News linked to both this project and an event.
据 QCP Group 市场报告，BTC 在经历去年 10 月最大单日清算事件一周年后表现相对稳健，尽管市场对美国政府转移大量 BTC 及 Ledger 遭黑客攻击的消息有所担忧，价格仍维持区间震荡。BTC 多次冲击 87,000 美元未果，但下方 80,000 美元支撑较为稳固。期权市场方面，隐含波动率维持高位，看跌期权溢价收窄，市场整体偏向等待突破而非防御性布局；若 BTC 有效突破 87,000 美元，下一目标位或指向 94,000 美元。 值得关注的是，市场存在一笔较大规模的 10 月 30 日到期 90,000/95,000/100,000 美元看涨蝶式期权多头头寸，为当前月末最大持仓集中点。本周宏观面将迎来关键考验，周三（10 月 14 日）美国 CPI、周四（10 月 15 日）PPI 数据相继公布，周五（10 月 16 日）美联储主席 Warsh 将在 IMF-世界银行年会发表讲话，市场目前对 10 月加息的概率定价约为 17%，上述数据及政策信号或成为 BTC 方向选择的重要触发点。
Standard Chartered Bank has officially announced support for institutional custody services for Ripple USD (RLUSD) issued on the XRP Ledger (XRPL). The service is offered through Standard Chartered Bank's DIFC branch and is regulated by the Dubai Financial Services Authority (DFSA). Concurrently, Standard Chartered Bank is partnering with Ripple and LMAX Group to incorporate RLUSD into LMAX Group's eligible collateral framework for its products. Through Standard Chartered Bank's collateral mirroring model, institutional clients can flexibly deploy digital assets for trading without directly transferring RLUSD to the trading venue, thereby reducing transfer operational risks, optimizing counterparty exposure, and enhancing capital efficiency. The aforementioned functionalities will go live only after final document execution, testing, and compliance approvals are completed.
OneKey founder Yishi posted on X that, following recent reports of asset theft from multiple users who had purchased Ledger hardware wallets from CryptoBilis, OneKey has revoked CryptoBilis's status as an authorized dealer, ceased adding new dealers, and will conduct a comprehensive review of all existing distributors.
OneKey founder Yishi posted on X platform that in response to recent incidents where Ledger hardware wallets purchased by some users through CryptoBilis were found to have unauthorized hardware implanted, leading to asset theft, OneKey has not yet received any reports of its own users experiencing asset theft as a result. However, out of security concerns, OneKey has terminated CryptoBilis's authorized dealer status.OneKey also announced that it will immediately stop accepting new dealers and will re-conduct qualification reviews for all existing authorized dealers. Additionally, for users who purchased OneKey hardware wallets through CryptoBilis between March 1, 2026 and the date of this statement, regardless of device model or usage status, they may apply for a free replacement. The application deadline is December 31, 2026.Furthermore, Yishi advised users who have already used the affected devices to treat their original seed phrases as potentially compromised and to transfer their assets to wallets using new seed phrases as soon as possible, without waiting for replacement devices to arrive.
Odaily News: The XRP Ledger Foundation posted on the X platform to clarify the recent XRP Ledger security vulnerability incident, stating that the vulnerability could potentially have been used to bypass the limit that fixes XRP's total supply at 100 billion, but it was fixed two weeks ago via version 3.4.1. Furthermore, upon verification, no new XRP was found to have been created, and the total amount of XRP currently circulating on the ledger is approximately 99.986 billion.The Foundation stated that the vulnerability would have required hundreds of deliberately constructed operations to trigger, and normal payment transactions would almost never involve it. In the future, it will strengthen formal verification, AI adversarial testing, security research collaboration, and bug bounty programs with RippleX and the community. Regarding the fix process, the Foundation explained that publicly releasing a patch could allow attackers to use AI to accelerate vulnerability analysis. To address this situation, the XRPL community engaged in coordination. Participating parties including the XRP Ledger Foundation, RippleX, core developers, and validators reached a social consensus and agreed to adopt the approach of directly releasing the fix. In addition, version 3.4.1 only became a version the network was required to adopt after going through the normal amendment voting process and receiving support from more than 80% of validators for two consecutive weeks. Protocol changes still need to be completed through the amendment mechanism.Previously, RippleX engineering lead J. Ayo Akinyele also posted on the X platform, stating that he attaches great importance to the recently disclosed critical vulnerability in the XRP Ledger (XRPL) payment engine. This vulnerability is a serious security issue that has existed in the codebase for more than 10 years and could theoretically lead to the over-creation of XRP, breaking through the fixed supply cap. However, before the vulnerability could be exploited, it was discovered by the security research firm Veria AI through Ripple's bug bounty program.
