News linked to this event type.
According to Onchain Lens monitoring, the suspected hacker behind the reported $90 million Ledger reseller incident has deposited 430.2 ETH, worth $1.07 million, into Tornado Cash through 4 wallets. After Tether froze the related funds, the hacker swapped USDT for USDD through SUN.io and USDD's PSM, with some funds also flowing into Binance hot wallets.The hacker's wallet tracked by Arkham currently holds a total of $70.6 million in assets, including 11,406 ETH worth $28.35 million; 213.371 BTC worth $17.65 million; 13.646 million USDD worth $13.65 million; and 10.909 million USDT worth $10.91 million. Onchain Lens is calling on Binance to investigate these transfers and freeze accounts associated with the stolen funds as soon as possible.
Odaily News — According to monitoring by Bitcoin News, former Mt. Gox CEO Mark Karpelès may have inadvertently triggered a coordinated transfer of funds across multiple wallets after publicly disclosing physical tampering with Ledger devices equipped with hidden surveillance implants. On October 8, Karpelès warned that counterfeit or tampered Ledger devices with hidden SIM cards were being sold on the market, and these SIM cards were capable of transmitting stolen seed phrases. The implants were reportedly able to intercept data sent to the device screen, thereby capturing the recovery phrases displayed to users during wallet setup. Such devices could allegedly still pass Ledger's official genuine product verification, because the original secure element remained intact and the verification process was unable to detect unauthorized physical modifications. One emerging speculation is that attackers collected seed phrases from affected devices and waited to simultaneously transfer funds from multiple wallets. Karpelès's warning reportedly received approximately 90,000 views, which may have made the attackers aware that their operation had been exposed and prompted them to move the stolen funds. Karpelès stated that one affected Ledger device he examined came from Malaysia, was packaged in intact shrink wrap, and had an implant hidden beneath the screen. The suspected attack path is currently a compromised hardware supply chain rather than a vulnerability in cryptographic algorithms. The connection between Karpelès's warning and the subsequent wallet fund transfers has not yet been confirmed, nor has it been verified whether the same batch of implants was responsible. If the relevant circumstances are confirmed, the incident would demonstrate that even if a device is certified by the manufacturer, compromised hardware can still undermine users' self-custody security.
Odaily News: Bitcoin fell to $80,350 on Thursday before rebounding, climbing back above $83,000 at the Friday U.S. stock market open and subsequently fluctuating around $82,500. The rolling 24-hour cryptocurrency liquidation amount had previously exceeded $1 billion. Despite news circulating that Ledger hardware wallet users' funds were stolen, the crypto market has not yet shown significant selling pressure.Analysts suggest that before the U.S. CPI data is released on October 14, Bitcoin may remain range-bound, with the main trading range between $81,300 and $86,500, and could repeatedly test $84,000. The market is also watching whether Bitcoin can hold the key level of $82,500 before the weekly close. (Cointelegraph)
According to MistTrack monitoring, Odaily reports that Tether has frozen a large amount of USDT on addresses related to the Ledger user fund theft incident. The losses from this incident have approached $90 million, and some affected users have contacted MistTrack for assistance, with the team currently following up. Previously, Ledger stated it was investigating the theft of user funds related to Southeast Asian distributor CryptoBillis.
Odaily reports: CZ shared self-custody security advice, stating that users who purchase hardware wallets or download new software wallets should wait several weeks before transferring large amounts of funds into them.CZ said that during the waiting period, users should pay attention to relevant security news, including hacking incidents, because hardware devices may be tampered with, and official wallet software websites may also be attacked. He reminded that while self-custody enhances asset control, it also means users need to bear more security responsibility.
CZ posted a warning urging Ledger hardware wallet users to be more vigilant, especially those who recently purchased devices. He stated that based on currently available information, the incident appears to be related to a supply chain attack involving a certain vendor, and a small number of users may have purchased counterfeit or tampered Ledger devices.CZ said that Ledger is one of the most established and secure hardware wallets in the industry, having long withstood market tests, but similar incidents can still occur. He expressed hope and belief that BNB ecosystem participants and the entire crypto industry will assist in tracking and recovering the related funds.
Ledger Support posted on X platform stating that it is currently investigating a theft of assets involving Southeast Asian users, who had purchased devices through reseller CryptoBilis. Ledger has asked CryptoBilis to suspend sales and shipments, and recommends that users who purchased devices through this reseller within the past 90 days refrain from initializing their devices; users who have already completed setup should create a new Ledger signing device using a new mnemonic phrase and transfer their assets to a new wallet.On-chain investigator Specter previously estimated that this incident has led to the theft of hundreds of wallets across Bitcoin, Ethereum, and Tron networks, with losses exceeding $86 million. Security researcher tanuki42 previously estimated losses had exceeded $72 million and stated that the amount is still increasing. Currently, the specific cause of the incident and whether the affected devices have security vulnerabilities remain to be investigated and confirmed.
