News linked to both this project and an event.
according to Bitcoin News monitoring, attackers allegedly used EIP-7702 delegation to point the Binance Wallet to malicious code, thereby transferring funds. How the attacker obtained authorization is still under investigation, with two possibilities currently: the private key was stolen, or the attacker obtained a malicious authorization signature through a compromised signing process. Neither scenario has been confirmed. If the private key was not stolen, this attack may expose a significant vulnerability in the exchange's transaction authorization mechanism, rather than a private key security issue.
According to official news, Gate US now supports USD balance trading and has officially launched USD Wire deposit and withdrawal services. Users no longer need to convert funds into stablecoins and can directly hold USD balances in their platform accounts, using them only when they need to trade.Through the upgraded banking and payment infrastructure, eligible verified Gate US users in supported regions can use their own U.S. bank accounts to make large USD transfers via USD Wire. The transfer limits supported by this service are higher than those of regular bank cards or in-app transfers. Users can also withdraw USD balances to the same verified bank account, subject to applicable limit restrictions and processing requirements. Users can open the Gate US App, go to the Wallet page, select the USD option, and follow the on-screen instructions to complete the process. When making a transfer, users need to enter the dedicated reference code provided on the page so that the system can identify and match the corresponding account.Gate US continues to advance compliance efforts in the U.S. market and currently holds 37 state-level Money Transmitter Licenses (MTLs), with services covering 47 U.S. states and territories. By continuously upgrading banking and payment infrastructure and expanding its network of financial and technology partners, Gate US will continue to enrich fiat currency services and fund transfer options, promoting further integration between digital asset trading and traditional financial services. USD deposit and withdrawal services are only available in certain U.S. jurisdictions. Residents of Colorado, Hawaii, Missouri, New Jersey, Utah, or Wyoming cannot use this service.
Odaily Report: Bitget Wallet has officially launched its Virtual Account feature, allowing users to open a real USD or EUR account for free within the wallet without requiring US or EU residency status, enabling them to directly receive salaries, freelance income, and cross-border remittances.The feature is supported by licensed banking partner Noah for compliance, is globally available, and can be set up within minutes after completing KYC. It supports major receiving channels including ACH, Fedwire, SWIFT, and SEPA, with fees significantly lower than traditional remittance services. After users transfer USD or EUR to the virtual account, incoming funds are automatically and instantly converted to stablecoins, which can be directly used for wealth management within the wallet, crypto card spending, and QR code payments.This move marks Bitget Wallet's payment ecosystem extending from the "spending side" to the "receiving side," building a complete monetary account system covering receiving, savings, wealth management, and spending. Currently, Bitget Wallet serves over 100 million users globally, and the launch of virtual accounts is a key step in advancing its Everyday Finance strategy, aimed at bringing bank-grade receiving capabilities into the self-custody wallet ecosystem.
CoinDCX has issued an announcement stating that it detected anomalous system activity on October 21, and subsequent investigation confirmed that the anomalous activity affected legacy wallet infrastructure that had been deprecated following the July 2025 security incident. CoinDCX stated that due to a malfunction in the automated fund sweeping service that lasted for a period of time, some user deposits mistakenly sent to old addresses were not transferred in a timely manner, ultimately resulting in a loss of 15.99 million USDT, with the related losses borne by the company.CoinDCX emphasized that existing wallets and trading systems were unaffected, user funds remain securely held in isolated cold wallets, and trading, deposit, and withdrawal services all continue to operate normally.
Onchain Lens posted on X questioning CoinDCX's so-called hack incident, stating that CoinDCX may have undisclosed fund anomalies—user deposits had flowed into a wallet that was not included in the relevant fund accounting, after which nearly equivalent funds were transferred out; some funds were also moved through less common cross-chain bridge entry points and services, indicating abnormal pathways.Onchain Lens further pointed out that some funds suspected to be related to CoinDCX hot wallets flowed through over-the-counter (OTC) services and mixing platforms, and questioned that the CoinDCX team still denied the occurrence of a security incident even after multiple researchers and on-chain investigators presented relevant evidence.
Odaily reports: A Solana Foundation official stated that the U.S. GENIUS Act provides regulatory momentum for enterprises and financial institutions to enter the stablecoin space, and is also one of the important background factors behind Samsung's launch of stablecoin payment services. Samsung has announced that starting in the last week of October, it will support USDC cross-border transfers in Samsung Wallet, initially targeting eligible Galaxy users in the United States and covering approximately 82 million devices. Users can transfer USD stablecoins to compatible crypto wallets within seconds with no transfer fees, and can also send remittances to eligible bank accounts in more than 60 countries and regions. The service will use the Solana and Sui networks as its underlying infrastructure, with licensed stablecoin custodian Bastion providing transfer services and Coinbase Prime serving as sub-custodian responsible for safeguarding USDC assets.
