This post highlights 35 recent examples of global institutions building on Ethereum's stack, spanning tokenized stocks and ETFs, money market funds, deposit tokens, stablecoins, AI-driven payments, and 24/7 settlement across banks, asset managers, fintechs, and Big Tech. Ethereum is the preferred base layer and L2 ecosystem for regulated tokenization, staking products, and programmable capital. It is the settlement rail for institutions moving real-world assets and financial infrastructure onchain at scale.
There's plenty of cards that help you save crypto. AMARA [10] lets you spend it. Built on the $EMBR token, AMARA offers a charge-card-based spend layer funded by card receivables. Early investors can earn bonus shares and priority access to $EMBR. Invest
Morpho scaled from 67,000 to 1.4M+ users in 2025, with deposits growing from $5B to $13B and active loans reaching $4.5B, powered by major institutional integrations including Coinbase's crypto-backed loans (DeFi's largest integration to date), plus Crypto.com, Gemini, Societe Generale Forge, and Bitget. RWA deposits surged from near-zero to $400M by Q3 2025, signaling accelerating institutional adoption. Most large institutions now have active DeFi teams and research, with 2026 expected to convert this interest into concrete deployment.
Cantor Fitzgerald's initiation of coverage on single-token DATs like PURR and HYPD (both holding Hyperliquid's HYPE) represents the most detailed Wall Street sell-side research on an individual crypto asset to date, enabled by banks' ability to profit from trading DAT equities rather than tokens directly. The DAT structure solves a critical incentive misalignment by creating equity vehicles that attract institutional and retail capital more effectively than raw tokens. However, DATs face a fundamental conflict between their dual mandate of accumulating tokens at low prices while simultaneously driving token appreciation for NAV growth.
Tokenized gold products PAXG and XAUT suffer from exponential slippage, while CME Gold Futures maintain under 3 bps slippage at $20M – a liquidity gap of multiple orders of magnitude. Two Binance PAXG flash events in mid-October 2025 cascaded through oracle dependencies to liquidate $6.84M in longs and $2.37M in shorts on Hyperliquid. Market makers face structural barriers, including 10-50 bps minting fees, KYC/custodian requirements, and T+1 to T+5 redemption windows that make tokenized asset inventory effectively illiquid.
Vitalik Buterin argues today's token-holder voting DAOs are inefficient and vulnerable to capture, and says the ecosystem needs different and better DAO designs that actually address the weaknesses of human politics. He points to higher-stakes needs like better oracle architectures for stablecoins and prediction markets, onchain dispute resolution, curated security lists, fast funding for short-term efforts, and long-term maintenance, while calling out privacy and decision fatigue as the two biggest blockers that ZK (for private governance) and selectively used AI (to reduce fatigue without replacing human judgment) could help solve.
The Ethereum Foundation's Developer Acceleration Team announced winners from the recently concluded x402 Hackathon, showcasing projects building infrastructure and tooling on the x402 protocol to advance AI development on Ethereum.
Perpetuals trading volume is now roughly 3x spot DEX volume, with Hyperliquid leading 30-day perp volume and Solana only barely cracking the top 10 at about $31.3B.
Token Terminal data shows stablecoins ($307.7B), tokenized funds ($14.2B), tokenized commodities ($4.3B), and tokenized stocks ($456.5M) have all reached new all-time high market caps.
OpenAI has expanded ChatGPT Go, its $8/month subscription tier, to worldwide availability and announced plans to introduce ads for free and Go users starting in the US. Ads will appear at the bottom of responses for relevant products or services, with exceptions for sensitive topics like health and politics. ChatGPT Plus, Pro, Business, and Enterprise subscriptions will remain ad-free, with Plus offering advanced features at $20/month.
Matthew McConaughey has secured eight trademarks from the US Patent and Trademark Office covering his voice and likeness, including video clips and audio of his famous "Alright, alright, alright" line. The trademarks are designed to prevent AI applications and users from creating unauthorized simulations of his voice or appearance. McConaughey stated he wants to establish clear ownership boundaries requiring consent and attribution in an AI-driven world.
