cover

Slow Fog released a threat intelligence report stating that they recently received user feedback about a GitHub repository named sol-live, which disguises itself as a Solidity interview practice project. However, it hides commands in the .vscode/settings.json file to download and execute remote scripts, which may trigger malicious payloads when users start the project with custom terminal configurations.Slow Fog's analysis shows that the related malicious payloads can collect browser login databases, wallet extension storage, and macOS Keychain files. They also have the capability to scan and upload local files, execute remote commands, provide interactive Shell access, and monitor the clipboard. In macOS and Linux environments, the malicious terminal configuration must be actively initiated by the user to execute; the attack chain on Windows has not been confirmed due to issues with quote handling.

Blockchain security company Socket discovered 16 counterfeit Rabby and OKX wallet extensions on the Firefox browser. According to Socket, Mozilla removed these extensions before October 5.Socket pointed out that removing these malicious extensions does not ensure the safety of wallet users whose mnemonic phrases have already been compromised.

Interpol announced that from June 29 to August 31, 2026, it coordinated law enforcement agencies from 21 countries to carry out Operation "Serengeti III," targeting online fraud, ransomware, business email compromise, online scams, and digital extortion. The operation resulted in the arrest of 1,462 suspects, the dismantling of 10,909 malicious networks, and the recovery of over $105 million in illegal funds. Investigations confirmed 65,929 victims, with financial investigations linking losses exceeding $385 million.In Angola, law enforcement dismantled two illegal cryptocurrency mining centers, arrested 9 suspects, and seized over 2,000 cryptocurrency mining devices and 6 illegal power transformer stations, with the seized power infrastructure alone valued at over $1 million. In Nigeria, authorities arrested a suspect linked to large-scale phishing and business email compromise, with the operation collecting approximately 2.1 million email addresses and software credentials; another investigation uncovered an international investment scam promoted through instant messaging applications that transferred over $2.4 million in suspected criminal proceeds, most of which were laundered through cryptocurrency transactions.Neal Jetton, head of cybercrime at Interpol, stated that cybercrime networks disregard borders and exploit technology to target victims on an unprecedented scale; the operation demonstrates that despite the increasingly borderless nature of cybercrime, international cooperation remains an effective tool for dismantling criminal networks, recovering criminal assets, and protecting communities. The operation received support from private sector partners such as Group-IB, Kaspersky, Fortinet, and Meta, and was co-funded by the EU and the joint project GLACY-e of the European Commission.

According to a post by Ki Young Ju, founder and CEO of CryptoQuant, on the X platform, the continuous recovery of Bitcoin's hash rate is an "indirect bullish signal" from institutional investors. He pointed out that a higher hash rate means stronger security and better value storage fundamentals, and most publicly listed mining companies are supported by traditional financial institutions (TradFi). Therefore, the rise in hash rate can be seen as institutional recognition of Bitcoin's security and long-term value. Hash rate is an indicator of the computational power of a blockchain network, representing the number of hash calculations that can be completed per second.CryptoQuant data shows that Bitcoin's hash rate has rebounded by about 45% from its summer low, rising from approximately 726 EH/s in July to about 1,050 EH/s on Wednesday. However, the global hash rate is still below the peak of 1,305 EH/s set in October 2025, when Bitcoin's price was above $111,000. On Thursday, when the U.S. stock market opened, Bitcoin's price was approximately $81,843.Publicly listed mining companies are still expanding their production capacity. Nasdaq-listed NIP Group (NIPG) announced a third batch of asset purchase agreements, which will acquire approximately 4.47 EH/s of deployed Bitcoin mining machines. After the transaction is completed, the total hash rate from the three batches is expected to reach 13.85 EH/s. The company currently ranks 16th among publicly listed mining companies with an operational hash rate of 3.11 EH/s, while Bitdeer leads with 79.9 EH/s. On Wednesday, NIPG's stock price fell 6.8% to $6.1, down 86% over the past year; affected by higher-than-expected inflation data, U.S. stocks experienced the most severe sell-off since July, with TeraWulf, Core Scientific, Cipher Mining, and IREN all seeing stock prices drop by about 12%.

