News linked to this event type.
Odaily News: The Finance Committee of the French National Assembly has passed an amendment that would require the declaration of self-custodial wallet crypto assets valued at or above €100,000 (approximately $112,000) at year-end, with non-declarers facing fines of up to €10,000 (approximately $11,000). The rule has not yet become law and may still be subject to changes.Harry Halpin, CEO of privacy infrastructure company Nym, stated that French tax authorities are suspected of selling taxpayer data to criminals, and the new declaration requirement could threaten the safety of asset holders. Rand Hindi, founder of privacy protocol Zama, called on French crypto asset holders to leave France, and those unable to leave should hire security for their families.The proposal comes amid a series of crypto-related robberies, kidnappings, and "wrench attacks" that have occurred in France in recent years. The committee had also passed measures treating crypto-to-stablecoin conversions as taxable sales and expanding the scope of crypto exit taxes, but the budget revenue portion was subsequently rejected by a vote of 31 to 3, and the related amendments will need to be resubmitted. (Decrypt)
former Mt. Gox CEO Mark Karpelès has publicly confirmed that a Ledger Flex purchased at Metapod in Singapore Changi Airport had a spy module implanted inside it. The device was bought by user Ben Yorke this summer and had never been used before being sent in for teardown due to suspicious scratches on its casing. Photos and videos of the teardown released by Karpelès show an additional circuit board and wiring hidden at the bottom of the device. It is a relatively new version of the implant, capable of eavesdropping on screen communications and other methods to steal users' seed phrases during setup. Previously, Ledger devices purchased through the Malaysian distributor CryptoBilis were also found to have been implanted, leading to the theft of over $86 million in assets. Devices purchased from official European distributors and in the Philippines have also been gradually discovered to show similar signs of implantation. The implants have progressively evolved from early hand-soldered modifications to more covert mass-produced circuit boards.
According to K33 Research, the US government transferred approximately 17,733 BTC to Coinbase Prime this week, including 12,267 BTC linked to the Bitfinex hack incident. Following the transfer, the government’s tagged holdings decreased from 324,527 BTC to 306,795 BTC. If untagged suspected government wallets are included, the total BTC transferred to Coinbase Prime reaches approximately 21,500. Analysts believe this transfer is highly likely a custody operation rather than a liquidation—Coinbase Prime has served as the custodian for the US Marshals Service since 2024. Coins associated with the Bitfinex case remain in the claims process, with the Department of Justice requiring restitution to victims in BTC; the no-sale order for the Strategic Bitcoin Reserve also only applies to fully confiscated assets. Additionally, roughly 1,200 BTC originating from FTX and HashFlare were transferred simultaneously and may be disbursed to victims in cash through compensation channels. Notably, the completion of the transfer of approximately 15,000 Bitfinex-claim-related BTC within two days suggests that a distribution plan or relevant rulings may be advancing.
According to official announcements, Payy has initiated a claims process for affected users following the cross-chain bridge contract hack on September 24, with a 30-day window for claim submissions. Eligible claims will be compensated in USDC on the Ethereum network. Meanwhile, Payy Wallet is currently suspended and will be completely shut down after the claims period concludes.
According to official disclosures from Ledger, its security team, Ledger Donjon, is investigating Ledger signing devices (hardware wallets) sold by the Southeast Asian distributor CryptoBilis. It has been confirmed that the affected devices contain unauthorized hardware implants. All confirmed financial losses are linked to devices sold through CryptoBilis, with no evidence yet of theft from devices purchased through other channels. CryptoBilis has now suspended sales of Ledger devices. Investigative analysis reveals that the implant is located inside the device casing and is designed to read data displayed on the screen. During the user initialization setup, the implant decodes the 24-word mnemonic phrase displayed on the screen via a microcontroller and transmits it externally using a pre-configured eSIM card over an LTE network. The implant operates as an independent component and does not tamper with the Secure Element or the Ledger operating system, nor does it alter transactions or signatures.
According to official disclosures from Anthropic, the company recently deployed a new defense mechanism that reduced the data acquired through distillation attacks targeting its Claude model by 90% to 99%. Illegal distillation attacks primarily leverage networks of fake accounts to covertly extract frontier model capabilities for low-cost replication, constituting a cybersecurity and national security risk.
Odaily News: Quit, Yuga Labs' Vice President of Blockchain, posted on X platform that as Blur announces it will discontinue its frontend on November 12, users are advised to immediately revoke NFT approvals to Blur smart contracts.Quit stated that their investigation has not yet found any exploitable vulnerabilities in Blur's existing contracts, but the contracts are upgradeable and carry the risk of malicious modification in the future. Currently, NFTs worth at least $10 million remain approved to Blur contracts, and their security depends on the Blur team's operational security capabilities. Quit recommends users revoke relevant approvals through tools such as revoke.cash to guard against potential contract attacks or malicious upgrade risks.
