News linked to both this project and an event.
Odaily Report: Marc Zeller, founder of the Aave Chan Initiative (ACI), posted on X stating that the Aave protocol is fine.The Binance hacker injected 60 million USDT into the protocol within just 3 minutes and borrowed 19,762 wETH (approximately $44.9 million), at which point Tether had not yet frozen the address, nor had the Aave Guardian frozen the Aave V3 Core pool's reserves (this operation occurred 46 minutes later).However, USDT is backed by real dollars, and from the protocol's perspective, although this position is the proceeds of crime, it is overcollateralized — with a health factor of 1.04, holding $59.9 million in collateral against $44.9 million in debt.Of course, the protocol now has a large borrower with little incentive to repay the loan, but the liquidation mechanism will still operate as usual. If the ETH price rises above approximately $2,365 (+4%), the position will be liquidated just like any other position.Currently, the Aave V3 Core pool's total wETH reserves stand at 2.16 million wETH, and the hacker's debt accounts for "only" 0.9% of that, so Aave does not need to take any special action against the hacker. There are currently 345,000 wETH available (capital utilization rate of 81.6%), so if wETH depositors wish to withdraw, liquidity is fully sufficient. There is no reason or need for a bank run to occur.This situation is far less alarming than the Kelp hacker incident (which involved zero-value collateral). In theory, a governance proposal could be passed to force liquidation of the hacker by upgrading the pool (if the USDT liquidation threshold were lowered, it would affect all USDT depositors), but there is no practical benefit to doing so, as the normal liquidation mechanism can easily absorb this debt.
The core platforms, including the Allium App, Explorer, and Explorer API, have been restored to service, though some features are still being recovered. For the latest updates, please refer to the official status page. Allium stated that it will release a summary of the investigation findings and response measures upon completion of the investigation.
The Mantle core contributors team has published the MIP-35 proposal on the Mantle Forum, which is currently in the discussion phase. The proposal outlines the core budget for the fourth budget cycle from July 2026 to June 2027, with an overall cap of 40 million USDx and 150 million MNT. This budget covers expenditures for personnel, administrative and general management costs, marketing and distribution, ecosystem projects, and infrastructure and security.
Lido has launched 0x02 CSM, enabling permissionless operation of validators with a maximum effective balance of 2048 ETH. Operators do not need to raise staking funds themselves; they only need to provide a bond. The first key requires 32 ETH, and each subsequent key requires 30 ETH, with staking allocated by the protocol. This module adopts an initial deposit queue and an additional staking queue capped at 32 slots; the initial share cap at launch is 0.01% of Lido Core TVL, and the first batch of approximately 32 keys will receive seed deposits.
Odaily reports: Bitcoin Core developers have merged a security policy adjustment. For vulnerabilities that can be easily discovered or rediscovered through simple large language model (LLM) prompts, the previous long-term confidential disclosure mechanism will no longer be used. The new rules allow developers to mark such issues as "easy to find" during vulnerability classification, then backport fixes to all still-supported versions and release them as soon as possible through minor version updates, along with a security advisory and some vulnerability details.Previously, Bitcoin Core scheduled disclosure based on vulnerability severity, with medium- and high-risk vulnerabilities usually only made public after the affected versions stopped being maintained. This adjustment stems from AI tools lowering the threshold for vulnerability discovery: in July this year, a Bitcoin Red Team composed of 16 developers used AI models to scan about 390 Bitcoin-related projects and recorded 4,962 findings in one day, of which 85 were listed as critical issues. Developers noted that continuing to extend the confidentiality period for such vulnerabilities can no longer effectively prevent attacks and instead delays the release of fixed versions; however, the new rules also mean that fixes may lack longer testing time. Currently, no vulnerability has been officially marked as falling into the "easy to find" category under the new rules. (CoinDesk)
According to Cointelegraph, Bitcoin Core developer Antoine Poinsot stated on Thursday on the bitcoin-dev mailing list that large language models (LLMs) have made certain software vulnerabilities extremely easy to rediscover. Maintaining long-term secrecy is already of limited value and instead delays the release of patched versions, prompting the team to update its vulnerability disclosure policy. The new policy dictates that "easily discoverable" vulnerabilities, which can be identified with minimal cost such as through simple LLM prompts, will be patched as soon as possible across all supported major versions, alongside the simultaneous release of security advisories. Other vulnerabilities will continue to be disclosed based on severity: low-severity vulnerabilities will be disclosed two weeks after the release of the major version containing the fix; medium-to-high-severity vulnerabilities will be disclosed two weeks after the end-of-life (EOL) of the last affected version, typically around one year after the patch release; critical vulnerabilities will be handled through a dedicated process.
