Home Blog Page 743

Phantom wins CFTC no-action relief, clearing path for crypto wallet access to regulated derivatives markets

0

Phantom, a developer of self-custodial crypto wallets particularly popular in the Solana ecosystem, secured a no-action letter from the U.S. Commodity Futures Trading Commission (CFTC), allowing it to offer users access to certain regulated derivatives markets without registering as a broker.

In a statement Tuesday, the CFTC’s Market Participants Division said it would not recommend enforcement action against Phantom for failing to register as an introducing broker, provided the firm meets a set of conditions. The relief applies to Phantom’s software acting as a non-custodial interface that connects users directly with CFTC-registered entities, such as futures commission merchants and designated contract markets.

Phantom said in a blog post that the letter enables it to integrate access to regulated derivatives and event contracts directly in its app through registered partners, while ensuring users submit orders straight to exchanges. The company emphasized it does not custody customer funds or intermediate trades.

Phantom described the outcome as “first-of-its-kind” for this model and the result of proactive engagement with regulators. “Rather than building first and seeking forgiveness later, we took a different approach,” the team wrote in the blog post, adding that early dialogue with the CFTC helped clarify how non-custodial interfaces can operate within existing rules.

“A critical part of making crypto safe and easy to use is building financial products that are governed by clear, common-sense regulations. When warranted, engaging regulators early to find compliant pathways for these new products produces better outcomes for our users, for the industry, and for regulators themselves. This letter is proof of that,” said Phantom CEO Brandon Millman in a blog post.

“We’re grateful to the CFTC for working through a genuinely novel question with us, and we look forward to bringing more innovative products to consumers in a way that gives them confidence and sets the right precedent,” he added.

Read: Prediction Markets Are Coming to Phantom’s 20M User Via Kalshi

UPDATE (March 17, 2026, 15:36 UTC): Tweaks headline.

Tokenized RWA Market Hits $27B as US Treasury Products Lead Growth

0

The tokenized real-world asset ( RWA) market pushed past $27 billion in onchain value this week, cementing one of crypto’s fastest-growing sectors as institutions quietly take over the rails. Tokenized Asset Market Sees Massive Growth As of Tuesday, March 17, 2026, data from rwa.xyz shows distributed onchain value — excluding stablecoins — hitting an all-time […]

The Institutes’ new associate in insurance AI (AIAI) designation equips individuals to be future-ready with practical AI skills

0

The Institutes’ new designation provides a framework and best practices for effectively and responsibly using AI in risk management and insurance, providing skills on how to improve AI literacy and ensuring it remains relevant even as specific tools and technologies continue to evolve.

AI is no longer experimental in insurance: It’s already reshaping underwriting, claims, customer experience, and decision-making across organizations. In fact, the understanding and utilization of AI was the single most important priority among insurance executives in 2025, with two-thirds placing AI at the top of their technology and innovation agendas, according to the International Insurance Society (IIS) 2025 Global Priorities survey (IIS is affiliated with The Institutes). To meet this strategic priority, The Institutes Designations developed the Associate in Insurance AI™ (AIAI™). This new designation enables individuals to improve their AI literacy and prompt techniques, better interpret AI-driven insights, and guide the AI transformation across their organization and teams.

“The Associate in Insurance AI designation teaches professionals to not only use AI tools, but to exercise the judgment and leadership required to deploy them responsibly.”Share

As the first designation to cover AI specifically in the context of risk management and insurance, AIAI offers a structured, practical approach to understanding and applying AI in real-world insurance contexts. It provides individuals with the skills needed to contribute effectively in an AI-enabled environment while helping them stay relevant and adaptable as their roles evolve. However, knowing when not to use AI is just as important as knowing how to use it. AIAI explicitly explores what AI should not be used for in addition to scenarios where it’s most effective, including when human judgment should override automated outputs and how to avoid overreliance on AI tools.

“AI is fundamentally changing how organizations assess risk, serve customers, and make decisions,” said Adam Carmichael, CPCU, President of The Institutes Knowledge Group. “But technology alone isn’t the advantage. The real differentiator is a workforce that understands how to effectively and ethically apply AI within the context of RMI. The Associate in Insurance AI designation teaches professionals to not only use AI tools, but to exercise the judgment and leadership required to deploy them responsibly.”

