Kategorie: Crypto Markets

• Ondo Finance token is down 4% after Nathan Allman’s death announcement.
• Ian De Bode officially takes over as Ondo Finance CEO.
• Ondo TVL holds above $2.67 billion amid market uncertainty.

ONDO token fell nearly 4% over the past 24 hours after news emerged that Ondo Finance founder Nathan Allman had passed away unexpectedly.

The token traded around $0.421 at the time of writing, down from an intraday high of $0.444.

Trading activity also increased sharply, with daily volume climbing to more than $229 million as investors reacted to the development.

The decline interrupted what had been a strong recovery period for ONDO.

The token had gained close to 62% over the past 30 days, supported by growing interest in real-world asset (RWA) tokenisation and expanding institutional involvement in blockchain-based financial products.

What caused Nathan Allman’s death?

Ondo Finance confirmed that Nathan Allman died unexpectedly on May 26, 2026. However, the company did not disclose the cause of death.

The lack of details led to widespread speculation across the crypto community, though Ondo leadership requested privacy for Allman’s family and close associates.

Several major figures in the digital asset industry publicly shared tributes following the announcement.

Former Binance CEO Changpeng Zhao was among those who reacted publicly, alongside Mantle and Compound founder Robert Leshner.

Messages from industry participants described Allman as one of the key figures driving institutional adoption of tokenised assets.

Allman became widely associated with the idea that blockchain technology could modernise capital markets through around-the-clock settlement and easier global access to financial products.

Under his leadership, Ondo Finance established relationships with institutions including JPMorgan Chase, Franklin Templeton, Broadridge Financial Solutions, and BlackRock.

Ondo Finance has become one of the biggest names in the tokenised treasury market over the past two years.

The platform currently holds more than $2.67 billion in total value locked, placing it among the leading projects focused on bringing traditional financial products onto blockchain networks.

Allman played a central role in that growth. Before launching Ondo Finance in 2021, he worked on Goldman Sachs’ digital assets team and previously had experience in private credit investing. He later built Ondo into one of the most recognised real-world asset platforms in the crypto sector.

The company’s products include OUSG, which offers tokenised exposure to short-term US Treasuries, and USDY, a yield-bearing digital dollar product backed by treasury assets.

Ondo also expanded into tokenised equities infrastructure through Ondo Global Markets.

Ian De Bode named Ondo Finance CEO

Ondo Finance moved quickly to address leadership concerns by naming Ian De Bode as the company’s new CEO.

It is with profound sadness that we announce the unexpected passing of Nathan Allman, Ondo’s founder. Our hearts are with his family and loved ones.

Nate’s brilliance, humility, and drive shaped every part of what Ondo is today. His belief in the power of technology to create a…

— Ondo Finance (@OndoFinance) May 25, 2026

De Bode previously served as Ondo’s president and had already been overseeing strategy, product development, and operations for more than two years before the transition.

His background includes work at McKinsey’s digital assets division, giving him direct experience in institutional blockchain adoption and financial infrastructure.

The company stated that its long-term roadmap would continue without changes despite the leadership shift.

That message appeared aimed at calming investors and institutional partners following the sudden news.

What to expect in the coming days

Despite the sharp emotional reaction from the community, ONDO’s price movement remained relatively controlled compared to previous major crypto leadership events.

The coming days will likely focus on whether ONDO can maintain support above the $0.40 range as markets digest the leadership transition.

Short-term volatility may continue because the news arrived during a period of strong upward momentum for the token.

ONDO had already risen nearly 9% over the past seven days before the latest decline, suggesting traders were actively positioning around the broader real-world asset narrative.

Much of the market’s attention will now shift toward how Ian De Bode handles Ondo’s institutional partnerships and ongoing expansion plans.

The post ONDO price drops 4% as community mourns Nathan Allman’s death appeared first on CoinJournal.

• The malware spread through npm, PyPI, and Rust packages in coordinated waves.
• It steals crypto wallets, SSH keys, and cloud developer credentials.
• AI coding tools were also targeted through malicious config files.

A coordinated malware campaign known as TrapDoor has hit software ecosystems widely used by crypto and blockchain developers.

Security researchers identified dozens of malicious packages spread across major open-source repositories, all designed to steal sensitive developer data such as wallet keys, cloud credentials, and source code access tokens.

Instead of a single malicious upload, attackers deployed multiple packages in waves using different accounts.

This approach made the activity harder to detect at the early stages and allowed the malware to blend into routine dependency updates.