Bitcoin Core has adjusted its security vulnerability disclosure policy, defining easily discoverable vulnerabilities as those that can be found through simple large language model prompts, and will release fixes as soon as possible across all major versions still under maintenance, while publishing security advisories.Bitcoin Core developer Antoine Poinsot stated that in the past, vulnerabilities were typically kept confidential during a longer disclosure embargo period to allow users to upgrade, but large language models have lowered the threshold for rediscovering certain vulnerabilities, limiting the protective value of delayed fixes.Low-severity vulnerabilities will be disclosed two weeks after the major version containing the fix is released; medium- and high-severity vulnerabilities will be disclosed two weeks after the affected version reaches end of life, typically about one year after the fix enters a new version. Critical vulnerabilities are not subject to the standard policy and will be handled through ad hoc procedures.In August, the volunteer organization Bitcoin Red Team reported nearly 5,000 potential issues across 390 projects, with about one-fifth having been reproduced at the time. Core Lightning developers that same month asked node operators to upgrade or take nodes offline, and delayed disclosure of technical details for two weeks. (Cointelegraph)
Lighter announced its Lighter Core has launched a binary options product, with plans to roll out a full options trading service next.
The Hyperliquid Policy Council (HPC) stated that it has submitted a comment letter to the U.S. SEC supporting its proposed Regulation Crypto Assets, and recommended five adjustments in the final rules to further clarify regulatory boundaries for token issuances, airdrops, secondary market trading, and safe harbors.
According to the market briefing released by QCP Capital (QCP Market Colour), US September CPI rose 3.7% year-over-year and 0.6% month-over-month, with market expectations at 3.6% and 0.6%, respectively. Core CPI increased 2.6% year-over-year and 0.3% month-over-month, exceeding forecasts on both metrics. Despite the resilient inflation data, US Treasury yields retreated significantly. During the prior week, yields on 10-year and 30-year US Treasuries briefly spiked to 5.35% and 5.73%, respectively, before capital flowed into long-dated Treasuries as a safe haven, reversing the reflation trade that had previously dominated the market. QCP noted that this risk-off sentiment was primarily driven by credit stress in the AI infrastructure sector. AI compute provider CoreWeave closed down 15.5% on the day, and its five-year credit default swap (CDS) spread widened to 60%, prompting declines in the NASDAQ and South Korea’s KOSPI indices. Separately, MSCI introduced a new “non-operating company” classification framework this week, which may impact whether certain securities retain their place in the index and trigger forced redemptions from passive funds. Consequently, the index inclusion status of Strategy (MSTR) remains uncertain. QCP argued that credit quality within the technology sector is now displacing inflation and fiscal concerns as the primary constraint on risk appetite. With the tech earnings season commencing in approximately two weeks, the upcoming period will serve as a critical benchmark for determining whether AI-related credit risks could spill over into broader asset classes.
According to CoinShares' market report, the US September CPI rose 0.6% month-over-month and 3.7% year-over-year, exceeding the 3.6% market expectation. Gasoline prices surged 9.1% during the month, accounting for roughly half of the overall increase. Core CPI rose 0.3% month-over-month and 2.6% year-over-year. In the same period, US September retail sales increased 0.8% month-over-month, beating the ~0.3% forecast, while August data was revised up to 1.3%. However, retail sales excluding gasoline only grew by 0.2%, down from 1.0% in August. The report pointed out that inflation remains elevated and economic demand continues to show resilience, driving a hawkish repricing of Federal Reserve policy that weighed on Bitcoin and the broader digital asset market. Data showed that market sentiment notably weakened following the CPI release, with global digital asset investment products recording $434 million in outflows so far this week. Regarding interest rate expectations, as of October 15, Polymarket data indicated a roughly 75% probability that the Fed would hold rates unchanged at its October meeting and about a 25% probability of a 25-basis-point hike. Following the CPI release, futures markets shifted markedly toward a hawkish stance, with expectations of another rate hike within the year rising significantly.
Aptos announced that the initial token unlock schedule for core contributors and investors was officially completed on October 12, 2026. The four-year plan fully aligned with the schedule published at mainnet launch. Consequently, all tokens allocated to core contributors and investors during the initial distribution have been completely released, leaving no remaining tokens subject to unlocking.
Starknet has published an introduction to its Quantum-Safe Bitcoin (QSB) scheme, stating that StarkWare researchers have verified a quantum-safe locking mechanism on the Bitcoin mainnet that requires no soft fork, no new opcodes, and no changes to consensus rules. The first QSB output was spent on August 26, 2026, in Bitcoin mainnet block 964,199, with the associated GPU computation cost reduced from approximately $320 to about $50. QSB builds its locking mechanism through hash computation, but each transaction still requires substantial computation, and moving assets into the scheme still requires a traditional transaction that carries quantum risk. The transaction does not comply with Bitcoin Core's default relay rules, and there is currently no accompanying wallet, address format, or recovery process. StarkWare stated that QSB is an emergency research solution, and that the long-term solution still requires the introduction of post-quantum signature mechanisms via a soft fork. Starknet's full quantum resistance also depends on the progress of Ethereum's underlying upgrades.