Odaily News: French hardware wallet manufacturer Ledger received multiple reports of malicious implants months before its latest security crisis occurred. Former Mt. Gox CEO Mark Karpelès stated that at least two people had contacted Ledger since December 2025 to report tampered devices, but no public warning was found to have been issued.Security researcher Joe Grand stated that on March 4, 2026, he reported a malicious implant to Ledger. The implant was found in a Nano X purchased through Lazada in Thailand in August 2025. Ledger confirmed the findings and said it would launch an internal investigation, but did not proactively alert customers.Mark Karpelès believes that the increase in the number of reports and the growing sophistication of the techniques used should prompt Ledger to take action and at least remind customers to remain cautious. Ledger declined to comment on how it handled Joe Grand's disclosure, only directing people to view its public statement on X.The Ledger security crisis became public on October 9, involving the loss of crypto assets from wallets sold by Southeast Asian authorized reseller CryptoBilis; Ledger confirmed that one affected device contained an unauthorized implant. Trezor had also previously received reports involving devices tampered with by unauthorized sellers. (Cointelegraph)
Odaily News: According to monitoring by Bitcoin News, German Ledger user @jayr_crypto reports receiving another forged letter this week. The letter impersonates Ledger, claiming that new regulations require users to register a Bitcoin wallet through a service called ZenLedger by October 31. The letter uses Ledger's official branding elements, references German financial regulators, and includes a QR code that directs users to a so-called mandatory registration process. The user believes that addresses exposed in a previous data breach are being used to conduct targeted attacks against Ledger users. In the same week, Ledger coordinated with MediaMarktSaturn to suspend sales of its hardware wallets across a European retail network spanning 11 countries and more than 1,000 stores. It was previously reported that Ledger devices purchased from European retailers were found to contain malicious spy implants. Ledger separately confirmed that compromised devices sold by a distributor in Southeast Asia contained implants capable of stealing recovery phrases and transmitting them via cellular networks. Ledger has not yet confirmed that European devices were compromised. Ledger users are currently facing physical supply chain tampering and targeted phishing attacks exploiting home addresses. Do not scan suspicious QR codes or enter recovery phrases.
Odaily News: OneKey founder Yishi posted on X platform "How to Turn an iPhone into a Cold Wallet."Yishi stated: "I recommend using an iPhone 17 or newer, running iOS 27 or higher, and replacing the device with a new one every one to two years... I would not use an iPhone 16 or earlier as a device for long-term signing of important asset transactions. Even an iPhone 17 with iOS 27 is only the minimum configuration I can currently accept. For long-term custody of large amounts of funds, I prefer to use a dedicated signing device, which should have a transparent security design and be capable of continuous maintenance and on-device transaction verification. Its firmware, supply chain, and recovery process still require further review. Keeping the phone offline is a precautionary measure. But factors such as hardware, patch level, BFU/AFU status, passcode, and wallet key management determine the actual effectiveness of this precaution."
Odaily News: European electronics retailer MediaMarkt's parent company MediaMarktSaturn has removed all Ledger products from its stores and online platform, stating that it is in contact with the manufacturer. The company said it takes this matter very seriously.X user Johannes claims that two Ledger wallets purchased from two different MediaMarkt stores both contained unauthorized cables and cellular modules. Ledger stated that the implants in question can transmit users' recovery phrases via cellular networks and is investigating reports beyond CryptoBilis.Former Mt. Gox CEO Mark Karpelès said that a Ledger Flex he purchased at Singapore Changi Airport contained a spy implant. Ledger responded by saying users should refer to the latest CryptoBilis investigation update, but did not directly address the Singapore case, nor did it confirm whether tampered devices exist in Europe. (Cointelegraph)
According to official announcements, Payy has initiated a claims process for affected users following the cross-chain bridge contract hack on September 24, with a 30-day window for claim submissions. Eligible claims will be compensated in USDC on the Ethereum network. Meanwhile, Payy Wallet is currently suspended and will be completely shut down after the claims period concludes.
Odaily News: The Finance Committee of the French National Assembly has passed amendment No. I-CF821, which would require holders of self-custodied crypto assets valued at or above €100,000 (approximately $112,000) to declare their holdings.The declared value is based on December 31 of each year, and those who fail to declare as required may face fines of up to €10,000. The proposal was put forward by Charles de Courson, Jean-Pierre Bataille, and Michel Castellani, aiming to combat tax evasion.The amendment still needs to be resubmitted and approved when the National Assembly reviews the revenue portion of the budget before it can be incorporated into French law. After the Finance Committee passed the relevant amendment, it rejected the revenue portion of the 2027 budget by a vote of 31 to 3, and lawmakers are expected to begin debate on Tuesday starting from the government's original draft. (Cointelegraph)
Odaily reports: Bitcoin News posted on X platform that security researcher @cyberscrilla discovered a fake Ledger website and app appearing at the top of Google search results, designed to trick users into revealing their 24-word recovery phrase. According to Google data, the website reportedly received over 1 million visits in the past 30 days.Previously, cybersecurity company Zscaler found in a September investigation that malicious Google ads impersonating Ledger redirected users to fake wallet verification pages. Currently, Ledger is investigating a suspected wallet theft case involving customers of Southeast Asian distributor CryptoBilis, with estimated losses of $86 million.