Coordinated attack across major developer ecosystems

The TrapDoor operation affected at least three major package ecosystems: npm, PyPI, and Crates.io.

Together, researchers identified more than 30 malicious packages and over 300 affected versions distributed within a short window.

The activity reportedly began around May 22, 2026, although GitHub reported unauthorized access to internal repositories on May 20. It then escalated quickly over the following days.

The packages were not isolated incidents. Instead, they appeared to be part of a coordinated release strategy involving multiple developer accounts.

This structure suggests planning rather than opportunistic abuse. Each package carried similar behavior patterns and pointed to a shared malicious framework used by the attackers.

How the TrapDoor malware operates inside developer systems

Once installed, TrapDoor packages execute automatically through standard build and installation processes used in modern development environments.

In JavaScript packages, malicious code is triggered through post-install scripts, which run immediately after a dependency is added.

In Python packages, the malware can activate during import, allowing it to execute without any explicit function call.

Rust packages use build scripts to achieve the same result during compilation.

After execution, the malware scans local systems for valuable data. This includes SSH keys, API tokens, and configuration files commonly used in cloud and blockchain development workflows.

It also targets browser-stored credentials and environment variables, which often contain sensitive authentication data.

Stolen information is then sent to external servers controlled by the attackers.

In some cases, the malware attempts to maintain persistence by modifying startup processes or inserting malicious hooks into development tools.

Crypto-focused targeting and high-value data theft

What makes this campaign particularly concerning is its focus on crypto-related development environments.

The malware specifically searches for crypto wallet-related files and credentials linked to platforms such as Coinbase, MetaMask, Binance, and Solana-based tools.

It also targets cloud infrastructure credentials from providers like AWS and GitHub access tokens.

These are especially valuable because they can provide attackers with direct access to private repositories, deployment pipelines, and backend systems.

In addition, the malware attempts to collect SSH keys that could allow remote access to developer machines or production servers.

This combination of targets gives attackers a wide range of entry points into both personal and enterprise systems.

AI development tools also under pressure

One of the more unusual elements of the TrapDoor campaign is its interaction with AI-assisted development environments.

Some malicious packages include configuration files designed to influence coding assistants and automated development tools.

Files such as .cursorrules and CLAUDE.md were reportedly used to manipulate AI coding assistants into performing actions that could expose sensitive information.

Instead of directly hacking systems, the attackers attempted to exploit how AI tools interpret project instructions.

This approach reflects a shift in attack methods.

Rather than targeting only code execution, the campaign also attempts to influence developer workflows that rely on AI-generated suggestions and automated analysis.

The post TrapDoor attack targets crypto wallets, AWS keys and GitHub tokens appeared first on CoinJournal.

• XRP is holding a tight range near $1.35–$1.36 under pressure.
• Most moving averages and signals still show a dominant downtrend.
• RSI weakness suggests a pause, with $1.35 acting as key support.

XRP is trading at $1.36, sitting almost directly on a key short-term support zone after a steady decline across multiple timeframes.

The price has slipped 7.4% over the past seven days and 6.4% over the past month, extending a broader downtrend that has now reached a 44% drop over the past year.

This puts the current market situation of the Ripple token at the centre of a critical decision point, where bulls and bears are actively testing whether the support at $1.35 can hold.

XRP has entered a tight consolidation phase

XRP has been moving inside a very narrow range between $1.35 and $1.38 over the past 24 hours.

This tight consolidation often reflects hesitation in the market, where neither bulls nor bears have enough momentum to force a clear breakout.

The lower boundary of this range, $1.35, has now become the immediate level to watch.

A clean breakdown below this point would place XRP into a weaker technical structure, with little short-term support visible beneath it.

On the upside, the $1.38 level remains the first resistance barrier, and price has repeatedly failed to sustain moves above it in recent sessions.

But despite this compression, momentum indicators suggest the market is still leaning cautiously.

The 14-day RSI sits at 41.94, which is neutral but tilted toward weakness.

On the weekly chart, RSI drops further to 38.67, which is commonly interpreted as oversold territory.

This divergence between timeframes suggests that while short-term selling pressure is cooling, longer-term momentum remains under stress.

XRP’s technical structure remains under bearish control

A broader look at the trend shows that XRP is still trading below all major exponential moving averages (EMAs) on the daily chart.

These include the 10-day, 20-day, 50-day, 100-day, and 200-day EMAs, which are all positioned above the current price.

