News linked to both this project and an event.
Odaily reports: The PHP Foundation has stated that due to hesitant decision-making and insufficient resources, remediation work for a critical security vulnerability first discovered in 2024 stalled and restarted multiple times, and it characterized the delay as a "structural failure." PHP is a programming language widely used for websites and web applications.PHP has released emergency patches for two related critical vulnerabilities. Unauthenticated attackers could exploit the flaws to execute code on affected servers without logging in. Some government websites or online services in the Netherlands, Finland, France, Germany, and Australia were temporarily taken offline to prepare for patch installation.Security firm Calif and OpenAI separately reported the same underlying issue on August 11, and Calif also demonstrated unconditional remote code execution. Blockchain security firm SlowMist investigated PHP usage in the crypto industry and found direct PHP fingerprints on 793 of the 1,488 domains it assessed.Intersect has temporarily closed its Members Area, Coinbase said it has not found any affected PHP instances, and digital asset infrastructure company BitGo said its platform was not affected. Binance co-founder Changpeng Zhao reminded users to exercise heightened caution when visiting websites recently, and OpenAI has released a Codex skill for checking for vulnerable PHP versions. (Cointelegraph)
The Polkadot Community Foundation issued a security warning on the Polkadot Forum stating that versions 3.0.1, 3.0.3, 3.0.4, and 3.0.5 of the browser extension for the third-party wallet Fearless Wallet contain malicious code, which may transmit users' private keys to attacker-controlled servers when unlocking the wallet. The relevant code was added on February 19, 2025, via a code commit titled “TON ecosystem”, and was triggered intermittently from February 2025 to October 10, 2026.
As reported by CoinDesk, the teams behind the MyDoge wallet, DogeOS app network, and merchant payment tool Such App will jointly establish Dogecoin Labs, aiming to expand everyday use cases for DOGE. Dogecoin Labs will partner with the Dogecoin Foundation and oversee operations for MyDoge, DogeOS, and Such App, with MyDoge and DogeOS founder Jordan Jefferson appointed as CEO.
Odaily reports: With the support of the Dogecoin Foundation, Dogecoin Labs has officially been established, integrating the MyDoge wallet, the DogeOS application platform, and the Such App payment product into a single independent organization, with Jordan Jefferson serving as Chief Executive Officer. The organization will focus on expanding DOGE's applications in consumer-grade use cases, payments, commerce, DeFi, and gaming, among other areas, driving its use cases to extend from community culture and Meme-driven demand toward practical applications.According to the announcement, MyDoge has over 500,000 users; DogeOS launched an EVM-compatible public testnet on September 30, aimed at connecting developers with DOGE holders; Such App provides merchant payment tools, including invoicing and in-person QR code payments. The Dogecoin Foundation will continue to be responsible for ecosystem governance and open-source development. (The Block)
The Starknet Foundation has announced the launch of the Bramble wallet, which integrates the STRK20 shielding feature and supports users in holding private balances. Currently, Bramble is only available as a Chrome browser extension, with broader ecosystem support to follow.
Odaily reports: Six blockchain organizations—Stellar Development Foundation, Hedera, Aptos Labs, Ava Labs, Cardano Foundation, and Chainlink Labs—have jointly submitted a comment letter to the U.S. Securities and Exchange Commission (SEC), requesting that the definition of "Digital Commodity" and its non-security status be explicitly clarified in the main text of the proposed "Regulation Crypto Assets."It is understood that the SEC's regulatory interpretation released in March 2026 has established the classification of digital commodities, but the relevant definition currently appears only in the preamble of the proposed rules and has not yet been incorporated into the binding rule text. The organizations believe that formally codifying it into the rules would help reduce regulatory uncertainty and provide a more stable legal framework for public chain developers and ecosystem participants.
Odaily reports: Blockchain security research firm Asymmetric Research has disclosed that Solana's on-chain governance program svmgov previously had a vulnerability: when validators did not participate in voting, independent votes submitted in advance by their delegators might not be counted in the final results. The vulnerability was reported to the Solana Foundation on July 10 and was fixed on mainnet on August 3, earlier than the governance vote on August 24. Based on on-chain data calculations, Asymmetric Research estimates that if the vulnerability had not been fixed, the approval rate of the SGP-0002 proposal, which aims to accelerate the decline in SOL inflation, could have dropped from the actual 67.00% to 66.65%, below the 66.67% passage threshold. The vulnerability was fixed before the vote and did not actually change the proposal's outcome.
