News linked to both this project and an event.
A Binance spokesperson told Cointelegraph that it is investigating a potential security issue with an Ethereum wallet. The security team is reviewing related activities, and no impact on user funds has been confirmed at this time.
According to Cointelegraph, Immunefi CEO Mitchell Amador warned that internet users remain at risk of cyberattacks originating from PHP vulnerabilities, particularly on smaller websites that have been slow to apply the upgrade patches released last Wednesday, which could take weeks to complete the updates. He described it as an orchestrated "vulnerability doomsday," characterized by low costs to discover vulnerabilities and high costs to patch them. Amador advised treating any website requiring a login as potentially compromised over the coming weeks, avoiding password reuse, exercising caution when connecting crypto wallets to sites, and revoking unrecognized token approvals. The PHP Foundation previously acknowledged that resource shortages delayed the fix for a critical security vulnerability first identified in 2024. While PHP developers issued emergency patches for two critical vulnerabilities on the same day, websites must still manually apply the updates. Cloudflare CEO Matthew Prince noted that millions of exploitation attempts were recorded across the web within 24 hours of the disclosure, with thousands already underway prior to the announcement. W3Techs estimates that PHP supports approximately 69% of websites using known server-side programming languages. The FBI Cyber Division warned that the flaw could allow malicious actors to "remotely execute code within the PHP core, potentially compromising sensitive data and networks."
According to Cointelegraph, Bitcoin Core developer Antoine Poinsot stated on Thursday on the bitcoin-dev mailing list that large language models (LLMs) have made certain software vulnerabilities extremely easy to rediscover. Maintaining long-term secrecy is already of limited value and instead delays the release of patched versions, prompting the team to update its vulnerability disclosure policy. The new policy dictates that "easily discoverable" vulnerabilities, which can be identified with minimal cost such as through simple LLM prompts, will be patched as soon as possible across all supported major versions, alongside the simultaneous release of security advisories. Other vulnerabilities will continue to be disclosed based on severity: low-severity vulnerabilities will be disclosed two weeks after the release of the major version containing the fix; medium-to-high-severity vulnerabilities will be disclosed two weeks after the end-of-life (EOL) of the last affected version, typically around one year after the patch release; critical vulnerabilities will be handled through a dedicated process.
Bitcoin Core has adjusted its security vulnerability disclosure policy, defining easily discoverable vulnerabilities as those that can be found through simple large language model prompts, and will release fixes as soon as possible across all major versions still under maintenance, while publishing security advisories.Bitcoin Core developer Antoine Poinsot stated that in the past, vulnerabilities were typically kept confidential during a longer disclosure embargo period to allow users to upgrade, but large language models have lowered the threshold for rediscovering certain vulnerabilities, limiting the protective value of delayed fixes.Low-severity vulnerabilities will be disclosed two weeks after the major version containing the fix is released; medium- and high-severity vulnerabilities will be disclosed two weeks after the affected version reaches end of life, typically about one year after the fix enters a new version. Critical vulnerabilities are not subject to the standard policy and will be handled through ad hoc procedures.In August, the volunteer organization Bitcoin Red Team reported nearly 5,000 potential issues across 390 projects, with about one-fifth having been reproduced at the time. Core Lightning developers that same month asked node operators to upgrade or take nodes offline, and delayed disclosure of technical details for two weeks. (Cointelegraph)
According to Cointelegraph, the PHP Foundation admitted that a critical security vulnerability discovered as early as 2024 has yet to be patched due to flawed decision-making processes and understaffing within the security team, calling the delay a structural failure. The vulnerability could allow unauthenticated attackers to remotely execute code on affected servers. On August 11, security firm Calif and OpenAI independently reported the same issue, with Calif also demonstrating unconditional remote code execution, prompting the matter to be elevated to the highest security priority. PHP released emergency patches for two related critical vulnerabilities on Wednesday. Around the time of the patch release, government websites or services in the Netherlands, Finland, France, Germany, and Australia were temporarily taken offline, with the Netherlands shutting down its digital identity service. The Wikimedia Foundation also took some supporting services offline, causing disruptions to certain Wikipedia features. Japanese Prime Minister Sanae Takaichi called on website operators to install the patches as soon as possible. In the crypto sector, monitoring by SlowMist's MistEye service found that out of 1,488 evaluated domains, 793 showed direct PHP fingerprints. Cardano governance organization Intersect temporarily took its member portal offline. Both Coinbase and BitGo stated that their platforms were unaffected. Binance co-founder Changpeng Zhao advised users to exercise extreme caution when visiting websites over the next few days. PHP security team
