nvo

Greek police dismantled a cryptocurrency investment fraud gang and arrested 17 people, including 9 military personnel. Preliminary investigations by the police show that about 10,000 people participated in the investment, with an average investment of around 800 euros per person, and the amount involved is estimated to exceed 8 million euros.The gang operated by recruiting new members to obtain higher returns, exhibiting clear "pyramid" characteristics. In addition, the gang recently froze the withdrawal function and claimed that investors could receive double their principal back after 50 days if they doubled their investment. The police have currently seized about 280,000 euros, and the investigation is ongoing.

According to the New York Times, the negotiations between the United States and Russia regarding the Ukraine issue involve a multi-billion dollar oil deal related to allies of Trump. This deal involves large oil fields, refineries, and gas stations owned globally by Lukoil.

According to Decrypt, the European Union's law enforcement agency reported that Spanish police arrested a 16-year-old Romanian suspect in Alicante, suspected of being an administrator and main operator of the ransomware group KillSec.Two other suspects in their twenties were arrested in the UK and Romania, respectively; another developer who just turned 18 in August this year has been identified but has not been arrested due to some crimes occurring during their minor years.This operation, codenamed Operation KillSwitch, was led by the Hamburg State Criminal Police and the city's prosecution office, focusing on approximately 1,000 suspected attacks worldwide, with about 500 confirmed as successful intrusions.Law enforcement searched eight locations in Spain, Greece, Romania, and the UK, seized five central servers, and redirected related domain names to seizure announcement pages, while also confiscating at least 110 TB of stolen data.KillSec has been active since around 2024, exploiting software vulnerabilities and poorly secured cloud storage entry points to infiltrate corporate systems, copying internal data and naming victim organizations on dark web leak sites, threatening to publicly release documents to demand cryptocurrency ransoms, and if the target refuses to pay, they release the data for free.The Swiss Federal Police noted that the group also employed double extortion tactics, first encrypting servers and then applying pressure. U.S. prosecutors' charges indicate that a Dutch national residing in the UK, Fouad Eltibrizi (nicknamed Archduke), was indicted by a federal grand jury in Puerto Rico on September 16, subsequently arrested, and awaiting extradition, facing up to 10 years in prison. The European Cybercrime Centre, under the European Union Agency for Law Enforcement Cooperation, is assisting in tracing cryptocurrency funds and conducting digital forensics.

NEAR Protocol posted on platform X that Sal Ternullo, CEO of NEAR Treasury Company SVRN, has introduced a new proposal on the NEAR governance forum to reduce the maximum annual token issuance rate from 2.5% to 1.6% for a duration of 24 months, and to lower the staking yield from the current approximately 5.4% to about 3.5%.The proposal is currently seeking feedback from validators, House of Stake delegators, and NEAR community members, with a complete plan expected to be announced next week for voting.In response to the recent NEAR Intents security incident, NEAR Protocol further clarified that the blockchain network is operating normally, and the related incident was not caused by vulnerabilities in NEAR Protocol or the native token NEAR. The NEAR Protocol network continues to produce blocks and process transactions without any downtime.

NEAR Intents released a security notice confirming that it has encountered an attack. Preliminary investigations indicate that the vulnerability originated from a defect in the interaction between the Omni deposit and withdrawal infrastructure and contracts. The contract vulnerability has been fixed, and core services are expected to be restored within 1 hour, with a commitment to fully compensate for the damaged assets.NEAR Intents stated that deposit and withdrawal services for multiple public chains, including BSC, Polygon, and TON, will be additionally suspended for about 12 hours. The relevant cases have been reported, and on-chain tracking has begun.Subsequently, on-chain detective ZachXBT indicated that NEAR Intents' BSC hot wallet experienced multiple abnormal outflows of funds, with the stolen funds transferred to KuCoin and further cross-chain to the Bitcoin network. The amount involved has exceeded 3.8 million USD.

Ethena founder Guy Young posted on social media that he is aware of the current "security incident involving a certain Ethereum node operator."The supported assets of USDe currently do not include any direct exposure to stETH or any other liquid staking tokens. It is expected that there will be no impact on Ethena.

