Subscribe for daily free DeFi news covering launches, tradable catalysts, and actionable farming opportunities.
A Week in one Paragraph:
Security dominated this week — Coldcard’s firmware flaw drained $89M+ across 4,500+ Bitcoin wallets, and Metronome’s msUSD is sitting 27% below peg after months of undetected oracle exploitation. Uniswap turned on its fee switch across V4 and Robinhood Chain pools, 1inch launched Aqua to let LPs back multiple positions from a single wallet balance, and Reflect brought universal tranching to Solana — all signs DeFi infrastructure is getting more capital-efficient.
Warning ⚠️: If you’re on a Coldcard Mk3 with firmware 4.0.1–5.0.3 and no passphrase or multisig, move your funds now.
DeFi 📈 %
Uniswap activated its fee switch across all V4 pools and top Robinhood Chain V3 pools, routing up to 25-33% of swap fees from LPs to the protocol for UNI token burns.
Uniswap launched Earn, letting users deposit USDC, USDT, or ETH directly in the Uniswap app to earn yield with no lock-ups — powered by Morpho and curated by Gauntlet.
1inch launched Aqua, a shared liquidity layer where LPs back multiple positions from a single wallet balance without depositing tokens into pools.
Reflect launched a universal tranching layer on Solana, letting users split any yield-bearing asset into a protected senior tranche (lower yield, loss protection) and a leveraged junior tranche (higher yield, first-loss risk) — launching soon with one of DeFi’s largest issuers.
Sushi Launch goes live on Robinhood chain as a native token launch layer paired with tokenized real-world assets and Stock Tokens.
Jupiter launches Spot V2 on Solana, merging Swap and Terminal into a unified trading interface. The redesign enables users to discover and execute trades without switching tools.
Aave is deprecating 50 low-adoption assets and winding down deployments on Sonic, Scroll, zkSync, Metis, Soneium, and Aptos — affecting $98.1M in supply and $15.6M in debt, less than 0.4% of total TVL.
Existing users can exit at their own pace.
Stacks activated PoX-5, laying groundwork for Bitcoin Staking. All staked STX unlocked and must be restaked before Bitcoin block 962,050 to keep earning BTC in the first PoX-5 cycle.
Find and execute the 15%+ stablecoin yields in minutes
Save time without checking every protocol manually. DeFi Saver’s Discover page surfaces rates across Aave, Morpho, Spark, and more, lets you simulate leverage before committing, and handles the full loop in one click. Stop leaving yield on the table.
<Discover Yields on DeFi Saver> | Today in DeFi is Supported by DeFi Saver
Issues⚠️
COLDCARD hardware wallet attacks have compromised 4,500+ addresses with losses exceeding $89 million. A vulnerability in Coldcard's firmware allowed an attacker to reconstruct seeds offline — some devices used a predictable software-based generator tied to chip serial numbers and clock data instead of true hardware randomness.
Bitcoin users are to immediately verify wallet integrity and review address generation security on affected devices.
Ebisu is shutting down, citing failure to scale ebUSD liquidity enough to support meaningful borrowing. No EBISU token or airdrop will launch. Frontend closes October 30
Users should close Troves and withdraw funds now.
SiloDAO filed a coordinated recovery claim with Stream Finance on behalf of all lenders exposed to xUSD and xBTC, totaling over $31.6M in stablecoin claims plus 272.70 BTC.b.
Eligible lenders don’t need to file individually, as claims are calculated from a November 7, 2025 snapshot and viewable at here
SK Hynix perps flash crashed 20% to $900 on Hyperliquid before rebounding. Trade.xyz confirmed the oracle worked as designed, which tracks a real Korean pre-market trade.
The team is issuing a one-time discretionary payout to affected users and improving its tail-event pricing.
Coldcard disclosed a critical vulnerability in Mk3 devices — seeds generated on firmware 4.0.1 through 5.0.3 used low-entropy random number generation, and attackers have already exploited it, moving 1,324 UTXOs from dormant single-sig wallets.
If you generated a seed on a Mk3 in that firmware range without a passphrase, dice rolls, or multisig, move funds immediately to an unaffected device (Mk4, Q, Mk5).
Wemix suffers $6.25M security breach after contract owner privileges were compromised, resulting in unauthorized token minting and transfers requiring immediate remediation.
Depegs 🪙 ⚠
Metronome’s msUSD is trading around $0.73, ~27% below peg. The team disclosed that its synthetic swap module is underbacked by ~6,367 msETH and ~4.57M msUSD — they claimed that the depeg is due to stale Chainlink feeds exploited by MEV bots over several months, undetected while the team investigated other causes.
Altura’s wind-down hit another obstacle — the UK bank account holding £16.4M ($21M) earmarked for USDT purchases and user redemptions has been frozen pending a bank review.
Community chats are paused while the team waits for the bank to respond. AVLT dropped 70% on the news.
Stablecoins/RWA🪙
Ondo launched the Ondo Network — execution infrastructure combining TEE enclaves for private high-speed execution, decentralized attestors for verifiability, and blockchains for settlement. #opportunity
AUTO is now live on Kamino — a Solana RWA backed by near-prime US auto loans, originated by Agora Data and issued by Hastra. #opportunity
Solstice launches Season 3 on Solana with 5,500+ funded users earning Flares for YieldVault positions and upcoming strcUSX.
Solstice Season 2 closed; S2 Flares (reward points) are now locked and determine SLX token allocation share.
News🗞️
Strategy reported an $8.22B net loss in Q2 2026 from unrealized BTC losses, but still grew holdings to 843,775 BTC (+25% YTD) and raised $17.06B via ATM offerings.
STRC’s dividend was hiked to 12% to defend its price, partly funded by $218.4M in BTC sales — with board authorization for up to $1.25B more if needed.
Strategy repurchased 288,930 STRC shares for $25M at $86.52 average, signaling it will be a regular buyer below $100 with $975M remaining in its buyback program.
Repurchases will be funded outside the USD Reserve, including potential MSTR and BTC sales.
Galaxy and K3 Capital launch institutional credit lending vault on Monad via YieldApp, using AUSD stablecoins with independent verification by Accountable.
US Senate Majority Leader John Thune prioritizes the Clarity Act for passage before August recess, signaling potential regulatory progress for crypto.
Multisig.software launched a self-custody timelocked multisig vault with a programmable onchain blueprint — letting individuals and protocols add time delays to wallet transactions as a security layer, inspired by the vulnerabilities exposed by exploits like Drift’s $285M loss.
Agave 4.2 upgrades Solana validator client with 90% rent reduction, 3.3x larger transaction capacity, and 200ms slot times. The release includes Alpenglow, the largest protocol change in Solana’s history, improving network throughput and cost efficiency for all validators.
For sponsorships, questions, or news tips, reach us at: support@todayindefi.com
Low-risk PT Loop For up to 18% APY
Keep reading with a 7-day free trial
Subscribe to Today in DeFi to keep reading this post and get 7 days of free access to the full post archives.