Blockaid reported an exploit affecting StakeDAO on Arbitrum in which an attacker allegedly took control of the protocol's deployer private key. The incident involved a manipulated LayerZero cross-chain flow that minted 5,446,744,073,709 vsdCRV tokens before the attacker swapped tokens for ETH across multiple DEX routes and was estimated to have extracted roughly 43.9 ETH (about $91,000).

On May 27, 2026, Streamex Corp. and Solana DEX Orca rolled out a permissioned secondary-liquidity setup for tokenized securities, starting with the gold-backed, yield-bearing token GLDY. The firms say the pool runs 24/7 and limits holding and trading to wallets that have completed KYC and accredited-investor verification, with eligibility enforced at the token level on Solana.

x402 payment volume dropped from $5.15 million in November 2025 to $1.19 million by May 2026, while transaction counts recovered to 2.89 million in May at an average $0.52 each. The pattern points to agents making frequent sub-dollar payments for APIs, data, and compute, where manual wallet approvals can cost more than the transfer itself.

Circle Technology Services said Wednesday it has partnered with cross-border payments platform Nium to connect USDC-based settlement with "last-mile" global payouts. The deal brings Nium into the Circle Payments Network, giving financial institutions a single integration to reach payouts across more than 190 countries and 100 currencies, including delivery to accounts, wallets and cards.

On May 26, OpenZeppelin co-founder Manuel Aráoz said he now views all DeFi as unsafe and claimed AI coding agents have shifted the advantage to attackers. He added he has been urging friends and family to exit positions, citing Aave, MakerDAO, and Compound among protocols he no longer considers safe. Others on X disputed the claim, arguing most recent losses stemmed from operational and credential failures rather than smart-contract bugs.

U.S. commercial and industrial loans at commercial banks totaled $2.89 trillion for the week ending May 13, while Aave finished 2025 with $55 billion in deposits after peaking at $75 billion. The article argues DeFi lending largely prices liquid crypto collateral and automated liquidation, not the cash-flow repayment risk that corporate credit relies on. It also cites on-chain tokenized credit of $5.3 billion in distributed value and $22.7 billion in represented value, still under 1% of what banks lend to businesses.

On May 26, 2026, OpenZeppelin founder Manuel Aráoz said he now views all DeFi as unsafe, arguing AI coding agents can surface vulnerabilities faster than defenders can patch them. He cautioned that even established protocols such as Aave, Sky Protocol, and Compound could be exposed, while other commentators argued many exploits still hinge on human errors and centralized control points. DeFi exploits eased in May, with 14 attacks taking a bit over $44M, even as broader 2026 losses were estimated at $285M and $437.4M across different threat categories.

More than 100 crypto companies and trade groups are ramping up their push for U.S. Senate backing of the CLARITY Act, arguing it is a narrowing chance to lock in federal rules before legislative momentum fades. The Senate Banking Committee cleared the bill in mid-May, while advocacy campaigns and public calls for action intensified on May 26, 2026. Supporters say the measure would require formal rulemaking around bank-crypto access and could affect fiat on/off-ramps used by exchanges including Coinbase, Kraken, and Gemini.