News linked to both this project and an event.
Odaily reports: Starknet posted on X that account abstraction allows accounts to change their verification logic without changing their address, balance, or history, enabling a switch to post-quantum signature schemes without modifying the protocol. Starknet stated that, as an Ethereum L2, its settlement, data availability, and cross-chain bridges still depend on Ethereum and elliptic curve cryptography; researching an independent L1 would allow it to set its own cryptographic schemes and migration timeline. The independent L1 is currently still a research direction, STRK remains the native token, there are no plans to issue a new token, and any decision to migrate to an L1 would require a binding governance vote.
Ethereum Layer 2 network Scroll published a summary of its DAO monthly meeting on October 30, further disclosing its network transformation plan, which intends to adjust the existing network into a permissioned network and migrate SCR and USX to the Ethereum mainnet. Scroll stated that detailed proposals will subsequently be submitted for governance review of the related transition arrangements.To support the transition, Scroll is preparing to help users review their existing positions and safely transfer or withdraw assets during the network transformation. In addition, Scroll's AI application Compass has launched a paid subscription service on iOS, while the Android version and more fiat payment methods are still under development, and the Compass API is also expanding support for different AI models.
Odaily Report: Derek Chiang, founder of ZeroDev and a developer involved with EIP-7702, posted on X stating that first, to be clear — EIP-7702 itself has no vulnerability. If you are using a wallet that supports EIP-7702 (MetaMask, Uniswap, Ambire, etc.), please do not panic.EIP-7702 is an Account Abstraction improvement proposal that allows externally owned accounts (EOAs) to sign a special message called a "7702 authorization," thereby embedding a smart contract into that account. This enables accounts to achieve powerful functionality, such as transaction batching — combining "authorization" and "transfer" into a single transaction, allowing you to complete a swap on Uniswap with just one click.Unfortunately, the same feature also allows hackers to efficiently transfer all your tokens in a single transaction. In the Binance hack incident, the hacker moved ETH, USDT, and 62 other tokens in one transaction, whereas without EIP-7702, they would have needed to send a separate transaction for each token. In this particular incident, many such transactions would have failed anyway, because Binance was still using the compromised wallet for withdrawals at the time, so all transactions sent by the hacker had to compete with legitimate transactions for Nonce (transaction sequence number). Therefore, using EIP-7702 did help the hacker steal funds as quickly and as extensively as possible.However, for the hacker to use EIP-7702, one of the following conditions must have been met: first, they obtained the private key; second, they tricked Binance into signing a 7702 authorization — the latter is highly unlikely, as it is hard to imagine Binance exposing an endpoint used for signing 7702 authorizations (or worse, signing raw messages that could be repackaged by the hacker for 7702 authorization). But until the official postmortem report is released, this possibility cannot be completely ruled out.Derek Chiang added: "As one of the contributors to account abstraction, I feel somewhat responsible for this hack incident, because while giving accounts more powerful functionality, we have indeed also given hackers stronger capabilities."
Odaily Report: During the Binance attack, an obvious arbitrage opportunity emerged on-chain. According to a community user's review, the attacker, in order to avoid Tether freezing, swapped a large amount of USDT for ETH through DEXs, causing the ETH price on Uniswap to briefly rise to $2,560–$2,750, with some individual trades exceeding $3,000, while Aave's ETH price obtained through the Chainlink oracle remained at $2,250–$2,290. A price gap of 15% to 30% appeared between on-chain and oracle prices, lasting nearly an hour.Arbitrageurs exploited this price gap by depositing USDC/USDT as collateral into Aave, borrowing ETH at the oracle price, then selling it at high prices on DEXs, and buying back ETH to repay the loans once the spread narrowed. According to the user's statistics, within 6 hours after the incident, a total of 61 addresses borrowed ETH on Aave mainnet (excluding the hacker's address). Among them, the most profitable address sold 12,289 ETH at an average price of approximately $2,580, then bought back 12,314 ETH at an average price of approximately $2,297, earning about $3.47 million. The top ten arbitrage addresses collectively profited approximately $6.36 million.The user stated that the arbitrageurs exploited the price disconnection between centralized exchanges and DEXs, and that the Aave contract itself had no vulnerability. As DEX prices fell back and Aave froze the mainnet V3 market, the arbitrage window gradually closed. The above profits are based on transaction-by-transaction on-chain statistics and have not yet deducted Gas fees.
Cobo co-founder Shenyu released a video analyzing the Binance theft from an on-chain transaction perspective. At 4:20 AM, the attacker broadcast a transaction containing 50 authorization requests signed with Binance's hot wallet private key, and began batch-transferring assets approximately three minutes later. Shenyu noted that the attack utilized the EIP-7702 authorization mechanism; the attacker had prepared a transfer list covering 64 tokens in advance and conducted two test runs using a test wallet, with the final run occurring roughly 3.5 hours before the main operation. The attacker subsequently transferred assets through multiple wallets and smart contract wallets, exchanging portions of stablecoins such as USDT for ETH to evade issuer-initiated freezes.
