The SEC charged Texas resident Nathan Fuller with running a $12.3 million fake-AI-trading-bot Ponzi via Privvy Investments, while Paxos became the first blockchain-native U.S. central securities depository — and the CFTC approved the first U.S. crypto perpetuals at Kalshi and Coinbase.

SEC Sues Privvy , Paxos to Clear US Stocks on Blockchain , CME 24/7 Trading

Hey guys, Mr. Technology here. Three crypto stories from this week's TLDR Crypto that matter for builders, traders, and compliance teams — and they're all happening on the same week the U.S. decided to set new rails for digital assets.

What You Need to Know: The SEC charged a Texas man with running a $12.3 million fake-AI-trading-bot Ponzi via Privvy Investments, and on the same day Paxos became the first blockchain-native firm registered as a U.S. central securities depository. The CFTC also greenlit the first regulated U.S. crypto perpetuals at Kalshi and gave Coinbase a no-action letter for offshore perps access, while a federal court order froze $12.6 million in pooled USDC inside a Zama privacy wrapper.

Why It Matters

"AI trading" is the new fraud paint. Nathan Fuller's pitch — AI bots promising 40–100% returns in 30 days — is the template regulators are now training their sights on. If your product surfaces AI-driven financial promises, you need a compliance and disclosure review before marketing, not after.
The Paxos CSD registration is bigger than the headline. Same-day or near-instant equity settlement on-chain means the post-trade plumbing that has locked up trillions in capital for 50+ years is now contestable. Wall Street, fintech, and any team building tokenized assets needs a clearing-rail strategy.
Regulated U.S. crypto perps are here — with caveats. CFTC Chairman Mike Selig's approval is not formal rulemaking. Builders integrating Kalshi's BTCPERP or Coinbase's Bermuda-routed perps need to plan for regulatory revision risk and the leverage-flash-crash exposure ($1.5M in recent liquidations is the floor, not the ceiling).
Privacy wrappers are now attack surface. Zama's cUSDC freeze is the second "innocent users get caught in a TRO" case this cycle. If you build on top of mixers, privacy pools, or confidential compute, your incident-response playbook needs a commingled-funds scenario.

What Actually Happened

The Privvy Case: A $12.3M "AI Bot" That Didn't Exist

The SEC's complaint, filed May 30 in the Southern District of Texas, names Nathan Fuller, a Cypress, Texas resident, and his companies Privvy Investments LLC and Gateway Digital Investments. The agency alleges Fuller raised about $12.3 million from roughly 150 investors between October 2022 and mid-2024 by selling joint-venture interests in a "crypto arbitrage" pool powered by proprietary AI bots that would allegedly scan markets, execute high-frequency arbitrage, and use stop-loss coding to limit losses. Promised returns ranged from 40–50% within 30–45 days to "exceeding 100% in less than a month." (CoinDesk, Crowdfund Insider)

According to the complaint, only about $380,000 — roughly 3% of investor funds — was actually used to buy crypto, and the trades happened without the bots and produced zero profit. Fuller allegedly diverted at least $6.2 million to personal use (home, gambling, travel, vehicles) and used about $5.5 million to make "Ponzi-like payments" to earlier investors. When withdrawals started, he produced fabricated statements, referenced fictitious entities, and even used an AI-generated letter to reassure nervous backers. He's already admitted in a separate bankruptcy proceeding to operating Privvy as a Ponzi scheme and fabricating documentation. The SEC is seeking permanent injunctions, disgorgement, and civil penalties. (SEC Litigation Release 26558)

Paxos Becomes the First Blockchain-Native CSD for U.S. Equities

On May 28, the SEC registered Paxos Securities Settlement Company (PSSC) as a clearing agency — the first blockchain-native firm to operate as a central securities depository for traditional U.S. equities, sitting alongside DTCC, the OCC-licensed Paxos Trust, Singapore MAS, and EU FIN-FSA in Paxos's licensing stack. (Paxos newsroom, CoinDesk)

What that gets you: same-day or near-instant settlement for eligible securities, vs. the T+1 standard adopted in 2024. For institutions, every hour of locked-up settlement capital is freed earlier — and PSSC can bundle that regulated stock clearing with the white-label infrastructure Paxos already runs for PayPal and Mastercard. The registration is the seventh-year culmination of SEC engagement that started with Paxos's 2019 no-action relief and a live pilot in February 2020 with Bank of America, Credit Suisse, and Société Générale. The SEC's underlying order (Release 34-104977) also defines the on-chain CSD playbook for the next wave of tokenization applicants.

