security

NEAR Protocol posted on platform X that Sal Ternullo, CEO of NEAR Treasury Company SVRN, has introduced a new proposal on the NEAR governance forum to reduce the maximum annual token issuance rate from 2.5% to 1.6% for a duration of 24 months, and to lower the staking yield from the current approximately 5.4% to about 3.5%.The proposal is currently seeking feedback from validators, House of Stake delegators, and NEAR community members, with a complete plan expected to be announced next week for voting.In response to the recent NEAR Intents security incident, NEAR Protocol further clarified that the blockchain network is operating normally, and the related incident was not caused by vulnerabilities in NEAR Protocol or the native token NEAR. The NEAR Protocol network continues to produce blocks and process transactions without any downtime.

According to Cointelegraph, the Ministry of State Security of China issued a statement accusing cryptocurrencies of being used by foreign forces for espionage and money laundering, emphasizing their non-anonymity.Data from the same period shows that Singapore's crypto economy grew against the trend by 55.4% to $284 billion, maintaining its position as the regional leader.

The California Attorney General stated that their office is seeking further inquiries from OpenAI regarding cybersecurity incidents and risks involving the company and its AI models.

MetaMask has released a follow-up statement regarding the previously disclosed infrastructure security incidents, stating that the team is continuously conducting investigations and addressing the issues.MetaMask stated that to ensure user safety, it has collaborated with relevant partners to take preventive measures and is currently withdrawing the affected validator nodes from its non-custodial staking business. According to the investigation results so far, there is no indication that MetaMask wallets or customer funds have been affected.This morning, part of the infrastructure of MetaMask's non-custodial staking business encountered a security incident. As a precaution, the validators operating on Lido have begun to withdraw.

The CertiK security data dashboard shows that a total of 247 security incidents occurred in the third quarter of 2026, an increase of 12.8% compared to the previous quarter; the total loss was approximately 1.26 billion USD, an increase of 53.9% from 819.4 million USD in the second quarter.

Renzo Finance responded to the MetaMask infrastructure security incident, stating that the risks and liquidity of its latest product, Renzo Basis, will not be concentrated in stablecoins or vaults and can be fully verified through on-chain data. Therefore, users do not need to rely on trust in Renzo to confirm that they are not affected by the incident.Renzo stated that ezETH will only be supported by native ETH starting from April 2026. Currently, there are only 214.75 stETH in the withdrawal queue (accounting for 0.5%) with valid claims.Previously, MetaMask indicated that it is handling a security incident affecting some infrastructure, and no immediate threat to MetaMask wallets has been identified. As a precaution, MetaMask is coordinating with customers, partners, and security consultants to proactively withdraw affected validators from its non-custodial staking business and will provide further updates in due course.

The official ether.fi account posted on the X platform, stating that it has learned about a previous security incident related to Ethereum node operators. WEETH has no risk exposure and will not be affected. All funds are safe.Metamask announced earlier today that it is dealing with a security incident affecting some of Metamask's infrastructure. No direct threats to the MetaMask wallet have been identified at this time.As a precaution, Metamask is actively working with customers, partners, and security consultants to withdraw affected validators to maintain the security of Metamask's non-custodial staking business.

Ethena founder Guy Young posted on social media that he is aware of the current "security incident involving a certain Ethereum node operator."The supported assets of USDe currently do not include any direct exposure to stETH or any other liquid staking tokens. It is expected that there will be no impact on Ethena.

According to CryptoBriefing, the second round of funding for ETHSecurity Initiatives under TheDAO Security Fund has been launched, with a grant of $600,000 allocated for the formal verification of the Vyper compiler. Vyper is the smart contract language for protocols such as Curve, Yearn, and Lido.The fund originates from unclaimed ETH converted from the 2016 DAO incident, with the Ethereum Foundation publicly expressing support.