According to an official Aptos tweet, the Aptos mainnet has officially launched the Encrypted Mempool feature. Users can choose to encrypt pending transactions before block finalization, keeping transaction call functions and inputs encrypted prior to execution, while the sender address and fee information remain publicly visible. This feature is primarily designed for institutions (to avoid prematurely exposing large order intentions), traders (to reduce MEV arbitrage risks), and AI agents (to ensure transaction inputs remain private until execution).
Odaily News: According to Bitcoin News monitoring, the attacker behind the Ledger supply chain theft has moved nearly 3,000 ETH through Tornado Cash in three separate transactions, and transferred the funds into the Zcash privacy pool before converting them to USDC. Investigator @YFarmX stated that despite the use of privacy tools, they have traced 108 transactions completed through Zcash by exact value matching. An estimated $2.85 million in stolen USDC is still held in 3 wallets, and Circle may be able to freeze the related funds. Meanwhile, Tether is reported to have frozen $10 million in stolen USDT; wallets associated with the attacker still hold approximately $38.6 million in ETH and $16.9 million in BTC.
multiple blockchain analytics firms estimate attackers stole as much as $94.5 million in assets from hundreds of wallets tied to Ledger devices sold by authorized reseller CryptoBilis. Ledger has not yet confirmed this total.Hardware wallet company Ledger discovered that at least one affected device had unauthorized hardware implanted inside it; stablecoin issuer Tether has frozen $10 million in USDT linked to the theft, and investigators are still tracing the flow of funds.Ledger advises CryptoBilis customers not to set up devices they have not yet used; customers already using affected devices should move their assets to new devices and generate new recovery phrases. (CoinDesk)
Odaily News: According to Bitcoin News monitoring, the Lightning Development Kit (LDK) has released a security update fixing vulnerabilities that could allow malicious nodes to steal funds. The most severe vulnerability involves Lightning channel reconnection. According to Bitcoin Optech, malicious nodes could falsely claim they did not receive previously confirmed channel updates. The vulnerable LDK software could then sign conflicting commitment transactions without properly recording the relevant transactions, allowing attackers to reclaim Bitcoin after forwarding payments are completed. LDK versions 0.2.7 and 0.1.13 have fixed this vulnerability. As of the reviewed disclosure information, no confirmed losses caused by these specific vulnerabilities have been found.
Ontology has announced the conclusion of its investigation into a security incident involving an ecosystem project, and its mainnet has resumed block production and returned to normal operation. Ontology's core network infrastructure remains secure, and no funds were lost on the network itself. The previous suspension of block production was a precautionary measure taken by Ontology in coordination with consensus nodes to facilitate the investigation and mitigate potential risks.
据 QCP Group 市场报告，BTC 在经历去年 10 月最大单日清算事件一周年后表现相对稳健，尽管市场对美国政府转移大量 BTC 及 Ledger 遭黑客攻击的消息有所担忧，价格仍维持区间震荡。BTC 多次冲击 87,000 美元未果，但下方 80,000 美元支撑较为稳固。期权市场方面，隐含波动率维持高位，看跌期权溢价收窄，市场整体偏向等待突破而非防御性布局；若 BTC 有效突破 87,000 美元，下一目标位或指向 94,000 美元。 值得关注的是，市场存在一笔较大规模的 10 月 30 日到期 90,000/95,000/100,000 美元看涨蝶式期权多头头寸，为当前月末最大持仓集中点。本周宏观面将迎来关键考验，周三（10 月 14 日）美国 CPI、周四（10 月 15 日）PPI 数据相继公布，周五（10 月 16 日）美联储主席 Warsh 将在 IMF-世界银行年会发表讲话，市场目前对 10 月加息的概率定价约为 17%，上述数据及政策信号或成为 BTC 方向选择的重要触发点。
Odaily Report: On-chain detective ZachXBT retweeted the XRP Ledger Foundation's explanation regarding a previous critical security vulnerability and criticized its bug bounty mechanism.ZachXBT stated that XRPL, which holds billions of dollars in assets, only paid a $250,000 reward to the white hat hacker who discovered the critical vulnerability. He believes that this level of reward could weaken security researchers' incentive to proactively report vulnerabilities, and may even encourage attackers to exploit vulnerabilities for massive gains rather than responsibly disclosing the issue.Previously, the XRP Ledger Foundation confirmed that the vulnerability could theoretically bypass the XRP total supply limit, but no additional XRP was found to have been created as a result, and the vulnerability has been fixed through version 3.4.1.
