News Heat Trend
Project Overview
Powered by a new consensus mechanism, Satoshi Plus, Core is a Turing-complete blockchain that leverages the Bitcoin mining hashrate and the Ethereum Virtual Machine (EVM). Satoshi Plus applies a protocol-driven validator election mechanism to combine the best features of Proof of Work (PoW) and Delegated Proof of Stake (DPoS) to maximize security, scalability, and decentralization.
Could Become a Trillion-Dollar Company, Michael Saylor Says Strategy Will Focus on Digital Credit as Its Core Business
Bitcoin Treasuries posted on X platform stating that Strategy's Michael Saylor said Strategy could become a company valued at $1 trillion with digital credit as its core business. Saylor stated that Strategy's future depends on converting Bitcoin capital into credit; if the credit business performs well, the company's equity performance will outperform Bitcoin. Digital credit is the product, and equity is the byproduct; if the credit business operates well, the company should trade at a premium.
Core Warning on US Stock Market Topping: Slumping Asian Chip Exports May Signal an Early Capex Peak; Once Earnings Expectations Reverse, High Yields Will Crush Valuations
Bloomberg macro strategist Simon White notes that the key to whether US equities can continue to rise lies not in the level of Treasury yields, but in Asian semiconductor supply chain data. The current resilience of US stocks is primarily underpinned by an exceptional projected earnings growth rate of up to 40% for the S&P 500 index over the next three years. The impact of high discount rates is temporarily offset by strong revenue and margin expectations, and the current rise in yields is driven by real interest rates reflecting actual economic growth, which have not yet posed a substantive threat to the stock market.
Gate Research: US, Japanese, Korean, and Hong Kong Stocks Have Divergent Return Drivers, Gate Stocks Connect Four Core Markets
Odaily News: Gate Research has released its latest report on Gate TradFi connecting global markets, noting that the four markets—US, Japan, South Korea, and Hong Kong—have different sources of returns: US stocks rely on corporate earnings and technology investment, Japanese stocks benefit from governance reform and improved capital efficiency, Korean stocks are primarily driven by the semiconductor cycle, and Hong Kong stocks depend on Chinese corporate earnings, capital flows, and changes in risk premiums.Since 2016, US and Korean stocks have delivered similar annualized returns, but Korean stocks have notably higher volatility and drawdowns; Japanese stocks offer some diversification value, while Hong Kong stocks have undergone a longer valuation recovery cycle. Backtesting shows that cross-market diversification can reduce reliance on any single market, and trend rotation can help improve drawdowns, but neither can eliminate systemic risk, and higher turnover may increase trading costs.Gate TradFi incorporates US, Japanese, Korean, and Hong Kong stocks into a unified stock account, covering over 10,000 US stocks and ETFs, more than 1,500 Hong Kong stocks, over 1,000 Korean stocks, and approximately 300 Japanese stocks, totaling coverage of more than 12,800 stock and ETF assets globally. The platform further connects index, forex, and metals market data, enabling investors to conduct cross-regional market comparisons, asset screening, and portfolio management within the same trading environment, expanding multi-asset observation and trading scenarios.
Hong Kong Plans to Refine Virtual Asset Licensing and Tokenization Framework, Pushing for Regulated Stablecoin Trading
Odaily News: Hong Kong's 2026 Policy Address proposes that the Securities and Futures Commission (SFC) refine the virtual asset licensing regime and formulate regulatory guidelines to clarify the compliance pathway for virtual asset service providers. It also aims to improve the regulatory framework for tokenized investment products, promoting the issuance, trading, and launch of innovative products for gold and other suitable real-world asset tokenized products on licensed platforms.The Hong Kong Monetary Authority (HKMA) will explore more tokenized deposit applications, collaborate with mainland China to study trade finance use cases, and complete pilot transactions by the end of this year. It plans to finalize the Ensemble central bank digital currency 24/7 operational arrangements around the end of this year. HKEX intends to partner with designated banks to launch a tokenized warehouse receipt financing pilot within 2027. Its blockchain multi-asset tokenization platform has already incorporated Core Climate-listed carbon credits and plans to include LME-approved warehouse commodity receipts as a pilot next year.
