← Back to Archive

Institutional Intelligence

Weekly Roundup

Crypto Weekly Roundup: December 6-12, 2025 | Issue #25-50

Regulation & Policy

Do Kwon Sentenced to 15 Years Over $40B Terra Collapse

US federal court sentenced TerraUSD creator Do Kwon to 15 years in prison over the algorithmic stablecoin collapse that wiped out approximately $40 billion in value. The sentencing establishes concrete criminal precedent for algorithmic stablecoin design failures and disclosure violations. For background on the Terra collapse, see our analysis: The $40B Collapse That Changed Crypto Forever.

What it means: First major criminal outcome from a systemic stablecoin collapse. The precedent sets baseline expectations for founder liability when stablecoin mechanisms fail catastrophically. For compliance officers, this crystallizes disclosure obligations around algorithmic designs that claim stability without full reserves. For treasury managers evaluating stablecoin counterparties, the sentence reinforces the distinction between reserve-backed tokens (meeting GENIUS Act standards) and algorithmic mechanisms vulnerable to death spirals. Legal teams should treat algorithmic stablecoin exposure as carrying explicit criminal liability risk beyond civil enforcement. Coming soon: a comprehensive review of this case and its broader implications for the crypto industry.

US Banks Cleared to Act as Crypto Intermediaries

The Office of the Comptroller of the Currency confirmed that national banks may execute "riskless principal" crypto transactions for clients, effectively allowing banks to sit in the middle of client crypto trades without triggering legacy prohibitions. The guidance reverses restrictive Biden-era interpretations and provides regulatory clarity while raising systemic risk questions.

What it means: Banks can now intermediate crypto trades for clients without being deemed to hold impermissible inventory positions. This removes a major compliance barrier that kept traditional banks on the sidelines of institutional crypto trading. However, "riskless principal" is a narrow carve-out: banks must match client orders without taking directional exposure, similar to agency FX trading. For wealth advisors, this opens pathways to offer crypto access through existing banking relationships rather than directing clients to unregulated exchanges. For bank risk committees, the OCC guidance requires updated risk frameworks around settlement risk, custody arrangements, and operational controls for crypto intermediation. The move increases TradFi-crypto linkages, which means regulators will scrutinize how banks manage settlement failures, counterparty exposures, and concentration risk in crypto markets.

CFTC Approves Bitcoin, Ether, Stablecoins as Derivatives Collateral

The Commodity Futures Trading Commission formally approved the use of bitcoin, ether, and certain stablecoins as eligible margin collateral in US regulated derivatives markets. The decision marks historic regulatory recognition of digital assets in core market infrastructure.

What it means: Crypto assets now function as collateral in the same regulatory framework as treasuries, equities, and commodities. This moves digital assets from peripheral speculation into mainstream institutional plumbing. For broker-dealers, this requires updated risk models to calculate haircuts and concentration limits for crypto collateral. For clearinghouses, it creates operational obligations around custody, valuation, and liquidation procedures for posted digital assets. Treasury managers at firms using derivatives for hedging now face decisions about whether to deploy crypto holdings as margin rather than cash or bonds, an optimization problem that turns on volatility assumptions, financing costs, and regulatory capital treatment. The approval also signals CFTC positioning itself as front-line federal regulator for digital commodities, creating pressure on Congress to formalize the SEC-CFTC jurisdictional split.

US Congress Hits Crypto Legislation Roadblock

Frustrated US lawmakers publicly acknowledged that comprehensive market structure legislation remains stalled, with some arguing "no deal is better than a bad deal" as divisions persist over DeFi treatment, custody rules, and the securities-commodities boundary. The impasse leaves SEC and CFTC to continue agency-driven rulemaking rather than statutory clarity.

What it means: Statutory clarity on whether tokens are securities or commodities remains elusive heading into 2026. Firms continue navigating overlapping SEC and CFTC jurisdiction without unified federal framework. The practical implication is that market structure evolves through enforcement actions, no-action letters, and piecemeal guidance rather than comprehensive legislation. For compliance officers, this means regulatory strategy must remain adaptive, relying on agency statements and enforcement precedents rather than stable statutory rules. For issuers considering token launches, the lack of clear registration pathways forces continued reliance on Regulation D private placements or offshore structures. The stalemate also means the definition of "exchange" versus "broker-dealer" for crypto platforms remains contested territory, with platforms facing unpredictable enforcement risk based on which regulator asserts jurisdiction first.

