banks

The central banks of the United States, Japan, and the United Kingdom will announce their monetary policy decisions this week, with the market focusing on whether the Federal Reserve will initiate its first interest rate hike in three years.Iran and Gulf countries are negotiating shipping management in the Strait of Hormuz to address high crude oil prices.

According to a report by Decrypt, a new report released by the Bank for International Settlements shows that advanced AI technology has shortened the time window for banks to fix vulnerabilities before attackers exploit software flaws. It warns that periodic security assessments and scheduled patch updates have increasingly become insufficient to meet the challenges, with the time window from vulnerability discovery to exploitation reduced from weeks to minutes.The report focuses on the banks' response capabilities, arguing that financial institutions must accelerate the speed of software fixes and expedite the related authorization decision-making processes.

According to Bloomberg, U.S. regulators released a statement on Friday announcing a proposed guideline on third-party risk management for banks. The Federal Reserve, the Office of the Comptroller of the Currency, the Federal Deposit Insurance Corporation, and the National Credit Union Administration stated that the proposal aims to help banks and credit unions "better align and customize their third-party risk management practices to match the risks of various third-party relationships."Federal Reserve staff indicated in a memorandum that as this plan is introduced, banks are increasingly outsourcing certain functions and relying on third-party relationships to improve efficiency and reduce costs. The plan will be open for public comment, is non-binding, and aims to focus institutions' regulatory attention on a principles-based approach to such risks. Federal Reserve Governor Barr opposed the proposal, citing concerns about the standards for "significant financial risks."

According to Cointelegraph, cryptocurrency exchange Coinbase has partnered with financial platform Moov to provide stablecoin infrastructure for over 1,000 community banks and credit unions within Moov's customer base. The two parties will combine Coinbase's regulated digital asset infrastructure with Moov's payment platform to offer stablecoin payment acceptance, settlement, and real-time funding services.This infrastructure will support use cases such as consumer stablecoin payments, merchant settlements, and payments, and will provide businesses and merchants access to Coinbase's custodial accounts. U.S. community banks typically have total assets of less than $10 billion, including state-chartered institutions and savings and loan holding companies.This collaboration comes as major U.S. banks are experimenting with stablecoin infrastructure. On Wednesday, U.S. Bank, the fifth-largest commercial bank in the U.S., completed a real-time cross-border payment using its proprietary stablecoin USBDC on the Stellar blockchain. Earlier this month, 21 financial institutions, including Bank of America, Citigroup, Goldman Sachs, Deutsche Bank, and UBS, announced plans to form a company to issue stablecoins. Additionally, Western Union also partnered with stablecoin infrastructure provider Rain in August to launch a digital wallet and Visa-branded card.

SWIFT service provider Bottomline announced a collaboration with the blockchain infrastructure project Chainlink to enable over 600 bank clients in its network to access blockchain-based cross-border settlements. Bottomline processes over $16 trillion in payments annually and serves 1,200 financial institutions and 10,000 enterprises.Through this integration, banks can continue to use the ISO 20022 standard to send payment instructions, with Chainlink's infrastructure connecting the instructions to blockchain settlements. Chainlink's Cross-Chain Interoperability Protocol (CCIP) supports the transfer of tokenized value across different blockchain networks, while Chainlink's Runtime Environment (CRE) is responsible for payment processes, transaction routing, and operational change coordination.CCIP has been recording mainnet activity since July 2023 and is currently connected to over 60 blockchain networks. Chainlink's Project Pangea has covered more than 50 banking institutions in Europe and South Korea, with participants managing assets totaling over $10 trillion, and the project's goals include achieving T+0 settlement for foreign exchange transactions.

The semiconductor and AI independent research organization SemiAnalysis released a deep security report on Neocloud (new cloud), revealing various cross-tenant security vulnerabilities discovered during the ClusterMAX 3 testing period. In a four-month test covering 25 vendors and 32 clusters, the team achieved multiple instances of cross-tenant remote code execution (RCE) solely by exploiting publicly known vulnerabilities and basic configuration checks. Affected entities included banks, telecommunications companies, universities, research institutions, AI laboratories, and even a national intelligence agency.Typical issues included: shared Kubernetes control plane leading to tenant metadata visibility, container escape, exposure of BMC/IPMI management networks, incorrect configuration of InfiniBand security keys (P_Key, SA_Key, M_Key), unfortified default trust mode of BlueField DPU, Grafana monitoring dashboards using god-level API keys, and lack of VXLAN isolation in front-end networks. The report specifically pointed out a cascading vulnerability case: a misconfiguration of shared vCluster combined with software versions being two years out of date ultimately completed the POC verification of cross-tenant RCE within an afternoon.Notably, the report questioned the mainstream narrative that "AI has fundamentally changed the pace of cybersecurity": statistics on CVEs for NVIDIA GPU drivers, CUDA, PyTorch, Kubernetes, Docker, and the Linux kernel showed that there was no significant increase in vulnerabilities after the popularization of AI coding models, with most data supporting the "no change hypothesis." The report also detailed the incident where an OpenAI-trained agent attacked Hugging Face, where the AI agent achieved cluster-level privilege escalation through a message board established via Artifactory, which went undetected from May to July. While building POC verification for existing vulnerabilities, the team found that Claude Fable and GPT-5.6 Sol frequently rejected security-related requests, ultimately relying on open-source models such as DeepSeek V4, Kimi K3, and GLM-5.2 to complete the task.SemiAnalysis stated that the core issue in the Neocloud (new cloud) industry is not the new risks brought by AI, but rather the long-term absence of basic patch management, tenant isolation, and security design. They recommended that vendors establish automated security announcement monitoring systems and rectify single points of failure that could expose all users' architectural patterns.

