Bakkt Holdings has agreed to acquire its long-time stablecoin infrastructure partner Distributed Technologies Research in an all-stock transaction involving approximately 9.1 million Class A shares. The company plans to change its corporate name to "Bakkt, Inc." effective January 22, 2026, while keeping its NYSE ticker "BKKT" and advancing its stablecoin settlement and neobanking strategy.

On January 12, 2026, SlowMist released an audit report on the Truebit Protocol exploit that drained about $26 million in ETH. The report attributes the incident to an unchecked addition operation in the Purchase contract's price calculation, compiled with Solidity 0.6.10 without SafeMath overflow protection. The attack briefly pushed Uniswap's daily trading fee capture revenue above $1.4 million, largely driven by TRU-related trading.

LISA, tied to the AgentaLISA project on Solana, fell 76% in 24 hours. A SafeProxy wallet linked to the team moved 10 million LISA (about $1.65 million) to a Binance Alpha wallet at 01:50 UTC; about 25–30 minutes later, three sales totaling around $170,000 hit the market, amid community speculation about 4x rewards.

According to Malwarebytes, an alleged security incident has exposed sensitive data from about 17.5 million Instagram accounts, including usernames, email and home addresses, phone numbers and other personal details, which are reportedly being sold on underground forums. Many users say they have received multiple password reset emails, while Meta maintains there was no system breach, attributing the messages to an issue that allowed an external party to trigger reset requests and stating that accounts remain secure.

Updated on January 11, 2026, India's ITSAR draft outlines 83 smartphone security requirements, including potential source code reviews. Apple, Samsung, Xiaomi, and Google, via MAIT, oppose provisions such as year-long log retention and periodic malware scans, citing trade-secret risks and operational burdens.

On January 11, 2026, reports indicated the UAE began government-sponsored Bitcoin mining powered by its natural gas. CZ, founder of Binance, said on social media the country has been mining "for a while." In August 2025, Arkham Intelligence reported roughly 6,300-6,450 BTC worth $700 million were accumulated via state-backed operations through Citadel Mining.

A Bitcoin miner who earned rewards in 2010 has transferred 2,000 BTC, valued at nearly $200 million at prices close to $100,000 per coin, to Coinbase after 15 years of inactivity. On-chain data shows multiple whale selling waves since late 2024, including an 80,000 BTC move in July 2025 and several other dormant wallets reactivating. Analysts are debating whether these sales and cooling ETF inflows will disrupt Bitcoin’s historical four‑year cycle as institutional demand continues to expand.

On January 10, 2026, BlockSec's Phalcon flagged suspicious transactions against Arbitrum's Futureswap and estimated losses of around $395,000 after a suspected exploit that drained USDC via repeated changePosition calls. BlockSec said it tried to contact the team without success and noted the closed-source contract leaves the root cause under investigation.

On January 10, 2026, Vitalik Buterin warned about what he calls "corposlop", urging crypto builders to prioritize sovereignty, privacy and user agency. Responding to a tweet forecasting 2026–2030, he said he agreed with 60% of the predictions and outlined tools to resist anti-user designs, including local-first apps, user-controlled social platforms, open and private AI, and mission-driven DAOs.