News linked to both this project and an event.
Odaily reports: The French Senate has passed a bill on first reading authorizing tax authorities to automatically exchange crypto asset transaction data with foreign counterpart agencies. The bill has subsequently been submitted to the National Assembly for review as Bill No. 3421 and still needs to complete the legislative process.The bill covers agreements on the exchange of crypto asset tax information and updates existing agreements on the exchange of financial account information. The crypto asset portion is based on the Crypto-Asset Reporting Framework (CARF) developed by the Organisation for Economic Co-operation and Development, which sets common standards for collecting and automatically exchanging crypto transaction information for participating jurisdictions.France has already implemented the EU's Eighth Amendment to the Administrative Cooperation Directive (DAC8) through its 2025 finance bill, requiring crypto service providers to report client identity and transaction data to tax authorities, which then share the information with the EU country where the user resides. French lawmakers are also discussing crypto tax adjustments in the 2027 budget. An amendment passed by the National Assembly on October 16 proposes taxing gains from conversions into specific fiat-pegged stablecoins starting January 1, 2027, but the measure has not yet become law. (Cointelegraph)
the Bank of England (BoE) has opened a consultation on central counterparties (CCPs) accepting digital representations of eligible collateral, and stated that current rules already permit the use of such assets when they meet clearing standards. The proposed supervisory statement will clarify what CCPs need to address when submitting applications under the existing approval process, without creating new regulatory obligations.The Bank of England stated that tokenized collateral must remain capable of valuation, transfer, and liquidation under stress scenarios, and that faster cross-jurisdictional asset transfers could help firms meet margin requirements. The consultation will close on February 12, 2027, and the central bank expects to publish its policy response and related rules later this quarter. (Cointelegraph)
Phase has announced the launch of its blockchain mainnet and has secured a $45 million funding commitment from Kirill Eves, founder of payment company Unlimit. Phase stated that it has no external investors; the commitment covers the project's first two years of development and provides funding support for the following two years. (Cointelegraph)
Odaily reports: Gate Money connects account payments, asset exchange, and everyday spending, with its services underpinned by collaboration among international banks, payment institutions, custody providers, and clearing institutions. Eligible users can use bank accounts in their own name to manage fiat funds by currency, process deposits and withdrawals, and send and receive digital assets through supported blockchain networks. The availability of each feature depends on local regulatory requirements, the service capabilities of partner institutions, and user eligibility.On the compliance front, Gate has obtained a MiCA license and a Payment Institution (PI) license in the EU, its Dubai entity has obtained a VARA license, and its Australian entity has completed AUSTRAC registration as a digital currency exchange provider, with these qualifications applying to the respective entities and approved business activities. Gate US holds 37 state-level Money Transmitter Licenses (MTLs), covering 47 U.S. states and territories. On asset transparency, Gate's latest proof of reserves shows that the platform's total reserve size has risen to USD 8.688 billion, with an overall reserve coverage ratio of 118.49%; BTC reserves reached 25,727, with a reserve ratio of 121.60%; ETH reserves stood at 449,042, with a reserve ratio of 123.78%. Collaboration with financial institutions, compliance qualifications, and verifiable reserves together form the foundation of Gate Money's services, supporting the platform in meeting fund payment and asset management needs beyond trading. (Cointelegraph)
European stock exchange operator Euronext has suspended the listing and trading of the CoinShares Zcash ETP until further notice. The product was originally scheduled to begin trading on Wednesday on Euronext Paris, but the suspension is due to settlement operational requirements not yet being met.Euronext stated that trading will only resume once the Central Securities Depository (CSD) is able to fully support standard settlement operations. This suspension delays the listing of Europe's fourth Zcash-based ETP. (Cointelegraph)
Odaily reports: Vlad Tenev, CEO of fintech company Robinhood, said the US tokenized market needs more durable regulatory rules. On the company's third-quarter earnings call, he stated that the US Securities and Exchange Commission (SEC)'s innovation exemption is a positive step, but uncertainty in regulatory rules could deter investors from committing substantial assets to the tokenized market.Tenev said that establishing further rules or passing legislation would help provide long-term regulatory certainty. Robinhood plans to launch tokenized private company equity products overseas; in the US, the company is seeking a compliant path that fits within existing investor accreditation restrictions.Robinhood currently offers about 200 tokenized equities, backed by underlying shares, but the products are structured as tokenized debt securities and do not carry the same shareholder rights as traditional stocks, and therefore do not meet the SEC's innovation exemption requirements. In the third quarter, the company's crypto revenue fell 55% year-over-year to $120 million, while crypto notional trading volume dropped 38% to $50 billion. (Cointelegraph)
According to Cointelegraph, Immunefi CEO Mitchell Amador warned that internet users remain at risk of cyberattacks originating from PHP vulnerabilities, particularly on smaller websites that have been slow to apply the upgrade patches released last Wednesday, which could take weeks to complete the updates. He described it as an orchestrated "vulnerability doomsday," characterized by low costs to discover vulnerabilities and high costs to patch them. Amador advised treating any website requiring a login as potentially compromised over the coming weeks, avoiding password reuse, exercising caution when connecting crypto wallets to sites, and revoking unrecognized token approvals. The PHP Foundation previously acknowledged that resource shortages delayed the fix for a critical security vulnerability first identified in 2024. While PHP developers issued emergency patches for two critical vulnerabilities on the same day, websites must still manually apply the updates. Cloudflare CEO Matthew Prince noted that millions of exploitation attempts were recorded across the web within 24 hours of the disclosure, with thousands already underway prior to the announcement. W3Techs estimates that PHP supports approximately 69% of websites using known server-side programming languages. The FBI Cyber Division warned that the flaw could allow malicious actors to "remotely execute code within the PHP core, potentially compromising sensitive data and networks."
