Stake DAO's vsdCRV on Arbitrum was exploited after a suspected deployer-key compromise, enabling the minting of 5,446,744,073,709 tokens and swaps into about 43.78 ETH. The incident prompted Stake DAO, Curve, and Beefy Finance to pause or warn on affected products, underscoring how automated vaults can conceal dependencies like cross-chain messaging, wrapper accounting, and key control.

South Korean prosecutors say they have arrested and indicted five people in what they describe as the country’s first criminal case targeting a rug pull conducted on a decentralized exchange. Authorities allege the CATFI token scheme on a Solana-based DEX left 256 investors with about 900 million won (roughly $600,000) in losses, while organizers took around 400 million won in illicit profits.

On May 27, 2026, the CFTC said it joined Gemini Trust Company LLC in a joint motion in SDNY seeking relief from a January 2025 consent order tied to a case the agency filed in June 2022. The regulator said an internal review led it to conclude the original complaint "should not have been filed" under current enforcement standards, and asked the court to vacate the order's prospective provisions.

On May 27, 2026, the CFTC filed a civil enforcement action against Google software engineer Michele Spagnuolo, alleging he used nonpublic Google search-trend data to trade Polymarket event contracts. The complaint says he earned about $1.2 million and that the agency is seeking restitution, disgorgement, monetary penalties, bans, and a permanent injunction. The filing also describes how Polymarket runs on Polygon and settles outcomes via the UMA Oracle, with winning positions redeemable for USDC.e.

On May 26, the U.K. announced a sanctions package aimed at crypto-linked routes allegedly used to move funds into Russia, with measures taking effect immediately. The list includes 18 named exchanges, payment providers, banks, companies, and individuals, and separately highlights targets tied to the A7 network. The action also increases scrutiny on stablecoin infrastructure, including references to A7A5 and USDKG and their related entities.

Grayscale Research said in a May 27 report that Hyperliquid is an example of DeFi expanding into exchange-scale trading, centered on its perpetual futures venue, its custom layer 1, and the HYPE token. The report highlighted about $1.16 billion routed into HYPE buybacks and pointed to market attention around ETF debut interest, large-holder activity, and trading growth as factors shaping how the token is priced.

SoFi says it has introduced its SoFiUSD stablecoin directly inside its banking app, positioning itself as the first U.S. national bank to bring a stablecoin into a consumer banking platform. Users can buy, sell, hold, and convert SoFiUSD in-app, with initial support on Ethereum and Solana and a broader rollout planned over the coming weeks as app updates arrive.

Ondo, JPMorgan, Mastercard and Ripple ran a live pilot to settle tokenized U.S. Treasuries on May 6, 2026. The process used XRP Ledger and was completed in under 5 seconds, outside standard banking hours.