Ripple is preparing to finish 2026 with a projected $900 million annualized product revenue run rate, marking an important step in its expansion beyond cryptocurrency payments.

The company announced the target during its Swell 2026 conference in New York on October 28, alongside updates about its RLUSD stablecoin, institutional partnerships, and banking operations.

What’s interesting to us is how much Ripple’s business has changed. The company is no longer concentrating primarily on international payments. It’s building services that connect traditional banking, digital assets, and blockchain-based financial markets.

TL;DR

• Ripple expects to reach a $900 million annualized product revenue run rate by the end of 2026, supported by payments, custody, stablecoins, and institutional services.
• The RLUSD stablecoin has reached approximately $2.6 billion in market capitalization, increasing more than 88% this year.
• Ripple has received final regulatory approval for a national trust bank and expanded partnerships with major financial institutions.

Ripple’s Business Is Growing Beyond Payments

Ripple’s latest financial target reflects a business that has become considerably broader.

According to Ripple’s official October 28 announcement, the company expects to exit 2026 with $900 million in annualized product revenue.

This is a projected year-end revenue pace, not a report of $900 million already collected during 2026.

Growth is coming from several areas, including international payments, digital asset custody, stablecoins, prime brokerage, and treasury management.

Ripple also reported that the number of customers and partners using multiple products has tripled this year.

Its infrastructure now serves more than 1,700 institutions and businesses, supported by over 85 regulatory licenses.

We see this as an important change in Ripple’s strategy. Rather than relying on one service, the company is creating several ways for financial institutions to use its technology.

RLUSD Becomes A Bigger Part Of Ripple’s Strategy

Ripple’s dollar-backed stablecoin, RLUSD, is playing an increasingly important role in that expansion.

The token has reached approximately $2.6 billion in market capitalization, representing growth of more than 88% since the beginning of 2026.

RLUSD is now available through major trading platforms, including Coinbase, Robinhood, Binance, Kraken, and OKX.

However, exchange availability is only part of the story.

Ripple is positioning the stablecoin for institutional payments, trading collateral, and blockchain-based financial transactions.

We find that development particularly relevant because stablecoins are increasingly being used for purposes beyond ordinary cryptocurrency trading.

For readers following cryptocurrency developments, RLUSD’s growth provides another example of traditional finance exploring digital dollars.

Ripple Receives Approval For A National Trust Bank

Another major announcement came on October 26, when Ripple received final approval from the Office of the Comptroller of the Currency to establish Ripple National Trust Bank.

The federally supervised institution is intended to manage reserves supporting RLUSD and provide certain digital asset custody services.

The approval doesn’t mean Ripple has become a conventional retail bank offering ordinary checking accounts.

Instead, it strengthens the regulatory structure supporting its institutional products.

We think this distinction matters because regulatory oversight is a major consideration for businesses deciding whether to use stablecoins.

Ripple’s ability to combine blockchain technology with established financial controls could make its services more attractive to institutions.

Major Financial Firms Expand Their Ripple Partnerships

Ripple also announced developments involving BNY, Robinhood, and other financial institutions.

BNY is expanding its digital asset custody relationship with Ripple and exploring tokenized trade finance using the XRP Ledger.

Meanwhile, Aviva Investors has introduced a tokenized share class of its sterling liquidity fund on the network.

Ripple’s payments business is also expected to approach $150 billion in cumulative transaction volume by the end of December.

These figures demonstrate the scale of activity Ripple is pursuing, although transaction volume shouldn’t be confused with company revenue.

We are particularly interested in how these partnerships develop beyond their initial announcements.

The real test will be whether institutions use the infrastructure regularly and generate sustainable business.

The growing interest in tokenized financial products is also worth watching across the blockchain industry.

What Does This Mean For Ripple And XRP?

Ripple’s expansion is encouraging for its business, but that doesn’t automatically translate into higher XRP prices.

Company revenue, RLUSD adoption, and demand for XRP are connected in some areas, yet they remain different measures of success.

