Cryptoccino — Wednesday 21 October 2026

JPMorgan publishes its first-ever long-term bitcoin return forecast. J.P. Morgan Asset Management’s 2027 Long-Term Capital Market Assumptions put bitcoin at 10% annualised over a 10-to-15-year horizon, ahead of equities, bonds and gold. The firm flags 55% annualised volatility as the main barrier to inclusion in its standard multi-asset models, so the forecast is analytical rather than a portfolio recommendation. theblock coindesk decrypt

Mt. Gox extends its repayment deadline into 2027. The trustee pushed the final distribution date back again, citing a large population of creditors who have not completed the procedural steps needed to receive funds. Roughly $2.8 billion in bitcoin remains undistributed, keeping an overhang on supply narratives for at least another year. decrypt

Switzerland greenlights its first retail spot bitcoin fund. FINMA approved the country’s first direct-holding bitcoin fund open to retail investors, waiving diversification requirements while tightening custody and investor-protection conditions. Switzerland already had crypto ETPs and a qualified-investor-only fund, making this the final rung of the retail access ladder. theblock decrypt

Ethereum staking hits a supply record as yields compress further. Bitwise’s Q3 report shows 43.8 million ETH staked, close to 36% of circulating supply, with yields falling to 2.63% as participation crowds the return. Solana staking also reached a record 440.5 million SOL staked over the same period. theblock

Tokenized stock objector list nearly doubles to 16 companies. Microsoft, Alphabet and Goldman Sachs are the latest to file objections to the planned OKX-ICE venue for tokenized equity trading, bringing the total to 16 from nine just four days ago. OKX-ICE co-chair Andrew Cuomo called the pushback a natural corporate reflex rather than a fatal obstacle, and OKX simultaneously unveiled OKX Shield, a new investor-protection product, apparently as a trust-building response. coindesk decrypt coindesk theblock

Mastercard opens early access to AI agent payment rails. Agent Pay for Machines moved from pilot to limited early access following tests with Coinbase, Base and Cloudflare. A live demo at Cloudflare Connect showed an AI agent autonomously executing nine payments across two merchants within a single pre-approved budget, the first public demonstration of the system end-to-end. theblock decrypt

Stablecoins now clear more than $400 million per hour on average. A joint Coinbase and The Block study found stablecoin transfer volumes running at that rate, dominated by off-hours transactions, suggesting payments and settlement activity rather than trading. At current growth the study projects $1.5 trillion in quarterly adjusted volume by end of 2027. theblock

Eighty-two crypto projects have shut down so far in 2026. A Cointelegraph survey of the year’s closure wave points to depleted runway, falling protocol revenues and security incidents as the dominant causes, spread across DeFi, infrastructure and gaming verticals. The count already exceeds full-year totals from the previous two years. cointelegraph_defi

Drift exploiter moves $61M through Tornado Cash, retains $194M. The wallet linked to April’s $295 million Drift protocol hack pushed 25,700 ETH through the mixer in a two-hour window and still controls the bulk of the stolen funds. Mandiant previously attributed the attack to a North Korean threat group. cointelegraph_defi decrypt

Certificate authority found with eight cracked signing keys. A certificate authority responsible for vouching for website identities was found to have generated RSA keys weak enough that researchers broke eight of them outright. Weak CA keys undermine the trust chain for HTTPS and, by extension, any web-facing crypto service relying on standard TLS. coindesk

SEAL logged 70 incidents in the week of 13-20 October. Security Alliance’s weekly radar report covers losses broken down by threat category alongside indicators of compromise collected during the period. No single incident dominated the count, pointing to continued broad-based low-to-mid severity activity rather than one large blow-up. seal_radar

OpenCode breach leaks API keys as AI-based defences slowed the response. An intrusion at developer platform OpenCode exposed API credentials, with responders noting that AI guardrails on their tooling delayed rather than accelerated containment. The incident is an early data point on the operational friction of deploying AI security tooling in live breach scenarios. cryptobriefing

France’s parliament votes to tax crypto-to-stablecoin swaps at 31%. The amendment, passed by a single-vote margin, would treat exchanges of crypto into euro or dollar stablecoins as taxable disposals starting in 2027, with gains calculated on a coin-by-coin basis. The razor-thin majority and the year-long implementation window leave room for the measure to be revised or reversed before it bites. coindesk decrypt

Utah sues Kalshi, calling it a back-alley gambling operation. The state’s attorney general filed suit against Kalshi and named associated Susquehanna entities, seeking disgorgement of profits and a ban on prediction market bets covering sports, politics and culture for Utah residents. The attorney general’s framing as a public nuisance rather than a securities violation is a deliberate end-run around federal preemption arguments Kalshi has used elsewhere. theblock cointelegraph_regulation

SEC’s Reg Crypto comment period closes but submissions keep arriving. Bitwise and Hyperliquid both filed comments seeking clearer classification rules for token trading and airdrops. The SEC confirmed it will continue accepting comments past the October 20 deadline, extending the window for industry and Wall Street — SIFMA and AIMA also submitted — to shape the final rule. cointelegraph_regulation theblock cryptobriefing

Kazakhstan court restricts Coinbase, BingX and four other platforms. A court in the Astana International Financial Centre ordered the six exchanges to curtail services, finding they operated without the required local licences. Nine other platforms avoided a ruling by voluntarily restricting their own app access, prompting the regulator to drop claims against them. coindesk cointelegraph_regulation

What else is grinding?

• Blockchain.com launched call and put options on seven assets including BTC, ETH, SOL and HYPE, with up to one-week expiries, as it pursues US derivatives licences. theblock
• The CFTC published its agenda for an upcoming AI forum covering algorithmic trading and agentic finance, signalling the regulator is moving toward a formal policy position on autonomous market participants. coindesk
• UK banks including Lloyds and Barclays are named in thousands of crypto transfer complaints filed by Stand With Crypto ahead of the country’s 2027 regulatory framework deadline. cointelegraph_regulation
• Injective partnered with BDACS to bring a Korean won stablecoin into its RWA ecosystem, timed to South Korea’s developing won-denominated stablecoin regulatory framework. theblock
• BitGo expanded its Canton Network role to include institutional custody and token support, deepening its position in the Goldman-backed permissioned DeFi network. cryptobriefing
• Decibel Trade activated Aptos’ encrypted mempool to shield order flow from frontrunning, one of the first live deployments of the feature on a production trading venue. cryptobriefing

Last sip. Sixteen companies have now objected to having their shares tokenised and traded on OKX-ICE, and the list is still growing.