cover

Bitget's Greater China Regional Head, Xie Jiayin, tweeted in response to the previous attack incident, stating that the Bitget Protection Fund (currently over $464 million) can cover the losses from this attack, and user assets are unaffected.At 2:31 AM today, Bitget's security system detected abnormal transfers in some hot wallets. The security team immediately activated the emergency response mechanism. The confirmed situation includes: a preliminary assessment of the amount involved is approximately $351.6 million; the cold wallets and the vast majority of platform assets are intact and unaffected.Measures taken include: activating the emergency response team within minutes of the incident, marking and reporting the addresses involved in the abnormal transfers; temporarily disabling the withdrawal function for security reasons, which will be restored in an orderly manner after the security review is completed; notifying law enforcement and on-chain security agencies to intervene in the investigation. The team will provide continuous updates on the status every hour, and the official report will be released within 24 hours, including a root cause analysis and corrective measures. The official will not speculate on the method of attack until the investigation conclusions are clear.

Bitget CEO Gracy Chen stated during a live broadcast regarding the platform's attack incident that some of the affected funds may have a chance of being recovered. Regarding the resumption of withdrawals, Gracy Chen mentioned that Bitget needs to first investigate the relevant issues thoroughly. The technical team is currently working on system repairs and security enhancements. The platform will only reopen the withdrawal function once it confirms the system's security and ensures that resuming withdrawals will not lead to further attacks by hackers.She stated that once a clear timeline for the resumption of withdrawals is established, users will be informed immediately and an announcement will be made. Currently, it is not possible to promise a specific time, as the platform does not want to make commitments that cannot be fulfilled.

The cryptocurrency trading platform Bitget announced on its official X account that on September 24, 2026, at 18:31 (UTC), its security system detected unauthorized transfers from a small number of hot wallets. The security team has immediately initiated an emergency response procedure and started a comprehensive investigation.Bitget stated that, based on current assessments, approximately $351.6 million in assets are affected. Cold wallets and the vast majority of assets on the platform remain secure and unaffected, and user funds are still protected. The incident falls within the coverage of the user protection fund, which currently holds over $464 million.Bitget mentioned that customer account balances remain accurate, and deposits and transactions continue to operate normally. As a precautionary measure, withdrawals have been temporarily suspended to allow the team to complete a thorough security review. The company has identified and flagged the relevant transfer addresses, formally contacted law enforcement agencies and on-chain security partners, and will restore withdrawals as soon as safety is confirmed, providing subsequent updates through official channels while refraining from speculating on the attack path during the investigation.

According to Bitcoin News monitoring, this batch of Bitcoin is worth over 4 million dollars, accounting for about 2.8% of the total Bitcoin related to the Coldcard vulnerability. Crypto Recovery Trust will verify the ownership of the funds and attempt to return them.Alex Thorn, head of research at Galaxy Digital, stated that another 3.0134 BTC was transferred to that address in the same transaction, but its source has not yet been confirmed.

The President of Finland had requested Elon Musk to expand the coverage of Starlink in Russia and the occupied areas to help Ukraine combat Russia's ballistic missile launchers.

According to official news, Gate has launched the world's first stock event contract, expanding the underlying coverage from crypto assets to traditional stocks, supporting bullish or bearish trades in short cycles such as 5 minutes and 15 minutes.As a flexible and efficient short-term trading tool, the Gate event contract has four core advantages: in terms of risk control, the product features zero leverage and low risk, with no forced liquidation or margin call mechanism, and the maximum loss is limited to the initial invested principal; in terms of rules and mechanisms, the criteria for price rise and fall, settlement standards, and transaction fees are all open and transparent throughout the process; in terms of trading flexibility, it supports closing positions at any time, allowing users to control the pace, lock in profits, or stop losses in a timely manner; in terms of participation threshold, it only requires an investment of 5 USDT to start, helping investors quickly implement short-term strategies.Currently, the official incentive program has been launched simultaneously. The second phase of the Gate event contract limited-time trading competition officially started on September 21 at 16:00 (UTC+8) and will continue until October 1 at 08:00 (UTC+8). The event includes rewards for first trades and consecutive trades for new users, daily trading volume tiered rebates for all participants, and a grand prize for cumulative trading volume leaderboard, with participating users having the chance to win a prize pool of up to 12,500 USDT.

