News linked to both this project and an event.
According to Odaily, the Newton Foundation stated that the attacker in the Binance hacking incident appears to have made an operational error today by transferring approximately 8 million NEWT and 17 other tokens directly to the NEWT token contract address. The total value of the involved assets is approximately $3.5 million at current prices.The Newton Foundation stated that the NEWT token contract itself was not compromised. Because the contract uses an immutable design, all admin permissions were renounced in 2025, and upgrade functionality was permanently disabled, no one (including the Foundation) can retrieve the tokens mistakenly transferred to the contract. These assets are now permanently locked, and the attacker can no longer control or sell them. The Foundation has shared the investigation results with Binance and will continue to provide assistance.
According to Tech in Asia, Mirae Asset Securities (Korea)’s Hong Kong subsidiary, Mirae Asset Securities (HK), announced that it has completed an issuance of tokenized financing notes on the Solana blockchain for qualified institutional investors. The notes are denominated in US dollars, have a six-month term, and are floating-rate notes. They are part of the company’s $3 billion guaranteed structured note program (which denotes the total program size, not the issuance amount for this offering). Singapore-regulated digital market infrastructure operator Marketnode served as the authorized distributor, with support from the Solana Foundation, while Mirae Asset handled the token issuance, payment processing, and full lifecycle management. The notes were offered exclusively through a private placement to professional investors as defined under Hong Kong’s Securities and Futures Ordinance, and have not been recognized or registered by the Hong Kong Securities and Futures Commission.
According to the official announcement from Foundation, regarding the recent phishing email incident, the team's investigation found that its email system recorded over 23,000 phishing email sending attempts, of which 19,057 were sent via Mailgun and another 1,503 via Google Workspace. Since some mailboxes received multiple emails and some sending attempts failed or were blocked, the actual number of affected individuals cannot currently be confirmed.
Odaily reports: Bitcoin News posted on X that Foundation Devices stated attackers launched over 23,000 phishing email attempts targeting its hardware wallet customers, exploiting customer records the company believed had been deleted but were still retained in historical database tables. Investigators confirmed that 19,057 of these emails were sent via Mailgun, while another 1,503 were sent through Google Workspace; the number of affected customers remains undetermined.Foundation Devices stated that after the legacy WooCommerce database migration, customer names, shipping information, refund records, and incomplete checkout information in the old tables remained accessible; recent Shopify order information may also have been exposed. The company said there is no evidence that the Passport hardware wallet or its private keys were compromised, and the investigation is ongoing.
According to The Block, the Ethereum Foundation announced a delay of the Glamsterdam upgrade, originally scheduled for October 26 on the Hoodi testnet, to allow for further review of EIP-8037's interaction with mainnet smart contracts. A new activation date has not yet been announced. Hoodi is one of Ethereum's test networks, primarily used to validate network upgrades before they go live on the mainnet.
The Cysic Foundation has issued a notice to the parties responsible for the unauthorized issuance of the CYS token, demanding the return of 275.872 ETH within 72 hours, which accounts for approximately 90% of the confirmed related proceeds. As a bounty for asset recovery, the party may retain the remaining approximately 30.652 ETH. The foundation stated that it has reconstructed key stages of the attack and preserved relevant technical and on-chain evidence; if payment is not received within the deadline, it will escalate the matter and cooperate with law enforcement to launch a criminal investigation.
Odaily reports: The PHP Foundation has stated that due to hesitant decision-making and insufficient resources, remediation work for a critical security vulnerability first discovered in 2024 stalled and restarted multiple times, and it characterized the delay as a "structural failure." PHP is a programming language widely used for websites and web applications.PHP has released emergency patches for two related critical vulnerabilities. Unauthenticated attackers could exploit the flaws to execute code on affected servers without logging in. Some government websites or online services in the Netherlands, Finland, France, Germany, and Australia were temporarily taken offline to prepare for patch installation.Security firm Calif and OpenAI separately reported the same underlying issue on August 11, and Calif also demonstrated unconditional remote code execution. Blockchain security firm SlowMist investigated PHP usage in the crypto industry and found direct PHP fingerprints on 793 of the 1,488 domains it assessed.Intersect has temporarily closed its Members Area, Coinbase said it has not found any affected PHP instances, and digital asset infrastructure company BitGo said its platform was not affected. Binance co-founder Changpeng Zhao reminded users to exercise heightened caution when visiting websites recently, and OpenAI has released a Codex skill for checking for vulnerable PHP versions. (Cointelegraph)
Odaily reports: A Fox Business crypto reporter posted on X platform that the U.S. Securities and Exchange Commission (SEC) stated that three companies have notified it of their plans to operate tokenized securities trading venues (TSVs) under the new innovation exemption policy. TSV LLC is held by Obsidian Systems co-founders Ali Abrar and Ryan Trinkle, with Ryan Trinkle also serving as a board member of the Canton Foundation; the platform plans to operate on Canton Network. OKXICE is a joint venture between OKX and ICE Markets, planning to operate on OKX's Ethereum Layer 2 network X Layer. Kephas Corp. is the U.S. subsidiary of Perpetuals.com, led by founder @PGruhnPDC, who previously served as head of FTX Europe; the platform plans to operate on Kronos X Public, a public, permissionless Layer 2 network that adopts permissioned trading pools. The SEC stated that inclusion on this list does not mean the relevant companies have met the conditions of the innovation exemption.