According to Cointelegraph, Bernstein analysts stated in predictions shared with Cointelegraph on Monday that by 2028, prediction markets could generate up to $1.7 billion in revenue for Robinhood, surpassing the projected $1.6 billion from its crypto business that same year. Analysts project that Robinhood's prediction market revenue will rise from approximately $650 million this year to $1.7 billion in 2028, accounting for roughly 18% of its projected total revenue of $9.4 billion in 2028. Bernstein raised its revenue forecasts for Robinhood for 2026 by 3%, 2027 by 4%, and 2028 by 3%, while maintaining a $160 price target. The forecast was released the day before Robinhood's Q3 2026 earnings report. Bernstein expects its Q3 revenue to increase 13% quarter-over-quarter to approximately $1.5 billion.
According to Cointelegraph, Bitcoin Core developer Antoine Poinsot stated on Thursday on the bitcoin-dev mailing list that large language models (LLMs) have made certain software vulnerabilities extremely easy to rediscover. Maintaining long-term secrecy is already of limited value and instead delays the release of patched versions, prompting the team to update its vulnerability disclosure policy. The new policy dictates that "easily discoverable" vulnerabilities, which can be identified with minimal cost such as through simple LLM prompts, will be patched as soon as possible across all supported major versions, alongside the simultaneous release of security advisories. Other vulnerabilities will continue to be disclosed based on severity: low-severity vulnerabilities will be disclosed two weeks after the release of the major version containing the fix; medium-to-high-severity vulnerabilities will be disclosed two weeks after the end-of-life (EOL) of the last affected version, typically around one year after the patch release; critical vulnerabilities will be handled through a dedicated process.
Bitcoin Core has adjusted its security vulnerability disclosure policy, defining easily discoverable vulnerabilities as those that can be found through simple large language model prompts, and will release fixes as soon as possible across all major versions still under maintenance, while publishing security advisories.Bitcoin Core developer Antoine Poinsot stated that in the past, vulnerabilities were typically kept confidential during a longer disclosure embargo period to allow users to upgrade, but large language models have lowered the threshold for rediscovering certain vulnerabilities, limiting the protective value of delayed fixes.Low-severity vulnerabilities will be disclosed two weeks after the major version containing the fix is released; medium- and high-severity vulnerabilities will be disclosed two weeks after the affected version reaches end of life, typically about one year after the fix enters a new version. Critical vulnerabilities are not subject to the standard policy and will be handled through ad hoc procedures.In August, the volunteer organization Bitcoin Red Team reported nearly 5,000 potential issues across 390 projects, with about one-fifth having been reproduced at the time. Core Lightning developers that same month asked node operators to upgrade or take nodes offline, and delayed disclosure of technical details for two weeks. (Cointelegraph)
Odaily reports: Prediction market operator Underdog has partnered with crypto infrastructure provider zerohash, planning to support cryptocurrency and stablecoin deposits later this year. Eligible users will be able to deposit supported digital assets directly through the Underdog app, with the service supporting around-the-clock near-instant transfers.Underdog has not yet disclosed which specific cryptocurrencies or stablecoins will be supported. The new deposit method will complement debit cards, credit cards, Apple Pay, and bank transfers, eliminating the need for users to manage wallet addresses or select blockchain networks.Founded in 2020, Underdog currently has over 11 million registered accounts. IG Group has agreed to acquire the company for up to $1.3 billion, with the deal expected to close in late 2026 or early 2027; in the 30 days ending October 21, Underdog's trading volume reached $1.4 billion, up 133% from the previous period. (Cointelegraph)
In a research report released on Thursday, DWF Labs pointed out that daily fund flows of U.S. spot Bitcoin ETFs are poor predictors of Bitcoin's subsequent price movements, as investors tend to buy after prices rise and withdraw funds when prices fall. The study covered 694 trading days since the launch of U.S. spot Bitcoin ETFs in January 2024: in the 8 instances where Bitcoin's price dropped by 15%, net ETF outflows occurred 7 times; while in all 9 instances where prices rose by 15%, net inflows occurred. DWF Labs concluded that ETF fund flows are more of a confirmation of market trends rather than a leading indicator.Data shows that the correlation coefficient between same-day ETF fund flows and Bitcoin price changes over the previous 5 trading days was 0.54, but the correlation coefficient with price changes over the subsequent 5 trading days was only 0.03. Between October 2025 and February 2026, Bitcoin ETFs saw net outflows of approximately $6.9 billion, and during the market downturn from May to June 2026, net outflows reached approximately $8.2 billion. DWF Labs also noted that some ETF trading may involve hedging strategies that combine buying fund shares with shorting Bitcoin via CME futures, meaning fund flows do not directly reflect investors' true bullish or bearish positions. (Cointelegraph)
