News linked to both this project and an event.
Binance Wallet officially announced that the Predict.fun (PREDICT) token will soon begin circulating and will be listed for trading on Binance Alpha on October 30 at 17:00 (UTC+8). Users who have claimed a Prime Sale Key can view their PREDICT balance in advance and trade via Binance Alpha once the token officially goes live.
Odaily Report: The EIP-8450 proposal has been updated, aiming to introduce a quantum-resistant public key registration mechanism for Ethereum validators, adopting hash-based cryptographic schemes, including leanXMSS keys and VRF tree roots. The update specifies that BLS signing keys authorize the registration and replacement of quantum-resistant keys, and sets a replacement delay of at least one Epoch along with an anti-replay mechanism; the proposal is currently still in the Draft stage and has not yet been deployed.
B.AI has announced a major upgrade to its model leaderboard, adding four new evaluation dimensions beyond real-world usage metrics: Popular Models tracks the weekly token usage share to reflect community selection trends; the Usage Leaderboard supports real-time statistics of token and API call popularity across multiple time periods; the Price Leaderboard provides input, output, and weighted price comparisons to facilitate precise cost control; and the Smart Leaderboard integrates the Artificial Analysis Intelligence Index with a cost-effectiveness frontier scatter plot to help quickly pinpoint high-ROI models. The upgraded leaderboard meets needs such as exploring frontier capabilities, controlling invocation costs, and optimizing engineering model selection. Visit chat.b.ai/leaderboard to view it.
Odaily report: Crypto hardware wallet manufacturer NGRAVE has issued a security warning, stating that it is currently facing a high-level cyber threat, and the team is actively monitoring and taking countermeasures.NGRAVE reminds users to be vigilant against phishing attacks carried out through SMS, emails, fake websites, and fraudulent customer service, and emphasizes that the official team will never ask users for their recovery seed phrase or Perfect Key.NGRAVE states that users' private keys are stored only offline in the ZERO hardware device. As long as the seed phrase has not been entered on a phone, computer, or webpage, such phishing attacks will not compromise the security of the private keys. The official team recommends that users manually type the official website domain name to avoid accessing phishing links.
According to Wintermute's weekly market report, Bitcoin fell 2.43% last week, marking its third consecutive weekly decline, breaking below $82,500 and retesting $80,000 before closing at approximately $80,500. ETH dropped 3.40%, closing at around $2,330. U.S. spot Bitcoin ETFs recorded a net outflow of $636 million on Thursday, the largest single-day outflow since June, coinciding with a 2.6% drop in the Nasdaq on the same day. On the macro front, following Houthi attacks on Saudi oil infrastructure, Brent crude surged 5.66% to $116.72, with oil prices displacing AI financing as the primary market concern. Wintermute noted that as of October 18, markets price in roughly an 86% probability that the Federal Reserve will hold rates steady this Wednesday, alongside expectations for a December rate hike. The Fed's forward guidance regarding December represents the key risk. Technically, BTC must reclaim the $82,000–$82,500 zone. Should the $80,000 level fail, the next support sits at $76,000, with a breakdown likely pushing prices to just over $70,000. The firm stated it is temporarily not taking a bearish view but will remain cautious until the FOMC meeting concludes and BTC reclaims $82,500. Key upcoming events include the October 28 FOMC meeting, October 29 reports for Q3 GDP and September PCE data, and the October 30 monthly options expiration.
JUST has published an open letter to JST holders and released the key progress report for JST 2026 Q3 and October. The letter highlights that cumulative buybacks and burns across five rounds have totaled 1,881,973,007 JST, representing 19.01% of the initial maximum supply, with approximately $118.15 million invested in buybacks and burns. In October, JUST DAO upgraded the JST buyback and burn mechanism, shifting to a model supported by sustained ecosystem revenue. Starting in Q4 2026, the project plans to allocate approximately $20.34 million in excess funds toward buybacks over four installments, while maintaining a treasury safety reserve of at least $50 million. The report also indicates that JustLend’s quarter-end TVL remained above $7 billion, and GasFree processed approximately 21.24 million transactions in Q3. As buyback funding transitions from historical revenue reserves to ongoing ecosystem income, JST’s deflationary trajectory and ecosystem growth are increasingly aligning.
The Hong Kong Special Administrative Region Government's Office for Facilitating Business Recruitment has announced its seventh batch of key enterprises, with Solana Company featured in the list. The company has already established its Asia-Pacific headquarters in Hong Kong and plans to deploy Solana validator nodes via the Pacific Backbone project to provide blockchain infrastructure and consulting services to financial institutions across the Asia-Pacific region.
