pond

The head of research at OpenAI issued a statement in response to an open letter from three former employees, Jasmine, Mikita, and Tomek. The company stated that after a thorough investigation, the three violated clear policies regarding the handling of sensitive information; serious breaches of trust discovered during the internal investigation exceeded the scope disclosed in the open letter, leading to the termination of their employment last week, a decision that will be upheld.OpenAI emphasized that this decision is not aimed at those who raise safety concerns or express opinions publicly. The company stated that there are intense and critical safety and research discussions internally every day, and it encourages questioning; it maintains a tolerance for good-faith mistakes and will not fire employees for raising concerns.Regarding the safety issues mentioned in the open letter, OpenAI stated that it is finalizing contracts with third-party security assessment organizations, with details expected to be announced in the coming weeks, and it is committed to including external evaluators in its safety work. The company recognizes that maintaining the monitorability of cutting-edge models requires collective investment from the entire industry, stating that this area has long been a focus of its research and will continue to receive significant resources.

On October 9, Binance founder CZ posted on X, responding to Ethereum co-founder Vitalik Buterin's lengthy article about the potential impact of artificial intelligence accelerating mathematical research on cryptographic security. CZ rated Vitalik's mathematical level at 99.99 points, while he rated himself at 0.01 points, joking that together they might achieve something; he also mentioned that people might not fully understand Vitalik's articles like himself, but even so, such analytical discussions are worth reading.Previously, Vitalik warned in a post that the acceleration of mathematical research by artificial intelligence could significantly weaken the practical security of lattice-based cryptography in the next two years, involving technologies such as ML-DSA and fully homomorphic encryption, and could even expose ECDSA to cracking risks sooner than expected. He believes that artificial intelligence could drive mathematical research progress equivalent to the past 50 years within two years, which is why the Ethereum Lean roadmap has gradually shifted towards pure hash signature schemes over the past year, reducing reliance on lattice cryptography.

South Korean Deputy Prime Minister and Minister of Strategy and Finance Lee Hyeong-ryeol stated that in response to the virtual asset taxation policy planned for implementation in 2027, various opinions proposed by the National Assembly, as well as those from experts, industry professionals, and relevant stakeholders, will be widely collected. South Korean lawmaker Kim Sang-hoon questioned that several months before the implementation of the virtual asset taxation, the relevant infrastructure is still not fully developed, including insufficient tracking and verification capabilities for trading records on overseas exchanges, DEX, DeFi, and other platforms.Regarding the expected tax revenue scale from virtual asset taxation, Lee Hyeong-ryeol stated that there are indeed parts that are "difficult to accurately grasp." Since taxation requires obtaining taxpayer declaration data first, further tax estimation can only be conducted after the relevant declaration system is launched next year, and a careful evaluation of the related policies will be carried out.

A community user posted that after connecting to the free Wi-Fi at Singapore Airport, a "small wallet" that had not been traded for a long time had 3.7 BNB transferred away, and reminded users not to casually connect to public Wi-Fi. The user stated that the wallet had no transaction records for the previous few months, but the assets were transferred after connecting to the airport's free network.In response, Binance founder Changpeng Zhao stated, "I have always advised everyone not to connect to Wi-Fi, especially public Wi-Fi. But just connecting to Wi-Fi shouldn't lead to a wallet being stolen, was there some other operation in between?"

On October 8, the spokesperson of the Ministry of Foreign Affairs, Mao Ning, hosted a regular press conference. A Reuters reporter asked about the allegations made by the American cybersecurity company CrowdStrike that Chinese individuals and related institutions used AI tools to attack South Korean financial institutions.Mao Ning stated: "I am not familiar with the specific situation mentioned. As a principle, China has always opposed and legally cracked down on hacking activities, and even more so opposes the dissemination of false information for political purposes." She also stated that artificial intelligence profoundly affects cybersecurity, and the international community should strengthen cooperation and dialogue, formulate new international rules, and jointly maintain cybersecurity.

The co-founder of the Bitcoin financial asset protocol Solv Protocol, Meng Yan, stated that he has withdrawn from the daily operations of Solv and did not participate in the BTC+ business, and was unaware of the situation at the time. A user claiming to be the party involved later contacted him, asking him to communicate with the business team. Meng Yan mentioned that Solv had announced a BTC+ security incident in July, where the deposit of 50 BTC and subsequent operations constituted important conditions exploited by the attack path; the attack occurred just three days after the related operations, and Solv promptly identified and prevented it, protecting BTC+ user funds.Meng Yan stated that the above situation alone cannot prove a direct correlation between the two matters, but it is sufficient to trigger a higher-level security review. Therefore, risk control protected the funds in question and required the user to explain the situation. He noted that during the review, Solv never required the user to undergo any form of KYC, nor did it require ordinary BTC+ users to use real names; the review focused on whether the identity and account explanations submitted by the user were consistent, whether the related accounts were controlled by the user, and whether the explanations for key operations could correspond with objective records. Risk control feedback indicated that the user had used multiple different names and online identities, and several key factual statements were inconsistent.Meng Yan provided an example, stating that the user explained that on July 18, they saw a similar transaction by someone else, but the verification showed that the transaction occurred on July 20; the user later claimed they acted after seeing related content on the Solv official website, but the page at that time did not contain the content they referred to. He stated that risk control cannot lift security restrictions before eliminating doubts and has never refused to resolve issues through formal channels such as judicial procedures. In the section marked as personal thoughts, he mentioned that to his knowledge, the asset remains intact, can be traced on-chain, and has not been transferred, mortgaged, or disposed of.

