News linked to this event type.
According to CTV News, Toronto police announced the arrest of seven suspects, three of whom are members of the Canadian Armed Forces (CAF), in connection with a violent abduction on July 25 near Finch and Bayview Avenue. The victim was forcibly handcuffed and assaulted, while suspects attempted to extort cryptocurrency assets and commercial security system access credentials. Police have laid a total of 82 criminal charges, including extortion and kidnapping, illegal possession of firearms, and drug trafficking. Searches yielded 3D-printed firearms, GPS tracking devices, large quantities of methamphetamine and cocaine, and approximately 2,500 rounds of ammunition suspected to have been stolen from the military. The implicated service members, Fernando (22) and Moreau (29), both reserve artillery personnel with the 7th Toronto Battalion, have been suspended from military duty. The Department of National Defence stated that military police are cooperating with the investigation and will strengthen ammunition management and tracking protocols.
According to Cointelegraph, South Korea's Financial Services Commission (FSC) plans to implement stricter cybersecurity requirements for financial institutions and cryptocurrency exchanges. A prior industry review revealed that out of 555 financial institutions, 130 had cybersecurity vulnerabilities, resulting in the exposure of approximately 100,000 customer personal information records. The affected institutions include Streami, the operator of Gopax, and crypto exchange Prabang, which disclosed that it was hacked on October 2, leading to a customer data breach.
South Korea's Financial Services Commission (FSC) has announced plans to enhance threat monitoring, increase the frequency of security assessments, and strengthen executive accountability. An industry review revealed that 130 out of 555 financial companies have cybersecurity deficiencies, involving 16 prior security incidents.The FSC stated that the affected institutions had approximately 100,000 customer records exposed in total, including names, contact information, and ID numbers. Affected institutions include Streami, the operator of Gopax, and cryptocurrency trading platform Prabang, which previously disclosed that a hack on October 2 resulted in the leak of some customers' personal information.Under the proposed reforms, large financial institutions would undergo vulnerability assessments at least twice a year, and regulators also plan to strengthen information sharing and consider using AI to monitor the security posture of smaller companies. In the event of urgent threats, regulators may also conduct additional inspections beyond routine assessments. Authorities are still investigating whether the incidents involved AI or were carried out by the same attacker. (Cointelegraph)
UNCX Network officially disclosed that, following the earlier security incident involving the Vesting V2 token vesting contract affecting multiple blockchains, the team has taken emergency measures to contain further attacks. The incident is limited to UNCX Vesting V2, and all liquidity provider (LP) lockup contracts as well as legacy token vesting contracts remain unaffected.
According to on-chain investigator vxdb, the Gamdom platform was targeted in a security attack. Preliminary data indicates that attackers stole approximately $2.2 million worth of assets across EVM-compatible chains, including Ethereum, BSC, Polygon, Arbitrum, and Optimism. Additionally, the Solana network suffered losses of around $965,000, while the TRON and Bitcoin networks each lost approximately $375,000 and $668,000, respectively. The total value stolen across all chains now exceeds $4.2 million.
Bitcoin News posted on X that Mark Karpeles has launched a webpage to document reported cases of Ledger hardware implants, compiling cases he has reviewed and verified through public reports and images shared on X. The database also allows users to submit new cases to track the potential scope of the ongoing Ledger supply chain security incidents.
Odaily News: According to Bitcoin News monitoring, Bitcoin News released a podcast in which former Mt. Gox CEO Mark Karpelès and Foundation CEO Zach Herbert discussed the largest supply chain attack in crypto industry history. Mark Karpelès stated that he discovered the spy implant 3 weeks before the funds were stolen and contacted Ledger, but received no response. The implant had a built-in hidden cellular modem that could directly read the seed phrase on the screen and passed Ledger's own checks; even setting a passphrase could not prevent the seed phrase from being stolen. Mark Karpelès said that with $5 million, he could create an implant that would only be detectable through X-ray. The episode also discussed the hardware wallet reseller model, the Malaysian reseller behind the attack, on-chain tracking of stolen crypto assets, the spread of the attack to Europe, why Trezor was not targeted, hardware wallet security, and multi-party computation solutions. The episode timeline shows that the amount stolen from hardware wallets reached $100 million, with $86 million transferred out within 24 hours.