According to Cointelegraph, the PHP Foundation admitted that a critical security vulnerability discovered as early as 2024 has yet to be patched due to flawed decision-making processes and understaffing within the security team, calling the delay a structural failure. The vulnerability could allow unauthenticated attackers to remotely execute code on affected servers. On August 11, security firm Calif and OpenAI independently reported the same issue, with Calif also demonstrating unconditional remote code execution, prompting the matter to be elevated to the highest security priority. PHP released emergency patches for two related critical vulnerabilities on Wednesday. Around the time of the patch release, government websites or services in the Netherlands, Finland, France, Germany, and Australia were temporarily taken offline, with the Netherlands shutting down its digital identity service. The Wikimedia Foundation also took some supporting services offline, causing disruptions to certain Wikipedia features. Japanese Prime Minister Sanae Takaichi called on website operators to install the patches as soon as possible. In the crypto sector, monitoring by SlowMist's MistEye service found that out of 1,488 evaluated domains, 793 showed direct PHP fingerprints. Cardano governance organization Intersect temporarily took its member portal offline. Both Coinbase and BitGo stated that their platforms were unaffected. Binance co-founder Changpeng Zhao advised users to exercise extreme caution when visiting websites over the next few days. PHP security team
Odaily reports: The PHP Foundation has stated that due to hesitant decision-making and insufficient resources, remediation work for a critical security vulnerability first discovered in 2024 stalled and restarted multiple times, and it characterized the delay as a "structural failure." PHP is a programming language widely used for websites and web applications.PHP has released emergency patches for two related critical vulnerabilities. Unauthenticated attackers could exploit the flaws to execute code on affected servers without logging in. Some government websites or online services in the Netherlands, Finland, France, Germany, and Australia were temporarily taken offline to prepare for patch installation.Security firm Calif and OpenAI separately reported the same underlying issue on August 11, and Calif also demonstrated unconditional remote code execution. Blockchain security firm SlowMist investigated PHP usage in the crypto industry and found direct PHP fingerprints on 793 of the 1,488 domains it assessed.Intersect has temporarily closed its Members Area, Coinbase said it has not found any affected PHP instances, and digital asset infrastructure company BitGo said its platform was not affected. Binance co-founder Changpeng Zhao reminded users to exercise heightened caution when visiting websites recently, and OpenAI has released a Codex skill for checking for vulnerable PHP versions. (Cointelegraph)
Solana's first major consensus upgrade, Alpenglow, went live on mainnet around 13:54 UTC on Wednesday. The upgrade aims to reduce transaction finality time from approximately 12.8 seconds to about 150 milliseconds, a reduction of roughly 99%.In the first phase of the upgrade, Votor will replace the existing voting and finality confirmation mechanism with direct validator voting and a certificate-based system; subsequent phases will introduce the Rotor block data dissemination protocol, replacing Turbine. At the time the upgrade launched, Solana mainnet transaction finality was 6.6 seconds, with throughput of 4,721 transactions per second.Alpenglow will replace Solana's existing TowerBFT consensus model. Validators are expected to continue developing Agave 4.5, an upgrade plan that would increase the number of accounts supported by versioned transactions from 64 to 96, currently scheduled for launch in December 2026. (Cointelegraph)