Vassilis Tziokas from Matter Labs pointed out in a CoinDesk article that the U.S. Senate has postponed the Clarity Act until September. This market structure bill failed to complete the final vote before the August recess, meaning that regulatory rules for the digital asset market will take weeks to be implemented. Meanwhile, banks are not waiting for regulation; JPMorgan has processed over $30 trillion in transactions through the Kinexys platform and launched the deposit token JPMD, while Citigroup operates cross-border Treasury token services. A clearinghouse, in collaboration with 17 major financial institutions, plans to achieve on-chain tokenized deposit clearing by 2027.The article argues that the interoperability of interbank tokenized deposits does not come from messaging standards or token bridges, but is realized through clearing mechanisms: the sending bank redeems tokens, the receiving bank issues its own tokens, inter-institutional obligations are recorded and netted, and ultimately settled in central bank currency. The engineering challenge lies in simultaneously satisfying privacy, neutrality, and verifiability; each institution must operate its own ledger, prove transfers through cryptography without exposing underlying data, and anchor to a neutral settlement facility owned by no participants.The author notes that the Clarity Act will not directly regulate tokenized deposits, but it can clarify the boundaries of the digital asset market and improve the stablecoin framework established by the GENIUS Act. The Global Financial Markets Association's report in April 2026 lists unresolved gaps such as unified processing of cross-border tokenized deposits and guidelines for off-network transfers, which are regulatory unlocking points for interbank tokenized fund interoperability. In the face of regulatory uncertainty, banks rationally choose to isolate, and each month of delay rewards closed gardens.

Researchers at the Federal Reserve Bank of Dallas, abbreviated as Dallas Fed, indicate that tokenized deposits and real-time blockchain transfers may weaken bank liquidity and limit their ability to issue long-term loans. The study was authored by Rosie Levy and Srini Ramaswamy.The research points out that of the $7 trillion in term risk borne by U.S. banks, approximately 80% is supported by the term characteristics of traditional deposits. If the weighted average term of deposits shortens by 10%, the banking system's term transformation capacity will decrease by about $580 billion, potentially increasing liquidity risk and pressure for fund outflows. Chris Turner, co-founder of Kula, stated that the speed of token transfers does not equate to the legal settlement of underlying financial claims. Tokens can be transferred through the blockchain network in seconds, but payments, ownership, and legal claims still rely on banks, custodians, clearing systems, and regulatory registries to complete the settlement.

According to CoinDesk, Dallas Federal Reserve economists Rosie Levy and Srini Ramaswamy estimate that if depositors' sensitivity to interest rates increases by 10%, tokenized deposits could reduce U.S. banks' ability to bear long-term interest rate risk by about $700 billion; if tokenization leads to a 10% early outflow of deposits, banks would lose about $580 billion in risk absorption capacity.Tokenized deposits place commercial bank money on the blockchain, supporting programmable payments and real-time settlement, but smart contracts and AI agents could automate deposit transfers, weakening deposit stickiness. Banks can respond by raising deposit rates, increasing reserves and government bonds, or relying more on term debt, but this could drive up credit costs for consumers and businesses.Research from Brazil's instant payment network Pix shows that more frequent use of the system increases banks' holdings of liquid assets like government bonds while reducing credit intermediation. Currently, tokenized deposits are still in the early stages, with clearinghouses and U.S. banks such as Bank of America, Citibank, and Wells Fargo developing interoperable networks that support interbank clearing, automated workflows, and 24/7 settlement.

The Federal Reserve discount rate meeting minutes show that 4 out of 12 regional Federal Reserve banks voted in July to support an increase in the discount rate.

According to the New York Times, the U.S. Securities and Exchange Commission has issued subpoenas to major Wall Street banks, requesting information regarding the artificial intelligence hedge fund Situational Awareness trading.

