A wallet can be sealed. A rule can sound final. A testnet can wear a launch party hat. This week, the Amazons checked what was actually inside each box. The recurring question was brutally simple: Who controls the keys, the exit and the definition?

Kaia checks the box

Ledger said it is investigating reports of missing funds from Southeast Asian customers who bought devices from reseller CryptoBilis. It asked the reseller to pause sales and shipments. Recent buyers were told not to set up unactivated devices; those already using one should consider moving assets to a new device with a new recovery phrase. CoinDesk reported an unverified estimate above $86 million. Neither the loss total nor a tampering mechanism has been established. Kaia’s verdict: investigate the box before declaring the entire vault breached.

Rulebooks with actual dates

On 8 October, ESMA published an opinion telling EU supervisors that MiCA-authorised crypto service providers should cease services involving non-compliant stablecoins. Where old exposures remain, national authorities should require remediation within three months of publication; limited activity to liquidate, convert, withdraw, transfer or safeguard assets may continue under supervision. Valeria reads the fine print: This concerns regulated service providers and affected tokens, not a newly invented ban on every digital dollar in every wallet.

Thailand’s SEC issued eleven crypto ETF notifications, effective 16 October. Initial eligible assets are Bitcoin and Ether; funds must track one asset with average net exposure of at least 80% of NAV, use regulated custodians and trade on the Stock Exchange of Thailand. A framework is real. A listed fund is still a separate milestone. No victory parade for an empty ticker.

Testnet, payments and the scoreboard

Ethereum’s Glamsterdam activated on Sepolia on 6 October. The Ethereum Foundation’s upgrade notice describes proposer-builder separation and block-level access lists. Early Sepolia blocks had a gas limit near 200 million, but CoinDesk’s sample used only 26% to 46% of it. Nyra calls that a useful test, not proof that mainnet can take a threefold traffic surge. No mainnet date is set.

Samsung announced USDC transfers for eligible US Galaxy users starting in the last week of October, including transfers to eligible bank accounts in more than 60 countries. The 82 million figure counts compatible devices, not active users. Bastion and Coinbase Prime handle custody; users will not manage the private keys. Convenient? Potentially. Self-custody? Read the label.

US spot Bitcoin ETFs showed Farside net outflows of $484.9 million on 7 October and $244.1 million on 8 October. Those are dated fund flows, not proof of why any particular holder sold. Nyra refuses to turn two red cells into a personality test for all investors.

Finally, the CFTC proposed explicitly treating certain sports, political, cultural and weather event contracts as swaps. It opened a comment process; the rule is not final. Valeria has a question for every confident prediction-market headline: Which contract, which regulator, which stage?

The market moves. The Amazons stand watch. ⚔️🟠