usp

On October 2, at 11:30 AM Eastern Time, the Arbitrum Security Committee executed an emergency upgrade on Arbitrum One and Nova, suspending the activation of all new Stylus contracts on both chains, while adding a protective mechanism against BoLD single-step proofs in the dispute system of Arbitrum One. The Arbitrum Foundation stated that this action is part of ongoing proactive security measures aimed at protecting the security and integrity of the network.Stylus allows developers to write smart contracts using languages such as Rust and C++, while maintaining compatibility with the Ethereum Virtual Machine, with its programs compiled into WebAssembly format. This suspension primarily targets manually written WASM programs that do not use the standard Stylus compiler toolchain and have not yet been patched by the current version of ArbOS. The Security Committee increased the gas required for activation to the theoretical maximum by calling ArbOwner.setWasmActivationGas(2^64 - 1), making new activations economically unfeasible. Activated Stylus contracts are unaffected and can continue to execute and renew, and the deployment and execution of Solidity contracts are also unrestricted.The newly added BoLD protection allows anyone to pause the settlement from Arbitrum One to Ethereum when two conflicting and accepted answers appear in the same dispute step, which may delay unconfirmed withdrawals to allow the Security Committee to deploy fixes. Officials pointed out that the currently discovered Stylus-related vulnerabilities mainly affect the activity of the chain, such as denial-of-service attacks, and do not jeopardize user funds.

According to the official announcement, Binance has announced that due to its partner brokerage's system upgrade, stock trading on the Binance platform will be temporarily suspended.During this period, users will not be able to place stock trades. The system upgrade window is from October 3, 2026, 19:00 to 20:00.

The Hong Kong Securities and Futures Commission has included FNXAI token and 1FNXAI token in the list of suspicious investment products related to digital tokens.The Hong Kong Securities and Futures Commission stated that the related products claim that investors can automate trading of U.S. stocks and a range of financial instruments through an AI-driven trading platform to generate stable returns, and involve staking arrangements related to virtual assets.

According to Fortune, the U.S. Securities and Exchange Commission (SEC) has filed lawsuits against two private fund cases, accusing the relevant fund advisors of raising funds under the pretext of investing in popular tech companies like OpenAI and SpaceX before their IPOs, but allegedly providing false information to investors and misappropriating some of the funds.The SEC stated that Meyer Global Management and its head Owen Meyer are suspected of raising at least $18.5 million from nearly 100 investors to purchase shares of companies before their IPOs, but misappropriated at least $1.27 million, including using fund money for personal consumption, paying entertainment expenses, and personal investments. Among them, the SEC accused Meyer of establishing a fund for investing in shares of OpenAI and SpaceX, but some of the funds did not actually hold the relevant assets.In another case, the SEC and federal prosecutors accused Beyond Alpha Ventures heads Christopher Dinelli and Jacob Frankel of raising over $8.7 million from 35 investors and falsely promoting that the fund held shares in companies like SpaceX and xAI.The SEC stated that the two provided false investment reports, with some of the funds being used for options trading, film investments, and personal use. The SEC emphasized that the accused tech companies and their management have not been found to have engaged in misconduct. Regulatory agencies have been continuously monitoring investment products that promote "acquiring shares before popular private company IPOs" and have launched multiple enforcement actions against relevant private fund advisors.

According to Al Arabiya TV, the Iraqi Hezbollah announced that with the end of the coalition mission, all military operations will be suspended starting today, and negotiations will begin regarding the issue of weapons.

CoinBureau cites on-chain investigator ZachXBT, stating that suspected North Korean attackers are using Zcash to obscure the stolen funds from Bitget. Approximately 2,700 ZEC, worth about 3.8 million dollars, have begun to be transferred to Zcash's Ironwood.These stolen ZEC are being moved into a shielding pool, where transaction details can be hidden. In a security incident involving various assets totaling about 388 million dollars, approximately 18,900 ZEC, worth about 28.3 million dollars, were stolen. Previously, Bitget's CEO Gracy Chen expressed that she is "not very optimistic" about recovering the stolen funds.

