# Crypto Today: Saylor Signals Another Bitcoin Buy as Italy's Largest Bank Doubles Crypto Holdings Updated: May 18, 2026 | PickNexo
The crypto market today is being shaped by two major forces: institutional adoption and security risk. Strategy's Michael Saylor has once again hinted at a potential Bitcoin purchase, while Italy's largest bank, Intesa Sanpaolo, more than doubled its crypto exposure in the first quarter of 2026. At the same time, THORChain confirmed a $10 million exploit and launched a recovery portal for affected users. A new CertiK report also shows that North Korea-linked hackers have stolen billions of dollars in crypto since 2016, reminding investors that security remains one of the biggest risks in the digital asset industry. ## Saylor Signals Another Possible Bitcoin Buy Strategy chairman Michael Saylor has once again signaled that the company may be preparing to buy more Bitcoin. Saylor posted a familiar update on social media, a move that has often appeared before Strategy announces a new BTC purchase. Strategy remains one of the most important corporate Bitcoin holders in the world. Because of that, even hints from Saylor can attract attention from traders, institutional investors and Bitcoin supporters. The company is also asking retail shareholders to vote on a proxy measure related to STRC, its perpetual preferred stock. The proposal would allow semi-monthly dividend payouts to STRC holders. This matters because Strategy's Bitcoin accumulation model is closely connected to its capital-raising tools. If the company can continue raising capital efficiently, investors may expect it to keep adding BTC over time. For the broader market, Strategy's activity remains an important sentiment signal. A new purchase would not guarantee a Bitcoin rally, but it could strengthen confidence among long-term holders. ## Italy's Largest Bank Doubles Crypto Holdings to $235 Million One of the biggest institutional stories today comes from Italy. Intesa Sanpaolo, the country's largest bank, reportedly increased its crypto holdings from around $100 million at the end of 2025 to about $235 million by the end of Q1 2026. The bank expanded its Bitcoin exposure through products such as the ARK 21Shares Bitcoin ETF and BlackRock's iShares Bitcoin Trust ETF. It also entered Ethereum for the first time through BlackRock's iShares Staked Ethereum Trust. In addition, Intesa Sanpaolo reportedly added exposure to XRP through the Grayscale XRP Trust ETF, worth around $26 million. This is important because large banks usually move slowly when it comes to new asset classes. When a major European bank increases its exposure to Bitcoin, Ethereum and XRP-related products, it suggests that crypto is becoming more acceptable inside traditional finance. However, Intesa also reduced its Solana position sharply. That shows institutional investors are not simply buying everything in crypto. Instead, they are becoming more selective across different assets and ETF products. ## THORChain Confirms $10 Million Exploit Security is also a major topic today. THORChain confirmed a $10 million exploit and launched a recovery portal for affected users. According to reports, the exploit involved 36.75 BTC, worth around $3 million, along with roughly $7 million in tokens across BNB Chain, Ethereum and Base. More than 12,800 wallets were affected. THORChain said users can use the recovery portal to check expected compensation, revoke malicious token approvals and submit refund claims. The refund pool is backed by treasury funds of equal size.
The portal gives affected users 21 days to submit claims, with the refund window closing on June 4. Any unclaimed allocation will reportedly roll into the protocol's insurance fund. This incident is another reminder that DeFi users need to be careful with wallet approvals, bridges and cross-chain transactions. Even established protocols can face technical, operational or social engineering risks. ## North Korea-Linked Hackers Have Stolen $6.75 Billion Since 2016 A new CertiK report has highlighted the scale of state-linked crypto crime. According to the report, North Korea-linked hackers have stolen an estimated $6.75 billion across 263 incidents between 2016 and early 2026. In 2025 alone, the broader crypto ecosystem recorded 656 security incidents, resulting in $3.4 billion in total losses. Of that amount, around $2.06 billion was attributed to DPRK-linked actors, representing roughly 60% of all funds stolen. The report also said that attackers are increasingly focused on high-value targets rather than high-volume attacks. This means fewer incidents can still create much larger losses. One key finding is that these attacks often target human and operational weaknesses instead of only smart contract code. Fake job offers, impersonation, compromised developer environments and supply chain attacks remain major risks. For crypto investors and companies, this makes security training, wallet hygiene, internal controls and third-party risk management more important than ever. ## KuCoin Expands in Australia With Regulatory Focus KuCoin is also expanding its presence in Australia. The exchange is increasing investment in the market, opening a new office in Sydney and launching products designed to help consumers use digital assets in everyday payments. The company's Australian strategy appears focused on regulatory alignment and practical crypto use cases. This includes payment-related products and partnerships, including Mastercard-related initiatives. Australia has become an increasingly important market for crypto exchanges because regulators are working toward clearer rules for digital asset service providers. Companies that can operate within local compliance standards may have an advantage as adoption grows. KuCoin's move also shows that crypto companies are still expanding internationally despite market volatility. ## Traditional Finance Continues Moving Into Crypto Beyond today's main headlines, the broader trend remains clear: traditional finance is moving deeper into crypto. Charles Schwab recently began offering Bitcoin and Ethereum trading to select U.S. users, allowing them to trade BTC and ETH alongside traditional investments. JPMorgan has also filed to launch a tokenized money market fund connected to Ethereum through its Kinexys Digital Assets unit.
These developments show that crypto is no longer only a retail-driven market. Banks, brokerages, asset managers and public companies are increasingly building products around digital assets. Tokenized funds, staking ETFs, crypto trading accounts and Bitcoin treasury strategies are all part of the same larger trend. Digital assets are becoming integrated into the traditional financial system. However, adoption does not remove risk. Regulation, cybersecurity, liquidity and market volatility remain key factors that investors need to monitor closely. ## Key Market Signals to Watch The first signal to watch is whether Strategy confirms another Bitcoin purchase. A new buy could strengthen long-term Bitcoin sentiment, especially among institutional investors. The second signal is institutional ETF activity. Intesa Sanpaolo's larger crypto exposure suggests that major banks are still exploring digital assets, but its reduced Solana position also shows that institutions are becoming more selective. The third signal is DeFi security. THORChain's recovery process will be closely watched because it may affect user confidence in cross-chain protocols. The fourth signal is cybersecurity risk. The CertiK report shows that state-linked attackers remain a serious threat to exchanges, bridges, developers and individual users. The fifth signal is global regulation. KuCoin's Australia expansion, Schwab's U.S. crypto trading rollout and JPMorgan's Ethereum-linked product all show that compliant crypto infrastructure is becoming more important. ## Conclusion Crypto today is not being driven by one single story. Instead, the market is moving through a mix of institutional adoption, corporate Bitcoin strategy, DeFi security concerns and global regulatory development. Saylor's latest signal has put Strategy back in the Bitcoin spotlight. Intesa Sanpaolo's expanded crypto holdings show that major banks are continuing to explore digital assets. At the same time, the THORChain exploit and CertiK's North Korea hacking report remind the market that crypto security remains a serious challenge. For investors, the main takeaway is balance. Institutional adoption continues to grow, but risk management is still essential. The crypto market is becoming more mature, but it is also becoming more complex. This article is for informational purposes only and should not be considered financial advice. Sources: Cointelegraph, Decrypt, CertiK, GlobeNewswire.