Southeast Asian crypto hardware wallet distributor CryptoBilis announced that it will suspend the sale and shipping of hardware wallets across all physical stores and online channels in Malaysia, the Philippines, and Indonesia starting today, covering all of its brands. The sales suspension is a precautionary measure aimed at protecting users during Ledger’s security investigation, while also cooperating with independent experts to review its own internal processes. Physical stores have also been temporarily closed, but customer service channels remain fully operational.
As reported by Journal du Coin, France’s 2027 budget bill was submitted to the National Assembly on October 1, with the Finance Committee beginning to vote on ten cryptocurrency-related amendments on October 7. As of October 8, three have been passed: stablecoin conversions are treated as taxable events (starting January 1, 2027), cryptocurrencies valued over €800,000 are subject to an exit tax, and cryptocurrency losses can be deferred and deducted over a ten-year period; a proposal to expand the wealth tax to cover crypto assets was rejected; and a tax-cut amendment submitted by Paul Midy was directly declared invalid for violating Constitutional Article 40, which prohibits reductions in public revenue. Additionally, the EU DAC8 directive mandates that platforms collect user identity and transaction data starting January 1, 2026, with initial reports to tax authorities due by June 15, 2027, taking effect automatically without a parliamentary vote. Another proposal would require reporting of self-custody wallets valued above €100,000, carrying maximum fines of €10,000 for violations. The aforementioned amendments are not yet legally binding. The plenary session will deliberate on them from October 13 to 19, with the final vote set for November 17.
According to Coinbase's official blog, Coinbase announced that it will provide stablecoin services for Samsung Wallet, with USDC launching as the default U.S. dollar stablecoin in the U.S. market during the last week of October 2026. When users deposit into their stablecoin balances, USDC will automatically appear as the default option. The related assets will be held in custody by Coinbase Prime Vault through its NYDFS-compliant custody service, operated in collaboration with licensed stablecoin infrastructure provider Bastion. To date, USDC's circulating supply has already grown by 72% in 2025 to exceed $75 billion, and the number of wallets holding the asset has increased by 59% to nearly 7 million.
Odaily reports: Bitget stated on X platform that an investigation by Google Cloud's Mandiant into Bitget's September 24 security incident found that attackers gained unauthorized access to certain third-party security devices, then laterally moved into Bitget's exchange wallet environment and obtained access to both warm and hot wallets. The investigation findings are consistent with the attack path previously disclosed by Bitget.
According to Cointelegraph, Greece has been added to the EU's MiCA registry for the first time, with BCash, Xenios Blockchain Group, Capital Wallet Greece, and Piraeus Bank receiving authorization. The total number of registrations under ESMA now reaches 359. Among them, the first three are supervised by the HCMC, while Piraeus Bank is regulated by the Bank of Greece, demonstrating Greece's dual-track regulatory framework for MiCA. Previously, Binance applied for MiCA authorization in Greece. If approved, it could have leveraged the passporting system to offer services across Europe, but it voluntarily withdrew the application on June 24. On September 18, the Wall Street Journal reported that ECB President Lagarde had intervened, asking the Greek prime minister to prevent the application's approval. The HCMC explicitly denied this to Cointelegraph, stating that no officials had communicated with ECB staff regarding Binance's application, and that the report's claims were entirely untrue. Both Binance and the ECB declined to comment.
Odaily News: The European Securities and Markets Authority (ESMA) has updated the MiCA register, with BCash, Xenios Blockchain Group, Capital Wallet Greece, and Piraeus Bank becoming the first batch of Greek crypto asset service providers to be included. The register added 6 institutions from Germany, France, and Slovenia, bringing the total number of registered institutions to 359.The Hellenic Capital Market Commission (HCMC) is responsible for supervising the first three institutions, while the Bank of Greece oversees Piraeus Bank. The HCMC denied that its officials had communicated with European Central Bank (ECB) officials regarding Binance's Greek MiCA application, and also denied making any statements about Lagarde intervening in the application; Binance withdrew its application on June 24. (Cointelegraph)
Odaily News: Tether has announced a partnership with Shiga to launch self-custodial financial products in Africa and the Gulf Cooperation Council (GCC) region based on its open-source Wallet Development Kit (WDK), enabling users and institutions to hold and transfer USD₮, Bitcoin, and Tether Gold (XAU₮).Among them, ENTA targets individuals, high-net-worth users, and enterprises, while Pulse targets institutions such as banks and fintech companies, used for building digital asset payment, treasury management, and settlement services. Shiga is currently in the final stage of approval for a digital asset intermediary license in Nigeria.