Some Ripple services can generate revenue without creating equivalent demand for the XRP token.

That’s why we’ll be watching actual transaction activity, institutional adoption, and the role XRP plays in Ripple’s expanding product lineup.

For investors following the wider Bitcoin and crypto market, Ripple’s progress offers another indication that digital asset companies are becoming more integrated with traditional finance.

Reaching a $900 million annualized revenue pace would be a meaningful milestone.

But the more important question is whether Ripple can turn its growing collection of products and partnerships into consistent long-term revenue.

Bitcoin ETFs are experiencing an interesting change in ownership. Some of Wall Street’s biggest trading firms have been reducing their positions, while sovereign wealth funds and wealth managers are quietly increasing theirs.

At first glance, declining institutional holdings might suggest that investors are losing interest in Bitcoin. But the latest research from Galaxy tells a more complicated story.

The investors leaving the market appear to be motivated largely by shrinking trading profits, while other institutions are treating Bitcoin as an investment worth holding through volatility.

We believe the difference between these two groups deserves more attention than the selling figures alone.

TL;DR

• Nine major Wall Street firms reduced their spot Bitcoin ETF exposure by approximately 68,000 BTC between September 2025 and June 2026.
• Sovereign investment funds and wealth managers increased their holdings, with other reporting institutions collectively adding 20,000 BTC.
• Declining profits from Bitcoin futures arbitrage appear to be a major reason behind the institutional selling.

Why Are Major Wall Street Firms Selling Bitcoin ETFs?

According to Galaxy Research, institutions reporting their holdings to the US Securities and Exchange Commission owned approximately 355,000 BTC-equivalent in spot Bitcoin ETFs at the end of September 2025.

By June 2026, that figure had dropped to around 307,000 BTC, a decline of 14%.

However, just nine financial firms accounted for 68,000 BTC in reduced exposure, exceeding the overall institutional decline of 48,000 BTC.

Those firms included Goldman Sachs, Millennium Management, Brevan Howard, and Tudor Investment.

That means the remaining institutional investors collectively increased their exposure rather than following the largest sellers.

For us, this is the most revealing part of the research. Institutional Bitcoin demand hasn’t disappeared; ownership is shifting between different types of investors.

The Trading Strategy Behind The Sell-Off

One reason for the selling involves a strategy known as the cash-and-carry trade.

Instead of purchasing Bitcoin ETFs solely because they expect prices to rise, some hedge funds simultaneously buy spot exposure and sell Bitcoin futures.

The goal is to capture the difference between the two prices while limiting exposure to Bitcoin’s direction.

This strategy becomes less attractive when futures premiums decline.

In Galaxy Research’s analysis, the annualized premium on front-month Bitcoin futures fell from an average of 7.9% before Bitcoin’s October 2025 peak to 4.8% in the 30 days ending October 21, 2026.

That left only a small advantage over short-term US Treasury bills, even before trading expenses.

For some institutions, maintaining the positions simply stopped making financial sense.

We shouldn’t automatically interpret those sales as a negative forecast for Bitcoin’s price.

Sovereign Funds See A Different Opportunity

While trading-focused institutions reduced exposure, several longer-horizon investors moved in the opposite direction.

Morgan Stanley’s wealth management business, Abu Dhabi’s Mubadala, and the Abu Dhabi Investment Council were among the buyers identified in Galaxy’s research.

Across other reporting institutions, approximately 20,000 BTC-equivalent was added during the period.

These purchases suggest that some investors continue to view Bitcoin ETFs as a useful way to gain cryptocurrency exposure through established financial markets.

Sovereign funds and wealth managers can have different investment objectives from hedge funds.

Rather than relying on short-term price differences, they may focus on portfolio diversification and longer-term opportunities.

Of course, institutional purchases don’t guarantee that Bitcoin prices will rise.

Still, we see an important distinction between investors closing a trading strategy and investors abandoning an asset altogether.

Bitcoin ETF Investors Have Held Up Better Than Prices

Galaxy’s research also points to a surprising difference between Bitcoin’s price performance and ETF ownership.

