Weekly Digital Assets Regulatory Brief: Week 24-2026

Implications: This is the GENIUS ActUS law (July 2025) requiring payment stablecoin issuers to be regulated entities with 1:1 reserve backing moving from principle to plumbing. Where last week's news (covered in our Week 23 brief) was the OCC and FDIC describing the build-out to Congress, this is the concrete supervisory apparatus: a weekly reserve report is a notably high-frequency obligation that signals the OCC intends near-real-time visibility into reserve composition and redemption activity, not just quarterly snapshots. Prospective and existing stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold issuers should treat reserve data pipelines, attestation workflows and weekly reporting capacity as a build requirement now, and should file comments on the operational burden of weekly PS-01 reporting during the 60-day window.

Implications: New York is signalling that its nation-leading BitLicense-era stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold regime will be rebuilt to interlock with, rather than compete against, the federal framework - the same 18 January 2027 operative date is the tell. The per-custodian reserve-concentration limits and monthly CEO/CFO certification go beyond the OCC's reporting forms and beyond the 2022 NYDFS guidance, meaning issuers operating under both regimes will face a stacked compliance surface: federal reporting (OCC) plus state-level reserve-diversification and governance attestation (NYDFS). Issuers should map the union of federal and New York requirements now and use both comment windows; the redemption-within-two-business-days standard in particular should be stress-tested against operational capacity.

Implications: Tax is the missing leg of the US digital-asset framework, and this is the first serious legislative movement on it. The miningThe process of verifying and adding transactions to a blockchain, often rewarded with cryptocurrency/staking-on-disposal proposal would resolve a long-standing cash-flow and valuation problem (tax on receipt of illiquid rewards), and a de minimis exemption would materially change the practicality of using crypto for payments. For institutions, the signal is that the US tax treatment that has sat on the 2014 IRS property classification is finally in play - but as discussion drafts, not law. Tax, treasury and product teams should track which drafts gain bipartisan traction rather than plan around any single proposal; the direction of travel (deferral, de minimis relief, clearer stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold treatment) matters more right now than the specific text.

Implications: Prediction markets and event contracts have become a fast-growing, crypto-adjacent venue category (Kalshi, Polymarket and peers), and the CFTCU.S. federal agency regulating derivatives markets including crypto commodity futures is moving from a broad concept notice to a concrete listing-and-review framework. Defining the boundary between permitted event contracts and prohibited "gaming" or unlawful-activity contracts on a contractSelf-executing code on a blockchain that automates transactions-by-contract basis gives the Commission a gatekeeping mechanism over which markets can list - a meaningful constraint for platforms whose product pipeline depends on novel event contracts. Operators and market participants should engage the comment process and design listing roadmaps against the Appendix F public-interest factors rather than assume continued open-ended listing.

Implications: This is the second step of a deliberate, staged UK normalisation of retail crypto exposure: first lifting the direct-purchase ban (October 2025), now setting the terms on which mainstream funds can holdA misspelling of 'hold,' used to mean holding onto cryptocurrency for long-term gains crypto-linked instruments. The 10% cap is a classic concentration-risk guardrail that lets fund managers add crypto ETN exposure without tipping a product into the restricted mass-market category. For UK fund managers, this opens a regulated route to crypto exposure inside conventional retail products while bounding it; product and risk teams evaluating crypto ETN allocations should design to the 10% ceiling and respond to the consultation by 13 July, particularly on how the cap interacts with the restricted-mass-market classification.

Implications: Bahrain has historically used a fast, central-bank-led approach to position itself as a Gulf fintech hub, and a fully central-bank-supervised stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold licence (rather than a free-zone or capital-markets-authority registration) is a distinctive model in the region. The combination of central-bank oversight, a profit-sharing structure and Sharia compliance is aimed squarely at GCC and Islamic-finance demand that USD-pegged incumbents do not serve. For institutions, the practical signal is that the GCC stablecoin map now has another supervised issuer regime alongside the UAE's; firms evaluating regional stablecoin partners should treat Bahrain's CBB regime as a distinct, central-bank-grade option.

