GCP Exclusive Reporting

10/cate3/GCP Exclusive Reporting

Featured Startups

5/cate1/icos

exchanges

6/cate2/exchanges

videos

6/cate3/videos

regulations

5/cate1/regulations

Now Playing:

3/cate6/videos

Recent post

North Korea's Hackers Deploy their Own 'Rogue' AI's to Hunt For Their Next Targets...


 The group behind the biggest crypto heist in history is not done, and it is getting better at its job. The FBI blames North Korea's TraderTraitor unit for the $6.3 billion theft from Binance on October 29, and a new report from Bloomberg says the group is now using artificial intelligence to pick its targets. The unit may have only around a dozen members, according to experts cited in the report, but it hunts what cybersecurity researchers call "big game": large crypto companies with deep wallets, not individual investors. Its previous record was the $1.5 billion Bybit theft in 2025, and the Binance job smashed that record in about 20 minutes.

TraderTraitor does not break in through the front door. It studies a target company, learns how its systems and payment flows work, and then goes after the people who hold the keys. The group is known for approaching employees with access to sensitive systems and luring them with lucrative fake job offers, a tactic that ends with a compromised laptop or a clicked link. Binance has said its own initial investigation found a compromised laptop belonging to an engineer as the point of breach. Nick Carlsen, a senior investigator at TRM Labs, told Bloomberg that novel techniques used by the group suggest it is making ample use of AI in its recent hacks, and Park Seong-su, a threat researcher at Zscaler, said the new tools have lowered the barriers to carrying out advanced operations while speeding them up tremendously. Carlsen added a detail worth remembering: for all the talk of AI, the group's bread and butter is still the human part.

The scale of the operation is hard to overstate - North Korea is believed to be responsible for 89 percent of reported crypto hack losses in 2026

That's according to Chainalysis figures cited by Bloomberg, and the $6.36 billion taken from Binance is worth nearly 20 percent of North Korea's estimated annual economic output. United Nations experts said in 2024 that the country's cyber thefts and illicit financial activity could be funding about 40 percent of its banned weapons programs. Crypto has now overtaken the old revenue streams. Where Pyongyang once smuggled cigarettes and forged dollar bills, its hackers now bring in billions in pure profit from a single successful heist, and the money is increasingly flowing into conventional military spending as well, from new naval vessels to drone technology.

But the full story may be more complicated, because while Bloomberg's sources say AI is helping TraderTraitor find and compromise its targets, blockchain analytics firm Elliptic says it has found no evidence that AI directed the laundering of the stolen Binance funds. The laundering was automated, with about 20 automated services moving the money through decentralized exchanges, lending protocols and cross-chain bridges in less than three days, but Elliptic co-founder Tom Robinson said the pattern fits scripts written and supervised by people, not an AI agent making its own decisions. The numbers behind the cleanup are still staggering. In under four days the hackers used about 12,000 wallets across 11 blockchains, roughly one new wallet every 25 seconds, and more than 40,000 transactions. About $2.85 billion, or 44 percent of the stolen funds, has been frozen or seized, while the hackers still control about $3.28 billion spread across more than 950 wallets. Elliptic also found about $16 million sent to addresses holding proceeds from September's Bitget exploit, which suggests the same laundering operation is handling funds from more than one attack.

For anyone holding crypto on an exchange, the lesson is uncomfortably simple. Your money is only as safe as the least careful employee with access to the systems that move it, and the people trying to find that employee now have AI helping them search. Exchanges are beefing up security around staff with key access, but TraderTraitor has already shown it can get past the defenses of the biggest exchange in the world. Self-custody is not a slogan here, it is the one defense that does not depend on a stranger's laptop staying clean.

The AI angle is real, but it is worth keeping it in proportion. The evidence so far says AI helped the hackers choose and reach their target, while the laundering that followed looks like old-fashioned automation run by human hands. That distinction matters less than it sounds, because either way the group is faster, richer and harder to stop than it was a year ago, and it has now shown it can take $6.3 billion from the largest exchange on earth in less time than a lunch break. The next target is probably already being picked.

-------
Author: Ren Nakamura, Asia Newsroom, GlobalCryptoPress | Breaking Crypto News

The Hacker Kept $47 Million. Blockstream Just Paid It Back Itself.

Hacker kept $47M, Blockstream paid it back

Two months ago, a bug in the software behind the Liquid Network let an attacker mint about 4,000 LBTC tokens backed by nothing at all, then swap them for real bitcoin worth roughly $320 million. Liquid is a Bitcoin sidechain run by a federation of companies led by Blockstream, and it exists to move bitcoin faster and more privately than the main chain allows. The attack drained the federation wallet from about 4,205 bitcoin down to 197, leaving the tokens that traders and exchanges rely on backed by almost nothing. On Monday, the Liquid Federation announced the hole is closed and every LBTC is backed one-to-one again, which is good news for anyone holding the token. The part that deserves a closer look is how the hole got closed, because the attacker never gave all the money back.

The white hat who kept $47 million

The attacker called themselves a white hat and left a message in a Bitcoin transaction saying exactly that, then returned about 3,400 bitcoin the day after the attack, once Blockstream said the bridge nodes had been patched. What stayed behind was roughly 600 bitcoin, worth about $47 million at current prices, and the attacker wanted a 10 percent bug bounty in exchange for handing it over. Blockstream said no, and said it plainly: taking assets without authorization and refusing to return them is a crime, not responsible disclosure, and this is theft, not white-hat behavior. The company refused to pay a ransom for the remaining coins, and the money stayed gone. That refusal is the reason the federation had to find about 600 bitcoin somewhere else to make LBTC whole again.

Blockstream wrote the check

The money came from Blockstream itself, according to Samson Mow, a Liquid Federation board member, who identified the company as the source of the deposits that closed the gap. The deposits arrived in pieces, with about 50 bitcoin landing on October 28, then 300 bitcoin and a final 250 bitcoin on November 2, and the federation announced full backing the same day. Adam Back, the chief executive of Blockstream, posted a screenshot of the network dashboard showing assets matching liabilities at 100 percent, with a reserve deficit of exactly zero. SideSwap, one of the federation members, reported about 4,270 bitcoin in reserve against the same amount of LBTC on November 3. The bug itself was fixed quickly, with a patched version of the Elements software released on September 9, three days after the exploit, and Blockstream said no private keys were lost and none of the network operators were hacked.

What is still not back to normal

Full backing does not mean everything is back to the way it was, because direct withdrawals from the federation are still restricted, and users have had to swap bitcoin and LBTC through participating providers for weeks instead of using the network's own peg-out path. The federation has not said when those restrictions will lift, and the announcement this week did not address it either. There is also the question of who exactly paid for what, since the blockchain shows the deposits arriving but does not name the people behind them, and only Mow has pointed at Blockstream in public. For LBTC holders, the practical result is the same either way: the token is backed again, and the sidechain survived an attack that took about 95 percent of its reserves in a single day. For everyone else, the story is a reminder that the words white hat and hacker can describe the same person on the same day, and the difference between a rescue and a robbery can come down to how much money comes back.

Liquid is whole again, and that matters, because a sidechain that loses its backing and never gets it back is finished. Blockstream paid roughly $47 million to make that happen, refused to call a thief a white hat, and got its network back to full backing in about two months. The lesson for anyone holding tokens on a sidechain or a bridge is simple enough: the peg is only as strong as the people standing behind it, and this time the people behind it paid up. The attacker, meanwhile, is still holding about 600 bitcoin, and nobody knows who they are.

-------
Author: Cedric Holloway
New York Newsroom
GlobalCryptoPress | Breaking Crypto News

Democrats Swept Election Night - With that Comes Some Old ANTI-CRYPTO Politicians Back in the Majority...

Democrats sweep Congress and crypto's CLARITY Act has 60 days to live

Tuesday night changed the math for crypto in Washington. Democrats won control of both the House and the Senate in the midterm elections, according to projections from CBS, NBC, CNBC and the Associated Press, and the result puts the crypto industry's most important piece of unfinished legislation on a countdown clock. The CLARITY Act, the market-structure bill that would finally settle which regulator oversees which tokens, now has until January 3 to get through the current Congress, or it dies and has to start over from scratch in a Congress run by the other party. Bitcoin did what it usually does when Washington throws it a curveball: it fell first and asked questions later, dropping to about $75,600 overnight before climbing back above $78,000 by morning.