According to The Block, the crypto data analytics platform Dune has announced the launch of a real-time market data stream, with spot trading data available approximately 1 second after a transaction, covering over 200 on-chain trading platforms across 12 blockchain networks, including Solana, Ethereum, Base, BNB Chain, and X Layer; the perpetual contract data stream will track trades on Hyperliquid and Lighter.Fredrik Haga, co-founder and CEO of Dune, stated that on-chain transactions currently account for about 25% of the total volume of cryptocurrency spot trading, and as the trading of tokenized assets develops, the market demand for on-chain data continues to grow.Dune claims that the new data service will help hedge funds, asset management companies, market makers, and brokers track on-chain price discovery within existing market data systems. The company also noted that the joint venture OKXICE between OKX and Intercontinental Exchange (ICE) has submitted an application to list 63 tokenized stocks on X Layer.

According to CCTV News reports, the National Computer Virus Emergency Response Center and the National Engineering Laboratory for Computer Virus Prevention and Control recently discovered multiple incidents of users encountering the "Weaxor" ransomware attack within our country, relying on the National Computer Virus Collaborative Analysis Platform.After the user's important files are encrypted, the file names are changed to the original file name with the ".weax" suffix added. The attackers leave a ransom note on the host, demanding that users contact them and pay the ransom.

ARK Invest's Q3 2026 DeFi report shows that stock tokenization has become the main driving force behind the rebound in on-chain trading activity for the quarter. The trading volume of tokenized stock spot DEX reached approximately $50 billion, about 9 times that of the previous quarter, with its share of total spot DEX trading volume rising from about 1% to around 9%. Overall, DEX spot trading volume increased by approximately 13% quarter-over-quarter to $571 billion, marking the first growth in nearly four quarters.Robinhood Chain achieved approximately $65 billion in DEX trading volume and $51 million in network revenue in its first quarter, with network revenue nearing the level of BNB Chain during the same period. However, ARK expects that recent adjustments to the Gas mechanism will cause the chain's revenue to decline from current levels. The total supply of stablecoins decreased by about 3% quarter-over-quarter to $309 billion, but adjusted trading volume increased by approximately 16% quarter-over-quarter to $781 billion, with the number of monthly active addresses growing by about 39% to 73 million.In the perpetual contract DEX, there is a divergence between open positions and trading volume: the value of open contracts increased by about 76% quarter-over-quarter to $24 billion, while quarterly trading volume decreased by about 16% to $1.4 trillion. Among them, Hyperliquid's open contract value is about $13 billion, accounting for approximately 53%. ARK believes this indicates fewer but larger positions held for longer durations.

NVIDIA announced an expansion of its open model product portfolio, covering areas such as vision and language, information retrieval, structured business data, biomedicine, robotics, and quantum computing. The new products include the Nemotron 3.5 series language and vision models, Kumo model, Cosmos world model, Alpamayo 2 Edge, BioNeMo RFD4-Proteina, and Ising model.

According to the official announcement, Gate has released the latest reserve report. As of October 18, 2026, the total reserve size of the platform has risen to $8.688 billion, an increase of 5.7% compared to the previous period; the overall reserve coverage rate has reached 118.49%, consistently above the industry safety benchmark of 100%. This report covers 500 cryptocurrencies, demonstrating Gate's ample excess reserves, providing solid support for the platform to cope with market fluctuations, maintain liquidity, and buffer risks.In terms of core asset reserves, BTC user assets have grown to 21,156 coins, with the platform's reserve amount increasing to 25,727 coins, and the reserve coverage rate rising from 120.32% to 121.60%; ETH user assets have increased to 362,785 coins, with the platform's reserve amount growing to 449,042 coins, and the reserve coverage rate rising from 123.59% to 123.78%.Regarding stablecoins, the total user assets of USDT, USD1, GUSD, and USDC amount to approximately $1.497 billion, corresponding to a platform reserve of $1.746 billion, with a comprehensive reserve rate of 116.59%. Additionally, the reserve rates for major assets such as DOGE, GT, and SOL have reached 106.76%, 129.00%, and 102.51%, respectively, all exceeding the 100% safety line. From overall reserves to various core assets, Gate consistently maintains sufficient safety margins, providing robust protection for the safety of global user assets.