Odaily Report: Marc Zeller, founder of the Aave Chan Initiative (ACI), posted on X stating that the Aave protocol is fine.The Binance hacker injected 60 million USDT into the protocol within just 3 minutes and borrowed 19,762 wETH (approximately $44.9 million), at which point Tether had not yet frozen the address, nor had the Aave Guardian frozen the Aave V3 Core pool's reserves (this operation occurred 46 minutes later).However, USDT is backed by real dollars, and from the protocol's perspective, although this position is the proceeds of crime, it is overcollateralized — with a health factor of 1.04, holding $59.9 million in collateral against $44.9 million in debt.Of course, the protocol now has a large borrower with little incentive to repay the loan, but the liquidation mechanism will still operate as usual. If the ETH price rises above approximately $2,365 (+4%), the position will be liquidated just like any other position.Currently, the Aave V3 Core pool's total wETH reserves stand at 2.16 million wETH, and the hacker's debt accounts for "only" 0.9% of that, so Aave does not need to take any special action against the hacker. There are currently 345,000 wETH available (capital utilization rate of 81.6%), so if wETH depositors wish to withdraw, liquidity is fully sufficient. There is no reason or need for a bank run to occur.This situation is far less alarming than the Kelp hacker incident (which involved zero-value collateral). In theory, a governance proposal could be passed to force liquidation of the hacker by upgrading the pool (if the USDT liquidation threshold were lowered, it would affect all USDT depositors), but there is no practical benefit to doing so, as the normal liquidation mechanism can easily absorb this debt.
Odaily report: A wallet suspected to be associated with the Binance hack incident received tens of thousands of ETH through a Uniswap contract and borrowed 19,762 ETH on Aave using approximately $60 million in USDT as collateral. On-chain records do not show any vulnerabilities in Uniswap or Aave.As of 22:07 UTC, the two wallets held approximately 253,000 ETH, worth about $570 million, with no outgoing transfers recorded. Aave has paused the Ethereum mainnet V3 market, and Kamino has also paused borrowing in the SOL/BTC market; Ripple has frozen approximately $200 million in RLUSD, and more than $2 billion in USDT and USDC has been frozen by stablecoin issuers. (Decrypt)
Uniswap posted on X that applications charging fees receive revenue in the tokens users trade with, but most applications only want to receive a single token, such as stablecoins, ETH, or the project's own token. With TJAR, any team can achieve this.
Washington Sanchez, Head of Product at Kraken Wallet, stated that the self-custodial Kraken Wallet browser extension is now live, supporting multiple networks including Bitcoin, Ethereum, Solana, Ink, Base, and Robinhood Chain. Users can create or import wallets using a mnemonic phrase or private key, use view-only wallets, or log in via email, Google, Apple, or passkeys. The extension also supports single-chain and cross-chain swaps, as well as cross-chain bridging, with related fees set at 10 basis points.
According to data released by Trader T (@thepfund), Ethereum spot ETFs recorded a net outflow of $21.38 million yesterday, narrowing from the $60.22 million outflow on October 27. BlackRock ETHA posted a net outflow of $44.8 million, serving as the day's primary outflow source, while Fidelity FETH saw a net inflow of $18.78 million, Grayscale Mini Trust Ethereum recorded a net inflow of $3.62 million, and Morgan Stanley MSSE registered a net inflow of $1.02 million. Net flows for the remaining products, including Grayscale ETHE, BlackRock Staked ETHB, Bitwise ETHW, and VanEck ETHV, were all zero for the day.
This incident involves the recoverability of private keys for eight emSign G3 intermediate CAs under eMudhra. eMudhra acknowledged that a script error led to the generation of weak keys, and the relevant intermediate certificates were revoked following reports received on October 17. However, a security advisory from Teku notes that Java does not check certificate revocation status by default, meaning affected runtimes still require manual patching.
Odaily Report: The EIP-8450 proposal has been updated, aiming to introduce a quantum-resistant public key registration mechanism for Ethereum validators, adopting hash-based cryptographic schemes, including leanXMSS keys and VRF tree roots. The update specifies that BLS signing keys authorize the registration and replacement of quantum-resistant keys, and sets a replacement delay of at least one Epoch along with an anti-replay mechanism; the proposal is currently still in the Draft stage and has not yet been deployed.
Ethereum co-founder Mihai Alisie joins as a core backer, with Payward and Gattaca becoming contributors and 19 additional Ethereum community members lending their support. Ethlabs is Ethereum's non-profit R&D organization, whose initial core backers previously included BitMNR, Sharplink, and Joseph Lubin.