The bill that was already stuck

The CLARITY Act passed the House back in July 2025 by 294 votes to 134, with 78 Democrats voting for it, and then it hit a wall in the Senate. On September 15, the Senate voted 49 to 50 on a procedural motion just to open debate, 11 votes short of the 60 needed to move forward, and every one of the 49 yes votes came from a Republican. The bill stalled on two issues that had little to do with the technology itself: ethics rules about federal officials holding crypto, and language about stablecoin yield that regional banks said would drain their deposits. Senator Mark Warner said Congress could not pass the bill while the president was allowed to profit from crypto personally, and Senator Elizabeth Warren said the ethics language could not be enforced against him. Senator Thom Tillis filed a motion to reconsider after the vote, which keeps a revote possible during the lame-duck session, but it would still need 11 more yes votes than the bill got in September.

The new bosses in town

The election also reshuffles who runs the committees that matter most to crypto. Warren is in line to chair the Senate Banking Committee, and Maxine Waters is in line to chair the House Financial Services Committee, which would handle any new version of the bill. In Ohio, Democrat Sherrod Brown defeated Republican Senator Jon Husted, who had voted for the CLARITY Act in September, and the crypto industry's main political action committee, Fairshake, had committed $30 million against Brown. Brown could also end up chairing the Senate Agriculture Committee, which oversees the Commodity Futures Trading Commission. Not every result was bad news for the industry: in Texas, James Talarico won his Senate race after campaigning for crypto rules aimed at curbing fraud while allowing innovation. TD Cowen analyst Jaret Seiberg, who follows Washington for Wall Street, offered the gloomiest read of the night, saying a Democratic sweep could end the bill's chances for two years and predicting investigations into President Donald Trump's crypto ties. Senator Angela Alsobrooks, one of the bill's negotiators, still says a deal is possible before January, and Warren has said she favors bipartisan crypto legislation, just not the version senators saw in September.

What does not change on Wednesday

For all the drama, the election does not change a single rule overnight. Stablecoins remain governed by the GENIUS Act, which is already law, and the Securities and Exchange Commission and the CFTC can keep writing rules without any new legislation from Congress. White House crypto adviser Patrick Witt has said regulators would not wait around for the lame-duck session. The market reaction told the same story: Bitcoin slid from about $77,300 late Tuesday to a low near $75,600 in the early hours of Wednesday, then recovered past $78,000 by the morning, with ether up about 2 percent and DeFi tokens leading the rebound. About $469 million in leveraged positions were liquidated over 24 hours, according to Coinglass, a sign traders were guessing at headlines rather than trading on facts. Nothing in the results changes the value of a single token, and anyone telling you otherwise is selling something.

The real deadline is January 3, when the new Congress convenes and every unfinished bill, including the CLARITY Act, has to be reintroduced from the beginning. That gives the current Congress a lame-duck session of about two months to find 11 more Senate votes for a bill that could not find them in September, under a Democratic majority that will write the next version on its own terms if this one fails. The industry spent years and hundreds of millions of dollars getting this bill to the edge of the finish line, and it now has 60 days to close the deal or start over with a very different set of people holding the pen.

-------
Author: Rowan Marrow
Seattle Newsroom
GlobalCryptoPress | Breaking Crypto News

Bitcoin Reclaims $80,000 and $300 Million in Short Bets Go Up in Smoke

Bitcoin reclaims $80,000 as shorts get squeezed
Bitcoin spent Tuesday night falling and Wednesday getting even. The largest cryptocurrency dropped to about $75,600 in the early hours of Wednesday as midterm election results showed Democrats winning control of both chambers of Congress, and by the early evening it had climbed all the way back above $80,000, briefly topping $81,000 along the way. The swing turned one of the ugliest nights of the year into one of the sharpest reversals, and the traders who bet against it paid for most of it. More than $300 million in bitcoin short positions were liquidated over 24 hours, according to CoinGlass data cited by CoinMarketCap, with about $222 million of that bought back within a single hour as the price ripped higher. Ethereum did even better, jumping more than 6 percent to $2,421, a two-week high, while Solana added about 2 percent to just under $95.

The shorts got squeezed

A short seller borrows bitcoin and sells it, planning to buy it back cheaper later and pocket the difference. That plan works until the price moves the other way, and then the exchange closes the position for them by buying bitcoin back at the market price. That forced buying feeds the rally, which forces more shorts to close. CoinGlass data show about $222 million in bitcoin short positions were closed within the hour to about 10:25 a.m. ET, and nearly all of the bitcoin liquidations in that hour were shorts getting wiped out. Glassnode found traders had piled into shorts all week as the price fell, with the largest cluster of forced buying sitting near $87,000, close to bitcoin's September high.

Options traders saw it coming before the spot market did. On election day, about $660 million in bitcoin options blocks changed hands on Paradigm, more than double the day before, and roughly $420 million of that was traders buying call options, which pay off when the price rises, against only about $105 million in puts sold. Markus Thielen, founder of 10x Research, told CoinDesk before the break that bitcoin looked oversold on momentum indicators and could climb toward $82,000, and by the evening the price was already most of the way there. Open interest in bitcoin futures also rose through the day, which Glassnode reads as traders opening fresh longs rather than just closing old shorts. The squeeze was only part of the story, because new money was also deciding the dip was worth buying.

Wall Street did the heavy lifting

The rebound gathered pace once US markets opened, with megacap tech stocks leading an early rally while Treasury yields and oil prices fell, and crypto rode the same wave of relief. Traders had priced in a Democratic win for weeks: Polymarket had the odds of a Democratic sweep above 75 percent for a while, according to Nicolas Quatravaux, head of EMEA at crypto derivatives network Paradigm. "The result itself wasn't really a surprise," he told CoinDesk, adding that overnight was less about the outcome and more about the uncertainty going away. Dick Lo of TDX Strategies said the same: bitcoin dropped at first on the sweep, then recovered once a clear outcome removed the uncertainty. Once the market knew the result, it stopped worrying and started buying.

The buyers who matter most have not shown up yet

For all the fireworks, there are reasons to keep the excitement in check. The Coinbase Premium, a gauge of US demand for bitcoin, stayed below zero through Wednesday's jump, which means American buyers were not the ones driving the move. Spot bitcoin ETFs lost more than $500 million over the two trading sessions through Tuesday, according to Farside data, and total outflows have now passed $1 billion over the recent stretch. Giottus chief executive Vikram Subburaj told CoinDesk that if bitcoin holds above $78,000 while ETF redemptions continue, it would show buyers elsewhere are absorbing the supply. Until ETF flows turn positive, the rally is running on derivatives and momentum rather than the steady spot buying that sustains a real trend.

Glassnode puts support between $73,000 and $76,000, where newer buyers' average cost, the 200-day average and a block of long liquidations all meet, and the firm says holding that zone would mark a healthy reset inside the uptrend that started in August. A break below $73,000 would point to a longer consolidation instead. The next test comes Friday, when the US jobs report lands and traders get fresh data on the economy and interest rates. For now, the scoreboard is simple: bitcoin fell below $76,000, climbed back above $80,000, and the shorts lost about $300 million in a day.

Bitcoin went from below $76,000 to above $80,000 in about a day, and the traders who bet against it paid roughly $300 million for the privilege. The squeeze can keep feeding itself if the price keeps climbing toward the shorts waiting near $87,000, but the rally will need real buyers to last, and so far the US spot market and the ETFs have stayed on the sidelines. Friday's jobs report gets the next say, and until the flows turn, this is a sharp bounce inside a market that is still more than a third below its highs, not a victory lap.

-------
Author: Dorian Fenwick
Silicon Valley Newsroom
GlobalCryptoPress | Breaking Crypto News

The FBI Asked THORChain to Block North Korea's Stolen Billions. THORChain Said No.

The FBI has asked the people who run THORChain to stop North Korea's hackers from cashing out, and the answer so far has been no. The agency, along with the Secret Service and IRS Criminal Investigation, published a list of 608 Ethereum addresses, 19 Bitcoin addresses and one Solana address tied to the $6.3 billion Binance theft and asked THORChain node operators, exchanges and DeFi services to refuse transactions connected to them. THORChain is the cross-chain swap protocol that moved a large share of the $1.5 billion Bybit haul in 2025, and the hackers are using it again. About $48 million in stolen funds has already passed through its swaps, according to on-chain tracking, and the token that powers the network is paying the price.