Solv Protocol recently released a statement regarding the controversy over single redemptions of BTC+, stating that the subscription and redemption mechanism for BTC+ is currently operating normally, and the related incident was triggered by a single transaction that activated risk control review.Solv indicated that the assets related to the involved BTC+ are still fully retained within the protocol and have not been transferred, destroyed, or disposed of, and are undergoing review according to established risk control procedures. The official emphasized that the handling of the case will be based on verifiable information and evidence, and judgments will not be made based on social media identities or unilateral public statements. If necessary, they will cooperate with legal and judicial procedures while continuing to ensure the normal operation of BTC+ with asset security and unified risk control standards.

The digital asset post-quantum security infrastructure company Project Eleven announced the acquisition of Riva Labs to enhance its capabilities in post-quantum signatures, wallets, multi-party computation (MPC), and account abstraction. This acquisition also includes the technology and intellectual property developed by Riva on Ethereum and other public chains.Riva Labs' work encompasses hash-based post-quantum signatures, post-quantum MPC, account abstraction, wallet infrastructure, and hardware signing, and has demonstrated post-quantum signatures on consumer-grade hardware. Project Eleven stated that the relevant teams and technologies will be integrated into its research and product work in post-quantum cryptography, digital asset custody, and blockchain security. Riva will also bring its practices of using artificial intelligence in research and engineering processes into the company.Project Eleven's CEO and co-founder Alex Pruden stated that the acquisition will strengthen the research and engineering teams and accelerate the transition of digital assets to post-quantum security. Riva Labs co-founder Matteo Vena mentioned that both parties share a similar judgment on the tools needed in the industry, and joining Project Eleven will allow for a larger-scale advancement of public chain upgrades.

OpenAI CEO Altman stated that Nvidia's security system is not foolproof.

According to Techcrunch, AI security startup Reco announced the completion of a new round of financing of $55 million, which is an extension round based on its $30 million Series B financing in February, with participation from AT&T Ventures, Forestay, and Quadrille Capital.After this round of financing, the company's total funding amount has reached $140 million. Reco co-founder and CEO Ofer Klein stated that since the initial announcement of the Series B round, the company's valuation has "more than doubled."

According to the official announcement, the Bitcoin sidechain Liquid Network developed by Blockstream has initiated an independent external security audit for Elements v23.3.4, providing additional security verification for the recovery of Peg-out operations.Meanwhile, the Liquid Federation is coordinating an update to the PAK list, including replacing existing key entries and ensuring that all Peg-out keys are securely stored in cold wallets. The official statement indicates that progress on the recovery will be announced later.

The Arbitrum Foundation announced the launch of the Arbitrum Security Program, providing smart contract audit subsidies for teams building projects on the Arbitrum platform, covering applications on the testnet, mainnet projects, projects migrating from other blockchains, and exclusive Arbitrum chains.

On Monday, the oracle network Chainlink released the cross-chain interoperability protocol CCIP 2, making significant upgrades to its communication and cross-chain bridge infrastructure. The new version allows enterprises to add their own security verification checks on top of Chainlink's default network of 16 independent node operators. Enterprises can run their own validators or hire external service providers such as Infosys and Nethermind. Chainlink stated that users should not be forced to become "cross-chain security infrastructure experts."This upgrade comes about five months after the Kelp DAO was hacked in April of this year. The attackers are reportedly linked to the North Korean Lazarus group, stealing approximately $292 million in rsETH by deceiving the single validator relied upon by the Kelp cross-chain bridge, which operates on LayerZero. LayerZero blamed Kelp for using only a single validator, while Kelp stated that LayerZero employees had reviewed its setup and raised no objections. Kelp subsequently announced that it would migrate rsETH to Chainlink.The upgrade also adjusts the security mechanism that Chainlink had previously heavily promoted; its risk management network will no longer operate as an independent review node, with such independent checks now provided by optional validators. This means that users who have not added any validators currently rely on a single validation network, whereas previously they relied on two. Existing Chainlink users have been automatically migrated to the new version, but the company has not disclosed which institutions are using the new validators, only stating that Aave and Maple have begun adopting other features of the upgrade.

NVIDIA (NVDA.O) launched an open intelligent agent security platform, ensuring the safety of intelligent agents throughout the entire process from testing to deployment.