MiCA gave every EEA platform one choice: delist unlicensed stablecoins or lose the market. Revolut took that further, pulling USDT by 31 August and launching its own euro-pegged token, EURR, into the same app for millions of retail users. This piece breaks down why the timing and sequencing matter more than the launch itself, and what it signals for anyone routing settlement, treasury, or payouts through stablecoins in Europe.
Pocket Bitcoin now says its August breach exposed identity and transaction data for 291 customers, not just email addresses and support chats as first disclosed on August 21. Correspondence with partner banks contained varying combinations of names, postal addresses, public Bitcoin addresses, payment amounts, ID document copies and source-of-funds records. The company says private keys and funds were never at risk since it is non-custodial.
The scope crept, not the story. Pocket Bitcoin walked back its own "not affected" language once it found bank correspondence linking real identities to on-chain activity.
Why It Matters
If your compliance function shares KYC data with partner banks over unsecured channels, then a single vendor breach can deanonymize customer wallets even when you never held their private keys.
Core DAO confirmed a subset of validators received excess CORE rewards but has not disclosed the amount, the validators, the reward rounds, or the technical cause. Coinbase paused CORE sends and receives at 04:41 UTC on August 31, ahead of Core's own 05:24 UTC statement, and still listed the incident as under investigation at 17:38 UTC. LBank separately suspended CORE deposits only, citing the project's requirements, with no restoration timeline given.
The token has a 2.1 billion supply cap and an 81-year node-mining schedule, so an undisclosed reward overshoot is a supply question, not a footnote. Until Core publishes a number, nobody can say whether this pulled forward scheduled issuance or created new tokens outside the plan.
Why It Matters
If your exchange or treasury holds CORE, unresolved issuance mechanics mean you can't model dilution or reprice exposure until Core discloses the exact excess amount, and different exchanges restricting different transfer types (sends versus deposits) signals no coordinated response protocol...
Core DAO is pushing an emergency hard fork after a small number of validators claimed CORE rewards far above the protocol's intended issuance. Core says the exploit is contained, malicious validators can no longer draw excess rewards, and the fix is a forward upgrade that will not roll back the chain or reverse confirmed transactions.
Core has not disclosed how much CORE was over-issued, how long it went on, or whether the excess tokens reached circulation. Coinbase, Bithumb, Coinone, Bitget and LBank all restricted CORE deposits or withdrawals in the meantime, and a technical postmortem is still pending.
Why It Matters
If your exchange or treasury holds CORE exposure, the unresolved question of whether excess tokens already entered circulation means you're pricing risk on incomplete information until the postmortem lands.
The SEC published the agenda for its roundtable on 24-hour trading and proposed a new transfer-agent rule with blockchain implications. The rule would update how transfer agents, the entities that maintain shareholder records, handle securities settlement, potentially opening the door to blockchain-based record-keeping.
No dates, no dollar figures, just an agenda and a proposal. The real event is the roundtable itself, where the SEC has to reconcile round-the-clock crypto trading habits with a market infrastructure built around a closing bell.
Why It Matters
If your platform settles securities-adjacent tokens off the back of legacy transfer-agent processes, a rule change here could force a rebuild of your settlement stack before round-the-clock trading becomes standard.
The UK Gambling Commission suspended the operating licences of BresBet Ltd and Bet St George Ltd effective August 28, citing suspected social responsibility and anti-money laundering failings. Both firms share a Hawley Street address in Sheffield and a director, Nicholas James Brereton. The regulator opened section 116 reviews under the Gambling Act 2005 and disclosed no specifics on the underlying conduct.
Two licensees, same address, same director, same week. That is not a coincidence the Commission needs to explain to anyone.
Why It Matters
If your AML controls sit at group level across commonly-owned brands, a single enforcement trigger can now take out multiple licences simultaneously rather than one at a time.
