October opened in the green, but look under the hood and the picture is more complicated. Between a market that's strong at the top and soft underneath, a major hack pinned on North Korea, a flurry of US regulatory moves, and another blockchain shutting its doors, it was a busy weekend. If you stepped away, here's everything that mattered, in one place.

1. "Uptober" starts green, but the rally is top-heavy

Bitcoin kicked off October, historically one of its strongest months, on a firm note, trading in the mid-$80,000s and briefly breaking above $86,000 on Thursday after dovish Fed comments eased rate-hike fears. Spot Bitcoin ETFs added to the optimism, drawing $134 million in inflows as the new month began.

But beneath the green headline is a warning worth heeding. The rally is top-heavy: while the total crypto market cap held near $2.89 trillion, 63 of the top 100 assets were actually lower, and Bitcoin's dominance climbed to around 59%. In plain terms, the gains are concentrated in Bitcoin while most altcoins quietly weaken, a "breadth warning" that signals a market whose internal support is fading even as the headline number holds. A healthy, sustainable rally usually broadens out across many coins; a top-heavy one leaning on Bitcoin alone is more fragile. It's not a red flag that the rally is over, but it's a reason for caution as "Uptober" gets underway.

2. The $387M Bitget hack was traced to North Korea

The biggest security story of recent weeks got its culprit. Blockchain-analytics firm Chainalysis used AI-assisted tracing to tie the ~$387 million Bitget hack to North Korea, consistent with the pattern of state-sponsored groups (like the notorious Lazarus Group) behind many of the year's largest exchange breaches. The attribution follows an industry-wide effort to track the stolen funds as the attacker moved them across chains, including through privacy tools, in the days after the breach.

For context on just how brutal the stretch has been: September was the worst month for crypto hacks in all of 2026, with roughly $768 million lost across 55 major incidents (a ~462% jump from August), led by Bitget (~$387M) and the Liquid Network exploit (~$320M, most of it returned). Meanwhile, there was a small bright spot: NEAR Intents confirmed the full $3.8 million from its own recent exploit was recovered and the case closed, a reminder that not every hack ends in total loss.

3. A US regulatory whirlwind

Washington had a packed weekend for crypto policy, pulling in several directions at once:

  • The SEC proposed a crypto custody framework. Chair Paul Atkins unveiled proposed rules giving investment advisers and regulated funds a compliant path to hold crypto directly, with Atkins arguing on-chain markets shouldn't be pushed offshore. It's a constructive, industry-friendly move, though analysts noted it leaves decentralized "vaults" in an unsettled gray zone. A 60-day comment period follows.
  • The SEC approved 3x leveraged Bitcoin and Ether ETPs for listing, per Bloomberg analyst Eric Balchunas, a notable (and higher-risk) expansion of crypto investment products.
  • Trump tapped Jay Clayton to lead an AI push. In an ironic twist, the former SEC chair who launched the agency's lawsuit against Ripple is being brought in for a government AI initiative, a striking turn given his contentious history with the crypto industry.
  • The "banks vs. crypto" fight escalated. A banking group (the Independent Community Bankers of America) sued the OCC to block national trust-bank charters for crypto firms, arguing the charters let crypto companies into the banking system through a "side door" without the safeguards traditional banks face.

4. Blast L2 is shutting down

Another blockchain is closing its doors. Blast, an Ethereum Layer-2 network, announced it will shut down, citing unsustainable economics, the ongoing costs of running the chain exceeded the revenue it generated. Users must withdraw their funds to Ethereum before October 26. It's the latest casualty of a tough market that's squeezing smaller and mid-tier players (the exchange CoinEx announced a similar wind-down recently), a sign of consolidation as the industry matures and only the most sustainable projects survive.

5. Quick hits

  • September was crypto's worst hack month of 2026 (~$768M lost), capping a brutal quarter for security.
  • SBI Holdings completed its full acquisition of Bitbank, one of Japan's major crypto exchanges, continuing the consolidation trend.
  • The US Treasury sanctioned the Russia-linked A7 network over roughly $179 billion in stablecoin flows, part of a widening crackdown on illicit stablecoin use.
  • Quant (QNT) led the week's gainers, up around 158% on its tokenized-deposit deal with The Clearing House (though analysts have flagged the move as stretched).
  • Japan's bitFlyer announced "Cooldown," restricting external crypto transfers for 48 hours after fiat deposits for newer users, an anti-fraud measure starting October 15.
  • Illinois agreed to delay its 0.2% crypto tax to July 2027 amid a constitutional court challenge.

The bottom line

The weekend captured crypto's maturing-but-messy reality. The market is green but narrow, leaning on Bitcoin while altcoins soften. Security remains a serious problem, September was the worst hack month of the year, even as tracing improves and funds sometimes come back. And the regulatory machine is grinding in every direction at once: constructive SEC custody rules, riskier leveraged products, banks fighting crypto's entry, and an ironic political appointment. Underneath it all, the consolidation continues, another L2 shutting down, another exchange acquired, as the industry sorts the sustainable from the subsidized. Heading into a new week, the questions to watch: can the rally broaden beyond Bitcoin, does "Uptober" live up to its bullish reputation, and how the SEC's custody proposal and the banks-vs-crypto lawsuit shape the months ahead.

This is educational information, not financial advice. Crypto is highly volatile; prices and figures cited are as of publication and will change. Always do your own research.