THORChain is not a company with a compliance department, and that is exactly the problem. It is around 100 nodes run by roughly 50 people, and blocking an address would take a vote of more than a third of them. Co-founder Chad Barraford said on X that node operators have "zero information that isn't already public" and made no pledge to block anything. Co-founder JP Thor went further, writing that if node operators took the protocol offline or started filtering transactions because a government asked them to, "the experiment is over." His argument is that THORChain is a neutral settlement layer, and once it stops being neutral for one group it stops being decentralized at all. It is a principled stand, and it is also a stand taken while the network is moving money for the most sanctioned regime on earth.

The market is not waiting for the philosophy debate to settle. RUNE fell about 20 percent over the past day and briefly traded below $0.50, making it the biggest loser in the CoinDesk 100. The selling is not hard to understand. Traders see a protocol caught between two bad outcomes: cooperate with the FBI and give up the permissionless pitch that makes THORChain what it is, or refuse and risk becoming the network that helped a sanctioned regime launder billions. The stakes are not theoretical. Security researcher Taylor Monahan warned node operators on X that the FBI request is a warning shot and that claiming technical inability may not shield them from legal risk, pointing to the Tornado Cash case as the precedent. The FBI has already shown it is willing to go after the people behind supposedly unstoppable code.

Meanwhile the money keeps moving. The hackers have been converting stolen Solana into Bitcoin through the swap service Relay, moving about 486,970 SOL worth roughly $46.4 million, according to blockchain investigators. Other stolen funds reached the centralized exchange Gate, which said it froze two linked accounts. THORChain itself briefly halted swaps after a block reorganization bug, and that accidental pause slowed the hackers down more than any policy decision has so far. As of Sunday afternoon, trading from the Tron chain remained halted, which left a chunk of the loot stuck in place while the debate about what to do next went on without it.

This is the fight crypto has been circling for years, and it finally has a name, a dollar figure and a deadline. THORChain's founders are betting that neutrality is the whole point of the protocol and that giving it up once means giving it up for good. The FBI is betting that the people running the nodes will decide that helping North Korea move $6.3 billion is not the hill to die on. RUNE holders are caught in the middle, watching a token fall while its operators argue about what decentralization is actually for. Whichever side wins, the answer will shape how every decentralized protocol deals with the next hack, and there will be a next hack.

-------
Author: Dorian Fenwick, Silicon Valley Newsroom, GlobalCryptoPress | Breaking Crypto News

Wall Street Pulled $799 Million Out of Bitcoin and Ether ETFs in One Day - And Bitcoin Still Closed the Weekend Above $78,000

Bitcoin spent Sunday trading just above $78,000, which would have been a strange sight after the week it just had.

United States spot Bitcoin and Ether exchange traded funds lost a combined $798.9 million on Friday, October 30, in a single session that wiped out four days of buying. Bitcoin was at $78,052.39 on Coinbase at about 09:18 UTC on November 1, up 0.95 percent over the rolling 24 hour window, while Ether was at $2,270.70, up 1.27 percent. Those are spot prices from a weekend when the ETF market was closed, so the two sets of numbers cover different windows. The funds were selling hard on Friday and the coins were still standing on Sunday, and that gap is the part worth paying attention to.

Friday wiped out a week of buying

Farside Investors put net outflows from United States spot Bitcoin ETFs at $643.2 million on October 30, the largest daily withdrawal since June. That came after $440.8 million in net inflows across the four sessions from October 26 to October 29, so one Friday session took out all of that and left the week with a net outflow of $202.4 million. BlackRock's IBIT accounted for $233.7 million of the Friday exit, Fidelity's FBTC lost $201 million and ARK 21Shares' ARKB lost $129.5 million. Those three funds accounted for $564.2 million, or about 87.7 percent, of the day's total, which means this was not a broad panic across every product. It was concentrated selling in the biggest names, on the last trading day of a month that had already been rough for crypto.

Ether has had a worse month than Bitcoin

Ether funds did not get a break at any point last week. They lost $155.7 million on Friday, which took their weekly total for October 26 to October 30 to $431.4 million, and every one of those five sessions was negative. October as a whole added up to about $1.61 billion in net outflows from Ether ETFs, and Glassnode put the run at 23 consecutive trading days of net outflows through October 30. That is the longest losing streak since these funds launched in July 2024. BlackRock's ETHA led Friday with $76.6 million out, followed by $34.1 million from Grayscale's Ethereum Mini Trust and $21.5 million from its ETHE product. That steady drain lines up with the price, because Ether has fallen from near $2,700 in late September to about $2,300. Bitcoin also closed October down 7.3 percent at $77,424, its weakest October in at least ten years.

Why the price did not follow the money out

It is tempting to read Friday as a verdict on Bitcoin itself, but the flow data does not prove why investors redeemed their shares. The selling came a day after the Binance hack on October 29, when about $6.3 billion was taken from the exchange, and nerves were already high across the market. Some of that money may have been investors cutting risk after a shock, and some may have been month end rebalancing. What the data does show is that the selling was real and it was large, and it still did not push Bitcoin below $77,000 on Sunday. United States spot Bitcoin ETFs have taken in more than $57 billion in net inflows since they launched in January 2024. IBIT alone finished October with $932.1 million in net inflows even after its $233.7 million Friday loss, while its smaller rivals lost about $1.45 billion between them in October.

The next test comes on Monday, when ETF trading opens again and the first November flows print. If the outflows continue into a second week, the story changes from a bad Friday to a shift in how big investors are treating crypto after a rough October. If the money comes back, Friday will look more like a sharp reaction to a bad week than the start of a longer retreat. Either way, the weekend gave traders a useful piece of information. A $643.2 million exit from Bitcoin ETFs and a $155.7 million exit from Ether ETFs was enough to erase a week of inflows in a day, and it was not enough to break Bitcoin's hold above $78,000. That does not mean the selling is over, and it does not mean the bottom is in. It means the market absorbed a very large institutional sale and kept trading, and for now that is the most important fact in the room.

-------
Author: Cedric Holloway
New York Newsroom
GlobalCryptoPress | Breaking Crypto News

Binance Hit by RECORD BREAKING $6.3 Billion Hack - CEO Announces When Withdraws Will Resume...

A fractured golden digital vault releases tokens across networks while some are trapped in blue containment fields

Binance is promising to absorb a roughly $6.3 billion hack, but customers are still waiting for the withdrawal button to work again.

The attack struck on October 29, and the exchange's October 30 updates describe an investigation that has expanded beyond an initially suspected compromised laptop. Binance says it has reserved more than $6.34 billion of company funds to cover the stolen assets. About $5 billion is already held in the affected tokens, with purchases of the remainder underway. In his latest video transcript, co-CEO Richard Teng said the rebuilt withdrawal service would reopen only after rigorous testing. He said the Sunday deadline remained on track, while expressing hope that users could withdraw sooner.

That is a target, not a reopening announcement. Binance's latest written service notices say deposits are operating normally while withdrawals remain paused. Teng also committed to a full Proof of Reserves report by Monday, November 2, with an initial view hoped for earlier. The Sunday he referred to is November 1. Those dates give customers concrete milestones against which to judge the company's assurances, rather than another open-ended promise that everything is fine. A visible account balance and an operational withdrawal service remain different things.

Billions reserved, billions frozen - different things

The money Binance says it has reserved is separate from approximately $3 billion in assets it says partners have frozen. Its earlier funding update explicitly excluded frozen or protected assets from the $6.34 billion commitment. Those assets still require recovery and verification. Binance says it is buying the missing token quantities through markets and over-the-counter trades, and warns that limited liquidity and settlement times can slow that work. Setting aside a dollar amount therefore does not mean every replacement token has already arrived. The company has pledged to cover the losses, but its promised reserve disclosure is still ahead.

Independent Elliptic analysis, updated at 13:10 UTC on October 30, estimated the theft at $6.43 billion and verified $2.84 billion frozen onchain. That is its own snapshot, rather than Binance's final accounting. Elliptic calls this the largest crypto theft on record, far exceeding the roughly $1.46 billion Bybit theft last year. Most of the frozen value is in stablecoins whose issuers can restrict transfers. Bitcoin and native ether have no issuer with that same freeze switch, leaving investigators dependent on tracing and intervention when funds reach services. Freezing a token also does not by itself put it back in Binance's wallet.

More than a laptop, and an attribution still under scrutiny

The technical explanation is still developing. Binance first described a possibly compromised DevOps engineer's laptop and said it had found no evidence of wallet private-key leakage. It subsequently disclosed additional breach points, without laying out the complete attack path. TRM Labs' investigation says the Ethereum portion involved EIP-7702, a feature that lets a wallet delegate execution to smart-contract code. The attacker used signed authorizations to install malicious behavior on a hot wallet, while wallets on other chains sent ordinary signed transfers. TRM interprets that wider pattern as evidence of compromised signing infrastructure. Teng's newer account says the delegation bypassed normal approval controls and that attackers destroyed tooling and traces; those remain the company's findings pending a full technical report.