OpenAI Special Projects Lead Brad Lightcap to Depart, Core Executive Role Previously Held as COO Undergoes Multiple Adjustments
Odaily News: Brad Lightcap, Special Projects Lead and former Chief Operating Officer (COO) at OpenAI, is set to leave the company. Over the past year, Lightcap's responsibilities at OpenAI have been adjusted multiple times, with his most recent role being in charge of "special projects."Lightcap has long been a core member of OpenAI's management team. Earlier in 2026, during a company executive reshuffle, he transitioned from the COO position to lead special projects, overseeing cross-company matters including complex deals and strategic investments, reporting directly to CEO Sam Altman. His departure comes at a time when OpenAI is continuously expanding its commercialization efforts, advancing enterprise business, and pursuing strategic partnerships. Previously, the company had undergone multiple rounds of organizational restructuring, including transferring some COO responsibilities to other executives.Brad Lightcap joined OpenAI in 2018, having previously worked at Y Combinator and JPMorgan. He has been one of the key operations and business leaders during OpenAI's transformation from a research institution into a commercial AI company. (The Information)
Plan B: Scarcity, Not Short-Term Price Fluctuation, Is the Core of Bitcoin's Long-Term Value
Bitcoin analyst Plan B stated on the X platform that the core of Bitcoin's long-term value lies in scarcity, not short-term price fluctuations.Plan B believes that many people focus on Bitcoin's price charts, while the S2F model he uses focuses on the degree of asset scarcity. This model measures scarcity through "existing supply ÷ annual new production," where the S2F for gold is approximately 60. Due to Bitcoin's fixed total supply of 21 million coins and its predictable issuance schedule, its S2F is currently around 120 and continues to rise over time.The Bitcoin halving mechanism is an important driver of the S2F model. Approximately every four years, the Bitcoin network reduces the block reward by half, decreasing new supply and roughly doubling the S2F level, making it the core supply-side event observed by the model.Plan B emphasized that the S2F and its upgraded version, the S2FX model, predict long-term average value rather than precisely forecasting market tops or bottoms. Bitcoin's price typically fluctuates around the model's estimated value, and investors should focus on multi-year cycle averages rather than single-day price highs. Additionally, Plan B believes that as scarcity increases, Bitcoin is undergoing different stages of development, including proof of concept, payment network, "digital gold"/store of value asset, and institutional-grade financial asset. Each increase in scarcity could bring new market narratives and capital inflows.However, Plan B also reiterated that "all models are wrong, but some are useful." He stated that the S2F model is merely a tool for long-term understanding of Bitcoin's scarcity, not a trading signal or a "crystal ball" for price prediction. Although the model has withstood major events such as the COVID-19 pandemic and China's mining ban, it still has limitations.
Allium Discloses Unauthorized Access, Core Platform Restored and Back Online
The core platforms, including the Allium App, Explorer, and Explorer API, have been restored to service, though some features are still being recovered. For the latest updates, please refer to the official status page. Allium stated that it will release a summary of the investigation findings and response measures upon completion of the investigation.