According to the Arbitrum Foundation Governance Forum summary, Arbitrum DAO currently has four temperature check votes concluding on October 22, covering the Ethereum Glamsterdam upgrade adaptation, L1 governance recovery mechanism, treasury ETH transfer, and the USDG strategic plan. Among them, Entropy proposes designating USDG as one of the core strategic initiatives for Arbitrum DAO, requesting an additional 100 million ARB from the DAO treasury allocated to the DRIP budget, while also adjusting the project timeline and permitted uses. Additionally, it is proposed to route AEP net fees into the ATMC and convert them into USDG to support the growth of USDG on Arbitrum.
The Cysic Foundation released an incident report stating that on October 17, its cross-chain bridge experienced a security incident in which an attacker minted 10 million CYS without authorization on the BNB Smart Chain. Upon discovering the anomaly, the project team suspended the cross-chain bridge, placed related addresses on an on-chain blacklist, and hired a professional security firm to investigate the attack vectors and fund flows.
Odaily reports: Solana has gone two consecutive years without reporting a mainnet outage. A report from Fidelity's Applied Technology Center (FCAT) notes that its network health has made progress across resilience, economic security, and performance metrics.The report notes that higher staking participation and incentive mechanisms rewarding validator performance underpin Solana's economic security, while low latency, improved scalability, and low-cost transactions also support its adoption at scale.The report also states that staking concentration among a small number of validator identities and operators, as well as concentration in custody and client software, still require continued observation. Jacob Creech, VP of Technology at the Solana Foundation, said that Solana reduced slot times to 350 milliseconds on August 21; the foundation announced plans in June to further reduce this to 200 milliseconds, with three additional 50-millisecond adjustments to follow. (Cointelegraph)
Odaily reports: A Solana Foundation official stated that the U.S. GENIUS Act provides regulatory momentum for enterprises and financial institutions to enter the stablecoin space, and is also one of the important background factors behind Samsung's launch of stablecoin payment services. Samsung has announced that starting in the last week of October, it will support USDC cross-border transfers in Samsung Wallet, initially targeting eligible Galaxy users in the United States and covering approximately 82 million devices. Users can transfer USD stablecoins to compatible crypto wallets within seconds with no transfer fees, and can also send remittances to eligible bank accounts in more than 60 countries and regions. The service will use the Solana and Sui networks as its underlying infrastructure, with licensed stablecoin custodian Bastion providing transfer services and Coinbase Prime serving as sub-custodian responsible for safeguarding USDC assets.
Odaily News: Near Protocol and Sunrise announced on October 15 that NEAR has connected to Solana via Sunrise, and NEAR liquidity is now accessible across Solana wallets, the decentralized exchange Jupiter, Raydium, and trading aggregators.This cross-chain pathway is powered by Near Intents, with NEAR as the first asset onboarded. The partners plan to support more assets and eventually integrate Near Intents directly into Sunrise.Following the announcement, NEAR is trading in the $5.24 to $5.30 range, up approximately 14% over 24 hours; its price has more than doubled over the past 30 days.Helius CEO Mert Mumtaz has joined the Near Foundation Council, where he will contribute to product strategy, market execution, and ecosystem development. (Bitcoin.com News)
OpenAI posted on X that it will donate $5 million to a new initiative by the Simons Foundation to support mathematicians in studying, understanding, and further leveraging AI-generated results, including its recently published findings. The funds will be managed and distributed by the Simons Foundation to support workshops, conferences, and special projects; OpenAI will also provide models and computing resources to researchers supported by the Simons Foundation.
Odaily News: Crypto hardware wallet manufacturer Ledger has announced the launch of Ledger Agent Intent, available free of charge starting today to all Ledger-compatible signing devices. AI agents can monitor the market and propose portfolio optimization recommendations, and users can review and approve related operations on their Ledger devices, with private keys remaining under user control.Agent Intent will directly integrate with OpenClaw, allowing users to register OpenClaw agents on Ledger Atom devices and authorize operations, with the OpenClaw app to be pre-installed on the devices. The tool also supports the Solana Foundation's Pay.sh, where requests proposed by agents can enter a unified queue for users to sign at a time of their choosing. Ledger has partnered with Venice AI to address privacy concerns and stated that user data will not be used to train third-party models.
Odaily News: According to Bitcoin News monitoring, Bitcoin News released a podcast in which former Mt. Gox CEO Mark Karpelès and Foundation CEO Zach Herbert discussed the largest supply chain attack in crypto industry history. Mark Karpelès stated that he discovered the spy implant 3 weeks before the funds were stolen and contacted Ledger, but received no response. The implant had a built-in hidden cellular modem that could directly read the seed phrase on the screen and passed Ledger's own checks; even setting a passphrase could not prevent the seed phrase from being stolen. Mark Karpelès said that with $5 million, he could create an implant that would only be detectable through X-ray. The episode also discussed the hardware wallet reseller model, the Malaysian reseller behind the attack, on-chain tracking of stolen crypto assets, the spread of the attack to Europe, why Trezor was not targeted, hardware wallet security, and multi-party computation solutions. The episode timeline shows that the amount stolen from hardware wallets reached $100 million, with $86 million transferred out within 24 hours.