Brazilian tax and federal prosecutors are investigating NSX Brasil, operator of Betnacional and Betfair, under Operation Shadow Game, alleging tax evasion, currency violations and money laundering before and after Brazil's regulated betting market launched in January 2025. Authorities estimate BRL300 million ($57.9 million) in recoverable tax liability and say linked companies moved more than BRL5 billion during 2025. The Federal Revenue Service opened 11 tax audits and conducted searches in Recife, Joao Pessoa and Sao Paulo. No arrests have been made and NSX remains licensed.
Why It Matters
If your Brazilian entity used an offshore holding structure to book activity before federal licensing took effect, this investigation signals regulators will retroactively test whether that structure had any real substance.
Ten New York Democratic lawmakers have asked Gov. Kathy Hochul to intervene in a tax dispute that could push Resorts World New York City's effective slot tax to 72%, up from the 56% rate the casino proposed. The gap comes from roughly $150 million a year in required horse racing payments the Gaming Commission says sit outside the base rate, over a 15 year agreement. Lawmakers warn the uncertainty threatens the operator's planned $4 billion Queens expansion.
Resorts World converted from video lottery terminals to a full commercial casino on April 28, 2026.
Why It Matters
If regulators can layer additional statutory payments onto a rate an operator bid and won on, then every casino bidder in a similar conversion process has to price in tax terms that aren't fixed until after licensing.
Ontario's regulated iGaming market hit a record CAD 9.88 billion (US$7.1 billion) handle in July, up 31% year over year and nearly CAD 300 million above the prior record set in March. GGR reached CAD 413.6 million, the second-highest monthly total ever, generating roughly CAD 83 million in provincial tax at the 20% rate. Active accounts hit a record 1.37 million, up 44% year over year, across 48 licensed operators including new entrants DAZN Bet and Hard Rock Bet.
Revenue per account fell 7.6% to CAD 303 despite record volume. More players, less spend each: the market is widening, not deepening.
Why It Matters
If your Ontario-licensed brand is chasing account growth to hit revenue targets, the falling per-account yield means you need more players just to stay flat, raising acquisition cost pressure heading into 2027 renewals.
Lottomatica Group told Borsa Milano it plans to merge with Cirsa Enterprises in an all-share deal, with Lottomatica leading the combined entity. Blackstone, Cirsa's backer, has agreed terms. The prospectus issued to Milan investors this morning frames the tie-up as establishing outright market leadership across Italy and Spain.
An all-share structure means no cash changes hands. Blackstone takes Lottomatica stock instead of an exit, betting the combined platform is worth more listed than Cirsa was private.
Why It Matters
If you compete against either brand in Italy or Spain, a merged Lottomatica-Cirsa concentrates licensing weight and supplier leverage in two markets you may already find hard to differentiate in.
Incore Bank, working with Kyndryl and Google Cloud, ran a proof of concept using multi-agent AI to handle KYC onboarding checks. The system hit up to 99% accuracy extracting data from onboarding documents, with agents split across verification, evidence gathering, risk scoring and audit-record generation. PYMNTS Intelligence data shows only 20% of financial firms currently use AI for KYC, though 65% plan to adopt or expand it within a year.
The 99% figure measures document extraction, not risk decisions. Compliance officers still make the final call.
Why It Matters
If your compliance team reports AI accuracy figures to auditors without specifying what the metric actually measures, regulators reviewing KYC files will treat extraction accuracy and decision accuracy as the same claim, and that gap becomes a finding.
Block is opening its Cash App Score to outside lenders for the first time, distributing it through Nova Credit's Cash Flow Intelligence Platform. The score uses cash flow signals from Cash App, spending, saving, repayment, paycheck deposits and P2P activity, to assess consumers the traditional credit system misses. Lenders can plug it into underwriting for credit cards, auto loans, device financing, personal lending and tenant screening.
Block isn't lending in those categories, so it's monetizing the data pipe instead. Nova Credit gets a proprietary dataset covering tens of millions of Cash App users that no bureau currently holds.
Why It Matters
If your underwriting model relies solely on bureau data, then thin-file applicants scored well by Cash App Score may qualify with competitors first, shifting volume away from lenders slower to integrate alternative cash-flow signals.