News linked to both this project and an event.
Odaily report: Analysts from three Wall Street firms—Cantor Fitzgerald, TD Cowen, and Compass Point—all believe that despite Binance suffering an approximately $6.3 billion hack, there is currently insufficient evidence to suggest the incident will threaten the broader crypto market, and the market's prior recovery trend is unlikely to be interrupted as a result.Cantor Fitzgerald analyst Ramsey El-Assal noted that Tether has frozen over $1.5 billion in stolen assets, Circle has frozen approximately $800 million, and Ripple has frozen about $200 million, with Binance stating that the total frozen stolen funds currently amount to roughly $3 billion. He believes the crypto industry is gradually improving its ability to respond to such security incidents and expects crypto-related stocks such as Coinbase, Robinhood, and Strategy to rebound once market panic subsides, recommending that investors buy on the dip.TD Cowen analyst Lance Vitanza believes the attack exposed security weaknesses in Binance's own transaction signing infrastructure rather than flaws in the underlying technology of cryptocurrencies like Bitcoin, and that the market sell-off may present an opportunity to accumulate Bitcoin and shares of listed companies holding Bitcoin.Compass Point analysts believe Binance has sufficient liquidity to cover the funding gap, and expect its excess USDT reserves, BTC reserves, and USDC funds to be adequate to absorb the losses. However, the firm also warned that Binance compensating customers could put pressure on stablecoin supply and may drive users to migrate from centralized exchanges to competing platforms such as Coinbase, Bullish, and Hyperliquid. (CoinDesk)
following a suspected North Korean hacker attack on Binance involving $6.3 billion, Bitcoin briefly fell to $76,400, its lowest level since September 18, before rebounding somewhat. Ethereum touched a low of $2,170 before recovering to around $2,220.Risk-off sentiment has intensified in the market, with bearish sentiment heating up in both BTC and ETH options markets. Among the options with the highest trading volumes, put options account for the majority, and 25 Delta skews across multiple expiries have risen simultaneously, reflecting increased demand for hedging against downside risk. Meanwhile, weakness in U.S. tech stocks has also added pressure to the market, with Nasdaq 100 index futures falling 2.3%. (CoinDesk)
According to CoinDesk's analysis, the hacked Binance Hot Wallet 14 was listed in Binance's October 1 Proof of Reserves; following the theft of approximately 204,500 ETH, its ETH backing ratio may drop from 100% to around 94%, with the next reserve snapshot scheduled for November 1.
According to CoinDesk and security firm Blockaid, Binance's hot wallet has experienced large-scale abnormal outflows since 04:24 Beijing Time. New addresses are holding over $2 billion in assets, Binance has not yet confirmed an attack; BNB dropped approximately 6% within one hour.
According to CoinDesk, Polymarket officially confirmed that one of its third-party service providers was compromised, resulting in the theft of user assets on its international platform. The issue has been resolved and handed over to law enforcement authorities. Affected users will receive full compensation, and trading on the platform remains suspended.
Odaily reports: South Korean cryptocurrency exchange Bithumb has stated that its internal mobile system used by employees for work and communications was breached by external parties, with some personal information stolen. The exchange is currently investigating the specific scope of impact, including whether customer information was involved.Bithumb discovered the breach on October 27 and has reported it to the Korea Internet & Security Agency and the Personal Information Protection Commission. The exchange emphasized that the compromised internal system operates independently from its trading platform, and that attackers cannot access customer crypto assets through this breach.As of now, no crypto asset losses have been reported, and the specific number of affected individuals and whether deposit and withdrawal services were impacted have not yet been disclosed. (CoinDesk)
According to CoinDesk, Ethereum developers have fixed a bug in the upcoming Glamsterdam upgrade that could cause ETH deposited by staking services for new validators to be incorrectly credited to block builder accounts, giving operators the opportunity to withdraw the associated funds. The fix was merged into the Ethereum consensus specification on October 26, having previously been rejected on October 19 due to insufficient support from client teams.
As reported by CoinDesk, Indian cryptocurrency exchange CoinDCX has confirmed a loss of $16 million. The incident occurred because its sweeping process failed to withdraw customer deposits from wallets compromised in a July 2025 hack. The exchange stated it would absorb the loss itself and confirmed that active users' funds remain secure.
