tt

On-chain detective Specter posted on their personal channel that between October 9 and 10, the attacker addresses related to the CryptoBilis Ledger hardware wallet incident deposited 2990.3 ETH into Tornado Cash, worth approximately 7.45 million USD.Monitoring shows that the attacker previously withdrew funds to 14 addresses, then cross-chained to ZEC via NEAR Intents and processed for privacy. Specter stated that the attacker partially reused previous deposit addresses to submit withdrawal transactions, and some withdrawal transactions were initiated by wallets associated with the addresses that paid Gas fees during the theft, thereby linking the funds to the withdrawal actions.Currently, the attacker continues to transfer and hide the related funds. The previous CryptoBilis incident involved supply chain risks of the Ledger hardware wallet, and Ledger has stated that they are investigating and reminding relevant users to pay attention to device security.

Cryptocurrency analyst Darkfost stated that after the security incident involving Ledger dealer CryptoBilis, discussions in the community have also brought up other potentially related dealer names, including some Lazada merchants.Darkfost indicated that the full extent of the incident's impact is still difficult to confirm. Although Ledger has confirmed a connection to the CryptoBilis incident, it is still unclear whether CryptoBilis is the only affected dealer. He compiled a list of Ledger dealers that may be at risk, stating that these dealers are in close proximity and could potentially have their supply chains compromised simultaneously. However, Darkfost emphasized that this assessment is merely speculative and has not yet been confirmed.Darkfost suggested that if users have purchased Ledger devices from the relevant dealers in the past six months, they may consider transferring their assets to other secure devices until the investigation into the incident is complete. Additionally, he mentioned that users can refer to the guidelines published by security researcher MagicalTux to check their Ledger devices for any signs of tampering.

Crypto analyst Ali posted that the 10-minute cycle chart of Ethereum seems to be forming an "Adam and Eve bottom" pattern. The key resistance level currently being watched in the market is the neckline around 2520 USD. If ETH can consistently close above this level, it may confirm a bullish breakout and further open up upward space, with the target area focusing on 2640 USD.

According to Gate market data, STRK has broken through 0.1 USD, currently reported at 0.1022 USD, reaching a new high for the year, with a 24-hour increase of 40.8%.

According to Decrypt, the French National Assembly's Finance Committee passed two cryptocurrency tax amendments this week: starting from January 1, 2027, exchanges of stablecoins regulated by MiCA will be considered taxable sales; and a departure tax will be imposed on tax households relocating overseas with a total value of cryptocurrency assets exceeding 800,000 euros.The committee rejected the budget revenue portion with a vote of 31 to 3, and the full National Assembly will review the original text from the government. The aforementioned amendments will not be automatically included; supporters must reintroduce them during the debate starting on October 13, with a formal vote scheduled for October 20.The related measures have not yet become law. The stablecoin amendment was proposed by left-wing GDR party member Nicolas Sansu and 16 co-signers, applicable to electronic money tokens as defined by MiCA. The amendment does not set a new tax rate but aims to include the related revenue under France's existing unified tax system of 31.4%.The committee also passed an amendment proposed by Daniel Labaronne, allowing investors to carry forward cryptocurrency asset losses for 10 years to offset future gains. The proposed departure tax applies to taxpayers who have been French tax residents for at least 6 of the past 10 years and whose cryptocurrency assets, including custodial assets, have a total value exceeding 800,000 euros.

According to Xinhua News Agency, on October 10, the Central Committee of the Communist Party of China and the State Council recently issued opinions on developing new quality productivity. The opinions propose promoting the deep integration of the real economy and the digital economy, building a national integrated computing power network and a national blockchain network, improving the system for determining data property rights, market transactions, rights distribution, and interest protection, implementing pilot demonstrations for data elements, and optimizing the layout and operation of national data infrastructure.The opinions also propose improving an open, shared, and secure data element market, exploring mechanisms for efficient cross-border data flow, enhancing the policy system for digital industrialization and industrial digitalization, creating internationally competitive digital industry clusters, and establishing mechanisms for future industry investment growth and risk sharing, thereby strengthening long-term capital investment in cutting-edge hard technology.

According to Salus monitoring, the attacker of the cryptocurrency payment service provider Triple-A has transferred 4,970 ETH (worth approximately 12.4 million USD) into the mixing tool Tornado Cash.In July of this year, the attacker stole assets from Triple-A's own treasury, with public estimates of the loss being around 11.8 million USD. After bridging the funds across chains to the Ethereum network and completing the token exchange, the attacker dispersed the funds to two intermediary addresses on September 6. The attacker consolidated the two streams of funds through a single wallet and recharged them in batches to Tornado Cash, which included 49 transactions of 100 ETH and 7 transactions of 10 ETH, with some of the funds sourced from previous withdrawals from the mixer.