TRM attributes the attack to North Korea's TraderTraitor group with high confidence, while Elliptic considers North Korean involvement likely. Elliptic also cautions that a shared laundering address does not prove the same hackers carried out separate thefts. Its report says no government or law-enforcement agency has confirmed attribution. For customers, the immediate questions are whether withdrawals actually reopen, whether the promised reserves match affected assets, and what the final investigation establishes about the failed controls. Teng says the review now covers devices, cloud infrastructure, key management and signing systems across the company. The next meaningful update is evidence that those repairs and replacement purchases are complete, not simply another repetition of the compensation pledge.

---------------

Author: Rowan Marrow
Seattle Newsroom
Breaking Crypto News

NYSE Owner Bets on Hyperliquid Perps, With U.S. Approval Still Ahead

Glowing perpetual market loop linking a stock exchange facade to a distant gateway

The company behind the New York Stock Exchange wants to bring Hyperliquid-based perpetual futures into a regulated U.S. market.

Intercontinental Exchange announced its agreement with Trade[XYZ] on October 29. ICE is taking a minority stake in the company and would operate its regulated markets. The planned venue targets retail traders seeking exposure around the clock. Regulatory approvals still stand between the announcement and a product Americans can actually use.

The division of work matters. Hyperliquid supplies the underlying technology, while Trade[XYZ] designs and implements markets, according to The Block's reporting on the agreement. ICE supplies the regulated exchange and clearing structure. Contracts are intended to reference assets including cryptocurrencies, equities, commodities and foreign exchange. This would put an established exchange operator around technology that has attracted traders to onchain derivatives, rather than make every existing Hyperliquid market available in America overnight.

A route through brokers, with identity checks

ICE's announcement describes access through participating futures commission merchants after approval. Those are the intermediaries that handle customer futures accounts. Customers would undergo identity and anti-money-laundering checks. Distribution is also expected through ICE's joint venture with OKX, which needs its own approvals. The companies must obtain permission for the proposed leveraged trading as well, so the announcement does not establish what borrowing limits or account conditions customers will eventually face.

Perpetual futures have no scheduled expiry date. As Decrypt reported, Trade[XYZ] already offers eligible users outside the United States continuous trading in contracts referencing stocks, indices, commodities and currencies. The proposed American venue would bring that style of exposure into a different legal and operating structure. A contract referencing a share is still a derivative, rather than direct ownership of that share. Investors evaluating a future offering will need its actual contract terms, rather than assume it works like buying stock in a brokerage account.

The agreement is real; access is still ahead

HYPE rose sharply after the news, with both Decrypt and The Block reporting double-digit percentage gains during the morning. Those snapshots are a market reaction, not evidence that approval has been granted. ICE says the retail business would sit separately from its institutional futures and clearing operations. Its existing participation is more than 99% institutional, according to the company. The planned separation reflects how different a continuously traded retail product can be from markets used by commercial hedgers over longer periods.

The announcement does not give a launch date. It also leaves the eventual contract menu and customer terms for later disclosures. Those details will determine how much the proposed venue changes practical access to these markets. The next meaningful milestones are regulatory decisions and concrete information from participating brokers. Until then, the agreement shows a major exchange operator committing to the business, while the ability to trade through it remains a future step.

---------------

Author: Rowan Marrow
Seattle Newsroom
Breaking Crypto News

CoinDCX Downplays Hack Claims as "False Alarm"... But Now Confirms $16 MILLION Missing.

Abstract retired vault leaking glowing tokens beside a separate secure vault

CoinDCX has put a nearly $16 million price tag on a wallet incident its CEO initially dismissed as a false alarm.

The Indian exchange confirmed the loss in an October 25 update. It says the missing 15.99 million USDT came from retired infrastructure. The company says it has absorbed the cost and customer balances remain unaffected. Those assurances come from CoinDCX, rather than an independent assessment of its reserves.

The public reversal is a central part of the story. According to The Block, CEO Sumit Gupta initially rejected breach reports before the exchange acknowledged losses. Blockchain investigator ZachXBT challenged that account. The publication connects the affected infrastructure to CoinDCX's roughly $44 million hack in July 2025. That history makes the distinction between retiring a wallet and eliminating its remaining exposure especially important.

How a retired wallet still held money

In its official update, CoinDCX dates unusual activity to October 21 and irregular fund movement to the following day. It says some users continued depositing to old addresses. Customer accounts received credits when those transfers arrived. A separate sweeping process was supposed to move the tokens into secure wallets. The company says that process failed for a period, allowing funds to accumulate.

That explanation separates two things customers can easily mistake for the same event. A balance appearing in an exchange account does not, by itself, demonstrate that the underlying tokens have reached their intended storage location. Here, the exchange describes a gap between crediting balances and moving assets. Closing that gap requires operational controls as well as instructions to use new addresses. Calling infrastructure retired offers little comfort if it can still receive valuable deposits.

The questions the loss leaves behind

CoinDCX says trading, deposits and withdrawals continued normally. It also says user assets are held in separate cold wallets and acknowledges that its communication could have been more proactive. The update does not establish who carried out the theft. Nor does a statement about uninterrupted services independently resolve the security investigation. Customers need a clear account of the failed process, the length of the exposure and the checks introduced to prevent a repeat.

For users making another deposit, the exchange's immediate instruction is to check the current address in its app or website every time. An address saved from an earlier transfer can outlive the system that was meant to handle it. The broader issue is whether CoinDCX can demonstrate that obsolete infrastructure no longer leaves money exposed. Its promised absorption of the loss addresses who pays for this incident. A detailed explanation of the controls that failed would address why customers should expect a different outcome next time.

---------------

Author: Ren Nakamura
Asia Newsroom
Breaking Crypto News

Massive Traditional Global Banking and Finance Company HSBC Launches 'RedCoin' - a New Stablecoin...

A glowing red digital coin above a smartphone connecting shops across Hong Kong harbour

HSBC is putting its first stablecoin inside an app millions of Hong Kong residents already use to pay people.

The bank announced RedCoin, ticker RCHKD, on October 23. It is denominated in Hong Kong dollars and launches through PayMe. HSBC says more than 3.3 million users will be able to activate a stablecoin wallet over the coming days. That is a potential audience, not a count of people already holding or spending the token.

The initial uses are straightforward: sending money to friends and paying merchants. HSBC's launch announcement says payments will reach more than 100,000 merchants through PayMe. The bank tested wallet activation, minting and live transfers with nearly 100 staff before launch. HSBC Digital Assets Custody provides safekeeping for RedCoin. The practical appeal is giving an existing payments audience access to stablecoins without first persuading it to adopt an unfamiliar app.

A licence becomes a consumer product

This launch follows a regulatory decision made months earlier. The Hong Kong Monetary Authority granted licences to HSBC and Anchorpoint Financial on April 10. At that point, the regulator said the firms intended to prepare their businesses for launch in the following months. Receiving permission and having a usable product were separate milestones. RedCoin's October rollout is the consumer-facing step that turns HSBC's earlier plan into something customers can start using.

When HSBC announced its licence in April, it said the coins would be fully backed by high-quality liquid assets in segregated accounts. That is the bank's stated reserve arrangement. It is a more specific promise than simply saying a token is backed by a famous financial institution. The same April announcement put PayMe and the Hong Kong mobile banking app at the centre of the plan. Friday's release makes clear that those channels are arriving on different schedules.

Payments first, investments later

The HSBC HK Mobile Banking App is due to gain stablecoin wallet functionality later this year. The bank also plans to let customers subscribe to tokenised investments with RedCoin. A new share class of its HKD money market fund is among the planned products. Those features are future additions, rather than services confirmed available at this launch. Users should distinguish the payment wallet they can activate from the investment offering still to come.

The important test now is what customers actually do with this access. An established app and a large merchant network give HSBC distribution, but neither proves repeat stablecoin use. Wallet activations and sustained payment activity would tell readers more than the size of the eligible audience. For now, the confirmed development is a bank-issued HKD token reaching everyday payments through PayMe. The next milestones are the wallet rollout and whether HSBC delivers the promised banking-app and investment features.