US Pushes Anti-CBDC Legislation

Republican lawmakers advanced "Anti-CBDC Surveillance State" provisions seeking to bar the Federal Reserve from testing or issuing any form of retail central bank digital currency. Similar language was debated but not fully embedded in the latest defense authorization bill.

What it means: US strategic direction is now clear: regulated private-sector dollar stablecoins under the GENIUS framework rather than Fed-issued digital currency. This shapes institutional treasury and payments strategies around tokenized commercial bank money, not CBDC infrastructure. For treasury managers, this confirms that dollar digitization will flow through regulated stablecoin issuers (banks and licensed non-banks) rather than direct Fed accounts. The anti-CBDC stance also positions US policy in direct contrast to China's e-CNY and the ECB's digital euro work, framing the geopolitical competition as private innovation versus state-controlled money. Compliance teams should prepare for a stablecoin-centric payments architecture with reserve requirements, audit obligations, and interoperability standards set by banking regulators rather than the Fed's payment system rules.

Cayman Islands Advances to VASP Licensing Phase 2

The Cayman Islands activated Phase 2 of its Virtual Asset Service Provider regime, expanding licensing obligations for custodians and trading platforms with enhanced prudential requirements, governance standards, and formalized waiver conditions. Phase 3 is expected to deepen these requirements further.

What it means: One of crypto's most important offshore hubs is tightening its regulatory perimeter. Legacy "light touch" supervision is ending. Fund administrators, offshore exchanges, and institutional structures using Cayman entities now face escalating compliance obligations including capital adequacy, fit-and-proper tests for officers, and enhanced AML controls. For hedge funds and family offices using Cayman structures to hold digital assets, this creates new operational costs and potential restructuring requirements if current service providers cannot meet Phase 2 standards. The phased approach also signals that Cayman is calibrating to match EU MiCA and US federal frameworks, positioning itself as a compliant offshore hub rather than a regulatory escape valve. Expect some firms to migrate to jurisdictions with clearer long-term regimes (Singapore, Abu Dhabi, Switzerland) rather than navigate Cayman's evolving multi-phase system.

UK FCA Flags Sterling Stablecoins as 2026 Priority

The Financial Conduct Authority identified sterling-denominated stablecoins and their payment use cases as a supervisory and policy priority for 2026, signaling concrete work on issuance standards, custody requirements, and payment-system oversight for GBP-denominated tokens.

What it means: UK is moving beyond generic MiCA-style frameworks toward currency-specific stablecoin regimes. For wealth advisors and treasury managers in UK institutions, anticipate new rules by mid-2026 covering who can issue GBP stablecoins, what reserves are required, how redemptions must be honored, and how these tokens integrate with UK payment systems. The FCA's focus on payment use cases (rather than just investment or trading) signals that sterling stablecoins will be regulated as e-money or payment instruments, not securities, creating different compliance obligations than dollar stablecoins under US GENIUS Act. This also positions sterling stablecoins as potential challengers to USDT/USDC dominance in certain corridors, particularly UK-EU and UK-Commonwealth trade where currency hedging costs favor native-currency tokens over dollar-denominated alternatives.

Poland Parliament Upholds Crypto Veto, Delays MiCA Implementation

Polish parliament upheld a presidential veto blocking domestic implementation of EU MiCA legislation, with right-wing parties arguing the proposed rules were excessively strict and would drive crypto businesses abroad. The veto delays full MiCA compliance domestically.

What it means: EU-level regulation still depends on national political dynamics and calibration choices. MiCA is not uniformly implemented across all member states despite single rulebook aspirations. For firms operating EU-wide, this creates a jurisdictional patchwork: some states enforce the full MiCA regime while others delay or modify implementation. The practical implication is that regulatory arbitrage within the EU remains possible, with Poland potentially becoming a temporary haven for activities that face stricter oversight in France, Germany, or Netherlands. However, this advantage is likely short-term, as the EU will pressure Poland toward compliance or face internal market friction. Compliance officers should not treat EU MiCA as a done deal. Monitor individual member state implementation timelines and prepare for divergent national rules layered on top of the EU baseline.

Italy Orders In-Depth Crypto Risk Review

Italy's Economy Ministry initiated a comprehensive assessment of cryptocurrency-related risks, focusing on money-laundering vulnerabilities, consumer protection gaps, and potential spillovers to financial stability. The review is separate from and additional to MiCA implementation.

