agency

According to The Block citing the Financial Times, EU regulators are questioning Binance's use of legal exemptions to continue providing services to EU customers after failing to obtain a MiCA license.Binance stated that the company complies with applicable regulatory requirements in the jurisdictions where it operates and is working towards obtaining MiCA authorization.

The personal AI agent business ai.com under Crypto.com has not yet been opened to the public since its debut during the Super Bowl in February this year. According to Cointelegraph, ai.com spent $15 million on advertising during the fourth quarter of the Super Bowl to promote the launch of its AI platform, leading to a surge of users rushing to reserve personal AI agent accounts, which caused the website to crash within minutes. Nearly 8 months later, the site still displays a message indicating that due to high demand, AI agent generation is in queue. A spokesperson for Crypto.com confirmed that the platform is still under development, stating that ai.com continues to advance in stealth mode and will provide more details when it is officially released to the public.The AI agents of ai.com are positioned beyond financial scenarios. In a statement released in February, it was announced that personal agents could arrange work, send messages, operate across applications, and build projects, and it also claimed that agents could independently develop missing capabilities and share improvements within the network. Meanwhile, competitors have launched AI assistants for more specific tasks: Robinhood announced on Tuesday that it could execute automated trading within the app using AI agents, Kraken launched AI financial tools in July, and Bitget introduced the AI trading assistant GetAgent in June. Anthropic introduced computer use in Claude Cowork in March, and OpenAI launched ChatGPT Work in July.During this period, Crypto.com continues to invest in AI business.

According to CoinPost, the National Tax Agency of Japan officially launched the first upgrade of its next-generation core system KSK2 on September 24, marking the first upgrade in about 25 years. The new system centers around personal identification numbers (My Number) and corporate identification numbers, achieving unified management of individual and corporate data, and introducing AI technology to enhance the detection of improper declarations.Cryptocurrency traders and investors are particularly affected, as annual transaction reports submitted by exchanges, bank account deposit and withdrawal records, and information exchange with overseas tax authorities (CRS) data have all been included in the key analysis scope of AI.In addition, statements related to "cryptocurrency profits" on social media will also be compared with declaration data, significantly increasing the risk of tax investigations. The National Tax Agency has also integrated horizontal data between corporations and individuals, making it easier to identify inconsistencies in assets and income for investors who purchase cryptocurrencies through private company investments or with funds from gifts and inheritances.Industry insiders emphasize that properly retaining annual transaction reports and accurately and completely declaring them has become an urgent priority.

The Financial Services Agency of Japan announced that its fintech proof-of-concept center's "Payment Enhancement Project" will support the fourth case, with applicants including TradeWaltz, NTT DATA, Mizuho Bank, Mitsubishi UFJ Bank, Sumitomo Mitsui Banking Corporation, and Mitsubishi UFJ Trust and Banking Corporation.This proof-of-concept program will commence in September 2026, verifying the practical responses to the use of stablecoins in trade transaction fund settlements and addressing related legal issues. After the experiment concludes, the Financial Services Agency of Japan will publish results and conclusions on topics such as compliance and regulatory responses, as well as interpretations of laws providing services to general users on its official website.

Verona announced the launch of verUSD on X, positioning it as the first stablecoin aimed at AI agents. The project claims that verUSD has secured over $100 million in institutional launch commitments.Participating institutions include Animoca Ventures, Figment Capital, Sfermion, Pentos Ventures, ArkStream, and others. Verona is a company providing on-chain payment and settlement infrastructure for AI agents, and verUSD is intended to serve as a stablecoin tool for value transfer and settlement between AI agents.

U.S. President Trump stated that the United States will not hinder the development of the artificial intelligence industry but will support and oversee the growth of the sector. He announced plans to establish an "Artificial Intelligence Working Group" and will appoint an "AI Czar" responsible for AI affairs in the future.Trump emphasized that the government will not suppress AI innovation through restrictive measures but will use the existing judicial system to address illegal activities in the AI field.

