Nine early-stage projects that hit our radar, real products rather than memecoins. The theme: the fine print. Most of crypto sells you the upside and hides the rest. This week's names put the rest in plain view: who takes the first loss, what sits inside a yield, the most you can lose on a trade, which of thousands of stock tokens you actually hold, who owns the robot and who answers for an AI agent. Follower counts are small on purpose, you are seeing these early. With a link to each.

1/ Akashi (Tranche Vaults)

Most yield vaults pay everyone the same rate and share every loss the same way. Akashi splits one Solana USDC vault into two layers: Junior takes the first loss and earns more, Senior is paid first and earns less. Its Akashi Plus vault, live on mainnet since late October, spreads deposits across OnRe, Hastra, Huma and Kamino. At the time of writing it holds $24,920, with Senior at 8.01% and Junior at 14.09% expected, and a Junior cushion of 25.8%. It won the Superteam Poland Demo Day and was one of 10 teams out of 180 picked for the Crypto World's Fair audit grant.

2/ Kurtosis Labs (Risk Ratings)

One onchain yield can be a token, wrapped, deposited, split and lent again, and each layer adds its own risk. Kurtosis Labs rates that yield layer by layer, so a fund analyst can see what they actually own and explain why it moved. A second tool, Horizon, shows how fast you can get your cash back out. It is built for institutions and works by demo request. The team took second place and $40,000 in the General Track at Arbitrum's Founder House in Singapore, and it is backed by Superteam Singapore.

3/ Vexi (Stock Options)

Leverage on stocks usually comes with a liquidation price. Vexi sells calls and puts on stock tokens on Robinhood Chain instead: as a buyer, the most you can lose is what you paid. On the other side, holders pick the price they would sell a stock like NVDA at and earn interest while they wait. The project spells out the risk too: the pool pays winning buyers, and that can cost more than the premiums it collects. Testnet is live and the mainnet whitelist is open. It placed second and won $6,000 in the Promising Products Track at Arbitrum's Founder House.

4/ SoFinance (Stock LP)

The same stock now trades as several tokens from different issuers. SoFinance turns that mess into income: you pair two tokens of the same stock in one pool and collect a share of the swap fees, without selling the stock. It runs on Solana and Robinhood Chain, and the keys stay with you. Its own data shows the same-stock TSLA pool on Meteora did $1.30M of volume over 7 days, against $10.3K in Raydium's TSLA pool. Fees are real, so are out-of-range and impermanent loss risks.

5/ Darwin (Private Baskets)

Building a portfolio onchain usually means many trades and a wallet anyone can read. Darwin packs a whole strategy of crypto and tokenized stocks into one token: one trade buys the full basket, and you hold it privately in your own wallet on Miden, a zero-knowledge chain. On November 7 it went live inside the Bread wallet. It is in beta, and the account is still tiny.

6/ tokenizedstonks (Data & Analytics)

There is no longer one Tesla token, there are dozens. tokenizedstonks groups every tokenized version of a stock, ETF or index under the real security, across issuers, chains and venues, with the source and time of each figure. On Solana alone it tracks more than 1,700 securities across more than 2,700 tokens. It is a free tracker, not a protocol, and it earns from disclosed referral links.

7/ RoboPay (DePIN Payments)

When a robot delivers your parcel, someone still has to get paid. RoboPay locks the buyer's payment in a Solana escrow, the robot scans the box to prove it arrived, and the money goes to whoever owns that robot's machine NFT on peaq. Sell the NFT, and the next delivery pays the new owner. It won first place in the peaq track of the Crypto World's Fair hackathon. For now it runs on Solana devnet, with a working demo and a public solo founder.

8/ HestiaX (Agentic Finance)

AI agents can move money faster than any team, which is exactly the problem. HestiaX builds agent workflows for energy transition finance, where the agents do the work and humans sign the mandate they must stay inside. Its motto: AI automates, humans mandate. It also ships an XRPL consensus explorer and runs a validator. The team is public and won the Ledger Agentic Finance award at the XRPL hackathon in New York. Still early, with the product at demo stage.

9/ Entity.ID (Onchain Identity)

When an AI agent signs a deal or moves funds, the first question is who is behind it. Entity.ID keeps one public record per company, fund, DAO or AI agent: who owns it and who answers for it. It builds on ERC-8004, the Ethereum standard for agent identity, and the app is already live. The founder spent Devcon 8 in Mumbai putting that exact question to every room.

The pattern this week: the fine print is becoming the product. A vault that says who loses first, a rating that opens every layer of a yield, an option where the worst case is printed upfront, a map of thousands of stock tokens and a public record of who stands behind an AI agent. None of it promises 100x. All of it tells you what you are holding. These are early-stage projects, several still on testnet, on devnet or in beta, so higher upside comes with higher risk. Do your own research, nothing here is financial advice.

Which one are you watching?

Plume's affiliated broker-dealer Kimber Digital Securities joined FINRA and is now registered with the SEC as a broker-dealer.

The registration connects tokenized securities to core U.S. market infrastructure, including the Depository Trust Company (DTC). Investors will be able to hold eligible stocks, ETFs and bonds in self-custodial wallets while keeping the book-entry claim recorded at DTC.

Kimber Transfer Agency registered with the SEC as a transfer agent in September 2025. Plume Vaults now hold $250M in TVL.

Tokenized stocks on Binance no longer require a crypto step: Binance Convert and the Buy/Sell page now accept fiat for bStocks, with payment from a fiat balance, card, Apple Pay or Google Pay.