What it means: Some EU states are treating MiCA as a baseline, not a ceiling. Expect additional national-level measures targeting AML, custody standards, and systemic risk beyond EU minimum requirements. For firms operating in Italy, this signals potential for stricter-than-MiCA rules on customer due diligence, transaction monitoring, and capital requirements. The Ministry's explicit focus on "spillovers to financial stability" suggests concern about crypto exposures in Italian banks and payment institutions, potentially leading to limits on bank holdings of digital assets or additional capital charges for crypto-related activities. This national-layer approach undermines the single passport benefit of MiCA, as firms must maintain country-specific compliance programs rather than relying on one EU-wide regime.

SEC Closes Ondo Finance Investigation Without Charges

The Securities and Exchange Commission ended its investigation into real-world asset tokenization platform Ondo Finance without bringing charges, providing one of the clearest US regulatory approvals for large-scale tokenization of treasuries and institutional securities.

What it means: Major reduction in regulatory uncertainty for RWA tokenization platforms and institutions considering tokenized treasury products. The SEC closure signals that properly structured tokenization of treasuries, corporate debt, and other traditional securities can proceed under existing securities law frameworks without novel enforcement risk. For treasury managers evaluating tokenized money market funds or treasury products, this removes a key compliance question mark: these products are not experimental regulatory grey zones but rather digital delivery of familiar instruments. However, the "properly structured" caveat matters. Ondo operates with clear legal opinions, registered transfer agents, and traditional custody arrangements adapted for blockchain rails. Firms attempting shortcuts or bypassing securities law guardrails should not interpret this outcome as blanket approval. The closure also strengthens the case for tokenization as capital markets infrastructure rather than speculative crypto activity, which helps institutional adoption by framing these products within familiar risk and compliance frameworks.

China Issues Sweeping Ban on RWA Tokenization

Chinese financial associations issued explicit warnings classifying real-world asset tokenization and all virtual-currency activity as high-risk and unapproved, reinforcing the government's hard-line stance even as global RWA volumes exceed multi-billion dollar scale.

What it means: China and the West are moving in opposite directions on tokenization policy. US and EU regulators frame tokenization as next-generation capital markets infrastructure; China frames it as systemic risk and financial speculation. For institutions with China exposure, this creates irreconcilable compliance obligations: tokenization strategies that work in New York or London are prohibited in Shanghai and Hong Kong. The ban also closes off mainland China as a market for tokenized fund products, cross-border tokenized settlements, and blockchain-based trade finance, even as these products gain traction elsewhere in Asia (Singapore, Japan, South Korea). Multinational firms must maintain parallel infrastructure: traditional settlement and custody for China operations, tokenized rails for other jurisdictions. The divergence also has strategic implications. China's rejection of tokenization may cede technological and efficiency advantages to Western financial centers, or it may prove prescient if tokenization introduces unforeseen systemic risks that regulators in permissive jurisdictions underestimated.

Security & Custody Risks

North Korea-Linked Actors Steal $2B+ in Crypto in 2025

Threat intelligence reporting confirms that North Korea-linked groups have stolen more than $2 billion in cryptocurrency year-to-date through large-scale exchange attacks and protocol exploits. The thefts anchor ongoing sanctions enforcement efforts and drive escalating security expectations for exchanges and custodians.

What it means: State-level threat actors are targeting institutional crypto infrastructure as a primary funding mechanism for sanctioned regimes. This elevates compliance obligations far beyond standard cybersecurity: exchanges and custodians now face explicit expectations around sanctions screening, transaction monitoring, and counterparty due diligence specifically designed to detect state-sponsored theft and laundering. For institutional investors, this creates concentration risk. Funds held on exchanges that become North Korean targets face seizure risk, reputational damage, and potential secondary sanctions exposure. The $2 billion figure also demonstrates that crypto remains one of the highest-value targets for state-sponsored cybercrime, which justifies the aggressive security audits, insurance requirements, and operational controls that sophisticated custodians now demand. Compliance teams should treat North Korean cyber threat as a permanent feature of the digital asset landscape, not a temporary risk, and ensure monitoring systems can detect DPRK-linked addresses and mixing patterns.

Yearn Finance Loses $9M in Custom Contract Exploit

Attackers exploited a custom yETH stableswap contract to mint effectively unlimited tokens and drain approximately 1,000 ETH (roughly $9 million) before routing funds through Tornado Cash. Yearn's core V2 and V3 vaults were reported unaffected, isolating the exploit to experimental contract logic.