Nature Will has released its first foundational model for the physical world, Natura-1. The model was trained on one million hours of first-person videos showing humans handling various scenes and objects, enabling it to process unseen objects and tasks. Natura-1 supports fine-grained instructions specifying an object's final position and orientation, maintains control when grasping methods change mid-action, executes different tasks with both hands, and tracks objects that have been moved or opened throughout long-horizon tasks to determine the next steps. This announcement supplements earlier breaking news regarding Nature Will's release of the 50-billion parameter MoE model Natura-1, focusing on its physical-world capabilities.
According to Wintermute's weekly market update, Federal Reserve meeting minutes showed most officials expected another rate hike by year-end, with rate cuts unmentioned, while the US 10-year Treasury yield reached multi-decade highs. Consequently, BTC fell 3.2% this week to around the $83,000 level, ETH dropped 7.0%, and the S&P 500 index rose 1.2% to an all-time high. US spot BTC ETFs recorded weekly net outflows of approximately $679 million, marking the largest single-week outflow since June; ETH ETFs saw outflows of $542 million. CoinGlass data indicates roughly $1.19 billion in liquidations within 24 hours near Thursday's low, with long positions accounting for $1.06 billion. ETH faced additional pressure from news that researchers associated with the Ethereum Foundation advised users to migrate to new addresses. BTC's market share rose to approximately 59.5%, representing the most prominent internal signal of the week. Wintermute noted that amid the Fed's inclination toward rate hikes, yields are unlikely to retreat in the short term. Renewed optimism for crypto markets requires simultaneously meeting two conditions: "stabilization of long-end rates" and "spot ETFs resuming net inflows." It advised closely monitoring Wednesday's September CPI data and earnings reports from financial institutions and AI-related companies this week.
Odaily Report: On-chain detective ZachXBT retweeted the XRP Ledger Foundation's explanation regarding a previous critical security vulnerability and criticized its bug bounty mechanism.ZachXBT stated that XRPL, which holds billions of dollars in assets, only paid a $250,000 reward to the white hat hacker who discovered the critical vulnerability. He believes that this level of reward could weaken security researchers' incentive to proactively report vulnerabilities, and may even encourage attackers to exploit vulnerabilities for massive gains rather than responsibly disclosing the issue.Previously, the XRP Ledger Foundation confirmed that the vulnerability could theoretically bypass the XRP total supply limit, but no additional XRP was found to have been created as a result, and the vulnerability has been fixed through version 3.4.1.
According to The Block, the Sui Foundation is investing $30 million into the AI data training protocol DATA Network, becoming one of its largest institutional holders. Under the strategic partnership reached between the two parties, DATA Network will be upgraded to a native protocol on the Sui chain and integrated with the on-chain data storage platform Walrus, while its original independent blockchain will be deactivated.
Odaily News: The XRP Ledger Foundation posted on the X platform to clarify the recent XRP Ledger security vulnerability incident, stating that the vulnerability could potentially have been used to bypass the limit that fixes XRP's total supply at 100 billion, but it was fixed two weeks ago via version 3.4.1. Furthermore, upon verification, no new XRP was found to have been created, and the total amount of XRP currently circulating on the ledger is approximately 99.986 billion.The Foundation stated that the vulnerability would have required hundreds of deliberately constructed operations to trigger, and normal payment transactions would almost never involve it. In the future, it will strengthen formal verification, AI adversarial testing, security research collaboration, and bug bounty programs with RippleX and the community. Regarding the fix process, the Foundation explained that publicly releasing a patch could allow attackers to use AI to accelerate vulnerability analysis. To address this situation, the XRPL community engaged in coordination. Participating parties including the XRP Ledger Foundation, RippleX, core developers, and validators reached a social consensus and agreed to adopt the approach of directly releasing the fix. In addition, version 3.4.1 only became a version the network was required to adopt after going through the normal amendment voting process and receiving support from more than 80% of validators for two consecutive weeks. Protocol changes still need to be completed through the amendment mechanism.Previously, RippleX engineering lead J. Ayo Akinyele also posted on the X platform, stating that he attaches great importance to the recently disclosed critical vulnerability in the XRP Ledger (XRPL) payment engine. This vulnerability is a serious security issue that has existed in the codebase for more than 10 years and could theoretically lead to the over-creation of XRP, breaking through the fixed supply cap. However, before the vulnerability could be exploited, it was discovered by the security research firm Veria AI through Ripple's bug bounty program.