October 10-17, 2026

Aurelia Voss: Crypto would like to sell you a faster, shinier financial future. Lovely. This week, we checked who can open the door, who keeps the keys and what happens when the friendly website goes dark.

A bank is preparing to hold Bitcoin. Visa has moved a stablecoin funding service into production. Blockchain upgrades have dates worth watching. Meanwhile, wallet security, tokenized shares and disappearing interfaces supplied several excellent reasons to read past the headline.

Bring your curiosity. Valeria has already confiscated the marketing confetti.

The week in a minute

• Wallet security needs evidence, not panic. Ledger described an unauthorized component in affected reseller devices; separate scam reports complicate the picture.
• Digital dollars are getting serious plumbing. Visa announced commercial USDC prefunding, while the EU classified USDC for heightened supervision.
• A token can travel faster than your legal rights. Binance’s bStocks milestone comes with a distinction between certificates and direct share ownership.
• Faster chains need honest scoreboards. Ethereum has a Hoodi test date; Solana has an Alpenglow mainnet schedule and a reason transaction counts could fall.
• Check the exit before the lights go out. Blur’s website and Cobo’s consumer wallet have shutdown deadlines with different consequences.

1. Ledger: Panic is a terrible security adviser

On October 13, Ledger said an unauthorized component in affected CryptoBilis-supplied devices captured recovery phrases from the screen and transmitted them over cellular connectivity. According to the company, the Secure Element and operating system remained untouched. Ledger tied its confirmed cases to that reseller and gave no confirmed aggregate loss total. Unchained’s report

Why does that distinction matter? A recovery phrase can restore control of a wallet. If someone obtains it, security elsewhere in the device does not magically make the copied secret safe.

The wider claims remain contested. Mark Karpelès said he had found implants in units from two other authorized retailers. Ledger said inspections of relevant retail stock had found no signs of tampering, while it had not examined the particular devices displayed online. Those competing accounts do not establish that every reseller is affected. Reporting on the claims and response

Security researcher Taylor Monahan separately said recent cases she handled involved phishing and impersonation rather than tampered hardware. That describes her cases; it does not resolve every device allegation. Unchained’s follow-up

Kaia: Scammers do not need to crack your wallet if they can hijack your panic.

The practical lesson is to verify notices independently and never hand a recovery phrase to somebody presenting a rescue story. Watch for examined-device evidence, confirmed scope and a reconciled loss count. Viral totals are not a substitute for any of them.

2. Deutsche Bank: Bitcoin gets a concierge

Deutsche Bank’s corporate-bank co-head Gerald Podobnik told Reuters that its first German digital-asset service was weeks away. The plan starts with custody for major cryptocurrencies, including Bitcoin and Ether; Asian expansion is targeted for 2027. Further ambitions include stablecoin access and tokenized financial products. These are plans, not a service we can already declare live. Reuters interview

Custody means a provider safeguards assets and handles key-related operations for its clients. That can make holding crypto easier for an institution with operational and compliance requirements. It also makes access depend on that provider’s arrangements.

Aurelia: Bitcoin in a bank vault is still Bitcoin. The concierge does not become part of its consensus rules.

Welcome useful infrastructure. Then ask about eligibility, withdrawals, fees and control. Bank custody and holding your own keys offer different responsibilities; neither distinction disappears because the brochure acquired an orange accent.

Next comes the concrete launch: Actual access, published terms and a working withdrawal route.

3. USDC: The payment engine gets a supervisor

Two announcements showed different sides of stablecoin growth.

On October 15, Visa said Visa Direct’s USDC prefunding had moved from pilots into commercial production, with Inyo Global as the first enabler. Eligible business clients can fund cross-border payout operations through that arrangement. This concerns the business’s funding layer; it does not establish that every Visa cardholder can now pay with USDC. Visa announcement, The Block’s reporting

Think of prefunding as stocking the payment business’s till before payouts. Digital dollars can change how that till gets funded. The recipient’s experience and product eligibility still depend on the actual service.

Across the Atlantic, the European Banking Authority classified Circle’s USDC as the EU’s first significant e-money token under MiCA. The change brings dual supervision from November 12: EBA oversight covers specified financial safeguards, while France’s ACPR retains responsibilities including governance. It is heightened supervision, not an official promise that losses cannot happen. EBA release, The Block’s account

Valeria: Digital money can be useful and still come with a reception desk. Read who is allowed through it.

The worthwhile questions are concrete: Where is the production service available, who qualifies, and how do redemption and supervisory safeguards work? A faster rail deserves credit. Its permission model deserves daylight.

4. Tokenized stocks: Your certificate has entered the chat

Binance announced on October 15 that bStocks had exceeded $1 billion in assets under management. Treat that as a company-reported milestone, not an independently audited league table. Company release

The part worth slowing down for is the legal wrapper. Binance describes one-to-one backing and redemption against underlying securities, but its disclaimer says the products are certificates representing financial instruments. They are not shares and do not confer direct ownership of the underlying listed company’s stock.

