【Crypto】

1 | Lighter seeks U.S. license, for institutions only

It’s been negotiating with the CFTC for a long time and will submit its application next month. The review could take up to 280 days. Once approved, it won’t be open to retail investors—only institutions. LIT briefly rose 15% in 24 hours.

→ The earliest launch is in the second half of 2027. That 15% is pricing in eligibility, not revenue. Keep an eye on whether the Robinhood path reopens.

2 | OCC drops stablecoin yield restrictions; bankers’ association turns against it

The GENIUS Act’s final rules drop the proposed yield restrictions on stablecoins, drawing ire from the American Bankers Association. Its CEO says it’s wrong to wait until deposits start flowing out to address the issue.

→ Banks fear deposits moving elsewhere. Once the restriction is lifted, interest-bearing stablecoins become an alternative to deposits. The ABA has estimated the scale but hasn’t published a figure. The next battleground is whether Congress will treat interest-bearing stablecoins as deposits.

3|A protocol with a $26 million market cap earns more revenue than the next ten combined

ZEC rose 16% in a day, adding over $3 billion to its market cap. MASK has a market cap of $26 million and ranks first among privacy protocols by DefiLlama’s revenue metric, exceeding the next ten combined. ZEC’s market cap increase is 115 times MASK’s market cap.

→ The contrast is real, but the numbers are small to begin with. ZEC is rallying on the idea of privacy; MASK makes money from the feature itself. Whether fees jump sharply after its Solana launch is the real test.

[AI]

4|OpenAI comes to Google Cloud—and the key is that no new budget approval is needed

Within weeks, GPT-6 Astra and Codex will be available on Google Cloud, with purchases counting toward existing cloud spending commitments.

→ The biggest deal isn’t that OpenAI is coming to Google Cloud—it’s that the spending counts toward existing cloud commitments. Signed-off cloud budgets can now buy GPT directly, without a new project proposal or budget line. Cloud providers’ moat isn’t their own models; it’s the procurement process.

5|LiteLLM poisoned for the second time: clean source code, infected packages

Version 1.107.0 and the official mirror were infected with a Trojan that runs automatically when a Python environment starts. It steals cloud credentials, SSH private keys, and secrets stored in repositories. The GitHub source code is clean, but all seven PyPI packages are infected. The security rollback is to 1.106.2.

→ What you review and what you install are no longer the same thing. Centralizing every provider’s keys is convenient, but it creates a single point of failure when attacked. If you’ve run it, rotating your keys matters more than uninstalling the package.

In a nutshell: two stories are about how intermediaries get bypassed, two are about who pays the bill, and one puts a $26 million market cap next to a $3 billion market cap increase. None of it is comfortable, but it’s all real.