Daily Brief: October 27, 2026
Tax delays, tokenized funds, ETH treasuries
TL;DR: South Korea is likely to push its crypto gains tax to 2029 and tie it to CARF data sharing, buying regulators time to build cross-border reporting and compliance tools. Bitcoin spot ETFs saw tactical inflows while Ether products suffered steady outflows, revealing where institutional capital is sitting today. Aviva piloted a tokenized slice of a £22B fund on the XRP Ledger, a small but practical test of 24/7 settlement without moving custody. Bitmine is hoarding and staking large amounts of ETH while buying back stock, shifting demand and governance dynamics. Finally, wallet bugs and phishing tied to compromised backend keys show attackers are exploiting both protocol flaws and data leaks. These threads point to a maturing market where compliance, tokenized rails, concentrated corporate treasuries, and sharper security trade-offs shape the next phase.
Market Overview
🗓️ South Korea delays crypto gains tax — CARF timing in focus
Seoul is leaning toward another delay, likely pushing the crypto gains tax start to 2029 and tying it to CARF data sharing. This would be the fourth postponement after earlier shifts in timing.
The hold-up is practical. Korea can’t reliably trace activity on U.S. platforms until the U.S. shares CARF data in 2029, leaving domestic users and exchanges exposed if the tax starts earlier.
Lawmakers may amend the law so taxation kicks in after international info exchange, which shifts enforcement risk and buys time to build cross-border reporting and compliance tools.
Why it matters: Delaying the tax changes when and how gains are paid and gives regulators time to get cross-border reporting right, which matters for exchanges, traders, and tax fairness.
📊 Bitcoin inflows vs. ETH outflows
Bitcoin spot ETFs swung back to net inflows last week, led by BlackRock’s IBIT and broad midweek buying, then late-week profit-taking trimmed gains. It’s more tactical demand than blind conviction.
Ether products kept bleeding capital, with roughly $1.07 billion leaving ETFs over the past month and a fourth straight week of outflows. A tiny daily inflow isn’t enough to call a turnaround yet.
Flows show a pattern: ETF investors often sell into drops rather than buy dips. That behavior amplified late-week withdrawals even as BTC briefly reclaimed highs, leaving ETH more exposed.
Why it matters: These divergent flows matter because they reveal where institutional appetite and risk tolerance sit today, and that will shape price momentum and fund strategy going into the next cycle.
🏦 Aviva tokenizes £22B Sterling fund on the XRP Ledger
Aviva Investors launched a tokenized share class of its Sterling Liquidity Fund on the XRP Ledger, putting £50 million on-chain as a pilot inside a £22 billion vehicle.
The deal uses a Digital Twin model: custody stays with BNY Mellon, Komainu handles wallets, and Licuido runs the tokenization pipeline, with access limited to KYC'd professional investors.
XRPL hosts the issuance, where token rules include authorization and restricted transfers; XRPL currently shows about $642M in tokenized real-world assets and ~2,900 holders.
The on-chain slice is modest at roughly 0.4% of the fund, but the move signals a practical path for 24/7 settlement and tighter treasury rails for big asset managers.
Why it matters: This shows large managers testing tokenization as a way to speed settlement and improve liquidity without changing custody, a practical step toward institutional crypto rails.
🪙 Bitmine doubles down on ETH and buybacks
Bitmine now holds 6.05 million ETH, roughly 4.95% of circulating supply, and keeps buying more even as the market wobbles.
At the same time the firm repurchased 22.9 million shares this year, spending about $400 million when management judged the stock undervalued.
About 86% of its ETH is staked, projecting roughly $318 million in annualized staking revenue from that position.
The moves are concurrent: grow the crypto treasury and shrink outstanding equity, a classic corporate-finance play applied to a crypto balance sheet.
Why it matters: Large, concentrated ETH treasuries plus aggressive buybacks change demand dynamics and corporate incentives, so watch staking yields, voting power, and how markets price crypto firms.
🔐 Wallet & user security incidents
Electrum disclosed a bug that let rogue servers swap unconfirmed transactions, so a fee bump could be replaced with a fraudulent payment if you approved it.
Attackers abused Replace-by-Fee flows by substituting transactions that matched the last characters of addresses, then relied on users to sign the replacement.
Foundation users got authentic-looking recall emails after compromised Cloudflare API keys were used to send phishing links to a spoofed site.
Some phishing messages included real customer data like names and delivery addresses, suggesting data beyond inboxes may have been exposed.
Why it matters: These incidents show two paths to loss: software trust gaps that let servers swap transactions, and backend or delivery-data leaks that make phishing feel real, so update, verify addresses, and trust only official channels.
