Last week's newsletter identified two clocks. The congressional probe into CFTC officials and prediction market oversight: open-ended, scheduling its first hearing at the pace of a committee formed to decide how to form a subcommittee. The 90-day executive order clock directing six federal agencies to identify every fintech barrier in the financial system: categorical, uninterested in subcommittees. This week, one clock ran. The other booked a room to discuss whether the room needed a lectern.
Jamie Dimon called Brian Armstrong "full of shit" on stablecoins, declared banks will not accept the CLARITY Act, and then granted it might pass anyway. JPMorgan's deposit token was already live on Coinbase's blockchain. A Google engineer made $1.2 million on Polymarket using next year's search trends before they went public, the second such prosecution in five weeks. The BIS confirmed tokenised settlement at production speed. The Treasury seized $9 billion in crypto in 48 hours. The ECB called an emergency about an AI model that does not officially exist.
The rest of the world kept building. Here is what happened.
Dimon Fought the Legislation His Own Bank Already Shipped.
Jamie Dimon appeared on Fox Business on May 29, called Brian Armstrong "full of shit" on stablecoins, declared banks "will not accept" the CLARITY Act as written, and then acknowledged it might pass anyway. John Tuld at least waited until midnight to start dumping. JPMorgan's JPMD deposit token was settling transactions on Base, which is Coinbase's blockchain, built by the man Dimon had just publicly insulted. The cameras caught the speech. The blockchain recorded the settlement. The gap between the two is not a contradiction JPMorgan needs to resolve. It is a strategy that works best when nobody says its name aloud.
The fight is not about whether digital dollars exist. That argument is over. The fight is about yield. Under the GENIUS Act, stablecoin issuers cannot pay passive interest. Under the current CLARITY Act text, Coinbase and Kraken route 4 to 5% rewards to USDC holders through activity-based structures that may or may not survive the final language. Senator Lummis called this "fear mongering" on May 30 and added the structural threat: if CLARITY fails, Congress probably does not revisit crypto legislation until 2030. The Senate Banking Committee passed the bill 15-9 on May 14. No floor vote is scheduled. A filibuster needs 60 votes. The 309-page text introduced a "mature blockchain test": graduation from SEC to CFTC jurisdiction requires no single entity controlling more than 20% of governance. The institutions currently above that threshold in multiple networks have read that clause.
Tokenised deposits are money that rests. Stablecoins are money that moves. JPMorgan built both, which makes it simultaneously the worried parent and the uncle who lent the car keys. The man running America's largest bank vowed to fight to the end and admitted on camera he might lose. Chase credit card customers will shortly redeem reward points for USDC and link directly to Coinbase. Both announcements dropped the same week as the Fox appearance. JPMorgan's deposit token did not ask permission. It simply settled.
The BIS Built the Pipes. The Private Sector Built the Tap.
Last week: Qivalis. 37 European banks, 15 countries, approximately 15 trillion euros in combined balance sheet, building a MiCA-compliant euro stablecoin for H2 2026. Supervised by De Nederlandsche Bank. The architecture is at cointegrity.io. This week, BIS published two further pieces. Different working groups, different participating jurisdictions, different problems being solved. Neither coordinated with Qivalis.
BIS Project Agorá moved to live testing on May 28: tokenised central bank reserves and commercial bank deposits enabling atomic multi-currency settlement across 7 central banks and 40-plus private institutions. Modular, always-on, programmable. Full report published. BIS Project Aperta published its prototype on May 29: a network of networks connecting the open finance systems of the UK, UAE, Brazil, Hong Kong, and India through APIs, all code and architecture published as shared goods for the central banking community.
Agorá is the central bank money rail. Aperta is the cross-border data portability layer. Qivalis, built by 37 private banks and supervised by De Nederlandsche Bank, is the euro commercial bank stablecoin layer sitting on top. The BIS built the pipes. The private sector built the tap. The cross-border framework summit that will eventually publish a communique taking credit for all of it is still deciding whether it wants plenary sessions or breakout rooms. The builders were not waiting. They were welding.
Eighty-Two Percent of the European Crypto Market Exited Before the Exam.
The Nordic blockchain industry gathered in Stockholm this week. Most of the region's key players in one room, at the moment the market they are building in was being cleared by the largest regulatory consolidation in European crypto history.
The MiCA register: 234 CASPs authorised, 39 EMT Issuers, 0 ART Issuers, 149 entities still non-compliant, five weeks to the July 1 hard deadline. The FSAs are visibly accelerating. Authorisations are jumping as regulators sprint through application backlogs before the cliff. Who is standing on July 2 is not a rhetorical question.