According to Cointelegraph, Ethereum researcher Justin Drake warned that the rapid advancement of AI could accelerate mathematical attacks against the Elliptic Curve Digital Signature Algorithm (ECDSA), potentially breaking existing cryptographic systems within months under the worst-case scenario, and called on the industry to initiate "bunker mode"—transferring assets to new addresses with previously unexposed public keys to mitigate risk. Several industry insiders, however, expressed reservations. Coinbase Chief Cryptographer Yehuda Lindell stated there is currently "no evidence" that the mathematical assumptions underpinning ECDSA have been weakened; Trezor Bitcoin analyst Lucien Bourdon similarly noted that migrating assets could backfire and inadvertently create opportunities for scams. MetaMask founder Taylor Monahan was even more direct, asserting that if elliptic curve cryptography were truly compromised, "the entire world would go to zero," rendering bunker mode ineffective. Meanwhile, Ethereum has laid out a post-quantum roadmap based on hash-based signatures and ZK proofs, while public blockchains such as Solana and NEAR are also exploring their own quantum-safe alternatives, though concrete deployment timelines remain unset.
Odaily News: According to monitoring by Bitcoin News, German Ledger user @jayr_crypto reports receiving another forged letter this week. The letter impersonates Ledger, claiming that new regulations require users to register a Bitcoin wallet through a service called ZenLedger by October 31. The letter uses Ledger's official branding elements, references German financial regulators, and includes a QR code that directs users to a so-called mandatory registration process. The user believes that addresses exposed in a previous data breach are being used to conduct targeted attacks against Ledger users. In the same week, Ledger coordinated with MediaMarktSaturn to suspend sales of its hardware wallets across a European retail network spanning 11 countries and more than 1,000 stores. It was previously reported that Ledger devices purchased from European retailers were found to contain malicious spy implants. Ledger separately confirmed that compromised devices sold by a distributor in Southeast Asia contained implants capable of stealing recovery phrases and transmitting them via cellular networks. Ledger has not yet confirmed that European devices were compromised. Ledger users are currently facing physical supply chain tampering and targeted phishing attacks exploiting home addresses. Do not scan suspicious QR codes or enter recovery phrases.
According to Bloomberg, the Brooklyn District Attorney's Office has successfully dismantled a transnational cryptocurrency fraud network centered in Eastern Europe that has long targeted U.S. users, stealing tens of millions of dollars in total. The operation shut down 241 websites associated with crypto scams and seized 112 servers hosted by companies in Eastern Europe and the United States.
TRON founder Justin Sun recently gave an exclusive interview to Bonnie Blockchain, making it rare for him to open up about his personal upbringing and industry judgments. Sun revealed that at age nine, he was sent to boarding school by his parents, who later divorced, forcing him to live independently from that point onward. He summarized this experience as "extreme loneliness is also a form of freedom"—while most people do not truly make decisions for themselves until they are 18 or even 30, he began doing so at age nine. This premature independence shaped the underlying mindset behind his later audacious moves, such as paying $6.2 million for an absurdly priced banana, signing deals with Moon, and bidding on a lunch with Warren Buffett. Sun issued a warning regarding Quantum Threat Day (Q-Day), stating that if quantum computers crack Satoshi Nakamoto's early public keys, approximately one million BTC could be unlocked, delivering a catastrophic impact on the market—a risk he believes Wall Street and institutions like BlackRock have severely underestimated. While the Bitcoin community has been slow to upgrade, TRON has already deployed NIST post-quantum cryptography standards on its testnet. Sun also established the "Justin Sun Award," offering up to $1 million in rewards through a vulnerability bounty model for major mathematical breakthroughs, open to both humans and AI, with OpenAI already securing one of the top prizes.
According to monitoring by CryptoQuant analyst nocoffeenobrain, coins with a holding age of 1–3 years and over 3 years began showing signs of activity as early as late September, coinciding with BTC prices rising from the mid-$70,000 range to the mid-$80,000 range. Following the recent Ledger hack, which prompted numerous users to migrate assets to new signing devices and replace their seed phrases, the 7-day moving average is expected to climb further over the next few days. The analyst noted that a similar pattern occurred previously: during January to February this year, when BTC dropped from $90,000 to the mid-$60,000 range, and between July and August while BTC consolidated around the mid-$60,000 range, both of these holding age cohorts exhibited synchronized activity.
According to Ping An Bincheng, the Bincheng Public Security Bureau in Shandong, China, recently cracked the region's first virtual currency theft case, apprehending suspect Chen and placing him under criminal detention in accordance with the law. Case details reveal that a local resident named Xie reported that 1,300 USDC stablecoins and NFT digital collectibles valued at tens of thousands of yuan were stolen from his digital wallet without any transfer alerts or phishing links. Through on-chain fund tracing and police-enterprise cooperation for account analysis, investigators ultimately identified and arrested suspect Chen, who was hiding in Fengyang County, Anhui Province. Upon arrest, authorities leveraged blockchain data's tamper-proof nature and complete transaction trail to secure evidence. The suspect truthfully confessed to the crime, and his family has fully compensated the victim for all losses. The police noted that virtual assets are protected by law and that on-chain activities are not immune to legal jurisdiction; users must securely safeguard their private keys and seed phrases.