The Cosmos ecosystem protocol Neutron faced a governance proposal that was manipulated by an attacker. The related address spent approximately 20,199 USDC to buy NTRN and staked 31.6 million NTRN about 12 minutes before the voting ended, ultimately allowing the proposal to pass with an 82% approval rate. Subsequently, the management rights of 11 contracts were transferred to the attacker, and they migrated to malicious code, stealing approximately 4.4 million dollars in assets.To recover the funds, Cosmos Hub validators coordinated a chain halt for nearly 24 hours and 48 minutes, and during the restart process, approximately 1.23 million ATOM were transferred from the attacker's wallet to a new address, with plans to return them to the original holders.

The Binance Wallet's stablecoin fee payment feature now supports transfers on the TRON network, allowing users to not hold TRX.Starting today, when users transfer USDT and other TRC-20 tokens on the TRON network through Binance Wallet, they can directly select USDT as the network fee payer, without needing to hold TRX as Gas.For example, to send JST, users only need to open the Binance Wallet, click "Send" → "Select Token" → "Network Fee Payer" → "USDT," to complete the setup and have the network fee covered by USDT. This feature further simplifies the asset transfer process on the TRON network, lowering the threshold for users to hold native tokens, making cross-asset transfers easier and more convenient.

The President of the United States, Donald Trump, stated that he is working to restore smooth oil transportation in the Strait of Hormuz.

White hat actors transferred 40.71 bitcoins related to the Coldcard vulnerability into a single transaction, valued at approximately 3.31 million dollars. This transaction aggregated funds from 11 addresses and included OP_RETURN information pointing to the Crypto Recovery Trust.Alex Thorn, head of Galaxy Research, revealed that a larger aggregation transferred a total of 52.37 bitcoins, involving multiple clusters of attacker addresses, accounting for about 2.8% of the funds involved in the vulnerability. A firmware flaw in Coldcard devices from March 2021 led to insufficient randomness in the mnemonic phrases, with the peak amount of funds involved being approximately 130 million dollars.

According to CoinDesk, the European Central Bank (ECB) and the central banks of EU member states wish to prohibit crypto platforms from providing indirect yields on stablecoins through lending, staking, and other products. The European System of Central Banks (ESCB) stated in response to the European Commission's consultation on the review of the Markets in Crypto-Assets Regulation (MiCA) that electronic money should be used for payments rather than savings, continuing to support the prohibition of crypto asset service providers (CASP) from paying rewards for stablecoins, and that the ban should not be limited to services already regulated by MiCA but should also cover unregulated activities such as crypto lending, borrowing, and staking.Central banks believe that allowing indirect yields could blur the lines between electronic money and bank deposits, distorting the fair competitive environment of the EU financial system. The ESCB stated that maintaining and, when necessary, strengthening this ban, while covering both direct and indirect forms of rewards, should be a clear legislative priority. This position also echoes the controversy in the U.S. surrounding the Clarity Act, where eight U.S. banking groups urged senators to tighten the bill's restrictions on stablecoin rewards, which ultimately failed in a procedural vote of 49 to 50.In addition, central banks also proposed to eliminate the MiCA requirement for stablecoin issuers to hold part of their reserves in the form of bank deposits, replacing it with liquidity rules based on the liquidity of reserve assets. Currently, stablecoin issuers must keep at least 30% of their reserves in credit institutions, and this percentage rises to 60% for those classified as significant stablecoins. The ESCB suggested that significant stablecoins must allocate at least 40% of their reserves to assets maturing within one day and 60% to assets maturing within five working days, while the corresponding thresholds for non-significant stablecoins are 20% and 30%.

Bitcoin News posted on the X platform that Bitcoin Core developer Niklas Gögge warned that recent AI-driven vulnerability scanning is changing the security landscape of Bitcoin. Large language models have significantly reduced the cost of discovering vulnerabilities, allowing attackers to potentially find catastrophic vulnerabilities for just a few hundred dollars in computing costs.For Bitcoin Core, Project Loupe, the Bitcoin Red Team, and individual contributors have generated over 1,000 reports, but so far no high-risk or severe vulnerabilities have been found. Gögge stated that relying on stronger models to discover vulnerabilities before attackers is not a sustainable security strategy. Developers should build testing infrastructure that can proactively prevent entire classes of vulnerabilities through automated testing, fuzz testing, and property-based testing. Key components of Bitcoin Core have accumulated over 100 years of CPU fuzz testing and have undergone decades of Bitcoin node network simulation.

