CertiK said in a May 12 report that North Korea-linked hackers have stolen an estimated $6.75 billion in cryptocurrency across 263 incidents since 2016. The firm said the threat is shifting toward fewer, higher-impact breaches driven largely by social engineering and supply-chain compromise, citing 2025 losses of $2.06 billion out of $3.4 billion and 2026 losses of $620.9 million so far.

Bhutan has transferred 100 BTC worth $8.1 million from its holding wallets as it continues to reduce its sovereign Bitcoin stash. Since the start of 2026, it has sold $230.39 million in BTC and still holds about 3,119 BTC worth over $250M, with Arkham expecting the reserve could be depleted before the end of September.

On May 11, Sharplink Inc. disclosed a $685.6 million net loss for Q1 2026 and said it will partner with Galaxy Digital to launch the Galaxy Sharplink Onchain Yield Fund. As of May 4, the company held 872,984 ETH worth about $1.7 billion, while the new vehicle is set to start with $100 million from Sharplink and $25 million from Galaxy to pursue DeFi lending and trading strategies.

Mysten Labs co-founder Adeniyi Abiodun said Sui will introduce confidential transactions in 2026, positioning the network for privacy-enabled payments. He also said Sui has processed more than $1 trillion in stablecoin transactions since August 2025, while SUI traded around $1.27 after rising over 37% last week.

Ink Finance and Renegade were hit by separate exploits on May 11 and May 10, losing a combined $349,000 across Polygon and Arbitrum. Ink Finance’s Polygon treasury contract was drained for about $140,000, while Renegade said roughly $209,000 was taken from its legacy V1 Arbitrum deployment and about $190,000 has been returned by a white hat.

Publicly listed Bitcoin miners disclosed this week that they are selling mined BTC to fund operations and AI expansion, with some retiring ASIC fleets in favor of GPUs. On April 30, MARA said it will buy Long Ridge Energy & Power for $1.5 billion, while IREN outlined a five-year $3.4 billion AI cloud agreement with NVIDIA using Blackwell GPUs. Smaller miners including DMG, Bitdeer, and Cango also reported BTC sales and new AI-focused subsidiaries or shifts.

Kalshi launched a U.S.-only promotion tied to the 2026 NCAA Men's Basketball Tournament, offering $1B for a "perfect bracket" that correctly calls all 63 games, with entries due before the first tip-off on March 19, 2026. Separately on March 19, 2026, MLB named Polymarket its Exclusive Prediction Market Exchange Partner and said it signed an MOU with the CFTC aimed at safeguarding the integrity of baseball-related prediction markets.

On March 6 2026, Pakistan's parliament approved the Virtual Assets Act 2026, creating the Pakistan Virtual Assets Regulatory Authority (PVARA) to oversee the country's digital asset sector. The law authorizes PVARA to license exchanges, custodians, wallet providers, token issuers, and lending platforms, with unlicensed activity facing fines up to PKR 50 million, separate penalties for unauthorized token offerings, and possible prison terms. The framework embeds AML and Sharia compliance requirements, follows earlier NOCs for major exchanges and a tokenization MOU with Binance, and is expected to influence regional regulators such as India.

On March 6, 2026, HypurrFi, a lending market on Hyperliquid's HyperEVM, disclosed a rounding vulnerability in Aave V3 core code prior to version 3.5 and paused its XAUTO and UBTC markets to protect user funds. The disclosure followed Aave Labs' V4 security report covering March 2025 to February 2026, which cited no critical or high-severity issues after 345 review days and multiple audits, even as $26.5 billion is deposited in the protocol. At the same time, BDG Labs and Aave Chain Initiative are preparing to exit Aave over governance concerns tied to the V4 migration and a $51 million funding proposal for Aave Labs.