Odaily reports: Bessent posted on X that the GENIUS Act is a watershed moment for the U.S. financial sector, further cementing the United States' position as the global crypto hub. He noted that just as President Lincoln's National Currency Act of 1863 established a national framework for banks issuing currency, the GENIUS Act establishes a federal framework for payment stablecoins in the digital age. Bessent stated that the Office of the Comptroller of the Currency (OCC)'s final rule advances the implementation of the Act, providing a clear and pragmatic foundation for private-sector innovation, competition, and U.S. leadership in digital assets.
Odaily reports: Six blockchain organizations—Stellar Development Foundation, Hedera, Aptos Labs, Ava Labs, Cardano Foundation, and Chainlink Labs—have jointly submitted a comment letter to the U.S. Securities and Exchange Commission (SEC), requesting that the definition of "Digital Commodity" and its non-security status be explicitly clarified in the main text of the proposed "Regulation Crypto Assets."It is understood that the SEC's regulatory interpretation released in March 2026 has established the classification of digital commodities, but the relevant definition currently appears only in the preamble of the proposed rules and has not yet been incorporated into the binding rule text. The organizations believe that formally codifying it into the rules would help reduce regulatory uncertainty and provide a more stable legal framework for public chain developers and ecosystem participants.
The Cysic Foundation released an incident report stating that on October 17, its cross-chain bridge experienced a security incident in which an attacker minted 10 million CYS without authorization on the BNB Smart Chain. Upon discovering the anomaly, the project team suspended the cross-chain bridge, placed related addresses on an on-chain blacklist, and hired a professional security firm to investigate the attack vectors and fund flows.
Odaily reports: A Solana Foundation official stated that the U.S. GENIUS Act provides regulatory momentum for enterprises and financial institutions to enter the stablecoin space, and is also one of the important background factors behind Samsung's launch of stablecoin payment services. Samsung has announced that starting in the last week of October, it will support USDC cross-border transfers in Samsung Wallet, initially targeting eligible Galaxy users in the United States and covering approximately 82 million devices. Users can transfer USD stablecoins to compatible crypto wallets within seconds with no transfer fees, and can also send remittances to eligible bank accounts in more than 60 countries and regions. The service will use the Solana and Sui networks as its underlying infrastructure, with licensed stablecoin custodian Bastion providing transfer services and Coinbase Prime serving as sub-custodian responsible for safeguarding USDC assets.
U.S. cryptocurrency trading platform Binance US is seeking to raise up to $100 million in funding at a target valuation of approximately $1 billion. This valuation represents a decline of about 78% from its $4.5 billion valuation prior to its previous funding round in 2022.Binance US raised over $200 million in 2022, with investors including Foundation Capital, RRE Ventures, Circle Ventures, and VanEck. The platform is working to rebuild its market share by reducing fees, launching new products, and expanding its U.S. business coverage.Binance US plans to expand to all 50 U.S. states and apply for a derivatives license to explore perpetual futures, prediction markets, and other financial services. The platform restored USD deposits and withdrawals via ACH transfers in February 2025, and CEO Stephen Gregory assumed office in March 2026. (Bitcoin.com News)
Odaily News: The XRP Ledger Foundation posted on the X platform to clarify the recent XRP Ledger security vulnerability incident, stating that the vulnerability could potentially have been used to bypass the limit that fixes XRP's total supply at 100 billion, but it was fixed two weeks ago via version 3.4.1. Furthermore, upon verification, no new XRP was found to have been created, and the total amount of XRP currently circulating on the ledger is approximately 99.986 billion.The Foundation stated that the vulnerability would have required hundreds of deliberately constructed operations to trigger, and normal payment transactions would almost never involve it. In the future, it will strengthen formal verification, AI adversarial testing, security research collaboration, and bug bounty programs with RippleX and the community. Regarding the fix process, the Foundation explained that publicly releasing a patch could allow attackers to use AI to accelerate vulnerability analysis. To address this situation, the XRPL community engaged in coordination. Participating parties including the XRP Ledger Foundation, RippleX, core developers, and validators reached a social consensus and agreed to adopt the approach of directly releasing the fix. In addition, version 3.4.1 only became a version the network was required to adopt after going through the normal amendment voting process and receiving support from more than 80% of validators for two consecutive weeks. Protocol changes still need to be completed through the amendment mechanism.Previously, RippleX engineering lead J. Ayo Akinyele also posted on the X platform, stating that he attaches great importance to the recently disclosed critical vulnerability in the XRP Ledger (XRPL) payment engine. This vulnerability is a serious security issue that has existed in the codebase for more than 10 years and could theoretically lead to the over-creation of XRP, breaking through the fixed supply cap. However, before the vulnerability could be exploited, it was discovered by the security research firm Veria AI through Ripple's bug bounty program.
