Odaily News — Multiple Bitcoin ventures associated with Bitcoin pioneer and Blockstream co-founder Adam Back have recently suffered a series of setbacks: the merger between BSTR Holdings, the Bitcoin treasury project he championed, and a SPAC under Cantor Fitzgerald has been terminated, with BSTR ordered to pay a $15 million breakup fee; Blockstream Mining, the Bitcoin mining operation he co-founded and in which he holds a minority stake, along with its partner Exacore, has faced multiple lawsuits following its spin-off from Blockstream, accused of owing equipment payments, electricity bills, and customer deposits, with related financing totaling approximately $2 billion; meanwhile, Liquid Network, the Bitcoin sidechain initiated by Blockstream, suffered a hack in which approximately 4,000 BTC were stolen, of which 3,400 have been returned, with the hacker still retaining approximately $47 million worth of Bitcoin. (Bloomberg)
Odaily News: Cantor Fitzgerald has initiated coverage of digital asset securitization company Securitize with an Overweight rating and a price target of $21.2. Securitize shares rose 12% yesterday to $14.57, hitting an all-time high. Cantor Fitzgerald stated that tokenization represents one of the largest overhauls of financial infrastructure in the past century, and believes the stock's current valuation is attractive.
Japan's 10-year government bond yield briefly rose to 2.945% this week, marking a nearly 30-year high and approaching the critical 3% level assumed in the Japanese government's budget. Rising yields are increasing pressure on government debt servicing, undermining Prime Minister Sanae Takaichi's room to pursue large-scale fiscal expansion and growth investment. The Japanese government has allocated 31 trillion yen for debt servicing in the current fiscal year; if long-term yields remain above 3%, debt financing costs could significantly exceed the budget.
According to The Block, data from blockchain analytics firm Chainalysis shows that violent robberies targeting cryptocurrency holders in the first half of 2026 have resulted in losses exceeding $30 million. If the trend continues in the second half, the full-year total will surpass the historical peak of $58 million in 2025. France has become the world's largest "Wrench Attack" hotspot, with 30 public cases recorded in the first half of 2026, while the French Minister of the Interior stated that actual cases exceed 70. Chainalysis attributes this to the 2024 French tax authority data breach—a tax official was suspected of stealing and selling the names, addresses, holdings, and tax records of high-net-worth crypto holders, causing the attack frequency to surge from a monthly average of 1.9 in 2025 to a monthly average of 4.6 in the first half of 2026. Attack methods have also deteriorated; cases targeting family members rather than the holders themselves now account for over 40% of French cases, and the proportion of home invasions rose from 14% in 2025 to 37%. Stolen funds are typically quickly moved on-chain, with some laundered through tools such as decentralized exchanges and cross-chain bridges; advanced criminal networks are even linked to cartel money laundering and terrorist financing channels.
Odaily Odaily News According to the latest weekly report from Gate Ventures, global markets continued to strengthen last week, driven by the technology sector. Both the S&P 500 and the Nasdaq index hit new record highs, with the S&P 500 gaining 2.36% for the week and the Nasdaq rising 4.52%. In the crypto market, BTC rose 4.6% last week, ETH rose 2.1%, spot BTC ETFs recorded net inflows for the fifth consecutive week, and market sentiment recovered to the neutral range. Additionally, the total market cap of cryptocurrencies excluding the top ten assets increased by 12.6% for the week.On the macroeconomic front, the ISM Services Price Index rose to 70.7, a two-year high, coupled with energy price fluctuations and the Federal Reserve's policy expectation of "keeping interest rates higher for longer," leading to increased market focus on a "stagflation" environment. On the industry level, Payward, the parent company of Kraken, has applied to the OCC for a national trust charter, highlighting the increasingly evident trend of industry compliance. In terms of investment and financing, 10 deals were completed last week totaling $34.2 million, primarily concentrated in the DeFi and infrastructure sectors. Among them, OpenTrade completed a $17 million funding round to accelerate the development of institutional-grade stablecoin yield infrastructure; OnRe secured a $5 million Series A round to advance its Solana-based tokenized reinsurance product offerings.