What it means: Custom oracle implementations and math libraries remain critical attack surfaces even in well-established protocols. DeFi custody and treasury exposure requires rigorous contract review beyond standard audits, particularly for experimental or custom logic deployed in side pools or newer products. The exploit demonstrates how rounding issues and batch operations can be weaponized in cross-chain or multi-asset setups, suggesting that the DeFi security challenge is shifting from "is the core protocol safe" to "are the peripheral contracts and composability points safe." For institutional investors with DeFi exposure, this reinforces the need for granular position monitoring: not just protocol-level risk assessment but contract-by-contract analysis of which specific pools or vaults hold assets. The fact that attackers routed through Tornado Cash also highlights the continued effectiveness of mixing protocols for obscuring stolen funds, which complicates recovery efforts and insurance claims.

$2.55B Stolen in Crypto Hacks Year-to-Date

Year-to-date losses from cryptocurrency hacks and exploits have reached $2.55 billion, with off-chain and account-compromise vectors now representing the majority of value lost rather than smart contract vulnerabilities. Security focus is shifting toward key management, access control, and monitoring.

What it means: The attack surface is migrating from code to keys. Smart contract audits and formal verification remain important but are no longer sufficient. The bigger risks are now compromised private keys, phished multisig signers, and insider threats with elevated access. For custody operations, this demands investment in multi-party computation, hardware security modules, and behavioral monitoring for privileged accounts. The shift also changes insurance underwriting: policies focused on smart contract bugs are increasingly mismatched to actual loss patterns, while coverage for social engineering, credential theft, and insider compromise becomes more valuable. Treasury managers should audit not just the security of the protocols they use but the operational security of the teams managing those protocols. Are multisig signers using hardware wallets? Are admin keys held by pseudonymous developers or known, KYC'd entities? Are there time-locks on critical parameter changes? The $2.55 billion figure shows that despite years of security hardening, crypto remains a higher-risk asset class from an operational security perspective than traditional financial instruments.

Institutional Infrastructure

Binance Secures Landmark Abu Dhabi License Package

Binance obtained comprehensive regulatory approvals from Abu Dhabi's Financial Services Regulatory Authority covering exchange, clearing, custody, and broker-dealer activities under a new three-pillar supervisory structure. The exchange plans to commence fully regulated operations in early January 2026, positioning its ADGM entities among the most tightly supervised large-scale digital asset platforms globally.

What it means: Binance is now operating under the tightest prudential supervision of any major crypto exchange globally. The three-pillar structure separates trading venue, clearing, and custody into distinct, supervised lines of business, echoing post-2008 reforms in traditional securities markets. For regional banks and asset managers, this creates a clearer pathway to on-ramp institutional flows through a venue that maps to existing risk and compliance frameworks. The ADGM regime also establishes a potential template for other jurisdictions seeking to regulate mega-scale exchanges without banning them: comprehensive licensing with functional separation rather than outright prohibition. However, the January 2026 operational start means Binance faces intensive build-out requirements for segregated systems, separate governance, and distinct capital adequacy across each pillar. Compliance officers should monitor whether the ADGM structure becomes a global standard (forcing other exchanges to adopt similar separations) or remains a regional model that coexists with lighter-touch regimes elsewhere.

Real Finance Raises $29M for RWA Infrastructure

Real Finance closed a $29 million funding round to build institutional-grade infrastructure for real-world asset tokenization, targeting approximately $500 million in tokenized assets in year one. The platform focuses on compliance, settlement, and connectivity between traditional finance and DeFi protocols.

What it means: Capital is flowing to the infrastructure layer between traditional finance and on-chain rails, rather than to native DeFi protocols or retail trading platforms. This signals institutional demand for compliant tokenization platforms with proper custody, settlement interoperability, and audit trails that satisfy traditional finance requirements. For asset managers and corporate treasurers, platforms like Real Finance solve the "last mile" problem: how to move traditional securities onto blockchain rails without breaking existing compliance, custody, and reporting obligations. The $500 million year-one target is modest relative to total institutional AUM but represents proof-of-concept scale for tokenized private credit, real estate, and structured products. Treasury managers evaluating tokenization should assess whether to build proprietary infrastructure, partner with platforms like Real Finance, or wait for incumbents (BNY Mellon, State Street, Northern Trust) to deliver similar capabilities. The funding round also suggests venture investors believe tokenization is a 2026-2027 revenue story rather than speculative long-term bet.

