Weekly insights on DeFi, blockchain risk, and institutional finance — from a 25-year TradFi and Web3 veteran. 2026-06-01T00:00:00.000Z https://www.omarmoonis.com/ Omar Moonis 2026-06-01T00:00:00.000Z https://www.omarmoonis.com/blog/ai-agents-credit-cards-risk-framework/

Robinhood's May 2026 launch of an Agentic Credit Card put a virtual payment credential in the hands of AI agents for the first time at a major consumer brokerage. Over $73 million in agent payments have already settled across 176 million on-chain transactions, with 98.6% running through a single stablecoin issuer. The liability question of who bears responsibility when an agent exceeds its mandate has no regulatory answer yet. The infrastructure is live. The frameworks are not.

2026-05-31T00:00:00.000Z https://www.omarmoonis.com/blog/the-keys-were-always-the-weakest-link/

Gravity Bridge lost $5.4 million on May 30 through a suspected signing key compromise, the latest in eight bridge exploits that cost the crypto ecosystem $328.6 million in a single month. The root cause is not new code vulnerabilities. It is the same concentrated signing authority problem that traditional finance spent fifty years learning to control through hardware security modules and dual-authorization requirements. The industry keeps paying the tuition. It has not yet taken the course.

2026-05-26T00:00:00.000Z https://www.omarmoonis.com/blog/spacex-blockchain-ipo/

The SpaceX IPO will be the largest in recorded history, but the most consequential question isn't about Starlink's revenue or the Mars narrative. Thousands of investors hold tokenized SpaceX exposure through pre-IPO wrapping structures, synthetic instruments, and offshore perpetual futures whose settlement mechanics have never been tested at real institutional scale. Clean settlement validates the on-chain private market thesis in a way no whitepaper ever could. Messy settlement sets that narrative back by years, and the damage won't be contained to SpaceX tokenholders.

2026-05-16T00:00:00.000Z https://www.omarmoonis.com/blog/cross-chain-bridges-the-cdos-of-defi/

Two cross-chain exploits in one news cycle, $292 million from KelpDAO, $10.8 million from Thorchain, triggered $4 billion in asset migrations and exposed a textbook concentration risk that was hiding in plain sight. DeFi built interconnected financial infrastructure at scale without anyone running a counterparty exposure report; TradFi learned that lesson in 2008, and the cost of relearning it tends to compound. Whether the exodus is a market correctly repricing risk or the first leg of a longer unwind is the question DeFi hasn't yet answered.

2026-05-14T00:00:00.000Z https://www.omarmoonis.com/blog/25-year-old-bank-charter/

Augustus just received a conditional OCC national bank charter, only the eighth since 2010. AI-native architecture. Stablecoin settlement by default. Clients like Kraken. Backed by Thiel's Valar Ventures. And a CEO who isn't 26 yet. Having spent years on the regulatory side of large institutions, I know what an OCC charter application actually costs in time, capital, and institutional endurance. This one should make every bank still debating stablecoin strategy very uncomfortable.

2026-05-10T00:00:00.000Z https://www.omarmoonis.com/blog/brazil-s-efx-ban-90-of-cross-border-crypto-volume-just-got-redirected/

Brazil's Central Bank has barred stablecoins from its official eFX rail from October 1st, a clean rule for firms like Nomad and Braza Bank, but one that redirects rather than eliminates the roughly 90% of crypto-linked cross-border volume currently running through that system. Malaysia in 2021 and India's post-UPI period both ran the same experiment: reported crypto settlement fell, total cross-border flows held, and capital found its own route. Regulators gain a cleaner audit surface on a smaller slice of the actual market, which is a different thing from gaining control of it.

2026-05-01T00:00:00.000Z https://www.omarmoonis.com/blog/defi-united-we-stand/

After DeFi's largest exploit of 2026, fourteen protocols including direct competitors voluntarily raised over 100,000 ETH to absorb the damage. No central bank. No deposit guarantee. No legal obligation. What DeFi United pulled off in two weeks, TradFi has never done spontaneously in its entire history.

2026-04-22T00:00:00.000Z https://www.omarmoonis.com/blog/gone-in-46-minutes/

Hackers tricked Kelp DAO into minting 116,500 ETH of unbacked tokens, then laundered $292M before most people finished their morning coffee. The attack vector was a single signing authority with no fallback. Any TradFi risk manager would have flagged that on day one.

2026-04-14T00:00:00.000Z https://www.omarmoonis.com/blog/are-we-in-1996-again/

BlackRock now has $150Bn tied to digital markets and its CEO is comparing tokenization to the early internet. The 1996 framing is accurate and that's exactly the problem. Amazon was founded in 1994. Pets.com launched in 1998. The opportunity is real. So is the wave of capital misallocation coming before anyone knows which is which.

2026-04-11T00:00:00.000Z https://www.omarmoonis.com/blog/crypto-vs-quantum-computing/

Google published research warning that Bitcoin and Ethereum's encryption is vulnerable to quantum computers and cited an obscure blockchain called Algorand 32 times as the model for readiness. Google wants its own systems quantum-safe by 2029. The difference: Google can patch a server overnight. A decentralized network can't.

2026-04-07T00:00:00.000Z https://www.omarmoonis.com/blog/ai-agents-crypto-tradfi/

On the Arbitrum blockchain, an AI agent just paid another AI agent with no human approval. This isn't a demo. It's live. The compliance, custody, and liability questions this creates for TradFi aren't hypothetical: they're arriving faster than any existing framework can handle.

2026-04-06T00:00:00.000Z https://www.omarmoonis.com/blog/no-blockchain-no-ai/

CFTC Chair Michael Selig told a podcast that blockchain timestamps may be the only reliable way to distinguish real media from AI-generated content. The head of US derivatives oversight isn't pitching crypto. He's arguing blockchain is critical internet infrastructure. That's a fundamentally different conversation.