Ideal for any RMI professional who needs a practical AI foundation to be effective in their work and remain competitive, AIAI supports individuals across career stages—from entry-level professionals building future-ready skills to experienced leaders seeking to lead effectively in an AI-enabled environment.

The Associate in Insurance AI (AIAI) is backed by The Institutes’ more than 115 years of experience as a not-for-profit, committed to helping individuals and organizations succeed by educating, elevating, and connecting those interested in risk management and insurance to create a more informed, resilient world. The new credential empowers professionals to serve as change agents within their organizations, advocating for responsible innovation and fostering a culture of experimentation and thoughtful AI adoption across teams. AIAI includes three new courses and an ethics requirement from The Institutes Knowledge Group to provide foundational, insurance-specific AI knowledge and skills.

Can Websites Trust AI Agents? Sam Altman’s World Thinks AgentKit Is the Answer

0

Sam Altman’s World today rolled out a developer toolkit aimed at one of the internet’s next trust problems: how websites can tell whether an AI agent is acting for a real person or as part of a bot swarm.

The company said its new AgentKit beta lets developers attach a cryptographic proof of a unique human to an AI agent. It enables websites to distinguish “human-backed” agents from automated traffic. The product plugs into x402, the HTTP-based payments standard launched by Coinbase in May 2025 and later backed by a joint x402 Foundation effort with Cloudflare.

The launch arrives as merchants and platforms brace for a sharp rise in autonomous software making decisions and purchases online.

According a McKinsey study, agentic commerce could represent $3 trillion to $5 trillion in global consumer commerce by 2030. Another study by Bain estimates AI agents could drive 15% to 25% of U.S. e-commerce sales by the end of the decade.

That growth is creating a new infrastructure problem. Most websites still treat automated traffic as suspicious by default, a posture shaped by years of scraping, spam and denial-of-service attacks. World’s pitch is that the next wave of automation will include legitimate assistants acting for real consumers, and that the web needs a way to admit those agents without opening the door to swarms controlled by a single actor.

How does it work? According to the details shared by the company, a verified World ID holder registers an agent wallet through an onchain registry called AgentBook. When that agent hits a website that supports x402, the site can ask for payment, proof of unique human backing, or both. If the proof checks out, the site can grant access, apply a discount or offer a limited free-trial allocation tied to the underlying person rather than to each individual bot or wallet. World’s developer docs say usage counters can be tracked per human per endpoint, meaning multiple agents tied to one person would share the same allowance.

How AgentKit works? Image Credit: World

The above image illustrates the idea in simple terms. An agent arrives at a site using AgentKit, the site checks the agent’s registration through AgentBook, and then routes the request based on the result. Human-backed agents can be granted access or discounts, while unregistered agents can be limited or denied. That design matters because the distinction World is trying to introduce is not whether software is automated, but whether that automation can be traced back cryptographically to a unique human without revealing that person’s identity.

“Payments are the ‘how’ of agentic commerce, but identity is the ‘who,’” Erik Reppel, head of engineering at Coinbase Developer Platform and founder of x402, said in a statement shared with AlexaBlockchain.

“By integrating World ID with the x402 protocol, developers now have a complete trust stack: a way for agents to pay for what they need and a way for platforms to verify there is a real human behind the wallet,” Erik added.

This aligns with Coinbase’s own positioning of x402 as a way for APIs, apps and AI agents to make stablecoin payments directly over HTTP.

The move is notable partly because x402 by itself was designed around payment as access control. Coinbase said when it introduced the protocol that it enables stablecoin payments directly over HTTP using the long-unused “402 Payment Required” status code, allowing agents and services to pay programmatically for data, APIs and software. Cloudflare also describes x402 as a standard for charging and paying for resources without accounts, sessions or API keys.

But micropayments do not solve every abuse problem. A malicious actor with enough economic incentive can still spin up thousands of agents and pay a few cents per request if the payoff is large enough. In that sense, World’s add-on is less about payments than about Sybil resistance — the ability to know how many distinct humans are behind a cluster of software agents. That distinction becomes critical in use cases like ticketing, restaurant reservations, promo claims, limited free trials and ranking systems, where one person operating 1,000 bots is very different from 1,000 people each using one bot.

The timing also reflects how quickly the broader agentic-commerce stack is forming. Since 2025, Coinbase has pushed x402 and adjacent tooling for autonomous wallets and payments, while Cloudflare has added x402 support to its agents tooling.

