RESEARCH & INSIGHTS
Industry Insight Reports
Deep insights, technical validations, and professional documents for business adoption in the Web3 and blockchain space.
Available Documents
The Key Was Never Stolen
$6.3 billion left Binance in twenty minutes — and no key leaked. We built a ledger of 48 exchange and custody thefts since 2011 (~$12.1B) and classified each by what the attacker broke. 74% of the money was lost where the key was never stolen: the legitimate signer or signing system signed the attacker's transaction. What breaks is the approval path — who approves, from which device, looking at what. Regulators specify cold-storage ratios everywhere; none specifies signing. SWIFT solved this for banks in 2016. Crypto hasn't yet.
Does Blockchain Really Make Cross-Border Payments Cheaper? — What the BIS “Competing Rails” Paper Reveals About Stablecoin Costs and the Real Push Behind On-Chain Finance
Sending $200 across borders still costs 6.36% on average, more than double the 3% global target. Can stablecoins fix this? Drawing on a BIS working paper published in October 2026, along with IMF and Banca d’Italia evidence, this report breaks the cost of a cross-border transfer into five layers. Blockchain cuts only one of them, the settlement rail. Most of the cost sits elsewhere: in fiat on- and off-ramps, FX liquidity, compliance and customer support. At Wise, the rail is about 8% of fixed cost per transfer. IMF staff estimate a $200 stablecoin transfer averages about 2.2%, with blockchain fees at under a quarter of that. Apparent savings in emerging markets mostly reflect capital-control premia, not technology. Stablecoins reshuffle intermediaries rather than remove them. Why, then, are governments, banks and payment networks pushing on-chain finance? Because the prize is not remittance fees but control over the wiring of money: dollar reach, reserve income, monetary sovereignty, deposit franchises and collateral mobility. The report sets out six forecasts to end-2027 and the questions stablecoin businesses should be asking.
Stablecoins Enter Through the Veins - The quiet substitution behind payments, and the contest with deposit tokens for the back end -
Logistics has arterial flows that deliver goods and venous flows that bring them back. Payments have the same two layers: the front end, where a consumer pays and a merchant accepts, and the back end, where obligations are cleared, settled and paid out. This report tests, against primary sources, whether stablecoins are entering payments through the back end rather than the checkout. The evidence says yes, for regulated markets. Visa's stablecoin settlement grew roughly eightfold in a year to more than $20B annualized, while the consumer card experience did not change at all. SoFi, Circle Payments Network and Western Union show the same pattern. Consumer-facing stablecoin checkout, by contrast, remains tiny. Japan's visible retail pilots follow an "adapter" model, in which consumers pay in stablecoins and merchants are settled in yen, while the megabanks' real bet targets B2B and cross-border settlement. Stablecoins will not win the whole back end. Tokenized deposits and central bank money are gaining ground inside the banking perimeter, pointing to a division of labor by segment. The report closes with six falsifiable forecasts through March 2028 and implications for banks, card companies, payment firms, corporate treasurers and investors.
Who Moves the Signing Key?
In February 2025, Bybit lost $1.46 billion. Yet no private key was ever exposed. What broke was the correspondence between what the signers saw on screen and what they actually signed. The ¥48.2 billion DMM Bitcoin theft followed the same pattern: a legitimate transaction instruction, altered inside a vendor's systems. Japan's Financial Services Agency now states plainly that cold storage no longer guarantees safety. This report decomposes key management into four layers — key material, authorization, intent verification, and continuity — and shows that losses occur almost entirely in the second and third. In H1 2026, infrastructure and operational compromises accounted for roughly 15% of incidents but 76% of losses. Attackers are not casting a wide net; they design attacks that need to succeed only once. The practical implication is uncomfortable for anyone who assumes outsourcing solves the problem. Delegating custody transfers first-layer risk but leaves authorization and intent verification with the client, who still decides when, how much, and where to send. Regulators are moving in the same direction. Japan's amended Financial Instruments and Exchange Act, enacted in July 2026 and taking effect in 2027, brings wallet software vendors under a notification regime and ties statutory reserve levels to security standards — translating key management maturity into a balance sheet figure for the first time. ESMA's supervisory action places key management, transaction controls, and third-party dependency side by side. Written for practitioners building key management from scratch, the report includes a layer-by-layer implementation checklist.
On-Chain Privacy - Whose Data to Conceal, from Whom — and What Must Remain Public
Between 2025 and 2026, on-chain privacy flipped from regulatory liability to a precondition for institutional capital. DTCC, J.P. Morgan, and Circle deployed onto confidentiality-enabled infrastructure even as the Tornado Cash and Samourai prosecutions fixed the legal fate of unconditional anonymity. This report dissects privacy requirements through four variables — whose data, which data, hidden from whom, for how long — showing that institutions demand auditable confidentiality, not anonymity, and that demand has split into three tracks: institutional, compliance-compatible, and unconditional. A dedicated chapter maps the full technology stack, from ZK proof systems and FHE to mixnets, oblivious synchronization, and the post-quantum transition. The market is converging on a third quadrant — individual data private, system rules public — with five falsifiable forecasts covering the ZEC ETF, EU technical standards, Ethereum's Hegotá fork, and the Storm retrial.
The Internet of Value — Can Blockchains Attain the Status of a Neutral Protocol?
This report tests the intuition that "blockchains are used for crime and therefore should not be used" against data and law. Illicit crypto flows hit a record $154 billion in 2025, yet remain under 1% of attributable on-chain volume, while fiat money laundering runs at $800 billion to $2 trillion a year and U.S. internet crime losses keep setting records. Abuse has never justified banning a base infrastructure. Just as the internet settled on a social contract of a neutral core with regulated edges, regulation of value is converging on a division of layers: the U.S. is shifting to edge regulation, the EU is reaching into the asset layer, and Japan is normalizing crypto as an investment product under its securities law. The question for executives is not ban-or-permit, but which layer to do business in.
What Do Validators Actually Do? - Anatomy of the Invisible Infrastructure Industry Behind Proof-of-Stake
Blockchains are assumed to run themselves; in reality, validators keep them alive—managing servers and keys around the clock. This report dissects the invisible infrastructure industry safeguarding ~$245 billion: protocol duties, key-management practice, break-even economics, and the finding that nearly every slashing incident stems from one operational error. It covers the fading new-chain premium, the U.S. regulatory reversal, staking ETFs, Japan's unresolved taxation, and five evidence-based forecasts.
Will Stablecoins Replace Payment Infrastructure? - Twelve Years of History, the Fragmentation Critique, and a 2026 PMF Verdict
Will stablecoins replace payment infrastructure? This report traces twelve years of history, dissects how $320 billion is actually used, compares regulation across the U.S., EU, Japan, Hong Kong, and the U.K., and tests the "fragmentation" critique against primary sources. It issues a three-layer PMF verdict for 2026 — currency substitution, B2B settlement, consumer payments — argues that replacement proceeds from the back office, examines privacy in the age of AI analytics and self-custody crypto cards, asks what remains of the chain after abstraction, and closes with six falsifiable forecasts.
Why IP Won't Go On-Chain - A Decade of IP x Blockchain Failures, the Two-Layer Confusion, and the Realistic Landing Zone
"IP and blockchain are a natural fit." This has been the prevailing narrative over the past decade. However, what has actually happened during these ten years? What insights have we gained? And how will they connect moving forward? Based on these three core pillars, this comprehensive report explores the intersection of IP (Intellectual Property & Copyright) and blockchain.