fec

Linea's official statement indicates that some validators supporting the Yield Boost treasury are withdrawing as a precaution due to the MetaMask staking incident. Linea emphasizes that the funds and control of the staking treasury itself have not been affected.The impact of this incident is that during the period when relevant validators withdraw and are replaced by new validators, the net staking rewards that provide funding sources for ecosystem incentives will temporarily decrease. Linea stated that it is closely monitoring the situation's progress.

Darkfost posted on platform X that Bitcoin is approaching the average cost price of two types of holding groups: investors holding for 18 months to 2 years have an average cost price of about $88,350, while investors holding for 6 to 12 months have an average cost price of about $89,200.Darkfost pointed out that the cost price is the average holding cost of the group, not a natural support or resistance level; as the price approaches this range, the behavior of related investors may change, and this area can be seen as a potential risk zone. The group of investors holding for 6 to 12 months has overall been at a loss for nearly a year, with some investors possibly having bought in at market peaks; some investors may sell after breaking even, while others may continue to buy to lower their holding costs.

Regarding the previous incident where the FlashLoopAdapter vulnerability caused a loss of approximately 114 ETH from two Safe multi-signatures, Aave founder Stani Kulechov stated that the contract with the vulnerability is not the Aave v3 contract, but rather a third-party external adapter built on top of Aave, which does not affect Aave v3 itself.Previously, SlowMist disclosed that the FlashLoopAdapter has an access control vulnerability, which attackers exploited to bypass permission checks and transfer assets from two Safe multi-signatures that enabled the module, ultimately resulting in a loss of approximately 114.09 ETH.

MetaMask has released a follow-up statement regarding the previously disclosed infrastructure security incidents, stating that the team is continuously conducting investigations and addressing the issues.MetaMask stated that to ensure user safety, it has collaborated with relevant partners to take preventive measures and is currently withdrawing the affected validator nodes from its non-custodial staking business. According to the investigation results so far, there is no indication that MetaMask wallets or customer funds have been affected.This morning, part of the infrastructure of MetaMask's non-custodial staking business encountered a security incident. As a precaution, the validators operating on Lido have begun to withdraw.

The core provisions of the regulatory framework for payment stablecoins in Florida, USA, will take effect on October 1, 2026.According to the state's Bill 2026 Chapter 176, engaging in the business of qualified payment stablecoin issuers in the state generally requires a license or must meet exemption conditions; qualified issuers must maintain at least a 1:1 identifiable reserve, which includes cash, funds in Federal Reserve accounts, qualified bank deposits, U.S. Treasury securities with a remaining maturity of no more than 93 days, and qualified government money market funds, among others. They must also publicly disclose redemption policies, disclose reserve composition monthly, accept monthly audits by certified public accountants, and be certified by the CEO and CFO.If the total issuance of payment stablecoins by state-level issuers reaches $10 billion, unless a federal exemption is obtained, they must transition to the corresponding federal regulatory framework within 360 days or suspend new issuances until the scale falls below the threshold.

Aave founder Stani posted on the X platform, stating that the team is currently monitoring the progress of the MetaMask Staking infrastructure security incident in collaboration with Lido.Stani mentioned that the Aave market is currently unaffected, and all operations are running normally.

The Financial Conduct Authority (FCA) of the United Kingdom has announced that it will begin accepting authorization applications from cryptocurrency businesses under the new regulatory framework starting today. Businesses planning to continue operating in the UK must submit their applications by February 28, 2027, and the new system will take effect on October 25, 2027.At that time, cryptocurrency businesses operating in the UK will be subject to comprehensive regulation by the FCA for the first time, with relevant standards covering consumer protection, client asset custody, market integrity, and financial resilience. The FCA emphasizes that submitting an application does not guarantee automatic approval, and businesses that do not meet the standards will not be allowed to continue providing regulated cryptocurrency services in the UK.

Federal Reserve Governor Barr stated that the surge in investment and related demand brought about by artificial intelligence development has had a measurable impact on prices.

