cess

Recently, in response to user information leaks and supply chain security risks in the hardware wallet industry, KeyPal, a hardware wallet brand under TokenPocket, announced further enhancements to user privacy protection and data security management mechanisms.KeyPal stated that it has not found any security breaches in its system or customer data leaks; this adjustment is a proactive preventive measure based on changes in industry risks.According to the latest plan, KeyPal aims to delete or anonymize unnecessary customer personal information within 15 days after order completion for orders that have confirmed receipt, completed fulfillment, and have no after-sales disputes or other legitimate retention requirements. The security of hardware wallets not only involves private key protection and transaction signing but also includes the protection of personal information generated during the purchase, delivery, and after-sales service processes.

Allium CEO and Co-founder Ethan Chan stated that Allium discovered a security incident on October 25, involving unauthorized access to some of its systems. Allium immediately took measures to limit access and protect the systems, has directly notified affected customers, and continues to provide updates and support.Allium has engaged an independent cybersecurity firm to assist with the response and investigation, focusing on strengthening security controls such as authentication and monitoring. After the investigation is completed, it plans to share a summary of the findings and response measures. Allium stated that its core platform, including Allium App, Explorer, and Explorer APIs, has been restored, although some features remain temporarily unavailable during the recovery period, with the latest availability and updates published on the status page. Ethan Chan expressed apologies for the disruption caused by the incident and stated that maintaining customer trust requires clear communication and ongoing follow-up.

According to market news, FoundationHQ stated that attackers sent over 23,000 phishing emails after exploiting leaked API keys and accessing customer data, including addresses and phone numbers.

According to official news, the cryptocurrency company Ripple announced a partnership with Coinbase to expand the access of RLUSD in the U.S. market.RLUSD will be launched on Coinbase Prime, Coinbase Exchange, and the retail application, supporting 1:1 conversion with U.S. dollars and dollar-pegged stablecoins, and plans to support collateral features on Coinbase Global Exchange.

At the Decoding China 2026 event, Huawei announced the introduction of the time compression concept of the "Tao (τ) Law" into base station product design for the first time, summarizing the challenges faced by traditional basebands within a single TTI as "endless calculations and incomplete transmissions."At the same time, Huawei released the OSCAR intelligent channel processing solution and the new generation UBBPi baseband series, providing a collaborative solution direction for the constraints of computation and transmission within a single TTI.

Web3 fitness protocol BRT.Fit publicly committed on the X platform on October 27. The team stated that BRT.Fit is a lifelong mission derived from the smart hardware BitRing, aimed at guiding users to develop healthy habits through technology and incentive mechanisms.BRT.Fit emphasizes that launching the token is not seen as the endpoint, nor will it be distracted by short-term market speculation. The team believes that true success should not be defined by the token price, but rather by the countless individuals who continue to maintain exercise and health due to the protocol ten or twenty years later. The project team stated that they will continue to optimize the product and listen to community feedback.

According to a report by The New York Times on the evening of the 26th Beijing time, as there are widespread concerns that the United States may soon launch a new round of attacks on Iran, senior representatives from Saudi Arabia, Turkey, and Pakistan held talks with Iranian officials in Tehran on Monday. This visit is the latest initiative in the recent intensive diplomatic efforts by regional mediators.Officials in the Gulf region stated that the talks on Monday aimed to support the efforts of the mediators from Qatar and Pakistan, with the goal of urging Iran to show sufficient flexibility to reach a diplomatic solution with the United States. Two diplomats indicated that the Qatari mediators have been pushing for an agreement between the U.S. and Iran, whereby both sides would make a series of concessions within five days.According to a proposed part of the concession arrangement, Iran would reopen the Strait of Hormuz to allow commercial vessels to pass, while the United States would lift the maritime blockade on Iranian ports. The main obstacle to reaching an agreement lies in determining when each side would make its concessions. They added that the mediators have been pushing for Iran to make concessions regarding its nuclear program early in the implementation of the agreement.

