by June 30. This is not impossible. A regulator can find an application compliant and still decline to authorize it. That is not a contradiction. It is just not the outcome that 1,500 compliance staff and $200 million in annual spend were supposed to produce.
MiCA runs on passporting. One authorization anywhere in the EU opens the whole market. Binance filed in Greece. The HCMC is not among the top licensing jurisdictions in Europe by volume. That looked like one calculation two years ago. It looks like another calculation at T-minus six days.
France is now the live option, with Treasury and Tracfin reportedly supporting Paris supervision on the logic that visible flows are better than absent ones. Both France and the six remaining days have fixed positions on this.
Translation: the world's largest exchange chose Athens, Athens said no, and the entire European market access question is now being resolved in the week it was supposed to already be resolved.
A wonderful system, if one enjoys suspense.
The Nordic Shakeout: TÝR, K33 and Firi Made It. Estonia Did Not.
The Kaupr Weekly podcast on June 21 mapped the Nordic and Baltic compliance landscape at T-minus nine. TÝR Markets and Firi received full CASP authorizations from Finanstilsynet with EEA passporting. K33 Markets AS was authorized by Finanstilsynet on June 16.
These firms filed early, built the infrastructure, absorbed the capital requirements, and have the documents. This is the part of compliance people refer to as "the boring work". It is also the part that decides whether you still have a business.
Kriptomat, after eight years in operation and fully solvent at the time of decision, chose voluntary wind-down over the cost of compliance. Bitmynt shut entirely.
Estonia is the more symbolic case. The country that built the licensing framework hundreds of crypto entities used as their European base for most of the last decade now has zero fully MiCA-compliant operators with nine days remaining. Finland has five. Estonia has none.
The VASP era started with Estonia issuing licences at industrial scale. The MiCA era begins with the same register looking like someone turned the lights off and forgot the building was still occupied.
The compliance teams at the surviving firms did not win because they had the largest headcount. They won because they treated MiCA as infrastructure rather than overhead.
ESMA's 2025 Annual Report, published June 17, made this explicit in a way most coverage missed. Chair Verena Ross described a regulatory posture that now prunes obligations while enforcing them. That matters. The firms that can distinguish between a rule that protects clients and a rule that produces ceremonial paperwork are the firms ESMA is telling you it wants.
Scaling headcount to absorb every obligation indiscriminately is the strategy that produced Kriptomat's wind-down notice rather than its licence.
You know which category you are in. And if you do not, your regulator may shortly assist.
JPMorgan Moved Bank Money to a Public Blockchain. Fidelity Filed to Charge a Fee on It.
JPMorgan's Kinexys division deployed JPMD, its USD commercial bank deposit token, onto Base, Coinbase's public Ethereum Layer 2. Mastercard, B2C2, and Coinbase executed live issuance, redemption, and peer-to-peer transfers through standard EVM wallets.
JPMD is not a stablecoin in the USDC sense. It is a direct claim against commercial bank deposits. That means it inherits deposit insurance, the fractional reserve structure, and the ability to bear interest — all features Treasury-backed stablecoins cannot access.
In parallel, JPMorgan and BNY Mellon settled a $250 million tokenized intraday repo on Canton Network using atomic settlement across private sub-ledgers, without cross-chain bridges.
Three years ago, JPMorgan's CEO called Bitcoin rat poison. Last Tuesday, JPMorgan's blockchain division moved commercial bank money onto a network descended from the system Satoshi wrote into existence. Both statements remain on the record. This is what institutional adoption looks like when it has a legal department.
Goldman Sachs and Bank of America filed with the SEC on June 18 for qualified custodian status for bank-issued stablecoins and tokenized deposits, citing GENIUS Act frameworks.
Fidelity launched the Fidelity Reserves Digital Fund, FYMXX, on June 15. It is a Rule 2a-7 government money market fund restricted to holding stablecoin issuer reserves, with a $1 million institutional minimum. State Street followed on June 16 with SSCXX and SSRXX, seeded with $121 million by Anchorage Digital. BlackRock, Goldman and BNY Mellon had already filed equivalent products before the week began.
The stablecoin industry was built to remove the asset manager sitting between capital and yield. Asset managers have now filed to manage the reserves that make stablecoins work, at 0.18% on $315 billion.
