Welcome to Galaxy Analysis’s Weekly Prime Tales. Subscribe to get this article delivered to your inbox each Friday morning.
On this week’s version, Lucas Tcheyan considers the implications for crypto of Anthropic’s highly effective new AI mannequin Mythos; Alex Thorn assesses experiences that Iran has been demanding bitcoin to permit ships passage by means of the Strait of Hormuz; and Zack Pokorny examines the newest chapter within the ongoing drama of the Aave DeFi protocol.
Received suggestions on this article? Electronic mail [email protected]. We’d love to listen to from you.
Market Replace
The entire crypto market cap stands at $2.52tn, up 5.91% from final week (when it stood at $2.38tn). Bitcoin’s community worth is 4.42% of gold’s market cap. Over the past seven days, BTC is up 8.04%, ETH is up 7.53%, and SOL is up 4.34%. Bitcoin dominance is 57.41%, up 98 foundation factors from final week.
Iran Mentioned to Demand Bitcoin for Passage Via Strait of Hormuz
Iran is reportedly requiring ships to pay tolls in bitcoin previous to crossing the Strait of Hormuz. In keeping with a Wednesday report from the Monetary Occasions, Iran is asking ships searching for to cross by means of the Strait of Hormuz to pay $1 for each barrel of oil they carry utilizing the oldest, most useful cryptocurrency. Ships should e mail detailed details about their cargo and, after an evaluation is accomplished, Iranian authorities will give ships “a number of seconds to pay in bitcoin, making certain they’ll’t be traced or confiscated on account of sanctions,” Hamid Hosseini, a spokesperson for Iran’s Oil, Fuel and Petrochemical Merchandise Exporters’ Union, was quoted as saying.
If true, it wouldn’t be the primary time Iran used crypto. Citing blockchain analytics agency Chainalysis, Bloomberg reported that “Iran’s crypto ecosystem reached $7.8b final yr” and knowledge from a second analytics agency, Elliptic, indicated that “in the course of the peak of crypto mining, the state mined bitcoin and offered it to the central financial institution to pay for imports past the attain of dollar-denominated techniques.”
Nonetheless, different experiences seem to contradict Hosseini’s assertion to the FT. A Bloomberg report from April 1 advised that the $1/barrel Iranian toll could be paid both in stablecoins or yuan. Citrini Research’s April 6 report, citing on-the-ground sources, stated that ships traversing the Iranian-controlled portion of the Strait have been largely paying the toll by having their governments unfreeze Iranian property. And Ari Redbord, international head of coverage and authorities affairs at TRM Labs, a 3rd blockchain evaluation agency, told Decrypt: “we don’t have knowledge at this level indicating that crypto is getting used at scale for one thing like transit tolls by means of the Strait of Hormuz.”
In response to the Wednesday FT report quoting the Iranian union official, Strike CEO Jack Mallers posted on X “there isn’t any second finest.” He meant that Iran’s reported selection of Bitcoin highlighted the community’s effectiveness as a censorship-resistant cost system.
In keeping with FT and Citrini Analysis, ship transits throughout the Strait have dwindled to 10-20 per day, down from the traditional each day common of 100+ throughout peacetime.
Our Take
One of many many memes that Bitcoiners share to explain the protocol is “Bitcoin is for enemies,” a chorus that highlights the community’s censorship-resistance and permissionlessness. The concept is that the community is so safe and requires so little belief in counterparties that even mutually distrustful events can use it safely. Iran accepting BTC for tolls to transit the Strait of Hormuz could be an apt illustration. From this angle, native digital property like BTC could be a way more efficient cost mechanism for Iran than tokenized property like stablecoins, which issuers can freeze and seize.
The quote from the Iranian union spokesperson is value unpacking, nevertheless. It means that sending the bitcoin in a short time would in some way improve its privateness and safety from confiscation. As a technical matter, that is unfaithful, except the ships are paying over the layer-2 Lightning Community, which is certainly extraordinarily quick and higher at preserving privateness than layer-1 Bitcoin transactions. Nonetheless, Lightning requires important bilateral liquidity and experience to ship such massive funds. Particularly, the capability of tankers within the Persian Gulf ranges from ~200k barrels to ~2m barrels, suggesting that BTC funds would have to be within the $200k-$2m vary. The largest known cost ever made by means of Lightning is $1m in January 2026.