Norway's Firi, the largest Nordic exchange at 400,000-plus users, secured its MiCA licence from the Norwegian FSA on May 26, with Sweden targeted for immediate EEA passporting. TÝR Markets received its licence on May 18, Norway's first pure-play MiCA crypto broker. K33, NBX, and Bare Bitcoin remain pending with five weeks on the clock. Latvijas Banka issued two licences on May 27. The first Italian bank completed its MiCA notification the same day.
The English commons enclosure in the 18th century did not ask the commoners whether they were prepared. It just put up fences. Compliance was never the constraint. It was the moat. One MiCA CASP authorisation covers 30 EEA nations and 450 million people. The firms that filed three years ago converted a compliance cost into a continental distribution advantage. The firms that treated it as overhead are now running the binary: exit, or attempt a rush with five weeks remaining. The last seat on the evacuation flight was booked by someone who filed in 2023.
ESMA Q&A No. 2671 on May 28: tokens listed on non-EU platforms do not trigger MiCA whitepaper thresholds under Article 4. The consultation launched May 20 closes August 31. The July 1 cliff does not read consultations. It just shows up.
The Clearing Depository Got Its Licence.
The printing press did not send a courtesy note to the monasteries. On May 28, the SEC granted Paxos Securities Settlement Company clearing agency registration under Section 17A of the Securities Exchange Act of 1934, Federal Register document 2026-10808, seven years and two temporary exemptions after the engagement began. First blockchain-native central securities depository in the United States. Same-day settlement. Not a pilot. Not a sandbox. A licence. That is not a small sentence.
DTCC confirmed its tokenisation architecture on May 27: Stellar for Russell 1000 equities, major ETFs, and US Treasuries; Canton Network for permissioned Treasury collateral; Hyperledger Besu AppChain for settlement. Limited production July, full rollout October. Fifty-plus firms. The chain is not the power layer. Custody is. Every asset still sits at DTC. Wall Street is moving onchain and keeping the keys. If you are still arguing over which chain wins, you are debating which brand of petrol is superior while the oil companies build a pipeline directly to your car.
SoFi became the first chartered bank to put a stablecoin on a public blockchain on May 27: SoFiUSD on Ethereum and Solana to 14.7 million retail customers. Only a chartered bank can issue tokenised deposits outside the GENIUS Act's passive yield prohibition. SoFi has the charter and both products simultaneously. Customer acquisition cost per new user: zero. That sentence is in the strategic planning documents of every bank that moved second.
Goldman Sold the Index and Bought the Protocol That Earns the Fees.
Goldman's 13F filings: full liquidation of XRP and Solana ETF positions, Ethereum reduced approximately 70%, Bitcoin trimmed 10% to roughly $700 million. The capital landed in Hyperliquid Strategies shares (654,630 shares, $3.3 million) and approximately 20 million HYPE tokens via a related entity.
Goldman is not buying the blockchain. Goldman is buying the company that sells pitchforks after the villagers have already burned the castle. Goldman does not believe in decentralisation. Goldman believes in toll roads. Hyperliquid processes 42% of global blockchain transaction fees and kicks 99% of them back into programmatic HYPE buybacks. CME Group and ICE filed for Hyperliquid's regulatory oversight the same week. Wall Street always arrives late to the gold rush and immediately buys the saloon. HYPE hit an all-time high of $64.27, up 20% on the week and more than 100% year-to-date.
Spot Bitcoin ETFs bled $1.88 billion over seven consecutive sessions. $733 million in a single day. BlackRock IBIT shed $528 million in one session. Ethereum ETFs logged ten consecutive days of outflows. Bitcoin fell below $73,000 while the S&P 500 hit its ninth consecutive weekly gain. SpaceX filed its S-1 with 18,712 BTC on the balance sheet targeting a $1.75 to $2 trillion IPO, making Bitcoin a default feature of SpaceX equity. Anthropic raised $65 billion at $965 billion, eclipsing OpenAI at $852 billion. When those allocation silos absorb $5 trillion simultaneously, something funds the purchases. This week that something was the Bitcoin ETF. The exit door was the entrance everyone used.
MicroStrategy's May 28 10xResearch analysis: runway to cover $1.7 billion in annual dividend obligations compressed from 16 months to 6.1 months. Leadership acknowledged the possibility of selling Bitcoin. MicroStrategy built its entire institutional identity around never selling Bitcoin. That identity is now subject to the same runway arithmetic as everything else.