Odaily News: Dragonfly Managing Partner Haseeb Qureshi stated that the "bunker mode" proposed by Ethereum researcher Justin Drake to address the risk of AI cracking cryptographic signatures amounts to "cryptographic doomerism," and argued that migrating tokens to new addresses is not a real solution.Qureshi said that "bunker mode" can only protect assets that users have not yet transferred out of new addresses. If tokens in other addresses are attacked and heavily sold off, those assets could still lose value. He suggested that blockchain networks adopt a "Cryptographic Recovery Mode," using hash-based backup signature schemes that allow users to bind recovery mechanisms in advance, so that validators can assist in recovering assets after cryptographic signatures are cracked.Previously, Ethereum researcher Justin Drake warned that with the rapid improvement of AI mathematical capabilities, the ECDSA signature algorithm protecting crypto wallets could face the risk of being cracked within "months rather than years," and advised users to gradually migrate funds to new wallets that have not exposed public keys. Glassnode data shows that approximately 6.26 million BTC are currently held in addresses with potential risk. (Cointelegraph)
Odaily News: According to PeckShield monitoring, the attacker behind 79AU's operational hot wallet 79thVault has returned 15,000 BNB, worth approximately $11 million, to a wallet address designated by the project team. Additionally, the attacker had previously deposited 30 BNB into KuCoin. The disposition of the remaining funds is currently unclear. Earlier, 79thVault on BNB Chain suffered losses of approximately $12.5 million, possibly due to a private key leak. The team's operational hot wallet typically only makes small transfers to the reward pool, but recently the address transferred 2.01 million 79AU from trading pairs to external addresses in 7 transactions, with amounts of 10,000, 100,000, 100,000, 300,000, 500,000, 500,000, and 500,000 tokens respectively.
Odaily News: U.S. Commodity Futures Trading Commission (CFTC) Chair Mike Selig stated that the CFTC's proposed crypto asset regulatory framework will establish a federal-level oversight system to protect exchange customers from fraud, market manipulation, and theft of customer funds, preventing a repeat of the FTX collapse. Mike Selig noted that the CFTC is working to introduce market-based regulatory mechanisms for crypto exchanges; he stated that critics who oppose these measures and support maintaining the status quo may objectively be benefiting fraudsters, manipulators, and those who misappropriate customer funds, and warned that the absence of such regulation could leave the door open for the next Sam Bankman-Fried figure.
According to Lookonchain monitoring, a wallet (0xf15d...bddf) suspected to belong to a gambler or hacker sold 262.78 ETH 40 minutes ago, obtained $643,000 USDC and deposited it into Hyperliquid, then opened a 40x leveraged short position on 305.51 BTC, with a notional value of $25.4 million and a liquidation price of $84,086.03.
Odaily News: According to on-chain detective Specter, multiple reports of Ledger user wallet thefts have appeared on X and Reddit. After tracing the theft addresses, it was found that the related addresses received inflows of funds from hundreds of victim wallets across multiple major blockchains including Ethereum, TRON, and Bitcoin, with total losses exceeding $86 million. The related addresses include: bc1qjqgwejnp8dc0x2938x9n9954hj97t82unx49dl, TK6DWNpNe1w2iJRNFpU8aHdrPTATxvXT6C, TBkcUMYC7CkTK99tkTnaStQVBastfrs9d9, TCGE3xp6YGRKXxDZiLfysgJW3f22KfMNsW, 0x69c8f401cfc6cd40ac94691d6d7c48e3b7a47841, 0x033636e45d519bebb7b5c2520ca6ce56fbdb4f7a, 0x83aeac166f6832ae3500000a24510a95a052a599, bc1qqnkwurxs99xkx5t4yffqhq3u6qwy0qpjyujtm9, bc1qgqheemzla77pesl227hdtgf5ykz62d0zvld26n, TSDWtuZ2pARUVz4v3PkL2hi3iXPjowAr5a.
According to CoinDesk, the privacy cryptocurrency Zcash (ZEC) development team plans to introduce a post-quantum signature opcode on the network in January to support hash-based signatures, thereby defending against potential quantum computing attacks. This proposal primarily targets the transparent (public) payment pool, where approximately 70% of ZEC is currently held. Although developers have set January as the target deadline, the specific timing for network activation has not yet been finalized.
Illia Polosukhin posted on X platform that NEAR accounts can gain quantum-resistant capability through a key upgrade, and users do not need to migrate assets.
According to Decrypt, London police announced that 25-year-old Londoner Ajay Shinjin was sentenced to two and a half years in prison at Inner London Crown Court for his involvement in a "complex and meticulously planned" SIM card hijacking (SIM-swap) fraud that stole nearly £200,000 (approximately $265,000) worth of cryptocurrency. Shinjin previously pleaded guilty to charges including fraud by false representation and transferring criminal property.
According to OpenAI, cybersecurity vendor Sophos has integrated with its Daybreak project model. Through the deployment of AI agents, Sophos reduced the average response time for security incidents from approximately 38 minutes to 89 seconds, cut investigation time by 96%, and achieved end-to-end automation for 52% of Managed Detection and Response (MDR) cases.
Anthropic 推出基于 Claude Mythos 等最强模型的 AI 安全扫描服务，提供开源项目漏洞报告。包括 Ethereum 开发者 Nethermind 和 Bitcoin 钱包 ZEUS 在内的多家加密公司申请接入该服务。
Three US aircraft carriers will converge in the Middle East, and the Pentagon has drawn up contingency strike plans against Iran. Trump stated that US-Iran negotiations are still making progress and pledged not to launch military strikes before the midterm elections.
Trump has explicitly stated that he will not attack Iran before the midterm elections and has repeatedly rejected military action options. US, Ukrainian, and European officials are pushing to break the Russia-Ukraine stalemate, while Trump's securities trading volume in August surpassed $200 million.
Despite Trump repeatedly blocking military action, the U.S. military is still preparing a large-scale strike plan against Iran, with three aircraft carriers already sailing toward the Middle East. Trump recently stated that the U.S. and Iran are engaged in productive discussions and that no attack will be launched before the midterm elections.