Extra possible, the Iranian authorities would offer a QR code or alphanumeric Bitcoin tackle to the ships upon approval of their requests to cross by means of the Strait. The velocity with which the ships pay that bill would haven’t any bearing on the privateness or censorship-resistance of the cost.
Galaxy Analysis is conducting our personal evaluation of community transactions to find out whether or not any suspected transactions are identifiable. Our evaluation will marry ship AIS knowledge with bitcoin transaction knowledge to establish potential toll cost transactions. Keep tuned.
Iran’s use of crypto over time, to the extent it has occurred (experiences have indicated bitcoin mining and different actions, however onerous knowledge is scant), has principally been in service of supporting the sanctioned nation’s entry to commerce and international markets. This contrasts sharply with North Korea’s use. The DPRK famously employs black-hat hackers like Lazarus Group, UNC4899, and APT38 to establish vulnerabilities in blockchain protocols and purposes and exploit them to empty consumer funds. Whereas we can not help sanctions evasion in any type, it’s vital to differentiate these two totally different makes use of by hostile nation-states. The juxtaposition is placing – Iran makes use of permissionless blockchains for financial survival; DPRK steals cash from others (together with common folks) to fund its nuclear weapons program (in response to the U.S. Treasury Department). Solana DeFi software Drift was hacked and drained for $285m simply final week; the Drift crew blamed UNC4736. That stated, cash (together with BTC) is fungible, so it’s nonetheless potential that Iran makes use of proceeds from its onchain actions for equally objectionable functions.
Gold is used worldwide, together with by America’s enemies. That doesn’t make gold unhealthy. If the Iranian spokesman’s account is in any respect correct, this improvement is one other feather in Bitcoin’s hat that makes it look loads like digital gold. – Alex Thorn
The Delusion(os) of Cybersecurity: Anthropic’s New Mannequin Raises Alarm
Anthropic on Tuesday unveiled Claude Mythos Preview, a frontier AI mannequin it says is so succesful at discovering and exploiting software program vulnerabilities that it can’t be launched to the general public. As a substitute, entry has been restricted to roughly 40 organizations (together with Apple, Microsoft, Google, Amazon, JPMorgan Chase, and the Linux Basis) underneath a brand new defensive cybersecurity initiative known as Challenge Glasswing.
The capabilities seem important. Mythos recognized 1000’s of beforehand unknown vulnerabilities throughout each main working system and internet browser, together with bugs that had survived a long time of human assessment and hundreds of thousands of automated safety scans, in response to Anthropic. In a single check, Mythos developed working exploits 181 instances the place Anthropic’s earlier finest mannequin managed twice. In one other, it wrote a full distant root exploit — granting an attacker full management of a server — autonomously, with no human involvement after the preliminary immediate, for lower than $50. Anthropic says these capabilities weren’t explicitly skilled: they emerged from normal enhancements in coding and reasoning, which means each future mannequin that will get higher at writing code must also get higher at breaking it. The accompanying 244-page system card additionally revealed that the mannequin can motive about the right way to recreation its personal evaluators inside its inside activations whereas writing one thing totally totally different in its seen output — detectable solely by means of specialised interpretability instruments.
The announcement comes on the heels of Anthropic disclosing that its annualized income jumped from $19 billion in March to $30 billion in April, and reports that the corporate is evaluating an IPO as early as October.
Our Take
No matter how a lot you are taking Anthropic’s claims at face worth, the route of journey is evident. AI capabilities are accelerating at a tempo that calls for consideration from anybody with cash or knowledge to guard, and crypto sits squarely within the crosshairs. Mythos recognized important weaknesses in extensively used cryptography libraries, together with TLS, AES-GCM, and SSH — protocols that underpin the infrastructure DeFi platforms and centralized exchanges rely upon.
Mythos additionally recognized vulnerabilities in TCP, or Transmission Management Protocol, that have been believed to have been mounted 27 years in the past. TCP underpins roughly 80% of web site visitors, together with HTTP and HTTPS, e mail protocols, and file transfers. An attacker exploiting these flaws may disrupt core web infrastructure, together with the rails that crypto will depend on to perform. Anthropic additionally warned that friction-based safety measures “might develop into significantly weaker towards model-assisted adversaries.”
