BriefingRegulationArchiveProfile
PaymentLeaks
BriefingRegulationArchive
0:00 on page
ES|EN
Sign in
Access
IN
IGNACIO DE NAVASCUÉS
EDITOR · 12Y IN PAYMENTS
Today2026-04-22

BPCE puts Wero in production e-commerce in France, a second DeFi protocol falls within 96h, and Maker/Spark + USDC swallow $10B of Aave outflows — the regulated-vs-composable bifurcation crystallizes by the hour.

2026-04-22
Yesterday's data2026-04-22

Top 3 · Systemic Impact

TODAY
1Systemic

BPCE executes the first Wero e-commerce transactions in France with ESF — 500K clients in May, 13M Banque Populaire + Caisse d'Épargne customers by summer

On April 20, Groupe BPCE confirmed the first Wero e-commerce transactions live in France, with École du Ski Français (ESF) on its "Mon séjour en montagne" booking platform as the pilot merchant. Boursorama details the cadence: 500,000 Banque Populaire / Caisse d'Épargne customers activated in May 2026, with all 13 million BPCE clients onboarded by summer. Yves Tyrode, BPCE's Director of Digital & Payments, framed the move directly: *"payment sovereignty is becoming a strategic lever of the economy"*. Analyst Geoffrey Laloux — quoted by Boursorama — forecasts Europe will end with *"a patchwork of solutions"* in five years rather than a single winner. Wero currently operates via QR; contactless NFC will follow. The non-obvious detail: the Wero rail generates no interchange revenue for acquiring banks the way a card network would — BPCE and BNP Paribas are already preparing a professional Wero offering with a commission (below card fees but non-zero) to secure the economic model before volume scales. The connection with the week's narrative: Wero (wallet) + Qivalis (12-bank EU stablecoin, Apr 21) + Lescure endorsing Qivalis by name (Apr 17) = three parallel European monetary-sovereignty fronts executing in 120 hours with no apparent formal coordination.

Your exposure
If you're a French / pan-European merchant with e-commerce volume, evaluate Wero before June — the BPCE rollout + Revolut FR integration + N26 (Germany/NL/FR H2 2026) suggests 50M+ users accepting Wero in the next 12 months. If you're an acquirer/PSP, the Wero economic model is materially different from cards: no interchange, BPCE/BNP designing a lower professional commission. If you're an EU issuer outside the EPI/Wero axis, your window to choose between integration (Revolut/N26 model) or rebuilding your own rails is narrow.
Wins / Loses
EPI Company wins (Wero operator), BPCE wins as the first major e-commerce retail deployment, the sovereignty-without-cards narrative wins. Visa/Mastercard lose part of the "only pan-European network" argument — Wero already has 53M registered users (mid-April, EPI Company). Apple Pay loses ground in France: QR now, NFC soon. Interchange-dependent acquirers (BPE, Worldline) lose because card fee structure no longer applies.
Watch
Whether Wero confirms NFC contactless before June 15 (closing the Apple Pay argument). Whether Deutsche Bank, Santander or BBVA announce Wero integration via EPI before June 15 (adhesions mark EU banking critical mass). Whether the Wero professional economic model sits below 0.3% Visa/MC debit or tries to match it.
Actionable analysis · ProStart 7-day free trial →
SourcesBoursorama (Apr 20)↗·MoneyVox (Apr 20)↗·Revue Banque (Apr)↗
2Systemic

Volo Protocol (Sui) falls for $3.5M on Apr 22 — second DeFi cross-chain hack in 96h, and Kelp laundering already moves $175M through THORChain/Umbra/BitTorrent

CoinDesk confirmed on April 22 that Volo Protocol — a liquid-staking provider on the Sui network — lost approximately $3.5 million in an exploit that drained 3 vaults holding WBTC, XAUm and USDC. The incident lands 96 hours after the Kelp hack ($292M, Apr 18) and 48 hours after the Resolv collapse (−75%, Apr 20). In parallel, Moneyweb reported the same day that the Kelp hackers have begun laundering the loot: $175M moved through THORChain, Umbra and BitTorrent to obfuscate the on-chain trail. The Arbitrum Security Council had frozen $75M following law-enforcement input, but the remaining funds are diluting. The non-obvious part is not the Volo hack itself — $3.5M is modest — it's what it confirms: the Kelp pattern is not an outlier, it is the default vector for any cross-chain DeFi with single-point verifiers. Volo was explicitly on the radar as a cascade candidate (alongside Pendle, Renzo, EtherFi, Symbiotic) after the Apr 19 briefing. Hitting that prediction in just 96 hours (versus the 14 days forecast) says more about the structural fragility of the composable DeFi stack than about attacker sophistication.