Odaily reports: Blockchain security firm CertiK stated that although Google, Apple, and Microsoft have blocked 8 affected certificates issued by Indian digital certificate authority eMudhra, crypto trading bots and exchange applications may still be exposed to related vulnerability risks, as browser remediation measures may not cover software that uses independent security systems.Peiyu Wang, Senior Director of Digital Asset Security at CertiK, noted that attackers could exploit compromised certificates to impersonate exchanges, wallet interfaces, and APIs, replace deposit addresses, or trick users into approving malicious transactions. However, such attacks would also require intercepting or redirecting network traffic, and the compromised certificate authority keys alone cannot expose wallet private keys. Crypto service operators should update their software and certificate trust stores, and confirm that their applications reject the affected certificates. (Cointelegraph)
Odaily reports: The French Ministry of Finance, the Autorité des Marchés Financiers (AMF), the Banque de France, and the Autorité de Contrôle Prudentiel et de Résolution (ACPR) have jointly proposed amendments to the EU's Markets in Crypto-Assets Regulation (MiCA), requiring crypto platforms to bear responsibility for certain customer losses when they proactively offer access to DeFi protocols without reviewing those protocols or ignoring known security risks.France proposes that platforms review relevant protocols before providing DeFi access, continuously monitor for vulnerabilities and suspicious activity, and support the certification of protocols and smart contracts. The relevant requirements would apply fully to significant crypto-asset service providers (CASPs), with proportionally adjusted obligations for smaller platforms.France also proposes transferring supervisory authority over significant CASPs from national regulators to the European Securities and Markets Authority (ESMA), and lowering the current EU threshold of 15 million daily active users. Additionally, France suggests re-examining the asset-referenced token (ART) category and adjusting the electronic money token (EMT) framework to cover multi-currency stablecoins. (Cointelegraph)
South Korean credit card company Shinhan Card has announced that it has signed an agreement with Japanese electronic payment instrument trading service providers SBI VC Trade and SBI XDC Network APAC to test yen stablecoin payments for tourists and cross-border trade settlement between Japan and South Korea. The agreement was signed on Tuesday, and the testing scope includes stablecoin card payments, wallet-to-wallet payments, and cross-border settlement, as well as evaluating anti-money laundering and fraud detection mechanisms.The initiative aims to support cross-border payments and settlement between South Korea and Japan and improve payment convenience for tourists. In the first eight months of 2026, tourist exchanges between the two countries exceeded 10 million visits, including 7.42 million South Korean visitors to Japan and 2.7 million Japanese visitors to South Korea.Shinhan Card announced in April this year that it had completed a proof of concept for stablecoin payments and cross-border settlement. SBI VC Trade registered in March 2025 as Japan's first electronic payment instrument trading service provider and can handle USDC. (Cointelegraph)
Odaily reports: Multiple tech companies have urgently blocked 8 intermediate certificates with security vulnerabilities issued by Indian digital certificate authority eMudhra Limited. Due to flaws in the private key generation process of the affected certificates, attackers could exploit forged certificates to impersonate legitimate websites and intercept, read, or tamper with user communications.Mozilla cryptography engineer Dennis Jackson stated in an incident report that after receiving the vulnerability report on October 17, Mozilla independently recovered the relevant private keys, confirming that the generation mechanism has serious flaws and is highly exploitable.Mozilla subsequently blocked the affected certificates in Firefox through OneCRL and released browser updates for desktop and Android on October 20. Cloudflare also updated protections for services including Cloudflare One, WARP client, and Cloudflare Tunnel on Tuesday. According to Mozilla's disclosure, Chrome blocked the relevant certificates on Saturday, Apple devices completed blocking on Monday, and Microsoft platforms took corresponding measures on Tuesday. (Cointelegraph)
Odaily reports: Layer-1 blockchain Qubic has restarted its network and initiated a fund recovery process. Previously, attackers exploited a wallet seed vulnerability to drain approximately $1.4 million in QU tokens from 1,404 accounts; network validators Computors have approved a recovery plan, and affected users can submit claims until May 1, 2027.Qubic's block explorer shows the network resumed processing ticks at 20:00 on October 19, surpassing the previously paused progress of 85,371,949. The vulnerability affects wallet seeds generated by certain Apple devices and browsers. Qubic recommends creating new wallets using version 4.26.4 or above and transferring funds as soon as possible. (Cointelegraph)