News linked to this event type.
Odaily News: The XRP Ledger Foundation posted on the X platform to clarify the recent XRP Ledger security vulnerability incident, stating that the vulnerability could potentially have been used to bypass the limit that fixes XRP's total supply at 100 billion, but it was fixed two weeks ago via version 3.4.1. Furthermore, upon verification, no new XRP was found to have been created, and the total amount of XRP currently circulating on the ledger is approximately 99.986 billion.The Foundation stated that the vulnerability would have required hundreds of deliberately constructed operations to trigger, and normal payment transactions would almost never involve it. In the future, it will strengthen formal verification, AI adversarial testing, security research collaboration, and bug bounty programs with RippleX and the community. Regarding the fix process, the Foundation explained that publicly releasing a patch could allow attackers to use AI to accelerate vulnerability analysis. To address this situation, the XRPL community engaged in coordination. Participating parties including the XRP Ledger Foundation, RippleX, core developers, and validators reached a social consensus and agreed to adopt the approach of directly releasing the fix. In addition, version 3.4.1 only became a version the network was required to adopt after going through the normal amendment voting process and receiving support from more than 80% of validators for two consecutive weeks. Protocol changes still need to be completed through the amendment mechanism.Previously, RippleX engineering lead J. Ayo Akinyele also posted on the X platform, stating that he attaches great importance to the recently disclosed critical vulnerability in the XRP Ledger (XRPL) payment engine. This vulnerability is a serious security issue that has existed in the codebase for more than 10 years and could theoretically lead to the over-creation of XRP, breaking through the fixed supply cap. However, before the vulnerability could be exploited, it was discovered by the security research firm Veria AI through Ripple's bug bounty program.
Trump stated that Russia and Ukraine have agreed to immediately halt attacks on each other's energy facilities, but the details of the agreement have not been disclosed and Russia has not confirmed it. While Zelenskyy expressed support for a ceasefire, he also noted that Russian forces continue to strike Ukrainian energy facilities.
According to Cointelegraph, the Tampered Ledger device intrusion incident has spread from Asia to Europe; security firm Veria Labs has utilized AI to uncover a hidden overflow vulnerability in the underlying code of XRP that could enable the excessive issuance of 18 trillion tokens.
Bitcoin News posted on X platform that, according to reports, the first Ledger Stax hardware wallet found to contain an unauthorized hardware implant is capable of transmitting users' seed phrases to attackers. The suspected modification includes a Nordic nRF9151 4G/LTE cellular modem, which may be used to transmit stolen seed phrase data and does not exist in genuine Ledger devices; additional unauthorized components were also installed next to the modem. A cable runs across the battery and connects to an antenna hidden inside the back cover.
According to a post by Bitcoin News on X, Ledger stated that the number of affected devices is limited, and as of now, all confirmed cases related to the October 9 fund theft incident involve devices sold through Southeast Asian distributor CryptoBilis. Ledger's internal systems and direct sales channels were not affected. CryptoBilis has suspended all hardware wallet sales, and Ledger is cooperating with law enforcement and contacting affected customers. Ledger advises CryptoBilis buyers not to initialize unused devices; users who have already completed initialization should transfer their funds to a new wallet using a new seed phrase. The investigation is still ongoing.
Odaily News: The LBTC-to-Bitcoin redemption operation on Bitcoin sidechain project Liquid Network has been suspended for 35 days. As of October 11, 2026, the project maintains an 86% support rate. Attackers previously exploited a vulnerability in the Elements software to steal nearly 4,000 Bitcoins, of which approximately 3,400 have been returned. The wallet still holds 598.5 Bitcoins, worth $49.69 million.Blockstream rejected the attackers' demand for a 10% bounty and demanded the immediate return of the remaining Bitcoin. Liquid Network stated that an independent external security audit of Elements v23.3.4 is underway, and the Liquid Federation has simultaneously updated the PAK list and placed all redemption keys in cold storage.There is currently no specific date for resuming redemption operations. Some LBTC holders have migrated funds through applications such as Sideswap and Sideshift.ai. One user reported that due to insufficient liquidity, the migration took several weeks, with spreads and fees totaling approximately 5%. (Bitcoin.com News)
US President Trump announced an "energy truce" agreement with Russia, aimed at halting attacks on energy infrastructure, easing geopolitical tensions, and preventing the escalation of humanitarian crises.