According to a post by Bitcoin News on X, Ledger stated that the number of affected devices is limited, and as of now, all confirmed cases related to the October 9 fund theft incident involve devices sold through Southeast Asian distributor CryptoBilis. Ledger's internal systems and direct sales channels were not affected. CryptoBilis has suspended all hardware wallet sales, and Ledger is cooperating with law enforcement and contacting affected customers. Ledger advises CryptoBilis buyers not to initialize unused devices; users who have already completed initialization should transfer their funds to a new wallet using a new seed phrase. The investigation is still ongoing.
Odaily News: Crypto analyst Darkfost posted that following the security incident involving Ledger reseller CryptoBilis, other potentially related reseller names have emerged in community discussions, including some Lazada merchants.Darkfost stated that the full scope of the incident remains difficult to confirm. Although Ledger has confirmed a connection to the CryptoBilis incident, it is still unclear whether CryptoBilis is the only affected reseller. He compiled a list of potentially risky Ledger resellers, noting that due to their regional proximity, there is a possibility that their supply chains were compromised simultaneously. However, Darkfost emphasized that these assessments are speculative and have not yet been confirmed.Darkfost advised that if users have purchased Ledger devices from the relevant resellers within the past 6 months, they may consider moving their assets to other secure devices before the investigation concludes. He also noted that users can refer to a guide published by security researcher MagicalTux to check their Ledger devices for signs of tampering.
Odaily News: J. Ayo Akinyele, Engineering Lead at RippleX, posted on X platform stating that they take the recently disclosed critical vulnerability in the XRP Ledger (XRPL) payment engine very seriously. The vulnerability is a severe security issue that has existed in the codebase for over 10 years and could theoretically lead to the over-creation of XRP, breaching the fixed supply cap. However, the vulnerability was discovered by security research firm Veria AI through Ripple's bug bounty program before it could be exploited.J. Ayo Akinyele further added that the Ripple team quickly developed and tested a fix, working closely with validator nodes to complete the network upgrade, and patched the vulnerability before its public disclosure. Currently, AI is changing the speed of vulnerability discovery, and XRPL needs to further enhance its security response capabilities. RippleX will strengthen its bug bounty program, expand AI-assisted vulnerability hunting and adversarial testing, review long-standing code in the payment engine, consensus mechanism, and P2P network, while advancing formal verification of critical modules and reducing potential risks through systematic security hardening. The goal is not just to fix a single vulnerability, but to identify and eliminate potential risks in XRPL's legacy code, making the network more difficult to attack.
The official Ledger support account (@Ledger_Support) announced that Ledger has confirmed an unauthorized hardware implant in one affected user's device, and has already contacted the user to conduct an investigation. Reseller CryptoBilis has suspended all hardware wallet sales until the investigation concludes. Ledger is working with relevant law enforcement agencies to identify those responsible and thanks @SEAL_911 for their assistance. Ledger emphasized that its own security infrastructure, systems, and services remain unaffected, and advises users who purchased devices from CryptoBilis as follows: if setup is incomplete, do not power them on yet; if setup is complete, consider migrating your assets to a new device created with a fresh seed phrase. Ledger reminds users to rely solely on official channels for information and reiterates that it will never ask for users' 24-word seed phrases.
Odaily reports: Bitcoin News posted on X platform that Ledger has confirmed at least one affected user's device contained an unauthorized hardware implant, and is currently investigating the matter with relevant authorities and SEAL_911. Hardware wallet reseller CryptoBilis has suspended sales of all hardware wallets. Ledger stated there is currently no indication that its internal security infrastructure, systems, or services have been compromised. Ledger advises users who purchased devices from CryptoBilis and have not yet completed setup to refrain from doing so; users who have already completed setup should consider generating a new seed phrase and transferring their Bitcoin to a new hardware wallet. Ledger also stated it is developing additional tamper-proof protections.
Odaily reports: Bitcoin News posted on X platform that security researcher @cyberscrilla discovered a fake Ledger website and app appearing at the top of Google search results, designed to trick users into revealing their 24-word recovery phrase. According to Google data, the website reportedly received over 1 million visits in the past 30 days.Previously, cybersecurity company Zscaler found in a September investigation that malicious Google ads impersonating Ledger redirected users to fake wallet verification pages. Currently, Ledger is investigating a suspected wallet theft case involving customers of Southeast Asian distributor CryptoBilis, with estimated losses of $86 million.
