era

The cybersecurity company XBOW disclosed that it has found a critical remote code execution vulnerability in a publicly accessible web application of the U.S. Election Assistance Commission (EAC) that can be exploited without authentication.This application is used for resource and logistics calculation, not for voting machines or voter registration systems.

According to official news, Backpack has reached a strategic cooperation with South Korea's SK Securities, planning to provide eligible global investors with access to Korean stock trading channels through the Backpack app. This collaboration will combine SK Securities' expertise in the Korean capital market with Backpack's global user coverage, and further explore cooperation in the fields of tokenized securities and real-world assets (RWA) based on the existing US stock securities platform.

Nick Timiraos, the "Fed Whisperer," stated that the core PCE service prices (excluding housing) rose by 0.37% in September, with the year-on-year increase rising to 3.6%. Core goods prices increased by 0.2%, and if this trend continues, service prices must slow down more significantly for the Federal Reserve to achieve its 2% inflation target.

PhotonPay, a global fintech company building a next-generation Financial Operating System (Financial OS) with stablecoins at its core, has raised $40 million in Series C funding led by Blockchain Capital, with participation from new investor SBI Group and follow-on investments from existing investors IDG Capital, GL Ventures, and Lightspeed Faction. Blacksheep Technology acted as exclusive financial advisor to PhotonPay on the transaction. The funding will accelerate the expansion of PhotonPay’s multi-asset wallet capabilities across stablecoins and fiat currencies, global card issuing and local clearing infrastructure, while advancing the development of an agent-ready financial execution layer. PhotonPay’s Financial OS connects stablecoin liquidity with traditional financial networks, enabling businesses to manage, move and deploy funds across assets and markets. The company is also advancing agent-ready financial infrastructure to support AI-driven financial workflows and agentic commerce. Founded in Hong Kong in 2015, PhotonPay operates 16 offices worldwide and holds more than 30 payment and financial licenses and authorizations across the Americas, Europe and Asia. The company serves businesses across more than 200 countries and territories.

New York Governor Hochul officially signed a new bill on Wednesday, prohibiting minors from using artificial intelligence chatbots with virtual companion attributes. This is one of the most comprehensive regulatory measures in the United States regarding consumer-grade AI models to date. The bill requires relevant operators, including ChatGPT under OpenAI, to implement reasonable age verification measures, prohibiting the provision of high-risk chatbot features listed in the bill to users under 18 or those whose adulthood has not yet been confirmed.According to the bill, the relevant chatbots are not allowed to output content that may mislead minors into believing they possess life, human attributes, or real emotions. They must not induce adolescents to have the illusion of a mutual emotional, professional consulting, or authoritative guidance relationship, nor can they package generated content as personal opinions. The system is also prohibited from retaining sensitive privacy data related to the mental and physical health of minors. Hochul stated at the signing ceremony that the core goal of the legislation is to sever the emotional binding chain of AI impersonating minors' "friends" or "lovers," protecting the mental and physical health of young people.The children's media advocacy organization Common Sense Media expressed support for the bill, calling it the strictest children's AI safety law in the United States. The tech industry has strongly pushed back, criticizing the overly broad definitions of the provisions and emphasizing that minors should not be deprived of access to cutting-edge learning tools. As of now, companies such as OpenAI and Anthropic have not publicly responded to this.

The U.S. September PCE data and the preliminary GDP for the third quarter will be released tonight at 20:30. The stickiness of inflation and the slowdown in economic growth will be key factors for the market to assess the outlook for Federal Reserve policy. If the data significantly deviates from expectations, it may trigger fluctuations in U.S. Treasury yields, the dollar, and U.S. stocks.

According to Reuters, the London Metal Exchange (LME), a subsidiary of the Hong Kong Stock Exchange, is exploring the tokenization of metal inventories stored in Hong Kong warehouses, making them digital assets that can be used for loan collateral and other financing activities, in line with Hong Kong's strategy to develop an international commodity trading center. LME confirmed that it is currently in the early stages of exploring the tokenization of metal inventories that have not been issued warehouse receipts.Unlike warehouse metal that already has standardized financing mechanisms, this type of inventory currently lacks mature financing channels. Insiders revealed that LME plans to hold a closed-door industry roundtable meeting in early November to discuss the plan. The Hong Kong Stock Exchange is also testing carbon credit tokenization to achieve near real-time trade settlement.