according to Gate Ventures' latest weekly report, the global market performance is generally stable, but inflationary pressures and policy divergences are rising simultaneously. The S&P 500 topped the 7,200 mark for the first time. The Fed kept interest rates unchanged but showed major internal divisions. Compounded by volatile oil prices due to supply shocks in the Strait of Hormuz, market expectations of "stagflation" have intensified. Against this backdrop, the crypto market remains in a consolidation pattern, with BTC largely flat and ETH experiencing a slight pullback. ETF fund flows are diverging, and market sentiment remains cautious.At the industry level, the CLARITY Act has clarified the boundaries for stablecoin yields, further promoting a clearer regulatory framework. EURC is seeing rapid growth in Spanish retail payment scenarios, indicating that localized stablecoin applications are coming to market. The Solana ecosystem is advancing its post-quantum signature scheme, Falcon, reflecting the industry's forward-looking layout for long-term security. In terms of investment and financing, 15 deals were completed this week, with a total volume of $167 million, representing a 205% increase week-over-week. The infrastructure track continues to dominate. Among these, Four Pillars completed a Series A funding round to strengthen institutional-grade research and infrastructure capabilities. Belo secured $14 million in a funding round led by Tether, accelerating the expansion of its stablecoin payment network in Latin America. Overall, capital continues to concentrate towards infrastructure and cross-asset platforms, driving the industry's accelerated evolution towards institutionalization and multi-asset integration.
Odaily News: According to monitoring by Bitcoin News, German Ledger user @jayr_crypto reports receiving another forged letter this week. The letter impersonates Ledger, claiming that new regulations require users to register a Bitcoin wallet through a service called ZenLedger by October 31. The letter uses Ledger's official branding elements, references German financial regulators, and includes a QR code that directs users to a so-called mandatory registration process. The user believes that addresses exposed in a previous data breach are being used to conduct targeted attacks against Ledger users. In the same week, Ledger coordinated with MediaMarktSaturn to suspend sales of its hardware wallets across a European retail network spanning 11 countries and more than 1,000 stores. It was previously reported that Ledger devices purchased from European retailers were found to contain malicious spy implants. Ledger separately confirmed that compromised devices sold by a distributor in Southeast Asia contained implants capable of stealing recovery phrases and transmitting them via cellular networks. Ledger has not yet confirmed that European devices were compromised. Ledger users are currently facing physical supply chain tampering and targeted phishing attacks exploiting home addresses. Do not scan suspicious QR codes or enter recovery phrases.
According to Trendfollowing Research, a Bank of America research report dated October 13, 2026 states that the October global fund manager survey shows cash levels at 3.9%, with 37% of investors indicating they would shift from equities to bonds once the 10-year US Treasury yield reaches 6.0%. The most crowded trades are long global semiconductors (45%) and short US Treasuries (27%). Meanwhile, 39% of respondents identify AI hyperscaler capital expenditures as the most likely source of credit events, and 76% expect the Federal Reserve to hold rates steady on October 28. Bank of America concludes that while the market is bullish, positioning is crowded, with bond yields and AI capital expenditures posing the greatest risks. For allocation strategy, they recommend contrarian trades: going long on bonds, REITs, and the consumer sector, while shorting equities, technology, banking, and emerging markets.
Hardware wallet manufacturer COLDCARD announced that its official X account previously shared a post containing a phishing link, which has now been deleted. The account has utilized offline 2FA since 2017 with strictly restricted access. The team has contacted the X platform and is currently auditing all account permissions, with further verification updates to be released later. COLDCARD noted that no login, session, or access logs were detected, and both credentials and offline 2FA remain secure. They suspect potential unauthorized platform-level or administrator-level access and are demanding an immediate investigation while preserving relevant logs.
