Crypto Briefing — April 26, 2026

🔥 Top Story

DeFi is bleeding from a thousand cuts, and April just became the worst month for hacks since the Bybit breach. A sophisticated exploit of LayerZero's EndpointV2 contract allowed attackers—likely North Korean—to mint 116,500 rsETH (~18% of Kelp DAO's circulating supply) and deposit roughly $200 million of the stolen tokens onto Aave as collateral. Rather than dumping immediately, they borrowed an estimated $236 million across DeFi platforms, amplifying contagion fears and triggering a $9 billion bank run that slashed Aave's TVL by a third to $17.5 billion. April's exploit tally now stands at $606 million across 12 incidents, nearly 4x Q1's combined losses. The tactic of using stolen funds as collateral rather than laundering them through mixers is new, and it signals that attackers are now optimizing for systemic panic, not just asset extraction.

📊 Market Snapshot

• BTC: $77,572 (+0.27%) | ETH: $2,319 (+0.26%) — Prices are barely moving, but the tape is deteriorating beneath the surface.
• Fear & Greed Index: 31 (Fear) — Sentiment remains defensive despite the flat price action.
• Volume: Total market volume plunged 42% in 24h. Combined with flat prices, this reads as exhaustion, not stability. Nobody wants to bid, but nobody wants to sell either.
• ETF Flows: Spot Bitcoin ETFs have clawed back to roughly $2 billion in YTD net inflows, driven by a strong April ($2.43B monthly). BlackRock's IBIT leads with $2.14B in monthly inflows, while Grayscale's GBTC continues its structural bleed (~$960M YTD outflows).
• Bitcoin Dominance: 58.1% — Risk-off rotation into BTC is still the dominant macro trade.

💰 Crypto Highlights

• Kraken builds a US derivatives fortress. Kraken's parent Payward agreed to acquire Bitnomial for up to $550 million, giving it the full CFTC triad: exchange, clearinghouse, and brokerage licenses. This follows the $1.5 billion NinjaTrader deal last March and a confidential IPO filing. The strategy is clear: own the regulated rails before competitors do. With a Federal Reserve master account already in hand, Kraken is positioning itself as the Goldman Sachs of crypto infrastructure.

• SEC formally disavows Gensler-era enforcement. In its fiscal 2025 enforcement report, the SEC admitted that certain crypto cases—95 book-and-record violations extracting $2.3 billion, plus 7 registration and 6 dealer-definition cases—delivered "no meaningful investor benefit" and reflected a "bias for volume over protection." The agency's dismissal of cases against Coinbase, Binance, Gemini, Crypto.com, Robinhood, and Ondo now has official cover. For pending litigation, this is a gift-wrapped defense exhibit.

• GENIUS Act implementation hits a wall. The American Bankers Association is asking regulators to extend the comment period by 60 days, arguing that the OCC's unfinished rule makes meaningful feedback impossible. The FDIC and other agencies are explicitly waiting on the OCC's framework, creating a regulatory traffic jam. Meanwhile, the CLARITY Act remains stalled in the Senate with no vote scheduled.

🎯 What to Watch

• DeFi security response: With 47 hacks YTD (up 68% YoY) and $606 million lost in April alone, protocols are under pressure to prove they can price risk correctly. If the next few weeks bring more infrastructure-layer exploits, expect accelerating migration to centralized or insured alternatives.
• Kraken IPO timing: A confidential filing is already in. Watch for public S-1 filings and whether the Bitnomial acquisition closes by June as planned.
• Stablecoin rulemaking deadlock: The OCC needs to publish its final rule before the rest of the regulatory stack can align. Delays there push the GENIUS Act effective date closer to its statutory 18-month fallback, potentially leaving issuers in limbo into late 2026.