PaperTrade posted on X stating that trading volume in the first 6 hours after launch exceeded stock market trading volume; one day after launch, PaperTrade has become a trading platform supporting 1000x leverage, with liquidity pool (LP) size reaching $5 million and $25 million in rewards distributed to staking users.In response to community concerns about the fair launch mechanism and BTC/ETH market manipulation, PaperTrade stated that due to the need to prevent frontend congestion and spam request attacks, small orders cannot enjoy exactly the same priority as large orders, and the team has maximized fairness within these constraints. Some users exploiting the Hyperliquid BBO mechanism to manipulate BTC/ETH was not an oversight in mechanism design, but rather resulted from opening a higher OI cap during the initial launch period to alleviate queuing pressure. As traffic has declined, the team has begun tightening position limits at both the on-chain and relay levels to reduce the profit space for manipulation.PaperTrade added that no system can completely eliminate manipulation, and the goal is to make attacks nearly unprofitable through parameter adjustments, noting that in the relevant incidents, some users ultimately returned most of their profits to the platform due to persistent manipulation attempts.
According to monitoring by on-chain analyst PeckShield (@PeckShieldAlert), CryptoBillis Ledger Drainer, which previously stole over $90 million in crypto assets, transferred approximately $3.89 million in crypto assets to Binance deposit addresses via the Tron network over the past two days, including 3.685 million USDT and 615,000 TRX (approximately $204,000).
Odaily reports, according to monitoring by Bitcoin News, @0xJohannes stated that a Ledger hardware wallet purchased from an official European reseller several weeks ago was found to contain an unauthorized spy implant device. Suspicious wiring not present in genuine Ledger hardware was discovered inside the device, indicating it may have been physically tampered with before being sold. The implant appears to be an older version, as newer versions typically conceal the components behind the screen. Funds in the affected device have not been stolen thus far. Suspected cases have currently been reported in Asia, South America, and Europe. If the original secure element remains intact, Ledger's Genuine Check software cannot detect unauthorized physical modifications.
Odaily News: Crypto analyst Darkfost posted that following the security incident involving Ledger reseller CryptoBilis, other potentially related reseller names have emerged in community discussions, including some Lazada merchants.Darkfost stated that the full scope of the incident remains difficult to confirm. Although Ledger has confirmed a connection to the CryptoBilis incident, it is still unclear whether CryptoBilis is the only affected reseller. He compiled a list of potentially risky Ledger resellers, noting that due to their regional proximity, there is a possibility that their supply chains were compromised simultaneously. However, Darkfost emphasized that these assessments are speculative and have not yet been confirmed.Darkfost advised that if users have purchased Ledger devices from the relevant resellers within the past 6 months, they may consider moving their assets to other secure devices before the investigation concludes. He also noted that users can refer to a guide published by security researcher MagicalTux to check their Ledger devices for signs of tampering.
Odaily reports: Hyperliquid News has disclosed that ETH's trading volume over the past 24 hours has surpassed BTC, reaching approximately $1.1 billion. Analysts suggest that this increase in ETH trading volume may be related to a recent incident in which PaperTrade was allegedly exploited through its mechanism, and the associated trading activity may have driven up demand for ETH in the market.Community user boblob previously disclosed that two wallets were suspected of actively "attacking" the PaperTrade platform, using trades worth approximately $20 million to briefly trigger a small fluctuation in ETH price on the Hyperliquid platform (about 10-20 basis points), and established a "9-figure" long position on PaperTrade. boblob further added that there are clear issues with the current protocol that need to be fixed as soon as possible, otherwise it could affect the protocol's long-term sustainability.Crypto trader Rune pointed out that PaperTrade's official documentation has in fact already disclosed that its pricing mechanism carries an "attack" risk, noting that the main risk at the protocol level lies in the use of Hyperliquid's order book BBO (Best Bid and Offer) for price manipulation. This risk involves unresolved price manipulation pathways, contract economic mechanisms and risk exposure control, as well as operational-level protective measures and permission management mechanisms.
Ledger admitted that unauthorized hardware implant attacks caused losses to users' crypto assets, with the amount expected to exceed $86 million.
