Kraken's on-chain product lead subugatai has published a 'Kraken Wallet Manifesto,' revealing that the iOS version of the wallet is now available for download and the Android release is scheduled for next week. The manifesto also previews a forthcoming 'Kraken co-signer multi-sig' feature. This design lets users split their private key into multiple shards, with one shard placed in Kraken's custody. That shard participates in signing only after the user completes two-factor authentication (2FA) through their Kraken account. The manifesto also stressed that the wallet charges a 0.1% fee. The wallet supports a range of account types, including EOA, 7702 smart accounts, and embedded wallets, and users are free to choose which account model to use. It can connect to existing hardware signers or multi-sig wallets, and it enables different wallet types to be assigned to funds with different risk profiles. In its roadmap, the wallet will support xStocks trading, conversion between stablecoins and fiat, non-custodial debit cards, K-Assets on-chain via qualified custody, and native integration with the Ink ecosystem.

Rain, a Solana-based debit card infrastructure, has been exploited due to a vulnerability in an outdated contract, with roughly $1.1 million in funds stolen. Affected crypto bank Avici saw its AVICI token plunge 49% from a 24-hour high of $0.43 to an all-time low of $0.217, before recovering to about $0.378. Avici said the attack only hit the card funding contracts used for loading spending balances; its self-custody wallets were not compromised, and it has promised to fully refund affected balances. According to on-chain data, 1,685 Avici users lost about $500,800, while 636 users of another crypto bank, Tria, lost more than $430,000. The gap between the roughly $1.1 million tracked on-chain and Avici's reported losses suggests other Rain-backed protocols were also attacked. Attackers repeatedly submitted signed authorizations to add themselves as admins of card collateral accounts and withdraw balances. The stolen stablecoins were swapped into SOL, bridged to Ethereum, and ultimately sent to the mixing service Tornado Cash. Avici has filed a report with the FBI's Internet Crime Complaint Center. The incident also highlighted custody handoff issues in some self-custody cards: users control their wallets, but spending funds are moved into third-party contracts.

ChainCatcher reports that Kraken’s payment app Krak has launched its multi-asset debit card in the United States. The card had already rolled out in the UK and the European Economic Area, and it was built in partnership with Stripe. It works at any merchant that accepts Visa. Users can earn up to 2% cashback in either dollars or bitcoin, and they can hold and spend more than 600 currencies and assets. Krak says the product is designed to make payments between crypto assets and fiat more convenient.

UK fintech Revolut unveils a DOGE-themed physical debit card usable at Visa/Mastercard merchants across the UK and EU, aiming to push meme coin into mainstream payments without extra exchange fees.

X Money debit card revealed with metal design, 3% unlimited cashback, 6% APY, and zero foreign fees. Public beta in April via Shatner charity donation. Crypto design lead Benji Taylor hired, fueling blockchain integration speculation. Dogecoin rallies.

MetaMask and Mastercard have launched the MetaMask Card in 49 U.S. states, letting users spend directly from self-custodied wallets and earn mUSD rewards on purchases.

MoonPay has introduced the MoonAgents Card, a Mastercard-linked stablecoin debit card that lets users and AI agents pay directly from self-custodial onchain wallets, starting in the UK and Latin America.

Coinhub Exchange launched two physical branches in Las Vegas and Phoenix on Jan 7, 2026, combining online crypto trading with in-person teller service and a nationwide Bitcoin ATM network offering daily cash limits up to $150,000.