News linked to both this project and an event.
Binance founder CZ posted that the incident appears to be a hack on Binance and that user funds are safe, thanking Tether (approx. $971 million) and Circle (approx. $823 million) for promptly freezing the related funds.
Initia officials stated that, with support from the Initia Foundation, the 1:1 asset backing for assets affected by the October 23 security incident will be fully restored when the chain resumes operations. The Initia Foundation has approved funding to cover the reserve shortfalls for Noble USDC, WETH, and AUSD0 used as collateral for iUSD, amounting to up to 1.08 million USDC, 105 ETH, and 1.4 million AUSD0, respectively. The specific amounts remain subject to verification and require final transfer approval.
According to Scam Sniffer monitoring, a suspected cryptocurrency theft incident has occurred: in under 4 hours, an attacker drained USDT, USDC, and ETH with a total value of approximately $1.2 million from over 100 wallets across Ethereum and BNB Chain, and has already converted all funds into ETH.
Blockaid reported detecting an attack on the Tranche Vault associated with Valinor Digital on Avalanche. The attacker leveraged flash loans to mint artificially inflated tranche shares, then proceeded to redeem the vault’s remaining USDC. As of this post, the attacker had transferred approximately $1.01 million from the vault across roughly two transactions.
Odaily Report: According to monitoring by on-chain analyst Ember, a hacker who stole approximately $40 million in assets from UXLINK last year opened a long position of 30,300 ETH on Hyperliquid at a price of $2,134, with a position value of $70.25 million and current unrealized profit of $5.62 million. The funding source address for the ETH long position has a direct fund intersection with a known UXLINK hacker address: one month ago, both addresses consolidated their remaining ETH Gas to the same wallet on the same day. In early August, after consolidating 11.54 million USDC from multiple channels, the hacker began trading ETH on Hyperliquid, opening positions 6 times in total, with 5 profitable trades and total profits of $5.71 million.
Initia stated that on October 23 at 22:59 (UTC+8), an attacker exploited a vulnerability in the Initia MoveVM script cache to bypass security checks and forge MoveVM state, crediting themselves with WETH, iUSD, and USDC that had no actual backing. The total supply of the relevant tokens has not changed, INIT was not minted additionally, and the total supply is unaffected.
According to Zon monitoring, available information indicates that this security incident may have originated from a Day 0 vulnerability in Initia's MoveVM built on Cosmos SDK. The vulnerability allowed attackers to mint additional tokens on Initia L1, but does not affect the native token INIT. Before the blockchain was halted, the attacker had already transferred out approximately $2.7 million worth of AUSD, ETH, and USDC through additional minting and cross-chain transfers. The team is still investigating, and the subsequent impact and further details remain to be confirmed.
据 Spreek 监测表示，Initia 链遭遇攻击，多个代币出现“无限增发”情况。攻击者目前已套现约 260 万美元，另有部分资金仍在转移过程中。攻击者以太坊地址（0xDD9 开头）目前持有约 1102 枚 ETH，价值约 265 万美元，该地址初始资金来自 Tornado Cash。此外，攻击者在 Initia 链上的地址仍持有约 454 万美元资产，包括 300 万枚 iUSD、92 万枚 USDC、40 万枚 AUSD 及 95 枚 ETH。目前 Initia 官方尚未回应。
according to Blockaid monitoring, the WAX multichain bridge on the WAX network is under attack, involving WAX, Solana, and Ethereum. The attacker withdrew mapped tokens on the WAX chain without paying the corresponding assets, while the bridge contracts on Solana and Ethereum still released the corresponding tokens. The attacker transferred approximately 52,986 USDC, 21,558 USDT, 840 DAI, 2.55 WETH, and 0.11 WBTC through 5 transactions. The scope of the incident's impact and whether losses are still expanding remain to be further confirmed.
According to CoinDesk, the development team behind Zcash's new node software, Zakura, plans to generate a unique viewing key for each ZEC swap conducted via NEAR Intents, while the spending key remains secured by the user's primary account. Under the current architecture, when users swap private ZEC for USDC via NEAR Intents, one of their Zcash privacy addresses is publicly broadcast on the NEAR public chain as a refund address and remains retained after the swap is completed. While this address currently does not leak information, sufficiently powerful quantum computers in the future could potentially reverse-engineer the viewing key using Shor's algorithm, thereby linking all payments received by that account, including amounts and memos. By implementing a "one-key-per-swap" approach, even if a refund address is compromised, attackers will only be able to view payments related to that specific swap. To address the issue of having to scan the entire blockchain sequentially during wallet recovery due to an abundance of keys, Zakura employs Private Information Retrieval (PIR) technology, allowing the wallet to query the location of incoming refunds without the database learning which address was queried.