From the October 2025 peak to the July 2026 trough, Bitcoin ETF holdings declined approximately 11%, while Bitcoin’s price fell around 53%.

That suggests ETF investors, as a group, held on to much more of their exposure than the price decline might imply.

The funds have also accumulated approximately 87,000 BTC since Bitcoin’s June low.

We find this especially interesting because the increase occurred while leveraged futures positions were shrinking.

It raises the possibility that recent buying reflects more direct investment demand rather than another wave of arbitrage activity.

For readers tracking Bitcoin news, these ownership patterns offer useful context beyond daily ETF inflow and outflow figures.

What Could This Mean For Bitcoin’s Next Move?

The next round of institutional filings will help determine whether this shift is continuing.

Current comparisons rely on holdings reported through June 2026, so they don’t fully capture how institutions positioned themselves during the third quarter.

We’ll be watching whether sovereign funds and wealth managers continue accumulating while hedge funds remain less active.

A recovery in futures premiums could also bring trading firms back into the market.

However, the larger question is whether Bitcoin ETFs are developing a more stable base of investors.

As we follow developments across the cryptocurrency market and the blockchain industry, we think the changing composition of institutional ownership will be an important trend to monitor.

Bitcoin’s future won’t depend on one category of investor. But understanding who is buying, who is selling, and why can give us a clearer picture of the market.

An alleged leak from cryptocurrency swap service Wagyu.xyz contains 4,580 completed cross-chain swaps linking incoming transaction hashes, Monero receiving addresses, and client IP addresses. The dataset reportedly includes 38,628 order records from July 18–October 26, 2026, plus an activity index covering 10,139 distinct IP addresses. Hudson Rock has not independently authenticated the files’ alleged breach […]

The post Alleged Wagyu Leak Contains 4,580 Completed Crypto Swaps Linking Monero Wallets to IP Addresses appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

UEBA earns its keep on attacks that look like logins stolen credentials used plausibly, insiders drifting toward exits and fails on unexplainable scores nobody acts on. Roster honesty first: our sheet listed Exabeam and LogRhythm separately, but their merger makes them one company, so this is an eleven-vendor verdict guide spanning SIEM-embedded analytics, standalone timelines, […]

The post 11 User & Entity Behavior Analytics (UEBA) Tools: The 2026 Buyer’s Verdict Guide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CTI services answer different sentences who targets us, what’s leaked about us, which alerts are noise, whose infrastructure is that and no provider owns them all. This verdict guide maps twelve feeds and services to the sentences they answer best, spanning frontline-IR intel, noise-filtering specialists, preemptive infrastructure hunting, underground depth, and the regional players with […]

The post 12 Cyber Threat Intelligence (CTI) Feeds & Services: The 2026 Buyer’s Verdict Guide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-41709, a vulnerability related to insufficient logging affecting Broadcom VMware ESX, to its Known Exploited Vulnerabilities (KEV) catalog. This decision was made after evidence of exploitation in the wild was discovered. The announcement, made on October 28, 2026, raised the priority of addressing this flaw, despite its […]

The post CISA Adds Actively Exploited VMware ESXi Logging Flaw to KEV Catalog appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A TIP earns its keep in decisions changed per month blocks pushed, hunts launched, patches reprioritized and 2026’s field spans premium all-source graphs, open-source standards, exposure-fused challengers, and infrastructure-truth specialists, with ownership moves (Mastercard’s, Securonix’s) adding mandatory RFP questions. This verdict guide judges twelve platforms on operationalization, not feed counts. Actionable threat intelligence feeds provide […]

The post 12 Threat Intelligence Platforms (TIP): The 2026 Buyer’s Verdict Guide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cisco has released security updates that address a critical vulnerability in the Remote Access SSL VPN service on its Secure Firewall Adaptive Security Appliance (ASA) and Threat Defense (FTD) software. This vulnerability, tracked as CVE-2026-76418, lets unauthenticated attackers trigger unexpected device reloads, causing a denial of service. The flaw is categorized as high severity, with […]