Reports suggest the iPhone 18 Pro may switch to a punch-hole selfie camera with Face ID hidden under the display, possibly moving the camera from the center to the top-left corner. This would likely shift the Dynamic Island left as well—since it's considered too useful to drop—and it could still look balanced if it spans the full screen width.
A UX specialist with two years of auditing experience for global brands shares comprehensive lessons on conducting UX audits. They cover key lessons, including recognizing when audits apply, communicating effectively with stakeholders, grounding recommendations in data, and selecting appropriate research tools while remaining tool-agnostic. Additional guidance includes systematically examining elements from usability to conversion optimization, delivering findings through clear visual presentations scheduled strategically after report delivery, and avoiding common pitfalls.
Product-market fit requires deep user understanding and continuous iteration rather than assumptions. UI/UX design agencies bridge the gap between business goals and user behavior through structured research, usability testing, and pattern identification that reveals friction points. These agencies enable ongoing refinement by translating inconsistent user feedback into actionable insights, helping teams adapt as markets and expectations evolve.
AI interfaces are deliberately designed to feel human—using conversation, memory, first-person language, and emotional tone—which encourages people to treat tools like thinking agents and outsource judgment to them. This blurring of boundaries leads to over-trust, dependency, and real harm. Designers should make limits visible by removing human-like cues, showing uncertainty, breaking false intimacy, and clearly framing outputs as generated text, not authority.
Honda has officially confirmed its new, flatter “H” logo will roll out on EV models launching from 2027 onward. Replacing the old metallic, skeuomorphic style, the redesign is meant to signal a fresh start for Honda's next-generation EVs, echoing its 1961 logo with sharper lines and symbolizing innovation and a new direction.
Apple dropped to seventh place in US patent rankings in 2025 after receiving 2,722 patent grants, an 11.6% decline from 2024. This continues Apple's downward trend in patent volume as overall US patent activity also decreased.
BMW's Designworks studio in Santa Monica uses AI as a "world-building collaborator" to envision future environments before designing products for them, rather than using AI to design vehicles directly.
Negative feedback triggers defensive reactions because people conflate their work with their self-worth, but reframing it as objective data about output—not personal value—enables professionals to extract valuable insights while maintaining confidence.
Only 4% of executives say they're getting ROI from AI. Why? Improved personal productivity isn't enough to deliver meaningful team — or enterprise — results.
It's hard to guarantee correctness and testability for complex filtering logic embedded in server-side database queries. Instead, it's better to shift intricate filtering to a client-side Domain Model, where it can be thoroughly tested using standard tooling. To maintain performance, a simpler, coarse-grained filter is retained on the database server, and this server-side filter must be "wider" to make sure no essential data is inadvertently excluded.
On January 8, Cloudflare's 1.1.1.1 DNS resolver had widespread resolution failures for users after a routine update accidentally reordered CNAME records in DNS responses. This subtle change broke some legacy DNS client implementations, such as glibc's `getaddrinfo` and certain Cisco switches, which incorrectly expected CNAME records to appear before other resource records.
Technical debt often comes from commercial decisions prioritizing short-term revenue over scalable architecture. This "revenue debt" happens through patterns like legacy revenue traps, bespoke solutions, or portfolio overreach. These choices create a reinforcing loop where increasing architectural complexity consumes capacity and makes traditional refactoring efforts ineffective.
The creator of Ruby on Rails says that AI coding tools are not yet ready to replace junior developers due to their inconsistency and lack of quality. AI is a "flickering light bulb," occasionally brilliant but often producing code that is poorly structured, hard to maintain, and lacks true system understanding.
Gauntlet [10] is a 10-week, in-person program for experienced engineers who are ready to really sink their teeth into AI and build production AI systems. Graduates get placed in AI-first roles starting at $200K. No tuition required - funded by hiring partners. Apply to Cohort 4 [10] (must be eligible to work in US without sponsorship)
Gemini Voyager is an all-in-one browser extension that improves the Google Gemini experience by adding organizational and utility features. It provides timeline navigation for conversations, robust folder management to organize chats, and a personal prompt library for quick access to frequently used instructions.
Tambo AI is a Generative UI SDK for React that allows devs to build applications that dynamically adapt to users based on natural language interactions. It works by allowing developers to register React components with descriptive schemas, enabling AI to intelligently select and render the most appropriate UI in response to user input.