Odaily reports: The PHP Foundation has stated that due to hesitant decision-making and insufficient resources, remediation work for a critical security vulnerability first discovered in 2024 stalled and restarted multiple times, and it characterized the delay as a "structural failure." PHP is a programming language widely used for websites and web applications.PHP has released emergency patches for two related critical vulnerabilities. Unauthenticated attackers could exploit the flaws to execute code on affected servers without logging in. Some government websites or online services in the Netherlands, Finland, France, Germany, and Australia were temporarily taken offline to prepare for patch installation.Security firm Calif and OpenAI separately reported the same underlying issue on August 11, and Calif also demonstrated unconditional remote code execution. Blockchain security firm SlowMist investigated PHP usage in the crypto industry and found direct PHP fingerprints on 793 of the 1,488 domains it assessed.Intersect has temporarily closed its Members Area, Coinbase said it has not found any affected PHP instances, and digital asset infrastructure company BitGo said its platform was not affected. Binance co-founder Changpeng Zhao reminded users to exercise heightened caution when visiting websites recently, and OpenAI has released a Codex skill for checking for vulnerable PHP versions. (Cointelegraph)
Odaily reports: Blockchain security firm CertiK stated that although Google, Apple, and Microsoft have blocked 8 affected certificates issued by Indian digital certificate authority eMudhra, crypto trading bots and exchange applications may still be exposed to related vulnerability risks, as browser remediation measures may not cover software that uses independent security systems.Peiyu Wang, Senior Director of Digital Asset Security at CertiK, noted that attackers could exploit compromised certificates to impersonate exchanges, wallet interfaces, and APIs, replace deposit addresses, or trick users into approving malicious transactions. However, such attacks would also require intercepting or redirecting network traffic, and the compromised certificate authority keys alone cannot expose wallet private keys. Crypto service operators should update their software and certificate trust stores, and confirm that their applications reject the affected certificates. (Cointelegraph)
Odaily reports: The French Ministry of Finance, the Autorité des Marchés Financiers (AMF), the Banque de France, and the Autorité de Contrôle Prudentiel et de Résolution (ACPR) have jointly proposed amendments to the EU's Markets in Crypto-Assets Regulation (MiCA), requiring crypto platforms to bear responsibility for certain customer losses when they proactively offer access to DeFi protocols without reviewing those protocols or ignoring known security risks.France proposes that platforms review relevant protocols before providing DeFi access, continuously monitor for vulnerabilities and suspicious activity, and support the certification of protocols and smart contracts. The relevant requirements would apply fully to significant crypto-asset service providers (CASPs), with proportionally adjusted obligations for smaller platforms.France also proposes transferring supervisory authority over significant CASPs from national regulators to the European Securities and Markets Authority (ESMA), and lowering the current EU threshold of 15 million daily active users. Additionally, France suggests re-examining the asset-referenced token (ART) category and adjusting the electronic money token (EMT) framework to cover multi-currency stablecoins. (Cointelegraph)
Odaily reports: Multiple tech companies have urgently blocked 8 intermediate certificates with security vulnerabilities issued by Indian digital certificate authority eMudhra Limited. Due to flaws in the private key generation process of the affected certificates, attackers could exploit forged certificates to impersonate legitimate websites and intercept, read, or tamper with user communications.Mozilla cryptography engineer Dennis Jackson stated in an incident report that after receiving the vulnerability report on October 17, Mozilla independently recovered the relevant private keys, confirming that the generation mechanism has serious flaws and is highly exploitable.Mozilla subsequently blocked the affected certificates in Firefox through OneCRL and released browser updates for desktop and Android on October 20. Cloudflare also updated protections for services including Cloudflare One, WARP client, and Cloudflare Tunnel on Tuesday. According to Mozilla's disclosure, Chrome blocked the relevant certificates on Saturday, Apple devices completed blocking on Monday, and Microsoft platforms took corresponding measures on Tuesday. (Cointelegraph)