According to The Information, citing sources familiar with the matter, OpenAI is in early-stage acquisition talks with New York-based software security firm Trail of Bits, with the deal size currently undisclosed. The move aims to expand OpenAI’s cybersecurity business. Trail of Bits focuses on open-source software vulnerability detection and remediation, and has conducted security audits for crypto projects such as Uniswap, Aave, and Worldcoin. Prior to this, both parties jointly launched the open-source software security initiative “Patch the Planet” in June.
Odaily News: According to monitoring by Bitcoin News, well-known hardware security researcher and computer engineer Joe Grand (social media account @joegrand, also known as "Kingpin") stated that in August 2025, a man in Thailand contacted him, claiming to have discovered a compromised Ledger Nano X. The man had previously purchased a cheap Ledger device online to replace the battery in his existing device. After taking the device apart, he found that it contained a smaller battery, unauthorized circuitry, extra wiring, and an antenna. After the man posted his findings on Reddit, he reportedly did not receive much attention from local police, and subsequently contacted Grand to launch an investigation. This discovery came more than a year before the Ledger supply chain attack sparked major public controversy this week; according to reports, nearly $100 million in cryptocurrency was stolen this week.
Hardware wallet manufacturer Trezor has announced that, in light of recent supply chain security incidents, the company has decided to reduce the number of its resellers in order to conduct more effective vetting of its partners.Trezor emphasized that there is currently no evidence suggesting its devices have been compromised, and that this adjustment is a precautionary measure taken out of an abundance of caution.
According to on-chain analyst PeckShield (@PeckShieldAlert), hackers illicitly minted 19 million $THEO tokens on the Base network, converted them into 700.8 ETH (approximately $1.76 million), and transferred the funds to the Ethereum network via a cross-chain bridge. As a result, the price of the $THEO token plummeted by 92% within 24 hours.
Odaily News: Crypto hardware manufacturer Ledger SAS is reviewing its consumer-facing device sales policies and processes. This follows reports that some hardware wallets were implanted with spyware, leading to the theft of approximately $90 million in cryptocurrency. Ledger Chief Technology Officer Charles Guillemet said on Tuesday that the company is also evaluating tamper-proof protections for its devices. He reminded users who suspect their devices have been tampered with to consult Ledger's published security guidelines before disassembling their hardware wallets themselves, and to send any suspicious devices to Ledger for further inspection.
Odaily News: The Finance Committee of the French National Assembly has passed an amendment that would require the declaration of self-custodial wallet crypto assets valued at or above €100,000 (approximately $112,000) at year-end, with non-declarers facing fines of up to €10,000 (approximately $11,000). The rule has not yet become law and may still be subject to changes.Harry Halpin, CEO of privacy infrastructure company Nym, stated that French tax authorities are suspected of selling taxpayer data to criminals, and the new declaration requirement could threaten the safety of asset holders. Rand Hindi, founder of privacy protocol Zama, called on French crypto asset holders to leave France, and those unable to leave should hire security for their families.The proposal comes amid a series of crypto-related robberies, kidnappings, and "wrench attacks" that have occurred in France in recent years. The committee had also passed measures treating crypto-to-stablecoin conversions as taxable sales and expanding the scope of crypto exit taxes, but the budget revenue portion was subsequently rejected by a vote of 31 to 3, and the related amendments will need to be resubmitted. (Decrypt)
former Mt. Gox CEO Mark Karpelès has publicly confirmed that a Ledger Flex purchased at Metapod in Singapore Changi Airport had a spy module implanted inside it. The device was bought by user Ben Yorke this summer and had never been used before being sent in for teardown due to suspicious scratches on its casing. Photos and videos of the teardown released by Karpelès show an additional circuit board and wiring hidden at the bottom of the device. It is a relatively new version of the implant, capable of eavesdropping on screen communications and other methods to steal users' seed phrases during setup. Previously, Ledger devices purchased through the Malaysian distributor CryptoBilis were also found to have been implanted, leading to the theft of over $86 million in assets. Devices purchased from official European distributors and in the Philippines have also been gradually discovered to show similar signs of implantation. The implants have progressively evolved from early hand-soldered modifications to more covert mass-produced circuit boards.