The "Ralph Wiggum Technique" is an agentic coding method that went viral in late 2025. Initially a simple bash loop for continuous AI execution, ralph's evolution had many applications in refactoring, spec generation, and project setup. It was very useful for specific tasks like large-scale code refactoring.
Traditional JavaScript-heavy web components are a poor fit for marketing site design systems, as they needlessly impact performance and accessibility for primarily presentational elements. HTML Web Components, which wrap standard HTML with custom elements that are progressively enhanced with JavaScript, are a better approach.
Looper is an AI coding tool that makes sure of deterministic and auditable development by enforcing structured, single-task AI agent iterations managed via a JSON backlog and a forced review pass.
Ugly code can be valuable due to the implicit knowledge it contains or its proven utility over time, making it worth the effort to work with and learn from rather than discard.
LLMs streamline practical coding, so developers should balance using existing solutions with cultivating a deep understanding of fundamentals, as this expertise is still essential for complex problems and building core systems.
South Korean cybersecurity firm Genians has flagged a new APT campaign led by the North Korean Konni hacking cluster. The attackers are targeting victims with spearphishing emails posing as North Korean human rights activists and South Korean financial institutions. The attackers use common click-tracking services to obfuscate the redirect links used to deliver malware.
Belgian security experts have identified a new flaw in Bluetooth devices using Google's Fast Pair. This vulnerability enables attackers to take control of devices to manage audio, track location, or listen to microphone audio. The issue occurs because devices accept Fast Pair connections even outside pairing mode. An attacker can hijack a device in about 10 seconds from a distance of up to 14 meters.
OpenCode versions before v1.1.10 contained a critical RCE vulnerability via an unauthenticated HTTP server that exposed endpoints for arbitrary shell command execution, interactive terminal session creation, and arbitrary file reads. The vulnerability also enabled prompt injection into the LLM's context window, creating a secondary attack vector to manipulate the AI agent into exfiltrating data or performing malicious actions. Thousands of developers' machines were exposed with near-zero sandboxing, meaning agents had full access to SSH keys, cloud credentials, and browser cookies, with no audit trail of potential compromise.
BodySnatcher is a critical vulnerability in ServiceNow's Now Assist AI Agents and Virtual Agent API that allows unauthenticated attackers to execute agentic workflows as any user by exploiting weak authentication defaults and auto-linking features—potentially creating backdoor admin accounts. ServiceNow patched hosted instances in late October (Now Assist AI Agents 5.1.18/5.2.19+ and Virtual Agent API 3.15.2/4.0.4+), but the underlying misconfigurations may persist in custom code and third-party integrations. Organizations should enforce MFA with proper validation scripts for Virtual Agent API providers, enable AI steward approval in AI Control Tower, and regularly audit and disable unused AI agents.
kubeconfigs can run any executable via the configured exec plugin, which is used to obtain credentials. Kubernetes v1.35 adds two new fields, credentialPluginPolicy and credentialPluginAllowlist, which can be used to restrict the executables that are available to kubectl for obtaining credentials. Currently, the only supported attribute for the allow list is `name` (for an executable name or path), but the SIG is looking to add further support, such as checksums, in the future.
TechCrunch has received a sample of a phishing link that is being sent to those connected to “Iran-related activities” from a UK-based Iranian activist. The initial contact is sent to the victim via WhatsApp and contains a phishing link that directs them to a malicious site that attempts to steal the victim's Gmail credentials, hijack the victim's WhatsApp account, monitor the victim's location, and capture audio and video. The attackers use the DuckDNS dynamic DNS provider to mask their links.
CNAPPs provide visibility into cloud risks but rely on manual remediation after deployment. Pair them with preventive controls and shift from reactive to proactive. Turbot Guardrails [11] doesn't just scan and alert. It blocks misconfigurations in build, at the cloud provider API, and auto-remediates drift in runtime, preventing issues
The Agentic Threat Hunting Framework (ATHF) provides a memory and automation layer for threat-hunting programs. It can integrate with any threat-hunting methodology, making existing programs AI-ready.