ME News reports that MyToken数据显示，截至5月19日（UTC+8），过去24小时加密货币衍生品市场累计爆仓金额达4.33亿美元。其中，BTC爆仓1.37亿美元，ETH爆仓1.37亿美元，SOL爆仓2.44315亿美元，XRP爆仓7869.8万美元。（来源：MyToken）

Payward, the parent company of crypto exchange Kraken, delivered modest growth in a tough start to 2026 as the broader market slumped. Adjusted revenue increased 3% year over year to $507 million in the first quarter, CoinDesk reported, even as key industry gauges fell sharply. Derivatives led the quarter. Payward said its futures business recorded a 51% year-over-year jump in daily average revenue trades, driven by expansion at NinjaTrader and Breakout and a wider push to build out Kraken's derivatives franchise. The gains helped cushion weaker spot activity. Market conditions were notably soft: Bitcoin dropped 22% during the quarter, total crypto market capitalization fell 23%, and industry spot trading volume slid 38%. Profitability declined as spending rose. Adjusted EBITDA came in at $18 million, with the company emphasizing investment over near-term margins. Payward said it is prioritizing mergers and acquisitions, product development, and regulatory infrastructure, describing the current bear market as "the right time to invest." Kraken's position in spot trading strengthened. The exchange's spot market share increased from about 3.5% in mid-2025 to 5.2% in March 2026. User metrics also improved. Funded accounts climbed 47% year over year to 6.1 million in Q1 2026, and total client assets on the platform reached $40 billion. Co-CEO Arjun Sethi said the results support the firm's approach: "While other companies choose to contract, we choose to continue investing." Payward's performance stands out against competitors that have reduced headcount, narrowed offerings, or pulled back from challenging regulatory markets over the past year. If derivatives growth and market-share gains hold, the strategy of accepting slimmer near-term EBITDA to expand globally and diversify revenue could leave Kraken well positioned for the next crypto upswing.

May 19 — Data tracked by Farside show U.S. spot Bitcoin ETFs saw net outflows of $648 million on May 18. By fund: BlackRock IBIT: $448 million; Fidelity FBTC: $63.4 million; Bitwise BITB: $9.2 million; Invesco BTCO: $3.8 million; Franklin EZBC: $6.6 million; ARK ARKB: $109 million; CoinShares BRRR: +$8.1 million; VanEck HODL: $7.6 million. U.S. spot Ethereum ETFs recorded net outflows of $86.4 million over the same session. By fund: BlackRock ETHA: $55.4 million; BlackRock ETHB: $2.2 million; Fidelity FETH: $14.7 million; Grayscale ETHE: $4 million; Grayscale Mini ETH: $10.1 million.

ChainCatcher reports that BBX data shows two major moves spanning corporate Bitcoin accumulation and Wall Street's crypto positioning. Strategy, Inc. (NASDAQ: $MSTR) disclosed in an SEC Form 8-K that it purchased 24,869 BTC between May 11 and May 17 for about $2.01 billion, at an average price of $80,985. The purchase ranks as the second-largest weekly buy in 2026. The company financed the acquisition through the sale of 19.5 million shares of STRC preferred stock (net proceeds of about $1.949 billion) and 430,000 shares of MSTR common stock (net proceeds of about $837 million). As of May 17, Strategy's Bitcoin holdings rose to 843,738 BTC, with a total acquisition cost of roughly $63.87 billion (average cost of $75,700), translating into a 2026 year-to-date BTC yield of 12.6%. Goldman Sachs Group, Inc. (NYSE: $GS) disclosed in its Q1 2026 Form 13F that it fully sold its XRP ETF positions—previously valued at about $153.8 million across Bitwise, Franklin Templeton, Grayscale, and 21Shares—and exited Solana ETFs entirely (previously about $108 million). The bank also cut its Ethereum ETF exposure by about 70% to roughly $114 million. Bitcoin ETF holdings were largely maintained at about $700 million, including roughly $690 million in iShares Bitcoin Trust ($IBIT) and about $25 million in Fidelity's FBTC, a modest 10% reduction from the prior quarter. The filing also shows increased stakes in Circle Internet Group, Inc. (NYSE: $CRCL), Galaxy Digital Inc. (NASDAQ: $GLXY), and Coinbase Global, Inc. (NASDAQ: $COIN), pointing to a shift from altcoin ETFs toward crypto infrastructure equities.

