Good Morning Blocksignal Community,
Executive Summary
Sunday delivered a quiet tape and a loud security incident. Bitcoin spent the day pinned near $80,000 while roughly 4,000 BTC — about 95% of the Liquid Network's reserves — left the sidechain's federation wallet, forcing Blockstream to pause the network and exchanges to freeze LBTC. Against that, the institutional bid held: US spot bitcoin ETFs closed a third consecutive week of net inflows at $987 million. The third thread was structural rather than dramatic. Details published over the weekend showed that the Better and Coinbase bitcoin-backed mortgage permits the lender to reuse pledged collateral, which is worth understanding before the product scales.
Market action
There was very little price story. Bitcoin traded at $79,951 late Sunday evening in New York, essentially unchanged over twenty-four hours and still roughly $1,750 below the $81,700 high it printed on Thursday. Ether held around $2,500 and Solana around $106. A weekend candle carries less information than a weekday one — thin order books mean small flows move prices further — so the flat close says more about absent participants than about conviction on either side.
What risk appetite there was concentrated on Solana. STONK, the token attached to the launchpad StonkFun, traded near $0.16 on Sunday afternoon, up more than 250% in a day and off an intraday record of $0.212, for a market capitalisation of roughly $140 million on about $135 million of daily volume. The trigger was a Saturday integration with the LaunchLab product from Raydium, whose RAY token gained about 46% to $1.27, while the token of the aggregator Jupiter added around 21%.
The mechanics here deserve a sentence of caution, because they are unusual. StonkFun lets users launch tokens paired against other assets, including tokenised equities. Its own token is paired with SPYx, a Backed product designed to track the S&P 500. That means the dollar price of the token reflects both the value of the tokenised ETF and the token's own exchange rate against it — the token can fall while the index rises, and holding it conveys no claim on the underlying shares. Pairing a speculative asset against an equity wrapper looks like equity exposure and is not.
Security: the Liquid Network pause
The day's substantive story was the Liquid Network, the Bitcoin sidechain built for faster confidential transfers and asset issuance. Liquid said on Sunday that purported white-hat hackers withdrew approximately 4,000 BTC, worth about $320 million, from its federation wallet. Reserves had stood at roughly 4,200 BTC beforehand, so the withdrawal took about 95% of the pot. An onchain message attached to a transaction linked to the incident read: "we are whitehats. contact us on chain." Blockstream, the network's technology provider, is attempting to reach the parties through a signed onchain message.
The operational response was immediate. Liquid notified exchanges, which have suspended or are suspending deposits and withdrawals of LBTC, the network's bitcoin-backed token. Bridge nodes were disabled, preventing new transactions from being submitted. In the network's own words, the sidechain is paused until the issue is resolved. Other assets issued on Liquid, including USDT, DePix and tokenised real-world assets, were not directly affected, though Liquid warned that wallets would still be disrupted.
The part that matters for anyone holding wrapped or federated bitcoin is what Liquid did not say. The funds moved through the SideSwap Peg-out Authorization Key, but Liquid stated that this key had not been compromised, nor had any others — and it did not explain the underlying vulnerability that permitted the withdrawal. A withdrawal path that empties a federation wallet without a compromised key implies a logic flaw rather than a stolen credential, and until the root cause is published, the security assumption behind every federated bitcoin wrapper is harder to price. The "white-hat" framing is also not yet a fact. Nobody has returned anything, and the label rests on a message from the party holding the coins.
Network governance: Harmony winds down
The second security-driven story of the day came from Harmony, which announced on Sunday that it will fully sunset its Layer 1 blockchain and proposed migrating its ONE token to Ethereum. The stated reason was blunt: "The threats posed by state actors and AI agents are too great." Harmony has the scar tissue to justify it. Last month an attacker exploited a flaw in cross-shard receipt verification and minted, by the project's own later reconstruction, more than three trillion unauthorised ONE across six transactions, forcing a network rollback. In June 2022 its Horizon bridge lost close to $100 million in an attack the FBI subsequently attributed to North Korean state-backed groups.
The practical dates matter more than the framing. Validators may cease node operations from September 10, and a $1.37 million pool has been set aside to compensate those who wind down, sign an agreement, keep their stakes and move into governance roles in the project's proposed new venture — a "remix economy" for AI video creators. Token holders are told they need do nothing: Harmony intends to snapshot balances at the final block and airdrop new tokens to the same addresses on Ethereum, with supply and emission unchanged. The important exception is that multisig safes, liquidity pools and onchain applications cannot be migrated, and users are urged to exit all smart contracts before September 10. ONE traded down 3.86% at $0.00073.
A chain choosing to shut down rather than keep patching is not something the industry sees often, and it is a more honest signal about the cost of defending a small validator set than any security audit.
Flows
The institutional picture stayed constructive. US spot bitcoin ETFs took in $986.9 million in net inflows in the week ended September 4, a third straight positive week and up from $924.5 million the week before, according to data from SoSoValue reported by The Block. IBIT from BlackRock led with $691.5 million. Weekly trading volume for the group came in at $14.5 billion, down from nearly $19 billion the prior week — inflows rising while turnover falls is the signature of allocation rather than trading.
Spot ether ETFs added $218.4 million, also a third consecutive positive week, on $4.1 billion of volume against $6.3 billion previously. Both sets follow a strong August: $3.52 billion into bitcoin funds, their best month since September 2025, and $1.85 billion into ether funds, their best since August 2025.
Dominick John of Zeus Research framed the pattern as institutional capital steadily rebuilding exposure and creating genuine spot demand rather than leverage-driven speculation. Min Jung of Presto Research described the market as running a catch-up trade after lagging other risk assets. Both readings point the same way: the marginal buyer in this leg has been a wrapper, not a perp.
