News linked to both this project and an event.
Odaily report: Crypto analyst Darkfost posted that market sentiment deteriorated noticeably within a single day, with the Fear and Greed Index falling from 51 (neutral) to 30 (fear), the lowest level since mid-August. Over the same period, Bitcoin dropped about 4% to 5% within 24 hours, briefly touching a six-week low near $76,500; Ethereum fell below $2,200, and total liquidations across the market exceeded $1.6 billion in the past 24 hours.Darkfost noted that historically, periods of market pessimism often correspond to accumulation opportunities, but the current index reading of 30 only represents fear and has not yet entered the extreme fear zone below 25, suggesting market sentiment may remain under pressure. In addition, this round of decline was partly triggered by Binance's $6.3 billion hack incident and did not stem entirely from a clear deterioration in market fundamentals.
U.S. prosecutors allege that on August 1, 2022, Brock exploited a vulnerability in the Nomad verification mechanism to withdraw approximately $2.8 million worth of tokens without locking corresponding assets. He subsequently exchanged them for other cryptocurrencies and transferred them across multiple wallets to obscure the source of funds. The U.S. District Court for the Northern District of California indicted him on eight counts in August 2023, involving computer fraud, conversion of stolen property, and money laundering, and filed an extradition request in December 2024. Brock was arrested in May 2025 at Ben Gurion Airport while preparing to travel to Russia. Shortly before his arrest, he had changed his surname to Block and obtained a new passport.
Odaily Report: According to monitoring by on-chain analyst Ember, a hacker who stole approximately $40 million in assets from UXLINK last year opened a long position of 30,300 ETH on Hyperliquid at a price of $2,134, with a position value of $70.25 million and current unrealized profit of $5.62 million. The funding source address for the ETH long position has a direct fund intersection with a known UXLINK hacker address: one month ago, both addresses consolidated their remaining ETH Gas to the same wallet on the same day. In early August, after consolidating 11.54 million USDC from multiple channels, the hacker began trading ETH on Hyperliquid, opening positions 6 times in total, with 5 profitable trades and total profits of $5.71 million.
The International Criminal Police Organization (Interpol) reported that Operation Serengeti III was conducted across 21 countries from June 29 to August 31, 2026, resulting in the arrest of 1,462 suspects, the takedown of 10,909 malicious websites, and the seizure of over $105 million in illicit funds. Investigations also confirmed that 65,929 victims were targeted by cybercrime syndicates, with associated losses exceeding $385 million. The operation primarily targeted cyber fraud, ransomware, business email compromise, online scams, and digital extortion. In specific cases, Ugandan police dismantled two transnational fraud rings and arrested 365 foreign nationals; Angolan authorities shut down two illegal cryptocurrency mining farms, arresting nine individuals and confiscating more than 2,000 mining rigs; and another case in Nigeria involved over $2.4 million in suspected illicit proceeds, a significant portion of which was laundered through cryptocurrency transactions.