Odaily News: NEAR Intents has stated that it has identified the attacker responsible for the loss of user funds and has demanded the return of $3.8 million within 48 hours through a "responsible disclosure" mechanism, after which the window will be closed.NEAR Intents suspended services on Thursday after discovering a vulnerability in the interaction between the Omni deposit and withdrawal infrastructure and its smart contracts. A preliminary investigation showed that the attack resulted in the theft of $3.8 million in user funds, and the platform has committed to fully compensating affected users.On-chain investigator ZachXBT disclosed that the related funds were transferred to the KuCoin exchange and subsequently bridged to Bitcoin. (Cointelegraph)
Wintermute released its weekly market report, as the Federal Reserve voted unanimously 12-0 on September 21 to raise interest rates by 25 basis points to 3.75%-4.00%. Sixteen officials project at least one more rate hike this year, with inflation not expected to return to the 2% target until 2029. Two key catalysts previously monitored by the market—the FOMC rate decision and the CLARITY Act—have both materialized: the CLARITY Act failed to advance in the Senate (49-50 vote, falling short of the 60-vote threshold), prompting the SEC and CFTC to immediately state that they would establish crypto regulatory frameworks under their current authority. The market adjusted for only a single trading session before reclaiming its losses. BTC traded between $75,000 and $81,000 this week, closing at $81,159—the first time since last November it has breached the 50-week moving average; ETH gained 6.7%, trading in the $2,350–$2,600 range. Regarding ETF capital flows, net outflows totaled $746 million from Tuesday to Wednesday, partially reversed by $593 million in inflows from Thursday to Friday, resulting in a five-day net outflow of approximately $6 million. Outflows triggered by the CLARITY Act were nearly fully offset within 48 hours. At the start of this week, both BTC and ETH broke above the range resistance ahead of the U.S. equity market open. Fueled by approximately $250 million in short liquidations, BTC briefly surged to $86,000, setting an eight-month high. Wintermute’s analysis suggests:
The Digital Asset Market Clarity Act made no progress during Tuesday's Senate vote, failing to secure the required 60 votes. Despite months of bipartisan negotiating, it ultimately failed due to unresolved core differences, including those over ethical provisions.
Odaily reports: CryptoQuant analyst Darkfost posted on X that as BTC has held above $80,000 for several consecutive weeks, the behavior of retail investors and whales transferring BTC to Binance has diverged significantly. Data shows that the 30-day cumulative retail BTC inflows to Binance have risen from $5.5 billion to $10.75 billion, nearly doubling and hitting a 6-month high. In contrast, whale inflows over the same period have continued to decline, dropping from $5.9 billion at the end of August to the current $3.8 billion.Darkfost believes that some retail investors may be viewing this first rebound as an opportunity to reduce positions or exit, while whales have not yet shown a clear willingness to sell. What is worth watching going forward is whether whales will continue to maintain low exchange inflow levels if BTC prices continue to rise.
According to official reports, privacy blockchain project Pirate Chain disclosed that it suffered a transaction verification vulnerability exploit, resulting in the unauthorized minting of approximately 39.8 million ARRR and an increase in the total token supply of about 20%. The attacker transferred the newly minted funds into the Sapling shielded pool, after which part of the funds flowed into the NonKYC exchange, with related deposit accounts restricted from withdrawals; due to the shielding features of the transactions, the complete subsequent flow of funds cannot be traced.
Bonk Guy posted on X platform stating that Super Inu (SI) has maintained price support despite a significant increase in trading volume. Although the largest holder previously sold approximately 4% of the total token supply, the price did not decline further significantly, which he believes may indicate that SI has reached a local bottom.Bonk Guy pointed out that SI is currently at the bottom of its price range. As large holders reduce their positions, the token's holding distribution has noticeably improved, and its appeal to whales and new buyers is increasing.He believes that SI is one of the stronger emerging Meme coin narratives in this cycle. The current risk-reward ratio for going long is attractive, and he expects it to potentially break its all-time high in the future, reaching a market cap of at least several hundred million dollars.
crypto KOL Bonk Guy posted on X platform, stating that panic selling in the market could last for hours or even days, and investors need not wait until the sell-off ends to start buying, but should instead focus on opportunities when market participants broadly lose confidence.Bonk Guy expressed optimism about SI's performance after this round of panic selling, believing it is poised to hit a new all-time high in the future, with a market cap reaching hundreds of millions of dollars.According to GMGN data, SI's current market cap stands at $13 million, with a 24H decline of 11.8%.
According to a report from Binance Research, since August 31, the US 10-year Treasury yield has risen by 47 basis points to 5.22%, with 43 basis points driven by an increase in real yields (currently at 2.87%, peaking at 2.95% on October 5, the highest since 2008), while inflation expectations contributed only 4 basis points. Since the rate hike on September 16, leading market sectors have been highly concentrated: in equities, the S&P 500 rose 3.3%, led by semiconductors up 10.6%, while small-cap and bank stocks declined, and the equal-weight index remained flat; in crypto markets, Bitcoin gained 9.3%, Ethereum rose 2.7%, with Layer 2 (+32%), RWA (+29%), and AI tokens (+29%) leading the way, while Meme coins and payment tokens only advanced 5%. In terms of fund flows, net inflows into stocks on the Binance platform reached $169 million, with semiconductor-related inflows nearly quadrupling to $73 million, and Intel attracting $32 million in a single week despite a 12% drop in its stock price. Key focus areas ahead include the September CPI data (expected to rise from 3.4% to 3.7%) and the banking earnings season, which will serve as a key test of the current market landscape.
