
And go away, so they say. Yet, not all of us heed that advice, do we?
Story One
Clarity is coming…now what?
If you spent any time on CT last week, it’d have been impossible for you to miss all those posts saying:

For the longest time, crypto could hide its lack of adoption behind the lack of regulatory frameworks.
Those days are over, as the US is set to pass the so-called Clarity Act. This federal bill aims to create a market structure for digital assets and answers the one question that has haunted token projects ever since: is it a security?
After passing the House in July last year, the draft has been sitting in the Senate Committee since September 2025, highlighting once again the speed at which the wheels of bureaucracy move. Only in May 2026 did the Senate reach a conclusion, with a panel approving the act. Now what?
The act itself will bring the much-desired clarity for some, at the cost of imposing stricter surveillance and AML requirements.
While some celebrate that we finally know what is and isn’t a security, others deem it the biggest financial surveillance expansion since the PATRIOT Act.

Takeaway: Once again, we should be careful what we wish for. While regulatory frameworks have been in high demand since crypto began, they also carry the baggage of the traditional financial system, namely KYC, AML, and sanctions. We’re purchasing clarity at the cost of control.
Story Two
Exploits continue until morale improves

April was a great month for hackers, and May is trying to follow in its footsteps. Once again, it was onchain sleuth ZachXBT, who flagged an ongoing exploit. This time, it was the (in)famous cross-chain liquidity protocol Thorchain that fell victim to an attack draining it of over $10 million in assets.
Thanks to a bug, attackers could trick the system into treating incoming deposits as outgoing withdrawals, thereby approving the transfer of real funds to the attackers’ wallet.
Tragically, the team had already written a patch for the flaw, but it failed in their automated testing and deployment system, leaving the vulnerability in. To deal with the exploit, the network went into hibernation, pausing all activity until further notice.
What is somewhat ironic about this hack is that Thorchain has become the de facto favorite place for attackers to route stolen funds on a large scale. Yet even hackers’ favorite laundromat is not safe from exploits.
Takeaway: There’s probably a lesson here on how you should properly review your automation workflows. Aside from that, I’d say Thorchain accumulated enough bad karma to warrant such an exploit.
Story Three
EF employees do walk away
Since the beginning of this year, the Ethereum Foundation (EF) has not just been selling ETH, they’ve also been bleeding talent. This week alone, two more researchers announced their departure on X.
They are only the last in a long line of key personnel quitting, which includes all three Ethereum protocol leads.
Does that mean the EF is over?

Probably not, yet the timing, as CT savants point out, is certainly suspicious as the departures fall after a controversy erupted earlier in the spring over the EF mandate.
The mandate, “part constitution, part manifesto,” was meant to reaffirm the EF’s stance as a neutral steward of the ecosystem. However, its aesthetic and wording choices were clearly inspired by Milady (a controversial NFT project), sparking debate over whether one NFT community had an outsized impact.
Van Epps even called the association “baffling” shortly before quitting, suggesting that EF employees either “sign or quit”. A meme that spread like wildfire.

Takeaway: All exiteers framed their departures as personal moves. Yet referencing Milady's stylistics in a document outlining a supposed credible neutral stance was probably not the way (not that I’m a PR professional). Anyway, the good news is that perhaps the fewer people there are at the EF, the less ETH they will sell.
Fact of the Week: No fun fact this week. This is the last Onchain newsletter I’m writing, as I too have decided to walk away from crypto for a bit. It’s been great fun, and thanks a lot for reading! May your coins go to the moon one day.
Naomi for CoinJar
CoinJar’s digital currency exchange services are operated by CoinJar Australia Pty Ltd ACN 648 570 807, a registered digital currency exchange provider with AUSTRAC.
CoinJar Card is a prepaid Mastercard issued by EML Payment Solutions Limited ABN 30 131 436 532 AFSL 404131 pursuant to license by Mastercard. CoinJar Australia Pty Ltd is an authorised representative of EML Payment Solutions Limited (AR No 1290193). We recommend you consider the Product Disclosure Statement and Target Market Determination before making any decision to acquire the product. Mastercard and the circles design are registered trademarks of Mastercard International Incorporated.
Google Pay is a trademark of Google LLC. Apple Pay is a trademark of Apple Inc.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.