Recently, the police in Baotou, Inner Mongolia, China, investigated a virtual currency money laundering case. The criminal gang used "free credit card repayment" as bait to attract ordinary users to provide accounts. They received illicit funds from overseas gambling and fraud through false consumption, then contacted currency dealers to exchange for virtual currency and transferred it to designated addresses abroad. Through financial and on-chain data analysis, the police identified nearly a thousand involved accounts, with suspects distributed across Inner Mongolia, Shandong, Jiangsu, Hebei, Chongqing, and other regions.The Digital Currency Research Institute of the People's Bank of China stated that it is currently using large model technology to analyze the flow of funds in virtual currency transactions, restore the gang's trading patterns, and uncover clues related to illegal industries. Upon investigation, it was confirmed that seven members of the gang were illegally engaged in payment settlement business without approval from relevant national authorities, constituting the crime of illegal operation, and were sentenced to imprisonment ranging from one year and two months to two years and six months, along with fines.Using virtual currency for money laundering is a new type of money laundering crime that has emerged in recent years. Lv Wei, the president of the Inner Mongolia branch of the People's Bank of China, stated that enhancing the monitoring and identification capabilities for abnormal fund transactions related to virtual currency trading has helped successfully crack down on a major money laundering case involving virtual currency pyramid schemes, dismantling more than ten money laundering and points-running dens, and confiscating illegal gains of approximately 130 million yuan. In recent years, there have been coordinated efforts to promote the conviction and sentencing of four cases involving money laundering using virtual currency, forming a strong deterrent against illegal activities such as money laundering with virtual currency.

The regulated operator responsible for the registration, securities custody, and settlement system of the Brazilian financial market, CSD BR, has begun to record the ownership of shares in certain investment funds under BTG Pactual, mirroring them to the public XRP Ledger. CSD BR manages registered assets exceeding 22 trillion Brazilian Reais, approximately 4 trillion US dollars. Its existing database still serves as the official record for registration, custody, and settlement, and the relevant assets have not been transferred to the XRP Ledger; fund shares will be presented in token form on the XRPL.This blockchain copy aims to allow approved banks and institutions to verify ownership changes in real-time, replacing post-reconciliation, reducing the slow and costly verification process, while retaining identity checks and regulatory controls. Anyone can read the token circulation on the XRPL, but CSD BR still controls who has the right to hold and transfer these tokens. The tokens adopt the multi-purpose token standard of the XRP Ledger, allowing issuers to restrict participants and freeze assets or revoke transactions upon regulatory or court requests, while participants still need to pass identity and anti-money laundering checks.The project starts with real fund records, distinguishing it from previous pilots that used test assets or closed networks. CSD BR was established in 2018 and is authorized by the Central Bank of Brazil and the securities regulatory authority. After becoming familiar with the mirroring system, CSD BR and Ripple plan to test the direct issuance of assets on the XRP Ledger and allow approved participants to trade, with potential targets including Brazilian real estate receivables and agricultural receivables.

Russian President Putin's envoy Dmitryev held "constructive" talks with U.S. officials on Monday to discuss a peaceful resolution to the Russia-Ukraine war.

According to monitoring by the head of Galaxy Research, the COLDCARD Seed Entropy theft incident has resulted in 1,830 BTC being stolen, involving three rounds of attacks and over 30 smaller related signs.A total of 256 victims have reported their situations to GLXY Research, with a median loss of 1.1 BTC, and the tracking of the attackers is still ongoing.

Recently, the Beijing Shijingshan police successfully intercepted a new type of cross-border telecom fraud case, freezing 780,000 yuan in involved funds and returning it to the victims. In this case, 53-year-old Mr. Liu received a fraudulent call from abroad while accompanying his child studying overseas. The scammer impersonated domestic police, fabricated false allegations of money laundering, and induced him to urgently request money transfers from his family in China.The funds were subsequently transferred into the accounts of two other Chinese students studying abroad. Upon investigation, it was found that these three individuals were all victims of the same fraud gang, exhibiting characteristics of "multiple scams in one case, with victims serving as money laundering tools for each other." The scammers first transferred funds into the accounts of some victims, then coerced them into exchanging for U currency to assist in the transfer, which was highly concealed and involved complex cross-border links. The police successfully "awakened" the victims through patient persuasion, preventing greater losses.

The U.S. Commodity Futures Trading Commission (CFTC) has filed a lawsuit against Cash FX Group S.A. and its CEO Huascar Jose Lopez Castillo, The Conversion Pros Inc. and its CEO Ronald Pope, Justin Halladay, accusing the aforementioned defendants of operating a multi-level marketing Ponzi scheme that raised over $950 million from the public, including in the United States, claiming it was for retail foreign exchange contract trading.The CFTC stated that the defendants falsely claimed that funds were traded by professional traders, proprietary algorithms, and AI, promising returns of up to 15% per week; in reality, Cash FX conducted only a small amount of foreign exchange trading, and almost all participant funds were misappropriated, paying fictitious trading profits to other participants using funds from new participants, while paying millions of dollars to the defendants. The CFTC claimed that Cash FX also provided participants with false account statements to maintain the illusion of high trading returns, resulting in participants losing at least $406 million. The CFTC is seeking to order the defendants to pay restitution, recover illegal profits, pay civil monetary penalties, and impose trading and registration bans as well as permanent injunctions.