According to a report by Fabien Arnaud from the French media Midi Libre, a resident in Saint-Jean-de-Védas near Montpellier, France, was the victim of a home invasion and extortion related to cryptocurrency. The police acted quickly after the incident and have arrested three suspects.It is reported that the victim had previously encountered a similar violent extortion related to cryptocurrency on April 11 of this year.

The fee-sharing platform Paid announced that its web application portal is now online. Users can claim eligible new fees, and the related assets will be distributed according to the quoted assets corresponding to the fees, which are mostly SOL.Paid stated that other claiming methods will be introduced later, including through private messages or tagging the official account in posts. X Money payments are still suspended, and the recovery time will be notified separately; users' historical balances will be retained independently, and the team is developing a separate claiming plan for this portion of the balance, hoping to restore X Money payments in the future.

According to on-chain analyst Ai Yi's monitoring, smart money with nearly 1 million dollars in floating profit from Niulai single currency is suspected to have fully liquidated. The address 0x248...A6990 bought 10.26 million Niulai at 0.02892 dollars on August 17 and after holding for 44 days, transferred all tokens to Binance one hour ago (1.181 million dollars).If sold, it would profit over 885,000 dollars, with that portion once having a floating profit of 1.365 million dollars.

OpenAI has suspended the training of its latest AI model. According to the Associated Press, its AI agent used access keys obtained online to scrape data from the U.S. Census Bureau website, marking the second time the company has halted training since the agent breached Hugging Face. The so-called agent refers to an AI program capable of autonomously browsing the web and writing code without human approval at each step, which OpenAI tests during the model training and evaluation phases.Specifically, the agent found developer keys in public code repositories like GitHub and used them to pull demographic and economic data from the U.S. Census Data API. The U.S. Department of Commerce stated that this data was already public and there was no confidential information leaked. In the SEC incident, the agent copied public materials from SEC.gov and Investor.gov and reposted them on other websites; OpenAI claimed it did not use SEC credentials, and the SEC stated it found no evidence of unauthorized access to non-public information. Additionally, the independent AI research organization Transluce reported that an agent suspected to be from OpenAI attempted to breach the website of the Department of Education's Office for Civil Rights but was unsuccessful; OpenAI is still investigating, and the Department of Education stated that no impact was found.Regarding the frequent involvement with government websites, OpenAI told CNN that its model often regards government websites as authoritative sources of public information. The company stated that it has currently notified dozens of agencies, and the review of the agent's activities will take months.

UsePaid posted on X that X Money payments have currently been suspended, and the team is addressing the payment issues. Existing balances remain secure, and related fees will continue to accumulate.UsePaid stated that before restoring full payment services, a web portal will be launched as a temporary fund application channel, and they are committed to resuming payment operations as soon as possible.

According to on-chain analyst @ai_9684xtpa, a whale that built a position of 130,591 ETH in 2023 is suspected of liquidating its holdings.This whale transferred 16,919 ETH to a trading platform 3 hours ago, worth approximately 45.85 million USD; in the past week, it has transferred a total of 128,972.05 ETH to the trading platform, valued at about 345 million USD based on an average transfer price of 2,680.31 USD.If all of the above ETH is sold, the whale is expected to profit approximately 84.31 million USD. After this transfer, the on-chain ETH balance of this entity has been cleared.

According to the French newspaper Le Monde, a 45-year-old woman born in Russia and naturalized in France in 2017, Svetlana A., has recently been placed under investigation and detained by a Paris investigating judge on charges of organized fraud, serious money laundering, and participation in a criminal gang. The French National Financial Prosecutor's Office stated that she and her British partner Robert H. are suspected of committing organized fraud by manipulating cryptocurrency prices, with the related funds suspected to be used for purchasing properties in Dubai.Reports indicate that Svetlana A. invested over 50 million euros in 2022 alone, acquiring about 100 apartments and 3 luxury villas in Dubai, with total rental income from 2022 to 2025 expected to be at least 4 million euros; she also purchased an entire building containing 73 apartments for 68 million dirhams (approximately 17.4 million euros). The cryptocurrency mentioned in the report is Verasity (VRA), launched by her partner in 2018. The price of VRA surged 65 times over a two-and-a-half-month period in the spring of 2021, followed by a significant decline, currently down approximately 99.98% from its historical peak. The lawyer for the parties involved stated that the sources of the related wealth are documented and legal, and they deny any wrongdoing. The case is still under investigation.