Odaily News: The Financial Stability Board (FSB) has stated that cross-border stablecoin regulation and crisis management mechanisms remain immature or have yet to be established. FSB Chair Andrew Bailey noted that its 2025 review shows that only 11 out of the 28 jurisdictions surveyed have completed building stablecoin regulatory frameworks.The FSB warned that stablecoin runs could transmit to traditional financial markets through forced sales of reserve assets and bank deposit withdrawals. For multi-issuer stablecoins, redemption demands could concentrate on a single issuer, while reserve assets are distributed across different jurisdictions — a similar risk that European Central Bank (ECB) President Christine Lagarde had previously flagged.The FSB has finalized practices for the responsible adoption of AI in the financial sector, covering organizational governance, AI development and deployment, cybersecurity, and third-party service risks. Andrew Bailey stated that AI-driven sophisticated cyberattacks could undermine the resilience of critical financial institutions and market infrastructure. The FSB has submitted related correspondence to the G20 Finance Ministers and Central Bank Governors meeting. (Cointelegraph)
OneKey founder Yishi posted on X that, following recent reports of asset theft from multiple users who had purchased Ledger hardware wallets from CryptoBilis, OneKey has revoked CryptoBilis's status as an authorized dealer, ceased adding new dealers, and will conduct a comprehensive review of all existing distributors.
OneKey founder Yishi posted on X platform that in response to recent incidents where Ledger hardware wallets purchased by some users through CryptoBilis were found to have unauthorized hardware implanted, leading to asset theft, OneKey has not yet received any reports of its own users experiencing asset theft as a result. However, out of security concerns, OneKey has terminated CryptoBilis's authorized dealer status.OneKey also announced that it will immediately stop accepting new dealers and will re-conduct qualification reviews for all existing authorized dealers. Additionally, for users who purchased OneKey hardware wallets through CryptoBilis between March 1, 2026 and the date of this statement, regardless of device model or usage status, they may apply for a free replacement. The application deadline is December 31, 2026.Furthermore, Yishi advised users who have already used the affected devices to treat their original seed phrases as potentially compromised and to transfer their assets to wallets using new seed phrases as soon as possible, without waiting for replacement devices to arrive.
According to official statements, hardware wallet manufacturer Ledger has released a 72-hour update regarding the security incident involving Southeast Asian distributor CryptoBilis. Ledger stated that it is currently cooperating with relevant law enforcement agencies, noting that the number of affected devices is limited and that its internal systems and official direct sales channels remain unaffected. To date, all confirmed cases linked to the disclosed fund theft incidents involve devices sold through distributor CryptoBilis; CryptoBilis has confirmed that it has ceased sales of all hardware wallets.
Odaily News: The XRP Ledger Foundation posted on the X platform to clarify the recent XRP Ledger security vulnerability incident, stating that the vulnerability could potentially have been used to bypass the limit that fixes XRP's total supply at 100 billion, but it was fixed two weeks ago via version 3.4.1. Furthermore, upon verification, no new XRP was found to have been created, and the total amount of XRP currently circulating on the ledger is approximately 99.986 billion.The Foundation stated that the vulnerability would have required hundreds of deliberately constructed operations to trigger, and normal payment transactions would almost never involve it. In the future, it will strengthen formal verification, AI adversarial testing, security research collaboration, and bug bounty programs with RippleX and the community. Regarding the fix process, the Foundation explained that publicly releasing a patch could allow attackers to use AI to accelerate vulnerability analysis. To address this situation, the XRPL community engaged in coordination. Participating parties including the XRP Ledger Foundation, RippleX, core developers, and validators reached a social consensus and agreed to adopt the approach of directly releasing the fix. In addition, version 3.4.1 only became a version the network was required to adopt after going through the normal amendment voting process and receiving support from more than 80% of validators for two consecutive weeks. Protocol changes still need to be completed through the amendment mechanism.Previously, RippleX engineering lead J. Ayo Akinyele also posted on the X platform, stating that he attaches great importance to the recently disclosed critical vulnerability in the XRP Ledger (XRPL) payment engine. This vulnerability is a serious security issue that has existed in the codebase for more than 10 years and could theoretically lead to the over-creation of XRP, breaking through the fixed supply cap. However, before the vulnerability could be exploited, it was discovered by the security research firm Veria AI through Ripple's bug bounty program.
Trump stated that Russia and Ukraine have agreed to immediately halt attacks on each other's energy facilities, but the details of the agreement have not been disclosed and Russia has not confirmed it. While Zelenskyy expressed support for a ceasefire, he also noted that Russian forces continue to strike Ukrainian energy facilities.