Kraken's Unified Wallet Makes Futures Losses a Broader Account Risk

Cardano founder Charles Hoskinson says he is working with Input Output Global developer Lucas Rosa on a new programming language built around intent-based transactions and cryptographic proofs. No technical specification, performance data or release date has been published, so the announcement is a development plan rather than a shipping product.

The project arrives as Cardano advances Ouroboros Leios, a scaling design intended to raise transaction throughput. Cardano's October development report said the Leios database had moved to the main code branch, while a public test network has been operating since June. Those milestones show engineering progress, but they do not establish a mainnet deployment date.

The commercial challenge is demand. CryptoSlate cited about $63 million of value locked in Cardano decentralized-finance applications and less than $1 million of daily decentralized-exchange volume on October 19. Solana's reported DeFi deposits and trading activity were many times larger. The comparison is imperfect because network designs and data definitions differ, but the gap is too large to treat throughput as Cardano's only constraint.

Better developer tools can lower the cost of building applications. They cannot create liquidity, users or sustainable revenue by themselves. Cardano must show that new capacity and proof features attract products people use, rather than only improving a network with limited financial activity.

Investors should separate three milestones: a published language specification, a tested Leios implementation and measurable growth in applications, liquidity and fees. The first two are engineering achievements. The third is the evidence that would connect them to economic value.

Crypto theft reached $1.18 billion across 107 incidents in the third quarter, according to Hacken, up 55% from the second quarter. The increase came with a sharp change in the mix of losses: smart-contract exploits represented 48% of the total, compared with roughly 12% in the prior quarter.

The published totals imply an average recorded loss of about $11 million per incident in both periods. That calculation is only descriptive because a few large attacks can dominate a quarter, and Hacken's categories are broad. Still, it shows that the aggregate increase reflected more incidents and a different failure mix, not simply a higher average loss.

Two September cases illustrate the control problem. Bitget said attackers used compromised high-privilege credentials to inject unauthorized withdrawal instructions even though private keys were not stolen. In the Liquid incident, invalid assets passed a validation check before an automated process released genuine bitcoin. One failure occurred upstream of the signing key, while the other combined a validation defect with insufficient withdrawal friction.

The lesson for exchanges, custodians and investors is that no single control is enough. Key security, transaction authorization, smart-contract validation, withdrawal limits and manual escalation protect different parts of the path. Customer reimbursement can reduce user losses without proving the control failure has been fixed.

Quarterly categories should not become a checklist ranked only by last period's losses. The more useful test is whether independent controls can stop an asset transfer after an earlier safeguard fails.

Ondo Finance's USDY token has overtaken BlackRock's BUIDL in reported size, but that ranking says little about the value of ONDO. The source report put USDY at about $2.33 billion and BUIDL at about $2.2 billion on October 18, a narrow lead that one institutional allocation could reverse.

USDY gives holders economic exposure to a portfolio built around short-term U.S. Treasuries and bank deposits. Ondo says the token is not itself a Treasury security and gives holders no right to receive the underlying Treasuries. ONDO is different again: it is a governance token, not ownership in Ondo Finance, and has no direct claim on USDY reserves, fees or cash flow.

The source report estimated that 4.87 billion of ONDO's 10 billion maximum supply was circulating. A prior discussion about revenue-funded buybacks was only a temperature check, not a binding vote. BlackRock can also earn fees from products used in Ondo's reserve structure. The key question is whether ONDO ever gains an enforceable economic link to the business. Until then, USDY adoption and ONDO value can diverge.

Quantum computers do not pose an immediate threat to Bitcoin, but the network has a migration problem that becomes harder if users reuse addresses.

Coinbase Research estimates that roughly 6.51 million bitcoin, about 32.7% of supply at block 900,000, sit in output types whose public keys are already exposed. A sufficiently powerful quantum computer could, in theory, derive private keys from those public keys and authorize unauthorized spending.

That machine does not exist today. Coinbase noted that the most advanced systems have fewer than 1,000 qubits, far short of the scale required to break Bitcoin's cryptography. The near-term probability is therefore low, and no observed loss in the cited evidence was caused by a quantum attack.

Address reuse still matters because spending from an address reveals its public key. Older pay-to-public-key outputs, bare multisig and Taproot outputs can also expose keys in ways that create a long-range target. Every output may face a short window of vulnerability when its public key appears in the mempool during a spend.

Developers are considering paths such as BIP-360 and other quantum-resistant signature schemes. A migration would require years of standards work, wallet updates, node adoption and decisions about old coins. Larger post-quantum signatures could also raise storage, verification and fee costs.

For holders, the practical lesson is operational rather than predictive: avoid unnecessary address reuse and keep wallet software current. For the network, the challenge is to agree on a migration before quantum capability becomes urgent. Bitcoin's risk is not a present breach, but a slow coordination problem with a potentially severe endpoint.