According to Lookonchain monitoring, about 11 hours ago, a certain address withdrew 257.6 ETH from Binance, worth 692,000 USD, and 545,000 USDT, then exchanged 545,000 USDT for 200.2 ETH. About 1 hour ago, the address transferred all 457.9 ETH, worth 1,230,000 USD, into the Bitget hacker wallet.

Bitget stated that the withdrawal recovery plan will be announced before September 26 at 4:00 UTC (12:00 Beijing time) and thanked users for their patience.Bitget previously confirmed that approximately $387.5 million in assets were transferred to addresses controlled by attackers during this security incident, involving assets such as ETH, XRP, USDT, ZEC, USDC, USDT0, XAUt, BNB, AVAX, and TRX.Bitget claimed that the incident is currently under control, and no further unauthorized transfers have been detected. Withdrawals are temporarily suspended, and investigations and asset tracking are still ongoing.

The NFT market Magic Eden appears to have a security vulnerability, with white hat hackers transferring 3,832 NFTs from hundreds of wallets.Quit, the Vice President of Blockchain at Yuga Labs, stated that this transfer is part of a white hat operation. The related NFTs are currently stored in an address starting with "0x71cF," and the assets are in a secure state. They will be returned in full once the risk is eliminated.

Bitget CEO Gracy Chen stated during a live Q&A on platform security incidents that preliminary investigations found that some related IP addresses matched a VPN service used by a North Korean hacker organization, and the attack patterns were similar to previous actions by North Korean hackers. Therefore, the involvement of this organization in the attack, which involves approximately $351.6 million, cannot be ruled out. The relevant attribution is still in the preliminary investigation stage.Gracy Chen indicated that Bitget currently does not believe this incident was caused by internal personnel. The attackers directly infiltrated the platform's system and transferred funds, without forging user withdrawal requests, and did not obtain the private keys of cold wallets or hot wallets. Investigators are still confirming the specific affected systems and the method of the attackers' intrusion.

According to Decrypt, on-chain data shows that approximately $183 million in crypto assets flowed from a wallet marked as Bitget to a newly created address. Bubblemaps and Arkham analysts flagged this unusual activity on September 24, stating that Bitget may have been hacked. The funds were transferred from the exchange's hot and cold wallet reserves within about an hour, involving tokens such as ETH, USDT, USDC, AVAX, BNB, and XAUT.The first anomaly came from the hot wallet. A new address starting with 0xe410 utilized $19.67 million in USDT within 6 minutes, exchanging it for 7,111 ETH through UniswapX and 1inch Fusion, with the transaction price about 5% higher than the market price. On-chain researcher DCF GOD pointed out that subsequently, more wallets marked as Bitget transferred ETH, AVAX, BNB, USDC, USDT, and XAUT to the same address. The outflow of funds stopped about 6 minutes after the first suspicious transaction and remained silent for at least 20 minutes thereafter.Some users reported that withdrawals were blocked, and Bitget has not issued a public statement nor responded immediately to Decrypt's request for comment. On-chain analysts stated that the marked Bitget wallets still hold approximately $500 million in assets. Bitget had launched a $300 million protection fund in 2023 to cover losses from hacks, thefts, and other incidents.

According to monitoring by Scam Sniffer, Duelbits has experienced approximately $4.2 million in fund outflows from hot wallets on the Ethereum, BSC, and Tron networks, suspected to be related to a private key leak.The transferred assets include 836 ETH, 1.62 million USDT, 97,000 USDC, 209 BNB, and 192,000 TRX. Currently, most of the transferred assets have been converted to ETH.

According to Specter Investigation monitoring, the privacy stablecoin payment network Payy Network is suspected to have been attacked, with approximately 1.8 million USDC transferred away.The attacker previously obtained initial funds through the privacy protocol Railgun, then exchanged the stolen USDC for ETH and dispersed the funds to three addresses.