Bitcoin Core Adjusts Security Disclosure Rules, Requires Vulnerabilities to Be Fixed Promptly
Odaily reports: Bitcoin Core developers have merged a security policy adjustment. For vulnerabilities that can be easily discovered or rediscovered through simple large language model (LLM) prompts, the previous long-term confidential disclosure mechanism will no longer be used. The new rules allow developers to mark such issues as "easy to find" during vulnerability classification, then backport fixes to all still-supported versions and release them as soon as possible through minor version updates, along with a security advisory and some vulnerability details.Previously, Bitcoin Core scheduled disclosure based on vulnerability severity, with medium- and high-risk vulnerabilities usually only made public after the affected versions stopped being maintained. This adjustment stems from AI tools lowering the threshold for vulnerability discovery: in July this year, a Bitcoin Red Team composed of 16 developers used AI models to scan about 390 Bitcoin-related projects and recorded 4,962 findings in one day, of which 85 were listed as critical issues. Developers noted that continuing to extend the confidentiality period for such vulnerabilities can no longer effectively prevent attacks and instead delays the release of fixed versions; however, the new rules also mean that fixes may lack longer testing time. Currently, no vulnerability has been officially marked as falling into the "easy to find" category under the new rules. (CoinDesk)
Bitcoin Core Updates Vulnerability Disclosure Policy, Easily Discoverable Vulnerabilities Will Be Fixed Promptly and Announced Simultaneously
According to Cointelegraph, Bitcoin Core developer Antoine Poinsot stated on Thursday on the bitcoin-dev mailing list that large language models (LLMs) have made certain software vulnerabilities extremely easy to rediscover. Maintaining long-term secrecy is already of limited value and instead delays the release of patched versions, prompting the team to update its vulnerability disclosure policy. The new policy dictates that "easily discoverable" vulnerabilities, which can be identified with minimal cost such as through simple LLM prompts, will be patched as soon as possible across all supported major versions, alongside the simultaneous release of security advisories. Other vulnerabilities will continue to be disclosed based on severity: low-severity vulnerabilities will be disclosed two weeks after the release of the major version containing the fix; medium-to-high-severity vulnerabilities will be disclosed two weeks after the end-of-life (EOL) of the last affected version, typically around one year after the patch release; critical vulnerabilities will be handled through a dedicated process.
Bitcoin Core Adjusts Security Vulnerability Disclosure Policy, Vulnerabilities Easily Found by AI to Be Fixed Promptly
Bitcoin Core has adjusted its security vulnerability disclosure policy, defining easily discoverable vulnerabilities as those that can be found through simple large language model prompts, and will release fixes as soon as possible across all major versions still under maintenance, while publishing security advisories.Bitcoin Core developer Antoine Poinsot stated that in the past, vulnerabilities were typically kept confidential during a longer disclosure embargo period to allow users to upgrade, but large language models have lowered the threshold for rediscovering certain vulnerabilities, limiting the protective value of delayed fixes.Low-severity vulnerabilities will be disclosed two weeks after the major version containing the fix is released; medium- and high-severity vulnerabilities will be disclosed two weeks after the affected version reaches end of life, typically about one year after the fix enters a new version. Critical vulnerabilities are not subject to the standard policy and will be handled through ad hoc procedures.In August, the volunteer organization Bitcoin Red Team reported nearly 5,000 potential issues across 390 projects, with about one-fifth having been reproduced at the time. Core Lightning developers that same month asked node operators to upgrade or take nodes offline, and delayed disclosure of technical details for two weeks. (Cointelegraph)
Hyperliquid Policy Committee Submits Comment Letter to U.S. SEC on Crypto Regulatory Rules, Proposing Five Core Adjustments
The Hyperliquid Policy Council (HPC) stated that it has submitted a comment letter to the U.S. SEC supporting its proposed Regulation Crypto Assets, and recommended five adjustments in the final rules to further clarify regulatory boundaries for token issuances, airdrops, secondary market trading, and safe harbors.
CoinShares: Digital asset investment products recorded $434 million in outflows this week
According to CoinShares' market report, the US September CPI rose 0.6% month-over-month and 3.7% year-over-year, exceeding the 3.6% market expectation. Gasoline prices surged 9.1% during the month, accounting for roughly half of the overall increase. Core CPI rose 0.3% month-over-month and 2.6% year-over-year. In the same period, US September retail sales increased 0.8% month-over-month, beating the ~0.3% forecast, while August data was revised up to 1.3%. However, retail sales excluding gasoline only grew by 0.2%, down from 1.0% in August. The report pointed out that inflation remains elevated and economic demand continues to show resilience, driving a hawkish repricing of Federal Reserve policy that weighed on Bitcoin and the broader digital asset market. Data showed that market sentiment notably weakened following the CPI release, with global digital asset investment products recording $434 million in outflows so far this week. Regarding interest rate expectations, as of October 15, Polymarket data indicated a roughly 75% probability that the Fed would hold rates unchanged at its October meeting and about a 25% probability of a 25-basis-point hike. Following the CPI release, futures markets shifted markedly toward a hawkish stance, with expectations of another rate hike within the year rising significantly.