CryptoQuant analyst Darkfost stated that the cryptocurrency market has recently entered a short-term correction phase, with the total market capitalization of altcoins excluding Bitcoin (Total2) shrinking by over $110 billion within three days; Ethereum (ETH) alone fell by 11%, erasing more than $38 billion in market value. Despite the price pullback, investors continue to accumulate and withdraw Ethereum. During this period, ETH reserves on Binance dropped from 3.57 million coins to 3.47 million coins, reaching a six-month low—a decrease of nearly 11.5% compared to the 3.92 million coins held in August. Meanwhile, withdrawal activity on the Binance platform surged significantly, with over 320,000 ETH withdrawal transactions recorded on October 6 alone, setting a new all-time high.
Odaily Report: After GMO Internet Group of Japan suffered a cyberattack, hackers claimed they had published customer information after not receiving a $50 million ransom. GMO has not yet confirmed whether the follow-up ransomware attack threatened by the hackers occurred. The company said its foreign exchange trading service has been suspended since October 21 and it has stopped accepting new subscriptions; all servers of its domain and cloud service Onamae.com were compromised, potentially affecting all users. Previously, some customers had reported transactions they did not initiate.Japanese Finance Minister Satsuki Katayama said that five foreign exchange trading companies have reported customers affected by the incident, and no new unauthorized transactions have been reported so far. GMO has asked the government to help block the source of the attack and called for proactive cyber defense measures. Amid mounting concerns over the impact of the cyberattack, GMO's stock price posted its biggest drop since 2011 on Monday. (Bloomberg)
According to Odaily, digital hardware wallet manufacturer NGRAVE disclosed on October 19 that attackers hijacked a third-party notification service used by its LIQUID companion app and sent fake security alerts to users, resulting in approximately 70 wallet addresses being stolen for about $2.56 million across 4 blockchains. Among the losses, Bitcoin accounted for approximately $1.77 million, XRP approximately $454,000, Ethereum assets approximately $316,000, and Stellar approximately $18,000.The attackers lured users into clicking on counterfeit websites and entering their 24-word recovery phrases or Perfect Keys, after which automated scripts transferred the assets within minutes. NGRAVE stated that the ZERO hardware wallet and private keys were not directly compromised, and that victims voluntarily handed over their recovery credentials during the phishing process.The unauthorized access may have begun on October 11. After obtaining one access key, the attackers acquired a key with broader permissions and sent fake notifications on October 17. NGRAVE detected the anomaly approximately 1 minute after the notifications appeared, but the first wallet had already been drained 6 minutes later, and the notification system was shut down that evening.NGRAVE's CEO stated that the company failed to fulfill the most basic security responsibilities of a crypto security company, and said that the affected keys have been replaced, with two-person approval, domain restrictions, and emergency shutdown mechanisms added. The company also reminded affected users to create new wallets and contact the support team, noting that some device information, wallet activity, IP addresses, and approximate locations may have been exposed. (Bitcoin.com News)
OpenCode stated that it experienced a security incident related to large-scale model distillation attacks, affecting approximately 1.4% of OpenCode Console users. The affected scope primarily involves certain users who have connected to external model providers. OpenCode has notified all affected accounts via email; users who did not receive a notification are not within the scope of this incident.
According to official reports, privacy blockchain project Pirate Chain disclosed that it suffered a transaction verification vulnerability exploit, resulting in the unauthorized minting of approximately 39.8 million ARRR and an increase in the total token supply of about 20%. The attacker transferred the newly minted funds into the Sapling shielded pool, after which part of the funds flowed into the NonKYC exchange, with related deposit accounts restricted from withdrawals; due to the shielding features of the transactions, the complete subsequent flow of funds cannot be traced.
Odaily News: According to monitoring by Bitcoin News, German Ledger user @jayr_crypto reports receiving another forged letter this week. The letter impersonates Ledger, claiming that new regulations require users to register a Bitcoin wallet through a service called ZenLedger by October 31. The letter uses Ledger's official branding elements, references German financial regulators, and includes a QR code that directs users to a so-called mandatory registration process. The user believes that addresses exposed in a previous data breach are being used to conduct targeted attacks against Ledger users. In the same week, Ledger coordinated with MediaMarktSaturn to suspend sales of its hardware wallets across a European retail network spanning 11 countries and more than 1,000 stores. It was previously reported that Ledger devices purchased from European retailers were found to contain malicious spy implants. Ledger separately confirmed that compromised devices sold by a distributor in Southeast Asia contained implants capable of stealing recovery phrases and transmitting them via cellular networks. Ledger has not yet confirmed that European devices were compromised. Ledger users are currently facing physical supply chain tampering and targeted phishing attacks exploiting home addresses. Do not scan suspicious QR codes or enter recovery phrases.