Google, meanwhile, introduced the Universal Commerce Protocol earlier this year as an open standard for agentic commerce and said it is compatible with the Agent Payments Protocol, or AP2, for agentic payments support. Google’s cloud team has described AP2 as a protocol combining programmable payments with A2A and MCP-style interoperability for AI agents.

That means World’s launch is a sign that identity is joining payments and messaging as a core layer of the agent web. If x402 and AP2 are trying to answer how software agents pay, World is trying to answer who those agents represent.

There is precedent for the idea, though not at this scale or with the same architecture. BrightID, for example, has long offered a privacy-focused “proof of uniqueness” system intended to help applications enforce one-person-one-account access without relying on conventional identity documents. Academic and industry work on “personhood credentials” has also argued for privacy-preserving systems that let users prove they are real people without disclosing broader personal information.

World itself has been moving in this direction for more than a year. In January 2025, the company published material on AI agents and proof of human. World executives saw delegated proof-of-personhood for agents as a logical next step for the network. More recently, World has framed proof of human as increasingly necessary in an internet where AI agents and bots are taking over more traffic and interactions.

World network now spans more than 160 countries and counts more than 16 million verified humans. That installed base gives World a potentially meaningful distribution advantage if developers decide they need a reusable proof-of-human layer for AI agents.

Even so, World enters the market with baggage. Since launch, the project formerly known as Worldcoin has drawn scrutiny from privacy regulators over its biometric verification model. In 2024, Spain temporarily banned Worldcoin’s iris-scanning operations, Portugal ordered a halt to data collection, and Hong Kong directed the company to cease operations over privacy concerns. Spain’s data watchdog later ordered deletion of iris scan data collected since the service launched.

The commercial case for the product is easier to see. Platforms want to let useful agents in, but not at the cost of losing control over abuse, inventory or ranking integrity. The tension is no longer theoretical. In a recent devlopment, California federal judge temporarily blocked Perplexity AI’s shopping agent from accessing Amazon, with Amazon arguing the agent unlawfully accessed customer accounts and disguised automated activity as human browsing. This dispute shows the broader legal and commercial fight over how autonomous software should interact with websites.

In that context, World’s AgentKit may appeal less as a crypto feature than as a traffic-governance tool. A merchant could allow an AI assistant to book a table, buy a ticket or test an API, while still enforcing one-person limits. A publisher or discovery platform could accept agent-driven submissions or ranking signals while reducing the risk of one actor flooding the system. A telecom or authentication service could tie scarce resources, such as temporary numbers or free verification attempts, to a unique person rather than to an unlimited number of bots. Those are practical controls that payments alone do not provide.

There is one additional wrinkle: naming. Coinbase already has its own product called AgentKit, a separate framework introduced in 2024 to help developers build onchain AI agents. World’s Agent Kit beta is a different product entirely, even though it integrates with Coinbase’s x402 ecosystem.

Why the launch matters? The industry has spent the past year building rails for agents to talk, pay and transact. What has been missing is a broadly reusable way to express that an agent represents a single human without forcing that person to expose their full identity. If agentic commerce is going to move from demos to scaled consumer and enterprise use, that gap will need to be closed. World is betting that proof of unique human becomes one of the core primitives for doing it.

The article “Can Websites Trust AI Agents? Sam Altman’s World Thinks AgentKit Is the Answer” was first published on AlexaBlockchain. Read the complete article here: https://alexablockchain.com/World-Introduces-AgentKit-Beta/

Read Also: MoneyGram, Pairpoint and eToro Back Midnight’s Privacy Blockchain Before Mainnet

Disclaimer: The information provided on AlexaBlockchain is for informational purposes only and does not constitute financial advice. Read complete disclaimer here.

Image Credits: World, Shutterstock, Canva, Wiki Commons

Bitrefill Discloses Cyberattack, Points To North Korea’s Lazarus Group

0

Crypto e-commerce platform Bitrefill said it was the target of a cyberattack earlier this month that resulted in stolen funds and limited exposure of customer data, with indicators pointing to the North Korean-linked Lazarus Group as a likely perpetrator.

The breach, which began on March 1, originated from a compromised employee laptop, according to the company’s incident report. 

Attackers were able to extract legacy credentials tied to production systems, allowing them to escalate access across Bitrefill’s infrastructure, including segments of its internal database and certain cryptocurrency hot wallets.