Borrowing kink lowered to 92%, Aave adjusts USDT interest rate parameters for Ethereum Core market
Aave has executed an adjustment to the USDT borrowing interest rate parameters in the Ethereum Core market at block height 26,241,799, lowering the rate kink from 94% utilization to 92%, so that borrowing costs rise earlier when liquidity in the pool tightens. The new parameters are: optimal utilization 92%, base rate 0, slope 1 at 4.5%, slope 2 at 10%; the kink rate is 4.5% APR, and at 100% utilization it is 14.5% APR. At 94% utilization, the old curve's borrowing rate is 4.5% APR, while the new curve's is 7% APR, 2.5 percentage points higher. LlamaRisk recommended the adjustment on October 20; based on a supply of 2.8922 billion USDT, 92% utilization leaves about 57.84 million USDT more in unborrowed buffer than 94%. This buffer does not represent actual cash, and withdrawals still depend on available unborrowed liquidity. A snapshot on October 23 showed that actual cash in the pool was about 391.4 million USDT, the variable borrowing APR was about 4.23%, and the supply liquidity APR was 3.29%.
ZachXBT: Over 87% of Funds Inflowing into Hyperliquid Core Money Laundering Service FreedomXMR Linked to Illegal Activities
On-chain investigator ZachXBT stated that FreedomXMR (FXMR), a centralized money laundering service that appeared on Hyperliquid Core (HL Core) in August 2026, had over 87% of its incoming funds directly linked to illegal activities. A review of historical inflows exceeding $10,000 revealed that over $20 million could be directly traced to ransomware, security exploits, malware, and social engineering incidents, involving multiple theft cases such as the DCENT Wallet, Fetch.ai, Axelar, and Gamdom.
Echo Protocol to Gradually Shut Down Protocol; Lending and Strategy Core Businesses Have Stopped Accepting New Funds
Echo Protocol has announced it will gradually terminate protocol operations due to business adjustments. The lending protocol has stopped accepting new deposits, new borrows, and interest accrual, and the strategy and LSD businesses have also stopped accepting new deposits and new staking. The protocol has now opened channels for repayment, withdrawal, and asset liquidation. Borrowers must complete repayment by November 14, 2026, otherwise their collateral will be liquidated; 23:59 (UTC) on November 19, 2026 is the final deadline for repayment, withdrawal, and unstaking. After that, Echo Protocol will officially cease operations, and remaining positions will enter the final liquidation and settlement process, with only the Aptos-to-B² cross-chain bridge redemption service retained.
CoinShares: Digital asset investment products recorded $434 million in outflows this week
According to CoinShares' market report, the US September CPI rose 0.6% month-over-month and 3.7% year-over-year, exceeding the 3.6% market expectation. Gasoline prices surged 9.1% during the month, accounting for roughly half of the overall increase. Core CPI rose 0.3% month-over-month and 2.6% year-over-year. In the same period, US September retail sales increased 0.8% month-over-month, beating the ~0.3% forecast, while August data was revised up to 1.3%. However, retail sales excluding gasoline only grew by 0.2%, down from 1.0% in August. The report pointed out that inflation remains elevated and economic demand continues to show resilience, driving a hawkish repricing of Federal Reserve policy that weighed on Bitcoin and the broader digital asset market. Data showed that market sentiment notably weakened following the CPI release, with global digital asset investment products recording $434 million in outflows so far this week. Regarding interest rate expectations, as of October 15, Polymarket data indicated a roughly 75% probability that the Fed would hold rates unchanged at its October meeting and about a 25% probability of a 25-basis-point hike. Following the CPI release, futures markets shifted markedly toward a hawkish stance, with expectations of another rate hike within the year rising significantly.