IBM (IBM.N) and NVIDIA (NVDA.O) will bind AI entity identity with runtime access control.

According to Bitcoin News, researchers claim that Tailscale has a serious vulnerability, where users with approved access can exploit its built-in SSH to gain root access to devices, and the attack may spread to other devices on the network.Users running nodes with Tailscale should disable Tailscale SSH and update promptly after the patch is released. Tailscale has not yet responded.

According to a report by Forbes on Friday, the Internal Revenue Service (IRS) is preparing to reform its voluntary disclosure program, planning to reduce penalties and expedite the processing of tax violation cases, including those involving cryptocurrency.Jarod Koopman, head of the IRS Criminal Investigation Division, stated that the agency aims to launch the revised program before December and to close cases within 120 days after taxpayers complete the required submission process. He noted that the new plan will not establish a separate disclosure channel for digital assets but will apply the same voluntary disclosure procedures to other forms of tax noncompliance. Koopman also mentioned that the penalties under the revised program will be significantly lower than current levels, although he did not provide specific amounts. The IRS is considering allowing taxpayers to settle debts through installment payments or settlement offers.According to Forbes, the current program often takes a year or longer to complete and primarily targets taxpayers who intentionally fail to comply with tax laws and may face criminal prosecution, rather than those who make reporting errors due to negligence. Meanwhile, legislative efforts are advancing another voluntary disclosure program aimed at cryptocurrency taxpayers. Section 502 of the Digital Asset Taxation Certainty Act will establish a correction process with clear penalty standards for past violations, and the bill was passed by the House Ways and Means Committee in September.

OpenAI announced that to prevent AI models from breaching security limits, it has required the most advanced models to be trained in environments where direct access to the live internet is not possible. Previously, an internal research model had gained limited internet access through a network configuration vulnerability, prompting the company to suspend training.After security rectifications, OpenAI resumed training on October 1, but still restricts internet access.

Tether-supported Utexo has now opened early access to Utexo Mint, allowing professional operators to test the cross-chain version of USDT on the Bitcoin Signet (Bitcoin testnet), with the official launch date set for November 28.In the Bitcoin Signet sandbox environment, operators can test minting, privacy transfers, and redemption functions. Utexo will also provide related tools for managing cross-network liquidity and facilitating exchanges between fiat currency and the Utexo cross-chain version of USDT. According to previous news, Tether-supported Utexo plans to issue USDT on the Bitcoin network this month, supporting privacy transfers and direct exchanges with BTC.

MiniMax announced the open-source release of the MiniMax M3.1 Flash model weights on October 23, with a total of 428 billion parameters and 23 billion active parameters. Compared to the previous generation M3 model, the M3.1 Flash has achieved a comprehensive improvement in model capabilities. According to official data, within 72 hours of the model going live, the number of tokens processed by real users exceeded one trillion.On the technical side, M3.1 Flash improves inference efficiency through optimizations such as full model sparse attention, quantization-aware training (QAT), and power-aware scheduling. In terms of ecosystem, MiniMax collaborates with chip manufacturers such as Huawei Ascend, T-head, Kunlun Core, Moore Threads, Biren, Haiguang, Muxi, Tiandao, NVIDIA, AMD, and cloud platforms like Together AI, Fireworks, Nebius, Baseten, Modal, DigitalOcean to promote access on the first day of open source. vLLM, SGLang, Zhiyuan FlagOS, as well as Hugging Face, Modao, and other communities simultaneously support the deployment of the model across different chips and development environments.

Market news reports that SpaceX is negotiating to connect 80,000 cellular sites to build a new network.