Implications: Greece is a useful data point on the second wave of EU implementation: with MiCAThe EU's comprehensive regulatory framework for crypto-assets, establishing harmonized rules for issuers and service providers across all 27 Member States setting the conduct and licensing perimeter, member states are now filling in the tax treatment that MiCA does not harmonise. A 15% flat rate with a small de minimis exemption and five-year loss carry-forward is a relatively investor-friendly design compared with treating gains as ordinary income. For institutions with Greek-resident clients or operations, the practical takeaway is to watch for the parliamentary text and effective date; more broadly, the signal is that crypto taxation is fragmenting across the EU even as conduct rules converge under MiCA, so cross-border tax mapping remains a per-member-state exercise.

Implications: Nigeria is one of the world's largest grassroots crypto-adoption markets, and a statutory VASPEntity providing services related to virtual assets, subject to AML regulations framework would move it from SECU.S. federal agency regulating securities markets and protecting investors rule-making and banking-circular improvisation toward a primary-legislation regime. The explicit emphasis on harmonising with the Investments and Securities Act and BOFIA matters: it signals lawmakers want to avoid the jurisdictional friction between securities and banking regulators that has characterised Nigerian crypto oversight. This is an incremental legislative step (second reading, not passage), so institutions should treat it as a forward indicator rather than an operative change; the committee report in roughly four weeks is the next milestone to watch for substantive licensing and capital provisions.

Implications: Although framed as cross-sector technology-risk rules rather than a crypto-specific measure, the consultation matters for digital-asset firms because MAS applies its TRM expectations to crypto licensees with the same rigour as to banks. Tightened TRM notices typically raise the bar on incident reporting, third-party and cloud risk, and resilience testing - all areas where crypto operators face heightened operational and cyber exposure. Crypto and payment-tokenA digital asset built on an existing blockchain, often representing utility or value licensees in Singapore should review the proposed amendments for changes to outsourcing, incident-notification timelines and resilience standards, and respond during the consultation; this fits MAS's pattern of holding digital-asset firms to mainstream financial-institution operational standards.

Implications: DORA applies to crypto-asset service providers authorised under MiCAThe EU's comprehensive regulatory framework for crypto-assets, establishing harmonized rules for issuers and service providers across all 27 Member States, so this first incident-reporting baseline is directly relevant to digital-asset firms operating in the EU. Two findings stand out for institutions: the large absolute incident count (3,383) shows DORA's reporting machinery is now generating real supervisory data, and the cross-border share (roughly one-third) underlines that ICT incidents at a CASPEntity providing crypto services under EU MiCA requiring authorization and regulatory compliance or its third-party providers can trigger multi-jurisdiction reporting and supervisory attention. CASPs should treat DORA incident classification, third-party ICT risk, and resilience testing as live supervisory priorities rather than a compliance formality, and benchmark their own incident thresholds against the ESAs' emerging expectations.

Implications: Liechtenstein was an early mover on blockchainA decentralized, digital ledger of transactions maintained across multiple computers law (its 2020 TVTG / Blockchain Act), and its first MiCAThe EU's comprehensive regulatory framework for crypto-assets, establishing harmonized rules for issuers and service providers across all 27 Member States CASPEntity providing crypto services under EU MiCA requiring authorization and regulatory compliance authorisation signals the transition from that national framework into the harmonised EU regime. With an EEA CASP licence passportable across the bloc, small but specialised jurisdictions like Liechtenstein remain viable MiCA-authorisation venues. For firms still choosing where to seek MiCA authorisation before the 1 July transitional cliff, the data point is that smaller FMAs are now actually granting licences, not just accepting applications - a relevant consideration for applicants weighing queue times across national competent authorities.

Implications: A symposium is a soft-law signal rather than a binding act, but the FSB is the venue where the architecture of cross-border digital-asset supervision is negotiated before it lands in national rulebooks. The throughline with this week's harder developments is consistent: the EU is operationalising jurisdiction-level reach, the US is wiring stablecoinA cryptocurrency pegged to a stable asset, such as USD or gold reporting, and the FSB is working the international-coordination layer that determines whether those national regimes interoperate or fragment. Institutions with cross-border digital-asset operations should track FSB outputs as a leading indicator of where supervisory expectations (especially on stablecoins and offshore activity) are heading.