Up to 49 fiat currencies are supported at launch, including USD, EUR, GBP, JPY, BRL, AED and ARS, with more planned.

The flow works both ways: users can sell bStocks straight back into an eligible fiat currency without first converting into crypto. bStocks are tokenized securities issued by BTech Holdings, a Binance group affiliate, each backed 1:1 by an underlying share held at a regulated custodian.

Access remains restricted. bStocks are offered under an approved prospectus in ADGM, only to eligible users in permitted jurisdictions, and they give an interest in the underlying shares rather than direct ownership.

Payward's tokenized equities framework has moved beyond US listings for the first time: xStocks deployed its first batch of UK and European stocks, covering 200+ of the most actively traded companies in the region. More listings will follow on a rolling basis.

Each token is backed 1:1 by the underlying share, held at a regulated custodian through Payward's partnership with GTN, which handles execution and custody. The new assets trade on Kraken and xStocks Alliance platforms from day one and plug into DeFi on Solana, Ethereum, TON, Ink, X Layer and other chains.

xStocks now spans 1,500+ tokenized assets, holds over $1.1B in AUM and has processed more than $45B in total volume across 550,000+ holders.

The move delivers on plans to tokenize the top 100 London-listed equities after Payward's partnership with the London Stock Exchange, which intends to list xStocks on LSE 24 in 2027, subject to regulatory approval. Hong Kong-listed equities are next. The tokens remain unavailable in the US and the UK.

Wall Street is picking chains for tokenized stocks. NYSE builds its own chain on Avalanche tech, DTCC pilots on Canton, OKX × ICE picked X Layer. Formation plans to open on Solana in early 2027.

Tokenized stocks on these chains today: $0.

The $3.87B market lives elsewhere. Binance bStocks leads with $1.51B, ahead of Ondo at $907M and Kraken's xStocks at $700M. 90% of it is offshore wrappers not offered to US persons.

By chain, BNB Chain holds 46.2%, Ethereum 19.6% and Solana 15.2%.

Two months after unveiling the plan, Deutsche Bank has taken its digital asset custody service live for paying clients. The offering targets institutional and corporate clients in Europe and had been waiting on regulatory approval.

The September plan covered bitcoin and ether plus select stablecoins, including USDC, EURC and AllUnity's EURAU, with tokenized financial instruments to be added later. The bank expected its license under the EU's MiCA framework in October.

Alongside the launch, Deutsche Bank signed a memorandum of understanding with Deutsche Asset Management, the money manager formerly known as DWS, to explore commercial and technical collaboration in digital assets. The bank has also said it wants to expand the service to Asia.

"In the medium term we aim to deliver a fully integrated, regulated ecosystem that supports the custody, tokenisation, and settlement of digital assets," said Paul Maley, global head of trust and securities services.

The Sui-native hardware wallet had already entered manufacturing and was preparing its first shipment when the team announced it is closing down. The Sui Foundation decided that backing a hardware wallet project is too risky right now, after a wave of attacks on hardware wallets across the industry.

Refunds will be paid in USDC. On-chain pre-orders, about 80% of all orders, will be airdropped automatically within the next week to the wallets holding the soulbound pre-order NFTs. Credit card buyers will receive an email asking for a Sui wallet address, followed by a second airdrop.

Around 80% of Suiball pre-orders were placed on-chain and will be refunded with no claim required.

The shutdown comes less than a month after Suiball delayed deliveries in October for additional independent security audits following talks with Mysten Labs. The team says it will never ask for seed phrases, private keys or payments, and will delete all customer delivery data once refunds are complete.

Bitmine Immersion Technologies, the largest corporate holder of ether, has filed its annual report for the fiscal year ended August 31, 2026, a year after it pivoted to an ETH treasury strategy.

The company booked roughly $6.2B in unrealized losses on its digital assets, which drove a net loss of about $6.3B. A year earlier it reported net income of $328.2M, helped by an $805M unrealized gain. Staking and validation revenue came in at $121.4M.

Bitmine held 5,901,837 ETH worth $14.56B as of August 31, about 4.9% of circulating supply.

Because digital assets are marked at fair value, ether price swings flow straight into reported earnings. The filing also notes an accumulated deficit of about $6.0B, which the company warns could weigh on investor confidence and its access to capital.

The attack started with a command injection using a compromised Google Cloud key that Initia used to provision private nodes. The exposed environment variables gave the attacker access to the team's GitHub and GCP accounts, as laid out in Initia's incident update.

With those credentials the attacker reached Anvil, the hosting platform for Initia rollups, and validated forged IBC withdrawals from five rollups. That unlocked assets held in the Initia L1 IBC escrow accounts.

About $3.27M moved to the attacker's address, and $2.16M of it remains frozen on the paused L1.

Before hitting outbound IBC rate limits, the attacker withdrew 13.4K TIA, 8K USDC.inj and 597K Noble USDC. No INIT left the chain. Initia plans to restore the backing of affected assets in full and is rebuilding its infrastructure from scratch, so the restart will take longer than usual.

At around 18:45 UTC on November 10, a bad actor took control of the across.to domain after a social engineering attack on registrar Namecheap and used it to host a phishing site.

The team was alerted within 15 minutes and moved to shut the site down. SEAL911 flagged across.to as a phishing domain with major wallets, and Cloudflare marked it as at risk before pulling its DNS records. The phishing page is no longer available.

Users who visited across.to before the block may have been affected, while third-party integrations and API users were not.

Across says Namecheap has been unresponsive, so its frontend and API will stay down until the domain is secured. Affected users are asked to revoke attacker permissions and share transaction details with the team, and a post-mortem is promised.