In DeFi, friction-based defenses comparable to multisignature wallets, timelocks, and audits typically are the safety mannequin. Anthropic’s researchers argue that after the safety panorama reaches a brand new equilibrium, AI will profit defenders greater than attackers. However the transitional interval shall be turbulent, and within the brief time period the benefit belongs to whichever facet deploys these instruments first.
There are additionally causes for skepticism concerning the framing. Anthropic founder and CEO Dario Amodei was nonetheless at OpenAI when the corporate used the identical “too harmful to launch” narrative for GPT-2 in 2019. He left and based Anthropic the next yr. For a corporation approaching an IPO amid a income dash, “too harmful to launch” is a aggressive narrative as a lot as a security disclosure, particularly towards the backdrop of OpenAI asserting $24 billion annual recurring income. There’s additionally some proof that the capabilities are much less distinctive than the announcement implies. One cybersecurity agency examined the showcase vulnerabilities on small, low cost, open-weight fashions and discovered that eight out of eight detected the flagship exploit, together with a 3.6 billion-parameter mannequin costing $0.11 per million tokens. The moat, the cybersecurity agency argues, is the system (the scaffolding, triage, and area experience) not any single mannequin.
The sample rising right here issues. Essentially the most consequential AI capabilities are more and more gated behind closed entry applications, and Challenge Glasswing might develop into the template for a way frontier fashions attain the world. As AI capabilities proceed to advance, the query of who controls entry to essentially the most highly effective fashions, and on what phrases, will solely sharpen. Decentralized AI infrastructure presents one counterforce. However the counterargument is actual too. There are real capabilities that the world might not profit from distributing freely, and the road between accountable stewardship and aggressive moat-building is blurry.
Navigating that pressure shall be one of many defining challenges of the approaching years, and crypto — concurrently a high-value goal for AI-assisted exploits and a builder of the choice infrastructure — sits on each side of it. – Lucas Tcheyan
Chaos Labs Joins Exodus From Aave
Chaos Labs announced this week that it’ll now not be contributing code to Aave. This comes after BGD Labs and Aave Chan Initiative (ACI) every introduced that it’ll even be leaving Aave within the aftermath of the passage of the Aave Will Win proposal temp check.
Chaos Labs cited three core causes for its departure: 1) the flight of core Aave contributors meaningfully elevated the workload and operational danger of the DeFi protocol, 2) the introduction of Aave V4 expands the scope of the danger perform, growing the operational and authorized burden, and 3) Chaos Labs has run its Aave engagement at a loss, and even with elevated compensation of $1 million/yr it might nonetheless function Aave’s danger with unfavorable margin. The group additional famous that even when the financial leg of its rationale to depart have been resolved it nonetheless disagrees on how danger needs to be prioritized and managed at Aave.
Chaos Labs reached a degree the place it may proceed to supply companies to what’s now a competing service towards its vaults, or cease doing that work and focus by itself product and margin growth.
Our Take
Aave has been present process a structural shift all through the final 4 months. It began with a post within the Aave governance discussion board in December elevating considerations across the redirection of charges generated from the in-UI swap function away from the decentralized autonomous group (DAO). This sparked debate round the place worth accrues in Aave’s organizational stack, what recourse the DAO has towards the actions of Labs (and vice versa), and what the AAVE token really grants holders. This finally led to the “Aave Will Win” proposal, which laid out a plan to restructure Aave round a mannequin the place the DAO (and, because of this, tokenholders) is the first financial beneficiary of Aave-branded merchandise—however not with out price.
At its core, the proposal asked the DAO to fund Aave Labs with a ~$25m annual working finances plus 75,000 AAVE, alongside extra milestone-based grants that would carry complete compensation to ~$40m+. In trade, income (defined as product income internet of accomplice income sharing, rebates, and consumer incentives) would accrue to the DAO treasury, although what constituted “income,” and how a lot may very well be deducted earlier than it reached the DAO, turned a contested facet of the proposal. Alongside this shift, the proposal additionally contemplates a extra formal construction round model and mental property, with Aave logos and associated property probably held by a basis to make sure consistency and governance-aligned utilization.