The post Cisco Patches Actively Exploited SSL VPN Vulnerability Affecting ASA and FTD Firewalls appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SOAR’s 2026 question is sustainability: which builder model code, low-code, or no-code will your actual team keep shipping with after the demo glow fades? This verdict guide judges twelve options across the honest lanes: bundled-SIEM automation, enterprise playbook monoliths, the no-code velocity trio, intel-fused orchestrators, and one absorbed lineage flagged where the sheet still lists […]

The post 12 SOAR Tools: The 2026 Buyer’s Verdict Guide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

SIEM purchases fail by buying someone else’s SOC the wrong pricing architecture for your log profile, the wrong engine for your team’s skills and 2026 adds consolidation homework: QRadar’s lanes split, Exabeam carries a merger, Splunk answers to Cisco. This verdict guide judges twelve platforms on pricing-architecture honesty, analyst-loop quality, and estate gravity, spanning the […]

The post 12 SIEM Tools: The 2026 Buyer’s Verdict Guide appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

South Korean prosecutors have raided cryptocurrency exchange Bithumb’s headquarters as part of an ongoing investigation into allegations that former and current executives misused company funds allocated for luxury housing. According to an October 29 report by local media outlet News1…

London Metal Exchange explores tokenizing Hong Kong metal inventories for financing as HKEX prepares a warehouse-receipt blockchain pilot for 2027.

BNB Chain has activated the Jenner hardfork on its BNB Smart Chain testnet, introducing a new payment processing mechanism that reserves 5% of block gas capacity for eligible transactions during periods of network congestion. According to BNB Chain’s October 29…

Utah files 14 criminal charges against Kalshi and its founders over alleged illegal sports gambling as the CFTC challenges state enforcement powers.

Russia has developed a common testing standard for cryptocurrency investors, with brokerage firms expected to become the first regulated intermediaries to assess customers before allowing them to buy and sell digital assets. According to Russian news outlet RBC, National Association…

Bitcoin Core developers have released security updates after an AI-powered code scan uncovered three vulnerabilities, including one that could allow attackers to crash Bitcoin nodes running on Windows and macOS.

The findings were made public on October 28, after developers verified the issues and distributed fixes across supported software versions.

The timing is particularly interesting. Bitcoin Core recently changed its security disclosure policy because artificial intelligence is making certain software weaknesses much easier to discover.

For people operating Bitcoin nodes, the message is straightforward: keeping software updated is becoming more important as vulnerability research accelerates.

TL;DR

• Bitcoin Core disclosed three vulnerabilities discovered through AI-assisted code scanning, including a flaw that could crash nodes running on Windows, macOS, and BSD.
• Security fixes are available in Bitcoin Core versions 29.5, 30.4, 31.2, and 32.1.
• Developers are speeding up vulnerability disclosures as AI tools make previously hidden software weaknesses easier to find.

AI Discovers A Bug That Can Crash Bitcoin Nodes

The most serious concern involves how Bitcoin Core handles certain network connections on operating systems other than Linux.

An attacker connected to a vulnerable node could send specially handled TCP data that causes the software to consume increasing amounts of memory.

Eventually, the affected node could run out of memory and crash.

The vulnerability was discovered on October 23 through Project Loupe, an automated code-scanning initiative developed by Elias Rohrer at Spiral.

Bitcoin Core contributor Gregory Sanders verified the finding before it reached the project’s security team.

According to Bitcoin Core’s official security advisory, the issue affects Windows, macOS, and BSD systems. Linux nodes are not vulnerable to this particular flaw because they use a different mechanism for monitoring network connections.

Importantly, this is a denial-of-service vulnerability. The advisory does not describe an attack that allows someone to steal Bitcoin from a wallet.

Two More Vulnerabilities Raise Questions

The same investigation uncovered two additional weaknesses.

One involved outdated peer connections that could remain open while messages accumulated in memory.