---------------

Author: Ren Nakamura
Asia Newsroom
Breaking Crypto News

UK Finance Giant Standard Chartered Makes a Large Investment In To their Future in The Crypto World...

A digital custody vault joining a bank while a separate technology network branches away

Standard Chartered has signed a deal to take full ownership of Zodia Custody, bringing another piece of crypto's infrastructure closer to a major bank.

The October 21 announcement moves the transaction from an accepted non-binding offer to definitive agreements. Standard Chartered I H Limited would acquire 100% of Zodia Custody Limited. Regulatory approvals and customary closing conditions still stand between signing and completion. The distinction matters: this is a binding deal announcement, not confirmation that the custody operations have already moved.

Standard Chartered is technically British, it's roots going back to 1853 United Kingdom, when starting a bank required direct approval from Queen Victoria herself.  Since then they've grown into a multinational finance company covering everything related to banking and investing. 

Zodia supplies some of the behind-the-scenes tools and services used in the finance industry when a company or firm decides to expand in to the crypto market. Standard Chartered was one of those companies, but why just buy the software when you can own the company that makes it?

Under the bank's announced plan, the regulated custody business will join its existing digital asset custody activities within Securities Services after completion. The parent being acquired owns regulated operating entities in Singapore, Hong Kong, Australia, the United Arab Emirates and Luxembourg. Standard Chartered says existing custody clients continue to receive service as usual. It expects no disruption from the transaction. Those are the bank's assurances about the transition, rather than an independent assessment of how integration will unfold.

Custody and software will take different paths

The transaction also separates two businesses that can easily get bundled together in a crypto headline. Zodia's software and professional-services assets are set to move to Zodia Solutions, an independent entity to be established under SC Ventures. Standard Chartered would be one of the institutions using its technology. The bank identifies a group of supporting investors that includes Northern Trust, NAB Ventures and Emirates NBD. Buying the custody company therefore does not mean folding every technology activity into the same operating unit.

The Block reported that financial terms were not disclosed. Its account places the signed agreements five months after shareholders and noteholders accepted the earlier non-binding offer. It also reports that earlier targets had contemplated definitive agreements by late June and completion by late August. Those dates have plainly given way to a later process. The fresh announcement still makes completion conditional, so treating an old target as a current closing promise would overstate what is known.

A bigger bank offering, not a new retail wallet

The acquisition fits a broader expansion that was already under way. In an October announcement, Standard Chartered outlined plans for Singapore custody services covering selected cryptoassets, stablecoins and tokenized real-world assets. The intended customers are institutions and accredited-investor corporate clients. That service remains subject to applicable regulatory requirements. The bank described it as complementing traditional asset servicing and tokenization, rather than replacing those activities with a separate consumer crypto app.

For ordinary investors, the immediate significance is the business structure around institutional safekeeping. This agreement does not establish that a new wave of customers has bought bitcoin or that assets have already migrated. It shows a bank committing to consolidate custody operations while keeping a separate technology supplier in the picture. The next concrete milestones are regulatory approvals, closing and details of the integration. Until those arrive, the most useful reading is that the deal has advanced substantially, with execution still ahead.

---------------

Author: Sebastian Marrow
European Newsroom
Breaking Crypto News

US Gov Finalizes Stablecoin Rules - Companies Now Need to Apply, and Receive Approval to Issue Tokens...

Glowing digital coins approaching a regulatory gateway and an amber side passage

Stablecoin issuers now have a final OCC rulebook, but submitting an application will not necessarily be enough to keep issuing coins after January.

The Office of the Comptroller of the Currency announced its GENIUS Act final rule on October 21. It takes effect on January 18, 2027. The agency also laid out a waiver process for existing issuers still awaiting a decision when that date arrives. For people holding stablecoins, the transition deserves attention because an issuer's application, approval and permission to continue operating are different things.

The OCC's rule summary covers reserve assets and redemption, along with risk management, custody and supervision. It also addresses capital and an operational backstop. Its reach includes relevant banks, nonbank issuers and foreign issuers under the agency's jurisdiction. Certain state-qualified issuers fall within that scope as well. This is a completed OCC rulemaking, a meaningful step beyond the industry requests for clarification that have dominated much of the recent stablecoin debate.

The deadline and the application queue...

The regulator's separate waiver guidance identifies a practical timing problem. An existing issuer could submit a substantially complete application on time and still be waiting for approval in January. Continuing to issue without a waiver could then breach the prior-approval requirement. The OCC generally expects to grant qualifying existing issuers relief from that requirement unless stronger reasons support a denial. Each request still needs a decision, so an application receipt should not be read as permission.

That relief has limits. The statutory waiver period can run no longer than 12 months from January 18, and the OCC expects to allow only the time needed to address the reason for granting it. The agency does not identify a general reason to waive other requirements for everyone. It also generally expects prospective issuers that are not already operating in the United States to wait for approval before starting. Those distinctions make a blanket claim of a one-year extension misleading.

What to watch for next...

The October 21 announcement did not open the application window. The OCC says it will announce that step separately after the relevant information collection receives final approval from the Office of Management and Budget. Its final rule also leaves Bank Secrecy Act, anti-money-laundering and sanctions provisions for a separate rulemaking with Treasury. Other agencies have their own implementation responsibilities. The arrival of this rule therefore does not mean every part of the federal stablecoin framework is finished.

For holders, the next useful updates will be specific to the issuer behind the token. A company's statement that it plans to apply provides less certainty than a confirmed approval or granted waiver. The final rule is also not a finding that any particular coin has satisfied every requirement. Issuers' public explanations of their transition plans will help show how they expect to handle the deadline. The practical question is whether the company can document its status clearly, rather than simply point to a new law and call the job done.

---------------

Author: Rowan Marrow
Seattle Newsroom
Breaking Crypto News

Zerohash Wants to END Cutting and Pasting Wallet Addresses...

Two glass wallets linked by a glowing transfer bridge with a verification checkpoint

Moving crypto without copying a wallet address sounds like a small improvement until you remember what a wrong transfer can cost.

Zerohash just announced their new feature "AUTH" - account linking for transfers involving crypto, stablecoins and tokenized securities. Its launch announcement describes a system that removes manual address entry and blockchain selection from the customer experience. Users choose a supported account or wallet, authenticate and authorize the movement. The pitch is straightforward: make moving assets feel more like choosing an account than operating a blockchain.

Basically, you'll enter your wallet info once, or link an exchange account by logging in, and from that point onward the process resembles a bank transfer more than a typical crypto transaction. 

The process is outlined in this graphic posted by ZeroHash:


The company says its connection network spans more than 600 custodial accounts and self-custody wallets. It names services including Coinbase, Gemini, Robinhood, MetaMask and Phantom. Those connections do not establish that every customer can use every route inside every app. Zerohash lets integrating platforms decide which accounts, assets and transfer types to enable. Its claimed reach of roughly 250 million users describes the connected services' audience, rather than a disclosed count of active AUTH customers.

A simpler interface still has rules behind it

The current product documentation places AUTH inside account-funding and crypto-transfer flows. In the funding flow, a crypto deposit can become a fiat balance on the receiving platform. In the crypto-transfer flow, the balance stays in crypto. Customers still review and approve the transfer, while the integration handles the network routing in the background.

The October announcement also follows an earlier beta, rather than marking the first appearance of the technology. Zerohash's release notes dated August 3 already described AUTH for its Account Funding SDK. Existing clients could add it to their setup, and new integrations could include it. That release also described exchange-account linking and access to hundreds of non-custodial wallets. The distinction helps put the new announcement in context: this is a broader launch of a product that had already been available in beta.

Arriving onchain and becoming available are different steps

Zerohash's current control documentation explains why a cleaner transfer screen does not settle every question about access to funds. Platforms can configure name matching between their customer records and information from an external account. One approach checks after a deposit arrives but before the balance is credited. Another handles exceptions after crediting through reporting. The timing therefore depends on the platform's chosen configuration, so an onchain arrival alone does not establish that a deposit is ready to use.

Platforms can also request a control that withholds ordinary availability for deposits initiated outside AUTH. The documentation tells them to plan how they will explain the status and direct customers toward recovery options. For a user, that makes the receiving application's supported funding route an important part of the transaction. The useful questions are which assets and accounts it accepts, whether a deposit converts into cash, and when the balance becomes available. Removing address copying can make the process easier, but clear transfer status and recovery instructions will determine how comfortable it feels when something needs checking.

---------------

Author: Rowan Marrow
Seattle Newsroom
Breaking Crypto News

BlackRock's Bitcoin Fund Takes in $665 MILLION, While Some of Their Rivals Struggle...

