Today on The Ops Layer: the Ketman Project exposes systemic DPRK infiltration in Web3 hiring, SSV ships an institutional-grade DAO treasury policy, and CLARITY Act delays — now with a new agency-wide CFTC staffing figure — leave crypto regulation in extended limbo.
The Ethereum Foundation's Ketman Project — funded through ETH Rangers — disclosed results of a six-month investigation identifying 100 individuals linked to North Korea embedded as developers across 53 crypto projects. The operatives used fake identities, layered GitHub accounts with reused avatars, VPN infrastructure, and social engineering to secure paid development roles. The detection framework centers on GitHub pattern analysis, avatar reuse detection, and language/timing inconsistencies. Affected projects have not been publicly disclosed.
Why it matters
This is the clearest quantification yet of a problem most Web3 ops teams have handled informally. The scale (53 projects) indicates systemic vetting failure, not isolated incidents, and the attack vector is unglamorous — paid contributor roles with commit access, not smart contract exploits. For operations leaders, the operational implication is concrete: identity verification, structured background checks, GitHub provenance analysis, and payment destination screening need to become standard onboarding controls, even for teams committed to open/pseudonymous contribution. Expect insurance underwriters and institutional partners to start asking about hiring controls in due diligence.
Nasdaq-listed Intchains Group (ICG) announced a strategic operating model redesign on April 17, deploying AI automation across R&D, sales, and operations. The company has already cut headcount 20% and targets a cumulative 35% reduction by end of 2026, projecting roughly RMB20M (~$2.8M) in annualized labor savings. Simultaneously, Intchains expanded ETH staking to 8,040 ETH on FalconX and proprietary Goldshell Stake infrastructure plus 1,363 ETH from third parties — pivoting revenue mix toward infrastructure.
Why it matters
Intchains is a public-company case study in the operational pattern becoming dominant across Web3: aggressive AI-driven headcount consolidation paired with a shift toward infrastructure-based recurring revenue. The specificity (percentage reduction, annualized savings, staking volumes) makes it benchmarkable in a way most private Web3 restructurings aren't. Mirrors the StarkWare split reported April 15 and the broader Token Terminal ADR-driven operations approach — the thesis that AI collapses middle-management and process overhead in Web3 organizations is now showing up in reported financials, not just vendor pitches.
eBay laid off the remaining Web3 staff in Manchester, UK, including former KnownOrigin NFT marketplace team members, completing a multi-year wind-down of its 2022 acquisition (valued at approximately $68M). The team had already been cut by 30%+ in January 2024 and the on-chain marketplace was shuttered by end of 2024. The remaining layoffs accompany eBay's strategic pivot toward AI, live shopping, and core C2C marketplace operations.
Why it matters
A clean post-mortem on Web3 M&A integration in a traditional corporate structure. The pattern — acquire NFT marketplace, fail to integrate process and governance with legacy org, wind down marketplace, lay off team in tranches — is now the dominant outcome for Web2→Web3 acquisitions across the Shopify, Meta, GameStop cohort. For Web3 operators considering enterprise partnerships or acquisition paths, the read-through is that structural mismatch between Web3 operating models and legacy corporate hierarchies is the hidden integration risk, not the technology stack.
SSV DAO approved DIP-52, establishing a formal Asset Management Policy with a defined portfolio allocation — 35% AAVE lending, 55% tokenized treasuries, 10% liquid reserves — plus a strategic ETH reserve managed through ssv.network staking. The framework discontinues proactive token minting, revises DIP-26 budget mechanisms, and establishes quarterly reporting to an Oversight Committee at $12K annual management cost.
Why it matters
Landing the same week as the Orbs seasonal framework and the Aave V4 grant structure, DIP-52 continues the pattern of DAOs moving from per-decision votes to policy-level votes that delegate execution within defined guardrails. The specificity here — exact allocation percentages, committee cadence, explicit management budget — makes this directly benchmarkable. The open question, as with Orbs and Aave: whether quarterly oversight reports produce decision-useful disclosure or become ceremonial.
Da Hongfei's restructuring proposal — previously covered as a philosophical counterpoint to Erik Zhang's on-chain governance framework — now carries a quantified scope: approximately $461M in funding reallocation. The community's April 16 alignment tools (11-principle framework, comparison website, GitHub threads) are now operating against a material treasury decision, not just a structural debate.
Why it matters
The $461M figure transforms this from a design dispute into a live treasury governance stress test. The unresolved tension between Zhang's on-chain verifiability approach and Da's entity redomiciling/token redistribution model now has a dollar figure attached — making Neo the clearest active case study of founder-era DAO capital transition this cycle.