The ECB Called an Emergency About a Model That Does Not Officially Exist.
On May 26, ECB Vice-Chair Elderson convened all 111 European banks under direct supervision. The subject: Anthropic's "Mythos" model. The source: a 245-page system document from an Anthropic deployment that went briefly public before it was supposed to, pulled immediately, but not before it had been copied, indexed, and posted to several GitHub repositories where it remains available to anyone with a search engine. The actual Mythos model has no official distribution channel. The Fed does not have it. The Bank of England does not have it. No regulated institution has been granted access. Anthropic has not released it. This is the Pulp Fiction briefcase.
What the AISI could evaluate: capability profile from the leaked documentation. The finding: Mythos autonomously identifies, exploits, and writes functional exploits for zero-day vulnerabilities across operating systems, industrial networks, and browsers. Six of ten successes on a 32-step enterprise attack path requiring twenty hours of human expertise. The window between a vendor publishing a security patch and an attacker exploiting the underlying vulnerability: approximately 30 minutes. The security workflow designed for a Tuesday morning team meeting is redundant before the coffee is cold.
The ECB recommended European banks shift to Continuous Threat Exposure Management and build a Minimum Viable Company framework for machine-speed cyber incidents. The specific recommendation for defending against Mythos: coordinate with counterparts who also do not have it. The 111 assembled banks were handed a photograph of a ghost, told the ghost was classified, and sent home with a memo saying "prepare for the ghost." FIRST projects 100,000 CVEs in 2026.
Anthropic raised $65 billion at $965 billion that same week and released Claude Opus 4.8 to the public. The model that sent 111 European banks into an emergency session and the model available to those same banks at claude.ai are different products. One has a terms of service. The other has a GitHub URL and an unintended release date.
The CFTC Approved Perpetuals and Vacated Its Own Case on the Same Afternoon.
Last week covered the prediction market governance structure in full. This week it acquired a second insider trading prosecution and a regulatory self-reversal.
Google software security engineer Michele Spagnuolo, operating as "AlphaRaccoon," was charged May 28 with money laundering, commodities fraud, and wire fraud for using Google's confidential 2025 "Year in Search" data to win $1.2 million in Polymarket bets before the data went public. Second such prosecution in five weeks. Both defendants had access to non-public future information. Both monetised it on Polymarket. The CFTC, which is writing the regulatory framework for these platforms, has been described by its own former chair as potentially lacking Dodd-Frank authority to regulate prediction markets at all. Former Chair Gensler predicted a Supreme Court resolution. The framework is being written by an agency that may not legally own the jurisdiction. Both things are true.
Minnesota SF4760 made operating a prediction market a five-year felony from August 1. The CFTC filed its proposed framework the same week. Trump posted the CFTC's "exclusive authority must be defended." The CFTC sued Minnesota within 24 hours. Indonesia blocked Polymarket over a market on presidential tenure. The platform's legal status is simultaneously a constitutional right, a pending federal regulation, a state felony, and a foreign access block. All in the same week.
On May 29, the CFTC approved the first onshore Bitcoin perpetual contract by a registered US exchange. On the same afternoon, it filed to vacate its own $5 million Gemini Trust settlement from January 2025: complaint "should not have been filed," evidence deficient, key whistleblower not credible. That is not regulation. That is regulatory performance art. Scottish courts have a verdict called "not proven" for precisely this situation. The CFTC does not have that option, so it used the next best thing: never mind. Both decisions, same afternoon, before 5pm.
The UK Designated Huobi and Every Compliance Desk Has Homework.
The FCDO designated Huobi Global S.A. on May 26, alongside EXMO, Rapira, Bitpapa, Aifory, and Nueva Cryptologia, a Mexican entity. The May 29 round: 18 crypto entities linked to the Kremlin's A7 network, which processed an estimated $90 billion in 2025. Minimum compliance response: 24-month look-back across all counterparty transactions.
In epidemiology, a confirmed index case triggers mandatory contact-tracing protocols across every individual within two exposure degrees, retroactive and non-optional. Huobi is the index case. Every CEX on earth has counterparty exposure to screen, document, and remediate: direct flows, partner integrations, shared market-making, OTC desks. The Mexico and UAE corporate wrappers confirmed as Russia-linked VASP routing structures had been the private assessment of investigators for 18 months. It is now the FCDO's public one. The compliance departments that spent those 18 months hoping that assessment would stay private just got their Monday morning. OFAC will follow.