SpaceX's new generation spacecraft "Starship" experienced an engine failure during its 14th unmanned test flight, which may impact NASA's timeline for crewed lunar landing missions. Starship is one of the two spacecraft selected by NASA for its bid, with plans to carry out crewed lunar missions in 2028.Although multiple objectives were achieved during the test mission launched in Texas, a propulsion system failure led to an early termination of the mission.

The Irish Minister for Energy stated that any U.S. diesel export ban would have a significant impact on the European Union.

Nate Geraci, President of ETF Store, expressed that his initial interpretation of the latest notice from the U.S. Treasury regarding 351 exchanges is not as optimistic as some industry insiders. Geraci believes that if the asset portfolio transferred into the ETF significantly differs from the ETF's own investment strategy, it may face issues, especially in cases where the related assets are quickly reduced or completely sold off through physical redemptions.He also pointed out that the Treasury's guidance is not clear regarding the specific applicable boundaries, making it currently difficult to determine which operations may be permitted. Further guidance is expected to be issued in the future.

Sei Network posted on platform X that REX Shares and Osprey Funds have updated their SEI staking ETF application documents with the U.S. Securities and Exchange Commission (SEC), setting October 23 as the effective date.The document states that this revision is solely to designate a new effective date for previously submitted post-effective amendments. The funds involved include REX-Osprey SEI + Staking ETF, SUI + Staking ETF, HYPE + Staking ETF, NEAR + Staking ETF, AAVE ETF, ADA + Staking ETF, ATOM + Staking ETF, AVAX + Staking ETF.

According to Ark Invest Tracker, Ark Invest states that AI hacking attacks are affecting everything. The risks go far beyond Bitcoin, as AI makes software vulnerabilities easier to discover and exploit.Bitcoin and hardware wallets may be the first to be impacted, but social media, tax, and banking websites may also face the same threats. Trusting a big brand still means trusting that the company will not make mistakes as AI becomes increasingly powerful. ARK expects that large custodial institutions will also become targets, with AI potentially discovering and exploiting vulnerabilities at an unprecedented speed.

DyorSwap officially announced that the so-called "GIWA Mainnet" identified by the team earlier is actually a fake chain set up by scammers. This fake network used the correct GIWA chain ID (9134), making it appear legitimate during the initial verification phase. The team also identified several suspicious messages and individuals within the related community that may be connected to this incident. The announcement stated that significant losses have occurred due to this fraudulent cross-chain bridge.DyorSwap stated that it is taking three immediate actions: first, contacting a professional security team to conduct further on-chain tracking and investigate the involved addresses, transactions, and fund flows; second, preserving all relevant evidence, including chat records, RPC information, cross-chain bridge addresses, and on-chain transactions; third, preparing to use treasury funds to compensate affected users, with eligibility criteria, loss verification processes, compensation scope, and detailed plans to be announced after the investigation and verification processes are completed.DyorSwap emphasized that until further notice, users should not use any unofficial GIWA mainnet RPCs, cross-chain bridges, or contracts, and should not send funds to any related addresses. The official team deeply apologizes to every affected user in this incident and states that subsequent updates will be released as soon as possible.

DyorSwap officially announced that the so-called "GIWA mainnet" previously identified by the team is actually a fake chain set up by scammers. This fake network used the correct GIWA chain ID (9134), making it appear legitimate during the initial verification phase. The team also identified several suspicious messages and individuals within the related community that may be connected to this incident. The announcement stated that significant losses have occurred due to this fraudulent cross-chain bridge.DyorSwap stated that it is taking three immediate actions: first, contacting a professional security team to conduct further on-chain tracking and investigate the involved addresses, transactions, and fund flows; second, preserving all relevant evidence, including chat records, RPC information, cross-chain bridge addresses, and on-chain transactions; third, preparing to use treasury funds to compensate affected users, with eligibility criteria, loss verification processes, compensation scope, and detailed plans to be announced after the investigation and verification processes are completed.DyorSwap emphasized that until further notice, users should not use any unofficial GIWA mainnet RPCs, cross-chain bridges, or contracts, and should not send funds to any related addresses. The official team deeply apologizes to every affected user in this incident and states that subsequent updates will be released as soon as possible.