Odaily News: According to monitoring by SlowMist founder Cos, a bookmark phishing attack targeting the FOMO web app is emerging. Such phishing pages trick users into completing a fake CAPTCHA verification, dragging malicious JavaScript code into the browser's bookmarks and saving it as a bookmark. After the user then clicks on that bookmark 2 to 3 times, their previously logged-in FOMO account will be hijacked by the attacker, and the crypto assets in the account will be immediately stolen.
According to Odaily, digital hardware wallet manufacturer NGRAVE disclosed on October 19 that attackers hijacked a third-party notification service used by its LIQUID companion app and sent fake security alerts to users, resulting in approximately 70 wallet addresses being stolen for about $2.56 million across 4 blockchains. Among the losses, Bitcoin accounted for approximately $1.77 million, XRP approximately $454,000, Ethereum assets approximately $316,000, and Stellar approximately $18,000.The attackers lured users into clicking on counterfeit websites and entering their 24-word recovery phrases or Perfect Keys, after which automated scripts transferred the assets within minutes. NGRAVE stated that the ZERO hardware wallet and private keys were not directly compromised, and that victims voluntarily handed over their recovery credentials during the phishing process.The unauthorized access may have begun on October 11. After obtaining one access key, the attackers acquired a key with broader permissions and sent fake notifications on October 17. NGRAVE detected the anomaly approximately 1 minute after the notifications appeared, but the first wallet had already been drained 6 minutes later, and the notification system was shut down that evening.NGRAVE's CEO stated that the company failed to fulfill the most basic security responsibilities of a crypto security company, and said that the affected keys have been replaced, with two-person approval, domain restrictions, and emergency shutdown mechanisms added. The company also reminded affected users to create new wallets and contact the support team, noting that some device information, wallet activity, IP addresses, and approximate locations may have been exposed. (Bitcoin.com News)
Hardware wallet manufacturer COLDCARD announced that its official X account previously shared a post containing a phishing link, which has now been deleted. The account has utilized offline 2FA since 2017 with strictly restricted access. The team has contacted the X platform and is currently auditing all account permissions, with further verification updates to be released later. COLDCARD noted that no login, session, or access logs were detected, and both credentials and offline 2FA remain secure. They suspect potential unauthorized platform-level or administrator-level access and are demanding an immediate investigation while preserving relevant logs.
The Middle East conflict continues to escalate, with the Saudi-led coalition intercepting Houthi drones and missiles, and oil tankers attacked in the Strait of Hormuz. US-Iran nuclear talks have stalled as Trump pressures Iran, while the US military deploys a third aircraft carrier and 10,000 troops to the Middle East.
Bitcoin fluctuated amid rising US Treasury yields before stabilizing at $84,500; Ondo Finance led gains following the launch of new projects, pushing its token back to $0.50. The US 10-year Treasury yield surpassed 5.18%, reaching its highest level since 2007.
Wintermute released its weekly market report, as the Federal Reserve voted unanimously 12-0 on September 21 to raise interest rates by 25 basis points to 3.75%-4.00%. Sixteen officials project at least one more rate hike this year, with inflation not expected to return to the 2% target until 2029. Two key catalysts previously monitored by the market—the FOMC rate decision and the CLARITY Act—have both materialized: the CLARITY Act failed to advance in the Senate (49-50 vote, falling short of the 60-vote threshold), prompting the SEC and CFTC to immediately state that they would establish crypto regulatory frameworks under their current authority. The market adjusted for only a single trading session before reclaiming its losses. BTC traded between $75,000 and $81,000 this week, closing at $81,159—the first time since last November it has breached the 50-week moving average; ETH gained 6.7%, trading in the $2,350–$2,600 range. Regarding ETF capital flows, net outflows totaled $746 million from Tuesday to Wednesday, partially reversed by $593 million in inflows from Thursday to Friday, resulting in a five-day net outflow of approximately $6 million. Outflows triggered by the CLARITY Act were nearly fully offset within 48 hours. At the start of this week, both BTC and ETH broke above the range resistance ahead of the U.S. equity market open. Fueled by approximately $250 million in short liquidations, BTC briefly surged to $86,000, setting an eight-month high. Wintermute’s analysis suggests:
According to The Kobeissi Letter (@KobeissiLetter), U.S. diesel prices have hit another record high, with a national average price of $6.45 per gallon, up 40 cents from last week and over $1 higher than last month, marking a cumulative increase of 84% since January. California’s diesel average is even higher at $8.40 per gallon, setting a historic record for the highest average price in the United States. Meanwhile, market expectations for an October rate hike have also risen to new heights. Analysts point out that the ExxonMobil refinery in Illinois has not yet returned to full production following a power outage on September 13, further exacerbating supply pressures. Soaring diesel prices have been passed down to transportation, food, and various commodity costs, significantly increasing operating pressures for independent truck drivers.
