Crypto markets saw a regulatory milestone and renewed security worries this week: Ripple secured a national trust bank charter to manage a major stablecoin’s reserves and offer custody services, while several firms disclosed device compromises and data exposures. All this unfolds as markets await the Federal Reserve’s next policy decision.
Ripple National Trust Bank approved
On October 26, 2026, the Office of the Comptroller of the Currency (OCC) granted final approval for the Ripple National Trust Bank. The bank will manage reserves for the RLUSD stablecoin, which has a market capitalization of approximately $2.6 billion, and provide digital asset custody services. Stablecoins are tokens designed to maintain a stable value relative to a fiat currency and often require on-chain reserve management and custody arrangements.
Following the approval, several business moves were announced: on October 27, BNY added both XRP and RLUSD to its custody offerings; C2FO said it will test invoice payments using RLUSD on the XRP Ledger; and Robinhood announced plans to integrate RLUSD into its app later this year. The OCC’s approvals come amid legal pushback: an association of local U.S. banks has initiated legal action challenging the OCC’s issuance of crypto-related bank charters.
Markets await the Fed and focus on Warsh’s briefing
The Federal Reserve was scheduled to announce its decision on October 28, 2026, with markets broadly expecting rates to remain in the 3.75%-4.00% range after a 25-basis-point hike in September. Despite headline inflation reaching 3.7% in September, traders assigned only a 7% probability to another rate hike at the October meeting as of October 27, and many saw December as a more likely timing for further moves.
Attention during the Fed event centered on Kevin Warsh’s press conference. Additional economic inputs include the personal consumption expenditures (PCE) price index due October 29 and the U.S. midterm elections one week later, factors that market participants cited when assessing near-term policy risk.
Keystone factory key breach forces device destruction
Hardware wallet maker Keystone disclosed on October 26, 2026, that attackers had obtained its factory key used to verify device authenticity. As a result, the company will destroy 18,835 unsold devices and has suspended shipments, citing the risk of counterfeit units entering the market. Keystone said the breach was discovered on October 20 and affects 25,964 customer records from 2024 to 2026; the company also reported that recovery phrases and private keys remain unaffected.
Keystone warned users about scammers who might request returns of devices by falsely claiming a product recall. The firm’s actions underscore the risks around supply-chain and manufacturing keys for hardware wallets, which are physical devices used to store cryptographic private keys offline.
Data exposures at Coinbase and Bithumb
Coinbase denied a hack on October 28, 2026, after an incident at service provider Amplitude exposed contact information for a small number of customers, and the exchange said there was no risk to customer funds. Separately, on October 27, Bithumb detected a breach in its internal employee communication system and is investigating whether member data was leaked; the exchange asserted that customer assets remain secure and inaccessible to unauthorized parties.
The disclosures come against a backdrop of regional cyber activity: by October 14, cyberattacks had affected 16 financial institutions in South Korea, highlighting persistent operational risks across exchanges and financial firms.
Ethereum fixes 'Glamsterdam' validator bug
On October 26, 2026, Ethereum developers merged a fix for a validator-related bug nicknamed 'Glamsterdam.' The flaw could have allowed an operator to misappropriate ETH from new validators when the builder and the validator shared the same public key. The change had been rejected on October 19 but was later reconsidered and integrated; no losses have been reported to date.
The fix requires setting a new date on the 'Hoodi' testnet before a mainnet launch can be scheduled. Validators are nodes that participate in block validation on proof-of-stake chains like Ethereum, and builder-validator interactions have been an area of active protocol scrutiny.
Takeaway
This week combined regulatory advancement for Ripple with reminders that operational and security issues remain central to crypto infrastructure. While the OCC charter for Ripple opens new custody and stablecoin pathways, market participants will be watching macro policy signals from the Fed as well as ongoing incident responses from device manufacturers and exchanges.