No soft fork required: StarkWare verifies quantum-safe locking scheme on Bitcoin mainnet, but it is not yet suitable for large-scale use
Starknet has published an introduction to its Quantum-Safe Bitcoin (QSB) scheme, stating that StarkWare researchers have verified a quantum-safe locking mechanism on the Bitcoin mainnet that requires no soft fork, no new opcodes, and no changes to consensus rules. The first QSB output was spent on August 26, 2026, in Bitcoin mainnet block 964,199, with the associated GPU computation cost reduced from approximately $320 to about $50. QSB builds its locking mechanism through hash computation, but each transaction still requires substantial computation, and moving assets into the scheme still requires a traditional transaction that carries quantum risk. The transaction does not comply with Bitcoin Core's default relay rules, and there is currently no accompanying wallet, address format, or recovery process. StarkWare stated that QSB is an emergency research solution, and that the long-term solution still requires the introduction of post-quantum signature mechanisms via a soft fork. Starknet's full quantum resistance also depends on the progress of Ethereum's underlying upgrades.
"AI Stock God" Leopold Has Unwound Put Options on NVIDIA and Others, Core Positions Remain Concentrated in Semiconductors and AI Infrastructure
The latest portfolio holdings of "AI Oracle" Leopold Aschenbrenner show that his core positions remain concentrated in semiconductor and AI infrastructure-related companies, with SanDisk (SNDK) and Micron (MU) accounting for approximately 28% and 27.5% of the portfolio respectively, ranking as the highest-priority holdings.
ACI Founder: Binance Hacker's Debt Accounts for Only 0.9% of Aave's Total wETH Reserves, Easily Absorbed by Liquidation Mechanism
Odaily Report: Marc Zeller, founder of the Aave Chan Initiative (ACI), posted on X stating that the Aave protocol is fine.The Binance hacker injected 60 million USDT into the protocol within just 3 minutes and borrowed 19,762 wETH (approximately $44.9 million), at which point Tether had not yet frozen the address, nor had the Aave Guardian frozen the Aave V3 Core pool's reserves (this operation occurred 46 minutes later).However, USDT is backed by real dollars, and from the protocol's perspective, although this position is the proceeds of crime, it is overcollateralized — with a health factor of 1.04, holding $59.9 million in collateral against $44.9 million in debt.Of course, the protocol now has a large borrower with little incentive to repay the loan, but the liquidation mechanism will still operate as usual. If the ETH price rises above approximately $2,365 (+4%), the position will be liquidated just like any other position.Currently, the Aave V3 Core pool's total wETH reserves stand at 2.16 million wETH, and the hacker's debt accounts for "only" 0.9% of that, so Aave does not need to take any special action against the hacker. There are currently 345,000 wETH available (capital utilization rate of 81.6%), so if wETH depositors wish to withdraw, liquidity is fully sufficient. There is no reason or need for a bank run to occur.This situation is far less alarming than the Kelp hacker incident (which involved zero-value collateral). In theory, a governance proposal could be passed to force liquidation of the hacker by upgrading the pool (if the USDT liquidation threshold were lowered, it would affect all USDT depositors), but there is no practical benefit to doing so, as the normal liquidation mechanism can easily absorb this debt.
Found 3 new vulnerabilities, one Bitcoin Core vulnerability can remotely cause node crashes
Bitcoin News posted on X that Bitcoin Core has discovered 3 new vulnerabilities, one of which could allow an attacker to remotely crash nodes. This vulnerability can affect nodes running Windows, macOS, or BSD by exhausting memory, while Linux nodes are not affected by this attack; another vulnerability can gradually exhaust node memory, and a third may corrupt blockchain undo data.
