cati

The cross-chain exchange protocol NEAR Intents released a post-mortem report attributing a $3.8 million vulnerability to a flaw in the deposit notification feature. The protocol deploys a public settlement contract on NEAR that maintains an internal ledger of deposited tokens, while withdrawals transfer tokens out via a cross-chain bridge. The report was published by NEAR Intents General Manager Alex Shevchenko on October 16, stating that the attacker withdrew $3.8 million before the protocol was shut down on October 1 and returned all funds within 36 hours of detection, with all affected users fully compensated.The report indicates that the feature notifies third-party contracts when tokens are deposited. The attacker created a contract that intentionally caused the notification to fail, allowing the token contract to refund the deposit while NEAR Intents retained the corresponding ledger credit. Through 23 failed deposit transactions, the attacker accumulated $3.8 million in unsupported balance, referred to in the report as ghost funds, and subsequently withdrew real tokens based on this and transferred them to other chains via the Omni infrastructure. Shevchenko stated that this was a vulnerability in the NEAR Intents contract, not in the Omni infrastructure.Withdrawals occurred between September 29 and October 1. The settlement contract was paused and reopened on October 1, with affected routes gradually restored, and contract-side deposits resumed on October 2. The report noted that the vulnerability went undetected because monitoring only compared the original chain assets with the total balance of NEAR side tokens, without comparing the total internal user balances with the actual tokens held by the contract; the team has since added this check and will automatically pause the contract when there is a balance inconsistency. The fix for the October vulnerability was deployed on October 2, but another serious vulnerability report regarding the same feature prompted its complete removal on October 7, with the relevant researcher receiving a $300,000 reward.

According to Bitcoin.com, asset management company Vaneck has applied to the U.S. Securities and Exchange Commission (SEC) to withdraw the registration documents for the Lido Staked Ethereum ETF. The document is dated October 14, 2026, the registration statement never became effective, and the fund has not sold any shares.The product was originally planned to hold liquid staking tokens stETH issued by the Lido protocol, rather than staking Ethereum directly through designated validators. The total locked value of Lido is currently about $23.6 billion, down from $33.3 billion a year ago.BlackRock launched ETHB, which stakes Ethereum directly through validators, in March 2026, with a net asset value of $409.8 million as of March 31.

Xiechuang Data stated that its subsidiary has obtained the NVIDIA NCP Advanced Cloud Partner certification, granting it priority access to computing resource allocation.The company has established stable partnerships with several leading domestic server suppliers to ensure smooth procurement channels for computing equipment.

According to Coinglass data, the cryptocurrency Fear and Greed Index is currently at 64, up 12 points from yesterday. The average over the past 7 days is 60, and the average over the past 30 days is 67.

Ant International and Huaxia Fund (Hong Kong) jointly announced that Ant International has recently completed the allocation of the Huaxia Renminbi Digital Currency Fund (3461.HK / 83461.HK) and has incorporated it into its treasury allocation.The related fund transfer was initiated by Ant International at the Shanghai Pudong Branch of China Construction Bank, with digital renminbi assets being transferred in real-time from Shanghai to Hong Kong, ultimately deposited into the relevant account at Standard Chartered Bank (Hong Kong), and the fund allocation completed in offshore renminbi, achieving a full-link connection for cross-border allocation of digital renminbi and investment in offshore renminbi assets.The announcement stated that this practice opens up the channel for offshore asset management of digital renminbi and corporate treasury applications, and verifies the feasibility of digital renminbi in the cross-border fund allocation scenario between Shanghai and Hong Kong. The above news was reported by Huang Xinyi from the Science and Technology Innovation Board Daily.

Recently, Gate founder and CEO Dr. Han accepted an exclusive interview with the cryptocurrency media Bitcoin.com, reflecting on Gate's journey from developing its underlying trading system in 2013 to becoming a platform serving over 61 million users across more than 130 countries and regions. He further elaborated on the strategic vision of the TOKEN2049 keynote speech "One Gate, Everything Money."Dr. Han stated that in the face of the long-standing barriers between traditional finance and the cryptocurrency market, users have often faced the dilemma of fragmented capital management. They not only need to frequently transfer funds between banks, brokerages, and cryptocurrency platforms but also have to keep a large amount of cash idle in bank accounts, suffering losses from inflation and lack of returns. Meanwhile, high-quality assets like stocks and gold are difficult to consume immediately due to liquidity constraints.To address this industry pain point, Gate officially launched the integrated financial application Gate Money, which consolidates fiat currency, cryptocurrency assets, gold, ETFs, and over 12,800 global stocks into a single account. Users no longer need to hold large amounts of low-yield idle cash and can allocate capital to high-quality assets with value preservation and appreciation potential. When a consumption demand arises, the system will instantly convert the corresponding assets into fiat currency for payment, keeping the funds in an investment state before consumption.