The FCA published its Sanctions Systems and Controls review on May 28, covering 150-plus firms since February 2022, and signed a new MoU with OTSI on intelligence sharing. That sequencing was not accidental.
Cointegrity's A7 and A7A5 framework and glossary at cointegrity.io covers the entity typology, wallet cluster identification methodology, and the LatAm/Gulf wrapper structures confirmed by the designations. If your desk is triage-ing Huobi exposure this week, the glossary is the structured starting point.
Dorsey Said He Hated Stablecoins While Cash App Rolled Them Out to Sixty Million Users.
Cash App began rolling out USDC to nearly 60 million users on May 27 and 28. Zero fees, subsidised by Block. Solana, Ethereum, Polygon, Arbitrum. $2,000 daily and $5,000 weekly caps. Jack Dorsey's statement: "I don't like that we're going to support stablecoins, but our customers want to use them." Betamax had superior picture quality. VHS had distribution. Dorsey just handed the market a Betamax quote while shipping VHS units by the million. New York residents are excluded under BitLicense, protected from the product available in the other 49 states.
The US seized approximately $9 billion in crypto in 48 hours. Operation Economic Fury: $1 billion in Iranian crypto, including a $344 million Tether freeze on Tron linked to the IRGC. Operation Blackout: $8 billion from scam compound infrastructure. Treasury Secretary Bessent: "just outright grabbed the wallets." No polite request. No correspondent bank. No waiting for a fax. Stablecoin issuers can burn and reissue tokens globally in real time. The US government ran that at $9 billion scale in two days.
The same rails that let the Treasury seize $9 billion without a clearing window also let an AI agent pay for an API call in 200 milliseconds. AWS AgentCore processed 169 million AI agent transactions in USDC on Base and Solana this week. Agents running 500 micropayments per minute to query data and call services cannot use a credit card. The interchange floor alone makes it uneconomical before 3DS authentication, KYC requirements, and chargeback windows designed around a human dispute path. Sovereign seizure at $9 billion scale and machine commerce at 169 million transactions run on the same infrastructure.
What Went Under The Radar
TEFRA 1982 was identified as a structural blocker to tokenising US debt markets at the House Financial Services Committee hearing on May 28. The Tax Equity and Fiscal Responsibility Act was written to prevent paper bearer bonds from facilitating money laundering. Tokenised securities have bearer-like properties by design. Salman Banaei of Kimber Labs testified TEFRA's penalties inadvertently apply to tokenised bond issuance without a congressional carve-out. Congress left without a framework. $29.18 billion in on-chain RWAs is deployed. The HOA newsletter that banned satellite dishes in 1981 is still technically binding.
The EBA confirmed via Q&A 2024_7172 on May 31 that the EU Transfer of Funds Regulation applies to Bitcoin Lightning Network transactions. The off-chain settlement argument that kept Lightning outside Travel Rule obligations is officially closed. Every compliance team that assumed the exemption held is now non-compliant. Most of them do not know it yet. The exemption was a door they assumed was locked. The EBA just removed the door.
The ICBA formally urged the OCC on May 31 to rescind Coinbase's national trust bank charter, citing the New York AG lawsuit over prediction markets as raising "serious character concerns." Coinbase's bank charter, CFTC FCM licence, TRUST network, direct deposit product, and prediction market exposure are all linked in this week's regulatory record. Five concurrent regulatory threads on one institution in one week. That is not a coincidence. That is a dragnet. When the regulators come, they come for everything at once.
Bitmine holds 5,390,404 ETH, 4.47% of total supply, 87% staked via MAVAN, generating $276 million in annualised staking yield. Standard Chartered published its "Amazon 2001" thesis on Ethereum this week: ETH down nearly 60% from its August 2025 peak, capturing 60% of global TVL and 54% of stablecoin activity, $4,000 year-end target. The thesis and the price are in active disagreement. One of them is wrong. History suggests it is usually the price, but history has a dark sense of humour.
The Viral Moments
Sui, the layer-1 blockchain that markets itself on "millisecond finality" and "unmatched scalability," suffered three mainnet outages in 48 hours on May 28 and 29. The cause: a bug in its "gas smashing" logic. A transaction fails because the sending address has insufficient funds. The gas smashing routine then attempts to debit those same nonexistent funds anyway. The result: arithmetic underflow, validators crash, consensus halts. Three times. The third outage surfaced when the patch for the first bug exposed a latent randomness-state bug during epoch change. Sui had promised "zero-fee stablecoin transfers" at Consensus 2026 days earlier. The network delivered zero transactions instead. SUI dropped 8%. "Gas smashing" is not a feature you put on the marketing deck. It is an implementation detail that, when wrong, smashes your network in preference to your gas costs.