Under certain conditions, this could gradually exhaust a node’s resources and interfere with normal operation.

The third issue concerned the files Bitcoin Core uses to reverse blockchain changes during reorganizations.

An attacker with substantial mining capabilities could theoretically create conditions that corrupt these records and force affected nodes to shut down.

However, developers classified that vulnerability as low severity because exploiting it would require highly impractical circumstances.

The distinction matters. Not every security flaw presents the same level of danger, even when the technical description sounds alarming.

For anyone following Bitcoin developments, these disclosures offer a useful reminder that maintaining the network involves continuous software improvements.

Bitcoin Core Changes How It Reports Security Problems

Perhaps the biggest development isn’t the vulnerabilities themselves, but how quickly they were disclosed.

Previously, Bitcoin Core could keep certain security issues confidential for extended periods, giving node operators time to install fixes before details became public.

That approach becomes less effective when automated tools can independently rediscover the same weaknesses.

Under the updated policy, vulnerabilities considered easy to discover can receive faster patches and public advisories.

We can understand the reasoning. Keeping a flaw secret provides limited protection if someone else can find it with a relatively simple AI-assisted scan.

The challenge is balancing faster disclosures with sufficient testing.

Developers must ensure urgent security updates don’t introduce additional problems.

What Bitcoin Node Operators Should Know

Bitcoin Core has released patched versions 29.5, 30.4, 31.2, and 32.1.

Operators running affected versions should review the official release information and update their software.

There is one important limitation: the fix for the undo-file vulnerability does not fully protect 32-bit systems or nodes storing blockchain data on FAT32 drives.

Those configurations remain exposed to that particular issue.

For exchanges, miners, and businesses relying on Bitcoin infrastructure, software maintenance is an operational priority.

A node that crashes may temporarily stop validating and relaying transactions, potentially disrupting services that depend on it.

The broader blockchain industry faces similar challenges as software systems become more complex.

AI Is Changing The Future Of Crypto Security

AI-assisted security research presents both an opportunity and a challenge.

Developers can examine large codebases more efficiently, identify overlooked problems, and address vulnerabilities before they cause serious damage.

Unfortunately, attackers may benefit from those same capabilities.

That’s why Bitcoin Core’s decision to accelerate disclosures deserves attention.

Rather than assuming that keeping vulnerabilities confidential will always protect users, developers are adapting to a world where finding bugs may become considerably easier.

We’ll be watching how this approach affects future security updates, particularly as more AI-generated reports reach cryptocurrency development teams.

For now, the latest fixes demonstrate that Bitcoin’s security depends not only on its underlying cryptography but also on the people maintaining the software.

As we continue covering cryptocurrency security and industry news, that distinction will remain important.

Poland will soon hand Ukraine two more MiG-29 fighter jets as part of a new military aid package worth about €50 million (about $56 million), Polish daily Rzeczpospolita reported on Oct. 29, in a story quickly picked up by Ukrainian defense outlet Milarnyi. Reserve Lt. Gen. Dariusz Łukowski, director of the Polish Defense Ministry’s Strategy […]

The U.S. Air Force is looking for companies that can repair and sustain the Advanced Synthetic Aperture Radar System-2, or ASARS-2, the imaging radar carried by the U-2 Dragon Lady spy plane, even as the service asks Congress to retire its last U-2s by the end of fiscal 2027. The Air Force Life Cycle Management […]

Lockheed Martin will upgrade the operating systems running the F-35 Lightning II reprogramming laboratories, which build the threat data the fighter needs for combat missions, under a $43.7 million contract modification the U.S. Navy announced on Oct. 28. Eighty percent of the work will take place in Eglin, Florida, and the remaining 20% in Fort […]

The U.S. Navy has awarded South Carolina-based Integer Technologies a $23.1 million contract to research how zero trust cybersecurity can protect the electrical power systems that run its warships, without slowing the split-second controls those systems depend on. The Office of Naval Research awarded the cost-plus-fixed-fee contract for a program called Threat Resilient Integrated Defense […]