Odaily reports: Layer-1 blockchain Qubic has restarted its network and initiated a fund recovery process. Previously, attackers exploited a wallet seed vulnerability to drain approximately $1.4 million in QU tokens from 1,404 accounts; network validators Computors have approved a recovery plan, and affected users can submit claims until May 1, 2027.Qubic's block explorer shows the network resumed processing ticks at 20:00 on October 19, surpassing the previously paused progress of 85,371,949. The vulnerability affects wallet seeds generated by certain Apple devices and browsers. Qubic recommends creating new wallets using version 4.26.4 or above and transferring funds as soon as possible. (Cointelegraph)
Odaily reports: Crypto researcher Stacy Muur has compiled a list of 82 digital asset projects and protocols said to have shut down in 2026, including Balancer, Radiant Capital, Neon EVM, Step Finance, and others, spanning DeFi, blockchain infrastructure, and Web3 gaming.The shutdowns were driven by declining revenue, exhausted funding, and security incidents. Earlier this year, Bitcoin's price briefly fell below $60,000, retreating from an all-time high of over $126,000 in October 2025, adding financial pressure on projects.When Ethereum Layer 2 network Blast announced its shutdown, it stated that the project had no "credible path to economic viability." Step Finance shut down following a major treasury exploit, while Radiant Capital announced the end of operations after failing to recover from a 2024 exploit.An August study by DeFiLlama showed that 100 crypto projects had announced shutdowns in 2026, 40 of which occurred in the preceding 90 days; the most common reason was product-market mismatch, followed by exhausted funding, insufficient revenue, and pivots to other products. The projects involved raised a combined total of approximately $1 billion and generated $250 million in cumulative fees, with 9 individual projects each raising over $50 million. (Cointelegraph)
Odaily reports: The crypto project Cysic has announced that its cross-chain bridge was paused on Saturday after an attacker exploited a processing flaw to mint 10 million CYS tokens without authorization on BNB Smart Chain. Preliminary investigations indicate that the attacker may have gained unauthorized access to the database supporting the bridge.The unauthorized minting occurred at 12:31:38 UTC, and Cysic blacklisted the receiving address in the token contract at 13:47:52. The address currently still holds approximately 2.8 million CYS, and related transfers have been restricted.Cysic stated that the incident only involved cross-chain bridge message processing and token minting, and did not affect the mainnet or other operating systems, nor did it result in the theft or unauthorized transfer of existing CYS or other assets in user wallets. Token transfers, swaps, and actual losses are still under review, and the company has engaged security firms and plans to release a follow-up report. (Cointelegraph)
Odaily reports: Cryptocurrency exchange Bitget has announced that it will cease providing services to certain users through a one-time measure. Bitget stated that user funds remain safe during the related service adjustments, and the platform will continue to operate.Affected users will receive follow-up steps, relevant deadlines, and fund withdrawal arrangements via email, in-app messages, and/or push notifications. Users who have not received official notifications from Bitget may continue to use their accounts normally.Bitget's customer support team will assist users with pending orders, withdrawals, and other account issues during the process, and reminds users to use only official channels and to beware of phishing links, impersonation accounts, and unverified information.On September 25, Bitget confirmed an unauthorized transfer and temporarily suspended withdrawals to investigate a security breach. Subsequent disclosures revealed that the incident involved approximately $388 million in stolen assets. (Cointelegraph)
Odaily News: Former Mt. Gox CEO Mark Karpelès stated that hardware wallet manufacturer Ledger received warnings about possible tampering with its hardware wallets as early as December 2025, but did not take sufficient measures to alert customers before the recent security incident occurred.Karpelès believes that Ledger should have disclosed the relevant risks to users earlier and strengthened security warnings. Currently, the above claims are Karpelès's personal allegations, and it cannot yet be confirmed on this basis that Ledger devices have a large-scale security vulnerability. (Cointelegraph)
据 Cointelegraph 报道，安全公司 Hacken 发布 2026 年 Q3 报告显示，第三季度加密货币黑客攻击事件共 107 起，总损失达 11.8 亿美元，为 2025 年 Q1 Bybit 事件（损失 16 亿美元）以来最严重的季度。 其中 77%（约 9.06 亿美元）损失源于第三方供应商、开发工具或未纳入安全审计的基础设施漏洞。四大主要事件分别为：Bitget 黑客攻击（3.87 亿美元）、Liquid Network 漏洞（3.2 亿美元）、Tectonic 漏洞（1.2 亿美元）及 Coldcard 固件漏洞（1.15 亿美元），合计占总损失约 80%。智能合约为最高频攻击向量，涉及 71 起事件，损失 2.28 亿美元。 在资金追回方面，约 3.87 亿美元（33%）被归还或逆转，其中"白帽黑客"归还 Liquid Network 被盗资金 2.72 亿美元，Cronos 验证者回滚 114 分钟区块链历史追回 1.11 亿美元；运营商另行垫付 4.1 亿美元补偿用户损失，但仍有约 3.84 亿美元（32%）既未追回也未获赔付。