According to Bloomberg, Jeff Yan, co-founder of Hyperliquid Labs, is seeking the United States to establish rules that can protect its blockchain.He believes that the regulatory responsibilities of Hyperliquid should fall on the financial institutions operating in the market based on that blockchain, namely the application layer, rather than on the blockchain network itself. This regulatory division would allow Hyperliquid to enter Wall Street without having to bear the full compliance burden of traditional exchanges.

Federal District Judge Alvin Hellerstein in New York dismissed the joint application of Gemini and the Commodity Futures Trading Commission (CFTC) to revoke the $5 million settlement agreement. Gemini and the CFTC had stated in May that the settlement agreement reached in January 2025 violated the fundamental principles of fair enforcement.The judge ruled that the aforementioned reasons were insufficient to support the revocation of the settlement and noted that Gemini voluntarily signed the agreement three weeks before the trial.

According to Cointelegraph, Nasdaq-listed TRX treasury company Tron has submitted documents to the U.S. Securities and Exchange Commission to establish a new stock issuance plan at market price, allowing it to sell up to $200 million in common stock to fund a larger TRX treasury.According to the supplemental prospectus filed on Wednesday, Tron can regularly sell common stock with a par value of $0.0001 through Clear Street as an agent, with Clear Street charging a commission of up to 3% of the total amount raised.The existing TRX buyback plan announced by the company in February this year aims to purchase approximately $50,000 of TRX daily for 360 consecutive days. On Thursday, Tron purchased 149,369 TRX at an average price of $0.3347, and the treasury currently holds a total of 718.9 million TRX, valued at approximately $237 million. On the same day, the company's stock price opened down 4.7%, continuing its decline of about 67% over the past 12 months.

SpaceX announced the acquisition of wireless spectrum to provide mobile communication services through Starlink satellites, potentially becoming a major mobile operator. This move led to double-digit percentage declines in the stock prices of Verizon Communications, AT&T, and T-Mobile US last Friday.

According to Gate market data, U.S. pre-market S&P 500 mini index futures fell 0.3%, Nasdaq 100 index futures fell 1.1%, and Dow Jones index futures rose 0.3%. The "Seven Sisters" concept stocks and the optical communication sector saw widespread declines, while the biotechnology sector saw widespread gains.NVIDIA fell 1.54%, Apple rose 0.76%, Microsoft fell 0.46%, Google fell 1.58%, Amazon fell 1.47%, Meta fell 1.47%, and Tesla fell 1.40%.Lumentum fell 3.50%, Corning fell 3.28%, Coherent fell 3.34%, Applied Optoelectronics fell 3.15%, Ciena fell 3.14%, Broadcom fell 1.77%, and Marvell Technology fell 2.80%; Eli Lilly rose 1.25%, Johnson & Johnson rose 1.76%, Moderna fell 1.67%, Novo Nordisk rose 1.20%, AbbVie rose 1.00%, and Merck rose 1.23%.

According to Coinglass data, the cryptocurrency Fear and Greed Index is currently at 52, down 11 points from yesterday. The average over the past 7 days is 60, and the average over the past 30 days is 66.

According to market news, the cryptocurrency exchange under the Lotte Group, Lotte Wallet, launched a new version of its Android app on October 14, integrating spot and margin trading, with the iOS version to be released later.The two existing independent applications are scheduled to cease operations in early 2027. The new version only supports Passkey login, includes an AI virtual assistant that can answer market information and operational questions, and supports the use of regular Lotte points to purchase cryptocurrencies.

Chainlink's Data Feeds and Data Streams have officially launched on the Stellar network.Stellar stated that developers can use this to access reliable market data, develop lending markets, prediction markets, perpetual contracts, and other DeFi applications, further enhancing the utility of Stellar's over $4 billion RWA ecosystem.

According to Bitcoin News monitoring, a German Ledger user @jayr_crypto reported receiving a forged letter again this week. The letter impersonates Ledger, claiming that new regulations require users to register their Bitcoin wallets through a service called ZenLedger by October 31. The letter uses Ledger's official branding elements and mentions German financial regulators, while also including a QR code that directs users to a so-called mandatory registration process.The user believes that addresses exposed in a previous data breach are being used for targeted attacks on Ledger users. In the same week, Ledger coordinated with MediaMarktSaturn to suspend the sale of its hardware wallets in a European retail network covering 11 countries and over 1,000 stores.Earlier reports indicated that malicious spy implants were found inside Ledger devices purchased from European retailers. Ledger confirmed separately that compromised devices sold by a Southeast Asian distributor contained implants capable of stealing recovery phrases and transmitting them over cellular networks. Ledger has not confirmed any breaches of devices in Europe. Ledger users are currently facing physical supply chain tampering and targeted phishing attacks initiated using home addresses. Do not scan suspicious QR codes or enter recovery phrases.