Odaily reports, according to Bitcoin News monitoring, Core Lightning stated that attackers are targeting nodes still running version 26.06.7 and earlier. The 26.06.8 patch released on September 22 fixes a channel closure issue that could jeopardize funds, as well as vulnerabilities that cause crashes and memory exhaustion. The project has not yet disclosed the name of the vulnerability used by attackers, nor has it reported any stolen funds. Node operators who have not yet upgraded are becoming attack targets.
the Core Lightning team, which develops the Bitcoin Lightning Network node software, is warning node operators running version 26.06.7 or earlier to upgrade to the latest version as soon as possible. The team said it has received reports of attackers targeting unpatched nodes, but did not disclose the vulnerability exploited by the attackers or the potential impact.Core Lightning said on September 16 that it was investigating an issue that could affect experimental features and user funds, and on September 22 released version 26.06.8 to fix the vulnerability and update the software. This announcement did not state whether the previously reported attacks were related to the vulnerability fixed in this version. (Cointelegraph)
Odaily News: Gate Research has released its latest report on Gate TradFi connecting global markets, noting that the four markets—US, Japan, South Korea, and Hong Kong—have different sources of returns: US stocks rely on corporate earnings and technology investment, Japanese stocks benefit from governance reform and improved capital efficiency, Korean stocks are primarily driven by the semiconductor cycle, and Hong Kong stocks depend on Chinese corporate earnings, capital flows, and changes in risk premiums.Since 2016, US and Korean stocks have delivered similar annualized returns, but Korean stocks have notably higher volatility and drawdowns; Japanese stocks offer some diversification value, while Hong Kong stocks have undergone a longer valuation recovery cycle. Backtesting shows that cross-market diversification can reduce reliance on any single market, and trend rotation can help improve drawdowns, but neither can eliminate systemic risk, and higher turnover may increase trading costs.Gate TradFi incorporates US, Japanese, Korean, and Hong Kong stocks into a unified stock account, covering over 10,000 US stocks and ETFs, more than 1,500 Hong Kong stocks, over 1,000 Korean stocks, and approximately 300 Japanese stocks, totaling coverage of more than 12,800 stock and ETF assets globally. The platform further connects index, forex, and metals market data, enabling investors to conduct cross-regional market comparisons, asset screening, and portfolio management within the same trading environment, expanding multi-asset observation and trading scenarios.
According to an official announcement from the Ethereum Foundation, the Ethereum Glamsterdam network upgrade has been confirmed to activate on the Sepolia testnet at 13:53:36 UTC on October 6, 2026 (Epoch 353,024), with activation times for Hoodi and the mainnet yet to be determined. Glamsterdam combines the Amsterdam execution layer and Gloas consensus layer upgrades. Core changes include introducing embedded proposer-builder separation (ePBS, EIP-7732), incorporating the block building process into the consensus protocol to reduce reliance on middleware; adding block-level access lists (BALs, EIP-7928) to enable clients to read state in parallel and verify transactions in parallel, thereby improving execution throughput. Additionally, the upgrade adjusts the gas pricing mechanism (EIP-8037/8038) to more accurately reflect the actual costs of state creation and access, requiring application developers to test their contracts to adapt to the new rules. Currently confirmed client versions supporting Sepolia activation include: consensus layer Lodestar 1.49.0, Prysm 7.2.0, Teku 26.9.1; execution layer Besu 26.9.0, Erigon 3.7.0, go-ethereum 1.17.6, Nethermind 2.0.0, Reth 2.7.0. Node operators must update simultaneously before activation.
Omnity Network has announced it will gradually cease project operations due to depleted operating funds. Its Bitcoin DeFi products, RichSwap and Satsman, will shut down within the next 30 days. The team has reminded RichSwap liquidity providers to withdraw their liquidity as soon as possible and will upgrade the smart contract to remove existing lock-up restrictions, enabling users to withdraw funds without limitations. A detailed operational timeline and liquidity withdrawal guide will be announced soon. During the transition period, support channels will remain open for 30 days to assist users with related operations. Core team members will continue to support the Bitcoin ecosystem and plan to participate in related development through individual efforts and developer collaboration organizations.
Odaily reports: Bitcoin News posted on X platform that Bitcoin Core 32.0 is currently undergoing release candidate testing, with developers targeting an October 10 release. This version can accelerate block validation through parallel database reads, but will not change block generation speed. Four wallet commands will default to the updated partially signed transaction format, while the legacy format remains available on demand. A security patch prevents specially crafted wallet names from executing commands on non-Windows nodes, and in one test reduced unauthenticated HTTP-induced memory growth from approximately 3.2GB to approximately 3MB.
Odaily reports: Bitcoin News posted on X that Core Lightning is urging node operators to immediately disable experimental features, as developers are investigating a vulnerability that could put channel funds at risk. This is Core Lightning's second warning within a few weeks, following an August patch and the release of the 26.06.7 upgrade after a series of AI-generated CVE reports. Core Lightning has not yet disclosed how the experimental feature could be exploited.