Odaily reports: The SlowMist security team has released a report stating that two recently disclosed high-severity PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, are posing risks to the off-chain infrastructure of the Web3 industry. Both vulnerabilities have a CVSS v4.0 score of 9.2. Attackers do not need an account password or API key—simply sending a crafted request to a PHP service exposed to the public internet may allow them to execute arbitrary code with the privileges of the web service process.The vulnerabilities affect all versions of PHP from 5.4 to 8.5.11, and details of the flaws leaked before the official patches were released. Amazon's threat intelligence team observed actual exploitation attempts 4 days before public disclosure. Scanning by SlowMist's threat intelligence system MistEye shows that among 1,488 crypto-related domains surveyed, 793 carry direct PHP fingerprints, accounting for approximately 53.3%.Affected off-chain infrastructure includes Web3 project frontend pages, API interfaces, airdrop claim pages, operations backends, and custodial wallet services. If attackers exploit the PHP vulnerabilities to compromise a project's web server, they may tamper with frontend pages and trick users into signing malicious transactions, thereby stealing assets.Official releases of PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 have been published, and affected projects should upgrade to the corresponding latest versions. PHP 8.1 and earlier versions have reached end-of-life for upstream regular support and should be migrated as soon as possible. Temporary mitigation measures taken when an immediate upgrade is not possible can only reduce the risk of specific attack paths; applying the patch remains the definitive solution.
Jin10 Data released the economic calendar for October 23, covering Japan's core CPI, initial manufacturing PMI readings in Europe and the US, the final US Michigan Consumer Sentiment Index, and other data.
A job posting published by Ethereum Institutional (@ethereuminsti) on its official X account announces that the organization is hiring an APAC Lead in Tokyo. The role involves establishing partnerships with Japanese banks, financial market infrastructure providers, asset managers, and enterprises, as well as planning and hosting forums and briefing sessions for financial institutions and institutional investors to advance Ethereum as the foundational infrastructure for next-generation financial services. Key requirements include: 5–7 years of hands-on experience in banking, asset management, capital markets, payments, or financial infrastructure; business-level fluency in both Japanese and English; prior experience in the digital assets space (with preferred qualifications in products or partnership deals serving financial institutions and institutional investors); and a broad network within Japanese financial institutions and among institutional investors.
The Polkadot Community Foundation issued a security warning on the Polkadot Forum stating that versions 3.0.1, 3.0.3, 3.0.4, and 3.0.5 of the browser extension for the third-party wallet Fearless Wallet contain malicious code, which may transmit users' private keys to attacker-controlled servers when unlocking the wallet. The relevant code was added on February 19, 2025, via a code commit titled “TON ecosystem”, and was triggered intermittently from February 2025 to October 10, 2026.
According to Odaily, digital hardware wallet manufacturer NGRAVE disclosed on October 19 that attackers hijacked a third-party notification service used by its LIQUID companion app and sent fake security alerts to users, resulting in approximately 70 wallet addresses being stolen for about $2.56 million across 4 blockchains. Among the losses, Bitcoin accounted for approximately $1.77 million, XRP approximately $454,000, Ethereum assets approximately $316,000, and Stellar approximately $18,000.The attackers lured users into clicking on counterfeit websites and entering their 24-word recovery phrases or Perfect Keys, after which automated scripts transferred the assets within minutes. NGRAVE stated that the ZERO hardware wallet and private keys were not directly compromised, and that victims voluntarily handed over their recovery credentials during the phishing process.The unauthorized access may have begun on October 11. After obtaining one access key, the attackers acquired a key with broader permissions and sent fake notifications on October 17. NGRAVE detected the anomaly approximately 1 minute after the notifications appeared, but the first wallet had already been drained 6 minutes later, and the notification system was shut down that evening.NGRAVE's CEO stated that the company failed to fulfill the most basic security responsibilities of a crypto security company, and said that the affected keys have been replaced, with two-person approval, domain restrictions, and emergency shutdown mechanisms added. The company also reminded affected users to create new wallets and contact the support team, noting that some device information, wallet activity, IP addresses, and approximate locations may have been exposed. (Bitcoin.com News)
Wintermute's latest market report indicates that, driven by a higher-than-expected U.S. Consumer Price Index (CPI) and a correction in the AI sector, the Nasdaq index fell 5.52% for the week, while Bitcoin dropped 1.99%, regaining and holding the key $82,500 support level after briefly breaking below it. Altcoins declined 5.69% overall, with capital rotating from high-beta and micro-cap tokens back into mainstream assets such as Bitcoin and Ethereum. Major assets currently offer a more attractive risk-reward ratio.
According to CoinPost, the Security and Systems Committee of the Japan Cryptocurrency Business Association (JCBA) announced on October 20 the establishment of a Working Group (WG) on Crypto Asset Custody Management and released a draft of the "Practice Set" detailing security countermeasures for principals. The draft contains 347 items across ten major domains, including governance, personnel and physical security, BCP, and re-delegation management, while listing "Key Management and Signature Operation" as a distinct category. Principal service models are classified into five types: Holding, Intervention, Supply, Reference, and Others, and are accompanied by an Excel-based self-assessment questionnaire and a tracking ledger for verification documents. The JCBA emphasized that generic third-party assurance reports, such as SOC2, fall short in adequately assessing crypto asset-specific risks, particularly those related to private key lifecycle management.