Echo Protocol on Monad has been exploited for about $76 million in eBTC, according to onchain analyst @dcfgod. The attacker minted 1,000 eBTC valued at $76.64 million, then deposited 45 eBTC into Curvance and borrowed 11.3 WBTC against the position. The funds were bridged to Ethereum and swapped for 385 ETH, which was later routed through Tornado Cash. The wallet still holds 955 eBTC worth roughly $73.2 million, indicating most of the stolen assets remain in place. Source: Lookonchain

CoinDesk reports that Echo, a bitcoin-centric decentralized finance protocol, suffered an attack on Monday, the latest in a string of DeFi incidents this year. The underlying vulnerability has yet to be confirmed and was first flagged by an anonymous crypto influencer. At about 5:55 p.m. ET, DCF God posted the alert on X, followed by several onchain analysis accounts that shared additional context. ChainLens said the attacker minted 1,000 eBTC—Echo's bitcoin liquidity token issued on Monad—then posted 45 eBTC as collateral in the Curvance lending protocol and borrowed roughly 11.29 WBTC, valued near $867,700 at the time. The WBTC was bridged to Ethereum, swapped for ETH, and 385 ETH was sent to the Tornado Cash mixer. Reports say the attacker still holds 955 eBTC worth about $73.2 million. Lookonchain founder Nick Sawinyh wrote that "the remaining 99% of the fake supply is held in the attacker's wallet, as Monad's lending and decentralized exchange (DEX) depth can no longer accommodate more." Monad and Curvance later acknowledged the issue. Monad cofounder Keone Hon said security researchers are investigating and stressed the network itself was not impacted. In a follow-up post, Hon said reviewers estimate around $816,000 was stolen via the exploit of Echo's eBTC. Curvance said its fully independent market architecture insulated other markets and that there is no indication its smart contracts were compromised. As a precaution, it suspended the affected Echo eBTC market. Echo is a multichain BTCFi protocol that started as a bitcoin liquidity and yield platform and has a significant footprint on Aptos. Prior to the Echo incident, DeFi protocols had already seen 13 security breaches this month. DeFi Llama lists, among them, the May 17 exploitation of Verus's Ethereum bridge, which led to $11.6 million in losses. This story is developing.

Echo Protocol has been hit by an exploit tied to a vulnerability on the Monad network, enabling an attacker to mint 1,000 eBTC worth about $76.64 million, ChainCatcher reported. PeckShield data shows the attacker deposited 45 eBTC (around $3.45 million) into Curvance, borrowed 11.29 WBTC, bridged the funds to Ethereum and swapped into ETH. A total of 384 ETH was then sent to Tornado Cash. Curvance said it has suspended the impacted market and emphasized its smart contract was not breached, adding that other markets remain unaffected. Echo Protocol has halted all cross-chain transactions. Monad CEO Keone Hon said the issue did not compromise the Monad network itself. Security researchers estimate the realized loss at roughly $816,000. The episode lifts the number of crypto hacks recorded in May to 14, including three major DeFi incidents over the past five days. THORChain suffered a treasury exploit on May 15 with losses exceeding $10 million. Three days later, the Verus Ethereum cross-chain bridge was attacked, with estimated losses of about $11.58 million. The clustering of incidents underscores persistent, system-level security risks across the DeFi sector.

On-chain analysts reported that BTCFi protocol Echo was exploited, with the attack targeting the eBTC market on Monad.

According to Huo Xing Finance, Echo Protocol said on May 19 that it is investigating a security incident involving the Echo cross-chain bridge on Monad. The project has suspended all cross-chain transactions while the investigation is ongoing. Earlier, blockchain security firm PeckShield reported suspicious activity suggesting Echo Protocol on Monad had been exploited. The attacker allegedly minted 1,000 eBTC (about $76.7 million) and, using a previously tested method, deposited 45 eBTC (about $3.45 million) into Curvance. With that collateral, the attacker borrowed roughly 11.29 WBTC (about $867,700), bridged the WBTC to Ethereum, swapped it for ETH, and ultimately sent 384 ETH (about $821,700) to Tornado Cash. SlowMist founder Yu Xian said the loss may have been caused by the compromise of a single admin private key at Echo Protocol.