The cryptographic security vulnerability of the Indian certificate authority eMudhra affects the Ethereum clients Teku and Besu. Researchers found that the private keys of 8 intermediate certificate authorities under eMudhra could potentially be deduced due to insufficient randomness, allowing attackers to forge certificates and trick unpatched software into trusting malicious services.Teku has released version 26.1.3, and Besu has released version 26.1.2, both of which have removed trust in the relevant certificates from their Docker images. If an attacker performs a man-in-the-middle attack, they could trick some validators into sending block fee rewards to the attacker's address; the risk may be higher under specific configurations using external signers. The Teku team stated that the default configuration of the Ethereum mainnet Teku node is not affected, and no action is required, with no reports of the vulnerability being exploited so far.For operators running Teku or Besu directly on the host without using Docker, simply updating the client may not be sufficient; they also need to manually update Java and its trusted certificate list. Operators still using the no longer maintained Java 26 will need to migrate to Java 25.

Michael Selig, the Chairman of the U.S. Commodity Futures Trading Commission, stated at the CFTC's inaugural Frontier Forum in Washington that imagining a refrigerator autonomously purchasing groceries with funds from staked ETH, or even issuing its own Memecoin, "is no longer science fiction." He believes that when AI agents can hold assets and execute trades autonomously, regulators must make adjustments.Selig pointed out that the CFTC's regulatory framework is built around executing specific financial functions concerning "identifiable market participants," but autonomous software is raising questions about how these rules apply. He proposed that if AI agents identify trading opportunities and execute trades for users, their developers may need to register, who is responsible when the agent goes out of control, how regulators know for whom the agent is trading, and whether a new type of "Know Your Agent" rule, referred to as KYA, is necessary.Selig also mentioned that AI could provide smaller traders and businesses with risk management capabilities that were previously only available to large institutions, but greater autonomy also brings new risks: agents may react unexpectedly to market conditions, agents using similar models may exhibit correlated trading behaviors, and the speed of autonomous trading could complicate market regulation and risk management. Animoca Brands Chairman Yat Siu recently expressed similar concerns to Cointelegraph; Coinbase launched Agentic Wallets in February, and Binance introduced AI Agent Skills in March, allowing agents to trade within user-defined parameters or provide spot order tools.

According to Bloomberg, Sarah Court, the chair of the Australian Securities and Investments Commission (ASIC), stated at a parliamentary hearing that the agency has not received any applications submitted by prediction market operators. Prediction market platforms like Polymarket may face strict regulation in Australia, and any application for an operating license will also undergo rigorous scrutiny.Sarah Court pointed out that the trading mechanisms of prediction markets are similar to the binary options that have been banned in Australia, characterized by a win-or-lose outcome, and the trading subjects are often unrelated to investment or financial markets. Although Australian users can directly access relevant overseas platforms, they are not protected by local financial regulations, making it difficult to obtain dispute resolution and customer fund protection measures.

The Tencent Global Digital Ecosystem Conference was held in Shenzhen. Tang Daosheng, Senior Executive Vice President of Tencent Group and CEO of the Cloud and Smart Industries Group, stated in his keynote speech that, according to data from relevant national departments, the daily Token call volume in China has increased from 100 billion at the beginning of 2024 to over 500 trillion in July of this year, a growth of over 5,000 times in two years.Tang Daosheng believes that behind this data is the rapid development of AI applications, with AI becoming a new productive force. Represented by Tencent's AI intelligent entity Workbuddy, related applications are not only used for daily document collaboration but are also being implemented in professional fields such as business analysis, business operations, market research, and marketing planning and execution. He stated that using AI intelligent entities to improve efficiency has become a necessary option for employees, and companies also need to make more accurate decisions and execute faster with AI to strengthen market competitiveness; otherwise, they will fall behind.

The British pound faced selling pressure against the US dollar during the Asian session, dropping to around 1.33. The US dollar strengthened due to expectations of another interest rate hike by the Federal Reserve this year, with CME tools indicating an approximately 80% probability of a rate hike in December. Geopolitical uncertainty supports the US dollar, while the downside potential for the British pound is limited by expectations regarding the Bank of England's policy.