Bitrefill said the attackers drained an undisclosed amount of funds from its hot wallets while also exploiting its gift card inventory systems to place suspicious purchases with vendors. The company did not specify the total financial impact but stated it will absorb the losses using operational capital.

The intrusion was first detected through irregular purchasing patterns and anomalies in supplier activity. 

In response, Bitrefill temporarily took its systems offline to contain the breach across its global operations. The company said services, including payments and account access, have since returned to normal levels.

As part of the attack, approximately 18,500 purchase records were accessed. The exposed data includes email addresses, cryptocurrency payment addresses and metadata such as IP addresses. 

Around 1,000 of those records involved encrypted customer names, which are being treated as potentially exposed due to the possibility that attackers accessed encryption keys. Bitrefill said it has notified affected users directly.

Despite the breach, the company emphasized that it stores minimal personal data and does not require mandatory know-your-customer verification for most transactions. Any KYC-related information is handled by external providers and is not stored within Bitrefill’s systems. The firm added there is no evidence that its full database was exfiltrated or that customer data was the primary target.

“Based on our investigation and logs, we don’t have reason to think that customer data was the objective,” the company said, noting that the attackers appeared to conduct limited queries consistent with probing for valuable assets such as cryptocurrency holdings and gift card inventory.

North Korea’s Lazarus Group was involved

Bitrefill cited several indicators linking the attack to the Lazarus Group, including similarities in malware, reused infrastructure such as IP addresses and email accounts, and on-chain transaction patterns. 

The group, often associated with North Korea, has been tied to some of the largest crypto thefts in recent years through its specialized subgroup, Bluenoroff.

Cybersecurity firms including zeroShadow, SEAL911 and RecoverisTeam assisted in the response and investigation, alongside on-chain analysts and law enforcement. The company said it is implementing additional security measures, including expanded monitoring systems and internal controls, to prevent similar incidents.

The attack highlights ongoing concerns around state-sponsored cyber threats in the digital asset sector. 

According to blockchain analytics firm Chainalysis, groups linked to North Korea were responsible for more than $2 billion in crypto thefts in 2025, accounting for a significant share of total illicit activity in the space.

Bitrefill said operations have stabilized following the incident and expressed confidence in its recovery, noting that customer activity and sales volumes have returned to typical levels.

Jack Mallers Confirmed As A Bitcoin 2026 Speaker

0

Jack Mallers has been officially confirmed as a speaker at Bitcoin 2026, returning to the stage where he made Bitcoin history to share his perspective on Bitcoin’s expanding role in payments, capital markets, and global finance. As Co-Founder and CEO of Twenty One Capital (NYSE: XXI) and Founder and CEO of Strike, Mallers now sits at the intersection of two consequential Bitcoin companies operating today, one reshaping how people spend and save Bitcoin, the other redefining what a publicly traded Bitcoin company can be.

Twenty One Capital launched on the New York Stock Exchange in December 2025, debuting with a treasury of 43,514 Bitcoin — the third-largest public corporate Bitcoin holding in the world, behind only Strategy and MARA Holdings. The company is majority-owned by Tether, the world’s largest stablecoin issuer, and Bitfinex, with significant minority ownership from SoftBank Group, and has committed to operating with public-market transparency, including publishing on-chain proof of holdings for real-time shareholder verification. Speaking on CNBC at launch, Mallers made the mission clear: the company plans to “buy as much Bitcoin as we possibly can” not as a passive treasury vehicle, but as a full Bitcoin-native operating business building capital markets advisory, lending models, and educational media on top of its BTC holdings.

Strike, the company Mallers founded in 2020, has become one of the most widely used Bitcoin financial platforms in the world. Built on Bitcoin’s Lightning Network, Strike allows users to make and receive payments, buy and sell bitcoin with no added fees, and convert their paychecks directly into Bitcoin all without requiring prior crypto experience. In March 2026, Strike received both a BitLicense and a money transmitter license from the New York State Department of Financial Services, allowing the company to operate in one of the most tightly regulated digital asset markets in the United States. “Strike is building the leading Bitcoin financial institution,” Mallers said in a statement. “With our BitLicense, we can now bring that mission to New York, the global center of finance.”

With Twenty One Capital now live on the NYSE and Strike completing its all-50-states U.S. expansion, Mallers arrives at Bitcoin 2026 carrying more institutional weight than ever, and the same conviction he’s held since day one: that Bitcoin is honest money, and that the infrastructure being built around it will determine what the next chapter of global finance looks like.