On October 7, at a meeting of the Hong Kong Legislative Council, legislator Chan Chun-ying raised a written inquiry regarding the regulation of emerging payment platforms. The Acting Secretary for Financial Services and the Treasury, Chan Ho-lam, provided a written response. The inquiry pointed out that in recent years, new aggregation payment platforms have emerged, reaching out to small merchants with low fees and "buy now, pay later" methods. Some platforms have reported overdue payments and false entries, and there are platforms that are registered only as financial technology companies, without obtaining financial licenses, and have not disclosed their partner organizations or operational status.Chan Ho-lam stated that the government and financial regulatory agencies continue to monitor emerging payment models and take enforcement actions within the statutory framework. After consulting the Monetary Authority and Customs, from January 2024 to September 2026, the Monetary Authority received 16 complaints regarding the suspected unlicensed issuance or operation of stored value payment tools. After investigation, one was substantiated, and the complainant did not report any financial loss. The Monetary Authority is following up with the relevant companies.The response pointed out that the Monetary Authority regulates stored value payment tools under the Payment Systems and Stored Value Facilities Ordinance. Unless legally exempt, issuing or operating without a license in Hong Kong is illegal. Money services that operate currency exchange and cross-border remittances must apply for a license from Customs unless exempted. Non-bank institutions providing "buy now, pay later" services involving loan activities must apply for a money lender license under the Money Lenders Ordinance. Cases suspected of being unlicensed or non-compliant are handled by the Monetary Authority, which may collaborate with other regulatory agencies or refer to law enforcement departments.

Israeli Defense Minister Katz stated at a cabinet meeting that the Israel Defense Forces have been ordered to prepare for a possible outbreak of war with the Palestinian Authority.Katz mentioned that once it occurs, a state of war will be declared, and a full-scale offensive will be launched according to the approved detailed plan.

Binance co-founder Zhao Changpeng retweeted a post about "The New York Times reporter visiting his home in Abu Dhabi for an interview" and responded that reporter David admitted to having a skeptical attitude towards him, implying that the act of giving Binance merchandise for free was a "bribe." He stated that the merchandise was meant to make people "walking billboards," while still expressing gratitude for the report.The original tweet released by Ram stated, "There are Binance merchandise piled up at Zhao Changpeng's doorstep, and he insisted on letting the reporter choose a gift. The reporter said he could not accept items worth more than $20, to which Zhao Changpeng jokingly replied, 'It's probably worth $19.'"

The spokesperson for the Iranian Ministry of Foreign Affairs stated that Iran has responded to the U.S. proposal. The U.S. proposal is similar to previous ones, focusing on nuclear issues, while Iran hopes to shift the focus to the Strait of Hormuz.

It has been reported that TSMC is exploring the possibility of collaborating on the Terafab project initiated by SpaceX and Tesla, and is considering it as an important customer for its future Texas wafer factory. Musk responded that it is currently only in the discussion stage, but "there may be progress."

According to the Arbitrum Security Committee report, in response to the increasingly complex risks of AI-assisted attacks, Arbitrum took emergency action around 23:30 Beijing time on October 2 to temporarily halt the activation of new Stylus contracts on the Arbitrum One and Nova networks.This restriction mainly targets programs and application updates that require new activation, while already activated Stylus applications can continue to operate, and the deployment and execution of regular Solidity contracts are not affected. Arbitrum officials stated that this preventive measure stems from threats of WebAssembly program attacks targeting non-standard Stylus compiler toolchains, and no risk of fund theft has been discovered so far. The main concerns are on-chain activity and denial-of-service (DoS) attacks. Developers can still extend the lifecycle of existing programs through a permissionless keep-alive renewal mechanism, but they cannot activate expired programs or new version applications.

MetaMask has released a follow-up statement regarding the previously disclosed infrastructure security incidents, stating that the team is continuously conducting investigations and addressing the issues.MetaMask stated that to ensure user safety, it has collaborated with relevant partners to take preventive measures and is currently withdrawing the affected validator nodes from its non-custodial staking business. According to the investigation results so far, there is no indication that MetaMask wallets or customer funds have been affected.This morning, part of the infrastructure of MetaMask's non-custodial staking business encountered a security incident. As a precaution, the validators operating on Lido have begun to withdraw.

