This Week in Crypto
CLARITY Act advances, Bitcoin ETFs surge, and DeFi faces its security reckoning after a $292M hack.
The crypto industry moved through another volatile week marked by regulatory progress, institutional momentum, and hard lessons on security.
CLARITY Act Clears Final Senate Hurdle
After months of negotiation, the Senate released compromise text for the CLARITY Act on May 2. The bill bans stablecoin rewards that mimic bank deposits but preserves “bona fide” activity-based incentive programs. Crypto firms like Coinbase and Circle celebrated the compromise, with Circle’s stock jumping nearly 20% on the news.
The Banking Committee could vote as early as May 11, opening the path for comprehensive stablecoin regulation and clearing a regulatory fog that has hung over the industry since 2023. Bitcoin responded by breaking $80,800, its highest level since January.
Bitcoin ETFs See Strongest Monthly Inflows
May started strong for Bitcoin ETFs, recording $629 million in net inflows on May 1 alone. April saw nearly $2 billion in net inflows, marking the strongest monthly performance since launch. Total net assets across Bitcoin ETFs now sit at $103.78 billion.
Ethereum ETFs, however, moved in the opposite direction with $82.47 million in weekly outflows, highlighting the divergence in institutional appetite between the two largest crypto assets.
$292 Million DeFi Hack Exposes Security Gaps
The KelpDAO exploit on April 1, which drained $292 million from the protocol, continues to send shockwaves through DeFi. North Korean-backed hackers exploited vulnerabilities in collateral pricing, exposing how fragile parts of the ecosystem remain just as Wall Street firms like Apollo Global Management and BlackRock push deeper into on-chain markets.
Industry insiders have called this a “speed bump, not a roadblock,” but the incident is forcing a hard conversation about zero-trust architectures, timelocks on governance actions, stricter multisig controls, and more rigorous oracle security.
Days later, Drift Protocol announced a recovery plan for users affected by a separate $295 million DPRK-linked exploit. The protocol proposed tokenized claims backed by a revenue pool, frozen assets, and legal recovery efforts, while committing to relaunch as a “security-first” exchange with reduced scope and hardened controls.
What It Means
The pattern is clear: regulatory clarity is arriving, institutions are allocating capital, but DeFi’s security baseline isn’t where it needs to be. For users, that means choosing platforms with verifiable collateral, multi-layer security, and transparent risk controls.
The industry is compressing decades of traditional finance evolution into months. The protocols that survive will be the ones that treat security as a baseline requirement, not a best practice.
