error

WLFI CEO Zach Witkoff posted on the X platform in response to a recent article circulating on the X platform, written by someone claiming to be a "WLFI Web3 Ambassador," which raised questions about WLFI. Upon verification, it was found that the author is not a member of the WLFI team and has no affiliation with WLFI.Zach Witkoff stated:The article conflates WLFI with the Trump Meme coin, which are completely unrelated;WLFI has no connection to "fight fight fight" or CIC CIC digital;WLFI's early holders bought in at prices of $0.015 and $0.05, and today's price is $0.08;WLFI does not primarily operate on "transaction fees"; the main product of WIFI is stablecoins, generating revenue through holding government bonds. WLFI's stablecoin is the second-largest compliant stablecoin calculated by trading volume and market capitalization.Zach Witkoff also replied, "One should conduct more thorough research before writing a long tweet."

According to TRM Labs, the Indonesian government has convicted three individuals of financing terrorism using cryptocurrency.Law enforcement connected the relevant wallet addresses to an ISIS-associated network through on-chain tracking, with one defendant transferring over 49,000 USDT to an overseas trading platform through 15 transactions. Although the individuals did not directly carry out attacks, they were identified as part of the logistical layer for terrorist financing. TRM stated that this could be one of the first anti-terror financing cases in Southeast Asia completed with blockchain evidence at its core.

According to The Block, a federal judge in Alabama has dismissed the lawsuit accusing Binance entities and Binance.US operator BAM Trading Services of funding terrorism, ruling that the plaintiff's complaint does not meet the basic standards for a federal complaint.The district judge noted in the order that the plaintiff's amended complaint is flawed both legally and factually, characterizing it as a typical "shotgun complaint"—mixing multiple defendants and plaintiffs without clearly associating specific allegations with particular parties.The lawsuit was filed by victims and families of the attacks by Hamas and the Palestinian Islamic Jihad, seeking damages under the Anti-Terrorism Act and other laws. The complaint exceeds 100 pages and contains hundreds of allegations but repeatedly groups the defendants together without specifying the particular actions each entity is alleged to have taken. The judge has given the plaintiffs until April 10 to submit a revised complaint and warned that failure to correct the deficiencies would result in the case being dismissed.

Binance officially stated that the federal courts in the Southern District of New York and the Northern District of Alabama dismissed lawsuits filed by hundreds of plaintiffs against Binance and its founder Changpeng Zhao related to anti-terrorism last week, reiterating the legal standards required for such serious allegations.Binance forwarded a public response from the Democratic side of the U.S. House Foreign Affairs Committee, which previously mentioned that Binance admitted to violating Iran sanctions and was involved in money laundering allegations in 2023, as well as that Trump had pardoned Changpeng Zhao. In the statement, Binance emphasized its commitment to complying with sanction laws and looks forward to cooperating with both parties.

Lido announced that Aave's CAPO oracle misquoted yesterday, leading to incorrect price boundaries for wstETH:USD in the AAVE market, which triggered liquidation events. There was no bad debt, and all affected users will be fully compensated.These erroneous price boundaries are unrelated to wstETH as the underlying asset and do not indicate any issues with the Lido protocol. The Lido Earn products, including stRATEGY and GGV, were not affected by this liquidation, and user funds remain secure.

U.S. District Judge Jeannette Vargas in Manhattan previously dismissed a civil lawsuit that sought to hold Binance and its founder CZ accountable, alleging that their trading activities aided terrorist organizations in carrying out global attacks. However, according to the ruling, the judge allowed the plaintiffs to submit an amended complaint within 60 days, supplementing more specific evidence of on-chain transactions and account associations.The plaintiffs had previously failed to demonstrate a direct connection between Binance's trading activities and specific attacks, such as key evidence regarding the flow of funds, wallet ownership, or transaction timing. The judge also criticized the plaintiffs' 891-page complaint as "clearly overly lengthy," thus failing to meet the relevant liability standards under the Anti-Terrorism Act.

A federal judge in Manhattan, Jeannette Vargas, dismissed a civil lawsuit that sought to hold Binance and its founder CZ accountable, accusing their trading activities of aiding terrorist organizations in carrying out global attacks.The judge found that the 535 plaintiffs (including victims and their families) failed to reasonably explain that the defendants "intentionally conspired with the terrorist attacks, participated in their execution, or ensured the success of the attacks through their actions." The plaintiffs alleged that the attacks occurred between 2017 and 2024 and were carried out by external terrorist organizations such as Hamas, Hezbollah, the Iranian Revolutionary Guard, ISIS, Kata'ib Hezbollah, the Palestinian Islamic Jihad, and Al-Qaeda, attempting to attribute hundreds of millions of dollars in cryptocurrency and transactions with Iranian users to Binance and CZ.The judge noted that while Binance and CZ may have some awareness of the potential for terrorist financing through the exchange, their relationship with terrorist organizations was limited to "their or their affiliates' accounts on Binance and trading in a fair manner." The judge also criticized the plaintiffs' 891-page, 3,189-paragraph complaint as "entirely unnecessary," but allowed for amendments. A Binance spokesperson stated, "The court correctly dismissed these baseless allegations. Binance strictly adheres to compliance requirements and has a zero-tolerance policy for illegal activities on the platform." CZ also mentioned that the plaintiffs were attempting to leverage Binance's acknowledgment in November 2023 of violating anti-money laundering and sanctions laws and paying a $4.32 billion penalty to seek triple damages.