Bitcoin Treasuries posted on X that Strategy reported Q3 operating profit of $21 billion, a record single-quarter high. Strategy's stock price rose 76% in Q3, higher than Bitcoin's 43% gain over the same period.
According to Pendle monitoring, as reported by Odaily, the scale of STRCx on Pendle has surpassed $50 million, hitting a record high. Pendle currently holds approximately 30% of the total STRCx supply, and STRCx is the largest tokenized equity asset in DeFi.
Odaily Report: After GMO Internet Group of Japan suffered a cyberattack, hackers claimed they had published customer information after not receiving a $50 million ransom. GMO has not yet confirmed whether the follow-up ransomware attack threatened by the hackers occurred. The company said its foreign exchange trading service has been suspended since October 21 and it has stopped accepting new subscriptions; all servers of its domain and cloud service Onamae.com were compromised, potentially affecting all users. Previously, some customers had reported transactions they did not initiate.Japanese Finance Minister Satsuki Katayama said that five foreign exchange trading companies have reported customers affected by the incident, and no new unauthorized transactions have been reported so far. GMO has asked the government to help block the source of the attack and called for proactive cyber defense measures. Amid mounting concerns over the impact of the cyberattack, GMO's stock price posted its biggest drop since 2011 on Monday. (Bloomberg)
Aave announced on X that Aave V4 deposits have surpassed $1.5 billion, setting an all-time high.
Odaily reports: CryptoQuant analyst Darkfost posted on X that as BTC has held above $80,000 for several consecutive weeks, the behavior of retail investors and whales transferring BTC to Binance has diverged significantly. Data shows that the 30-day cumulative retail BTC inflows to Binance have risen from $5.5 billion to $10.75 billion, nearly doubling and hitting a 6-month high. In contrast, whale inflows over the same period have continued to decline, dropping from $5.9 billion at the end of August to the current $3.8 billion.Darkfost believes that some retail investors may be viewing this first rebound as an opportunity to reduce positions or exit, while whales have not yet shown a clear willingness to sell. What is worth watching going forward is whether whales will continue to maintain low exchange inflow levels if BTC prices continue to rise.
According to Odaily, digital hardware wallet manufacturer NGRAVE disclosed on October 19 that attackers hijacked a third-party notification service used by its LIQUID companion app and sent fake security alerts to users, resulting in approximately 70 wallet addresses being stolen for about $2.56 million across 4 blockchains. Among the losses, Bitcoin accounted for approximately $1.77 million, XRP approximately $454,000, Ethereum assets approximately $316,000, and Stellar approximately $18,000.The attackers lured users into clicking on counterfeit websites and entering their 24-word recovery phrases or Perfect Keys, after which automated scripts transferred the assets within minutes. NGRAVE stated that the ZERO hardware wallet and private keys were not directly compromised, and that victims voluntarily handed over their recovery credentials during the phishing process.The unauthorized access may have begun on October 11. After obtaining one access key, the attackers acquired a key with broader permissions and sent fake notifications on October 17. NGRAVE detected the anomaly approximately 1 minute after the notifications appeared, but the first wallet had already been drained 6 minutes later, and the notification system was shut down that evening.NGRAVE's CEO stated that the company failed to fulfill the most basic security responsibilities of a crypto security company, and said that the affected keys have been replaced, with two-person approval, domain restrictions, and emergency shutdown mechanisms added. The company also reminded affected users to create new wallets and contact the support team, noting that some device information, wallet activity, IP addresses, and approximate locations may have been exposed. (Bitcoin.com News)