Bitcoin Core Adjusts Security Disclosure Rules, Requires Vulnerabilities to Be Fixed Promptly
Odaily reports: Bitcoin Core developers have merged a security policy adjustment. For vulnerabilities that can be easily discovered or rediscovered through simple large language model (LLM) prompts, the previous long-term confidential disclosure mechanism will no longer be used. The new rules allow developers to mark such issues as "easy to find" during vulnerability classification, then backport fixes to all still-supported versions and release them as soon as possible through minor version updates, along with a security advisory and some vulnerability details.Previously, Bitcoin Core scheduled disclosure based on vulnerability severity, with medium- and high-risk vulnerabilities usually only made public after the affected versions stopped being maintained. This adjustment stems from AI tools lowering the threshold for vulnerability discovery: in July this year, a Bitcoin Red Team composed of 16 developers used AI models to scan about 390 Bitcoin-related projects and recorded 4,962 findings in one day, of which 85 were listed as critical issues. Developers noted that continuing to extend the confidentiality period for such vulnerabilities can no longer effectively prevent attacks and instead delays the release of fixed versions; however, the new rules also mean that fixes may lack longer testing time. Currently, no vulnerability has been officially marked as falling into the "easy to find" category under the new rules. (CoinDesk)
Bitcoin Core Updates Vulnerability Disclosure Policy, Easily Discoverable Vulnerabilities Will Be Fixed Promptly and Announced Simultaneously
According to Cointelegraph, Bitcoin Core developer Antoine Poinsot stated on Thursday on the bitcoin-dev mailing list that large language models (LLMs) have made certain software vulnerabilities extremely easy to rediscover. Maintaining long-term secrecy is already of limited value and instead delays the release of patched versions, prompting the team to update its vulnerability disclosure policy. The new policy dictates that "easily discoverable" vulnerabilities, which can be identified with minimal cost such as through simple LLM prompts, will be patched as soon as possible across all supported major versions, alongside the simultaneous release of security advisories. Other vulnerabilities will continue to be disclosed based on severity: low-severity vulnerabilities will be disclosed two weeks after the release of the major version containing the fix; medium-to-high-severity vulnerabilities will be disclosed two weeks after the end-of-life (EOL) of the last affected version, typically around one year after the patch release; critical vulnerabilities will be handled through a dedicated process.
Bitcoin Core Adjusts Security Vulnerability Disclosure Policy, Vulnerabilities Easily Found by AI to Be Fixed Promptly
Bitcoin Core has adjusted its security vulnerability disclosure policy, defining easily discoverable vulnerabilities as those that can be found through simple large language model prompts, and will release fixes as soon as possible across all major versions still under maintenance, while publishing security advisories.Bitcoin Core developer Antoine Poinsot stated that in the past, vulnerabilities were typically kept confidential during a longer disclosure embargo period to allow users to upgrade, but large language models have lowered the threshold for rediscovering certain vulnerabilities, limiting the protective value of delayed fixes.Low-severity vulnerabilities will be disclosed two weeks after the major version containing the fix is released; medium- and high-severity vulnerabilities will be disclosed two weeks after the affected version reaches end of life, typically about one year after the fix enters a new version. Critical vulnerabilities are not subject to the standard policy and will be handled through ad hoc procedures.In August, the volunteer organization Bitcoin Red Team reported nearly 5,000 potential issues across 390 projects, with about one-fifth having been reproduced at the time. Core Lightning developers that same month asked node operators to upgrade or take nodes offline, and delayed disclosure of technical details for two weeks. (Cointelegraph)
ZachXBT: Over 87% of Funds Inflowing into Hyperliquid Core Money Laundering Service FreedomXMR Linked to Illegal Activities
On-chain investigator ZachXBT stated that FreedomXMR (FXMR), a centralized money laundering service that appeared on Hyperliquid Core (HL Core) in August 2026, had over 87% of its incoming funds directly linked to illegal activities. A review of historical inflows exceeding $10,000 revealed that over $20 million could be directly traced to ransomware, security exploits, malware, and social engineering incidents, involving multiple theft cases such as the DCENT Wallet, Fetch.ai, Axelar, and Gamdom.
Bithumb to Terminate Trading Support for BLUR and CORE
According to the official announcement from Bithumb, Bithumb will terminate trading support for BLUR and CORE.