Updating the CLARITY Act thread: the bill has slipped from imminent passage to late-April Senate markup, still stalled on stablecoin yield provisions. New staffing figure from Bloomberg Law: CFTC is now at 550 employees, down 20% since end of 2024 — a different cut than the 77%/108-enforcement-staff figure from Chairman Selig's April 16 testimony, suggesting the overall agency reduction is broader than enforcement alone. Selig told Congress that Microsoft Copilot is partially offsetting the loss.
Why it matters
The timeline slip is the operational update: entity structure decisions made in anticipation of near-term CLARITY passage now need to hold longer in the fragmented SEC–CFTC environment. The new staffing number also adds texture — the 550/20% figure covers the full agency, compounding the 140-to-108 enforcement reduction already reported. The practical read-through remains the same but is now sharper: slower guidance, AI-assisted surveillance as the active enforcement vector.
A side-by-side analysis of MiCA and the pending CLARITY Act surfaces a concrete data point: 47% of European DeFi projects have already relocated or centralized operational controls in response to MiCA's vague 'fully decentralized' test. CLARITY proposes explicit safe harbors for protocol developers and non-custodial activity as an alternative resolution. The analysis lands as MiCA 2.0 consultations are being framed with 'no taboos' language and CLARITY negotiations are stalled.
Why it matters
The 47% relocation figure is new and directly rebuts the 'MiCA brought clarity' narrative covered in the EU MiCA 2.0 story from April 16. The mechanism is notable: it's interpretive ambiguity around decentralization — not MiCA's explicit rules — forcing teams to either leave or adopt a controlling-entity structure. This is the same problem the UK FCA's 'controlling entity' test and CLARITY's safe harbor approach each resolve differently. With CLARITY now delayed, the EU relocation pressure has no near-term US relief valve.
Ramp Network launched a self-custodial multichain wallet integrating on-ramp, off-ramp, and cross-chain execution into a single platform across Bitcoin, Ethereum, and eight additional networks (Arbitrum, Base, Optimism, Solana, and others), with unified identity verification and USDC-based transfer rails.
Why it matters
Follows Tether's tether.wallet launch (April 15) in a clear stack-consolidation pattern. For ops teams managing contributor payroll, treasury flows, and cross-chain rebalancing, fewer vendors means fewer KYB processes and reconciliation integrations — but also concentration risk. Worth evaluating against existing Fireblocks/Safe/ramp stacks.
Hiring is now an attack surface The Ketman Project's identification of 100 DPRK operatives across 53 crypto projects reframes developer onboarding as a security control, not an HR function. Identity verification, GitHub pattern analysis, and language/timezone forensics are becoming standard vetting requirements.
DAO treasuries are institutionalizing SSV's DIP-52, following Orbs' seasonal framework and the Aave V4 grant structure, shows DAOs codifying asset allocation percentages, oversight committees, and quarterly reporting — replacing ad-hoc treasury votes with policy-driven frameworks.
AI is filling operational headcount gaps — in enforcement and in Web3 firms CFTC leaning on Copilot to cover a 25% staff cut mirrors Intchains targeting a 35% workforce reduction via AI-enabled operations. The pattern: smaller orgs doing more, with AI absorbing the process overhead.
Regulatory framework divergence is an operational variable MiCA's vague 'fully decentralized' test is already forcing 47% of EU DeFi projects to restructure, while CLARITY's explicit safe harbors remain stuck in Senate negotiations. Jurisdiction choice is now a first-order operational decision.
Self-custody tooling is consolidating the stack Ramp's integrated multichain wallet with on/off-ramp built in — following Tether's tether.wallet launch — signals that fragmented treasury/payment infrastructure is being collapsed into single-provider platforms, reducing vendor sprawl for ops teams.
What to Expect
2026-04-late—CLARITY Act Senate markup targeted for late April; stablecoin yield provisions remain the sticking point
2026-06-02—Public comment deadline for U.S. Treasury GENIUS Act NPRM on state-federal stablecoin oversight
2026-06-03—UK FCA consultation feedback deadline on controlling entity crypto framework
2026-09-30—UK FCA authorization window opens for crypto firms (closes February 2027)
2026-10-20—Mint Blockchain asset withdrawal deadline — unwithdrawn ETH/WBTC/USDC/USDT become unrecoverable
How We Built This Briefing
Every story, researched.
Every story verified across multiple sources before publication.
🔍
Scanned
Across multiple search engines and news databases
171
📖
Read in full
Every article opened, read, and evaluated
51
⭐
Published today
Ranked by importance and verified across sources
8
— The Ops Layer
🎙 Listen as a podcast
Subscribe in your favorite podcast app to get each new briefing delivered automatically as audio.
Apple Podcasts
Library tab → ••• menu → Follow a Show by URL → paste