On August 24, recent news reported that some banks in Hong Kong have initiated a source of funds declaration procedure for certain existing mainland investment clients, setting deadlines of August 20 (services may be suspended if not submitted) and September 12 (services may be terminated if not submitted).Previously, in response to requirements from the Hong Kong Securities and Futures Commission and the Hong Kong Monetary Authority, some banks have begun to require new mainland account investors to confirm that their source of funds comes from legitimate overseas channels. This source of funds confirmation procedure targets existing mainland investor accounts, primarily focusing on long-term "inactive accounts." It is understood that some licensed institutions in Hong Kong, including HSBC Hong Kong and branches of Chinese banks in Hong Kong, have indeed implemented such measures recently.

The Responsible Fintech Institute (RFI) and the cryptocurrency asset custody infrastructure provider Safeheron announced the launch of a pilot program for quantum-resistant digital asset wallets and on-chain transfers, with participants from Europe, the Middle East, and Asia. The pilot operates on the quantum-resistant NEAR testnet and uses a multiparty computation protocol that supports the ML-DSA-65 standard.Participating regulatory bodies include the Abu Dhabi Global Market, Bhutan's Gelephu Financial Services Office, and Malta's Financial Services Authority, with Bison Bank and DK Bank participating as financial institutions. The banks will test wallet generation and transfers in a shared application environment, while regulatory bodies will observe in the initial phase and later participate in governance workflows. The organizers plan to release a white paper covering research, protocol design, and testing results, and gradually open-source the underlying technology. The Hong Kong Monetary Authority plans to prepare the Hong Kong banking sector to fully address quantum security risks by 2030, while a report from the Bank for International Settlements published in 2025 suggests that financial institutions should migrate to quantum-resistant systems in phases.

According to CoinDesk, as Wall Street and global financial institutions accelerate their entry into the digital asset space, the boundaries between traditional finance (TradFi) and decentralized finance (DeFi) are gradually blurring. Bitwise CEO Hunter Horsley stated, "The era of 'going long on Bitcoin and shorting bankers' is over," as financial institutions are turning to the other side of the crypto industry, promoting the adoption of digital assets.Hunter Horsley mentioned that this summer, two financial institutions managing over $1 trillion in assets approved the launch of crypto products in a bear market environment, indicating that large institutions are expanding channels for clients to access digital assets. "This year, everyone is wearing the crypto industry's jersey. Now, everyone is working for the crypto industry," Horsley said. He pointed out that these financial institutions, which manage over a trillion dollars in client assets, previously would not have opened related services during the downturn of the crypto market in 2022, but now they are actively embracing this field.Sygnum Chief Investment Officer Fabian Dori also believes that the relationship between banks and the crypto industry has undergone a structural change. "The past trades of 'going long on Bitcoin and shorting bankers' are over; banks have shifted from resisting digital assets to building, supporting, and distributing digital assets through custody, tokenization, and compliant trading." This change is primarily driven by growing customer demand and gradually clarified regulatory rules, rather than short-term market cycle changes.Anchorage Digital CEO Nathan McCauley stated that over the past two years, its client structure increasingly reflects the trend of integration between traditional finance and crypto finance. Large financial institutions typically choose to collaborate with specialized crypto infrastructure companies rather than building their own technology systems.In recent years, more and more financial institutions have entered the crypto space, including Swissquote, DBS, BBVA, BNY Mellon, Credit Suisse-related institutions, as well as Morgan Stanley and Charles Schwab.

According to Bitcoin.com, Gurinder Singh Josan MP and Lord Vaizey, co-chairs of the UK All-Party Parliamentary Group on Crypto and Digital Assets (APPG), have written to the CEOs of major UK banks requesting clarification on whether they provide account services to crypto businesses, what restrictions are placed on digital asset transactions, and whether these policies will be adjusted with the implementation of the new regulatory framework in the UK.The MPs pointed out that access to banking may be the single biggest obstacle to the development of crypto and digital asset businesses in the UK. If licensed crypto businesses are still unable to obtain basic banking services, the competitive goals of the new regulatory system will be difficult to achieve.Lucy Rigby, Economic Secretary to the Treasury, has previously stated that banking service restrictions should not be imposed on FCA-authorized crypto businesses solely due to the nature of the industry. The deadline for submitting written evidence for this inquiry is August 31, and the APPG will use this to make policy recommendations to the government.

According to bits.media citing RBC, several Russian banks focused on providing services to import and export businesses have begun to request cryptocurrency transaction explanations from their clients, requiring corporate clients to disclose the economic purpose of purchasing USDT and confirm that the counterparties providing the crypto assets are listed in the central bank's digital asset exchange operator registry.However, this registry has not yet been established, and the relevant regulatory laws only took effect on September 1. The central bank is still formulating the details, making the banks' requests practically impossible to fulfill. Experts believe such requests do not comply with current laws, and lawyer Elizaveta Lobuteva stated that they should be regarded as routine compliance checks and preparations for future regulatory changes, rather than new mandatory obligations.