News linked to both this project and an event.
According to Cointelegraph, the EU Cyber Resilience Act (CRA) officially entered into force, requiring cryptocurrency hardware and software wallet providers to submit an early warning within 24 hours of discovering a serious security vulnerability or an actively exploited vulnerability, a complete notification within 72 hours, and a final report within 14 days after remediation measures are implemented. The regulation applies to all "products with digital elements" sold in the EU market. Violating companies face administrative fines of up to €15 million (approximately $17.3 million) or 2.5% of their global annual turnover, whichever is higher; providing false or misleading information will result in an additional fine of up to €5 million. Previously, Trezor and BitBox have both disclosed user data breach incidents and warned users to be vigilant against phishing emails disguised as security notifications.
The EU's Cyber Resilience Act has taken effect. Cryptocurrency hardware and software wallet providers must submit an initial early warning within 24 hours after discovering actively exploited vulnerabilities or severe security flaws in their products, and submit a full notification within 72 hours.Manufacturers must submit a final report within 14 days after corrective or mitigating measures become available; serious incidents must be reported within one month. Companies that violate the relevant regulations may face fines of up to €15 million or 2.5% of global annual turnover, whichever is higher; providing false, incomplete, or misleading information may result in fines of up to €5 million. (Cointelegraph)
According to a statement issued by the Office of the Superintendent of Financial Institutions (OSFI) on September 10, 2026, OSFI clarified its technology-neutral position, stating that tokenized and other digital deposits are legally indistinguishable from traditional deposits, and that the underlying technology of a financial product or service does not determine its legal nature. OSFI requires financial institutions to ensure that innovation activities (including those conducted by third parties on their behalf) comply with applicable laws and regulations, and to adhere to guidelines such as B-13 Technology and Cyber Risk Management and B-10 Third-Party Risk Management. Prior to launching any new products or services, financial institutions must communicate in advance with OSFI supervisors and seek legal advice when necessary.
According to Bitcoin.com, blockchain analytics firm Chainalysis announced the results of Operation Lighthouse on August 25. This transnational operation targeted criminal networks associated with child sexual abuse material (CSAM), investigating 29,120 cryptocurrency addresses and digital identifiers across more than 100 clearnet and darknet platforms, forums, and distribution networks. The effort generated 14,300 investigation leads and uncovered over 7,700 suspicious accounts and linked suspects spanning 125 countries. Coordinated in New York by the National Cyber Forensics & Training Alliance (NCFTA), the initiative involved at least nine law enforcement agencies, along with more than 13 private organizations and non-profits, including Europol, the Australian Federal Police, the Royal Canadian Mounted Police, and the UK’s National Crime Agency. Chainalysis stated that the discovered leads could subsequently result in account restrictions, arrests, and prosecutions. Law enforcement outcomes are expected to continue through 2027, and the company plans to extend this collaborative model to other types of crypto-related crime.
According to CoinDesk, blockchain analytics firm Chainalysis stated that it organized the multi-day joint operation "Operation Beacon" in collaboration with crypto firms such as Binance and Coinbase, as well as law enforcement agencies from multiple countries, to investigate networks spreading child sexual abuse material using cryptocurrency. The operation is headquartered at the National Cyber-Forensics and Training Alliance in New York, with participating agencies including Europol, the Australian Federal Police, the Royal Canadian Mounted Police, and the UK's National Crime Agency.
According to Yonhap News Agency, the Gwangju Police Agency's Cyber Crime Investigation Team has arrested and referred three suspects, led by A (in their 60s), suspected of establishing offices in Seoul, Gwangju (Jeollanam-do), Gunsan (Jeollabuk-do), and other locations since November 2024, and using false promises such as "principal guarantee" and "potential returns of billions of Korean won" to lure over 100 elderly individuals aged 70 to 80 into investing in virtual assets, defrauding them of a total of approximately 500 million Korean won. The police stated that there are expected to be victims yet to be revealed, are currently continuing to expand the investigation, and reminded the public to remain vigilant against investment offers promising principal protection and high returns.
the Federal Investigation Agency (FIA) of Pakistan has established a cryptocurrency investigation unit within its newly inaugurated National Command and Control Center (NC3) to probe money laundering and terrorist financing activities conducted through virtual currencies.Dr. Muhammad Athar Waheed, head of the FIA's Counter-Terrorism Department, stated that the new unit will investigate the criminal use of cryptocurrencies. The newly formed Pakistan Virtual Asset Regulatory Authority (PVARA) will be responsible for overseeing digital assets. Dr. Waheed also urged the National Cyber Crimes Investigation Agency and the Anti-Narcotics Force to establish similar departments to address the use of cryptocurrencies in cybercrime and drug trafficking.The NC3 integrates the FIA's financial crime tools onto a single platform, including anti-money laundering and virtual currency investigation units, an Interpol coordination point, open-source intelligence, cyber patrolling, and dark web investigation departments. Pakistan previously lifted its eight-year ban on cryptocurrency banking, created the PVARA, and is advancing the licensing of cryptocurrency exchanges. (Decrypt)
Officials from the Bank of England, the Financial Conduct Authority, and the Treasury are consulting with the National Cyber Security Centre to examine potential vulnerabilities in critical IT systems revealed by Anthropic’s latest model.
According to CoinDesk, the U.S. Department of the Treasury announced it will extend its cybersecurity threat information-sharing service—which was previously available only to traditional financial institutions—to cryptocurrency firms. Eligible crypto companies may apply to join the program through the Treasury’s Office of Cybersecurity and Critical Infrastructure Protection and receive timely, actionable cybersecurity threat intelligence at no cost. Luke Pettit, Assistant Secretary for Financial Institutions at the Treasury Department, stated that this move aims to foster a safer and more responsible digital asset ecosystem. The policy responds to related recommendations outlined in a prior report issued by the President’s Working Group on Digital Asset Markets.