According to Ledger Insights, Brazil's securities regulator (CVM) is advancing a pilot program for distributed ledger technology (DLT) aimed at tokenized securities. This program only involves simulated trading and does not involve real securities or investors.Coordinated by the CVM Tokenization Working Group (GTT), the testing will last for 60 days and can be extended for an additional 30 days. The draft is pending approval from the board. The scope covers most of the securities lifecycle, from issuance to settlement, including stocks, bonds, receivable certificates, and investment fund shares.

According to a joint alert issued by the Japanese National Police Agency, FBI, ASD/ACSC, BND, and BfV, the North Korean-backed cyber attack organization "WaterPlum" (also known as Contagious Interview) targets job seekers by disguising itself as an AI, cryptocurrency, and NFT company to post fake job listings. This lures job seekers into downloading NPM packages containing malware such as BeaverTail, InvisibleFerret, and OtterCookie, which then steal cryptocurrency wallet information and confidential data.As of July 2026, the organization has infected over 30,000 devices in more than 100 countries and regions worldwide, stealing information from over 7,000 cryptocurrency wallets, with the wallets under its control receiving at least approximately 1.7 billion yen (about 10.71 million USD) in cryptocurrency. The Japanese National Police Agency has discovered and dismantled a "notebook farm" established by local "supporters" for the first time in the country, where North Korean IT laborers remotely control PCs within the supporters' residences to conduct business, with the related amount involved reaching several hundred million yen.The police and FBI assess that WaterPlum and some North Korean IT laborers are under the unified command of the 313 Bureau of the Ministry of Military Industry of the Workers' Party of Korea, with the profits directly flowing into North Korea's national funding pool. The police remind IT technicians and corporate issuers to remain vigilant and avoid executing third-party code in unverified environments.

The Financial Services Agency of Japan announced the "2026 Fiscal Year Financial Administrative Guidelines," proposing to clarify the issues of on-chain finance in terms of technology, systems, and regulation through verification and dialogue between the public and private sectors, while ensuring user protection and the stability of the financial system, and to build a financial infrastructure that is both convenient and competitive.The Financial Services Agency of Japan will also promote the shortening and upgrading of securities settlement processes in conjunction with the development of asset tokenization, and plans to establish an on-chain financial forum aimed at the AI era to discuss the applications of digital finance, decentralized finance, and AI technology in the financial sector.

According to a report by Sina Finance, Lin Junxian, a former client manager of China Construction Bank (Asia) Corporation Limited, admitted to conspiring with an employee of a financial technology company and his accomplices to accept bribes, totaling over 470,000 US dollars in cryptocurrency "Tether." They illegally certified multiple false documents without the bank's authorization to secure several insurance-related investment transactions.An internal investigation by China Construction Bank (Asia) uncovered the incident, which was subsequently reported to the Independent Commission Against Corruption (ICAC) along with full cooperation. Judge Lin Jianhong has postponed the sentencing of the case to September 18, during which the defendant will remain in custody under the Correctional Services Department.

The Office of the Superintendent of Financial Institutions (OSFI) in Canada stated on Thursday that tokenized deposits are legally indistinguishable from traditional deposits, and noted that the underlying technology used in financial products or services does not determine their legal nature.OSFI indicated that financial institutions can conduct tokenized deposit business under existing financial regulatory laws without the need to establish additional regulatory provisions. Financial institutions and third parties acting on their behalf must ensure that their operations comply with applicable laws and regulations. OSFI requires financial institutions to communicate in advance with the OSFI supervisor responsible for regulation before launching new products or services, and recommends seeking legal advice prior to going live. The agency oversees nearly 350 financial institutions and 1,200 pension plans.

The Japan Digital Agency stated that its servers suffered unauthorized access, and the personal data of approximately 246,000 individuals may have been leaked. The agency announced on Friday that in late June, it detected someone using a maintenance account to access a large number of files on its government solutions service network.Subsequent investigations revealed that someone exploited a virtual private network vulnerability, potentially stealing information from civil servants and other individuals using the system.