Nyra explains: A token records or transfers a claim. The terms determine what that claim actually gives you. Backing, redemption rights and direct shareholder status are separate questions.

Unchained also noted the lack of a public dashboard supporting the release’s comparison with competitors. We are leaving the fastest-product victory sash in its box. Independent scrutiny

Valeria: Congratulations on putting the certificate on a blockchain. Now show us the rights attached to it.

Useful access can be a real benefit. Before celebrating ownership, check the issuer, eligibility, redemption process and treatment if an intermediary fails. This product’s own disclaimer excludes US persons; friction has not evaporated into the chain.

5. Upgrade season: Faster is a target with homework

Ethereum’s October 16 announcement scheduled Glamsterdam on the Hoodi testnet for October 26 at 17:42:48 UTC, with a 200 million gas limit at activation. The mainnet date remains to be determined. Hoodi operators need the relevant execution and consensus client updates. Mainnet holders are not being told to migrate their coins by this testnet notice. Ethereum Foundation announcement

Gas measures computational work. A higher gas limit expands a block’s allowed execution budget; it does not prove that users are already consuming it, or guarantee a particular mainnet transaction rate.

Solana, meanwhile, scheduled Alpenglow’s mainnet transition for October 21, around epoch 1064. It targets roughly 150-millisecond finality, meaning the point at which the network treats a transaction as settled. That is a design target, not a stopwatch result from the future. Solana Foundation guide, Anza operator documentation

There is a delicious dashboard trap here. Validator votes move out of blocks, so headline transaction counts can fall even if user activity stays unchanged. Anyone comparing the old total with the new one without adjusting the denominator is measuring a change in accounting and calling it a crisis. CoinDesk’s explanation

Nyra: We support faster settlement. We also support reading the label on the stopwatch.

Watch Ethereum’s test results and subsequent mainnet decision, and Solana’s actual transition, client readiness and observed performance.

6. Two exits: A website retirement and a wallet bill

Blur announced that its website will be retired on November 12. The onchain marketplace protocol remains operational, while Blend stops matching new loans on that date. Existing borrowers face repayment or default; a withdrawal interface was promised for afterwards, without a firm availability date in the announcement. Unchained, Decrypt

The website is the convenient control panel. The contracts are the underlying machinery. Keeping machinery alive matters, but users also need a practical way to operate it.

Cobo’s consumer Wallet App has a different exit problem. Its shutdown notice sets closure for December 1 at 00:00 UTC+8. Users must transfer assets beforehand and replace receiving addresses saved elsewhere. Remaining balances face monthly charges of 2%, with a $100 minimum; the first deduction is scheduled for January 1, 2027. This concerns the consumer app, not closure of Cobo’s institutional wallet business. Cobo’s notice, crypto.news reporting

Kaia: Check the exit while it is still a button. Waiting until it becomes a support ticket is a rotten adventure.

These situations differ, but both make access concrete. Verify the official instructions through known channels; a shutdown notice is also excellent bait for impersonators.

Quick hits: Numbers with their labels attached

ETF flows: Farside’s five daily rows for October 12-16 sum to $228.4 million net out of US spot Bitcoin ETFs and $320.1 million net out of US spot Ether ETFs. Those are net fund flows, not trading volume or proof of investors rotating between the assets. Both totals were negative. Bitcoin data, Ether data

Treasury-company index risk: MSCI adopted a new non-operating-company screen, effective at the November 30 close. The final affected list is due November 11. Its October 15 announcement does not itself establish a final deletion for any named Bitcoin treasury company. MSCI announcement

Australia’s reporting proposal: Treasury opened consultation on draft crypto tax-transparency legislation on October 15, closing October 28. Proposed reporting rules are not an already effective law. Privacy questions deserve attention while the text is still being discussed. Australian Treasury

Bitcoin development: Bitcoin Core 32.0rc4 files appeared on October 14. The “rc” means release candidate: Testing territory, not the final 32.0 release. Official release directory

Valeria’s verdict

Financial freedom needs more than a fast token and a heroic press release. It needs usable exits, understandable rights and enough personal control to say no.

Credit the working payment infrastructure. Test the promising upgrades. Ask awkward questions about custody. And when somebody sells permission as liberation, make them explain the difference in public.

On our radar

October 21: Solana’s scheduled Alpenglow transition. October 26: Ethereum’s scheduled Hoodi test activation. October 28: Australia’s consultation deadline. November 11-12: MSCI’s final list, USDC’s dual-supervision start and Blur’s website deadline.

Dates are plans or deadlines in the linked sources, not claims that the events have already happened. The four Amazons are fictional editorial voices; their commentary is ours.

The Amazons stand watch. ⚔️🟠