The 0.18% is not the number that matters. The word "reserves" is.
The old world has found the drawer where the new world keeps the money.
Meanwhile, SEB integrated the Qivalis MiCA-compliant euro stablecoin into its Baltic corporate banking app on June 17. First major Nordic bank live with a regulated stablecoin for B2B cross-border settlement. Instant cash leg. On-balance-sheet deposits. Operational six days before the transitional period closes.
SEB did not issue a press release saying it was exploring tokenization. It issued a product.
Cruel, really, to the deck-building community.
The SEC Issued Token Guidance. The Trump Family Stablecoin Funded UFC Bonuses at the White House the Same Week.
The SEC published its first formal guidance on crypto token classification on June 15, nearly half a year in the making under Chair Paul Atkins. It covers expectation-of-profit tests, central-group control, and market-support activity, with examples of tokens that fall under securities law and one that does not.
The SEC simultaneously issued its first-ever no-action letter authorizing a startup token sale. Digital assets also entered the SEC's Strategic Plan 2026–2030 for the first time in the agency's history. This is the sort of sentence that sounds procedural until you remember that procedures are where regulators hide revolutions.
The CLARITY Act resumed Senate negotiations around June 22, with more than 200 crypto companies having signed a letter urging a floor vote. The bill delineates SEC and CFTC jurisdiction, creates registration pathways, and divides digital assets into three categories. Prediction markets price passage above 80% by July.
World Liberty Financial, the Trump family's stablecoin venture, projected to generate $150 million in 2026, funded UFC fighter bonuses at a White House event this week. The President's family runs a stablecoin. The President's administration is writing stablecoin legislation. The President's Treasury Secretary has publicly urged its passage. The arrangement is disclosed in the appropriate filings and is proceeding on schedule.
Democracy, but with yield-bearing branding.
FinCEN, the OCC, the FDIC, the Federal Reserve, and the NCUA jointly issued a Notice of Proposed Rulemaking on June 18 implementing GENIUS Act Customer Identification Program requirements. Bank-grade identity verification at fiat on- and off-ramps. The rule explicitly exempts automated smart contract routing from CIP obligations.
That is not a footnote. For agentic payment infrastructure, it is the floor plan.
The compliance perimeter sits at the chokepoints, not at every wallet and not at every automated route. For anyone building agentic payment infrastructure, that exemption is the sentence that determines the architecture.
South Korea Reversed a Nine-Year Ban. Japan's Corporate Pensions Noticed the 20% Tax Rate.
South Korea's FSC advanced guidelines ending its nine-year prohibition on corporate cryptocurrency investment. Listed companies and professional investors will be allowed to allocate up to 5% of equity capital into the top 20 cryptocurrencies via regulated domestic exchanges.
The same document introduced a 20% ownership cap for major exchange shareholders, with a three-year restructuring window. Upbit and Bithumb will need to restructure. The market liberalization and the tool to prevent concentration from that liberalization arrived on the same page, which suggests someone had a long meeting, and then another one, and then printed the compromise before anyone changed their mind.
Japan moved more quietly, which is how Japan often moves just before the thing becomes real.
Okayama National Business Pension Fund, representing 1,200 SMEs with 21.3 billion yen under management, announced a 1% digital asset allocation for fiscal year 2026 via a passive multi-crypto fund. This is not a sovereign wealth fund. Not a hedge fund. Not the type of institutional allocator that arrives early and gives interviews about conviction.
It is a corporate pension fund for small-to-medium businesses. The last rung of the institutional ladder moved.
And it moved the week after parliament reclassified digital assets under the Financial Instruments and Exchange Act and cut the capital gains rate from 55% to 20%. Amazing what happens when the tax rate stops looking like a punishment drafted by a disappointed parent.
The HKMA authorized an offshore CNH stablecoin for interbank settlement on June 19, with HSBC and Standard Chartered running the pilot on a permissioned ledger. MUFG, SMBC and Mizuho confirmed a jointly issued yen stablecoin by March 2027. Three megabanks. One coordinated announcement. One 2027 deadline. Japanese institutional finance does not generally set public deadlines for sport.
Singapore's MAS added Bybit to its Investor Alert List on June 17. Bybit confirmed it geo-blocks Singaporean IPs and is engaging the regulator for clarification.