Figure Extends Yielding Stablecoin to Solana

What it means: Regulated stablecoin issuers are pursuing multi-chain strategies rather than single-chain exclusivity. For treasury managers evaluating stablecoin exposure, this creates new questions: Does multi-chain deployment increase operational risk through additional smart contract attack surfaces? Or does it increase resilience through diversified infrastructure? The Solana expansion also reflects a strategic bet on high-throughput chains for institutional settlement. Figure's credit products require fast, cheap transactions, which Ethereum L1 cannot reliably deliver. However, Solana's outage history (multiple network halts in 2022-2023) remains a concern for institutions requiring continuous availability. The YLDS product itself represents a newer stablecoin category: tokens that pass through yield from underlying treasuries or money market funds rather than maintaining static 1:1 pegs. This creates different regulatory and accounting treatment than traditional stablecoins. Compliance teams should evaluate whether yielding stablecoins are securities (likely under Howey), e-money, or deposit instruments depending on structure.

tZERO Partners with Polymath for Regulated RWA Tokenization

Security token platform tZERO announced a partnership with Polymath to deliver regulated real-world asset tokenization on the Polymesh blockchain, bolstering the institutional security token stack and providing issuers with an additional compliant venue for tokenized equities and debt.

What it means: The institutional security token stack is consolidating around a handful of compliant platforms. Polymesh, Polymath, and tZERO together provide end-to-end infrastructure for issuers wanting to tokenize equities, debt, or fund interests while maintaining securities law compliance. For capital markets teams evaluating tokenization versus traditional issuance, the partnership creates an alternative to both pure public blockchains (which lack built-in compliance controls) and permissioned bank consortia (which lack interoperability and liquidity). The Polymesh blockchain specifically embeds identity, compliance, and confidentiality at the protocol layer, solving the "public blockchain meets securities law" problem through architecture rather than off-chain controls. However, the platform's relative obscurity compared to Ethereum raises questions about liquidity, ecosystem support, and long-term viability. Issuers should weigh the compliance benefits of purpose-built security token infrastructure against the network effects and developer talent concentrated on general-purpose chains.

Stablecoins & Payments

ECB Official: Central Banks Cannot Remain Passive as Payments Digitize

A senior European Central Bank official delivered a speech on "the transformation of money," arguing that central banks cannot remain passive as payments systems digitize and positioning both a potential digital euro and enhanced wholesale settlement rails as necessary to preserve monetary sovereignty.

What it means: The ECB is framing digital money as an existential policy question, not a peripheral fintech experiment. For European banks, this signals that digital euro infrastructure will become a mandatory consideration in treasury operations, cross-border payments architecture, and retail banking strategies. The reference to "wholesale settlement rails" suggests the ECB is prioritizing tokenized interbank settlement before retail CBDC, matching the approach taken by central banks in Singapore, Switzerland, and Japan. Treasury managers at European institutions should prepare for two parallel digital money tracks: private stablecoins regulated under MiCA and a wholesale digital euro for interbank settlement. The "monetary sovereignty" framing also reveals geopolitical concerns. The ECB views dollar stablecoin dominance (USDT, USDC) as a threat to euro area monetary policy transmission, much as it previously viewed dollarization in emerging markets. The practical implication is that MiCA's strict stablecoin rules and the eventual digital euro are both tools to ensure the euro remains relevant in digitized payment flows.

OCC, CFTC, SEC Policy Coordination Accelerates

Joint initiatives between the Office of the Comptroller of the Currency, Commodity Futures Trading Commission, and Securities and Exchange Commission on harmonized crypto oversight and international coordination signal a pivot from enforcement-first approaches toward more structured regulatory regimes.

What it means: US agencies are aligning rulebooks to reduce jurisdictional uncertainty and compliance fragmentation. Cross-border policy work is accelerating with UK, IRS, and international partners. For firms operating across multiple jurisdictions, this reduces the need to maintain entirely separate compliance programs for each regulator, though full harmonization remains distant. The coordination also suggests US regulators recognize that unilateral enforcement actions without clear rules were driving activity offshore rather than improving investor protection. Compliance officers should expect more joint rulemakings, interagency guidance, and coordinated examinations rather than conflicting mandates from banking, securities, and commodities regulators. However, coordination is not the same as consolidation. The US will not create a single crypto regulator, so firms still navigate overlapping jurisdictions and must determine which agency has primary authority for each product and activity.

If you read this far, you're already ahead of most professionals.

Join 1,000+ readers who get institutional-grade insights - clear, concise, and verifiable.

No spam. Unsubscribe anytime.

If you found this useful, please share it.

Questions or feedback? Contact us

MCMS Brief • Classification: Public • Sector: Digital Assets • Region: Global

Related Reading

Disclaimer: This content is for educational and informational purposes only. It is NOT financial, investment, or legal advice. Cryptocurrency investments carry significant risk. Always consult qualified professionals before making any investment decisions. Make Crypto Make Sense assumes no liability for any financial losses resulting from the use of this information. Full Terms