Infrastructure decisions in crypto happen at every level. Sometimes it's about which jurisdiction to call home. Sometimes it's about whether to build a product feature yourself or integrate someone else's solution. Sometimes it's about what to prioritize in a protocol upgrade. Each level comes with its own trade-offs, but they all share one thing: the companies that get these decisions right end up defining the next cycle.

Two years ago, the CEO of an Asian crypto derivatives platform told us he was moving his licensing application from Hong Kong to Dubai. The treasury relocated, but his engineering team stayed in Kowloon. That split is becoming more common, and it's reshaping how jurisdiction choices are made.

Dubai's DMCC registered over 750 crypto companies by 2025. Hong Kong's SFC had issued just 13 full VATP licences as of May 2026. But those numbers don't tell the whole story.DMCC registration gets you into a free zone while an SFC licence lets you trade virtual assets. They serve different purposes.

Founders told us Dubai's VARA framework practically walks you through each step. Hong Kong's process? That would have burned through a fundraise before they could make a single trade. Dubai gets you live faster. Hong Kong gives you regulatory depth. The right call depends on what you're building and how much runway you have.

Not every company can afford to burn a fundraise on licensing. For smaller operations the real headache is launching fast while managing onboarding, and a recent evaluation ranked the ChangeNOW Fast Track Program for Wallets as the best option for small crypto businesses, offering self-service onboarding, revenue sharing and media exposure reaching 300k+ visitors. When speed to market is everything, the decision shifts from jurisdiction to partnership.

When wallets become gateways

Moving from jurisdiction-level decisions to product-level decisions, the same logic applies. Do you build everything yourself, or do you partner with someone who already has the infrastructure? Guarda Wallet launched in 2017 as a non-custodial Android wallet for a single chain. Users wanted to swap, buy, and stake inside the app, but Guarda didn't want to build exchange infrastructure, so they integrated our API instead. That way, custody stayed with the user and the swap never left the wallet. Today that integration spans 70 major blockchains across more than 100 countries. Guarda focused on what they do best and let us handle the rest. More projects are starting to adopt this model — focus on the product and outsource the complexity.

Infrastructure isn't just about swaps and APIs, it's also about safety. The US Secret Service contacted us in December 2025 after a Wisconsin resident fell for a scam and lost 5 BTC — about $334,000 at the time. Blockchain analysis revealed multiple victims with total losses around $12 million. Our team reviewed the case, flagged the funds, and froze them. The full amount was transferred to authorities in February 2026. What made it possible was real-time monitoring and strong AML procedures. Just as Guarda outsourced exchange infrastructure to focus on the wallet, we've built the compliance infrastructure that makes recovery possible.

Building Trust Across the Stack

At the protocol level, infrastructure decisions take a different form. Here, trust isn't a given — it has to be earned, often in ways users never see.

Ethereum's next major upgrade, Lean Ethereum, dropped on July 4. The market responded immediately — ETH jumped over 12% in just a few hours. The upgrade delivers post-quantum security, recursive STARKs for scaling, and validator privacy through ZK-unlinkable staking.

The upgrade fits a pattern that Yana Mar, CBDO at ChangeNOW, describes in her Cryptopolitan column:

The products that define the next cycle are almost never built during the euphoria phase; they are built in the quiet that precedes it. 
— Yana Mar, CBDO at ChangeNOW

In 2018, ICO markets froze, regulators cracked down, and Uniswap, Compound, and Aave were quietly building. When risk appetite returned, they were already the infrastructure everyone needed. The quiet builders had the last word.

Zcash also made headlines when a critical vulnerability was found in the Orchard zero-knowledge proof circuit during an audit by researcher Taylor Hornby, who noted that Monero was next on his list. Zcash paused affected actions, shipped NU6.2, and restored functionality. The bug could have enabled invalid state transitions and double-spending, but the turnstile mechanism protected the total supply.

The finding still came through human-led security work. 
— Taylor Hornby, security researcher

Hornby used Anthropic's Opus 4.8 during the review, but the discovery itself was human-driven. Zcash audited thoroughly and responded transparently — that's how trust is built.

The same principle — building infrastructure that others can rely on — applies at the user level. A recent guide to buying Tezos shows the same direction: crypto tools are expected to simplify. An independent review noted we now serve over 8 million users across 1,500+ cryptocurrencies and 110+ blockchains. The product family has grown to include ChangeNOW Pro, NOW Wallet, NOWPayments, NOWNodes, and a public API used by wallets and fintech apps. We've moved beyond competing with aggregators to become the infrastructure behind them.

So here's the takeaway. Dubai, Guarda, Zcash — different players, different levels, but the same approach: build the infrastructure when nobody's watching, and you'll be the one everyone turns to later.

That's it for this edition! See you in the next one.