Coin Counsel Crypto Brief: Kalshi Probes $173 in Well-Timed Bets, BitGo Faces a $141 Million London Suit, and the XRP Ledger Patches a Money-Printing Bug

Four stories from the past two days show how much of crypto's legal risk now sits away from the usual hacking headlines: a prediction market policing its own traders, a federal regulator redrawing the map beneath that market, a custodian defending a nine-figure claim in London, and an old blockchain disclosing a flaw that could have broken its own supply cap.

Kalshi Is Investigating Bets Placed Before a White House Announcement

The Wall Street Journal reported on October 10 that Kalshi is reviewing at least three wagers on Katie Zacharia placed before news outlets reported she would succeed Karoline Leavitt as White House press secretary. The bets were tiny, roughly $173 in total, but traders had priced Zacharia at about a 1% chance. One $19 bet placed around 10:42 p.m. Thursday is slated to return $1,896; the three together carry expected payouts near $9,600.

The small dollar figures are the interesting part. Nobody builds an enforcement case for $9,600. What the trades suggest is a leak, and that is a different problem. Trades are anonymous to the public, but Kalshi keeps identity records, and since June it has required traders in markets it flags as higher risk to disclose their employers. In August a former White House teleprompter operator agreed to repay $107,539 and pay a $65,000 penalty for trading on prepared remarks. The CFTC has not commented here.

The CFTC Proposes Treating Event Contracts as Swaps

On October 9 the CFTC issued an interim final rule and a notice of proposed rulemaking that would pull event contracts on sports, politics, culture and weather into the statutory definition of a swap. Casino-style gambling products, including sportsbook wagers, are expressly excluded. Comments are due within 30 days of publication.

Venue does the work here. A contract listed on a CFTC-registered designated contract market would be a swap; the identical bet placed with a state-licensed operator would not. That framing goes straight at the fight over whether state gambling law reaches platforms like Kalshi and Polymarket, where courts have split on federal preemption. If you build on a prediction market, the comment window is the real deadline.

BitGo Faces a $141 Million Claim in London's High Court

DWF Maas and Falcon Digital, two firms tied to market maker DWF Labs, have sued custodian BitGo for $141 million in London's High Court, as the Financial Times reported on October 9. The claim is contractual, not regulatory. BitGo allegedly took Falcon Finance (FF) and ESPORTS tokens at a discount in private over-the-counter deals on the condition that it would not sell before lock-up and vesting expired, then moved them to exchanges roughly two months before the first unlock. The plaintiffs say that selling pushed prices down and cut the value of what they still held. BitGo declined to comment, and none of the allegations have been tested in court.

The forum is a deliberate call: England handles disclosure, cost exposure and contractual damages differently than a US court would. Proof will be the hard part. Showing that one seller's conduct, rather than everything else moving at the same time, caused a price decline in a thin token market is where claims like this become long and expensive.

A Decade-Old XRP Ledger Bug Could Have Minted Coins From Nothing

Also on October 9, RippleX disclosed an integer overflow in xrpld 3.4.0 and earlier. When one payment consumed multiple order book offers, the software summed XRP amounts in a 64-bit integer, and totals above the maximum wrapped around to a far smaller number. An attacker could in principle have created XRP beyond the 100 billion cap for a few hundred XRP in fees and reserves. Researcher Cayden Liao reported it through the XRPL bug bounty on September 22, and an emergency release, 3.4.1, shipped three days later outside the usual validator amendment process. The flaw appears to date to the payment engine's original build around 2015.

Investigators found no evidence the bug was ever used, and no funds were lost. That is what a funded bug bounty and a working emergency patch path are for. Node operators still running 3.4.0 or earlier should upgrade.

What This Means for You

If you trade on a prediction market, assume your activity is identifiable to the platform and reviewable by a regulator, however small the position. If you hold tokens under a lock-up, paper the restriction properly, watch on-chain movement of your counterparty's allocation, and raise a suspected breach in writing early, because that correspondence becomes the evidence.

The legal thread running through all of this is that the rules are being set right now rather than enforced after the fact. The CFTC's comment period closes in a month, and rulemaking comments are one of the few cheap ways a business can influence its own regulator. Lock-up and OTC agreements should name a specific remedy and a forum, because choosing where to sue after a breach is far worse than choosing before. And a disclosed vulnerability, even an unexploited one, can trigger notification duties depending on the jurisdiction.

At Coin Counsel, we work with individuals and businesses navigating the legal fallout of crypto fraud — whether you're a victim seeking recovery, a company facing regulatory scrutiny, or a project working to stay compliant in an increasingly complex legal landscape. The rules are evolving fast, and the cost of getting it wrong has never been higher. Contact us at coin-counsel.com to speak with a crypto-focused attorney today.

Disclaimer

This blog post is for informational purposes only and does not constitute legal advice. Reading this content does not create an attorney-client relationship between you and Coin Counsel or Franco Law PLLC. The legal landscape surrounding cryptocurrency is rapidly evolving and varies by jurisdiction. Do not act or refrain from acting based on information in this post without first consulting a qualified attorney. If you believe you have been the victim of crypto fraud, contact us at coin-counsel.com for a consultation.