Odaily News: Crypto hardware wallet manufacturer Ledger has announced the launch of Ledger Agent Intent, available free of charge starting today to all Ledger-compatible signing devices. AI agents can monitor the market and propose portfolio optimization recommendations, and users can review and approve related operations on their Ledger devices, with private keys remaining under user control.Agent Intent will directly integrate with OpenClaw, allowing users to register OpenClaw agents on Ledger Atom devices and authorize operations, with the OpenClaw app to be pre-installed on the devices. The tool also supports the Solana Foundation's Pay.sh, where requests proposed by agents can enter a unified queue for users to sign at a time of their choosing. Ledger has partnered with Venice AI to address privacy concerns and stated that user data will not be used to train third-party models.
In an official blog post, Coinbase shares technical considerations regarding its transition strategy for Bitcoin to address quantum computing threats. The article points out that quantum computers pose a potential threat to Bitcoin's existing cryptographic system, and migration efforts require years of advance planning. As one of the world's largest cryptocurrency custody institutions, Coinbase holds approximately 5% of the global BTC supply and has already joined the Bitcoin Security Alliance while investing in open-source research support. Key recommendations include adopting flexible output architectures such as P2MR (BIP-360) or P2TRv2 to support the introduction and replacement of post-quantum signature schemes; implementing a 1-of-2 hybrid transition construct that allows funds to retain both classical and post-quantum signature paths simultaneously; prioritizing stateless signature schemes to mitigate state management risks; and requiring candidate schemes to be compatible with Multi-Party Computation (MPC) to meet institutional-grade custody requirements. Coinbase emphasizes that the handling of legacy funds can be discussed in parallel with technical upgrade work and should not hinder the advancement of post-quantum signature support.
Odaily report: New financial platform Bybit today announced the official launch of Stocks, allowing eligible users to trade over 1,000 U.S.-listed stocks and ETFs through Bybit, covering a wide range of popular U.S. equities and ETF tickers.Following the launch of Stocks, Bybit users who have completed KYC verification and are located in permitted regions can directly buy and sell supported U.S. stocks and ETFs using USDC. Unlike price derivatives or synthetic instruments, Stocks gives Bybit users access to the economic rights of a broader range of securities.Key features currently available on Stocks include:- Over 1,000 U.S. stocks and ETFs, with fractional share trading supported for eligible securities- Trading with USDC, funded directly from your Bybit account- Corporate action support, including cash dividends, stock dividends, and stock splits- 24/5 trading, covering U.S. pre-market, regular, and after-hours sessions (subject to product availability)- Zero commission on eligible stock tradesEligible users holding positions can receive the corresponding economic rights. Cash dividends will be converted from USD to USDC and deposited into the Unified Trading Account (UTA), while stock dividends will be directly reflected in users' holdings. Voting rights are planned for a later phase.Orders are routed through Bybit's regulated brokerage infrastructure and executed by U.S. self-clearing broker Alpaca, with underlying securities custodied by Alpaca. In addition to crypto spot and derivatives trading, Bybit also connects to traditional market opportunities through the MT5 platform, tokenized stocks, and TradFi perpetual contracts, and the launch of Bybit Stocks further completes Bybit's multi-asset platform layout.Bybit Stocks is offered by Infra Capital Limited (introducing broker), which is regulated by the Mauritius Financial Services Commission (GB23202169). Clearing and settlement services for U.S. securities are provided by Alpaca Securities LLC (FINRA/SIPC member). Specific terms and conditions for this product are available on the official website. Investment products carry the risk of principal loss, and users should read the Risk Disclosure Statement before investing.
This article outlines the macroeconomic data release schedule for October 9, 2026, and early the following morning. Key highlights include remarks by Federal Reserve officials Musalem and Collins, as well as key indicators such as Canadian employment, the US Michigan Consumer Sentiment Index, and inflation expectations.
Odaily reports: Hardware wallet company Ledger announced at TOKEN2049 in Singapore the launch of a self-custodial lending feature within its wallet app called Crypto Loan. Eligible users can use cbBTC or wBTC as collateral to borrow USDC or USDT.Users can open and manage loans directly within Ledger Wallet, track loan-to-value ratios, add collateral, repay loans, or increase borrowing. Key operations must be confirmed via hardware on a Ledger signing device before execution.The feature is powered by decentralized credit network Morpho, with Yield.xyz as the technology service provider. Ledger also announced that its signing devices can connect directly to Morpho without the need for browser extensions or software wallet connection protocols.Crypto Loan has begun rolling out to eligible users, with broader coverage to follow. If the price of collateral assets drops significantly, the related collateral may be subject to forced liquidation. (Decrypt)
Aptos Governance Proposal #206 is currently under voting, proposing to activate ChunkyDKG V1 full mode and the encrypted_transactions feature. Through Distributed Key Generation, this mechanism enables encrypted transactions by concealing their contents prior to consensus ordering, with validators collaboratively decrypting them afterward, which helps mitigate front-running and MEV risks. The proposal's voting period ends on October 6. While the current approval rate approaches 100%, voter turnout is merely 2.69%, failing to reach the required 24.8% quorum.