News linked to both this project and an event.
According to CTV News, Toronto police announced the arrest of seven suspects, three of whom are members of the Canadian Armed Forces (CAF), in connection with a violent abduction on July 25 near Finch and Bayview Avenue. The victim was forcibly handcuffed and assaulted, while suspects attempted to extort cryptocurrency assets and commercial security system access credentials. Police have laid a total of 82 criminal charges, including extortion and kidnapping, illegal possession of firearms, and drug trafficking. Searches yielded 3D-printed firearms, GPS tracking devices, large quantities of methamphetamine and cocaine, and approximately 2,500 rounds of ammunition suspected to have been stolen from the military. The implicated service members, Fernando (22) and Moreau (29), both reserve artillery personnel with the 7th Toronto Battalion, have been suspended from military duty. The Department of National Defence stated that military police are cooperating with the investigation and will strengthen ammunition management and tracking protocols.
Odaily report: According to GoPlus Security monitoring, a user fell victim to an address poisoning attack, losing approximately $305,000 in DAI. The attacker generated a fake address with the same prefix and suffix as the victim's intended transfer address, and sent small amounts of dust funds to the victim to trick them into incorrectly copying the address from their transaction history. GoPlus Security stated that such attacks have achieved automation in target discovery, address forgery, and money laundering through mixers. Users should verify the full address and conduct a small test transaction before making large transfers.
GoPlus Security released a security alert stating that on August 25, realio[.]fund, a project under Realio Network, was attacked. The attacker took control of the platform's signing system and moved treasury and custody wallet assets across Ethereum, BNB Chain, Algorand, Stellar, and the Realio native chain. A total of approximately 127.9 million RIO tokens worth around $6.2 million were affected, with the attacker having cashed out approximately $317,000 so far.
Odaily News: Bitcoin News posted on X platform that Xapo Bank users have reported the app now requires location data before allowing transactions. According to reports, one user was told they must share GPS coordinates to access their funds. Xapo Bank stated it will cross-check location information with other data to confirm that the account holder controls the account. @ToneVays warned that location requirements could become standard for regulated payment apps; Casa CEO @Nneuman said the measure may be aimed at countering large-scale social engineering attacks rather than traditional KYC.
GoPlus Security issued a security alert stating that a user signed a malicious Permit transaction 183 days ago, resulting in approximately $1,625 worth of USDC being transferred by phishing attackers. Since the user did not revoke the relevant authorization thereafter, attackers exploited this authorization again to transfer approximately $75,780 worth of USDC.
GoPlus Security reported that a user fell victim to a typical address poisoning attack: the user mistakenly sent 100,000 DAI to a spoofed address after copying a visually similar address from their transaction history. In this incident, the user had previously sent 300,000 DAI to the legitimate target address; the attacker then sent 0.0003 DAI to the user from a malicious address with characters nearly identical to the legitimate one—before and after the address—thereby tricking the user into selecting the wrong address during their subsequent transfer. GoPlus Security advises users not to copy wallet addresses from transaction history, always verify the full address before sending funds, and conduct a small test transaction prior to any large transfer.