The Wire PM — May 20, 2026

The Wire PM — May 20, 2026

Echo Protocol Drained for $76M on Monad via Admin Key Compromise

Another day, another admin key failure. Echo Protocol, a Bitcoin-focused DeFi platform on Monad, confirmed on May 19 that an attacker used a compromised admin key to mint 1,000 unbacked eBTC worth roughly $76.7 million. The attacker deposited 45 fake eBTC into Curvance as collateral, borrowed 11.29 WBTC ($867K), bridged to Ethereum, and laundered approximately $822K through Tornado Cash. Echo says it has regained control of the admin keys and burned the remaining 955 eBTC the attacker still held. Realized losses sit around $822K, but the mint size highlights how much damage a single compromised key can cause. May's crypto exploit count now stands at 14 incidents. Source: CoinDesk, Decrypt.

Bitcoin ETFs Bleed $1B in a Week While SOL and XRP Funds Absorb Fresh Capital

The rotation is real. Spot Bitcoin ETFs recorded roughly $1 billion in net outflows during the week of May 11-15, the largest weekly bleed since February. Ethereum ETFs lost another $255 million. But the money didn't leave crypto. Solana products pulled in $55 million and XRP funds attracted $68 million over the same period, their strongest week of 2026. The pattern suggests institutional allocators are rebalancing into beta plays rather than exiting the asset class entirely. BTC is still struggling below $80K, and falling futures open interest suggests traders are de-risking, not chasing. Source: CoinDesk, The Block.

THORChain Opens $10M Compensation Portal for 12,847 Affected Wallets

THORChain is moving from damage control to remediation. Five days after the May 15 multichain exploit that drained $10.8 million across Bitcoin, Ethereum, BNB Chain, and Base, the THORChain Foundation launched a compensation portal covering 12,847 affected wallets. Investigators believe the root cause was a flaw in the GG20 Threshold Signature Scheme implementation that allowed gradual key material leakage. More concerning: evidence points to a newly churned validator node potentially linked to the attack, raising insider threat questions. Victims must verify wallet ownership before claims are processed. Source: CoinDesk, CryptoTimes.

Solana Foundation and Google Cloud Launch Pay.sh for AI Agent Payments

Solana just got a structural demand driver that has nothing to do with DeFi yields. Pay.sh, launched in collaboration with Google Cloud, is a pay-as-you-go marketplace where AI agents can discover, access, and pay for APIs using stablecoins settled on Solana. The system uses the x402 protocol for real-time machine-to-machine settlement. Over 50 APIs are available at launch, including Google's Gemini, BigQuery, and Vertex AI. No accounts, no subscriptions, just fund a Solana wallet and go. It is early, but if autonomous agent-to-API payments scale, USDC velocity on Solana gets a completely new source of demand. Source: Solana Foundation, BeInCrypto.

Numbers (Updated)

• BTC: $77,429 (+0.6% 24h)
• ETH: $2,129 (+0.6% 24h)
• SOL: $84.0 (-0.3% 24h)
• May Exploits: 14 incidents, $400M+ total
• BTC ETF Flows (week): -$1.0B
• SOL ETF Flows (week): +$55M

---

Explore all Solana yields → · Morning edition → · Follow @yieldwirexyz