HyperEVM's native non-custodial lending protocol HypurrFi stated on platform X that there is a "rounding error" vulnerability in versions prior to Aave V3 3.5. Under specific conditions, an attacker could extract underlying tokens by repeatedly executing supply/extract and borrow/repay loop operations.The affected markets are XAUT0 and UBTC in HypurrFi Pooled. Currently, user funds are not at risk. To ensure safety, related markets have suspended new supply and lending operations, while withdrawal and repayment functions remain operational, and other markets are running normally. HypurrFi added that it quickly identified the issue on-chain through its internal monitoring system and promptly froze the affected markets. They are also collaborating with other Aave deployers and security researchers to address the issue and have invited other Aave fork projects to reach out for more security information.

The Ploutus protocol's liquidity pool on the Ethereum chain (0xD060...945D2) was attacked due to a misconfiguration of the oracle, resulting in a loss of approximately $390,000.Analysis shows that the pool incorrectly pointed the USDC price to Chainlink's BTC/USD feed, causing a significant price deviation. The attacker exploited this vulnerability, borrowing 187 ETH with only 8 USDC as collateral. On-chain data indicates that the attack transaction occurred in the next block after the configuration change was confirmed, suggesting that the attacker was monitoring in real-time and quickly took advantage of the parameter update.

According to The Block, Bitwise Chief Investment Officer Matt Hougan pointed out that there may currently be structural valuation errors in crypto assets, primarily due to investors' "anchoring bias," which keeps them focused on old narratives while ignoring the reality that Wall Street is accelerating its shift towards on-chain infrastructure.Hougan emphasized that although the market size for tokenized assets is currently only about $20 billion, the vast scale of traditional financial markets indicates significant growth potential. He cited examples such as BlackRock launching a tokenized government bond fund, JPMorgan issuing deposit tokens on the Base network, and Apollo's tokenized credit fund, arguing that the lagging consensus narrative compared to actual developments provides investors with opportunities to achieve excess returns (Alpha). He suggested that investors should establish broad market exposure to navigate the ongoing structural changes in finance.

According to ForkLog, several Russian media outlets cited information from the country's Federal Security Service stating that Telegram founder Pavel Durov is under criminal investigation for allegedly assisting terrorist activities, in accordance with Article 205.1, Clause 1.1 of the Criminal Code of the Russian Federation (assisting terrorist activities).The investigation involves the dissemination of illegal content, with accusations that the platform's administrators ignored requests from the Russian communications regulator to delete banned channels and chats, and that Telegram has been used for criminal activities and for publishing materials from extremist and terrorist organizations.The Russian communications regulator began restricting the service in the summer of 2025 due to an increase in fraudulent activities, and in February 2026, it intensified "traffic limiting" measures on the grounds that the platform was not complying with Russian laws. Durov responded at the time by stating that "Telegram defends freedom of speech and privacy."

According to Decrypt, the DeFi lending protocol Moonwell has incurred approximately $1.78 million in bad debt due to an oracle configuration error.After enabling Chainlink's OEV wrapper contract through governance proposal MIP-X43, there was a severe misconfiguration of the price oracle for cbETH, which was once valued at only $1. On-chain trading bots and liquidators acted quickly, seizing cbETH collateral worth thousands of dollars by repaying a debt of about $1.This configuration error led to the liquidation of 1,096.317 cbETH, wiping out most or all of the collateral for many borrowers, leaving the protocol with a significant amount of bad debt. The Moonwell team immediately reduced the cbETH borrowing limit and supply cap to 0.01 upon discovery to limit further losses, but a spokesperson declined to comment further on the source of the error or the details of the vulnerability.

Bithumb exchange announced today that it acknowledged an error in the distribution of activity rewards, which led to some users receiving an abnormal amount of Bitcoin. These users subsequently sold off their holdings, causing a sharp fluctuation in Bitcoin prices in a short period. The exchange's internal control system quickly identified and restricted the trading of the relevant accounts, and the market price returned to normal levels within 5 minutes. Bithumb emphasized that this incident is unrelated to external hacking attacks, and customer asset security has not been affected, with trading and deposit/withdrawal functions operating normally. The exchange has committed to handling subsequent matters transparently to ensure that customer rights are not compromised.