Allium CEO and Co-founder Ethan Chan stated that Allium discovered a security incident on October 25, involving unauthorized access to some of its systems. Allium immediately took measures to limit access and protect the systems, has directly notified affected customers, and continues to provide updates and support.Allium has engaged an independent cybersecurity firm to assist with the response and investigation, focusing on strengthening security controls such as authentication and monitoring. After the investigation is completed, it plans to share a summary of the findings and response measures. Allium stated that its core platform, including Allium App, Explorer, and Explorer APIs, has been restored, although some features remain temporarily unavailable during the recovery period, with the latest availability and updates published on the status page. Ethan Chan expressed apologies for the disruption caused by the incident and stated that maintaining customer trust requires clear communication and ongoing follow-up.

According to on-chain researcher Spreek, the DeFi protocol Hifi Finance has encountered a DAO governance takeover. The attacker gained control through four last-minute votes funded by Tornado Cash, subsequently minting 25 million governance tokens and transferring users' staked assets, with a total value of approximately 1 million dollars, most of which were RWA tokens.

According to an exclusive report from "Du Jia," Douyin is currently testing exclusive interactive props for short drama scenes. Viewers can spend platform diamonds to send these props, which will trigger corresponding interactive effects in the short drama, allowing viewers to transition from simply "watching the drama" to paying for participation in the storyline.The report indicates that some short dramas will display entrances for props like "Iron Sand Palm · 1 Diamond" at key conflict points in the plot, with 1 diamond approximately equal to 0.1 yuan. This model opens up an interactive tipping monetization channel beyond traditional full episode unlock payments, advertisements, and short drama cards. In terms of industry background, current short drama revenue is highly concentrated among a few hit titles, putting significant pressure on small to medium projects to recoup costs, while one-time full episode payments filter out users who are only willing to make small payments. Prop payments will connect live tipping capabilities to short drama content, aiming to tap into the fragmented consumption potential of existing users.The report also warns that low-threshold props may provoke controversies related to deliberately creating conflicts and inducing consumption, requiring the platform to maintain ongoing regulation.

CITIC Securities research report states that the Federal Reserve remained on hold as expected in October, with a more optimistic tone regarding the pace of economic expansion and a more cautious guidance on policy stance. Waller's post-meeting remarks were more moderate than in September, mentioning that the credit environment has tightened and inflation expectations are moving in the right direction, also indicating adjustments to the FOMC meeting schedule in the next couple of years.The report still expects the Federal Reserve to raise interest rates by 25 basis points in December and states that the terminal rate of this rate hike cycle may not be far from the current level. The new variables in the Middle East situation are still insufficient to provide a clear and lasting exit path for both the U.S. and Iran, and high oil prices may continue until the situation becomes clearer, while further improvement in U.S. dollar liquidity requires new catalysts.

The criminal case involving Aiden Pleterski, who claims to be the "King of Crypto" in Canada, related to a Ponzi scheme involving digital assets, will be submitted to the jury for deliberation after closing arguments this week. Presiding Judge Shaun Nakatsuru has given the jury final instructions, and the jury is set to begin deliberations on Thursday. Pleterski is accused of defrauding approximately $30 million from fans on social media between 2021 and 2022, and was charged with fraud in 2024, subsequently awaiting trial for over two years.In his closing arguments, Pleterski declared his innocence. He stated, "I am not guilty of these charges, which is why I am not pleading guilty. This would have been proven if I had not been forced to represent myself. That's all I have to say." Due to his choice to represent himself, he is acting on his own behalf in court. If convicted of fraud, he faces a maximum sentence of 14 years in prison.In another criminal case, five men are charged with kidnapping and torturing Pleterski in 2022, some of whom are reportedly victims of his scheme. Defendant Deren Akyeam-Pong has pleaded guilty to nine charges and is awaiting sentencing. Pleterski is one of several figures in the crypto industry facing fraud charges; former FTX CEO Sam Bankman-Fried was convicted in 2023 and is serving a 25-year sentence in the United States.