Adoption and the fine print
The most consequential disclosure of the weekend arrived without a headline number attached. Better Mortgage told CoinDesk that it may rehypothecate the bitcoin pledged under its Coinbase-powered home loan, provided it keeps an equivalent amount available to return at payoff. Pre-applications since the product went generally available have reached $360 million in requested loan volume, up from the $260 million projected by the earlier waitlist.
The structure is worth stating plainly. A borrower receives two loans at closing: a standard Fannie Mae-conforming mortgage secured by the home, and a second loan funding the cash down payment, secured by bitcoin and a second lien on the same property. Collateral starts at a 250% ratio — $2.50 of BTC pledged for every $1 borrowed for the down payment. Bitcoin does not help the borrower qualify; the conforming loan still requires ordinary income, credit and debt-to-income tests to be met independently. A price decline produces no margin call and no automatic sale; liquidation follows delinquency, with Better able to sell after 60 days and foreclosure possible after 180.
Two details change the risk profile. First, rehypothecation converts the borrower's pledged bitcoin into a claim for an equivalent quantity rather than a reservation of specific coins, which makes the borrower dependent on the lender's ability to return it — the opposite direction of travel from the proof-of-reserves push that followed 2022. Better said its agreements comply with applicable law including insolvency rules, but did not say whether each borrower's bitcoin is separately identifiable, who holds legal title after reuse, or whether a borrower would retain a property claim or become an unsecured creditor in a failure. Second, the collateral stays pledged until the conforming mortgage is repaid or refinanced, not until the down-payment loan is cleared, which can encumber the bitcoin for the full life of a 15- or 30-year loan. Neither point makes the product bad. Both make it something other than what "bitcoin-backed mortgage" suggests at first reading.
Regulation
The prediction-markets fight moved a step closer to the US Supreme Court. New Jersey filed a petition for a writ of certiorari last week, asking the justices to decide whether sports-related prediction market contracts are gambling products subject to state regulation or swaps overseen by the Commodity Futures Trading Commission. As CoinDesk reports, the ingredients for review are now in place: the circuit split that lawyers had said was the missing piece exists following last month's Ninth Circuit ruling, set against the Third Circuit decision from April.
The stakes scale beyond sports contracts. If a majority reads these products as gambling, every operator needs state-by-state licensing, approvals and tax exposure. If a majority reads them as CFTC-regulated swaps, the implications run the other way for states and for pure-play sports betting firms. Procedurally, the court has roughly 90 days to decide whether to grant cert, and Kalshi has 30 days from docketing to respond. The justices may also wait for the Sixth or Fourth Circuits, or for the CFTC to finish its event-contract rulemaking, which is not yet final.
On the legislative side, the arithmetic tightened. The US House will not sit for the last two weeks of September, which all but rules out the Digital Asset Market Clarity Act becoming law before the midterms even if the Senate passes it this month. One obstacle did clear: the National Sheriffs' Association shifted from opposing the bill to neutral on Friday. The ethics provisions and the stablecoin yield question remain unresolved.
Consumer protection
Ukrainian police and the Security Service of Ukraine shut down a network of fake investment platforms that allegedly stole up to $1 million a month from users in more than 20 countries. The mechanic is worth knowing because it is now standard. Operators manually adjusted displayed account balances so investments appeared to grow; when a user tried to withdraw, the platform asked them to connect their main wallet and approve what looked like a small test transaction, at which point a hidden drainer moved the funds and locked the victim out. Registration and identity checks also harvested passport data, phone numbers, logins, passwords and photographs.
Investigators have identified 62 victims so far, from Germany, Poland, Lithuania, Latvia, Spain, France, the UK, Canada, Israel and elsewhere, and say more than 46 Ukrainians participated under a 25-year-old organiser running several offices in and around Kyiv. The break came from server infrastructure in the Netherlands holding a database of victims, wallet addresses, amounts and internal communications. Authorities carried out 34 searches and seized over 100 computers, over 100 phones, 79 SIM cards, cash and 15 vehicles. The defensive lesson is the approval, not the platform: a signature that looks like a small test transaction is the moment the money leaves.
Today's Watch
The week ahead is macro-led. Jobless claims land on Thursday, September 10, and the August CPI print on Friday, September 11, with the FOMC decision following on September 16. Both analysts quoted by The Block over the weekend framed a hotter inflation print as the main downside risk to the current structure, and a supportive backdrop as what would extend it. Watch the ETF tape for whether the third positive week extends into a fourth once US desks reopen.
On the idiosyncratic side, the Liquid Network restart is the thing to follow: whether the coins come back, whether Blockstream publishes a root cause, and how long exchanges keep LBTC frozen. September 10 is also the date validators may begin exiting Harmony and the deadline for users to exit its smart contracts, so expect friction around anything still sitting in Harmony liquidity pools or multisigs after that. Finally, keep an eye on whether the Solana launchpad rotation holds through a weekday session, since weekend moves of that size frequently do not.
Sources
The Block — Liquid Network pauses after purported 'white-hat' hackers withdraw $320 million in bitcoin
The Block — Spot bitcoin ETFs pull in $987 million last week as institutional demand recovers
The Block — Harmony to fully sunset Layer 1, proposes token migration to Ethereum for AI video initiative
CoinDesk — Better and Coinbase's bitcoin-backed mortgages can reuse borrowers' collateral
CoinDesk — Prediction markets inch closer to the Supreme Court: State of Crypto
CoinDesk — Ukrainian police took down a crypto scam that stole up to $1 million a month