Odaily News: Security firm Hacken disclosed that a total of 107 cryptocurrency hacking incidents were recorded in Q3 2026, with total losses amounting to $1.18 billion. Of that, approximately $906 million stemmed from compromised vendors, developer tools, disclosed but undeployed fixes, and infrastructure outside audit scope, accounting for roughly 77% of quarterly losses.Quarterly losses were mainly concentrated in four incidents: crypto trading platform Bitget suffered $387 million in losses from an attack, Liquid Network lost $320 million to exploitation, Tectonic lost $120 million to exploitation, and a Coldcard firmware vulnerability caused approximately $115 million in losses. About 80% of losses were concentrated in the above incidents, while 98 incidents resulted in losses below $10 million, with a median of $670,000.Smart contract incidents were the most common attack type, involving 71 incidents and causing $228 million in losses. Q3 was the most severe quarter for losses since Q1 2025, when a $1.4 billion loss by Bybit pushed the quarterly total to $1.6 billion.Approximately $387 million of Q3 losses were returned or reversed, accounting for about 33% of gross losses. Among these, about $272 million was returned in the Liquid Network incident; the Tectonic incident reversed approximately $111.2 million in lending impact by rolling back 114 minutes of blockchain history, and Circle and Tether also froze approximately $340,000 related to funds stolen from Bitget. Operators additionally absorbed $410 million in user losses, leaving approximately $384 million still not returned or covered. (Cointelegraph)
According to Cointelegraph, South Korea's Financial Services Commission (FSC) plans to implement stricter cybersecurity requirements for financial institutions and cryptocurrency exchanges. A prior industry review revealed that out of 555 financial institutions, 130 had cybersecurity vulnerabilities, resulting in the exposure of approximately 100,000 customer personal information records. The affected institutions include Streami, the operator of Gopax, and crypto exchange Prabang, which disclosed that it was hacked on October 2, leading to a customer data breach.
South Korea's Financial Services Commission (FSC) has announced plans to enhance threat monitoring, increase the frequency of security assessments, and strengthen executive accountability. An industry review revealed that 130 out of 555 financial companies have cybersecurity deficiencies, involving 16 prior security incidents.The FSC stated that the affected institutions had approximately 100,000 customer records exposed in total, including names, contact information, and ID numbers. Affected institutions include Streami, the operator of Gopax, and cryptocurrency trading platform Prabang, which previously disclosed that a hack on October 2 resulted in the leak of some customers' personal information.Under the proposed reforms, large financial institutions would undergo vulnerability assessments at least twice a year, and regulators also plan to strengthen information sharing and consider using AI to monitor the security posture of smaller companies. In the event of urgent threats, regulators may also conduct additional inspections beyond routine assessments. Authorities are still investigating whether the incidents involved AI or were carried out by the same attacker. (Cointelegraph)
According to Cointelegraph, Ethereum researcher Justin Drake warned that the rapid advancement of AI could accelerate mathematical attacks against the Elliptic Curve Digital Signature Algorithm (ECDSA), potentially breaking existing cryptographic systems within months under the worst-case scenario, and called on the industry to initiate "bunker mode"—transferring assets to new addresses with previously unexposed public keys to mitigate risk. Several industry insiders, however, expressed reservations. Coinbase Chief Cryptographer Yehuda Lindell stated there is currently "no evidence" that the mathematical assumptions underpinning ECDSA have been weakened; Trezor Bitcoin analyst Lucien Bourdon similarly noted that migrating assets could backfire and inadvertently create opportunities for scams. MetaMask founder Taylor Monahan was even more direct, asserting that if elliptic curve cryptography were truly compromised, "the entire world would go to zero," rendering bunker mode ineffective. Meanwhile, Ethereum has laid out a post-quantum roadmap based on hash-based signatures and ZK proofs, while public blockchains such as Solana and NEAR are also exploring their own quantum-safe alternatives, though concrete deployment timelines remain unset.
Odaily News: The Financial Stability Board (FSB) has stated that cross-border stablecoin regulation and crisis management mechanisms remain immature or have yet to be established. FSB Chair Andrew Bailey noted that its 2025 review shows that only 11 out of the 28 jurisdictions surveyed have completed building stablecoin regulatory frameworks.The FSB warned that stablecoin runs could transmit to traditional financial markets through forced sales of reserve assets and bank deposit withdrawals. For multi-issuer stablecoins, redemption demands could concentrate on a single issuer, while reserve assets are distributed across different jurisdictions — a similar risk that European Central Bank (ECB) President Christine Lagarde had previously flagged.The FSB has finalized practices for the responsible adoption of AI in the financial sector, covering organizational governance, AI development and deployment, cybersecurity, and third-party service risks. Andrew Bailey stated that AI-driven sophisticated cyberattacks could undermine the resilience of critical financial institutions and market infrastructure. The FSB has submitted related correspondence to the G20 Finance Ministers and Central Bank Governors meeting. (Cointelegraph)