Server-rendered tracker page for defi regulation in Global. This page is built for Google and LLM crawlers: every event below links to a permanent policy-event URL with source data and APAC FINSTAB analysis.
Jurisdiction: Global. Regulator: Financial regulator. Topic: DeFi. Latest event: August 28, 2026 — Midas Proposes Wellington mWIN As Aave Horizon Collateral.
Use this page to compare rule changes, licensing signals, enforcement posture, and market-access implications for exchanges, stablecoin issuers, protocols, custodians and institutional teams operating across APAC.
Midas proposed onboarding mWIN, a tokenized fixed-income portfolio managed by Wellington Management, as collateral on Aave Horizon for whitelisted institutional users. The proposal makes investor qualification, NAV governance, redemption limits, asset disclosure and liquidation haircuts central compliance controls for RWA DeFi markets.
Arbitrum's ArbOS 61 Elara upgrade adds optional protocol-level transaction screening for dedicated chains while leaving Arbitrum One and Nova unchanged. The feature shifts compliance controls from only wallets, frontends and exchanges into configurable chain infrastructure, raising new due-diligence questions for appchain assets.
Uniswap introduced Permissioned Pools for Uniswap v4, embedding issuer-managed allowlist checks into AMM swaps and liquidity actions for tokenized funds, securities, equities and other regulated assets. The design moves compliance controls from front-end gating into execution infrastructure, raising review points around whitelist authority, secondary-market transfer restrictions and aggregator access.
Security monitors reported that about $800,000 in USDC was taken from Hinkal and later routed through Tornado Cash and THORChain. The case highlights continuing AML exposure where privacy tools and cross-chain liquidity are used in post-exploit laundering paths.
Ledn added Tether Gold support and said XAUT-backed loans are planned, moving tokenized gold from holding and trading into collateralized credit use cases. The structure raises custody-proof, reserve-audit, redemption and liquidation-control requirements for RWA collateral acceptance.
Starknet said USDC can now use STRK20 privacy features for shielded balances and confidential transfers while retaining ERC-20 compatibility. The rollout tests whether selective privacy and compliance hooks can coexist for stablecoin payments, treasury operations, and onchain finance.
CFTC Chair Mike Selig said regulators are exploring a pathway for Hyperliquid-style decentralized perpetual futures platforms to operate in the United States. The signal shifts onchain derivatives from an enforcement-only posture toward regulated market-structure design.
Circle blacklisted a Zama confidential USDC contract after a wallet linked to Overnight Finance was flagged in litigation, trapping roughly $12.6 million of shared cUSDC liquidity. The case shows how stablecoin compliance actions can create contract-level collateral damage for privacy wrappers, yield pools and other pooled stablecoin products.
LayerZero Labs said the April KelpDAO rsETH bridge attack released 116,500 rsETH after compromised infrastructure produced a valid attestation for a forged cross-chain message, with the impact enabled by a single-verifier configuration. The report turns bridge verifier, DVN and emergency-control design into explicit listing and collateral-risk review items for LRT and bridge-wrapped assets.
Hyperliquid expanded HIP-4 into validator-governed outcome markets for offchain events, bringing prediction-market settlement into high-liquidity crypto derivatives infrastructure. The model raises regulatory questions around event definition, source governance, settlement disputes and responsibility for erroneous resolution.
Socket Research reported a cross-ecosystem TrapDoor campaign across npm, PyPI and Crates.io packages targeting crypto, DeFi, AI and security developers. The attack raises compliance and listing-review risk because compromised developer secrets, wallets, CI/CD credentials and cloud keys can translate into project-control and custody failures.