News linked to this event type.
Odaily reports, according to Bloomberg, Anthropic warned in its IPO-related filings that its public advocacy for AI safety regulation and related remarks by executives could expose the company to risks such as pressure from the Trump administration and selective scrutiny. This risk is linked to multiple conflicts between the company and the Trump administration, including a dispute triggered by its demand to set safety restrictions on the use of its AI technology by the U.S. Department of Defense, as well as disagreements over the safety of the Mythos model and export controls.Anthropic also warned that even if other similarly situated companies are not treated the same way, Anthropic could still become a targeted focus of specific Trump administration departments. Future export restrictions and cybersecurity or biosecurity incidents triggered by AI models could all affect its product deployment, international expansion, and business growth. Anthropic also acknowledged that once the regulatory measures it advocates are implemented, they could also increase compliance costs, restrict product development and release, and slow its own growth. (Bloomberg)
Michael Saylor posted that the idea that artificial intelligence (AI) can attack crypto applications, and therefore there is no reason to hold Bitcoin, is like arguing that because AI can attack communication apps, there is no reason to speak English. Saylor used this to rebut the view that directly links AI's ability to attack applications with Bitcoin's value as a store of value.
the cloud desktop service of Japanese internet giant GMO Group suffered unauthorized access, with up to 26,739 servers potentially affected. In the ransom letter, hackers demanded payment in BTC and ETH, initially asking for $50 million, then reducing the demand to $1 million, while threatening to continue conducting anomalous transactions in compromised accounts and publicly disclosing user data. GMO Group representative Masatoshi Kumagai stated that the company refused to compromise and did not pay any funds; its crypto exchange GMO Coin confirmed that no abnormal operations were found in customer accounts. The hackers subsequently published some data and threatened to update it daily. The website domain hosting the leaked information was shut down in the early morning of October 28.
Odaily reports: According to on-chain detective Specter, the Bloom drainer stole nearly $1 million and moved the funds in a manner consistent with handling eight-figure amounts. The transaction patterns suggest the operation may have been automated, including repeated splitting, consolidation, and cross-chain transfers through thousands of addresses. The attacker used 2,152 unique routing and destination addresses, of which 1,326 were Solana addresses, 822 were EVM addresses, and 5 were Zcash addresses. The attacker also bridged to Zcash, with 26.099 ZEC entering the Sapling shielded pool.
Previously, 16 financial institutions, including KB Kookmin Bank, were also targeted by hackers, resulting in the leak of approximately 100,000 pieces of personal information such as national ID numbers, account numbers, and addresses. Police stated they would compare the modus operandi in the new and previous cases to verify any connections, without ruling out the possibility that the same attacker was responsible.
According to monitoring by Scam Sniffer, a user fell victim to an address poisoning attack, losing approximately $50,000 in assets.
Initia officials stated that, with support from the Initia Foundation, the 1:1 asset backing for assets affected by the October 23 security incident will be fully restored when the chain resumes operations. The Initia Foundation has approved funding to cover the reserve shortfalls for Noble USDC, WETH, and AUSD0 used as collateral for iUSD, amounting to up to 1.08 million USDC, 105 ETH, and 1.4 million AUSD0, respectively. The specific amounts remain subject to verification and require final transfer approval.
Odaily reports: South Korean cryptocurrency exchange Bithumb has stated that its internal mobile system used by employees for work and communications was breached by external parties, with some personal information stolen. The exchange is currently investigating the specific scope of impact, including whether customer information was involved.Bithumb discovered the breach on October 27 and has reported it to the Korea Internet & Security Agency and the Personal Information Protection Commission. The exchange emphasized that the compromised internal system operates independently from its trading platform, and that attackers cannot access customer crypto assets through this breach.As of now, no crypto asset losses have been reported, and the specific number of affected individuals and whether deposit and withdrawal services were impacted have not yet been disclosed. (CoinDesk)
SecondFi announced that the team discovered that for some SecondFi or Yoroi wallet users who held NIGHT at the time of the incident, their asset recovery balances did not fully display the recoverable amount of the stolen assets, resulting in some users receiving insufficient NIGHT compensation. The related shortfall will be sent to the user's new target wallet. Users who have already submitted an asset recovery application do not need to reapply, while those who have not yet applied can proceed normally. The system is expected to correct the recoverable balance today.