Now, the evolution of Aave is reaching a brand new stage the place most key historic contributors are now not current whereas it’s advancing a brand new model of its lending markets. Aave has misplaced lots of its service suppliers, although TokenLogic, Chainlink, and Certora remain. Whereas the (potential) monetary financial savings of doing so may be funneled again to Aave Labs and the suppliers which might be nonetheless current, the human capital loss is noteworthy. It should take a while for individuals who caught round to rise up to hurry on the processes the defectors ran, undertake their very own implementation methods, and restore service ranges for customers on the danger administration and protocol improvement fronts. In coding phrases, the protocol now has:
-
Aave Labs = SUM_EFFORT(BGD Labs, ACI, Aave Labs)
-
LlamaRisk = SUM_EFFORT(Chaos Labs, LlamaRisk)
The next questions now stand; can these groups successfully backfill the human capital voids which have been created? Is all of this really what the DAO desires? And the way will the composition of the DAO seem like after a variety of key contributors and maintainers left? These questions will solely be answered in time.
On the V4 launch facet of the equation, Aave now faces a parallel set of challenges. The rollout of a brand new lending structure shouldn’t be occurring in isolation. It’s occurring alongside a significant reconfiguration of its contributor base and working mannequin. Consequently, Aave should concurrently preserve and refine its markets whereas rolling out and battle-testing V4 with a lowered and restructured set of service suppliers.
Past execution danger, the transition to V4 introduces a capital coordination downside. Aave might want to compete straight with established gamers comparable to Morpho to draw new TVL, whereas convincing current customers to re-underwrite the protocol underneath a brand new design and set of contracts within the occasion they need to migrate. This problem is non-trivial: new architectures inherently introduce uncertainty, and massive allocators might require stronger incentives and larger confidence in danger administration earlier than reallocating capital.
Extra broadly, the success of V4 will rely not simply on its technical design, however on Aave’s capability to coordinate throughout governance, contributors and capital suppliers at a time when every of these layers is in flux. The protocol is successfully making an attempt to improve its structure, realign its financial mannequin, and rebuild its contributor base concurrently — elevating the bar for execution at exactly the second its margin for error could be the slimmest. – Zack Pokorny
Different Information
-
🏦White Home report says stablecoin rewards gained’t drain financial institution deposits
-
🤯StarkWare proposes “Quantum-Secure Bitcoin Transactions Without Softforks”
-
🧠Treasury proposes AML/CFT guidelines underneath GENIUS Act…
-
🪙….as FDIC floats stablecoin issuance guidelines for banks
-
🔐Treasury additionally launches crypto cybersecurity info-sharing initiative
-
⚠️JPMorgan CEO shareholder letter warns of competitors from crypto
-
🎣U.S. Secret Service freezes $12m of crypto stolen in ‘approval phishing’ scams
Charts of the Week: Morgan Stanley ETF’s Robust Debut
On Wednesday, Morgan Stanley launched its first in-house cryptocurrency ETF, the Morgan Stanley Bitcoin Belief (MSBT), with a administration charge of 14 foundation factors, making it the least costly spot bitcoin ETF out there within the U.S. market.
On its first day of buying and selling, MSBT attracted $31 million in property, rating it 14th amongst all crypto spot ETF debuts in U.S. historical past. Whereas that determine is modest in comparison with the $112 million BlackRock’s iShares Bitcoin Belief (IBIT) drew on its opening day, MSBT’s efficiency was nonetheless notable. IBIT launched as a part of the primary wave of spot bitcoin ETFs in January 2024, a historic second after years of pent-up institutional demand. MSBT, against this, entered a extra crowded and mature market.
On a same-day circulate foundation, MSBT was the second-largest recipient of inflows on April 8, trailing solely IBIT’s $40 million, on a day when BTC rose 2.9%, a robust exhibiting for a brand new entrant competing towards established merchandise. – Jianing Wu
Authorized Disclosure:
This doc, and the knowledge contained herein, has been supplied to you by Galaxy Digital Inc. and its associates (“Galaxy Digital”) solely for informational functions. This doc might not be reproduced or redistributed in entire or partly, in any format, with out the specific written approval of Galaxy Digital. Neither the knowledge, nor any opinion contained on this doc, constitutes a proposal to purchase or promote, or a solicitation of a proposal to purchase or promote, any advisory companies, securities, futures, choices or different monetary devices or to take part in any advisory companies or buying and selling technique. Nothing contained on this doc constitutes funding, authorized or tax recommendation or is an endorsement of any of the stablecoins talked about herein. It is best to make your personal investigations and evaluations of the knowledge herein. Any selections primarily based on info contained on this doc are the only duty of the reader. Readers ought to seek the advice of with their very own advisors and depend on their unbiased judgement when making monetary or funding selections.