This signals a clear bearish structure, where every major trend line is acting as resistance rather than support.

In technical terms, this type of stacking usually reflects a market that has not yet completed a full reversal phase.

In addition, out of 23 tracked technical indicators, 13 are currently pointing to sell signals, while only 3 suggest buying conditions, and 7 remain neutral.

Moving averages alone account for 12 sell signals with zero buy signals, reinforcing the view that the long-term trend has not shifted back in favour of buyers.

At the same time, oscillators like the MACD and the RSI present a slightly different picture. With 3 buy signals against 1 sell signal, short-term momentum indicators show early signs of stabilisation.

However, this has not yet been strong enough to counter the dominant bearish trend formed by the moving averages.

The next directional move will depend heavily on whether buyers can defend the $1.35 support zone or whether selling pressure forces a breakdown into lower price territory.

Short-term estimates point to movement toward $1.39, while broader yearly forecasts place 2026 within a wide range between $0.82 and $2.12.

The post XRP price outlook: will the $1.35 support hold or break? appeared first on CoinJournal.

• AI developments helped push NEAR Protocol trading volume over $1 billion.
• The price of NEAR coin broke above a multi-year bearish trendline.
• Eyes are now on the support at $2.20 and the resistance at $2.30 for the next move.

NEAR Protocol surged nearly 29% in the last 24 hours, making it one of the strongest-performing large-cap cryptocurrencies in the market today.

The rally pushed the token to around $2.26 after trading as low as $1.73 earlier in the day.

NEAR’s trading activity also climbed sharply, with daily volume approaching $1 billion as momentum accelerated across major exchanges.

The reason why the Near Protocol coin price is rising

One of the biggest drivers behind the latest Near Protocol price jump is the growing interest in AI-focused blockchain projects.

NEAR Protocol has increasingly been associated with the AI sector due to its recent product developments, including AI integrations, intent-based transactions, and tools designed for autonomous agents.

The project recently highlighted progress around its NEAR Legion project.

The concept focuses on allowing AI agents to interact with blockchain networks, execute transactions, and coordinate activities without requiring constant human input.

This narrative has gained traction as the broader technology sector shifts attention toward agentic AI systems.

Notably, NVIDIA CEO Jensen Huang has repeatedly discussed the growing role of agentic AI in future software and computing systems.

NEAR Protocol has also expanded its Intents framework, which simplifies cross-chain interactions and transaction execution.

The technology is designed to let users or AI agents specify desired outcomes rather than manually executing every transaction step.

The market has responded positively to this development because it addresses one of crypto’s biggest problems: user experience.

Another development that attracted attention this week was the launch of PII anonymisation tools by NEAR AI.

The feature is designed to improve privacy for large language model applications by protecting sensitive information before it reaches AI systems.

Privacy-focused AI infrastructure has become an important discussion point as companies and developers face growing concerns around data protection and compliance.

The AI angle around NEAR carries additional weight because of the project’s leadership.

NEAR co-founder Illia Polosukhin previously co-authored the “Attention Is All You Need” research paper, which introduced the Transformer architecture that powers modern AI models such as ChatGPT and Gemini.

Analysts have increasingly pointed to this connection as evidence that NEAR’s AI strategy is more than just branding.

Technical breakout and short liquidations accelerated the rally

Beyond the AI narrative, technical factors also played a major role in today’s rally.

NEAR recently broke above a multi-year descending trendline that had capped its price since the 2022 bear market.

Analysts had been watching the $1.90 resistance zone closely because it acted as a ceiling during several previous recovery attempts.

Once the token moved above that level, buying momentum accelerated rapidly.

The breakout was accompanied by a sharp rise in trading volume, which is often viewed as confirmation that a move has strong market participation behind it.

NEAR also reclaimed several major moving averages during the rally, improving the token’s overall technical structure.

Short liquidations added further fuel to the move. Data from derivatives markets showed that most crypto liquidations tied to NEAR over the past 24 hours came from short positions.

As the price continued to rise, traders betting against the token were forced to buy back their positions, creating additional upward pressure.

NEAR price forecast

The Near Protocol token has gained nearly 60% in the last 30 days and is now up more than 43% over the past week.

However, despite the rally, NEAR remains far below its all-time high of $20.44 reached in January 2022.

The token is currently trading about 89% below that peak, although it has recovered more than 325% from its all-time low recorded in November 2020.

Moving ahead, the first major support zone sits around $2.20.