The cryptocurrency trading platform Bitget announced on its official X account that on September 24, 2026, at 18:31 (UTC), its security system detected unauthorized transfers from a small number of hot wallets. The security team has immediately initiated an emergency response procedure and started a comprehensive investigation.Bitget stated that, based on current assessments, approximately $351.6 million in assets are affected. Cold wallets and the vast majority of assets on the platform remain secure and unaffected, and user funds are still protected. The incident falls within the coverage of the user protection fund, which currently holds over $464 million.Bitget mentioned that customer account balances remain accurate, and deposits and transactions continue to operate normally. As a precautionary measure, withdrawals have been temporarily suspended to allow the team to complete a thorough security review. The company has identified and flagged the relevant transfer addresses, formally contacted law enforcement agencies and on-chain security partners, and will restore withdrawals as soon as safety is confirmed, providing subsequent updates through official channels while refraining from speculating on the attack path during the investigation.

U.S. Senator John Curtis from Utah, a Republican, wrote to Chuck Grassley, the Chairman of the U.S. Senate Judiciary Committee, and Dick Durbin, the Chief Minority Whip, calling for an investigation into whether Donald Trump Jr. and Hunter Biden exploited their presidential family connections for personal financial gain, and requested subpoenas for both individuals. Curtis pointed out that Donald Trump Jr. had accepted wedding gifts from Russian oligarch Umar Kremlev, actively promoted family-backed cryptocurrency ventures, and served as an advisor for a prediction market platform; the related companies are regulated by the Commodity Futures Trading Commission. Donald Trump stated that his son has returned the relevant funds to Umar Kremlev.Curtis also called for an investigation into Hunter Biden's substantial business dealings with foreign entities, as well as whether the two utilized their relationship with the president to create commercial value. He mentioned that Joe Biden pardoned Hunter Biden in December 2024, who had previously denied involving his father in business transactions. A week prior to this investigation call, Senate Republicans failed to garner enough Democratic support to advance the Digital Asset Market Clear Act. Some Democratic senators opposed the bill, citing reasons including Donald Trump's use of cryptocurrency ventures to gain benefits related to the presidency; Donald Trump disclosed that he earned $1.4 billion from digital asset-related businesses in 2025.

White hat actors transferred 40.71 bitcoins related to the Coldcard vulnerability into a single transaction, valued at approximately 3.31 million dollars. This transaction aggregated funds from 11 addresses and included OP_RETURN information pointing to the Crypto Recovery Trust.Alex Thorn, head of Galaxy Research, revealed that a larger aggregation transferred a total of 52.37 bitcoins, involving multiple clusters of attacker addresses, accounting for about 2.8% of the funds involved in the vulnerability. A firmware flaw in Coldcard devices from March 2021 led to insufficient randomness in the mnemonic phrases, with the peak amount of funds involved being approximately 130 million dollars.

According to CriptoNoticias, the Spanish Civil Guard and National Police have respectively cracked down on two cryptocurrency-related criminal cases, capturing or identifying a total of 48 individuals involved.Among them, one Ponzi scheme resulted in losses of approximately 327,000 euros for 113 investors; another criminal network implemented fraud through phishing, fake rental advertisements, and other methods, converting illegal gains into cryptocurrency to evade tracking, causing losses exceeding 430,000 euros.

According to Onchain Lens monitoring, an attack cluster transferred approximately 1.54 million dollars' worth of FET from Fetch AI's token converter on Ethereum.The cluster also received approximately 452,000 dollars in newly minted NTX from Nunet Global deployers. As of now, the total confirmed amount involved is approximately 2.01 million dollars.

The Cyber Investigation Department of the Gangwon Special Self-Governing Province Police Agency in South Korea has identified 26 Polymarket users by analyzing public blockchain transaction records and on-chain open-source intelligence, and has filed cases against them for suspected illegal gambling. Among them, 18 have been referred to the prosecution, with a total bet amount of 12.7 million USD, and the highest single user bet reaching 4.1 million USD.The police launched a preliminary investigation in March and began filing cases against the involved individuals in May; the South Korean Communications Commission only ordered the blocking of Polymarket on August 18, and the transactions under investigation occurred while the platform was still accessible. The police are advancing the investigation based on Article 246 of the South Korean Criminal Code.

Argentina has agreed to implement the Crypto Asset Reporting Framework (CARF) established by the Organisation for Economic Co-operation and Development (OECD), planning to automatically exchange cryptocurrency transaction data with other jurisdictions by 2029. Currently, 77 jurisdictions have joined this framework.According to the framework, virtual asset service providers must report user identity information, as well as data on cryptocurrency transactions using fiat currency, digital asset exchanges, digital asset payments, and transfers between external addresses. Argentina will receive information on overseas transactions and share relevant data about its users with international regulatory bodies.Argentina must establish domestic regulations by 2028 to clarify data collection requirements and the rules for virtual asset service providers to report information to tax authorities. The framework aims to apply similar information reporting standards for cryptocurrency transactions and fiat currency transactions to help tax authorities identify cross-border tax evasion activities.