Odaily reports: Bitcoin Core developers have merged a security policy adjustment. For vulnerabilities that can be easily discovered or rediscovered through simple large language model (LLM) prompts, the previous long-term confidential disclosure mechanism will no longer be used. The new rules allow developers to mark such issues as "easy to find" during vulnerability classification, then backport fixes to all still-supported versions and release them as soon as possible through minor version updates, along with a security advisory and some vulnerability details.Previously, Bitcoin Core scheduled disclosure based on vulnerability severity, with medium- and high-risk vulnerabilities usually only made public after the affected versions stopped being maintained. This adjustment stems from AI tools lowering the threshold for vulnerability discovery: in July this year, a Bitcoin Red Team composed of 16 developers used AI models to scan about 390 Bitcoin-related projects and recorded 4,962 findings in one day, of which 85 were listed as critical issues. Developers noted that continuing to extend the confidentiality period for such vulnerabilities can no longer effectively prevent attacks and instead delays the release of fixed versions; however, the new rules also mean that fixes may lack longer testing time. Currently, no vulnerability has been officially marked as falling into the "easy to find" category under the new rules. (CoinDesk)
According to CoinDesk, the XRP Ledger’s validator support temporarily fell to 26/35, re-triggering the two-week countdown for its vulnerability fix and delaying patch activation to November. Validator support has since rebounded to 31, but due to the reset mechanism, the fix has missed its originally scheduled final activation window.
Odaily reports: According to White House officials, U.S. President Trump plans to highlight his administration's efforts to combat scams carried out by overseas criminal organizations using cryptocurrency at a cybercrime event held at the White House. Transnational criminal syndicates are said to have stolen funds from American citizens through romance scams, phishing, ransomware attacks, and other means. U.S. law enforcement agencies have frozen approximately $833 million in crypto assets linked to overseas fraud and, under a Department of Homeland Security task force operation, seized 503 fraudulent cryptocurrency websites, while notifying nearly 9,000 U.S. citizens that they were being targeted by scams. As the U.S. congressional midterm elections approach, Trump and his administration's ties to the crypto industry are also drawing scrutiny over conflict-of-interest allegations. (CoinDesk)
According to CoinDesk, the development team behind Zcash's new node software, Zakura, plans to generate a unique viewing key for each ZEC swap conducted via NEAR Intents, while the spending key remains secured by the user's primary account. Under the current architecture, when users swap private ZEC for USDC via NEAR Intents, one of their Zcash privacy addresses is publicly broadcast on the NEAR public chain as a refund address and remains retained after the swap is completed. While this address currently does not leak information, sufficiently powerful quantum computers in the future could potentially reverse-engineer the viewing key using Shor's algorithm, thereby linking all payments received by that account, including amounts and memos. By implementing a "one-key-per-swap" approach, even if a refund address is compromised, attackers will only be able to view payments related to that specific swap. To address the issue of having to scan the entire blockchain sequentially during wallet recovery due to an abundance of keys, Zakura employs Private Information Retrieval (PIR) technology, allowing the wallet to query the location of incoming refunds without the database learning which address was queried.
a report from blockchain security firm Hacken shows that in Q3 2026, there were 107 security incidents in the crypto industry, with losses amounting to $1.18 billion, up 55% quarter-over-quarter. Of this, approximately $906.8 million in losses involved compromised vendors or development tools, known vulnerabilities that were not patched in a timely manner, and related components not being included in the latest audit scope.Hacken co-founder Andrii Matiukhin pointed out that project teams often only audit critical smart contracts, while wallets, signing systems, and third-party software may not be covered, leading investors to mistakenly believe that the project is secure as a whole. The report states that the largest loss event in Q3 was the attack on Bitget, with losses of at least $352 million, in which attackers exploited a vulnerability in a third-party security product to gain access to withdrawal infrastructure.Hacken also found that the asset security of some derivatives trading platforms and prediction markets relies on inadequate key management arrangements, but no vulnerabilities currently being exploited have been found in the relevant platforms. The company emphasized that security audits cannot replace continuous vulnerability management, and project teams still need to promptly fix known vulnerabilities and ensure that audits cover the system components that actually affect the safety of funds. (CoinDesk)
According to CoinDesk, blockchain analytics firm Chainalysis disclosed on Thursday on X that a cryptocurrency scammer who profited from a "task scam" (luring victims with paid review boosting or order brushing, then demanding account top-ups under the guise of a "negative balance") transferred the illicit proceeds to three Ledger hardware wallet addresses. These addresses were subsequently drained by attackers, resulting in a total loss of 60 BTC valued at over $4.9 million, making it one of the biggest victims in this Ledger device intrusion incident.