Kevin Warsh delivered his first FOMC press conference as Federal Reserve Chair on June 17, holding rates at 3.50% to 3.75% and announcing that the Fed was dropping forward guidance. The full opening statement was: "Good day."
The market received exactly as much guidance as intended.
Tokenization: $717 Million in Mortgages, $557 Million in SpaceX Orders, and Zero SpaceX Shares Delivered.
Figure Technology Solutions agreed to acquire Kiavi, the largest US residential transition loan lender, for $717 million on June 18. Kiavi originates more than $7 billion in loans annually.
Figure's plan is to move that entire pipeline onto Figure Connect, its tokenized marketplace, cutting intermediaries between origination and securitization and replacing them with blockchain rails. This is not a tokenization white paper. It is $717 million acquiring a business that does $7 billion in product per year because the rails are cheaper than the old ones.
The SpaceX IPO produced the week's clearest map of where the infrastructure gap still sits. xStocks and distribution partners gathered more than $1 billion in customer orders. Binance's campaign alone collected $557 million in on-chain subscriptions.
The underwriters gave crypto platforms zero allocation.
Binance, Bybit and Bitget issued full refunds before SpaceX had finished trading on day one. Crypto platforms had the clients, the demand and the on-chain subscriptions. They did not have the allocation.
A century of investment banking relationships looked at $557 million in on-chain demand and said: lovely, but no.
The clients were there. The plumbing between them and the allocation was not.
Coinbase announced 1:1 backed tokenized US stocks on Base via Coinbase Tokenize on June 16, forty-eight hours after the refund emails went out. Direct legal ownership. Automatic dividends. No derivatives.
ICE and OKX formed a 50/50 joint venture called OKXICE on June 22. Franklin Templeton acquired 250 Digital and launched Franklin Crypto for institutional active management. Archax launched $GOVY on June 17: the first 24/7 perpetual tokenized T-bill targeting HQLA Level 1 classification as bank liquidity collateral, with underlying assets held 1:1 in Northern Trust custody. BlackRock's BUIDL crossed $10 billion in AUM on June 16.
The tokenization market is no longer asking whether institutions will come. They are here. They have forms. And in some cases, custody diagrams.
Viral Moments
jaredfromsubway.eth built the most efficient retail tax on Ethereum, then discovered the tax goes both ways.
The bot, which ran an estimated 70% of all sandwich attacks on Ethereum over the past year and extracted tens of millions from retail traders, was drained for $7.5 million on June 20 via a counter-MEV honeypot.
The attacker spent several weeks deploying 66 fake token contracts mimicking WETH, USDC and USDT, paired with fake liquidity pools calibrated to look like profitable arbitrage to the bot's automated scanners. The bot granted token approvals. The attacker's contracts used them to empty the treasury: 1,583 ETH, 2.87 million USDC and 2.09 million USDT.
The operator posted on X: "Well played. We are willing to offer a 50% white hat bounty if you return 2150 ETH to this address in the next 48 hours, otherwise we will pursue all available legal and law-enforcement remedies."
A bold statement from an entity whose business model was automated economic mugging with gas optimisation.
The attacker moved 2,000 ETH through Tornado Cash and sold 1,422 ETH for roughly $2.4 million in DAI, leaving 5 ETH in the wallet. The 48-hour window closed.
jaredfromsubway.eth is now pursuing all available legal and law-enforcement remedies for funds removed from its treasury through automated front-running of its own trading logic. The on-chain record of how jaredfromsubway.eth built that treasury over the preceding three years is public, permanent and available to any law enforcement agency that asks.
One imagines the complaint form will require careful wording.
Pump.fun's "GO" bounty feature produced a user who tattooed a memecoin name across their forehead, discovered the tattoo had a spelling error, and is now the permanent ambassador of a project that no longer exists under the name displayed on his face.
The same week BlackRock's tokenized Treasury fund crossed $10 billion in AUM. The week contained both data points simultaneously and did not appear to find this remarkable.
Crypto is many things. Under-themed is not one of them.
What Went Under the Radar
The FATF June Plenary added Bosnia and Herzegovina and Iraq to its high-risk jurisdiction list. Algeria and Namibia were removed.