Holding above this level could help maintain bullish momentum in the near term. Below that, the $1.90 area remains important because it previously acted as a breakout resistance zone.

On the upside, the immediate resistance range sits between $2.30 and $2.40 after the latest surge stalled near those levels.

A decisive move above that region could open the door toward the psychological $3.00 level, which many traders are now monitoring as the next major target.

The post Near Protocol coin is up 29% today: here’s why the NEAR price is rising appeared first on CoinJournal.

• REAL Finance signs first securities tokenization deal with Factori AD.
• Agreement activates institutional pipeline exceeding $100 million in assets.
• Pilot covers 5 million Alpha Bulgaria warrants valued near €2.75 each.

REAL Technologies Inc., the parent company of REAL Finance, has signed its first securities tokenization agreement with Factori AD, a fully licensed and EU-regulated investment broker.

The deal marks the first live deployment of REAL Finance’s infrastructure for regulated securities and activates an institutional pipeline of more than $100 million in client assets.

The initial transaction will involve equity derivatives linked to Alpha Bulgaria AD, a Bulgarian Stock Exchange-listed investment company, and will be executed on an EVM-compatible blockchain before the planned launch of REAL Finance’s Layer 1 mainnet.

REAL Finance moves from infrastructure build-out to live deployment

REAL Technologies said the agreement with Factori AD represents a major step in the commercial rollout of REAL Finance’s tokenization infrastructure.

The company said the deal activates a committed institutional pipeline exceeding $100 million in client assets.

It also marks the first live deployment of REAL Finance’s tokenization infrastructure for regulated securities.

Under the structure, Factori AD will direct institutional and client assets through REAL’s infrastructure.

The broker will continue to manage all regulated brokerage functions, including client onboarding, KYC, AML compliance, licensed OTC execution, and segregated custody arrangements.

International securities custody will be maintained through Bank of New York. Bulgarian securities will be held at the Central Depository in Bulgaria.

The model is designed to keep regulated brokerage and compliance functions with the licensed broker, while REAL Finance provides the infrastructure and settlement layer for tokenization.

REAL Finance said its approach focuses exclusively on tokenizing real securities.

These include publicly traded equities and derivatives, private market shares, and bonds. The company said it does not focus on synthetic exposure products.

First tranche linked to Alpha Bulgaria warrants

The first transaction under the agreement involves equity derivatives tied to Alpha Bulgaria AD, a publicly traded investment company listed on the Bulgarian Stock Exchange under the ticker ALFB.

The pilot includes 5,000,000 warrants currently valued at approximately €2.75 each.

These warrants have been designated for tokenization through REAL’s infrastructure under Factori AD’s licensed custody and transfer-agent framework.

The transaction represents the first tranche of a broader institutional pipeline.

Factori AD has committed more than $100 million in additional client assets for tokenization through REAL’s infrastructure.

The transaction will be executed on an EVM-compatible blockchain before the planned launch of REAL Finance’s Layer 1 mainnet.

REAL Technologies said the pilot is designed to validate the full workflow for tokenized securities.

That workflow includes regulated sourcing, licensed OTC execution, regulated custody, and on-chain tokenization.

Dimitar Tsvetanov, managing director at Factori AD, said institutional interest in regulated tokenization infrastructure is growing.

We see growing institutional demand for regulated tokenization infrastructure that can bridge traditional securities markets with blockchain-based settlement systems. Through this agreement with REAL Finance, we are able to provide clients with a compliant framework for bringing real financial instruments on-chain while maintaining regulated execution, custody, and onboarding standards.

Regulated custody remains central to the model

REAL Technologies positioned the agreement as evidence that its tokenization model is now operational and under contract with a regulated broker.

“Signing this agreement demonstrates that REAL’s tokenization capabilities are operational and under contract with real securities and a regulated broker. The pilot allows us to validate the full model before we scale to service our multi-nine-figure committed assets pipeline,” said Ivo Grigorov, chief executive officer of REAL Technologies.

Valentin Dimitrov, chief operating officer of REAL Technologies, said the company had built the system around compliance and real financial instruments.

“We designed the architecture around licensed custody, full compliance, and genuine instruments. This first executed deal, together with the committed flow, confirms institutional demand for the infrastructure we are building,” Dimitrov said.

The deal comes amid rising institutional interest in tokenized real-world assets and blockchain-based settlement systems.

The post REAL Finance inks tokenization deal with EU broker Factori AD appeared first on CoinJournal.