A golden stream enters one dark financial tower while smaller red streams leave neighboring towers

Bitcoin funds just had a strong day, but almost all the good news came through one door.

Data reported on October 20 shows BlackRock's IBIT attracted $665.2 million on Monday, October 19. Across U.S. spot bitcoin ETFs, the combined net inflow was a smaller $526.7 million, according to Farside Investors. Fidelity's FBTC lost $83.6 million and Grayscale's GBTC lost $54.9 million. The other products in Farside's table recorded zero net flows. That makes this a story about concentrated demand, rather than a wave of buying across every fund.

I mention this because the it's an important distinction - a overall total for a segment of the market can conceal very different experiences for individual products. IBIT's intake exceeded the entire group's net gain because withdrawals elsewhere offset part of it. Those withdrawals totaled $138.5 million. This does not establish that investors moved money directly from Fidelity or Grayscale into BlackRock. The figures show the totals entering and leaving each product, not the identities or intentions of the people behind them.

A big day does not explain every buyer

Using SoSoValue's data, The Block reported that Monday was IBIT's strongest daily intake since October 7, 2025. Its more precise IBIT figure was $665.16 million, while its combined fund total was $526.6 million. Those small differences reflect the separate data series, and this article uses Farside's rounded figures consistently. The report also put IBIT's net assets at $66.37 billion. Assets under management and daily inflows measure different things: one is the size of the fund, while the other tracks net subscriptions over a period.

Presto Research's Min Jung told The Block that the exact reason for the inflows was unclear. He suggested investors could be positioning for bitcoin to catch up with other risk assets. That is an analyst's possible explanation, not something the flow table proves. A fund subscription cannot reveal whether the buyer plans to hold for years or is using a more complicated trading strategy. Nor does the size of a subscription tell readers what bitcoin's next price move will be.

Watch whether the demand spreads

The useful follow-up is whether other funds begin attracting money alongside IBIT. A broader run of subscriptions would provide different evidence from a single standout product carrying the total. Continued withdrawals elsewhere would leave that distinction intact, even if the headline number stayed positive. Repeated observations also help separate a persistent change from a particularly large session. For now, the verified development is a substantial intake at BlackRock with weaker demand elsewhere in the same group.

Readers should keep the trading date attached to these numbers. They describe October 19 activity, reported the following morning, rather than completed October 20 flows. Farside's October 20 row was still unfilled when reviewed. Its automatic table can also be updated, so an empty entry should not be read as a final zero. Monday's result is a meaningful demand signal, but the next few sessions will show whether that signal broadens or remains concentrated.

---------------

Author: Rowan Marrow
Seattle Newsroom
Breaking Crypto News

Stablecoin Rules Could Reach Beyond Issuers - Industry Asks Treasury to Draw Clearer Lines

Glowing digital coins pass through a precise geometric boundary above a decentralized network

The next fight over U.S. stablecoin rules is about who gets pulled into them.

The Blockchain Association filed a comment letter on October 19 asking Treasury to draw clearer boundaries around its proposed GENIUS Act regulations. The submission, reported on October 20, concerns rules implementing Section 3, which addresses payment stablecoin issuance, offers and sales. The industry group supports the broad objective of regulated issuers and adequate reserves. Its objections focus on how the proposal would apply to other businesses and activities around those issuers. These are requests to change a proposed rule, not newly granted exemptions.

In its comment letter, the association asks Treasury to distinguish customer-facing service businesses from firms trading their own assets. It also wants explicit recognition of statutory exclusions covering activities such as self-custody software and transaction validation. The group argues that participation in peer-to-peer liquidity arrangements should be assessed by function rather than tied to a particular technology. That distinction is important to its case because technical designs can change without changing the underlying activity. Treasury has not accepted those requested clarifications simply because the letter was filed.

When trading becomes participation

Another dispute concerns knowing participation in unlawful stablecoin issuance. As The Block reports, the association wants liability tied to actual knowledge and substantial assistance coordinated with an issuer. It argues that ordinary secondary-market trading should not automatically count as participation. The distinction separates helping bring an unlawfully issued token into existence from subsequently trading an existing asset. That remains the industry's requested interpretation, rather than an assurance that every secondary-market transaction is outside the law.

The association also objects to open-ended checks on foreign stablecoin issuers. Many service providers, it says, have no direct relationship with those issuers and cannot readily obtain the requested information. Its preferred approach would let firms rely more heavily on public regulatory lists. The Block also reports objections to requiring additional counterparty identification in permissionless settings where a participant may see only a wallet address. These arguments concern how obligations could work in practice; they do not establish that overseas stablecoins have received blanket approval.

The final wording will decide the reach

For readers who use self-custody wallets or decentralized trading services, the practical issue is the treatment of the infrastructure around a transaction. A rule aimed at issuers can affect more than the business that creates a token if other participants face obligations too. Conversely, an exclusion for a particular activity is not a promise that every business combining it with other services is exempt. The relevant question is what the final text requires of each role. That makes precise definitions more useful than broad claims that DeFi has either won or lost.

The submission should also be read as advocacy from a trade association representing industry members. Supporting reserve safeguards while challenging operational requirements is a policy position, not independent proof that Treasury's approach cannot work. The next meaningful development is Treasury's response through the rulemaking process and the wording it ultimately adopts. A comment letter does not change a platform's services overnight. Until there is a final decision, users should treat claims of new permissions or immediate bans with care and check what the actual rule says.

---------------

Author: Cedric Holloway
New York Newsroom
Breaking Crypto News

Mastercard Launches a New Route From Stablecoins to Bank Accounts for 'Everyday Spending'...

Glowing digital coins flow toward a bank vault and a transparent payment card

Mastercard wants the stablecoins sitting in a wallet to become money people can actually use without a complicated detour.

On October 15, the payments company and BVNK launched Global Money Platform, a set of tools linking digital currencies with conventional accounts and payments. Mastercard says it is available now through BVNK. Banks and fintechs can build the capabilities into services carrying their own brands. For customers, the potential benefit is a shorter route from a stablecoin balance to a bank payout or card purchase.

The launch follows Mastercard's acquisition of BVNK in August and is their first major product integration. According to Mastercard's launch announcement, the offering combines accounts holding several currencies with conversion and payment tools. Businesses can also use it for their own treasury operations. Nuvei and Marqeta are among the companies named as early integrators. Being named at launch, however, does not establish that every customer of those companies already has access.

The bank account at the other end matters

A blockchain transfer can move value to another wallet, but that alone does not finish the job for somebody who needs local currency. This platform connects stablecoin-funded payments to recipients' domestic bank accounts through Mastercard Move. Mastercard expects payout coverage to expand to more than 40 currencies across over 200 countries and territories in 2027. That is an expansion target, so readers should not treat the entire footprint as available today. The useful question is whether a provider supports the particular country and currency you need.

BVNK's product explanation also describes virtual card issuing across more than 130 countries. It lists USDC and OUSD among supported stablecoins and says the integration reaches more than 20 blockchain networks and payment rails. These are capabilities offered to businesses building financial products. They do not establish how much people are spending through the new platform. For a crypto holder, a familiar payment app adding a usable feature would be stronger evidence of adoption than another large network-reach number.

A launch still has to earn its users

The commercial idea is straightforward: make it easier for financial providers to combine services that would otherwise require separate connections. BVNK says its embedded accounts include custodial and self-custodial options. Its announcement also mentions rewards on eligible balances. Those details make the terms of the eventual customer product especially important. A reader should look for a clear explanation of who controls the funds and what conditions apply before treating two similarly named accounts as equivalent.

Neither launch announcement provides a universal consumer fee schedule or a guaranteed arrival time for every bank payout. That leaves real comparisons to be made when individual providers introduce their services. Check the amount that reaches the recipient after conversion and charges, alongside the quoted delivery time. Mastercard also places support for AI-driven commerce and tokenized bank deposits on its future roadmap. The immediate test is simpler: whether the products built on this launch make an ordinary stablecoin payment easier to complete at a competitive total cost.

---------------

Author: Dorian Fenwick
Silicon Valley Newsroom
Breaking Crypto News

Solana Targets Oct 21 for Upgrade - FASTER 150ms Transactions May Be Here Soon!

Violet and green network paths converge into a glowing crystal beneath an alpine dawn

Solana's next speed upgrade could make its transaction charts look worse, even when nothing is wrong.