Bitcoin Core has adjusted its security vulnerability disclosure policy, defining easily discoverable vulnerabilities as those that can be found through simple large language model prompts, and will release fixes as soon as possible across all major versions still under maintenance, while publishing security advisories.Bitcoin Core developer Antoine Poinsot stated that in the past, vulnerabilities were typically kept confidential during a longer disclosure embargo period to allow users to upgrade, but large language models have lowered the threshold for rediscovering certain vulnerabilities, limiting the protective value of delayed fixes.Low-severity vulnerabilities will be disclosed two weeks after the major version containing the fix is released; medium- and high-severity vulnerabilities will be disclosed two weeks after the affected version reaches end of life, typically about one year after the fix enters a new version. Critical vulnerabilities are not subject to the standard policy and will be handled through ad hoc procedures.In August, the volunteer organization Bitcoin Red Team reported nearly 5,000 potential issues across 390 projects, with about one-fifth having been reproduced at the time. Core Lightning developers that same month asked node operators to upgrade or take nodes offline, and delayed disclosure of technical details for two weeks. (Cointelegraph)
According to Cointelegraph, the PHP Foundation admitted that a critical security vulnerability discovered as early as 2024 has yet to be patched due to flawed decision-making processes and understaffing within the security team, calling the delay a structural failure. The vulnerability could allow unauthenticated attackers to remotely execute code on affected servers. On August 11, security firm Calif and OpenAI independently reported the same issue, with Calif also demonstrating unconditional remote code execution, prompting the matter to be elevated to the highest security priority. PHP released emergency patches for two related critical vulnerabilities on Wednesday. Around the time of the patch release, government websites or services in the Netherlands, Finland, France, Germany, and Australia were temporarily taken offline, with the Netherlands shutting down its digital identity service. The Wikimedia Foundation also took some supporting services offline, causing disruptions to certain Wikipedia features. Japanese Prime Minister Sanae Takaichi called on website operators to install the patches as soon as possible. In the crypto sector, monitoring by SlowMist's MistEye service found that out of 1,488 evaluated domains, 793 showed direct PHP fingerprints. Cardano governance organization Intersect temporarily took its member portal offline. Both Coinbase and BitGo stated that their platforms were unaffected. Binance co-founder Changpeng Zhao advised users to exercise extreme caution when visiting websites over the next few days. PHP security team
Odaily reports: The PHP Foundation has stated that due to hesitant decision-making and insufficient resources, remediation work for a critical security vulnerability first discovered in 2024 stalled and restarted multiple times, and it characterized the delay as a "structural failure." PHP is a programming language widely used for websites and web applications.PHP has released emergency patches for two related critical vulnerabilities. Unauthenticated attackers could exploit the flaws to execute code on affected servers without logging in. Some government websites or online services in the Netherlands, Finland, France, Germany, and Australia were temporarily taken offline to prepare for patch installation.Security firm Calif and OpenAI separately reported the same underlying issue on August 11, and Calif also demonstrated unconditional remote code execution. Blockchain security firm SlowMist investigated PHP usage in the crypto industry and found direct PHP fingerprints on 793 of the 1,488 domains it assessed.Intersect has temporarily closed its Members Area, Coinbase said it has not found any affected PHP instances, and digital asset infrastructure company BitGo said its platform was not affected. Binance co-founder Changpeng Zhao reminded users to exercise heightened caution when visiting websites recently, and OpenAI has released a Codex skill for checking for vulnerable PHP versions. (Cointelegraph)
According to Consultation Paper GC26/7 published by the UK Financial Conduct Authority (FCA), the FCA launched a consultation on 21 October regarding non-Handbook guidance for decentralized finance (DeFi). The comment period closes on 18 November, with the final version planned for release in the first quarter of 2027. This guidance does not establish new regulatory requirements. It aims to clarify how existing rules under SYSC 15A (Operational Resilience), SYSC 6 (Compliance and Financial Crime), and the Money Laundering Regulations (MLRs) apply to regulated firms that use or access DeFi. The FCA stresses that regardless of whether an entity describes itself as "decentralized," authorization or exemption is required if it carries out regulated activities in the UK. The document reveals that from January to August 2026, decentralized exchanges accounted for approximately 14% to 19% of global crypto spot trading volume. In 2025, approximately 8% of UK crypto users acquired crypto assets through decentralized exchanges. According to industry data, cumulative losses from DeFi and cross-chain bridge hacks since 2016 have exceeded $12 billion.
According to The Defiant, data from Blockaid shows that between January and August 2026, the 60 cryptocurrency attack incidents it tracked involved approximately $1.18 billion, with victims recovering a total of about $9.8 million, accounting for less than 1%. The report indicates that all frozen or returned funds were secured through on-chain governance or validator actions, while blacklist mechanisms by stablecoin issuers recovered zero funds across these 60 incidents.