Then there is the BTC burn. On May 26, five wallets dormant since 2014 sent 107 BTC ($8.2 million) to a provably unspendable address, paying $5.56 in fees. Twelve years of accumulation. A sandwich's worth of fees. No note. No explanation. Galaxy Research offered theories: tax-loss harvesting, illicit-fund destruction, quantum bounty. None confirmed. The burn address now holds 807 BTC. The blockchain records everything permanently. It explains nothing. The Mary Celeste at least had a ship.
The July 1 Cliff Has a Gap Nobody Is Advertising.
The 82% consolidation number is accurate. It is also incomplete. A car that passes MOT inspection is road-legal. It may still break down. Kriptomat filed, ran for eight years, and wound down citing MiCA uncertainty. StablR held full EMT authorisation and depegged on May 24 from a governance failure in its minting multisig, not a reserve deficiency. The crypto equivalent of passing the inspection and then the steering wheel falling off. The licence is necessary. It is not sufficient.
The compliance gap receiving almost no coverage: KYB tooling at complex LLC, trust, and limited partnership structures. Most eKYC providers have solved individual identity verification adequately. They fail when regulators require full beneficial ownership tracing through every intermediary layer, which is the current standard. That gap sits in the same queue as the FATCA/CRS/CARF applicability question for every crypto business that has not mapped which framework applies to which product line. The first reporting deadline is January 2027, covering the full 2026 calendar year. Q4 is not enough time to resolve this. Q4 is enough time to discover the problem and draft a very apologetic explanation.
If July 1 is still open, micahub.net has the structure. If July 1 is answered and Q3 is the question, cointegrity.io is where the work starts.
Our Take
The week's structure was simpler than the noise made it appear. In one room: serious people arguing on television about what the future of money should look like. In the other room: the future of money, filing its paperwork and going live.
Dimon was right about several things. Passive stablecoin yield does threaten the deposit model that funds most retail lending. The banks are not wrong to be concerned. They are wrong to act surprised. JPMD is on Base. Chase customers will shortly redeem credit card points for USDC. In 1848, Sacramento built a courthouse and started hearing cases while Washington was still debating what a territory even was. The debate ran two more years. The courthouse ran the whole time. Nobody asked it for permission. JPMorgan's deposit token did not ask either. It simply settled.
The prediction market story is the clearest example of a different pattern. The CFTC approved perpetuals and vacated its own enforcement action on the same afternoon. A Google engineer is in federal proceedings for information arbitrage on a platform whose regulatory framework was written by officials now employed by that platform's affiliated companies. The congressional inquiry and the CFTC rule pending White House review are competing claims with no settled authority between them. That is not a framework. It is a cleared field. Cleared fields advantage the firms that moved first. The rest get to argue about the property lines while the harvest is already in the silo.
The BIS published two pieces this week. The private sector published a third. The architecture for a machine-speed financial system is assembling from multiple directions simultaneously. The argument about whether that endpoint is desirable has no bearing on the timeline. The timeline is a freight train. The argument is a passenger trying to buy a ticket after the train has already left the station.
This is the space we operate in. Not the Fox appearances. Not the ETF outflow charts. The structural layer: a clearing depository licence that took seven years arriving on a Wednesday, a CFTC that approved and self-reversed on a Thursday afternoon, an EBA Q&A that closed Lightning Network's Travel Rule exemption on a Friday, and an ECB emergency meeting based on a document Anthropic did not mean to publish about a model that does not officially exist.
The week had two registers. Loud: Dimon on Fox, $1.88 billion in ETF outflows, a Google engineer in federal court, a state making prediction markets a felony, 111 European banks told to prepare for a weapon nobody officially has. Quiet: the first blockchain-native CSD in US history, BIS tokenised settlement confirmed live, $9 billion seized without a correspondent bank, a blockchain that promised zero-fee transfers delivering zero transactions instead.
The loud register gets the clicks. The quiet register builds the future. If you are building in the quiet register, this is what we do. The infrastructure is the story. Everything else is weather, and this week the weather included a banker shouting into a camera while his own institution had already moved on.
Related internal resources: Bitcoin, Ethereum, Stablecoin, Blockchain.