Renzo Finance responded to the MetaMask infrastructure security incident, stating that the risks and liquidity of its latest product, Renzo Basis, will not be concentrated in stablecoins or vaults and can be fully verified through on-chain data. Therefore, users do not need to rely on trust in Renzo to confirm that they are not affected by the incident.Renzo stated that ezETH will only be supported by native ETH starting from April 2026. Currently, there are only 214.75 stETH in the withdrawal queue (accounting for 0.5%) with valid claims.Previously, MetaMask indicated that it is handling a security incident affecting some infrastructure, and no immediate threat to MetaMask wallets has been identified. As a precaution, MetaMask is coordinating with customers, partners, and security consultants to proactively withdraw affected validators from its non-custodial staking business and will provide further updates in due course.

Ethena founder Guy Young posted on social media that he is aware of the current "security incident involving a certain Ethereum node operator."The supported assets of USDe currently do not include any direct exposure to stETH or any other liquid staking tokens. It is expected that there will be no impact on Ethena.

According to a report by Reuters, the Japanese Ministry of Finance announced the establishment of the "On-Chain Correspondence Research Group," focusing on the feasibility study of real-time settlement for government bond transactions, with the first meeting scheduled for October 8.The research group will systematically analyze the advantages and disadvantages of blockchain real-time settlement around the current next-day settlement practice, with members including professors from the University of Tokyo, Waseda University, and other universities, as well as private strategists, and will involve the Bank of Japan and the Financial Services Agency for opinion exchange.Ministry officials pointed out that the United States already has MMF products that trade on the blockchain with government bonds as the underlying asset, which will serve as an important reference case. The research group plans to complete the organization of discussion points within the year.

Regarding the issue of abnormal asset transfers from user accounts, the MEXC customer service team responded on September 28, stating that they have completed a preliminary investigation and provided corresponding solutions. They will follow up with users via email for one-on-one communication, updating them on progress and required information, and reminding users to pay attention to their registered email and official channel communications.Previously, a MEXC user posted on X that their account was controlled after someone reset the security items. Between 04:12 and 04:25 on September 27 (Beijing time), 322,110 USDT and 9,133,999 ONE were transferred out, totaling approximately $340,000, just 27 minutes after the 24-hour transfer restriction was lifted. The user stated that MEXC has confirmed the account was hacked and has frozen the account to assist in recovery, but has not revoked the API left by the attacker. They have submitted a formal claim, with the ticket number M2026092712031.

On September 27, Doubao Mobile Assistant released a statement in the official community regarding the abnormal usage of the Nubia NaviX Ultra phone in Honor of Kings, stating that starting from the evening of September 24, they have received feedback from users that the Nubia NaviX Ultra equipped with Doubao Mobile Assistant displays an abnormal device environment prompt when logging into Honor of Kings or during matchmaking, and users are forcibly kicked offline.Doubao Mobile Assistant stated: Upon confirmation, they have not made any operations on the Tencent game system throughout the process, and there are no violations such as unauthorized clicks, cheats, or simulation behaviors by the AI. The team is still in communication with relevant parties at Tencent, and as of now, they have not received a clear response, for which they apologize. The assistant also advises users not to repeatedly attempt to log into Honor of Kings on this model. If the account has been banned, users can appeal through the official game customer service channels.Tencent has not publicly responded. On September 28, a reporter learned from informed sources that Honor of Kings ensures game fairness through various security risk strategies, and these strategies have been consistently used over the past period without targeted adjustments.

Slow Fog's Yuxian stated on platform X that the Bitget theft incident has a wide spread, involves a huge amount of money, and the related funds were quickly linked to North Korean hackers. Institutions such as Circle and Tether have promptly assisted in freezing the related funds, with Circle freezing the USDC held by the hackers.Regarding THORChain, Yuxian pointed out that when THORChain previously experienced a theft incident, it also quickly intervened in its so-called "decentralized" platform; however, in response to this major security incident in the industry, it claimed "decentralization and non-interference" and compared itself to Bitcoin and Ethereum, while continuing to earn fees from the hackers' large cross-chain transactions.He stated that decentralization should not just be a slogan; after a major security incident occurs, the key is to distinguish which issues need to be collectively addressed by the industry. He also believes that platforms like THORChain should not be easily compared to Bitcoin and Ethereum, as there are significant differences in the degree of decentralization and mechanisms of different systems.

MistTrack disclosed that following the $1.46 billion hacking incident at Bybit last year, where nearly $1.2 billion in stolen funds were transferred via THORChain, Bitget has recently experienced another significant security incident, with stolen funds suspected to have once again flowed through THORChain.In response, THORChain officials stated that their protocol, like Bitcoin, Ethereum, and BNB Chain, belongs to a decentralized and permissionless network.