ACI Founder: Binance Hacker's Debt Accounts for Only 0.9% of Aave's Total wETH Reserves, Easily Absorbed by Liquidation Mechanism
Odaily Report: Marc Zeller, founder of the Aave Chan Initiative (ACI), posted on X stating that the Aave protocol is fine.The Binance hacker injected 60 million USDT into the protocol within just 3 minutes and borrowed 19,762 wETH (approximately $44.9 million), at which point Tether had not yet frozen the address, nor had the Aave Guardian frozen the Aave V3 Core pool's reserves (this operation occurred 46 minutes later).However, USDT is backed by real dollars, and from the protocol's perspective, although this position is the proceeds of crime, it is overcollateralized — with a health factor of 1.04, holding $59.9 million in collateral against $44.9 million in debt.Of course, the protocol now has a large borrower with little incentive to repay the loan, but the liquidation mechanism will still operate as usual. If the ETH price rises above approximately $2,365 (+4%), the position will be liquidated just like any other position.Currently, the Aave V3 Core pool's total wETH reserves stand at 2.16 million wETH, and the hacker's debt accounts for "only" 0.9% of that, so Aave does not need to take any special action against the hacker. There are currently 345,000 wETH available (capital utilization rate of 81.6%), so if wETH depositors wish to withdraw, liquidity is fully sufficient. There is no reason or need for a bank run to occur.This situation is far less alarming than the Kelp hacker incident (which involved zero-value collateral). In theory, a governance proposal could be passed to force liquidation of the hacker by upgrading the pool (if the USDT liquidation threshold were lowered, it would affect all USDT depositors), but there is no practical benefit to doing so, as the normal liquidation mechanism can easily absorb this debt.
Allium Discloses Unauthorized Access, Core Platform Restored and Back Online
The core platforms, including the Allium App, Explorer, and Explorer API, have been restored to service, though some features are still being recovered. For the latest updates, please refer to the official status page. Allium stated that it will release a summary of the investigation findings and response measures upon completion of the investigation.
Mantle Releases MIP-35 Proposal, Drafts Core Budget for Fourth Budget Cycle
The Mantle core contributors team has published the MIP-35 proposal on the Mantle Forum, which is currently in the discussion phase. The proposal outlines the core budget for the fourth budget cycle from July 2026 to June 2027, with an overall cap of 40 million USDx and 150 million MNT. This budget covers expenditures for personnel, administrative and general management costs, marketing and distribution, ecosystem projects, and infrastructure and security.
Max effective balance reaches 2048 ETH, Lido launches 0x02 CSM
Lido has launched 0x02 CSM, enabling permissionless operation of validators with a maximum effective balance of 2048 ETH. Operators do not need to raise staking funds themselves; they only need to provide a bond. The first key requires 32 ETH, and each subsequent key requires 30 ETH, with staking allocated by the protocol. This module adopts an initial deposit queue and an additional staking queue capped at 32 slots; the initial share cap at launch is 0.01% of Lido Core TVL, and the first batch of approximately 32 keys will receive seed deposits.
Bitcoin Core Adjusts Security Disclosure Rules, Requires Vulnerabilities to Be Fixed Promptly
Odaily reports: Bitcoin Core developers have merged a security policy adjustment. For vulnerabilities that can be easily discovered or rediscovered through simple large language model (LLM) prompts, the previous long-term confidential disclosure mechanism will no longer be used. The new rules allow developers to mark such issues as "easy to find" during vulnerability classification, then backport fixes to all still-supported versions and release them as soon as possible through minor version updates, along with a security advisory and some vulnerability details.Previously, Bitcoin Core scheduled disclosure based on vulnerability severity, with medium- and high-risk vulnerabilities usually only made public after the affected versions stopped being maintained. This adjustment stems from AI tools lowering the threshold for vulnerability discovery: in July this year, a Bitcoin Red Team composed of 16 developers used AI models to scan about 390 Bitcoin-related projects and recorded 4,962 findings in one day, of which 85 were listed as critical issues. Developers noted that continuing to extend the confidentiality period for such vulnerabilities can no longer effectively prevent attacks and instead delays the release of fixed versions; however, the new rules also mean that fixes may lack longer testing time. Currently, no vulnerability has been officially marked as falling into the "easy to find" category under the new rules. (CoinDesk)
Related news
Bithumb to Terminate Trading Support for BLUR and CORE
According to the official announcement from Bithumb, Bithumb will terminate trading support for BLUR and CORE.