On October 9, the decentralized stablecoin USDD sponsored and attended the Cointelegraph CONNECT event held in Singapore. USDD's Head of Communication Yvonne Chia will participate in a thematic discussion alongside executives from projects such as ether.fi, Mercuryo, and FinHarbor. This discussion focuses on how stablecoins can truly enter daily consumption scenarios through payment infrastructures like cards and wallets.USDD is a multi-chain decentralized over-collateralized stablecoin, currently issued simultaneously on the TRON network, Ethereum Chain, and BNB Chain. Leveraging its seamless compatibility with major DeFi protocols and multi-chain layout advantages, USDD is committed to building a secure, transparent, and efficient decentralized stablecoin product, while continuously exploring the greater value of stablecoins in the real economy.

Andrey Lazutkin, co-founder of Tangem, posted on X that the recent Ledger security incident once again confirms the security engineering principle of "complexity expands the attack surface." He pointed out that every additional component, software layer, and user interaction, such as screens, buttons, batteries, and firmware, introduces new potential points of failure and vulnerabilities, increasing the risks that need to be identified and mitigated.Based on this, Lazutkin defended the minimalist card design adopted by Tangem—this solution is built solely around the secure chip and antenna—and stated that this incident reinforced his judgment about the correctness of this design philosophy.

The XRP Ledger recently fixed a payment system vulnerability that could be traced back to 2015. This vulnerability could allow attackers to bypass the system's calculation limits on token exchange amounts through a specially designed payment transaction, generating and spending large amounts of XRP out of thin air, undermining the mechanism that caps the total supply of XRP at 10 billion.It was disclosed that attackers could create hundreds of accounts, allowing these accounts to post offers to exchange a small amount of tokens for a large amount of XRP, and then execute a transaction simultaneously. Due to a flaw in the software's calculation of the total transaction amount, the seller's account could receive the full XRP, while the buyer's account would need to pay almost nothing. Researchers Cayden Liao and Veria AI reported the vulnerability on September 22, and RippleX subsequently reproduced the attack and confirmed that the generated XRP could be used in subsequent transactions. RippleX stated that there is currently no evidence that this vulnerability has been exploited on any public network. The development team released version 3.4.1 of xrpld on September 25 to fix the vulnerability.

According to a report by Reuters on October 9, the Philadelphia police stated in a statement that a model from the artificial intelligence company Anthropic submitted a false murder case tip through the Philadelphia police website. Anthropic notified the police earlier this week and stated that the submission was caused by an automated testing process.The police said the tip was submitted through PhillyUnsolvedMurders.com on July 18, 2026, involving an unsolved murder case, claiming to possibly have information about the case. The submission was marked as spam and was never forwarded to the Real-Time Crime Center for investigation or distribution. The police also stated that no unauthorized access to the system was found, nor was any departmental data leaked.Anthropic informed the police that after discovering the situation, it had stopped the related testing process and added verification mechanisms for future tests. The company plans to release a report on the matter on Friday. Reuters reported that Anthropic did not immediately respond to requests for comment.

According to Bloomberg, the U.S. Department of Justice is reviewing whether Binance Holdings Ltd. has violated the settlement agreement reached with the U.S. government in 2023, while also investigating whether activities on the platform may involve violations of Iran sanctions.Tysen Duva, head of the criminal division of the U.S. Department of Justice, stated in an interview this week that officials are reviewing Binance's compliance with the 2023 agreement. He declined to discuss details and did not indicate that Binance violated the settlement agreement. Under the agreement, Binance agreed to pay a $4.3 billion fine, acknowledged violations of banking-related rules, and accepted enhanced compliance controls.

According to an announcement released on the White House website on Friday, U.S. President Trump announced the establishment of a special committee to investigate allegations against Federal Reserve Board member Lisa Cook. According to the announcement dated October 7, Trump stated, "To assist me in fulfilling this duty, the committee will investigate the allegations against Board member Cook and report to me whether there is 'just cause' for her removal." This investigation will focus on assessing whether Cook meets the criteria for removal under the law, and it does not currently imply that she has been removed.