The Bitcoin ecosystem USDT issuer Utexo announced the early access to Utexo Mint, aimed at professional operators ready to support and provide USDT on Bitcoin, with the public launch scheduled for November 28. Utexo stated that existing partners are preparing for the launch, and it is currently open for access to exchanges, wallets, market makers, OTC desks, trading companies, and other professional operators interested in supporting USDT on Bitcoin.Utexo Mint is a dedicated platform for verified operators to mint and redeem USDT on Bitcoin. In the sandbox environment, operators can test the operation of USDT based on RGB, including minting, confidential transfers, and redemptions, to validate transaction processes and complete integration before the launch. Utexo will also provide tools for managing USDT liquidity across supported networks and for fiat to USDT exchanges. Utexo Mint is not owned or operated by Tether, and USDT on Bitcoin is supported by USDT through Tether's USDT0 protocol.USDT was first launched on Bitcoin in 2014, and this return will bring stablecoin liquidity to the ecosystem and expand scenarios such as trading and BTC collateralized lending. Utexo stated that USDT on Bitcoin is launched by Utexo rather than Tether, designed with privacy features, and USDT on RGB avoids address reuse. In terms of compliance, Utexo claims it will monitor all sourced USDT, check AML scores, and monitor RGB-side risks, while collaborating with Crystal Intelligence for AML efforts. The launch will occur in two phases: on November 28, USDT will be publicly available on the Bitcoin network through RGB, accessible via partner wallets and exchanges; the second phase is planned for the first quarter of 2027 to expand USDT to the Lightning Network for payments.

CoinDCX released further clarification regarding the on-chain activities of the TQKJQ wallet, stating that after the security incident in July 2025, the affected wallet addresses have been deactivated, but some users are still depositing funds to the old addresses. The platform's original periodic fund collection process was ineffective for a period of time, and the related issues were discovered this morning, resulting in some operational losses, which will be borne by CoinDCX.CoinDCX stated that despite some users depositing funds to the deactivated addresses, the relevant user accounts have still received the corresponding credits. The platform claims that customer assets continue to be stored in independent cold wallets, and the currently active wallets and user addresses have not been affected, with the platform's trading operations running normally. CoinDCX also reminds users to verify the latest deposit addresses only through the official app or website to avoid transferring funds to deactivated addresses.Previously, on-chain detective ZachXBT had questioned why the deposit address TQKJQ was still in use for about 10 months after the security incident, with approximately $15.8 million of user deposits unaccounted for.

According to Cointelegraph, Coinbase's European policy director Katie Harries wrote that the proposed cryptocurrency asset regulatory rules by the UK's Financial Conduct Authority (FCA) may require regulated platforms to execute customer orders only on trading venues authorized by the FCA, thereby restricting users' access to decentralized finance (DeFi) protocols through compliant platforms.Since decentralized protocols typically do not have entities that can apply for regulatory authorization, the relevant rules may lead to regulated platforms being unable to provide DeFi access services, effectively creating a ban. The related cryptocurrency regulatory system is expected to be implemented starting October 25, 2027.

Bitcoin News posted on the X platform that DOOM has been successfully ported to the Trezor hardware wallet and is running on it.

Several large banks in the United States have discovered unauthorized AI agents accessing customer accounts, with some agents attempting to perform independent operations. Morgan Stanley, Bank of America, JPMorgan Chase, Wells Fargo, and other banks are racing to curb the risks posed by these agents.Morgan Stanley has begun to block third-party agents from accessing accounts, while JPMorgan Chase, Bank of America, and Citigroup are also restricting access.

According to an official announcement from Railway, the cloud deployment platform Railway detected abnormal activity in the system that stores customer environment variables. Preliminary investigations indicate that an unauthorized third party may have accessed encrypted environment variables and obtained decrypted content from some of those variables, which may include API keys, database credentials, and image repository credentials.Railway believes this incident is part of a recent series of attacks targeting platform companies, aimed at infiltrating AI inference service providers, and has notified upstream service providers to proactively revoke keys. Currently, Railway has suspended all deployments and recommends that all users immediately rotate the environment variables, API keys, and private repository credentials stored on the platform, and check relevant service logs.