Alpenglow is scheduled for October 21, according to the Solana Foundation's updated rollout guide. It targets roughly 150-millisecond finality, the point when a transaction becomes irreversible. The mainnet switch is still ahead, rather than an improvement traders can already measure in production. One less obvious change deserves attention before the countdown ends: validator votes will disappear from blocks.

Those votes currently contribute to transaction totals on dashboards that include them. Removing them can produce a sharp numerical drop without customers sending fewer payments or making fewer trades. Anyone comparing activity before and after the upgrade needs to check what the chart counts. A headline number can change because its ingredients changed. For SOL holders trying to judge demand, confusing that accounting change with an exodus would be an expensive reading mistake.

What's the big deal about 150 milliseconds?

The target concerns settlement certainty, rather than a promise that every wallet screen will refresh within 150 milliseconds. Anza's documentation says the target applies under normal network conditions. Its new voting system, Votor, replaces the voting and finality logic of Tower BFT. The network's computers exchange consensus messages, and certificates communicate the result. That is a change to how agreement is reached, with practical consequences for services waiting to treat a payment as final.

Different connections can still deliver that result at different speeds. Anza explains that a node outside the admitted validator set can learn finality from a certificate carried in a later block. That route can add a produced-block interval, and skipped or delayed blocks can extend the wait. Direct connections to an admitted validator provide another route, with their own network latency. So a faster consensus target does not make every provider, connection and application equally fast.

A rollout date, then a real-world test

The Foundation places activation in epoch 1064, expected to begin around 15:00 UTC on October 21. Epoch timing can drift, so the clock time is approximate. Its guide also describes a transition window before the new consensus takes over. Ordinary wallet users are not being asked to migrate their assets. The preparation falls mainly on the operators and developers responsible for keeping the network and its data services running.

Validators have a concrete funding requirement alongside the software work. Anza's vote-account guide sets the new admission ticket at 0.8 SOL per epoch, held above the vote account's rent-exempt minimum. An insufficient balance excludes the validator from voting and producing blocks in the following epoch. For readers, the useful checks after activation are whether settlement improves in the apps they use and whether activity comparisons exclude validator votes consistently. A successful upgrade should earn its reputation through those results, not through a countdown or a misleading chart.

---------------

Author: Rowan Marrow
Seattle Newsroom
Breaking Crypto News

Kraken's Parent Agrees to Buy a European Bank, With Closing Expected in 2027

Glowing digital payment networks connect to a European bank vault

Kraken's parent wants a place in your everyday banking, and it has agreed to buy a European lender to get there.

Payward announced on October 14 that it had signed an agreement to acquire Saldo Finance Oy, the Finnish holding company behind Lithuania's Saldo Bank. Its announcement puts the expected closing in 2027. Regulatory approvals and other closing conditions still stand between the agreement and completion. For European crypto customers, the interesting part is what Payward hopes to build once that happens.

The company says the purchase would help it offer interest-bearing deposits and lending products through Payward Banking. Card issuance and services for other financial technology companies are also part of the plan. That could give customers more ways to manage cash alongside their digital assets. But the announcement does not set out a new deposit rate or a customer launch date. A signed acquisition agreement is a meaningful step, not an account-opening invitation.

What Saldo brings to the deal

Saldo already has a banking business, with different products available in different countries. The bank's own release lists operations in Lithuania, Finland, Sweden and Germany, plus passporting into the Netherlands. It offers retail term deposits across its active markets. Consumer lending covers Lithuania, Finland and Sweden, while its small-business lending covers Lithuania and Finland. That footprint matters, because permission to expand and an already available product are different things.

The bank also has direct access to SEPA, the European payments system, and supplies lending services to fintech partners in Finland and Germany. Its credit card is already available in Finland. A Swedish rollout is expected in 2027. Saldo says the transaction's terms were not disclosed, so there is no announced purchase price to judge against these capabilities. The immediate story is the proposed combination of existing banking services with Payward's wider business.

The customer test comes after the agreement

Payward's stated ambition is to become a primary financial relationship for European clients. For someone who currently moves money between a bank and a crypto platform, a more integrated service could be useful. Convenience alone, though, will not tell customers whether an offer is competitive. The eventual rates, fees and access conditions will matter. Those details will make the difference between an impressive corporate announcement and a service people actually choose to use.

For now, the next milestone is regulatory approval and completion of the purchase. After that, watch for country-specific product announcements and clear terms explaining who can use each service. The releases describe an intended expansion, not a blanket rollout across Europe today. Readers comparing future offers should check the actual account provider and withdrawal conditions before moving money. Payward has announced its route into a bigger European banking business; customers still need to see what arrives at the other end.

---------------

Author: Sebastian Marrow
European Newsroom
Breaking Crypto News

XRP Update Lets Others Access Wallet, With Permission, But Without Sharing Keys...

XRP Update

The XRP Ledger has activated a feature that lets businesses hand out specific account permissions without handing over the keys with full control. PermissionDelegationV1_1 went live on October 8, giving stablecoin issuers and other operators a way to separate routine work from the authority that controls their main account.

That sounds like an administrative change. For a business approving customers or signing transactions throughout the day, it addresses a real security problem: an online operational key should not automatically have the same powers as the keys kept in cold storage.

A narrower set of keys for everyday work

The activation was reported by CoinDesk, citing XRPL Dashboard. With the cited list of 35 trusted validators, the amendment needed at least 29 supporters to maintain more than 80% support for two consecutive weeks. Its countdown had reset in September after support fell below the threshold.

The account granting authority is the delegator. The account receiving it is the delegate. The owner sends a DelegateSet transaction naming the delegate and its permitted actions. The owner can later change or revoke those permissions, and can appoint multiple delegates with different responsibilities.

A stablecoin issuer, for example, could let a compliance account authorize individual customer trust lines after required checks. The operational team would use its own keys for that task while the keys with broader authority remain offline. A compromised delegate would still be dangerous within its assigned powers, but it would not automatically receive unrestricted account control.

What the upgrade allows, and what it does not

The official documentation divides permissions into transaction-type permissions and granular permissions. The first covers an allowed transaction category. The second covers a narrower function within one category, such as authorizing or freezing an individual trust line.

  • Each delegate can receive up to 10 permissions.
  • Owners can create different permission sets for different delegates.
  • Delegates cannot receive powers that let them change account keys or grant more permissions.
  • Granular permissions come from a fixed list. Owners cannot invent custom rules, such as allowing payments only in one chosen currency.

That last limitation deserves attention. A permissions system is not automatically a full corporate policy engine. Teams still have to examine what each available permission permits, rather than assume that an appealing label matches their internal spending or compliance rules.

The safety warning operators should not skip

XRPL’s documentation warns against delegating the PaymentBurn granular permission until the fixCleanup3_4_0 amendment is enabled. Before that fix, a delegate with PaymentBurn can also mint new fungible tokens, including trust-line tokens or multi-purpose tokens, in certain circumstances. The warning says other granular permissions are unaffected.

The reporting reviewed for this article does not establish whether that separate fix is currently enabled. Operators should verify its status before granting PaymentBurn. The warning does not say every delegated account is unsafe; it identifies a specific permission whose behavior can exceed what its name suggests.

Delegation is not a replacement for multisigning

Delegation restricts what another account can do. Multisigning determines which combination of signers must approve a transaction. They solve different problems and can be used together: a delegate can use its own multisigning configuration, with signatures checked against the delegate’s signer list.

There are operational costs, too. Each delegation entry counts toward the owner’s reserve requirement. Delegates need funded on-ledger accounts and pay the transaction fee. Delegated transactions cannot wait in the transaction queue; if they cannot apply immediately to the open ledger, they fail instead of being queued.

For XRP investors, the activation is evidence of new network functionality, not proof of fresh institutional adoption or guaranteed token demand. The next useful evidence is whether businesses put these controls into production.

XRPL now offers a more precise way to divide account authority. Its value will depend on careful permission choices, real operational use and attention to the documented limits. Keeping the master keys offline is a good start; reading the permissions is the part nobody gets to outsource.

---------
Author: Cedric Holloway
New York Newsroom
Breaking Crypto News

Crypto’s $1.19 Billion Leverage Flush Hits Ether Harder Than Bitcoin...

crypto market crash

Crypto’s late-Thursday selloff delivered a familiar lesson with an expensive invoice: leverage can turn a modest price move into a very large cleanup. About $1.19 billion in derivatives positions were liquidated over 24 hours, and Ether absorbed more damage than Bitcoin despite having a much smaller market value.