According to SlowMist monitoring, the BSC chain project BeatXswap suffered a price manipulation attack, resulting in a loss of approximately 2.985 million BTX (about $77,500).The attacker borrowed 6 million BTX through a flash loan and sold it into the Uniswap V3 pool to lower the price. They then exploited a vulnerability in the contract that used only the V3 pool's instant price as the sole pricing basis (without TWAP protection and without deviation limits), depositing USDT in two transactions to trigger liquidity mining and withdrew BTX from the LP position.

According to a report by Sina Finance, Anthropic refused to submit its latest model Claude Mythos 5.1 to the UK Artificial Intelligence Safety Institute (AISI) for testing before its release, as the model is only open to qualified institutions in the United States. This move has raised alarms within the UK Whitehall and AISI, with UK national security officials concerned that this could set a precedent, making it difficult for AISI to access the latest cutting-edge models in the future.Analysts pointed out that this action may be related to the increasingly stringent export control policies of the US government on the AI industry. The US government had previously implemented export controls on Anthropic's models Mythos and Fable, prohibiting foreign nationals from using them. Anthropic declined to comment on this, only stating that it is coordinating with the US government to expand access to the model for more domestic and international partners as soon as possible.

The Financial Intelligence Unit of India (FIU-IND) issued non-compliance notices to 15 offshore virtual digital asset service providers under Article 13 of the Anti-Money Laundering Act, including Weex, Blofin, Rezorex, Bitunix, DigiFinex, Toobit, XT.com, Latoken, WOO X, Pionex, ChangeNow, SimpleSwap, Fixedfloat, WhiteBIT, and Guardarian. These platforms are accused of providing services to Indian users without registering with FIU-IND.Since March 2023, India has included cryptocurrency platforms in the same anti-money laundering regulatory framework as banks, requiring any platform serving Indian customers, regardless of whether they have an office in India, to complete registration and fulfill user verification, record-keeping, and suspicious transaction reporting obligations. FIU-IND also warned the public that cryptocurrency products and NFTs are unregulated and carry extremely high risks, and related trading losses may not be eligible for regulatory relief.This action comes amid reports of Indian users converting stablecoins like USDT into gift cards through platforms in Sweden, Germany, and Singapore to purchase groceries, fuel, and gold in India. Previously, FIU-IND had issued notices to nine major offshore exchanges, including Binance, Kraken, and KuCoin, in December 2023, after which Binance completed its registration and paid a fine of 1.882 billion rupees.

According to Bitcoin.com, the Swedish Tax Agency has issued tax reassessments and fines totaling approximately $56.5 million (around 540 million Swedish Krona) to six cryptocurrency mining companies in Boden, accusing them of disguising their mining operations through complex corporate structures and illegally obtaining tax benefits for data centers.This enforcement action stems from a comprehensive industry audit covering 2024 to 2026, with a total of nine mining companies nationwide being pursued for over $50 million in taxes, with the six companies in Boden accounting for the vast majority. Among them, Bikupan Datacenter, a subsidiary of Hive Digital, has initiated financial restructuring due to its inability to pay taxes and has appealed the tax ruling to the Supreme Administrative Court. A previous investigation by the public broadcaster SVT Norrbotten revealed that cryptocurrency mining companies have caused the Swedish government to lose approximately $100 million in tax revenue.