Hardware wallet manufacturer Ledger stated that its team attaches great importance to the relevant security report and is actively investigating the specific issues. According to currently available information, the stolen funds are suspected to be limited exclusively to devices sold through the Southeast Asian distributor CryptoBilis. There is currently no indication that Ledger's security infrastructure, systems, or services have been compromised.
According to disclosures by SlowMist Security Team CISO 23pds (@im23pds), researchers have indicated that Ledger hardware wallets may be susceptible to a PCB-level supply chain attack. The attack works by implanting a malicious module on the device’s screen data cable (such as the SPI bus) to passively monitor and record the mnemonic display process. The mnemonics are then forwarded to attackers via LTE/eSIM, allowing them to drain user assets. Since this spy module only performs passive read-only operations and does not interact with the firmware or Secure Element (SE), the device’s power-on self-test cannot detect any anomalies. The actual compromised security boundary is the plaintext bus between the MCU and the screen. To date, Ledger has officially launched an investigation into user fund loss incidents in Southeast Asia. The affected devices are suspected to be connected to Malaysian distributor CryptoBilis; Ledger has ordered it to halt all sales and shipments and has advised users to await official updates on the investigation.
Southeast Asian crypto hardware wallet distributor CryptoBilis announced that it will suspend the sale and shipping of hardware wallets across all physical stores and online channels in Malaysia, the Philippines, and Indonesia starting today, covering all of its brands. The sales suspension is a precautionary measure aimed at protecting users during Ledger’s security investigation, while also cooperating with independent experts to review its own internal processes. Physical stores have also been temporarily closed, but customer service channels remain fully operational.
Ledger issued an official statement announcing that it is investigating user fund loss incidents linked to distributors in Southeast Asia, and warns potentially affected users.
Bitcoin News posted on X platform stating that corporate records for Malaysian hardware wallet distributor CryptoBilis show that, as of August 3, an individual named Jiaming, with a registered address in Heilongjiang Province, China, holds 100% of the company's shares. The company's former co-founder confirmed that CryptoBilis completed its acquisition in March, with the original owner withdrawing from all operational, managerial, and administrative roles. The founder has been unable to learn about the company's operations since the handover but still assists with event coordination. This information emerged during an investigation into a suspected supply chain attack on Ledger hardware wallets, where affected devices were implanted with hidden components that could steal seed phrases; there is currently no conclusive evidence linking the change in CryptoBilis ownership to the compromised wallets.
According to Onchain Lens monitoring, the suspected hacker behind the reported $90 million Ledger reseller incident has deposited 430.2 ETH, worth $1.07 million, into Tornado Cash through 4 wallets. After Tether froze the related funds, the hacker swapped USDT for USDD through SUN.io and USDD's PSM, with some funds also flowing into Binance hot wallets.The hacker's wallet tracked by Arkham currently holds a total of $70.6 million in assets, including 11,406 ETH worth $28.35 million; 213.371 BTC worth $17.65 million; 13.646 million USDD worth $13.65 million; and 10.909 million USDT worth $10.91 million. Onchain Lens is calling on Binance to investigate these transfers and freeze accounts associated with the stolen funds as soon as possible.
According to MistTrack monitoring, Odaily reports that Tether has frozen a large amount of USDT on addresses related to the Ledger user fund theft incident. The losses from this incident have approached $90 million, and some affected users have contacted MistTrack for assistance, with the team currently following up. Previously, Ledger stated it was investigating the theft of user funds related to Southeast Asian distributor CryptoBillis.
Ledger Support posted on X platform stating that it is currently investigating a theft of assets involving Southeast Asian users, who had purchased devices through reseller CryptoBilis. Ledger has asked CryptoBilis to suspend sales and shipments, and recommends that users who purchased devices through this reseller within the past 90 days refrain from initializing their devices; users who have already completed setup should create a new Ledger signing device using a new mnemonic phrase and transfer their assets to a new wallet.On-chain investigator Specter previously estimated that this incident has led to the theft of hundreds of wallets across Bitcoin, Ethereum, and Tron networks, with losses exceeding $86 million. Security researcher tanuki42 previously estimated losses had exceeded $72 million and stated that the amount is still increasing. Currently, the specific cause of the incident and whether the affected devices have security vulnerabilities remain to be investigated and confirmed.
According to The Block, hardware wallet manufacturer Ledger stated it is investigating reports of fund theft involving users in Southeast Asia. All affected users purchased their devices from distributor CryptoBilis. Ledger has requested CryptoBilis to suspend sales and shipments during the investigation. Official guidance advises users who purchased devices from this distributor within the past 90 days to refrain from configuring their devices; if already configured, they should transfer their assets to a new hardware device using fresh mnemonic phrases.