Travel Rule consultation guidance publishes next week. FATF's 7th Targeted Update on VA and VASP implementation arrives July 2026. Bosnia and Herzegovina and Iraq belong in your enhanced monitoring tier as of June 2026.
If your next scheduled screening update is quarterly, your next scheduled update is late.
The GENIUS Act CIP proposed rule exempted automated smart contract routing from KYC requirements. The FinCEN joint NPR published June 18 is the most consequential document of the week by compliance implication per column inch of coverage received. AML obligations concentrate at fiat on- and off-ramps. The DeFi peer-to-peer transfer layer is explicitly outside the perimeter. The US compliance architecture does not treat wallet possession as the risk. It treats chokepoints as the risk.
This is a different framework from the one most European compliance teams have been building toward. The divergence is now statutory.
Europe may wish to look up from the binder.
The DLT Pilot Regime has issued no new authorizations in the longest gap since the framework launched. An open letter went out in February 2026 from existing authorized entities calling for expanded asset scope, higher volume caps and removal of the six-year license limit. Potential applicants are holding back. Some NCAs lack the staffing to process applications.
The EU's flagship pilot program for next-generation settlement infrastructure is in a holding pattern while the infrastructure it was meant to pilot deploys at scale outside the pilot perimeter.
A pilot regime with no pilots is conceptually pure. Operationally, less so.
Bitmine Immersion Technologies holds 5,672,956 ETH — 4.7% of total circulating supply — with 4.7 million ETH staked on its Made in America Validator Network, generating $268 million in annualized staking yield. Strategy's 847,363 BTC at a $64.1 billion cost basis generates commentary weekly. Bitmine's $8.2 billion staked ETH position generating $268 million annually generates almost none. Both positions exist. One has a Saylor tweet. The other has yield.
Modern markets are very serious institutions.
MiCA Compliance Is Not a Policy Question After July 1. It Is a Counterparty Question.
The question that has been theoretical for two years becomes operational in six days.
Which of your counterparties, distribution partners and liquidity providers hold a valid CASP authorization? Which are on transitional provisions that expire at midnight on June 30? Which have already wound down? Which are currently telling clients they are "working on it"?
The phrase "working on it" has done admirable service in European crypto. On July 2, it retires.
A transitional operator that fails to convert is not a grey-area counterparty from July 2. It is a non-compliant entity providing services illegally.
The distinction between those two phrases matters considerably for the compliance teams that will be explaining their due diligence to supervisors later in the year.
The Cointegrity Perspective
The week's theme is not a deadline. It is a sorting.
The market divided into authorized and not authorized, and the entities that did not make it to the authorized column are discovering that "working on it" and "licensed" are not the same column.
JPMorgan on Base, Fidelity filing to manage stablecoin reserves, South Korea ending its nine-year corporate ban, and the Nordic survivors receiving their passporting rights are not separate stories. They are the same story at different latitudes.
The infrastructure layer is consolidating around entities with regulatory standing, and the licensing process is deciding who has it. You do not need to believe this was the intended outcome of regulatory design to observe that it is the actual one.
The stablecoin proliferation sits beside all of this uncomfortably. Six new USD stablecoins in the last month. Thirty to fifty potentially incoming under GENIUS Act frameworks. No interoperability standard. No shared attestation.
The industry built to disintermediate correspondent banking is constructing correspondent banking again, but with better onboarding flows and a smaller font on the fee schedule.
Excellent. We have invented banking, but faster, and with Discord.
Regulation arrives late. It always does. It arrives after the infrastructure is built, looks at what exists, and tries to draw lines around it.
The SEC published its first crypto token guidance this week, eleven years after the first token sale anyone remembers, and the same week commercial bank money settled on a public Ethereum Layer 2. The lines are now being drawn. The infrastructure, as is customary, was not waiting.
The loud register this week: a sandwich bot's press release, a misspelled forehead tattoo, and $557 million in SpaceX orders that produced zero SpaceX shares.
The quiet register: JPMorgan's deposit token live on Base, the Nordic body count, $717 million acquiring mortgage infrastructure for blockchain rails, and a corporate pension for small businesses making its first digital asset allocation.
The loud register gets the clicks. The quiet register builds the future.
If you are building in this space and want to understand what is actually happening versus what is being discussed, this is what we do. The infrastructure is the story. Everything else is weather.