Google's threat intelligence team reported that a new exploit kit dubbed "Coruna" targets iPhones running iOS 13.0 to 17.2.1 and has been used on fake crypto websites to capture wallet seed phrases. The toolkit, first identified in February 2025, contains multiple iOS exploit chains and was later found on spoofed Chinese financial and exchange sites seeking user funds and sensitive data. Security researchers say the tool may be linked to surveillance customers, while some industry experts dispute claims it originated from US intelligence code.

In an international operation on March 3 and 4, law enforcement agencies led by the FBI and Europol dismantled LeakBase, a cybercrime forum with more than 142,000 registered members and over 215,000 messages. Authorities in 14 countries seized user accounts, payment details and IP logs, issued prevention notices and replaced the site with seizure banners. LeakBase's predecessor Raidforums, which was shut down in 2022, had previously hosted leaked personal data of roughly 272,000 users of Ledger's crypto wallet service.

The U.S. Securities and Exchange Commission submitted commission-level interpretive guidance to the White House on March 3 on how federal securities laws could apply to certain crypto assets and related transactions. The document, now in a prerule interagency review stage, is expected to outline a token taxonomy that would clarify which assets fall under SEC oversight, while the CFTC separately advanced a measure on prediction markets following remarks by its chair about forthcoming rulemaking.

On Wednesday, Europol said a coalition including Coinbase and Microsoft dismantled key infrastructure of Tycoon 2FA, a phishing‑as‑a‑service platform used to bypass multi‑factor authentication. By mid‑2025, Tycoon 2FA represented 62% of phishing attempts blocked by Microsoft, with more than 30 million malicious emails in a single month, and Coinbase traced blockchain transactions linked to the alleged operator and customers.

Elon Musk's X Money payment app has entered a limited external beta, featuring cashback on selected card purchases and a 6% annual percentage yield on deposits. Actor William Shatner was among the early testers, sharing screenshots that also highlighted FDIC-insured deposits held at Cross River Bank up to $250,000 per user. Shatner later worked with X to auction a total of 208 beta invitations at $1,000 each to raise funds for charity.

Zerohash has submitted an application to the U.S. Office of the Comptroller of the Currency for a national trust bank charter so it can offer a wider range of digital asset services. The proposed trust bank would focus on custody for digital assets and fiat, custodial staking, transfer agent functions, and stablecoin management rather than traditional deposit-taking or lending. If approved, the charter could place Zerohash under federal oversight and potentially make it more attractive to institutional clients.

Western Union has entered into a partnership with Crossmint to support the launch of its USDPT stablecoin and Digital Asset Network on the Solana blockchain. The collaboration will integrate Crossmint's wallet and payment APIs with Western Union's infrastructure so fintech platforms can move funds via USDPT and tap into Western Union's global payout network.

On March 3, 2026, TCS Blockchain and PayPal announced the integration of PayPal USD (PYUSD) into a freight payment system aimed at shortening trucking payment cycles that can stretch from 30 to 180 days. The solution routes digital invoices through TCS utility tokens and the INX-Republic exchange into PYUSD, enabling same-day settlements and potentially cutting costs by up to 90% compared with traditional invoicing and factoring. TCS Blockchain expects the platform to process over $1 billion in freight invoices in 2026, in a market where truckers can lose more than 30% of net revenue to early payment services.