Your exposure
If your portfolio includes cross-chain liquid staking (rsETH, cross-chain stETH, EigenLayer restakers, Sui-native stakers like Volo), assume any single-point verifier can fail within 30 days. If you're a DeFi allocator, the fiduciary can no longer defend "non-isolated" as thesis — the market just made the call for you.
Wins / Loses
Aave v3 isolated, Morpho Blue, Euler v2, Fluid, Sky/Maker Spark win — the fleeing capital is hunting isolated architecture that is regulator-compatible. LayerZero loses (second hack leveraging single-point setup in 4 days), Sui ecosystem loses in institutional perception — Volo is the first native-Sui protocol to fall into a global DeFi cascade. Traditional mixers (Tornado Cash) lose primacy because Kelp laundering migrated to THORChain + Umbra + BitTorrent — cross-chain swaps have replaced classic mixers as the primary DeFi laundering vehicle.
Watch
Whether a third cross-chain protocol (Pendle, Renzo, EtherFi, Symbiotic) reports exploit or freeze before May 15. Whether OFAC publishes specific sanctions on THORChain or Umbra after the Kelp-Lazarus pattern. Whether Arbitrum or another L2 reports a freeze action analogous to the $75M move.
SourcesCoinDesk (Apr 22)↗·Moneyweb (Apr 22)↗
3Systemic

Sky/Maker Spark + USDC swallow $10 billion in Aave outflows post-Kelp — the DeFi bifurcation is no longer narrative, it's measured flow

CoinDesk documented on April 22 that Aave has seen $10 billion in net outflows since the Apr 18 Kelp hack. The concrete trigger: attackers deposited $200M of the Kelp loot as Aave collateral, accelerating drawdowns from users concerned about protocol integrity. The flight-to-safety recipients are identifiable and concentrated: Sky/Maker (Spark protocol) on one side and USDC on the other. The pattern is not surprising — it's the numerical proof of the thesis. Sky/Maker has an isolated-markets-first architecture and Spark capitalizes on that design directly. USDC benefits from being the regulated stablecoin with the lowest institutional counterparty risk. The non-obvious connection: the $10B did not migrate to USDC to stay there forever — it's parked capital while the next allocation is decided. If Qivalis (12 EU banks, Apr 21) executes its H2 2026 launch as announced, at least a fraction of that $10B will find a EUR-banking destination. And PYMNTS published on Apr 22 a podcast titled *"Inside the $9 Billion DeFi Hack That's Shaking Crypto's Foundations"* — mainstream narrative is already positioning Kelp as DeFi's 2026 pivot event.

Your exposure
If you're a crypto allocator with a DeFi mandate, the window to rebalance toward isolated + stablecoin-wrapped is now, not July. If you run a non-isolated composable DeFi protocol, your liquidity runway is measured in weeks — not quarters. If you're Circle/Tether, the retail USDC flight from Aave is tailwind for pre-IPO valuation.
Wins / Loses
Sky/Maker Spark, Morpho Blue, Euler v2, Fluid, Aave v3 isolated win. USDC absorbs the dollar-stablecoin flight-to-safety. Pendle, Renzo, EtherFi, Symbiotic lose — any protocol with non-isolated cross-chain exposure. Ethereum DeFi loses as "the dominant market" — Sui (post-Volo cascade), Solana (post-Drift, context Apr 1 exploit) have been stress-tested; survivors are those with isolated-first DNA.
Watch
Whether Aave TVL recovers <30% before May 15 (signal of permanent flight). Whether Maker/Sky reports Spark TVL +$3B before April 30, confirming capture of the $10B fleeing capital. Whether any top-20 DeFi protocol announces a formal migration to isolated-only lending within the next 14 days.
SourcesCoinDesk (Apr 22)↗·PYMNTS podcast (Apr 22)↗

