On Saturday, Houthi missiles hit two terminals at Saudi Arabia's main airport in Riyadh. At least 12 people died and hundreds were hurt, the Wall Street Journal reports. On Sunday, AAA put the average US price of a gallon of diesel at $6.28, against $3.67 a year ago.

Most analysts blame the war with Iran, which began on 28 February. The White House has so far refused to send forces against the Houthis. The Journal says joining the Saudi strikes might draw Houthi attacks on more ships in the Bab al-Mandeb Strait, the narrow passage at the southern end of the Red Sea, and that would push oil higher.

President Trump has also been moving on Russian oil. On Friday he rolled back sanctions so Russia can sell more of it and announced a limited energy deal. On Sunday he said Russia and Ukraine would both stop striking each other's energy sites. He announced a similar ceasefire before and it didn't last, and Russia hasn't commented.

None of this helps anyone hoping the Fed will cut. The minutes of its September meeting say most officials judged another rate rise would likely be appropriate by the end of the year. On Polymarket, the market on whether there will be no Fed rate cuts in 2026 stood at 96% on Sunday, unchanged in a day.

A rise at the Fed's meeting on 28 October isn't ruled out either. The Polymarket market on a quarter-point rise at that meeting is at 17%.

Bitcoin is $83,830 this morning. It has stayed between $81,793 and $86,478 in our daily readings since 27 September. Traders already expect no rate cut this year, so what a higher oil price can change is the chance of a rate rise.

RippleX and the XRP Ledger Foundation disclosed on Sunday a decade-old flaw in the ledger's payment engine. The code dates to 2015. A researcher posting as Cayden_Liao says his team built a working demonstration that could create about 18 trillion XRP in one transaction. That is roughly 184 times the 100 billion XRP the ledger is meant to hold.

He reported it through the ledger's bug bounty program and earned the maximum $250,000. The fix shipped in version 3.4.1 on 25 September, and more than 80% of default validators, the computers that confirm transactions, upgraded that day. XRPL says it found no evidence anyone used the flaw on a public network.

If you hold XRP, the fix has been live for more than two weeks. We've seen the disclosure only as relayed.

Papertrade, the 1,000x leverage exchange on HyperEVM we covered on Saturday, said on Sunday it is restricting exposure, onchain and through its relayers. Its statement doesn't confirm claims that a trader was blacklisted or stopped from closing positions.

The trigger is one wallet. The Block reports a trader netted $1.28 million by moving ETH prices on Hyperliquid, which Papertrade reportedly uses to set its own prices. Earlier reporting put the wallet's realized gains at about $1.73 million. The same wallet then lost $450,000 when 30 short positions were liquidated on Saturday night.

Papertrade pays winners from a pool funded by losing traders, and unpaid profits wait in a queue if the pool runs short. The manipulation is an allegation, and Papertrade hasn't confirmed any losses. If you trade there, your winnings are paid only when the pool has the cash.