Odaily reports: Binance founder CZ posted on the X platform that four data breach incidents were reported today, involving Coinbase third-party service provider Amplitude, South Korean crypto exchange Bithumb, and South Korean traditional financial institutions Mirae Asset and Daishin Securities. Among them, the Amplitude security incident affected the contact information of some Coinbase users, but user funds were not affected.CZ noted that information such as names, emails, phone numbers, addresses, identity documents, and transaction records leaked from trading platforms may be used for phishing, SIM-swapping, and social engineering attacks.In response, CZ recommends that users set up separate email addresses and strong passwords for different trading platforms, prioritize the use of hardware security keys, Passkeys, or authenticator apps, avoid relying on SMS two-factor authentication, and enable security features such as withdrawal address whitelists and anti-phishing codes. At the same time, users should regularly check account login sessions and API key permissions, and be vigilant against scams impersonating customer service.CZ also reminded users that if a platform suffers a data breach, they should promptly change passwords, revoke unnecessary API keys, check withdrawal records, and be alert to phishing attacks carried out using leaked information. In addition, leaked home addresses and asset holdings information may give rise to real-world extortion or robbery risks, and users should avoid publicly disclosing their personal asset situation.
Zilliqa stated that the investigation into the recent security incident is ongoing. The affected components include the ZRC2 proxy contracts used by X-Bridge and certain liquidity pools, involving tokens such as zUSDT, SEED, kUSD, and Zoge. Zilliqa emphasized that the native ZIL and Zilliqa EVM networks remain unaffected. X-Bridge will continue to be suspended, and users are advised to avoid using the cross-chain bridge and affected liquidity pools for the time being.
In response to reports about a data breach, Coinbase stated that no data breach occurred at the company itself. The incident actually involved a security event at third-party analytics provider Amplitude, which affected the contact information of some Coinbase customers as well as data of other Amplitude clients.Coinbase said it has found no evidence of any unauthorized access to its internal systems, and customer funds were not affected. The company will notify affected customers and relevant regulators as required by law.
SlowMist CISO 23pds stated that the Coinbase data breach has been confirmed, with hackers obtaining contact information for over 70,000 users, although it has not yet been confirmed whether user passwords or funds were stolen.
According to Scam Sniffer monitoring, a suspected cryptocurrency theft incident has occurred: in under 4 hours, an attacker drained USDT, USDC, and ETH with a total value of approximately $1.2 million from over 100 wallets across Ethereum and BNB Chain, and has already converted all funds into ETH.
According to Yonhap News Agency, the South Korean Financial Supervisory Service has confirmed that a cybersecurity incident occurred at cryptocurrency exchange Bithumb, Mirae Asset Management, and Daishin Securities, with further investigations underway. Daishin Securities disclosed that the personal and credit information of 38,490 customers was compromised, while Bithumb reported that its internal mobile office system was accessed abnormally by unauthorized external parties and is currently analyzing the precise scope of the data breach. The South Korean Financial Supervisory Service has dispatched an on-site inspection team to Daishin Securities and has mandated that financial institutions strengthen their IT security measures.
Blockaid reported detecting an attack on the Tranche Vault associated with Valinor Digital on Avalanche. The attacker leveraged flash loans to mint artificially inflated tranche shares, then proceeded to redeem the vault’s remaining USDC. As of this post, the attacker had transferred approximately $1.01 million from the vault across roughly two transactions.
Solflare stated that a security incident involving its SOL staking service provider has impacted the Solflare validator node keys held by that provider, and an investigation is currently underway. As a result, Solflare validator nodes are temporarily unable to generate staking rewards. Solflare emphasized that user-delegated SOL is stored in staking accounts controlled by users' own keys, and user funds remain unaffected.
According to The Defiant, prediction market platform Myriad Markets confirmed that its internal admin wallet, used to automatically create and settle certain markets, was compromised. On October 26, the attacker manipulated the results of 10 prediction markets using the wallet and claimed rewards, involving topics such as the OpenAI and Anthropic IPOs, whether Base will issue tokens in 2026, and the U.S. midterm elections. Myriad subsequently revoked the wallet's administrative privileges and declared the related markets void.
Odaily report: Crypto hardware wallet manufacturer NGRAVE has issued a security warning, stating that it is currently facing a high-level cyber threat, and the team is actively monitoring and taking countermeasures.NGRAVE reminds users to be vigilant against phishing attacks carried out through SMS, emails, fake websites, and fraudulent customer service, and emphasizes that the official team will never ask users for their recovery seed phrase or Perfect Key.NGRAVE states that users' private keys are stored only offline in the ZERO hardware device. As long as the seed phrase has not been entered on a phone, computer, or webpage, such phishing attacks will not compromise the security of the private keys. The official team recommends that users manually type the official website domain name to avoid accessing phishing links.
Web3 infrastructure and payment network Diamante announced that a security incident occurred within the Diamante ecosystem, with malicious actors carrying out unauthorized operations. The team has coordinated with partners including exchanges, market makers, and liquidity providers to suspend affected withdrawals and transfers, and to restrict unauthorized asset transfers.