According to "Du Jia," Alibaba Cloud merged its original IQS information query service with CleverSee in mid-September to create a brand new AI-native search service product called CleverSee (Chinese name "Kai Xi"), providing integrated search and Q&A services for enterprise clients.CleverSee is positioned as an AI-native retrieval tool specifically designed to provide understandable high-quality information sources for large models and intelligent agents. Its core includes three sub-products: networked inquiry, vertical domain inquiry, and enterprise internal search, covering public internet information, semi-public information in vertical fields, and private data within enterprises, respectively. The networked inquiry supports intent recognition, multi-turn thinking, and searching while thinking, and can return answers with source citations as well as structured cards for weather, stock prices, etc.; the enterprise internal search is currently in a targeted experience testing phase.Previously, Tencent Cloud opened "Yuanbao Search" to the public on October 20, and ByteDance's Volcano Engine also launched Viking AI Search, accelerating the deployment of AI search infrastructure among domestic cloud vendors for enterprise applications.

According to The Defiant, Blockaid data shows that from January to August 2026, the 60 cryptocurrency attack incidents it tracked involved approximately $1.18 billion in funds, with victims recovering about $9.8 million, accounting for less than 1%.The report pointed out that all frozen or returned funds were achieved through on-chain governance or validator actions, and the blacklist mechanism of stablecoin issuers did not recover any funds in these 60 incidents.

U.S. online brokerage Webull, listed on NASDAQ, plans to open perpetual contract trading to eligible U.S. customers starting in November, with the first products including Bitcoin and other crypto assets, and aims to expand the scope by the end of the year.The related contracts will be listed on the Kalshi exchange, regulated by the U.S. Commodity Futures Trading Commission (CFTC), with clearing handled by Kalshi's clearing agency. Webull users who have been approved for futures trading can trade through their existing futures accounts.

Elon Musk stated that SpaceX will attempt to recover both the booster and the spacecraft simultaneously during the 15th test flight of Starship.

The Liquid Network officially announced the progress of the phased recovery, stating that the network recovery work has entered the final stage, focusing on strengthening security mechanisms, conducting independent audits, and gradually restoring the redeeming function of pegged assets.In terms of functional recovery, the network will first gradually open semi-automated BTC and LBTC exchange services, coordinating with participating exchange service providers to implement this service, which itself does not impose transaction volume limits at the protocol layer.In the next phase, the Liquid Network will restore the 1:1 Bitcoin reserve support for the network, and then gradually reopen the Federation redeeming function to authorized PAK key holders, but the full restoration of related functions still depends on the completion of remaining security checks and operational requirements.

According to Crypto.news, Beast Holdings, associated with YouTube creator MrBeast, has submitted two U.S. trademark applications for MRBEAST FINANCIAL and BEAST FINANCIAL, covering financial services such as cryptocurrency trading, payment processing, decentralized exchanges (DEX), online banking, consumer loans, credit and debit cards, and investment management.

According to a report by Bloomberg, when Founders Fund was considering investing in Polymarket in 2025, it was discovered that at that time the company had no revenue, and CEO Coplan had used company funds to pay for personal expenses such as private jets and apartment rent. Founders Fund required the company to improve its financial controls and repay the related amounts before making the investment.

The cryptocurrency market data agency Kaiko stated that one year after the largest liquidation event in the crypto market, the market has not fully recovered.Kaiko noted that in terms of Bitcoin, the open interest of Bitcoin perpetual contracts is still about 16% lower than pre-crash levels, while the spot depth in USD is down 27%. The decline in leverage is faster than the decline in liquidity, with leverage corresponding to each dollar of market depth being 20% lower than before October 10.

According to PR Newswire, Cboe Global Markets, the parent company of the Chicago Board Options Exchange (Cboe), announced that Cboe has expanded the trading hours for certain U.S. stock individual stocks and exchange-traded fund (ETF) options.The newly added pre-market and after-hours trading periods for the relevant options are from 7:30 to 9:25 AM ET Monday to Friday for pre-market trading, and from 4:00 to 4:15 PM for after-hours trading. This covers popular individual stocks such as Apple, Nvidia, Tesla, Microsoft, Amazon, Google, Robinhood, Intel, as well as major ETFs like SPY, QQQ, and GLD, currently involving a total of 29 underlying assets.