X plans to automatically lock any account the first time it mentions cryptocurrency, forcing additional verification before it can post again. X Head of Product Nikita Bier said the change removes "99%" of incentives for phishing-driven account takeovers, though it could add friction for legitimate first-time crypto posters.

X will begin automatically locking any account that mentions cryptocurrency for the first time, requiring extra verification before it can post again. X Head of Product Nikita Bier said the change would remove "99%" of phishing incentives, but critics argue it could also force legitimate first-time crypto posters to verify their identity.

On April 5, 2026, Ripple said Ripple Treasury joined the SWIFT Certified Partner Program, linking its treasury tools to SWIFT’s Alliance Lite2 for bank connectivity. The company says teams can manage fiat alongside XRP and RLUSD from one interface and choose settlement via SWIFT or on-chain, where transfers may complete in three to five seconds.

On April 3, 2026, a Nevada state judge in Carson City issued a preliminary injunction against Kalshi, finding its event contracts effectively mirror unlicensed gambling. The order extends a temporary restraining order first entered on March 20, 2026, and requires Kalshi to add geofencing by May 4, 2026, to block Nevada-based users.

Dmail Network said it will permanently end all services on May 15, 2026, bringing its decentralized email offering to a close after five years. The team cited unsustainable infrastructure expenses for decentralized storage, bandwidth, and computing, alongside an economic model that did not become self-sustaining. Users are advised to export their mail and other data and cancel accounts before the deadline, after which content, NFT domains, and points will be deleted.

Cambodia's Senate unanimously approved the Law on Anti-Technology Fraud on April 3, 2026, passing it 58–0. The framework allows 15–30-year prison terms for leaders of online scam operations, upgraded to life imprisonment if a victim dies, and includes fines of up to about $500,000 (2 billion Cambodian Riel). Authorities say they aim to dismantle all illegal scam compounds in the country by an April 2026 deadline.

Drift Protocol said the exploit discovered on Wednesday caused losses of about $280 million, based on external estimates, and described it as a coordinated operation that unfolded over roughly six months. The team said it has “medium-high confidence” the same actors were behind Radiant Capital’s $58 million October 2024 hack, and it is working with law enforcement to reconstruct what happened during the April 1 attack.

Solana co-founder Anatoly Yakovenko described the Drift Protocol incident as "terrifying" after details pointed to a long-running, in-person social engineering operation. Drift Protocol was drained of $270 million and then halted deposits and withdrawals while warning users it was not an April Fools' joke. The report says the attackers built trust from late 2025 through March 2026 before delivering malicious links and software to contributors.