security

The founder of StonkBrokers, SimpleFarmer, posted on platform X stating that the security alert released by Blockaid regarding StonkBroker experiencing a domain attack was a false alarm, and the related malicious domain is not the official website. The official domain of StonkBroker is StonkBrokers.io.Blockaid has removed StonkBroker from the affected list and deleted the previously released related warning tweets. The team has also taken the malicious domain offline.

According to Caixin, the Binance hacking incident may present opportunities for decentralized exchanges (DEX). Each time a major centralized exchange (CEX) experiences a sudden significant security incident or trust crisis, DEX and the entire DeFi sector tend to see a notable influx of capital and development opportunities, and this time is no exception.The advantage of DEX is that its security is guaranteed by computers and cryptography, preventing situations where malware is implanted or systems are breached due to social engineering attacks. The hard rules on-chain for DEX are strictly enforced, such as time locks and automatic circuit breakers. Even if hackers obtain the keys, they must still adhere to the rules set by the contracts.This security incident also once again sounds the alarm for "Not your keys, not your coins." A large number of users, due to concerns about the security of centralized custody, will withdraw their assets to personal cold wallets or on-chain non-custodial wallets. Once the assets flow back on-chain, the trading, liquidity mining, and wealth management demands of this portion of idle funds will be directly taken over by leading DEXs like Uniswap and Jupiter, driving a surge in DEX trading volume and total value locked (TVL) in the short term.

Crypto journalist Eleanor Terrett posted that in response to questions about why Binance still claims user funds are safe after a $6 billion hack, a Binance spokesperson stated that customer funds were unaffected and that the funds that were transferred out came from one of the exchange's own hot wallets. Binance claims that most customer funds are stored in cold wallets and are only transferred to hot wallets when users withdraw.The spokesperson stated that most of Binance's daily operating income is held in the form of crypto assets, and the company retains a significant portion of this, reinvesting it into business and security development, as they believe in the long-term value of crypto assets and the industry.He stated, "This is precisely why we are able to immediately absorb such a large loss with our own funds."

According to PR Newswire, AI security startup AvalonX has concluded its 18-month stealth operation and announced a $10 million funding round from Ridown Capital.The company also launched a continuous AI penetration testing platform, which is trained on nine years of real-world offensive security data and incorporates human expert analysis. AvalonX claims that the platform offers continuous penetration testing to small and medium-sized enterprises on a monthly subscription basis.

Aave published an update on the handling progress after the Binance incident, stating that all markets for Aave V3 and V4 have now been unfrozen. Previously, Aave froze the markets for precautionary purposes after the initial reports of the incident, suspending new deposits and loans, but withdrawals and repayments continued to function normally.Aave emphasized that its contracts were not affected by this incident, and positions have always maintained sufficient collateral.As a continued precautionary measure, the loan-to-value ratios (LTV) for USDT, USDC, USDT0, POL, WAVAX, sAVAX, XAUT, PAXG, and OP will temporarily remain at 0, so these assets cannot be used as collateral to support new loans for the time being.

PancakeSwap stated that it was not affected by today's security incident at Binance, and that its contracts and services are operating normally. The team is closely monitoring the situation.PancakeSwap also expressed support for the Binance team and all parties involved in responding to this security incident, and thanked ecosystem participants for their efforts to support affected users and protect the community.

BNB Chain stated that it supports Binance and the relevant teams that have been continuously handling security incidents since last night, and confirmed that BNB Smart Chain, opBNB, BNB Greenfield, and the BNB Chain cross-chain bridge have not been affected by this incident. Currently, all networks are operating normally, and the funds on BNB Chain are secure.BNB Chain also expressed full trust in the Binance team to handle this incident and will continue to collaborate with ecosystem partners to strengthen security protection and maintain industry trust.

IT Home reported on October 30 that developers discovered application entry points and interface logic related to the Cyber cybersecurity model in the front-end code of the DeepSeek official website. The application page route points to /usage/model-application and has a feature gate switch set; accounts without permission will be redirected back to the usage page when accessed. The code also includes interfaces related to Cyber Key creation and quota management.The models in the code are identified as cyber-personal-v3 and cyber-enterprise-v4. The personal version is aimed at individual security practitioners, requiring the submission of ID information and completion of facial verification; the enterprise version is aimed at corporate entities, requiring not only real-name materials but also a business license and authorization letter. Common thresholds for both channels include that the account has completed real-name verification and is in normal status, registered in mainland China and bound to a mainland mobile number, and has no violation records in the past 90 days.The application process involves filling out an application form and submitting it for review. After passing the review, a Cyber Key is created. Currently, this entry point does not appear in the public menu of DeepSeek and is in a gray testing state. Some users have reported that only accounts covered by the gray test can see the relevant sections on the usage page, and when permissions are granted, the "DeepSeek Flash Cyber Cybersecurity Dedicated API" area will be displayed. As of the time of reporting, DeepSeek has not yet released an official announcement regarding this model; the information comes from observations of the official website's JavaScript code and feedback from gray test users.