According to the official blog of Avalanche, the Dubai International Financial Centre (DIFC) court has announced the adoption of Avalanche blockchain technology to provide globally verifiable digital authenticity certificates for its court orders and hearing records.The system binds encrypted hashes of documents to unique NFT certificates on the Avalanche C-Chain, allowing any institution to verify document authenticity within seconds without contacting the court, while the document content and confidential information are not stored on-chain, maintaining complete privacy.Avalanche's settlement speed is less than one second, and records are non-reversible. In addition, the Telecommunications and Digital Government Regulatory Authority (TDRA) of the UAE is also collaborating with Ava Labs to integrate Avalanche technology into the Digital Vault blockchain layer of the national digital identity platform UAE PASS, which serves over 12.5 million users, further promoting the construction of a credible verification system for government documents on-chain in the UAE.

According to on-chain analyst AI Yi's monitoring, the TRUMP team allocated an address that transferred 11.78 million dollars worth of tokens to a new address after 12 days, which may be deposited into an exchange.Twelve days ago, he transferred 8.87 million dollars worth of Solana to the address 52RDq...rkaD1: 6p6xgHyF7AeE6TZkSmFsko444wqoP15icUSqi2jfGiPN. This portion of tokens was subsequently deposited into OKX through two addresses.

According to Coinglass data, the cryptocurrency Fear and Greed Index is currently at 63, up 7 points from yesterday. The average over the past 7 days is 61, and the average over the past 30 days is 67.

The institutional settlement network Lynq, aimed at the digital asset market, and the stablecoin clearinghouse The Better Money Company (TBMC) announced the completion of a real-time proof of concept, demonstrating that institutional settlements can be completed in minutes. This proof of concept is part of the first phase of collaboration between the two parties, utilizing a pre-funded process to complete stablecoin settlements on Lynq.In the proof of concept, TBMC converted assets deposited by clients on Lynq into RLUSD, with settlements completed in minutes. The validation used real production accounts and real institutional counterparties, bypassing traditional banking windows during the settlement process. Interest continued to accrue on the assets during the settlement holding period, calculated using Tassat's Yield in Transit feature, determining accrued interest based on the duration of asset holdings.TBMC founder and CEO Sam Broner stated: "For stablecoins to become meaningful institutional infrastructure, they need to enter real settlement processes; this validation shows that stablecoin fragmentation can be handled through on-chain collateral transfer without relying on credit and traditional banking settlements for connection." Lynq CEO Jerald David remarked: "Institutions are not lacking in capital; what they lack is the ability to move funds to the right place in the right form when needed; this validation was intentionally kept small in scale, but it shows that digital dollars can settle between institutions in minutes, without substituting speed with credit convenience." Lynq stated that the platform's native stablecoin support is currently targeted for the end of 2026.

According to Decrypt, the Federal Bureau of Investigation (FBI) arrested OpenAI engineer Abdulrahman Alfozan on October 9. The suspect, 35 years old and of Saudi nationality, has been employed at OpenAI since July 2025 and is accused of using or attempting to use devices to intercept oral communications. He made his first appearance in federal court this Tuesday. OpenAI stated that it has referred the matter to the FBI and thanked the relevant agents and prosecutors for their swift action, while the FBI's investigation is ongoing.OpenAI released a statement on X, stating that the company discovered a sophisticated recording device hidden in the office and used its own model to analyze the device and its origin, ultimately identifying that an employee placed it there a few days prior. According to the criminal complaint, the device was discovered around September 30, plugged into a USB port on the back of a television, wrapped in paper towels, with its contents encrypted, and was installed around September 28. Surveillance footage showed that Alfozan was seen near the conference room multiple times before the device was discovered, but he had neither the authority to enter that room nor to attend the related meetings, which typically involved confidential technical and strategic information.The complaint states that before the device was installed, Alfozan used internal productivity tools to inquire about OpenAI's office building address, conference rooms, room capacities, schedules, and locations of meetings between executives and external partners. A chatbot account associated with his spouse asked between September 24 and 30 how to create a continuous recording device, add Wi-Fi connectivity, enhance real-time listening capabilities, and encrypt the device's SD card.