Subscribe for daily free DeFi news covering launches, tradable catalysts, and actionable farming opportunities.
TL;DR
MetaMask is exiting about 17,000 Ethereum validators (~523,000 ETH) through Lido after a staking incident, with the last due by Oct 7 and up to 45 days to re-enter.
Three wind-downs are in motion. Blast users must withdraw by Oct 26, Balancer goes withdrawals-only on Oct 30, and Abracadabra’s MIM is at about $0.04.
NEAR Intents’ $3.8M exploit was returned in full. A Base vault lost ~$6M (1,783 wstETH) after a 60-second multisig approval flip.
Kinetiq’s KNTQ claim is open at a fixed $0.26 with a 10-day window. Fables (Robinhood Chain) set its TGE for Oct 20.
The SEC proposed a custody framework (60-day comment period), and S&P launched its Vault Risk Assessment.
DeFi📈
Fables, a DEX on Robinhood Chain, confirmed TGE for October 20, with up to 75M liquid tokens at launch. Points accrual ends October 19; PROLOGUE snapshot is October 17- 18; claim terms published October 12.
No team tokens are liquid at TGE.
Jumper’s JUMP token sale opens September 29, 1 PM UTC on Legion — allocations prioritize community XP level and waitlist leaderboard rank (top 500 get priority), with 5% reserved for Legion’s Republic program. KYC/geo restrictions apply; not available to persons in the US or UK.
Aave mobile app now supports USDC and USDT deposits directly from Ethereum. Waitlist users can skip the line with Ghost Pass code ‘ETHEREUM’.
Aave V4 is proposed for deployment on Monad, featuring three risk-tiered markets with USDC and USDT as borrowable assets.
Morpho launched P2P Orders on Morpho Midnight, enabling custom loan terms with a counterparty and on-chain settlement, available on Ethereum and Base.
Base shipped Cobalt, its third 2026 upgrade, introducing Validity Transactions that let traders submit a transaction that executes only when a price or block condition is met.
Kinetiq opened its KNTQ claim: 36.8M kPoints that were distributed will convert into a 50M KNTQ allocation at a fixed $0.26 per token, with a 10-day claim window.
Find and execute the 15%+ stablecoin yields in minutes
Save time without checking every protocol manually. DeFi Saver’s Discover page surfaces rates across Aave, Morpho, Spark, and more, lets you simulate leverage before committing, and handles the full loop in one click. Stop leaving yield on the table.
<Discover Yields on DeFi Saver> | Today in DeFi is Supported by DeFi Saver
Issues⚠️
MetaMask is responding to a security incident affecting its staking infrastructure — researcher Kaden found 18 of 19 MetaMask-operated validators redirected block-production payments to an unexpected wallet.
MetaMask is proactively exiting affected validators via Lido (~17,000 validators, ~523,000 ETH), with the last expected to exit by October 7; the full exit-to-re-entry cycle could take up to 45 days.
MetaMask states it holds no withdrawal keys, so customer funds remain unaffected.
NEAR Intents was exploited for about $3.8M through a bug in how the Omni deposit/withdrawal system interacts with the Intents contract. Deposits and withdrawals were paused on 11 networks for about 12 hours, and the bug was patched the same day.
ZachXBT traced BSC hot-wallet outflows to KuCoin and a bridge to BTC.
The team identified the party responsible in under 24 hours using its SHIELD AI security layer, and the funds were returned in full. The investigation is closed.
An unidentified Base vault lost 1,783 wstETH (~$6M) after its multisig approved a new contract, removed it, and re-enabled it within 60 seconds. The attacker borrowed aBaswstETH from Aave V3, redeemed it for wstETH, and bridged some funds to Ethereum. Base and Aave core contracts weren’t hit.
Single-source and unverified; no post-mortem yet.
A user alleges ~50 BTC remains stuck in Solv Protocol’s BTC+ despite restored redemptions announced July 31, after two months of unresolved email exchanges.
Wind Downs
Abracadabra is winding down MIM at about $0.04 per token, stating that ~$900K of recoverable backing sits against $21M of bad debt.
Blast is shutting down, citing ongoing costs that exceed revenue. Withdraw to Ethereum mainnet by October 26. Withdrawals will pause for about a week during the Lido unwind, then resume with a 24-hour delay.
Balancer holders approved the wind-down with 99.2% of votes, and the fork proposal was rejected. Pools go withdrawals-only on October 30. BAL holders can burn tokens for a treasury share from May 2027, estimated at ~$0.16 per BAL (not guaranteed).
Ostium launched its Recovery Portal after the July 15 exploit (~$23.75M stolen). 90.59% of affected wallets get 100% recovery: losses under $1,000 claim immediately (90-day window); losses above $1,000 choose between a flat $1,000 payout or pro-rata Stage 2 recovery (30-day decision window).
Stage 2 details land before October 30.
Stablecoins/RWA🪙
Neverland’s new market (ECSV-02) cuts stablecoin borrow rates in half and raises stable supply rewards by 50%.
Avant Protocol launched on Base, bringing its productive capital infrastructure to the chain via Morpho’s lending markets.
Maple Finance upgrades syrupUSDC, syrupUSDT, and syrupUSDG to Chainlink CCIP 2.0 for faster bridging and direct minting on other chains, aiming to enhance seamless integration.
Perps DEX📉📈
Ondo Perps launched spot trading for Ondo Stocks, letting users buy tokenized equities, use them as collateral, and short the corresponding perp for a basis trade, all on one platform.
News🗞️
S&P Global Ratings launched the Vault Risk Assessment on Oct 4. scoring six risks: portfolio credit quality, liquidity mismatch, curator, blockchain, protocol, and vault security/governance.
BlockTower’s Ari Paul alleges Coinbase covered up $1B+ in repeated hacks across a dozen firms, including $25M from his own firm that Coinbase allegedly refused to return. Multiple legal processes are reportedly ongoing. Coinbase has offered to review the matter directly.
Bitget resumed Bitcoin withdrawals, processing 4,098 BTC after its $387.5M exploit. Attackers used spoofed commands to exploit a third-party flaw; cold wallets stayed safe.
NEAR Intents flagged and blocked most of a $50M+ laundering attempt. Other asset withdrawals roll out through early October.
SEC clarifies how Advisers and funds could self-custody crypto in certain cases, and state trust companies could act as custodians. The comment period is 60 days after publication in the Federal Register.
For sponsorships, questions, or news tips, reach us at: support@todayindefi.com