According to The Block, World is launching World Money, a self-custody financial super app that encompasses stablecoins, investments, yield, and global payment features, covering over 150 countries.The app integrates with Stripe, Kalshi, and Morpho, allowing users to unlock higher rewards through World ID verification. World was previously known as Worldcoin, co-founded by OpenAI CEO Sam Altman and others.

Standard Chartered Bank has initiated coverage of Arbitrum's ARB token, predicting it will rise from approximately $0.14 to $10 by the end of 2030, citing revenue from networks like Robinhood Chain.The bank also warns that ARB holders cannot directly share in Arbitrum's revenue, and there are risks such as a slowdown in the tokenization process and competition from peers.

The U.S. government oversight agency released a report acknowledging a shortage in the inventory of advanced weapons for the U.S. military, and disclosed the damage to military aircraft, military bases, and diplomatic facilities in the Middle East.The report pointed out that the war has led to a "strategic inventory shortage," exposing bottlenecks in the military-industrial capacity for ammunition replenishment. Experts estimate that it may take the U.S. military about three years to restore inventory to pre-war levels.

According to Business Insider, Discovery Loop, an AI startup founded by former Google Chief Scientist Jeff Dean after his departure, is undergoing a new round of financing with a target valuation of approximately $50 billion. Just weeks ago, the company completed a financing round of $1 billion at a valuation of about $10 billion.Discovery Loop is dedicated to automating experiments through AI, accelerating major discoveries in the fields of science and engineering. The first round of financing was led by Radical Ventures and Khosla Ventures, with participation from Lightspeed, Kleiner Perkins, and others. Alphabet was also a founding investor. The company's co-founder team consists of Google technology veterans, including Sanjay Ghemawat, Quoc Le, and Oriol Vinyals, who each have deep expertise in distributed computing, deep learning, and reinforcement learning, respectively.

According to Cointelegraph, the cross-chain liquidity protocol Symbiosis announced that it has recovered 15 BTC (approximately $1.1 million) from its Bitcoin bridge vulnerability and deposited it into a multi-signature wallet controlled by the team. The vulnerability occurred last Friday, where the attacker exploited the protocol's flaw to mint 46.1 billion uncollateralized tokens, resulting in a profit of 4.3 WBTC (approximately $336,000).Symbiosis had previously offered a 20% white hat bounty to the attacker for the return of the assets, but the deadline has passed, and the attacker has not responded. The protocol is now offering a 20% bounty to anyone who can provide clues to help recover the assets, while also promising to announce a compensation plan for affected liquidity providers. The affected Bitcoin bridging function remains suspended.

On September 14, the Japanese stock market's real estate, retail, and IT service sectors performed actively. According to Gate platform's Japanese stock market data, Rand (8918) rose by 10.00%, currently reported at approximately 0.07 USD; Kobe Bussan (3038) increased by 6.35%, currently reported at approximately 21.00 USD; SHIFT (3697) saw an increase of 6.05%, currently reported at approximately 6.00 USD.

The cross-chain protocol Chainflip disclosed that an attack incident targeting Tron USDT occurred yesterday. It has been confirmed that 736,442.17 USDT was stolen through 6 unauthorized payments, and an additional 115,654.41 USDT from user exchanges remains in the vault due to payment failures, while other funds were unaffected.Chainflip stated that the attacker exploited a vulnerability in the Tron transaction memo mechanism, attaching a custom memo to transactions that had already been signed by validators, causing the system to recognize the same deposit as a separate exchange and refund it again, ultimately leading to funds being paid out multiple times. The attacker executed 8 operations within approximately 90 minutes, gradually increasing the amounts. Chainflip claims to have completed a repair plan and has flagged the stolen funds to relevant authorities in an attempt to recover them, with operations expected to resume as early as Monday, and they will be responsible for compensating affected users for their losses.