News linked to both this project and an event.
Odaily Report: He Yi responded on X to a suspected Binance hacking incident, with the following statement:We have noticed reports regarding a potential security issue and are actively investigating.Our security team is urgently reviewing all relevant information. Once verified, we will immediately release the latest updates through Binance's official channels. Users should be wary of scams and must not trust unofficial links, messages, or requests for account information.
According to CoinDesk and security firm Blockaid, Binance's hot wallet has experienced large-scale abnormal outflows since 04:24 Beijing Time. New addresses are holding over $2 billion in assets, Binance has not yet confirmed an attack; BNB dropped approximately 6% within one hour.
Odaily Report: According to on-chain sources, Tether froze $971 million worth of USDT amid a suspected Binance hack.
According to on-chain reports, abnormal fund outflows have occurred from Binance's hot wallet, with funds flowing to newly created addresses. These addresses were initially funded via Tornado Cash, and the stolen funds are valued at over $2.5 billion.
According to an official announcement from Cysic, following the cross-chain bridge security incident that occurred earlier, Cysic has fully resumed its cross-chain bridge services, and users can now once again transfer CYS across chains between the Cysic mainnet and other supported blockchains. Additionally, Cysic has permanently burned 7,200,002 CYS on the BNB Smart Chain and confirmed that this operation has been recorded on-chain.
According to an official announcement from BNB Chain, the winner list for the BNB Hack: Tokenized Edition hackathon has been announced. Co-hosted by BNB Chain and Binance Wallet, the event awarded five projects from a total prize pool of $20,000. Moi took first place, while 4lpha, Redeye, TARE, and Firstshare ranked second through fifth. Additionally, 4lpha won the Best Agentic Wallet / Wallet Skills Application award, and Firstshare won the Best BNB Agent Studio Application award.
Cysic has released an update on the progress of handling the security incident, disclosing that it has completed burning 7,200,002 CYS tokens on the BNB Smart Chain (BSC) to offset prior unauthorized token issuance. Both burn transactions have been confirmed on-chain, permanently reducing the CYS token supply on BSC and bringing it back into alignment with the project's tokenomics.
Odaily reports: Binance founder CZ posted on the X platform that four data breach incidents were reported today, involving Coinbase third-party service provider Amplitude, South Korean crypto exchange Bithumb, and South Korean traditional financial institutions Mirae Asset and Daishin Securities. Among them, the Amplitude security incident affected the contact information of some Coinbase users, but user funds were not affected.CZ noted that information such as names, emails, phone numbers, addresses, identity documents, and transaction records leaked from trading platforms may be used for phishing, SIM-swapping, and social engineering attacks.In response, CZ recommends that users set up separate email addresses and strong passwords for different trading platforms, prioritize the use of hardware security keys, Passkeys, or authenticator apps, avoid relying on SMS two-factor authentication, and enable security features such as withdrawal address whitelists and anti-phishing codes. At the same time, users should regularly check account login sessions and API key permissions, and be vigilant against scams impersonating customer service.CZ also reminded users that if a platform suffers a data breach, they should promptly change passwords, revoke unnecessary API keys, check withdrawal records, and be alert to phishing attacks carried out using leaked information. In addition, leaked home addresses and asset holdings information may give rise to real-world extortion or robbery risks, and users should avoid publicly disclosing their personal asset situation.
According to Scam Sniffer monitoring, a suspected cryptocurrency theft incident has occurred: in under 4 hours, an attacker drained USDT, USDC, and ETH with a total value of approximately $1.2 million from over 100 wallets across Ethereum and BNB Chain, and has already converted all funds into ETH.
On-chain analyst PeckShield (@PeckShieldAlert) has tracked an address flagged as the Cysic attacker depositing 300 ETH (approximately $721,140) and 30.4 BNB (approximately $22,590) into Tornado Cash. According to the Cysic Foundation, a security incident involving the Cysic cross-chain bridge occurred on October 17, during which the attacker minted 10 million CYS tokens without authorization on the BNB Chain.
Nina Rong (@nina_rong), Head of Growth at BNB Chain, posted that BNB Chain's technology stack does not use PHP and reminded users to remain vigilant. Previously, the National Security Agency's cybersecurity division NSA Cyber (@NSACyber) issued an advisory stating that all organizations using PHP to build systems should prepare for updates aimed at fixing two critical vulnerabilities. PHP is widely used in web applications, and such vulnerabilities can typically provide direct access to the server file system.