Odaily reports: Gate Money connects account payments, asset exchange, and everyday spending, with its services underpinned by collaboration among international banks, payment institutions, custody providers, and clearing institutions. Eligible users can use bank accounts in their own name to manage fiat funds by currency, process deposits and withdrawals, and send and receive digital assets through supported blockchain networks. The availability of each feature depends on local regulatory requirements, the service capabilities of partner institutions, and user eligibility.On the compliance front, Gate has obtained a MiCA license and a Payment Institution (PI) license in the EU, its Dubai entity has obtained a VARA license, and its Australian entity has completed AUSTRAC registration as a digital currency exchange provider, with these qualifications applying to the respective entities and approved business activities. Gate US holds 37 state-level Money Transmitter Licenses (MTLs), covering 47 U.S. states and territories. On asset transparency, Gate's latest proof of reserves shows that the platform's total reserve size has risen to USD 8.688 billion, with an overall reserve coverage ratio of 118.49%; BTC reserves reached 25,727, with a reserve ratio of 121.60%; ETH reserves stood at 449,042, with a reserve ratio of 123.78%. Collaboration with financial institutions, compliance qualifications, and verifiable reserves together form the foundation of Gate Money's services, supporting the platform in meeting fund payment and asset management needs beyond trading. (Cointelegraph)
RLUSD supports deposits and withdrawals across three chains: XRPL, Base, and Ethereum, while Ripple will provide liquidity on Base. Support for Coinbase Global Exchange customers (including the use of RLUSD as collateral) will follow. Launched in December 2024, RLUSD currently has a market capitalization exceeding $2.4 billion.
The Federal Reserve is about to announce its interest rate decision, after which Fed Chair Kevin Warsh will hold a press conference. Markets expect the Fed to keep the benchmark rate unchanged in the 3.75%–4% range, with investors focused on three key signals: first, whether three or more voting members dissent from holding rates steady and advocate for a hike; second, how Warsh assesses the recent easing of financial conditions and the pullback in U.S. Treasury yields; third, what he says about two consecutive months of above-expectation inflation data, oil prices near $100, and record-high U.S. diesel prices.If more officials signal a hawkish tilt, or if Warsh views looser financial conditions as exacerbating inflationary pressure, market expectations for future rate hikes could intensify, potentially lending support to the dollar index while weighing on risk assets such as Bitcoin. Ahead of the decision, Bitcoin stood at $81,411, up more than 2% over 24 hours; Ethereum, SOL, and XRP also posted gains of over 2% over the same period. (CoinDesk)
Odaily reports: Bitcoin rose about 0.8% since midnight (UTC) on Monday to $81,400, after briefly falling below $80,000. Ethereum gained 0.9%, Asian chip stocks led a tech rebound, South Korea's KOSPI rose 6.6%, SK Hynix climbed about 11% on roughly 7x year-over-year profit growth, and Nasdaq 100 futures rose 0.5%.The Federal Reserve is about to announce its rate decision, and the CME FedWatch tool shows the market sees about a 92% probability of rates being held steady. Traders will focus on Fed Chair Kevin Warsh's press conference to gauge whether there is any possibility of a rate hike ahead. U.S. spot Bitcoin ETFs saw net inflows of $176 million on Tuesday, marking a second consecutive trading day of inflows.On the derivatives side, crypto futures trading volume rose 7.5% over the past 24 hours to $163.2 billion, open interest increased only 1.3%, and liquidations rose 38% to $183.6 million. Bitcoin rose 2.3% while open interest actually fell 0.1%; Ethereum rose 2.7% with open interest up 1.7%, indicating the price rebound has not yet been accompanied by large-scale new leverage. ZEC open interest grew 14%, higher than its 6.3% price gain over the same period, making it one of the large crypto assets with the most obvious new position building.In the options market, Deribit data shows that Bitcoin's one-week put/call skew has dropped from nearly 10% a week ago to less than 1%, indicating that demand for short-term downside protection has weakened somewhat, though the one-month, three-month and six-month tenors remain clearly skewed toward puts. Meanwhile, gold futures open interest fell 10%, while open interest for Tether's gold token XAUT rose 11.6%, showing divergent capital flows. (CoinDesk)
the cloud desktop service of Japanese internet giant GMO Group suffered unauthorized access, with up to 26,739 servers potentially affected. In the ransom letter, hackers demanded payment in BTC and ETH, initially asking for $50 million, then reducing the demand to $1 million, while threatening to continue conducting anomalous transactions in compromised accounts and publicly disclosing user data. GMO Group representative Masatoshi Kumagai stated that the company refused to compromise and did not pay any funds; its crypto exchange GMO Coin confirmed that no abnormal operations were found in customer accounts. The hackers subsequently published some data and threatened to update it daily. The website domain hosting the leaked information was shut down in the early morning of October 28.
According to CoinDesk, Securitize (SECZ) announced on October 28 that it is adding Stellar to its supported blockchain list, following prior support for Ethereum, Solana, and Avalanche. The agreement was unveiled at the Stellar Development Foundation's annual conference, Meridian 2026, in Lisbon, Portugal. In a statement, Securitize CEO Carlos Domingo noted that the Stellar network has established the fourth-largest ecosystem for tokenized real-world assets. Founded in 2017, Stellar listed on the New York Stock Exchange in July of this year.
Initia officials stated that, with support from the Initia Foundation, the 1:1 asset backing for assets affected by the October 23 security incident will be fully restored when the chain resumes operations. The Initia Foundation has approved funding to cover the reserve shortfalls for Noble USDC, WETH, and AUSD0 used as collateral for iUSD, amounting to up to 1.08 million USDC, 105 ETH, and 1.4 million AUSD0, respectively. The specific amounts remain subject to verification and require final transfer approval.