The cryptocurrency landscape is grappling with a wave of major developments, marked by the ongoing fallout from a staggering $388 million security breach at major exchange Bitget, concerted efforts by decentralized protocols to halt the laundering of stolen funds, and fresh regulatory clarity from United States financial watchdogs. While Bitget has begun the delicate process of restoring normalcy by reopening Bitcoin withdrawals, the broader industry continues to debate the boundaries of permissionless finance following high-stakes interventions by cross-chain infrastructure providers. Simultaneously, the US Securities and Exchange Commission has stepped forward with updated guidance aimed at delineating the exact circumstances under which certain digital assets and blockchain activities fall outside the purview of federal securities laws.
These converging events highlight a pivotal moment for the digital asset sector. As centralized platforms scramble to secure infrastructure and reassure anxious users, decentralized networks are increasingly forced to grapple with their role in mitigating illicit activity. On the regulatory front, the ongoing friction between legislative stagnation in Congress and proactive agency guidance underscores the complex, evolving nature of digital asset oversight in the United States.
NEAR Intents Says It Blocked $50M Tied to Bitget Hackers
In the wake of one of the most significant security breaches of the year, cross-chain infrastructure protocol NEAR Intents revealed that it successfully blocked more than $50 million in attempted transfers directly linked to the attackers who targeted Bitget. The exploit, which occurred on Thursday, resulted in the theft of an estimated $387.5 million in digital assets from the exchange. According to Alex Shevchenko, general manager of NEAR Intents—a protocol designed to facilitate seamless asset swaps across disparate blockchains—a substantial portion of the stolen capital was rapidly routed across multiple chains before eventually making its way onto the Ethereum network.
Shevchenko detailed that the protocol’s proprietary SHIELD system was instrumental in identifying and intercepting the illicit movements. The automated defense mechanism successfully flagged and blocked more than $50 million in attempted transactions, forcing the attackers to redirect their efforts toward other liquidity providers and pathways. During the execution phase of these suspicious transactions, NEAR Intents managed to directly freeze approximately $503,000 in stolen funds. However, the sheer speed of the exploit and the decentralized nature of the routing meant that roughly $166,000 in suspected stolen assets ultimately slipped through the cracks.
The high-profile intervention immediately ignited intense discussions across the wider crypto community regarding the core philosophy of decentralized finance. As the incident unfolded, THORChain notably faced mounting public pressure and direct calls from various industry participants to proactively block wallet addresses associated with the attack. This dynamic thrusts permissionless protocols squarely into the center of an ongoing ideological tension: how to maintain open, censorship-resistant access for all users while simultaneously taking meaningful steps to curb rampant illicit activity and money laundering.
Addressing this controversy head-on, Shevchenko argued that permissionless system architecture does not inherently demand absolute neutrality from the developers who build and maintain them. He emphasized that builders always retain agency over the environments they create and the capabilities they choose to enable. Refusing to serve as a willing conduit for laundering stolen assets is a deliberate and necessary choice for responsible development teams.
Furthermore, Shevchenko stressed that robust property rights remain an absolute cornerstone of any functioning, healthy market economy. In his view, constructing a financial environment where the successful execution of a theft grants the perpetrator an unrestricted right to monetize those funds does not translate into a freer system. Instead, it merely creates a structure that protects the thief at the expense of everyday users. Such systems, he concluded, can never realistically hope to evolve into the reliable economic backbone of the future.
SEC Clarifies When Crypto Activity May Fall Outside Securities Laws
While the industry dealt with the immediate crisis of exchange exploits and cross-chain fund tracking, the regulatory landscape shifted as the US Securities and Exchange Commission updated its official guidance. The newly published framework and accompanying frequently asked questions provide much-needed clarity on the precise conditions under which specific crypto assets and blockchain transactions may officially fall outside the jurisdiction of federal securities laws.
This latest regulatory update significantly expands upon the SEC’s previous interpretation from March regarding how the foundational Howey test applies to modern digital assets. Specifically, the refreshed documentation addresses complex nuances such as token buybacks, ongoing network development initiatives, and the treatment of staking receipt tokens. According to the agency’s updated stance, token buybacks may no longer automatically constitute the managerial efforts typically associated with an investment contract, provided that the underlying crypto network is already fully functional and operates without the control of a centralized governing party.
Additionally, routine work dedicated strictly to maintaining, securing, or improving an already operational network may similarly fall outside the strict standards of the Howey test. The guidance also clarifies that staking receipt tokens will not be automatically classified or treated as securities simply by virtue of their issuance. While the agency explicitly noted that the guidance is non-binding and does not fundamentally alter existing statutory law, it offers digital asset projects a significantly higher degree of detail regarding how SEC staff plan to interpret and apply current securities rules moving forward.
This regulatory maneuver follows closely on the heels of similar guidance issued by the Commodity Futures Trading Commission. The timing is particularly notable as it arrives just days after the United States Senate failed to advance the much-anticipated CLARITY Act. That piece of comprehensive legislation had aimed to establish a definitive statutory framework that would cleanly divide regulatory oversight of digital assets between the SEC and the CFTC. With that legislative effort temporarily stalled, both regulatory agencies are decidedly pressing forward under the scope of their existing statutory authority.
Bitget Resumes Bitcoin Withdrawals as Hacker Swaps ETH via THORChain
Amid these regulatory developments, central operations at the hacked exchange Bitget began a gradual return to normality as the platform resumed Bitcoin withdrawals. The security breach, which ultimately impacted nearly $388 million in user and platform assets, forced the exchange to temporarily lock down its withdrawal pipelines while forensic teams scrambled to assess the damage and secure remaining infrastructure. Meanwhile, the perpetrator continued efforts to launder and move the stolen capital across various decentralized liquidity pools, utilizing protocols like THORChain to swap stolen Ether.
Bitget officially confirmed that it resumed Bitcoin withdrawals on Monday, lifting the temporary suspension that was enacted immediately following the discovery of the security incident late last week. The exchange assured its user base that additional assets and supported blockchain networks would be systematically brought back online over the course of the coming days as ongoing security audits clear each individual pipeline.
The breach itself, which took place on September 24, managed to compromise a specific portion of Bitget’s hot and warm wallet infrastructure. However, the exchange repeatedly emphasized throughout the crisis that its cold storage wallets remained entirely secure and untouched by the attackers. Following comprehensive internal reviews and the tracing of additional unauthorized transfers across the Zcash and Tron blockchains, Bitget revised its initial estimates of the stolen amount upward from $351.6 million to a staggering $387.5 million.
During a live ask-me-anything session held on Monday, Bitget CEO Gracy Chen provided further operational details regarding the phased restoration of services. She confirmed that Bitcoin withdrawals operating natively on the Bitcoin network, alongside those routed through the BNB Smart Chain, were prioritized to be restored first.
Chen explained that Bitcoin was deliberately selected for the initial rollout simply because its corresponding withdrawal pipeline and security checks were the first to reach completion. She added that the resumption of withdrawals for Ether and Tether’s USDt would closely follow as technical teams successfully navigate the remaining safety verifications and system hardening measures.