Odaily reports: Crypto researcher Stacy Muur has compiled a list of 82 digital asset projects and protocols said to have shut down in 2026, including Balancer, Radiant Capital, Neon EVM, Step Finance, and others, spanning DeFi, blockchain infrastructure, and Web3 gaming.The shutdowns were driven by declining revenue, exhausted funding, and security incidents. Earlier this year, Bitcoin's price briefly fell below $60,000, retreating from an all-time high of over $126,000 in October 2025, adding financial pressure on projects.When Ethereum Layer 2 network Blast announced its shutdown, it stated that the project had no "credible path to economic viability." Step Finance shut down following a major treasury exploit, while Radiant Capital announced the end of operations after failing to recover from a 2024 exploit.An August study by DeFiLlama showed that 100 crypto projects had announced shutdowns in 2026, 40 of which occurred in the preceding 90 days; the most common reason was product-market mismatch, followed by exhausted funding, insufficient revenue, and pivots to other products. The projects involved raised a combined total of approximately $1 billion and generated $250 million in cumulative fees, with 9 individual projects each raising over $50 million. (Cointelegraph)
On-chain investigator ZachXBT stated that FreedomXMR (FXMR), a centralized money laundering service that appeared on Hyperliquid Core (HL Core) in August 2026, had over 87% of its incoming funds directly linked to illegal activities. A review of historical inflows exceeding $10,000 revealed that over $20 million could be directly traced to ransomware, security exploits, malware, and social engineering incidents, involving multiple theft cases such as the DCENT Wallet, Fetch.ai, Axelar, and Gamdom.
Odaily reports: Blockchain security research firm Asymmetric Research has disclosed that Solana's on-chain governance program svmgov previously had a vulnerability: when validators did not participate in voting, independent votes submitted in advance by their delegators might not be counted in the final results. The vulnerability was reported to the Solana Foundation on July 10 and was fixed on mainnet on August 3, earlier than the governance vote on August 24. Based on on-chain data calculations, Asymmetric Research estimates that if the vulnerability had not been fixed, the approval rate of the SGP-0002 proposal, which aims to accelerate the decline in SOL inflation, could have dropped from the actual 67.00% to 66.65%, below the 66.67% passage threshold. The vulnerability was fixed before the vote and did not actually change the proposal's outcome.
Former Mt. Gox CEO Mark Karpelès (@MagicalTux) posted that Ledger Support (@Ledger_Support) stated on August 20 that the Secure Element chip can detect physical tampering; if extra hardware intercepts signals, the device will refuse to execute unsigned code or fail the Genuine Check. Karpelès pointed out that Ledger's own technical documentation explicitly states: if the original Secure Element is intact, the Genuine Check cannot detect unauthorized physical hardware modifications such as spy implants. The two statements contradict each other. He also noted that recent reports show over $90 million in assets were stolen precisely through this method of "extra hardware intercepting signals." Furthermore, in a March 2026 Ledger Academy article, Ledger had already published photos of spy implants installed inside multiple Ledger devices, including mass-produced complex PCBs, indicating they were long aware of this threat. Karpelès believes this conduct constitutes misleading promotion and cited that French law has specific regulations regarding misleading advertising.
Odaily News: On-chain analyst Murphy posted on X that during the recent BTC decline, the scale of BTC transfers to exchanges by short-term holders (STH) increased significantly, with an average of approximately 2,200 BTC transferred per hour within a 4-hour window, reaching the fourth-highest level since the market rally began in August this year. However, the transfer peak on October 15 was already lower than that of October 8, indicating that the potential selling pressure from short-term holders has somewhat weakened.In contrast, long-term holders (LTH) transferred only about 480 BTC per hour to exchanges during the same period, roughly one-fifth of that of short-term holders. Murphy noted that on October 8, long-term holders had a transfer peak of approximately 3,700 BTC per hour, which may have been partly related to asset transfers triggered by a hardware wallet security incident. However, considering that both long-term and short-term holders showed large-scale transfers on that day and BTC prices fell rapidly, actual selling pressure still existed in the market.Murphy believes that during the current decline, those transferring BTC to exchanges are primarily short-term holders, while long-term holders remain relatively stable overall, and the transfer intensity of short-term holders has weakened compared to before, reflecting that the BTC holder structure still possesses a certain degree of resilience.