ACI Founder: Binance Hacker's Debt Accounts for Only 0.9% of Aave's Total wETH Reserves, Easily Absorbed by Liquidation Mechanism
Odaily Report: Marc Zeller, founder of the Aave Chan Initiative (ACI), posted on X stating that the Aave protocol is fine.The Binance hacker injected 60 million USDT into the protocol within just 3 minutes and borrowed 19,762 wETH (approximately $44.9 million), at which point Tether had not yet frozen the address, nor had the Aave Guardian frozen the Aave V3 Core pool's reserves (this operation occurred 46 minutes later).However, USDT is backed by real dollars, and from the protocol's perspective, although this position is the proceeds of crime, it is overcollateralized — with a health factor of 1.04, holding $59.9 million in collateral against $44.9 million in debt.Of course, the protocol now has a large borrower with little incentive to repay the loan, but the liquidation mechanism will still operate as usual. If the ETH price rises above approximately $2,365 (+4%), the position will be liquidated just like any other position.Currently, the Aave V3 Core pool's total wETH reserves stand at 2.16 million wETH, and the hacker's debt accounts for "only" 0.9% of that, so Aave does not need to take any special action against the hacker. There are currently 345,000 wETH available (capital utilization rate of 81.6%), so if wETH depositors wish to withdraw, liquidity is fully sufficient. There is no reason or need for a bank run to occur.This situation is far less alarming than the Kelp hacker incident (which involved zero-value collateral). In theory, a governance proposal could be passed to force liquidation of the hacker by upgrading the pool (if the USDT liquidation threshold were lowered, it would affect all USDT depositors), but there is no practical benefit to doing so, as the normal liquidation mechanism can easily absorb this debt.
Allium Discloses Unauthorized Access, Core Platform Restored and Back Online
The core platforms, including the Allium App, Explorer, and Explorer API, have been restored to service, though some features are still being recovered. For the latest updates, please refer to the official status page. Allium stated that it will release a summary of the investigation findings and response measures upon completion of the investigation.
Found 3 new vulnerabilities, one Bitcoin Core vulnerability can remotely cause node crashes
Bitcoin News posted on X that Bitcoin Core has discovered 3 new vulnerabilities, one of which could allow an attacker to remotely crash nodes. This vulnerability can affect nodes running Windows, macOS, or BSD by exhausting memory, while Linux nodes are not affected by this attack; another vulnerability can gradually exhaust node memory, and a third may corrupt blockchain undo data.
Mantle Releases MIP-35 Proposal, Drafts Core Budget for Fourth Budget Cycle
The Mantle core contributors team has published the MIP-35 proposal on the Mantle Forum, which is currently in the discussion phase. The proposal outlines the core budget for the fourth budget cycle from July 2026 to June 2027, with an overall cap of 40 million USDx and 150 million MNT. This budget covers expenditures for personnel, administrative and general management costs, marketing and distribution, ecosystem projects, and infrastructure and security.
Max effective balance reaches 2048 ETH, Lido launches 0x02 CSM
Lido has launched 0x02 CSM, enabling permissionless operation of validators with a maximum effective balance of 2048 ETH. Operators do not need to raise staking funds themselves; they only need to provide a bond. The first key requires 32 ETH, and each subsequent key requires 30 ETH, with staking allocated by the protocol. This module adopts an initial deposit queue and an additional staking queue capped at 32 slots; the initial share cap at launch is 0.01% of Lido Core TVL, and the first batch of approximately 32 keys will receive seed deposits.