News by Impact

STORIES

[HIGH] Fundtech team takes over at Otoma, AI-native payments infrastructure for banks. Finextra reports on Apr 22 that the Fundtech founding team — led by Peter Reynolds (CEO) and Reuven Ben Menachem — takes control of Otoma, an AI-native platform promising to free banks from legacy tech vendors. The suite includes Payments Visualizer and Any2Any data transformation. The thesis: compress dev cycles from months to days for bank-tier stablecoin settlement. Finextra (Apr 22)

[HIGH] US ACH processes >$24 trillion in Q1 2026 — 1970s rail holds up against RTGS. Payments Dive documents the sustained rise, driven by healthcare, P2P, e-commerce and corporate direct deposit. The paradox: corporate treasury prefers batch liquidity predictability over real-time settlement. Structural barrier for institutional FedNow adoption that innovators will have to bridge with interoperability, not direct replacement. Payments Dive (Apr 21)

[HIGH] Stratiphy reopens a tax-free route to crypto-ETNs for UK investors. Cointelegraph (Apr 22) reports Stratiphy's move: crypto-ETNs inside the ISA wrapper (Individual Savings Account) — FCA-authorized after years of fiscal blockage. UK regulatory precedent: British retail gets crypto exposure with no capital-gains tax inside the ISA wrapper, opening the retail valve ahead of full EU MiCA. Hargreaves Lansdown, AJ Bell and Interactive Investor evaluating analogous offers within weeks. Cointelegraph (Apr 22)

[HIGH] New Bank of Korea governor pledges flexible monetary policy amid Middle East risks. Korea Times covers the new BOK governor's first formal speech on Apr 21 — flexible monetary policy due to geopolitical risks + CBDCs + deposit tokens as the core of the digital ecosystem. Follow-up on the Korean institutional pivot toward Project Hangang Q3 2026. Korea Times (Apr 21)

[HIGH] eBanx expands recurring alternative payments to 12 emerging markets with 1B user potential. Business Insider reports Apr 21 the subscription-native expansion: Brazil, Mexico, Argentina, India, Philippines, Indonesia, Egypt, Kenya, Pakistan, Vietnam, South Africa and Turkey. Relevant because global SaaS subscription depends on retention LTV and emerging-market alt-rails double the match rate of traditional cards. Business Insider (Apr 21)

[MEDIUM] Nuvei launches direct acquiring in Mexico. Nuvei announces Apr 21 it becomes a direct local acquirer in Mexico: direct integration with domestic infrastructure + OXXO Pay + SPEI + payouts + risk management through a single API. Direct competition against Mastercard Installments and local players Conekta, Clip, Kueski. FintechMagazine (Apr 21)

[MEDIUM] N3xt launches the first tokenized US dollar for cross-border payments. Las Vegas Sun covers on Apr 21 the technical debut of N3xt — USD tokenized on proprietary infrastructure. Small player but reinforces the pattern: the USD stablecoin fragments among regulated players in parallel with EU banking consolidation (Qivalis). Las Vegas Sun (Apr 21)

[MEDIUM] Uzbekistan creates state-backed crypto-mining zone with tax breaks in Karakalpakstan. Cointelegraph (Apr 22) reports the initiative as a strategic investment push to attract Asian operators post-China ban. Central Asia formalizes as a new mining zone under state protection, following the Bhutan + Kazakhstan template. Signal of regional hashrate consolidation under sovereign regulation. Cointelegraph (Apr 22)

[MEDIUM] Ozow + Lula partner to expand SMB funding in South Africa. IT News Africa (Apr 21) reports the alliance between PSP Ozow and lending platform Lula — goal: instant funding for small business on Payshap/EFT rails. Reinforces tier-1 African fintech expansion into vertical stacks (Tulupay FOS is the other leg). IT News Africa (Apr 21)

[MEDIUM] BGL to release Firm Verify to simplify AML/CTF Tranche 2 compliance in Australia. Australian Fintech (Apr 21) reports BGL's new platform — the AUSTRAC Tranche 2 law expands AML/CTF obligations to lawyers, accountants and real estate. BGL Firm Verify automates KYC + customer due diligence for non-bank professional firms. Regulatory precedent: Australia's Tranche 2 is the model the EU is heading toward post-AMLA. Australian Fintech (Apr 21)


Exposure Check · Pro Analysis

PRO

E-commerce merchants in France without Wero integration: BPCE just activated 500K clients in May, scaling to 13M by summer.