According to CoinDesk, India's Financial Intelligence Unit (FIU) has announced stricter identity verification measures for cryptocurrency exchanges to combat money laundering and terrorist financing activities.The new regulations require exchanges to verify the authenticity and biometric features of users by having them take a blinking dynamic selfie, while accurately recording the user's geographic coordinates, time, and IP address. In addition to providing a Permanent Account Number (PAN), exchanges must also collect additional documents such as passports, driver's licenses, identity cards (Aadhaar card), or voter ID cards, as well as mobile phone numbers and email addresses, which will be confirmed via one-time passwords (OTPs). Ownership of user bank accounts will be verified through a "small credit verification" method, while high-risk customers or those associated with tax havens, jurisdictions related to the Financial Action Task Force (FATF), or potential risk exposure individuals or non-profit organizations will need to undergo enhanced due diligence every six months.Exchanges are prohibited from supporting ICOs and from using tools like mixers to obscure transaction trails, making cryptocurrencies untraceable. All platforms must register with the Financial Intelligence Unit, report suspicious transactions, and retain user data for five years. The guidelines indicate that initial coin offerings and initial token sales lack reasonable economic justification and pose "higher and more complex" risks of money laundering and terrorist financing.

CyrusOne confirmed that its data center in Aurora, Illinois, experienced a market outage operated by the CME Group for over 10 hours due to human error.On-site staff and contractors failed to drain the cooling towers according to standard procedures before the arrival of low temperatures, ultimately leading to an overload of the cooling system and a rise in temperature. CyrusOne is jointly owned by KKR & Co. and Global Infrastructure Partners, and this incident has raised concerns about the reliability of financial market infrastructure. Previously, on November 28, trading in commodity futures at the CME Group was suspended.

According to Aster, during the period from 22:00 to 23:00 UTC, the platform experienced a deviation in the XAUUSDT market price due to an error in the gold price data source.It stated that this is a global error affecting multiple platforms, including Aster DEX, as well as price data websites like goldprice.org. The market has now returned to normal. All affected users will be fully compensated, with specific compensation details to be announced after confirmation.

According to an analysis report published by Cloudflare's official blog, the large-scale outage on November 18 was not caused by an external network attack, but rather by an erroneous configuration file generated after a database permission adjustment, which led to anomalies in the core proxy system. This triggered interruptions in multiple products, including CDN, security services, Workers KV, Turnstile, and Access, marking the most severe incident since 2019.The report noted that in the early stages of the incident, the team mistakenly assessed it as a DDoS attack, and ultimately completed the fix by rolling back to an old configuration file. The related services were fully restored at 01:06 AM Beijing time on November 19. Cloudflare described this outage as "unacceptable" and will accelerate the improvement of system resilience.

According to official news, Balancer has released a preliminary report on the vulnerability attack incident, indicating that the Balancer V2 composable stable pools were attacked on November 4 across multiple chains (including Ethereum, Base, Avalanche, Polygon, Arbitrum, etc.).The vulnerability originated from a rounding logic error in the EXACT_OUT transactions during batch exchanges, which the attacker exploited to manipulate the pool's balance and withdraw assets. This incident only affected Balancer V2's composable stable pools, while Balancer V3 and other pool types were not impacted. The Balancer team, along with security partners and white hat teams, acted swiftly by implementing measures such as automatic suspension through Hypernative, asset freezing, and white hat intervention under the SEAL framework, successfully curbing the spread of the attack and recovering some assets. Among them, StakeWise has recovered approximately 73.5% of the stolen osETH, and teams like BitFinding and Base MEV bot have also assisted in recovering some funds. Currently, Balancer is working with security partners such as SEAL and zeroShadow for cross-chain tracking and fund recovery, with the final verified losses and recovery data to be published in a complete technical review report. The official reminder to users is: obtain confirmation information only through Balancer's official channels; operations on V3 and non-stable pools remain safe.

ChainCatcher news, according to Decrypt, Interpol and the African Police Organization arrested 83 people in a joint operation against terrorist financing and its support for illegal activities across six African countries, with 19 individuals arrested for "illegal use" of virtual assets.During the two-month operation, the authorities of the participating countries screened over 15,000 relevant individuals and entities, uncovering approximately $260 million in fiat and virtual currencies potentially linked to terrorist activities. About $600,000 has been seized so far, and further investigations are underway to trace and recover more assets.

ChainCatcher message, the Aster team stated that the compensation for the abnormal price event of the XPL perpetual contract will be automatically credited to the affected users' accounts within one hour. If there are any questions, a ticket can be submitted via Discord after the distribution is completed.According to the official statement, the incident originated from a parameter configuration error when switching XPL from the pre-launch market to the official perpetual market, which caused the index price to be capped at 1 dollar. After removing the cap, it remained in pre-launch mode, leading to an abnormal price surge between 21:36 and 21:45. The issue was completely resolved before 21:45, confirming it was an internal configuration error and not an external attack.