CFTC Approves First U.S. Crypto Perps at Kalshi and Coinbase

On May 28, the CFTC approved Kalshi to list BTCPERP on its registered Designated Contract Market — making Kalshi the first American venue to offer onshore crypto perpetuals — and issued a no-action letter letting Coinbase Financial Markets give U.S. clients access to perpetuals and options through Coinbase Bermuda. CFTC Chairman Mike Selig framed perpetuals as a foundational price-discovery tool, while Kalshi CEO Tarek Mansour pitched the approval as the firm's pivot from prediction-market operator to derivatives exchange. (CoinDesk)

The catch — and it's a real one — is that the approval is not formal rulemaking. Recent offshore perp flash crashes produced $1.5 million in liquidations, a useful baseline for the leverage risk the CFTC's onshore framework is meant to contain. Both Kalshi and Coinbase must operate under CFTC supervision with positions margined in a regulated environment, but the regulatory framework can still be revised. (TLDR Crypto digest)

Court-Ordered Circle Freeze Locks $12.6M in Zama's cUSDC

A U.S. federal court issued a temporary restraining order on May 29 directing Circle to blacklist Zama's cUSDC Ethereum contract, freezing $12.6 million in pooled USDC tied to a civil suit alleging that Overnight Finance's treasury was misappropriated. The problem is structural: Zama's privacy wrapper holds commingled user funds, so the freeze locked out every depositor in the contract, not just the wallet connected to the disputed transfer. (The Block)

Zama has paused its cUSDC, cUSDT, and cWETH wrappers while engaging U.S. counsel and says it will isolate the flagged deposit to restore access for unaffected users. A full court hearing is scheduled for June 1. The pattern is the same one we saw with Tornado Cash: protocol-level freezes do not work well when the protocol can't tell good money from bad.

Also Worth Knowing: Gravity Bridge, ETH as Infrastructure, and the CLARITY Act

Cosmos Gravity Bridge drained of $5.4M. Researchers at The Block suspect a signing key compromise, not a smart contract exploit — $4.3M in USDC, 274 ETH, and $434K in USDT, routed through ChangeNow and Binance. The attacker is still holding ~2,100 ETH. (The Block)
"Ethereum is the Amazon of financial infrastructure." Joe Chalom's thread argues ETH already dominates the institutional metrics that matter — majority of global stablecoin settlement, most tokenized real-world assets, default venue for high-value DeFi — and that the TAM is the global financial system, not the next quarter's price. (thread)
CFTC advisory on 24/7 trading. Same agency issued a May 29 advisory drawing a hard line: 24/7 trading fits blockchain-native crypto, but expanding hours into agricultural derivatives would risk "reduced liquidity, widened bid/ask spreads, and increased manipulation risk." (CoinDesk)
Dimon vs stablecoin yield. JPMorgan CEO Jamie Dimon is escalating the fight over stablecoin rewards in the CLARITY Act, with Senate committees merging their respective drafts this week. (CoinDesk)

The Take

This week is the most consequential 72 hours for U.S. crypto policy since the spot ETF approvals — but the direction is schizophrenic, and that's the point. On the regulatory-enforcement side, the SEC just put a $12.3 million bullet in the chamber of every "AI quant" pitch that promises 100% returns in a month. Nathan Fuller's playbook is now exhibit A in every future fraud case involving AI-marketed yield products, and "we used proprietary AI" is going to stop being a marketing asset and start being a discovery request.

On the regulatory-permission side, the same SEC that charged Fuller also gave Paxos a CSD license — and the same agency that approved Kalshi's BTCPERP is letting Coinbase route clients through Bermuda. The U.S. is not anti-crypto anymore. It is anti-crypto-without-a-license. The full stack now exists: tokenized equities clearing on-chain, regulated U.S. perps, and a Treasury framework that's been wending its way through the Senate for two years.

The Zama freeze is the reminder that privacy, commingling, and U.S. legal process don't mix well. If you're building composable on-chain financial primitives, design for selective compliance from day one — isolatable collateral, address-level holds, off-chain attestation trails. Otherwise your users will be the collateral damage the next time a federal judge signs a TRO.

Quick Summary

The SEC is squeezing the fraud side of crypto (Privvy, $12.3M) while opening the institutional side (Paxos CSD, Kalshi/CME perps) — and the Zama freeze shows privacy wrappers still need a commingled-funds plan before they collide with U.S. courts.

SEC Sues Privvy , Paxos to Clear US Stocks on Blockchain , C