Real estate investment company Cardone Capital founder Grant Cardone stated that commercial real estate is facing a historic reset. He pointed out that in a high-interest-rate environment, commercial real estate prices have been driven down below replacement costs, which presents an opportunity to store wealth through Bitcoin. Cardone mentioned that his goal is to accumulate 25,000 Bitcoins while holding 25,000 apartments.Cardone referred to real estate as his "Trojan Horse" for allocating Bitcoin and introduced Cardone Capital's Bitcoin real estate trading model, which relies on property cash flow to continuously increase Bitcoin holdings, with a target of growing from 3,000 to 25,000 Bitcoins. He stated that traditional REITs cannot hold Bitcoin, which creates a competitive barrier for the company, and believes that Bitcoin and real estate are an ideal mixed asset. He also discussed Michael Saylor's related views and a $335 million transaction located in Boca Raton, and responded to questions about whether Cardone Capital would go public.

Bitget stated that the vulnerabilities related to the security incident discovered on September 24 have been confirmed and fixed. The platform will gradually resume withdrawals after completing further security checks. Mandiant, a cybersecurity company under Google, and Slow Mist Technology are assisting in the investigation.The resumption schedule is as follows (UTC):September 28, 8:00: Bitcoin network BTCSeptember 29, 8:00: Ethereum, BNB Smart Chain, Arbitrum, Base, Optimism network ETHSeptember 30, 8:00: Ethereum, BNB Smart Chain, Solana, Tron network USDTOctober 2, 8:00: Other tokens, fiat currencies, and peer-to-peer transactionsBitget mentioned that the suspension of withdrawals is a temporary security measure and is unrelated to the availability of user assets; account balances have not been affected, and the protection fund will cover the financial impact caused by this platform-level incident. The situation is currently under control, and unauthorized transfers will not occur again. Trading and deposit services are still operating normally. Users do not need to take any action in advance; the specific reopening situation will be subject to notifications from the platform and official channels.

OpenSea Chief Technology Officer (CTO) Chris Maddern posted on the X platform in response to the impact of the security incident involving Magic Eden and Limit Break, emphasizing that OpenSea's systems and smart contracts have not been affected. Currently, the affected ERC-721 NFTs have been marked on OpenSea and cannot be sold.For any newly discovered exploited NFTs, OpenSea will also automatically mark them to restrict attackers from obtaining related offers.

Magic Eden announced that the vulnerability occurred in the NFT trading protocol Payment Processor V2 maintained by Limit Break. Magic Eden adopted this protocol for EVM network transaction settlements in 2024 but stopped using V2 in October 2024 and will completely shut down the EVM market in the first quarter of 2026. Therefore, NFTs currently listed on Magic Eden are not affected by this vulnerability.NFTs listed through its EVM market between February and October 2024 may be affected, while listings after October 2024 are generally not impacted. The platform is contacting the protocol owner and maintainer Limit Break to explore other risk mitigation measures, including pausing protocol transfers, and will continue to investigate the actual scope of the impact.Magic Eden reminds users who have listed or traded NFTs on its EVM market to revoke relevant contract authorizations on the Ethereum, Polygon, and Base networks. Users can filter the address through revoke.cash and revoke all authorizations marked as "approved for all" for NFTs. Magic Eden emphasizes that revoking authorization cannot recover assets that have already been transferred.Yuga Labs' Vice President of Blockchain Quit stated today that at 9 AM Eastern Time, attackers exploited the Payment Processor V2 vulnerability to steal a large number of NFTs. After contacting the LimitBreak team, the latter quickly paused the similarly affected Payment Processor V3. However, V2 could not be paused, and V3 on ApeChain is also temporarily unable to be paused. Therefore, the team implemented a white-hat operation, successfully transferring and protecting 23,155 NFTs valued at over 5.7 million dollars.