Critical Vulnerability in Bitcoin Payment Server BTCPay Server Exploited to Bypass 2FA, Urgent Update Issued

Metallicus has deployed an alpha version of the DogecoinVM payment layer on mainnet, which the fintech company says makes Dogecoin transactions 300 times faster. "We made it 300x faster," said Metallicus CEO and Dogecoin Foundation board member Marshall Hayner. Hayner positioned the development as a direct technological solution to a major challenge Elon Musk identified in 2021.

The protocol stack for autonomous agent-to-merchant commerce is now effectively complete, but merchant adoption remains fractured and consumer trust lags far behind the infrastructure. Four layers now underpin machine-led spending: the Stripe Machine Payments Protocol, launched in March 2026, provides a programmable policy layer for stablecoin, fiat, and BNPL transactions; the Google Universal Commerce Protocol set an open standard for agentic commerce in January 2026; and by June 2026 Mastercard launched Agent Pay for Machines with more than 30 launch partners including Adyen, Coinbase, and Stripe. Capital flows have surged alongside these rails, with Visa stablecoin settlement reaching an annualized $20 billion by September 2026, a 15x increase year-over-year, while Stripe stablecoin card volume hit $1.2 billion in the same month. Merchants, however, have split into three incompatible postures: QVC has integrated agents into its supply chain and catalog distribution, sending catalogs to OpenAI and Google; Kate Spade lets agents browse inventory but blocks them at the point of purchase, citing fraud and inventory management risks; and Amazon and eBay have moved to block AI agents entirely, even as Shopify makes Muse the default agent interface for consumers. The core barrier is trust rather than technology, with an NMI survey finding that only 3% of US adults trust AI agents to complete purchases on their behalf, and the VML Tomorrow's Commerce 2026 report showing one-third of active AI users refuse to authorize agents to spend their money. The bottleneck has thus shifted from the protocol layer to the trust layer, leaving a high-capacity system operating at a fraction of its potential throughput.

The Ripple stablecoin treasury has minted 30 million Ripple USD, or RLUSD, adding to a recent series of larger issuance transactions for the USD-pegged token. The 30 million RLUSD mint is the latest in that run of bigger issuances. No further details on the transaction were disclosed.

Institutional stablecoin settlement moved onto four live production rails within a single month, with stablecoin-linked card spending reaching $1.2 billion in September 2026, roughly triple the year-earlier figure, according to PaymentScan data cited by CoinDesk. SoFi and Mastercard went live on September 22 with SoFiUSD, the first stablecoin issued by a U.S. nationally chartered bank deployed for live card-settlement production, with $25 billion in annualized card volume migrating to blockchain-based settlement on Mastercard's global payments network. Visa is already operating at a $20 billion annualized run rate for stablecoin settlement as of September 8, a 15x increase from $1.3 billion a year earlier and up from $7 billion in April, while Stripe announced October 1 that it is expanding its stablecoin card programs to more than 100 countries by year-end, up from 18. The Solana DvP standard, launched October 5-6 with JPMorgan advisory input, cuts settlement finality from T+2 days to roughly 400 milliseconds and cost from $50-500 to less than one cent, though it launched with no production settlement volumes yet. Separately, the DTCC's tokenization service, supported by a working group of over 50 firms including BlackRock, Goldman Sachs, JPMorgan, and State Street, is planned for October launch, and OKX closed a funding extension at a $25 billion pre-money valuation with backing from Circle, Ripple, Standard Chartered's SC Ventures, and Qube Research.

The Solana Foundation announced Solana DvP, a settlement platform for financial institutions, in New York on October 6. It aims to execute asset delivery and payment simultaneously on the Solana blockchain, completing securities trade settlement in seconds. J.P. Morgan advised on the practices and requirements of securities settlement at financial institutions. The Solana Foundation is offering it as an open-source settlement platform that companies can use in common. DvP stands for Delivery versus Payment, a settlement method that links the delivery of securities with payment of the purchase price. According to the Solana Foundation, institutional investor transactions on conventional blockchains have often relied on individually built smart contracts, but Solana DvP aims to standardize this settlement processing and will be released under the MIT license, allowing use and modification. The platform supports Solana's major token standards and also offers functions such as issuer control over transfers and the ability to pause them. It envisions banks, asset custody companies, exchanges and others acting as settlement agents. However, it is limited to transactions in which both the assets and the payment instrument are tokens on Solana. Technical documentation from the Solana Foundation explains that while simultaneous settlement removes principal risk between parties, the credit risk and redemption risk of token issuers remain. Efforts to link the delivery of digital securities with payment are also advancing in Japan. Nine companies including Sumitomo Mitsui Banking Corporation announced on October 6 that they had completed the second phase of a proof-of-concept experiment for simultaneous settlement of digital securities using stablecoins. The Solana Foundation says Solana DvP has undergone an external security audit and is ready for use with real funds. Meanwhile, it is recruiting partner companies and initial participants ahead of the full release.