Odaily reports: Bitcoin News posted on X that hardware wallet manufacturer COLDCARD stated its official X account had published a fake security advisory directing users to a phishing website disguised as a wallet migration guide; the post has been deleted, but no corresponding login, session, or access records were found. COLDCARD said its credentials and offline two-factor authentication remain secure, leading it to suspect that the attacker may have obtained X platform-level or administrator privileges, and it has asked X's security team to investigate urgently. The company also mentioned unverified reports of X administrator accounts being sold on darknet markets, but has not yet found a connection to this incident.
Odaily reports: Crypto trader Rune stated on X platform that PaperTrade's official documentation has actually disclosed a "vulnerability" risk in the protocol-level pricing mechanism. According to the document screenshots he shared, attackers can exploit the BBO (Best Bid and Offer) of the Hyperliquid order book for price manipulation. This risk involves unresolved price manipulation paths, contract economic mechanisms and risk exposure controls, as well as operational-level protective measures and permission management mechanisms.Additionally, Rune retweeted a post by community user boblob, which revealed that two wallets were suspected of actively exploiting and "attacking" the PaperTrade platform, conducting trades worth approximately $20 million that briefly caused ETH price fluctuations of about 10-20 basis points on the Hyperliquid platform. boblob further added that the obvious issues currently present in the PaperTrade protocol need to be fixed as soon as possible, otherwise they may affect the protocol's long-term sustainability.
Odaily News: J. Ayo Akinyele, Engineering Lead at RippleX, posted on X platform stating that they take the recently disclosed critical vulnerability in the XRP Ledger (XRPL) payment engine very seriously. The vulnerability is a severe security issue that has existed in the codebase for over 10 years and could theoretically lead to the over-creation of XRP, breaching the fixed supply cap. However, the vulnerability was discovered by security research firm Veria AI through Ripple's bug bounty program before it could be exploited.J. Ayo Akinyele further added that the Ripple team quickly developed and tested a fix, working closely with validator nodes to complete the network upgrade, and patched the vulnerability before its public disclosure. Currently, AI is changing the speed of vulnerability discovery, and XRPL needs to further enhance its security response capabilities. RippleX will strengthen its bug bounty program, expand AI-assisted vulnerability hunting and adversarial testing, review long-standing code in the payment engine, consensus mechanism, and P2P network, while advancing formal verification of critical modules and reducing potential risks through systematic security hardening. The goal is not just to fix a single vulnerability, but to identify and eliminate potential risks in XRPL's legacy code, making the network more difficult to attack.
Trump stated that attacks on Saudi Arabia are unacceptable, emphasizing that Saudi Arabia has the capability to defend itself. He revealed that the US has established contact with the Houthi forces and will communicate with the Saudi Crown Prince.
According to Bernama, a man in Perak, Malaysia, reportedly had his crypto wallet compromised, resulting in losses of approximately 12.47 million ringgit (roughly $3.05 million USD). The Perak state police chief stated that the victim discovered on the afternoon of October 9 that his digital assets had been transferred without authorization. Preliminary investigations indicate that the transactions were conducted via blockchain networks. Law enforcement is collaborating with the Cryptocurrency Unit of the Commercial Crime Investigation Department to trace the flow of funds and investigate those involved. The case is currently being investigated under Section 420 of the Malaysian Penal Code concerning fraud, while the specific attack method remains undisclosed.
Odaily reports: Bitcoin News posted on X platform that Ledger has confirmed at least one affected user's device contained an unauthorized hardware implant, and is currently investigating the matter with relevant authorities and SEAL_911. Hardware wallet reseller CryptoBilis has suspended sales of all hardware wallets. Ledger stated there is currently no indication that its internal security infrastructure, systems, or services have been compromised. Ledger advises users who purchased devices from CryptoBilis and have not yet completed setup to refrain from doing so; users who have already completed setup should consider generating a new seed phrase and transferring their Bitcoin to a new hardware wallet. Ledger also stated it is developing additional tamper-proof protections.
Hardware wallet manufacturer Ledger stated that its team attaches great importance to the relevant security report and is actively investigating the specific issues. According to currently available information, the stolen funds are suspected to be limited exclusively to devices sold through the Southeast Asian distributor CryptoBilis. There is currently no indication that Ledger's security infrastructure, systems, or services have been compromised.