According to CryptoSlate, Microsoft and the cybersecurity organization Health-ISAC have obtained a U.S. court order to seize and redirect the domains supporting three services: YAM Store, CoGUI, and Iron Man. These three services sell stolen accounts and phishing tools to fraudsters. Since January this year, they have assisted in sending over 1 billion phishing messages, targeting more than 75,000 institutions across over 150 countries, generating tens of millions of dollars in revenue for operators. Microsoft has disabled more than 20,000 accounts associated with YAM Store and continues to block over 100,000 spoofing and fraudulent domains. According to Microsoft's investigation, these services accept payments in USDT (Tron network) and ETH, with Cloudflare noting that buyers can also pay using USDC. Blockchain analytics firm TRM Labs assisted investigators in locating and freezing related assets, though the frozen amount was not disclosed.
Odaily News: Security firm Hacken disclosed that a total of 107 cryptocurrency hacking incidents were recorded in Q3 2026, with total losses amounting to $1.18 billion. Of that, approximately $906 million stemmed from compromised vendors, developer tools, disclosed but undeployed fixes, and infrastructure outside audit scope, accounting for roughly 77% of quarterly losses.Quarterly losses were mainly concentrated in four incidents: crypto trading platform Bitget suffered $387 million in losses from an attack, Liquid Network lost $320 million to exploitation, Tectonic lost $120 million to exploitation, and a Coldcard firmware vulnerability caused approximately $115 million in losses. About 80% of losses were concentrated in the above incidents, while 98 incidents resulted in losses below $10 million, with a median of $670,000.Smart contract incidents were the most common attack type, involving 71 incidents and causing $228 million in losses. Q3 was the most severe quarter for losses since Q1 2025, when a $1.4 billion loss by Bybit pushed the quarterly total to $1.6 billion.Approximately $387 million of Q3 losses were returned or reversed, accounting for about 33% of gross losses. Among these, about $272 million was returned in the Liquid Network incident; the Tectonic incident reversed approximately $111.2 million in lending impact by rolling back 114 minutes of blockchain history, and Circle and Tether also froze approximately $340,000 related to funds stolen from Bitget. Operators additionally absorbed $410 million in user losses, leaving approximately $384 million still not returned or covered. (Cointelegraph)
According to Ping An Bincheng, the Bincheng Public Security Bureau in Shandong, China, recently cracked the region's first virtual currency theft case, apprehending suspect Chen and placing him under criminal detention in accordance with the law. Case details reveal that a local resident named Xie reported that 1,300 USDC stablecoins and NFT digital collectibles valued at tens of thousands of yuan were stolen from his digital wallet without any transfer alerts or phishing links. Through on-chain fund tracing and police-enterprise cooperation for account analysis, investigators ultimately identified and arrested suspect Chen, who was hiding in Fengyang County, Anhui Province. Upon arrest, authorities leveraged blockchain data's tamper-proof nature and complete transaction trail to secure evidence. The suspect truthfully confessed to the crime, and his family has fully compensated the victim for all losses. The police noted that virtual assets are protected by law and that on-chain activities are not immune to legal jurisdiction; users must securely safeguard their private keys and seed phrases.
According to official announcements, Payy has initiated a claims process for affected users following the cross-chain bridge contract hack on September 24, with a 30-day window for claim submissions. Eligible claims will be compensated in USDC on the Ethereum network. Meanwhile, Payy Wallet is currently suspended and will be completely shut down after the claims period concludes.
Odaily News: According to Bitcoin News monitoring, the attacker behind the Ledger supply chain theft has moved nearly 3,000 ETH through Tornado Cash in three separate transactions, and transferred the funds into the Zcash privacy pool before converting them to USDC. Investigator @YFarmX stated that despite the use of privacy tools, they have traced 108 transactions completed through Zcash by exact value matching. An estimated $2.85 million in stolen USDC is still held in 3 wallets, and Circle may be able to freeze the related funds. Meanwhile, Tether is reported to have frozen $10 million in stolen USDT; wallets associated with the attacker still hold approximately $38.6 million in ETH and $16.9 million in BTC.
according to on-chain analyst Yu Jin's monitoring, an address received 263 ETH from Tornado Cash yesterday, then swapped it for approximately 643,000 USDC and deposited it into Hyperliquid.The address opened a 40x leveraged cross-margin short position on 305.5 BTC, with a position size of approximately $25.38 million, an average entry price of $83,068, and a liquidation price of $84,088. The current unrealized profit is about $160,000. The source of the address's funds involves Tornado Cash, but it cannot yet be confirmed whether it is related to hacker activity.
