The Evening Brief: Senate votes on crypto regulation tomorrow; Revolut breach exposes customer data

The US Senate will vote tomorrow, September 15, on whether to advance the Digital Asset Market Clarity Act to debate. The cloture vote requires 60 senators; Republicans hold 53 seats and need Democratic support to clear the threshold. Per Crypto Briefing's reporting, two Democrats, Ruben Gallego and Angela Alsobrooks, voted with the committee majority when the Senate Banking Committee advanced the bill in May 2026, signaling the votes may exist. If the motion fails, the bill does not proceed to a floor vote and comprehensive crypto regulation stalls until 2027.

The bill has faced sustained opposition from traditional banking interests. On September 10, seventy-seven state banking associations petitioned the Senate to amend the CLARITY Act by banning balance-based stablecoin rewards, specifically targeting Coinbase's USDC rewards program. The coalition, backed by the American Bankers Association and Independent Community Bankers of America, argues such rewards function as de facto interest payments that compete with deposit banking. The Senate will decide whether to incorporate amendments before or after cloture; a clean floor vote or amendment process will change the political math.

Regulatory clarity is also advancing in other jurisdictions. Circle's Arc blockchain launches on September 16 with 11 founding validators including BlackRock, DTCC, Visa, Mastercard, and ICE. The validators determine transaction finality in a permissioned Proof-of-Authority model while explicitly disclaiming liability for third-party applications. The UK's Financial Conduct Authority is evaluating Binance's authorization application amid mounting pressure from a DOJ forfeiture case filed September 14 seeking $61 million in Binance accounts tied to Iranian oil laundering. The complaint follows Binance's 2023 guilty plea and $4.3 billion settlement for sanctions violations and uses civil forfeiture, which requires only a preponderance of evidence rather than criminal conviction. A pattern of sanctions breaches, the prior plea plus this current complaint, may undermine Binance's credibility as the FCA assesses authorization.

On the fintech infrastructure side, Revolut disclosed a data breach on September 14 after attackers used a spoofed government agency email to extract customer information from the company's own systems. The attackers obtained passports, driving licenses, account statements, IBANs, withdrawal records, and full transaction histories including Bitcoin activity. The threat actors are demanding 10,000 BTC (roughly $780 million) in ransom and threatening daily data releases. Revolut stated the number of affected customers was "very limited" but declined to disclose a precise figure and has not authenticated the leaked material or confirmed the ransom demand. The breach exposes a structural vulnerability distinct from account security: transaction metadata and identity documents remained accessible via social engineering at the administrative level, even after account systems themselves are protected.

Coinbase and Moov, a payments platform serving over 1,000 community banks and credit unions, announced a partnership on September 10 to embed stablecoin services inside banks' existing customer relationships. Coinbase provides custody and payments infrastructure; Moov connects to bank systems; the banks retain the customer interface. The arrangement preserves a bank's customer connection while exposing it to crypto infrastructure for the first time, but control of economics, data, fees, revenue sharing, and operational risk remains undisclosed. The outcome depends on whether reserve money stays with participating institutions or concentrates at Coinbase and larger settlement banks, a structural tension the Federal Reserve identified when it outlined how banks can stay connected to digital payment flows while stablecoins may separate the payment relationship from the deposit-funded lending model.

Market sentiment shifted decisively toward risk appetite on September 14 as reported signals of possible US-Iran de-escalation eased oil prices. Bitcoin stood at $77,865.41 on September 15, down 0.4 percent on the day but up 22.7 percent over the prior 30 days. Ethereum traded at $2,513.12, down 0.1 percent on the day and up 35.2 percent over 30 days. The desk's Fear and Greed Index registered 69, labeled Greed, within a 30-day range of 31 to 74. However, momentum indicators show caution: MACD remained below the signal line across Bitcoin, Ethereum, Solana, XRP, Dogecoin, and Cardano, suggesting the current rally may not sustain.

Derivatives positioning reveals concentrated leverage in altcoins. Per the desk's boards, Solana open interest stands at $279.6 million with 10.8 percent annualized funding and a 1.88 to 1 long-short ratio. XRP holds $109.6 million open interest at 11.0 percent annualized funding with a 2.11 to 1 long-short ratio. Dogecoin maintains the most extended positioning at a 4.37 to 1 long-short ratio on $86.3 million open interest. Bitcoin's positioning is more balanced at 1.23 on $2.05 billion open interest and 5.3 percent annualized funding. This elevation in altcoin funding rates and skewed long-short ratios creates liquidation risk if sentiment reverses.

ETF flows paint a mixed institutional picture. Bitcoin ETFs recorded an inflow on the day of $9.7 million on September 14, but this masks a net outflow of $453.0 million over the prior five sessions, per the desk's ETF flows board. Ethereum ETFs show consistent strength with inflows of $216.4 million on September 11 and net inflows of $222.8 million over five days. Whale flows over the prior 72 hours show $327.9 million in stablecoin buying power on exchanges, but the weekly view reveals that $725 million moved onto exchanges during the week ending September 15, a shift from the week ending September 8 when $236 million moved off exchanges. The direction of large capital flows remains unstable across windows.