Odaily News: The Cardano Foundation has spun off its digital identity project Veridian into an independent Swiss company and tokenized the majority of its 1 million shares on the Cardano blockchain.Veridian becomes the first company to adopt the Cardano CIP-0113 standard. This standard allows token issuers to impose transfer restrictions and freeze or seize assets to meet regulatory requirements.Veridian's mobile wallet is now live, and it is developing related credentials to help individuals, businesses, and AI agents verify identity and permissions without relying on centralized databases. (CoinDesk)
Odaily News: The Cardano Foundation has introduced the CIP-0113 token standard, allowing issuers of regulated assets to restrict recipients based on predefined rules and to freeze, seize, or transfer token holdings. The standard enables issuers to implement such controls without requiring a hard fork of the Cardano network.CIP-0113 requires compliance checks to be executed on every transfer, including identity verification and sanctions list screening. Issuers can choose or customize rules and update them as regulatory requirements change; under the authorization mechanism, relevant parties can transfer tokens without the holder's consent. (CoinDesk)
The Cardano Foundation has officially launched the programmable token standard CIP-0113 on the Cardano mainnet, enabling regulated asset issuers such as stablecoin operators, tokenized funds, and bond issuers to embed compliance rules including KYC, anti-money laundering, sanctions screening, asset freezing and confiscation, and transfer restrictions directly into their tokens, which are then enforced by the Cardano ledger with every transfer, mint, and burn. This standard requires no hard fork; the tokens remain native to Cardano, and issuers can update compliance modules in response to regulatory changes.
Odaily reports: Greenfield Capital, an early investor in Safe, has published an open letter stating that it has filed a regulatory complaint with the Swiss Federal Foundation Supervisory Authority (ESA) regarding the Safe Ecosystem Foundation. Greenfield Capital stated that it has never sold any SAFE tokens since investing in Safe in 2022, but the total assets held in Safe accounts have declined from approximately $6.6 billion at the beginning of 2024 to about $3 billion. Over the same period, total DeFi TVL grew by roughly 40% and stablecoin supply increased by 135%, while stablecoins within Safe grew by only 11%. The firm believes that Safe's share of the self-custody market is declining.Greenfield Capital stated that about a year ago, it was unable to form a reliable judgment based solely on information provided by the Safe team, so it conducted an independent review together with former employees, major users, ecosystem developers, and other investors, and concluded that the issues identified all ultimately related to governance. The firm had previously requested refreshing the foundation's board of directors with experienced and independent members, restructuring management and bringing in operators with experience scaling infrastructure businesses, and having the board lead a review of strategy, product, organizational structure, and tokenomics while setting quantifiable key performance indicators. Greenfield Capital said that since late 2025, it has made these requests to the foundation both directly and through legal counsel, but the foundation only established a strategy committee without decision-making authority and appointed people from existing circles to fill board vacancies, which ultimately led to the filing of the regulatory complaint with ESA. The firm emphasized that this action is not a lawsuit against individuals and that it does not intend to take over Safe; its concerns are limited solely to foundation governance and board composition. It remains positive about the work of the Safe Labs operating team and will continue to cooperate as an ecosystem participant and Safenet validator.
Greenfield Capital has filed a complaint with the Swiss federal foundation regulator ESA regarding governance issues at the Safe Ecosystem Foundation, alleging that Safe Foundation directors instructed personnel to hand over a substantial amount of SAFE tokens following the Bybit hack, and threatened to force Gnosis to sell its holdings—which account for approximately 10% of the total SAFE supply—and sever ties with Safe.
Odaily News — According to monitoring by Drift Foundation, DFX claims and redemption are now live. Users with verified losses from the April 1 incident can claim 1 DFX per 1 USDT lost. Each DFX corresponds to a claim on the Recovery Pool, which currently holds approximately 3.11 million USDT. The funding sources include a portion of Velocity's daily protocol net revenue, up to 127.5 million USDT in matching funds from Tether, up to 20 million USDT from strategic partners, and assets recovered subsequently.DFX can be redeemed for USDT at a redemption amount calculated as "Recovery Pool balance ÷ DFX outstanding supply." Redeemed DFX will be burned, and transactions are irreversible. The claims window will close on January 1, 2028, at 00:00 UTC, at which point unclaimed DFX will be burned.Yesterday, Drift Foundation released an update on fund recovery efforts related to the April 1 security incident, in which approximately $295 million in user assets were stolen. The Foundation has engaged Mandiant, zeroShadow, and SEAL 911 to conduct investigations and trace funds, with Mandiant identifying the attacker as North Korean threat group UNC6862.