🔒 [Pro] Continue reading →

E-commerce merchants in France without Wero integration: BPCE just activated 500K clients in May, scaling to 13M by summer. 🔒 [Pro] Continue reading →

Connect the Dots

Cross-vertical theses with timeline

Silence Watch

What the majors aren't saying

Weak Signals

Before mainstream picks them up

Convergence

6-12 month theses

Thesis 1: In 120 hours Europe executes three parallel monetary-sovereignty fronts — Lescure endorses Qivalis, Qivalis formalizes, and BPCE puts Wero...

🔒 [Pro] Continue reading →

DeFi non-isolated cross-chain cascade — HIT CONFIRMED Volo.

🔒 [Pro] Continue reading →

Start 7-day free trial →
Then €9.99/mo·33 cents a day·Cancel before trial ends to avoid charge

Parallel sovereign rails

· position, not only news3 RAILS

Wero / EPI Company

EU WALLET · EPI

Critical news — BPCE e-commerce debut France on Apr 20; 500K clients active in May, 13M summer; Revolut FR integrated; N26 accession H2 2026; 53M registered EPI users mid-April. Pattern: pan-institutional European wallet competitor to Apple Pay without interchange. Prediction: Be…

Qivalis

EU BANK STABLECOIN

Follow-up — 12 systemic EU banks (BBVA, BNP, ING, UniCredit +8), Fireblocks operates, DNB-regulated, EU crypto-framework-compliant, H2 2026 launch confirmed. Prediction: Before June 15, 3+ additional accessions + official token symbol + public testnet.

Sui / Volo

EMERGING DEFI

News — Volo Protocol exploit Apr 22 ($3.5M, 3 vaults). First native-Sui protocol in global DeFi cascade. Prediction: Before May 15, at least 1 additional Sui DeFi protocol reports incident or freeze; Sui ecosystem faces institutional stress test.

Today's Pulse

Which story impacted you most today?

Archive · Past coverage

5 RELATED
2026-04-18
Bank of England launches stress tests specifically for AI agents in payments — first systemic G7 response to agentic banking
WeroVisaMastercardRevolutCircleTether
2026-04-17
American Express acquires Hyper to strengthen its agentic layer — and activates AI agent purchase protection
WeroVisaMastercardRevolutCircleTether
2026-04-09
Coordinated U.S. regulatory offensive on stablecoins in 48 hours — four federal agencies publish simultaneous proposals under the GENIUS Act, and Switzerland responds by launching a CHF sandbox with 6 banks led by UBS
WeroVisaMastercardRevolutCircleTether
2026-03-30
Bessent announces that US "will retake control" of Hormuz — Brent +55% in March, absolute record since 1988
WeroVisaMastercardRevolutCircleTether
2026-03-29
Anthropic Mythos AI leak — Chinese group uses Claude to infiltrate ~30 financial institutions
WeroVisaMastercardRevolutCircleTether
← 2026-04-21Full archive

Never miss a briefing

Get notified every morning when the briefing is ready.

Anything to improve? Tell me.

I read everything. If anything's missing, extra, or broken in the briefing, I'd love to hear it.

PaymentLeaks

PaymentLeaks is built by Ignacio De Navascués — 12 years in the payments industry. Daily intelligence on global payments, fintech and sovereign rails, hand-curated and analyzed every morning.

Content
  • Today's briefing
  • Archive
  • Regulation
  • Convergence
  • Glossary
Subscription
  • Premium €9.99/mo
  • See sample
  • FAQ
About
  • About PaymentLeaks
  • Podcast
  • Privacy
  • Terms
© 2026 PaymentLeaks · MadridIndependent analysis. Not financial advice.