According to Cointelegraph, the PHP Foundation admitted that a critical security vulnerability discovered as early as 2024 has yet to be patched due to flawed decision-making processes and understaffing within the security team, calling the delay a structural failure. The vulnerability could allow unauthenticated attackers to remotely execute code on affected servers. On August 11, security firm Calif and OpenAI independently reported the same issue, with Calif also demonstrating unconditional remote code execution, prompting the matter to be elevated to the highest security priority. PHP released emergency patches for two related critical vulnerabilities on Wednesday. Around the time of the patch release, government websites or services in the Netherlands, Finland, France, Germany, and Australia were temporarily taken offline, with the Netherlands shutting down its digital identity service. The Wikimedia Foundation also took some supporting services offline, causing disruptions to certain Wikipedia features. Japanese Prime Minister Sanae Takaichi called on website operators to install the patches as soon as possible. In the crypto sector, monitoring by SlowMist's MistEye service found that out of 1,488 evaluated domains, 793 showed direct PHP fingerprints. Cardano governance organization Intersect temporarily took its member portal offline. Both Coinbase and BitGo stated that their platforms were unaffected. Binance co-founder Changpeng Zhao advised users to exercise extreme caution when visiting websites over the next few days. PHP security team
Odaily reports: The PHP Foundation has stated that due to hesitant decision-making and insufficient resources, remediation work for a critical security vulnerability first discovered in 2024 stalled and restarted multiple times, and it characterized the delay as a "structural failure." PHP is a programming language widely used for websites and web applications.PHP has released emergency patches for two related critical vulnerabilities. Unauthenticated attackers could exploit the flaws to execute code on affected servers without logging in. Some government websites or online services in the Netherlands, Finland, France, Germany, and Australia were temporarily taken offline to prepare for patch installation.Security firm Calif and OpenAI separately reported the same underlying issue on August 11, and Calif also demonstrated unconditional remote code execution. Blockchain security firm SlowMist investigated PHP usage in the crypto industry and found direct PHP fingerprints on 793 of the 1,488 domains it assessed.Intersect has temporarily closed its Members Area, Coinbase said it has not found any affected PHP instances, and digital asset infrastructure company BitGo said its platform was not affected. Binance co-founder Changpeng Zhao reminded users to exercise heightened caution when visiting websites recently, and OpenAI has released a Codex skill for checking for vulnerable PHP versions. (Cointelegraph)
The Cysic Foundation released an incident report stating that on October 17, its cross-chain bridge experienced a security incident in which an attacker minted 10 million CYS without authorization on the BNB Smart Chain. Upon discovering the anomaly, the project team suspended the cross-chain bridge, placed related addresses on an on-chain blacklist, and hired a professional security firm to investigate the attack vectors and fund flows.
Odaily reports: The crypto project Cysic has announced that its cross-chain bridge was paused on Saturday after an attacker exploited a processing flaw to mint 10 million CYS tokens without authorization on BNB Smart Chain. Preliminary investigations indicate that the attacker may have gained unauthorized access to the database supporting the bridge.The unauthorized minting occurred at 12:31:38 UTC, and Cysic blacklisted the receiving address in the token contract at 13:47:52. The address currently still holds approximately 2.8 million CYS, and related transfers have been restricted.Cysic stated that the incident only involved cross-chain bridge message processing and token minting, and did not affect the mainnet or other operating systems, nor did it result in the theft or unauthorized transfer of existing CYS or other assets in user wallets. Token transfers, swaps, and actual losses are still under review, and the company has engaged security firms and plans to release a follow-up report. (Cointelegraph)
According to monitoring by on-chain analyst PeckShield (@PeckShieldAlert), CryptoBillis Ledger Drainer, which previously stole over $90 million in crypto assets, transferred approximately $3.89 million in crypto assets to Binance deposit addresses via the Tron network over the past two days, including 3.685 million USDT and 615,000 TRX (approximately $204,000).
According to on-chain analyst Onchain Lens (@OnchainLens), the hacker associated with the $90 million Ledger reseller incident has cumulatively deposited approximately $270,300 into Binance, including 256.57K USDT and 41.12K TRX (about $13,700), with the majority of funds already transferred to Binance's hot wallet. Previously, the hacker also used four wallets to deposit 430.2 ETH (approximately $1.07 million) into Tornado Cash for mixing, and converted USDT to USDD to evade Tether's fund freeze.
According to Onchain Lens monitoring, the suspected hacker behind the reported $90 million Ledger reseller incident has deposited 430.2 ETH, worth $1.07 million, into Tornado Cash through 4 wallets. After Tether froze the related funds, the hacker swapped USDT for USDD through SUN.io and USDD's PSM, with some funds also flowing into Binance hot wallets.The hacker's wallet tracked by Arkham currently holds a total of $70.6 million in assets, including 11,406 ETH worth $28.35 million; 213.371 BTC worth $17.65 million; 13.646 million USDD worth $13.65 million; and 10.909 million USDT worth $10.91 million. Onchain Lens is calling on Binance to investigate these transfers and freeze accounts associated with the stolen funds as soon as possible.
CZ posted a warning urging Ledger hardware wallet users to be more vigilant, especially those who recently purchased devices. He stated that based on currently available information, the incident appears to be related to a supply chain attack involving a certain vendor, and a small number of users may have purchased counterfeit or tampered Ledger devices.CZ said that Ledger is one of the most established and secure hardware wallets in the industry, having long withstood market tests, but similar incidents can still occur. He expressed hope and belief that BNB ecosystem participants and the entire crypto industry will assist in tracking and recovering the related funds.
Odaily News: According to PeckShield monitoring, the attacker behind 79AU's operational hot wallet 79thVault has returned 15,000 BNB, worth approximately $11 million, to a wallet address designated by the project team. Additionally, the attacker had previously deposited 30 BNB into KuCoin. The disposition of the remaining funds is currently unclear. Earlier, 79thVault on BNB Chain suffered losses of approximately $12.5 million, possibly due to a private key leak. The team's operational hot wallet typically only makes small transfers to the reward pool, but recently the address transferred 2.01 million 79AU from trading pairs to external addresses in 7 transactions, with amounts of 10,000, 100,000, 100,000, 300,000, 500,000, 500,000, and 500,000 tokens respectively.