Zhao Changpeng issued a reminder for Ledger hardware wallet users to remain vigilant, especially those who have purchased devices recently. According to the information currently available, this incident appears to be limited to the supply chain, involving a supplier, and a few users may have purchased counterfeit or tampered Ledger devices.Zhao Changpeng stated that Ledger is a well-established and relatively secure hardware wallet brand in the industry, but such incidents can still occur. He anticipates and calls for the BNB ecosystem and the entire cryptocurrency industry to assist in tracking the stolen funds and promoting recovery.Previously, Ledger confirmed that it is investigating an asset theft incident involving Southeast Asian users, who had purchased devices through the distributor CryptoBilis. Ledger has requested CryptoBilis to suspend sales and shipments and advised users who purchased devices through this distributor in the past 90 days not to initialize their devices; if they have already completed the setup, they should create a new Ledger signing device using a new mnemonic phrase and transfer their assets to the new wallet.On-chain investigator Specter estimates that this incident has led to the theft of hundreds of wallets on the Bitcoin, Ethereum, and TRON networks, with losses exceeding 86 million dollars. Security researcher tanuki42 previously estimated the losses to be over 72 million dollars and stated that the amount is still increasing. Currently, the specific cause of the incident and whether the involved devices have security vulnerabilities are still under investigation.

New York Attorney General Letitia James announced that a settlement has been reached regarding former Celsius CEO Alex Mashinsky's alleged fraud against investors, securing a maximum conditional compensation of $35 million and requiring him to permanently exit the securities, commodities, and cryptocurrency industries.Previously, the Federal Trade Commission (FTC) and the Commodity Futures Trading Commission (CFTC) had also imposed industry bans on Mashinsky. Mashinsky is currently serving a 12-year prison sentence. On the other hand, Celsius creditors have received over $3.4 billion in payments through the company's bankruptcy proceedings.

According to data from SolanaFloor and Blockworks, as of today, the number of independent active addresses on Solana has reached 1.88 million, setting a new high in 13 months. Data from Santiment shows that the growth metric for the Solana network has increased by 124% compared to early September, with an average of approximately 1.71 million new wallets added daily. In addition, the number of wallets holding a balance on Solana has increased by 38.5% month-over-month to 16.1 million.

According to Cointelegraph, data from the French Ministry of the Interior shows that from January to mid-August 2026, France has experienced 90 cases involving cryptocurrency-related kidnappings, extortion, and violent thefts, averaging one incident every 2.5 days.Blockchain analysis company Chainalysis reported that as of mid-2026, there have been 30 publicly recorded incidents of violent attacks involving cryptocurrency in France; security company Gart.io tracked 73 real-world attacks occurring in France this year, surpassing the 66 in the United States and 27 in the United Kingdom.Eric Jardine, head of research at Chainalysis, believes that the surge in attacks is likely related to large-scale data breaches. The leak of French tax data and the user data breach disclosed by the cryptocurrency tax reporting platform Waltio in 2026 may have allowed attackers to obtain the identities, addresses, and asset information of cryptocurrency holders.The report also noted that over 40% of related attacks in France involve relatives or acquaintances of the victims, with criminals potentially identifying targets in advance through social media, on-chain data, and leaked information. French authorities are coordinating investigations through a specialized organized crime judicial agency.

According to monitoring by PeckShield, the attacker of the 79AU operational hot wallet 79thVault has returned 15,000 BNB, worth approximately 11 million USD, to the wallet address designated by the project team. Additionally, the attacker previously deposited 30 BNB into KuCoin. The current status of the remaining funds is still unclear.Previously, 79thVault on BNB Chain lost approximately 12.5 million USD, possibly due to a private key leak. The team typically operates the hot wallet for small transfers to the reward pool. However, recently this address transferred a total of 2.01 million 79AU to external addresses in 7 transactions, with amounts of 10,000, 100,000, 100,000, 300,000, 500,000, 500,000, and 500,000 coins respectively.

On-chain analyst Specter stated that there have been multiple reports of Ledger user wallets being stolen recently on X and Reddit. After tracking the related theft addresses, it was found that the funds came from hundreds of victim wallets, involving multiple mainstream blockchains such as Ethereum, TRON, and Bitcoin, with total losses exceeding 86 million dollars.Currently, the analyst has disclosed several involved addresses, but the reasons for the attacks, the specific number of affected individuals, and whether Ledger has any security vulnerabilities have not yet been confirmed. At this stage, the information mainly comes from on-chain tracking and community reports, and further verification is still needed.

The Central Committee of the Communist Party of China and the State Council issued the "Opinions on Developing New Quality Productive Forces," proposing to promote the deep integration of the real economy and the digital economy. The opinions emphasize improving the systems for determining data property rights, market transactions, rights distribution, and interest protection, implementing pilot demonstration projects related to data elements, optimizing the layout of national data infrastructure, promoting the digital transformation of manufacturing, and building a national integrated computing network and national blockchain network.