This Week in Crypto (June 15-22): Ethereum Foundation's Leadership Crisis Deepens, USB Worm Hijacks Crypto Wallets, and Ethereum's Most Hated MEV Bot Gets Its Own Medicine

Bitcoin Crashes to $62K as Lebanon Strikes Stall the Iran Peace Deal

Last week's biggest bullish catalyst became this week's biggest bearish one. The US-Iran memorandum was supposed to be formally signed in Switzerland on June 19 — but Israeli airstrikes across southern Lebanon overnight pushed Iran to delay sending its delegation, and the signing was postponed indefinitely.

Bitcoin, which had been hovering near $65,000 on hopes the deal would hold, dropped nearly 5% intraday to around $62,300. The broader market followed: Ethereum fell over 3%, XRP dropped more than 4%, and Solana lost almost 5%. Across the crypto market, roughly $580 million in leveraged positions were liquidated within 24 hours, hitting more than 139,000 traders.

It's the same lesson as last week, just in reverse: when crypto prices are this tightly coupled to a single geopolitical headline, every twist in that story — good or bad — becomes a market event.

Ethereum Foundation Loses Its Second Co-Executive Director in Four Months

The Ethereum Foundation's leadership crisis deepened this week. Hsiao-Wei Wang, co-executive director and board member, stepped down effective June 18 — following fellow co-executive director Tomasz Stańczak's resignation earlier this year. Wang had joined the foundation's research team in 2017, working on the Beacon Chain that underpins Ethereum's proof-of-stake design, before being elevated to co-executive director in early 2025.

In her announcement, Wang said a recent sabbatical "gave me space to reflect on my priorities and the kind of life I want to build next" and that "this is the right moment for me to step back." Board member Bastian Aue, who guided the foundation through Wang's sabbatical, is now taking on a larger interim role with both co-executive director seats empty.

Wang's exit is the latest in a string of departures — at least eight senior figures, including protocol cluster leads, have left the foundation over the past five months. The churn has reopened a long-running debate about whether the EF's structure is fit for purpose, with critics like Bankless's Ryan Sean Adams arguing Ethereum needs an organization more willing to advocate loudly for ETH the asset. Supporters counter that developer activity on Ethereum remains the highest of any major blockchain, suggesting the turmoil is organizational rather than technical.

Microsoft Finds a USB Worm That Hijacks Crypto Wallets Through Tor

Security researchers at Microsoft detailed a Windows-based malware campaign — dubbed "Crypto Clipper" and tracked as Trojan:Win32/CryptoBandits — that's been spreading since February through infected USB drives. When a clean USB drive is plugged into an infected machine, the worm hides the user's real files and replaces them with malicious shortcuts bearing the same names.

Once active, it checks the Windows clipboard roughly every 500 milliseconds. Copy a wallet address to send a transaction, and the malware can silently swap in an attacker-controlled address before you paste it — no visible warning. It also scans for seed phrases and private keys, takes periodic screenshots, and exfiltrates everything over the Tor network.

Microsoft's advice: disable AutoRun, block .lnk execution from removable media, and double-check any wallet address right before you hit send.

Ethereum's Most Hated MEV Bot Gets Sandwiched for $7.5M

Some poetic justice this week. Jaredfromsubway.eth — the bot responsible for an estimated 70% of Ethereum sandwich attacks since late 2024, costing traders roughly $60 million a year — got drained of about $7.5 million in an exploit security firm Blockaid called a "honeypot approval trap."

Over several weeks, an attacker deployed 66 fake token contracts mimicking WETH, USDC, and USDT, paired with fake liquidity pools designed to look like profitable arbitrage opportunities. The bot's automated logic took the bait, approving the attacker's helper contracts to spend its tokens — and once those approvals were live, the attacker simply pulled the funds out and routed some through Tornado Cash. Blockaid was clear this wasn't a smart contract bug, a phishing attack, or a private-key leak — just the bot's own predatory logic turned against it.

A separate account impersonating the bot quickly claimed a $15 million loss and dangled a $1 million "bounty" — evidence points to it being an impersonator cashing in on the attention, not the real operator.

In Brief

Strategy's STRC cracks its peg. Forced selling from leveraged investors pushed Strategy's dividend-paying preferred stock (STRC) and SATA sharply lower mid-week before both rebounded — a reminder that leverage stress isn't confined to spot crypto markets.

Franklin Templeton files Bitcoin "DRIP" ETFs. Two new SEC filings would automatically reinvest US stock dividends into Bitcoin exposure, capping digital-asset exposure at 20% of fund assets. Target launch: September 1, 2026.

Fed holds rates steady. Fewer cuts signaled than markets hoped, triggering broad crypto deleveraging and roughly $118M in BTC long liquidations.