The founder and CEO of the cryptocurrency trading platform Gate, Han Lin, posted on X stating that Gate was not affected by the security incident that night. The security team has completed a comprehensive inspection, user asset security is intact, and deposits, withdrawals, and trading are all operating normally, with on-chain reserves verifiable at any time.Han Lin stated that Gate stands with Binance, which is responding to the incident. The platform has added the involved addresses to a tracking list, and any related funds that flow in will be immediately frozen, with the security team on standby to provide assistance. He also mentioned that the industry has come this far through collective efforts, and all parties should work together to build and safeguard.Previously, Binance stated that the security incident on its platform affected approximately $6.3 billion in assets, with about half already frozen with assistance from other platforms, and it claimed it would cover all losses. Preliminary checks indicate that the incident may be related to an engineer's laptop being compromised, allowing the attacker to make unauthorized withdrawals, and Binance is cooperating with law enforcement to confirm the identities of the individuals involved.

After verification with OKX officials, the 172,000,000 USDT (approximately 171,846,059 USD) monitored by Whale Alert transferred from OKX to an unknown wallet is an internal transfer operation conducted by OKX.OKX stated that regarding today's industry security incident, they have completed a comprehensive inspection and found no signs of intrusion. The platform is operating normally, and user assets are not affected.

The founder and CEO of the cryptocurrency trading platform Gate, Han Lin, posted on X: Six years ago, Gate was the first to promote the implementation of on-chain reserve proof across the industry because transparency is not an option, but a bottom line. After the security incident that day, he called for the industry to form a security alliance to establish unified preemptive security standards, intrusion detection norms, and post-incident emergency response mechanisms.Han Lin stated: Every crisis is an opportunity for the industry to rebuild trust, and this time we need to set the standards higher together. Earlier that same evening, he mentioned that in response to the Binance security incident, the Gate security team had completed a comprehensive inspection, the platform was not affected, user assets were safe, and deposits, withdrawals, and transactions were normal. The on-chain reserves can be checked at any time, and the addresses involved have been included in tracking. Any related fund inflows will be immediately frozen, and the security team can provide assistance to Binance.

According to official news from the decentralized trading aggregator 1inch, the team is aware of the attack on the Binance trading platform and is in contact with them to provide assistance. The risk management team, in collaboration with ZeroShadow, SEAL 911, TRM Labs, and others, has blocked addresses related to the attack on the 1inch dApp, 1inch Wallet, and 1inch API within an hour and continues to add to the list, which is being synchronized with resolvers and integrators.Some 1INCH tokens are among the stolen assets. Since 1INCH is a standard ERC-20 token with no freezing or blacklisting features, the stolen tokens cannot be frozen by anyone. 1inch stated that they will fully cooperate with Binance and law enforcement agencies in the recovery efforts.

Du Jun posted on platform X, stating that family offices that were advised to allocate BTC and ETH years ago, after experiencing theft from centralized exchanges and security incidents in cold wallet supply chains, have all converted their BTC into IBIT, and some have sold their crypto assets to buy physical gold and other traditional assets.Du Jun expressed that he does not know how to persuade these family offices, and currently, there seems to be no solution.

Binance founder CZ posted on the X platform stating that user funds are safe (SAFU), and specifically mentioned He Yi working overnight with hundreds of Binance employees to handle the security incident during her pregnancy.CZ noted that many industry friends and even competitors, including those who previously had unfriendly relations, provided much-needed assistance. He described the incident as heartbreaking but emphasized that Binance will get through this tough time.

Binance released preliminary investigation results on its official X account, stating that the security incident may involve the laptop of a DevOps engineer being compromised. The attacker used this to access the service container and submitted unauthorized withdrawal transactions. Binance stated that there is currently no evidence of wallet private key leakage and will publish a detailed technical review after the investigation is complete and the facts are fully verified.Binance estimated the total impact of the incident to be approximately $6.3 billion. The platform has frozen related assets in collaboration with blockchain partners, with about $3 billion currently frozen on-chain. Binance stated that it will cover all losses through the SAFU fund and company funds, ensuring user fund safety, and will release updated proof of reserves after the resolution is complete.As an immediate measure, Binance has suspended deposits and withdrawals until security checks are completed, revoked the authorization of affected addresses, and has contacted law enforcement and blockchain intelligence partners to track and recover funds. Binance stated that the team is working with law enforcement partners to confirm the identities of the relevant individuals and reminds users to obtain updates only through official channels.

Lin Chen, the Head of Asia-Pacific Business at Deribit, stated that Coinbase and Deribit have confirmed the safety of assets and have completed a self-inspection, with no related risk points found at this time. He also expressed hope that the market can emerge from the shadows and enter the next bull market.

The Chief Information Security Officer of Slow Fog, 23pds, forwarded Binance's statement on the ongoing pursuit of frozen stolen assets and commented that, based on historical forensic experience, attackers are able to bypass risk control systems.23pds stated that it still needs to be confirmed whether the path of the intrusion that led to the one-time theft of assets was due to private key leakage or a compromised signing machine. Binance stated that the team is closely collaborating with law enforcement, asset issuers, blockchain intelligence agencies, and industry partners to track and freeze more related assets, with the total frozen amount expected to increase further, and more confirmation information will be synchronized in a timely manner.