Money moved forward and got hit from behind on the same day. A major broker widened its crypto door in a new country, a stablecoin issuer tore down another wall between chains, and two separate incidents reminded everyone that infrastructure and keys still carry real risk.
- Robinhood switches on zero-fee crypto trading in the UK, wrapped in an AI widget that explains price moves in plain language
- Circle puts native USDC directly on OKX’s X Layer, cutting the bridge out of the picture
- BTCPay Server warns that a critical flaw in its merchant payment software is being actively exploited
- A year and a half after Bybit’s $1.5 billion hack, new figures show just how much of it will never come back
Adoption keeps expanding on one side of the ledger while security keeps testing it on the other. Neither cancels the other out. They are both just what it looks like when crypto starts carrying real money at scale.
Robinhood brings crypto trading to the UK inside an AI-powered app
Source: CoinDesk
Robinhood launched zero-fee crypto trading in the UK this week, giving British users access to more than 50 digital assets including Bitcoin, Ethereum and XRP alongside its existing stocks, ISAs and options products. Crypto is sourced through Bitstamp, which Robinhood acquired in 2025.
The launch ships with Robinhood Cortex, an AI widget that reads breaking news and technical indicators to explain price swings in plain language. Jordan Sinclair, president of Robinhood UK, said “a new wave of UK investors sees digital assets as an important part of a diversified portfolio.”
Zypto take: Bundling crypto next to stocks and ISAs is the tell here. It stops treating digital assets as a separate hobby and starts treating them as just another line in a portfolio, which is exactly how they behave once enough people hold them.
An AI widget that explains a price move is still explaining, not custody. Owning XRP or Bitcoin on your own terms, across 20+ blockchains, in Zypto App, is a different thing than holding it in someone else’s brokerage account, and that distinction matters more as more people arrive.
Circle puts native USDC on OKX’s X Layer
Source: Cointelegraph
Circle deployed native USDC and its Cross-Chain Transfer Protocol on X Layer, the Ethereum layer-2 network operated by OKX. CCTP burns USDC on the sending chain and mints an equivalent amount on the receiving chain, so value moves without a wrapped token or a third-party bridge holding it in between.
The move extends the world’s second-largest stablecoin into an exchange ecosystem OKX says serves more than 120 million registered users, with Circle Mint giving eligible businesses direct on and off ramp access.
Zypto take: Every bridge that gets cut out of a stablecoin transfer is one fewer place for something to go wrong. Burn and mint beats wrap and hope, and that is true whether the flow is a DeFi position or someone’s paycheck.
Chasing a stablecoin across the chain it happens to live on has been the actual overhead of using stablecoins day to day, and it is the exact gap Zypto’s multichain wallet closes across the 20+ networks it already covers.
BTCPay Server warns of a critical flaw under active attack
Source: The Block
BTCPay Server, the free and open-source Bitcoin payment processor thousands of merchants self-host to accept Bitcoin and Lightning payments, disclosed a critical vulnerability being actively exploited in the wild. The project urged an immediate update to version 2.4.2.
For merchants unable to patch right away, the guidance was blunt: turn the server off until the update is applied. How many operators were exploited, or how much was lost, was not yet known at the time of the warning.
Zypto take: Self-hosting a payment processor means the operator owns every patch cycle personally, and a flaw like this lands the moment they fall behind. That tradeoff is real and it is not unique to crypto, but it is sharper here because the funds move the instant the exploit does.
Merchants who want to accept crypto without running their own server carry that operational risk elsewhere. Zypto Pay settles into a managed multichain vault specifically so a business can accept payments without also becoming its own security team.
A $1.5 billion hack shows how irreversible stolen crypto really is
Source: CryptoSlate
Eighteen months after Lazarus Group drained $1.46 billion from Bybit, new figures show the scale of what will never be recovered. Only about 5.9% of the total was clawed back early through industry coordination, and Chainalysis research cited in the report found that stolen funds typically clear the main laundering pipeline within 45 days, far faster than any court can move.
Bybit won a preliminary injunction roughly 532 days after the theft. It blocks named defendants from moving identified assets, but by that point it protects only whatever remained trapped by compliance systems, a fraction of the original haul.
Zypto take: A court order arriving a year and a half late is not really recovery, it is bookkeeping on a loss that already happened. The laundering window closes in weeks and the legal system moves in years, and no lawsuit fixes that gap.
The honest lesson is upstream of any hack: assets that never leave cold storage are never in that pipeline to begin with. That is the specific job the Vault Key Card does, keeping the keys to a Zypto App wallet offline until a tap authorizes a transaction.
Key Takeaways
- Adoption and security are not opposing stories today, they are the same story from two angles: crypto is carrying enough real money that both mainstream brokers and organized hackers now show up for it.
- Cutting bridges out of stablecoin transfers (Circle on X Layer) and cutting servers out of the loss window (self custody generally) share the same logic: fewer intermediate points, fewer ways to lose the funds in between.
- Merchants accepting crypto face a genuine choice between running their own infrastructure and its patch cycle, or handing that operational risk to a managed gateway.
- The Bybit numbers are the clearest evidence yet that legal recovery cannot outrun laundering speed, which makes prevention through cold storage worth more than any court order after the fact.
- None of this should read as a reason to hesitate. It is a reason to be deliberate about where the keys actually sit.
Related topics