According to Lookonchain monitoring, a wallet (0xf15d...bddf) suspected to belong to a gambler or hacker sold 262.78 ETH 40 minutes ago, obtained $643,000 USDC and deposited it into Hyperliquid, then opened a 40x leveraged short position on 305.51 BTC, with a notional value of $25.4 million and a liquidation price of $84,086.03.
Odaily News: On-chain detective ZachXBT posted on X that he once posed as a client to infiltrate a criminal group suspected of laundering money for the North Korea-backed hacker organization Lazarus Group, and assisted in freezing funds related to the 2025 Bybit attack.ZachXBT stated that after Bybit suffered a $1.5 billion attack in February 2025, he discovered that more than 15 accounts in public Telegram and Discord groups were seeking help processing transactions related to the stolen funds. He subsequently contacted one of the Telegram users using the alias "Jimmy Green" and built trust through multiple transactions. According to his disclosure, on March 6, 2025, he transferred $3.497 million in USDC to an Ethereum address for a USDC-to-TRON-chain USDT exchange transaction with the counterparty. The source of gas funds for that address can be traced back to the Bybit attack funds and was publicly flagged as a Bybit attack blacklisted address.ZachXBT said that in subsequent communications, the counterparty revealed that their team had been involved in processing the stolen Bybit funds and disclosed in advance that the funds would be moved across chains including Solana. By matching transaction timing, amounts, and on-chain data, he identified a wallet cluster involving more than $12 million in Bybit attack funds, with fund paths spanning multiple networks including BTC→ETH→SOL→TRON. Approximately 442,000 USDT was frozen by Tether, and the group also attempted to launder money through Uniswap liquidity pools and low-liquidity tokens. Additionally, the counterparty disclosed having helped other clients process approximately $3 million in fraudulent proceeds, and ZachXBT traced the related funds to wallets associated with the sanctioned Huione Guarantee.ZachXBT revealed that in this investigation, he initially invested $3.497 million and bore a loss risk of approximately 5% per transaction. The intelligence ultimately obtained was provided to relevant investigative agencies and law enforcement authorities at the earliest opportunity. Since 2022, he has assisted in freezing over $75 million in funds related to North Korea-linked incidents.
Odaily — Ostium has released an update on the July 15 exploit and a recovery plan for OLP holders. Ostium stated that the attack resulted in approximately $23.75 million being withdrawn from the Ostium Liquidity Pool (OLP), and available evidence suggests the attack may have been carried out by a nation-state actor. As of now, 649,967 USDC has been recovered, and the remaining vault assets currently held by affected users are worth approximately 30% of their pre-incident OLP positions.Ostium launched its recovery portal today and took a snapshot of OLP balances at the time of the incident, identifying a total of 3,666 affected wallets. Of these, 3,321 wallets — or 90.59% — are eligible for full compensation of verified losses through the Phase 1 plan. Users with losses of 1,000 USDC or less can directly claim an equivalent amount in USDC; users with losses exceeding 1,000 USDC may choose to claim 1,000 USDC and forfeit the remaining recovery allocation, or participate in the Phase 2 proportional recovery plan.Phase 2 funding will primarily come from subsequent recovery of attacker funds and a share of Ostium protocol revenue, with the specific revenue share ratio and related arrangements to be announced by October 30.As previously reported, Ostium's off-chain infrastructure was hacked on July 15, resulting in approximately 23.75 million USDC being withdrawn from the OLP vault.
Odaily News — Gracy Chen, CEO of cryptocurrency exchange Bitget, said the company is not optimistic about recovering the $388 million in crypto assets lost in last week's security incident. Citing the Bybit hack in 2025 as a reference, she noted that approximately one year after that incident, only about 3.5% of the stolen funds had been frozen, and that this does not equate to a completed recovery.Bitget has set up a bounty program offering 5% rewards for frozen funds and recovered funds respectively. The NEAR Intents team said it has intercepted over $50 million in assets related to the attack and frozen approximately $500,000. Tether and Circle have blacklisted the relevant wallets, freezing $318,000 worth of USDT and USDC.Gracy Chen stated that preliminary investigations indicate the attack may match VPN addresses used by North Korea-linked groups, but Bitget has not yet fully ruled out the possibility of an insider job. Bitget has resumed withdrawals in phases, starting with Bitcoin transactions on Monday and continuing with ETH transactions on Tuesday. (Cointelegraph)