Meta CEO Mark Zuckerberg expressed concerns about the plan to establish a national AI regulatory agency during a phone call with U.S. President Donald Trump last month. The proposal, advocated by Google DeepMind scientist Demis Hassabis and supported by some White House officials, aims to create an independent organization similar to FINRA to review and test potential risks before the broader deployment of advanced AI models. White House officials previewed the proposal to Trump and major tech companies, including Meta, in mid-August.Trump spoke with Zuckerberg during the week of August 17. According to senior White House officials familiar with the conversation, Zuckerberg opposed the proposal. Another informed source indicated that Zuckerberg did not ask Trump to change his position but told him that the personnel of the regulatory agency the White House might appoint should reflect Trump's light-touch approach to AI, noting that Trump made the call first. The conversation did not kill the idea, which is still under consideration. A Meta spokesperson declined to comment. A White House spokesperson stated that the Trump administration is committed to balancing innovation and safety in AI policymaking.In an article in August, Zuckerberg expressed skepticism about strict government regulation of new AI models, arguing that any policy that delays the release of models by even a month would pose significant risks to the U.S. leadership position relative to China. The government is considering a FINRA-like regulatory agency or a voluntary industry organization similar to the Motion Picture Association of America. Trump's former AI and crypto czar, David Sachs, opposed government regulatory agencies, calling them "the DMV of AI." Anthropic co-founder Jack Clark expressed support for the FINRA-like idea in a post in July.

According to Cointelegraph, the Financial Services Agency (FSA) of Japan proposed in its 2026 tax reform request to exempt trust-based stablecoins from mandatory tax reporting obligations starting from the fiscal year 2027. The agency suggested that trust-based stablecoins do not need to submit beneficiary trust reports and calculation statements that include the names and income of beneficiaries.The reason given by the FSA is that trust-based stablecoins circulate among a large number of users, with frequent and numerous transactions, and holding these assets does not generate income. If the proposal receives legislative approval, the relevant tax exemption measures will take effect from April 1, 2027.This move is part of Japan's efforts to incorporate cryptocurrency assets into the regulatory framework for traditional financial assets. In July of this year, the Japanese Diet passed an amendment that classifies cryptocurrency assets as financial assets under the Financial Instruments and Exchange Act, a direction first signaled by Finance Minister Shunichi Suzuki in January.

The semiconductor and AI independent research organization SemiAnalysis released a deep security report on Neocloud (new cloud), revealing various cross-tenant security vulnerabilities discovered during the ClusterMAX 3 testing period. In a four-month test covering 25 vendors and 32 clusters, the team achieved multiple instances of cross-tenant remote code execution (RCE) solely by exploiting publicly known vulnerabilities and basic configuration checks. Affected entities included banks, telecommunications companies, universities, research institutions, AI laboratories, and even a national intelligence agency.Typical issues included: shared Kubernetes control plane leading to tenant metadata visibility, container escape, exposure of BMC/IPMI management networks, incorrect configuration of InfiniBand security keys (P_Key, SA_Key, M_Key), unfortified default trust mode of BlueField DPU, Grafana monitoring dashboards using god-level API keys, and lack of VXLAN isolation in front-end networks. The report specifically pointed out a cascading vulnerability case: a misconfiguration of shared vCluster combined with software versions being two years out of date ultimately completed the POC verification of cross-tenant RCE within an afternoon.Notably, the report questioned the mainstream narrative that "AI has fundamentally changed the pace of cybersecurity": statistics on CVEs for NVIDIA GPU drivers, CUDA, PyTorch, Kubernetes, Docker, and the Linux kernel showed that there was no significant increase in vulnerabilities after the popularization of AI coding models, with most data supporting the "no change hypothesis." The report also detailed the incident where an OpenAI-trained agent attacked Hugging Face, where the AI agent achieved cluster-level privilege escalation through a message board established via Artifactory, which went undetected from May to July. While building POC verification for existing vulnerabilities, the team found that Claude Fable and GPT-5.6 Sol frequently rejected security-related requests, ultimately relying on open-source models such as DeepSeek V4, Kimi K3, and GLM-5.2 to complete the task.SemiAnalysis stated that the core issue in the Neocloud (new cloud) industry is not the new risks brought by AI, but rather the long-term absence of basic patch management, tenant isolation, and security design. They recommended that vendors establish automated security announcement monitoring systems and rectify single points of failure that could expose all users' architectural patterns.