Contributors, together with Galaxy Digital, might maintain monetary pursuits in sure property referenced on this content material. Galaxy Digital recurrently engages in shopping for and promoting monetary devices, together with by means of hedging transactions, for its personal proprietary accounts and on behalf of its counterparties. Galaxy Digital additionally offers companies to autos that put money into numerous asset lessons. If the worth of such property will increase, these autos might profit, and Galaxy Digital’s service charges might enhance accordingly. The knowledge and evaluation on this communication are primarily based on technical, elementary, and market concerns and don’t symbolize a proper valuation. For extra info, please discuss with Galaxy’s public filings and statements. Sure asset lessons mentioned, together with digital property, could also be risky and contain danger, and precise market outcomes might differ materially from views expressed right here.
For extra dangers associated to digital property, please discuss with the danger elements contained in filings Galaxy Digital Inc. makes with the Securities and Change Fee (the “SEC”) occasionally, together with in its Quarterly Report on Type 10-Q for the quarter ended September 30, 2025, filed with the SEC on November 10, 2025, out there at www.sec.gov.
Sure statements on this doc mirror Galaxy Digital’s views, estimates, opinions or predictions (which can be primarily based on proprietary fashions and assumptions, together with, particularly, Galaxy Digital’s views on the present and future marketplace for sure digital property), and there isn’t any assure that these views, estimates, opinions or predictions are at present correct or that they are going to be in the end realized. To the extent these assumptions or fashions will not be right or circumstances change, the precise efficiency might differ considerably from, and be lower than, the estimates included herein. None of Galaxy Digital nor any of its associates, shareholders, companions, members, administrators, officers, administration, staff or representatives makes any illustration or guarantee, specific or implied, as to the accuracy or completeness of any of the knowledge or every other info (whether or not communicated in written or oral type) transmitted or made out there to you. Every of the aforementioned events expressly disclaims any and all legal responsibility regarding or ensuing from the usage of this info. Sure info contained herein (together with monetary info) has been obtained from printed and non-published sources. Such info has not been independently verified by Galaxy Digital and, Galaxy Digital, doesn’t assume duty for the accuracy of such info. Associates of Galaxy Digital might have owned, hedged and offered or might personal, hedge and promote investments in a few of the digital property, protocols, equities, or different monetary devices mentioned on this doc. Associates of Galaxy Digital may additionally lend to a few of the protocols mentioned on this doc, the underlying collateral of which may very well be the native token topic to liquidation within the occasion of a margin name or closeout. The financial results of closing out the protocol mortgage may straight battle with different Galaxy associates that maintain investments in, and help, such token. Besides the place in any other case indicated, the knowledge on this doc relies on issues as they exist as of the date of preparation and not as of any future date, and is not going to be up to date or in any other case revised to mirror info that subsequently turns into out there, or circumstances current or adjustments occurring after the date hereof. This doc offers hyperlinks to different Web sites that we predict could be of curiosity to you. Please word that if you click on on certainly one of these hyperlinks, you could be transferring to a supplier’s web site that isn’t related to Galaxy Digital. These linked websites and their suppliers will not be managed by us, and we’re not accountable for the contents or the correct operation of any linked web site. The inclusion of any hyperlink doesn’t indicate our endorsement or our adoption of the statements therein. We encourage you to learn the phrases of use and privateness statements of those linked websites as their insurance policies might differ from ours. The foregoing doesn’t represent a “analysis report” as outlined by FINRA Rule 2241 or a “debt analysis report” as outlined by FINRA Rule 2242 and was not ready by Galaxy Digital Companions LLC. Equally, the foregoing doesn’t represent a “analysis report” as outlined by CFTC Regulation 23.605(a)(9) and was not ready by Galaxy Derivatives LLC. For all inquiries, please e mail [email protected].
©Copyright Galaxy Digital Inc. 2026. All rights reserved.