The snapshot, reported early Friday, October 9, showed roughly $356 million in ETH liquidations against $298 million for BTC. More than $1 billion of the market-wide total came from longs. This was primarily a wipeout of traders betting on higher prices, not an evenly balanced struggle between bulls and bears.

Ether’s smaller size made the damage stand out

According to CoinDesk’s report, Ether’s liquidations amounted to roughly $1.2 million for every $1 billion of market value, compared with about $180,000 for Bitcoin. On that basis, ETH took roughly six times the damage. Ether fell more than 3% to approximately $2,490 in the report’s market snapshot, while Bitcoin lost about 1%.

That comparison needs a little care. It measures liquidations relative to each asset’s market capitalization, not the probability that an individual ETH trader will be liquidated. It also does not establish that Ether’s network or spot holders suffered six times the losses. The exposure here was leveraged positioning.

The largest single liquidation was a nearly $20 million Ether position on Hyperliquid. Other reported token totals included about $71 million for Solana, $34 million for XRP and $25 million for NEAR. Those figures are selected components of a moving market snapshot, not a complete accounting of the $1.19 billion total.

Why the liquidation totals changed overnight

An earlier Thursday snapshot put market-wide liquidations at $1.16 billion as of 20:19 UTC. At that point, reported long liquidations were $293.8 million for Ether and $269.7 million for Bitcoin. Those numbers are not directly interchangeable with the later $356 million and $298 million totals, which cover both sides of the market in a different rolling window.

For a trader following updates in real time, timestamps and categories matter. A rolling 24-hour total keeps changing as new positions close and older events leave the window. A liquidated position’s reported value also is not the same as the trader’s cash collateral loss. Calling the whole amount money that simply vanished would make a punchier headline, and a worse explanation.

Bitcoin’s rebound does not settle the argument

The selloff pushed Bitcoin below $81,000 before it recovered toward $82,000 on Friday. A separate market update linked that recovery to President Donald Trump ruling out an Iran strike before the midterm elections, easing one geopolitical concern.

Forced closures can amplify a decline because exchanges close losing positions when collateral becomes insufficient. That selling can drive prices toward the next group of liquidation thresholds. Removing leverage can reduce one source of pressure, but it does not, by itself, prove that fresh buyers are ready to support a lasting recovery.

The distinction matters particularly for Ether. Its outsized derivatives losses show where the stress concentrated during this episode. They do not provide a reliable shortcut to either a bullish reversal call or a forecast of further declines.

Bitcoin’s bounce offered relief. Ether’s heavier liquidation burden showed how uneven that relief may be. The useful read is less about declaring a bottom and more about separating a genuine recovery in demand from a market catching its breath after forced selling.

------
Author: Ren Nakamura
Asia Newsroom
Breaking Crypto News

Citi Doubles Its Bitcoin Target to $113k as Warnings of an Altcoin Bloodbath Get Louder...

Citi Doubles Its Bitcoin Target

Citigroup raised its 12-month Bitcoin price target from $82,000 to $113,000 and its Ethereum target from $2,240 to $3,028, citing stronger crypto market activity, a supportive macro backdrop, and the return of ETF inflows. The note, dated September 30 and reported by Reuters on October 1, reverses two cuts Citi made earlier in 2026. Meanwhile, Gareth Soloway, chief market strategist at VerifiedInvesting.com, is warning that altcoins could lose 30% to 50% of their value if Bitcoin dominance keeps climbing. Both can't be right - or maybe they both are, which is the part that should make you uncomfortable.

Citi's Case: ETF Flows and Macro Tailwinds

Citi analyst Alex Saunders built the revised targets on three pillars: activity, macro, and ETF flows. The bank now expects $5 billion in inflows into crypto investment products over the next 12 months, replacing its previous assumption of flat net buying. The logic is that financial advisers and brokerages will gradually increase Bitcoin allocations through ETFs, creating a slower but steadier demand floor than the speculative waves of 2025.

The flow data backs that up. U.S. spot Bitcoin ETFs pulled in $2.39 billion during the week ending September 25 - the largest weekly inflow since October 2025 - extending a nine-session streak that totaled about $3.08 billion. Ether products received $689.88 million that same week. The streak broke on September 30 with $148.7 million in net outflows, led by Fidelity's Wise Origin Bitcoin Fund pulling $125.6 million. Over the preceding three months, Bitcoin gained nearly 40% and Ethereum 68%, though both remain down roughly 3% and 9% year-to-date. Citi's $113,000 target sits about 10% below Bitcoin's October 2025 record of roughly $126,200.

Saunders also pointed to SEC rulemaking as a factor. The Senate's failure to advance the Clarity Act in September had "narrowed the path to a market-structure bill," but subsequent SEC regulatory proposals - including new rules on crypto custody and a nationwide preemption framework - took the edge off the negative sentiment. Citi even acknowledged that a 2028 administration change could reverse agency rules, though it placed that risk outside its forecast horizon.

The Altcoin Warning: Dominance Is the Kill Switch

While Citi paints a rosy picture for the majors, Soloway is looking at the same market and seeing trouble for everything else. His argument hinges on Bitcoin dominance, which he says broke above a long-running downward trend line and then retested it - a pattern that has preceded major market turns before. If dominance keeps climbing, the math gets ugly fast.

A 10% Bitcoin decline could push BTC back to the mid-$70,000 range and drag altcoins down 30% to 40%. A deeper 20% correction could mean a 50% altcoin wipeout. Soloway's key level to watch is $81,000 - a daily close below that would break Bitcoin's current bull flag pattern and open the path toward $70,000. He still believes the cycle low is in, but his short-term view is that sideways or slightly down Bitcoin action could still crush altcoins.

Bitcoin dominance sat around 58-60% entering October, with the altcoin season index near 30, meaning most altcoins are already underperforming Bitcoin. The divergence is widening: institutional money is flowing into Bitcoin ETFs and Ethereum ETFs, while altcoins are left fighting for scraps.

Two Exploits, One Bad Week for Altcoins

The altcoin space didn't exactly help its own case. NEAR Protocol's cross-chain swap system, NEAR Intents, lost about $3.8 million to an exploit on October 1. The bug sat in the interaction between NEAR Intents' Omni deposit-and-withdrawal infrastructure and its smart contract. Blockchain investigator ZachXBT traced the stolen funds to KuCoin, where they were bridged into Bitcoin. PeckShield flagged that the attacker's address had interacted with a wallet linked to North Korea's Lazarus Group, though no official attribution has been made.

The irony is thick. NEAR Intents had blocked more than $50 million tied to the Bitget hack from being laundered through its solver network just two days earlier. It fended off one attack and then got hit through a different door. The NEAR token fell as much as 8.6% intraday to around $4.92, giving back gains from a September where it had roughly doubled. The exploit also came two days after Bitwise's NEAR ETF began trading in the U.S. - a brutal juxtaposition of progress and setback.

Stacks Bucks the Trend

One altcoin that refused to die was Stacks (STX), which surged 20% to 28% after founder Muneeb Ali was named CEO of Stacks Labs, replacing interim CEO Alex Miller. The rally coincided with the network's Bitcoin staking program entering its expansion phase. Stacks launched its Genesis Bond on September 10, letting institutions lock BTC on Bitcoin L1 alongside an STX position and earn BTC-denominated rewards. By September 24, participants had bonded 230 BTC alongside 310,000 STX, earning 0.28 BTC in weekly rewards. The next bonding period opens October 10 with 500 BTC of capacity - more than double the initial round.

Ali's priorities include bringing more Bitcoin capital onto Stacks, expanding institutional adoption, and pushing toward a 100x throughput increase. Anchorage Digital is building custody infrastructure for institutional participants. The roadmap also lists privacy tools and post-quantum security. Whether any of that justifies a 28% price move in a day is a separate question, but at least Stacks is building something while the rest of the altcoin market waits to see if dominance kills them.

The market right now is split between two stories that don't reconcile neatly. Wall Street sees Bitcoin heading to $113,000 on the back of ETF flows and macro support. Technical analysts see altcoins heading for a 30-50% haircut if Bitcoin dominance keeps rising. Both can be true if the money flowing into ETFs stays concentrated in Bitcoin and Ethereum while the long tail of altcoins bleeds out. The Citi target is a directional signal, not a timing tool. The altcoin warning is a risk model, not a prophecy. Trade accordingly, and maybe keep some dry powder for when one of them is proven wrong.

---------------

Author: Cedric Holloway
New York Newsroom
Breaking Crypto News