Odaily News: Crypto hardware wallet company Ledger will launch the Atom in mid-2027. The device supports running apps such as WhatsApp and Instagram, and can switch between smartphone functionality and a protected digital asset management mode.The Atom will feature a tamper-resistant casing, sensors, and specialized packaging, which can help prevent supply chain attacks like the recent CryptoBilis vulnerability even when the device is powered off.Ledger initially plans to sell the Atom exclusively through its official website to reduce third-party distribution risks, but will not offer trade-in services for customers affected by the vulnerability. (CoinDesk)
multiple blockchain analytics firms estimate attackers stole as much as $94.5 million in assets from hundreds of wallets tied to Ledger devices sold by authorized reseller CryptoBilis. Ledger has not yet confirmed this total.Hardware wallet company Ledger discovered that at least one affected device had unauthorized hardware implanted inside it; stablecoin issuer Tether has frozen $10 million in USDT linked to the theft, and investigators are still tracing the flow of funds.Ledger advises CryptoBilis customers not to set up devices they have not yet used; customers already using affected devices should move their assets to new devices and generate new recovery phrases. (CoinDesk)
According to CoinDesk, the privacy cryptocurrency Zcash (ZEC) development team plans to introduce a post-quantum signature opcode on the network in January to support hash-based signatures, thereby defending against potential quantum computing attacks. This proposal primarily targets the transparent (public) payment pool, where approximately 70% of ZEC is currently held. Although developers have set January as the target deadline, the specific timing for network activation has not yet been finalized.
Odaily News: As the crypto industry discusses whether users need to enter "bunker mode" before AI or quantum computing technologies expose wallet private keys, custody institutions face a more complex challenge: how to upgrade key management, approval, and audit systems before an emergency migration occurs.Project Eleven CEO Alex Pruden stated that institutions have already begun preparing for post-quantum migration outside of blockchain, and different blockchains may adopt different quantum-resistant signature schemes and migration paths in the future. Institutions holding multiple types of assets will face the challenge of simultaneously adapting to multiple cryptographic systems.Quantus co-founder and CEO Christopher Smith stated that AI is accelerating the development of quantum hardware and software, and the tail risk of quantum attacks should be incorporated into portfolio decisions — this is an institutional fiduciary duty.Currently, the timeline for quantum computers to crack Bitcoin and Ethereum's existing public-key cryptographic systems remains uncertain, but the industry is gradually viewing the coming years as a window for establishing migration plans, rather than waiting for an attack to occur before responding reactively. (CoinDesk)
Odaily reports: A wallet linked to the $387.5 million Bitget exploit transferred 2,746 ZEC into Zcash's Ironwood privacy pool on Wednesday across three transactions, worth approximately $3.9 million.The funds account for roughly 15% of the ZEC stolen on September 24. The Ironwood privacy pool can conceal the sender, recipient, and transfer amount, but investigators may still be able to trace the path of funds returning to public addresses through transaction timing and amounts. (CoinDesk)
Odaily News: Cross-chain protocol Chainlink has released CCIP 2.0, allowing enterprises to add their own security checks for cross-blockchain transfers on top of its default network of 16 operator validators.The upgrade comes after Kelp DAO suffered a $292 million hack in April, an incident attributed to a LayerZero cross-chain bridge setup using a single validator; Kelp DAO subsequently migrated its rsETH token to Chainlink.Chainlink's risk management network no longer operates as a standalone security safeguard, and users who do not add their own validators will rely on one validation network rather than two. (CoinDesk)