According to monitoring by CryptoQuant analyst nocoffeenobrain, coins with a holding age of 1–3 years and over 3 years began showing signs of activity as early as late September, coinciding with BTC prices rising from the mid-$70,000 range to the mid-$80,000 range. Following the recent Ledger hack, which prompted numerous users to migrate assets to new signing devices and replace their seed phrases, the 7-day moving average is expected to climb further over the next few days. The analyst noted that a similar pattern occurred previously: during January to February this year, when BTC dropped from $90,000 to the mid-$60,000 range, and between July and August while BTC consolidated around the mid-$60,000 range, both of these holding age cohorts exhibited synchronized activity.
Odaily News: According to monitoring by Bitcoin News, well-known hardware security researcher and computer engineer Joe Grand (social media account @joegrand, also known as "Kingpin") stated that in August 2025, a man in Thailand contacted him, claiming to have discovered a compromised Ledger Nano X. The man had previously purchased a cheap Ledger device online to replace the battery in his existing device. After taking the device apart, he found that it contained a smaller battery, unauthorized circuitry, extra wiring, and an antenna. After the man posted his findings on Reddit, he reportedly did not receive much attention from local police, and subsequently contacted Grand to launch an investigation. This discovery came more than a year before the Ledger supply chain attack sparked major public controversy this week; according to reports, nearly $100 million in cryptocurrency was stolen this week.
Bitcoin News posted on X platform stating that corporate records for Malaysian hardware wallet distributor CryptoBilis show that, as of August 3, an individual named Jiaming, with a registered address in Heilongjiang Province, China, holds 100% of the company's shares. The company's former co-founder confirmed that CryptoBilis completed its acquisition in March, with the original owner withdrawing from all operational, managerial, and administrative roles. The founder has been unable to learn about the company's operations since the handover but still assists with event coordination. This information emerged during an investigation into a suspected supply chain attack on Ledger hardware wallets, where affected devices were implanted with hidden components that could steal seed phrases; there is currently no conclusive evidence linking the change in CryptoBilis ownership to the compromised wallets.
Trump has explicitly stated that he will not attack Iran before the midterm elections and has repeatedly rejected military action options. US, Ukrainian, and European officials are pushing to break the Russia-Ukraine stalemate, while Trump's securities trading volume in August surpassed $200 million.
Zano disclosed a validation flaw in the Gateway Addresses introduced by Hard Fork 6. An attacker minted approximately 18.4 million ZANO in a single transaction on August 29, then minted an equal amount again on September 25, and minted fUSD in the same manner.The project team stated that the value of the illicit tokens involved exceeds $200 million, with potentially affected activity involving 117,941 outputs and 65,301 transactions. Zano has restored the chain state from block 3,833,000 and disabled Gateway Addresses. All affected balances will be fully restored, and the ZANO supply and issuance schedule will remain unchanged. (Bitcoin.com News)
Odaily News — According to monitoring by the Drift Foundation, the Drift Foundation has released an update on fund recovery progress related to the April 1 security incident: approximately $295 million in user assets were stolen. The foundation has engaged Mandiant, zeroShadow, and SEAL 911 to conduct the investigation and trace the funds, with Mandiant identifying the attacker as the North Korean threat group UNC6862.The stolen funds were subsequently bridged to Ethereum, with approximately 130,300 ETH distributed across 4 wallets. Three of these wallets have seen no transfers to date, collectively holding 107,200 ETH; the other wallet transferred approximately 23,100 ETH to Tornado Cash on July 23.Currently, approximately $9.2 million in stolen funds has been frozen. The relevant funds had previously been transferred through Tornado Cash in August, and unfreezing and return still require cooperation with legal procedures. The Drift Foundation will transfer all assets recovered through freezing, bounties, or law enforcement channels into the DFX recovery pool, and is evaluating the subsequent path of the DRIFT token within the broader ecosystem. In addition, the foundation has partnered with Bybit to launch a public bounty program, offering a 10% bounty on successfully recovered funds.