forma

Bithumb stated that its internal mobile collaboration system DaouOffice was accessed without authorization by external parties, resulting in the theft of some personal information of customers and employees. This incident involves 6,444 customers, of which the data of 5,600 people is in an encrypted state and cannot be read, while 844 customers have confirmed that their personal information has been leaked. Additionally, the information of 715 employees and partners has also been affected.

Recently, in response to user information leaks and supply chain security risks in the hardware wallet industry, KeyPal, a hardware wallet brand under TokenPocket, announced further enhancements to user privacy protection and data security management mechanisms.KeyPal stated that it has not found any security breaches in its system or customer data leaks; this adjustment is a proactive preventive measure based on changes in industry risks.According to the latest plan, KeyPal aims to delete or anonymize unnecessary customer personal information within 15 days after order completion for orders that have confirmed receipt, completed fulfillment, and have no after-sales disputes or other legitimate retention requirements. The security of hardware wallets not only involves private key protection and transaction signing but also includes the protection of personal information generated during the purchase, delivery, and after-sales service processes.

According to TechCrunch, a hacker claiming to be from the "Department of Peace" has reportedly obtained a large amount of employee data from the Okta single sign-on system used by the Department of Homeland Security (DHS), which was publicly released on Wednesday by the data transparency organization Distributed Denial of Secrets (DDoSecrets) as the "Icepick" dataset. The leaked records exceed 40,000, accounting for about one-fifth of DHS's approximately 220,000 employees, involving names, positions, work emails, phone numbers, and office locations, along with information related to internal system permissions. Among these, approximately 21,000 records belong to Customs and Border Protection (CBP) personnel, while about 10,000 records involve the Immigration and Customs Enforcement (ICE) and its Homeland Security Investigations (HSI), with nearly 1,000 related to the Cybersecurity and Infrastructure Security Agency (CISA).TechCrunch stated that it has verified the authenticity of some of the data, with timestamps indicating that the data was exported around mid-August. The hacker also provided the data to journalist and hacker maia arson crimew, who then forwarded it to DDoSecrets. Okta responded that its systems and data were not breached; a spokesperson for the Department of Homeland Security has not yet responded to requests for comment. The report indicates that this is the third incident of data leakage from the U.S. government that has drawn attention in the past month, following the theft of Federal Bureau of Investigation personnel files and Pentagon personnel data.

Alphabet's third-quarter earnings report was disappointing, causing its stock price to drop by more than 10% in after-hours trading. Warren Buffett's last major investment during his tenure as chairman of Berkshire Hathaway performed poorly.Berkshire purchased $10 billion worth of Alphabet stock at around $350 per share in early June. As of June 30, Berkshire held 106 million shares, which, based on the after-hours stock price, is valued at approximately $30 billion, down from the peak of $37 billion in June.

Federal Reserve Chairman Waller stated that the strong performance of capital expenditures is no longer limited to a few sectors.

On October 28, Binance founder Zhao Changpeng stated that four data breaches were reported that day. In the cryptocurrency sector, Coinbase vendor Amplitude exposed some users' contact data, but funds were unaffected; South Korean trading platform Bithumb experienced a user data breach.In traditional finance, South Korean securities firms Mirae Asset and Daishin Securities also experienced data breaches. Zhao Changpeng mentioned that it is impossible to prevent breaches from occurring, but users can protect themselves. The leaked trading platform data includes names, email addresses, phone numbers, addresses, identification documents, and transaction records, most of which are used for phishing, SIM card hijacking, and social engineering attacks.Zhao Changpeng suggested reducing the information shared and using separate email aliases for each trading platform, so that in the event of a breach, it cannot be linked to other accounts while identifying which service experienced the breach.

The Chief Information Security Officer of Slow Fog, 23pds, stated that the data breach at Coinbase has been confirmed, but it has not yet been confirmed whether passwords or funds have been stolen. Hackers obtained contact information for over 70,000 users.

Galaxy Research report shows that the share of Meme coins in Solana's trading volume has dropped from over 50% at the end of 2024 to 15% to 20% in the second quarter of 2026. In addition, SOL has seen a decline of nearly 20% this year, and the U.S.-listed spot and staking SOL ETFs have recorded outflows for two consecutive weeks this month, totaling approximately $50 million.Meanwhile, Solana's share in on-chain perpetual contract trading volume has decreased from 17% to 6%. It is reported that the Solana Foundation has issued a statement indicating that Solana's transformation is underway, attempting to shift from a growth model reliant on Meme coins and speculative trading to more mainstream financial applications such as stablecoins and tokenized assets, in order to attract adoption from Wall Street institutions. However, with the cryptocurrency market in a downturn and competitors like Hyperliquid rising, Solana faces challenges in its growth model transformation. Market analysts point out that Solana's future key lies in its ability to attract stable assets, developers, and users, rather than relying solely on speculative trading to drive growth.

The Ethereum institutional privacy technology organization EthSystems announced the completion of formal verification for its privacy pool (shielded pool), ranging from written specifications to the bytecode running on the Sepolia test network. The verification used different tools in layers: models, circuits, and hashes with Lean; contracts with Halmos and Kontrol; wallets with Aeneas and Verus; and validators and deployment verified through byte-by-byte reconstruction.Double spending and value conservation have been verified by the Lean theorem prover. During the verification, a total of 6 issues were discovered, 3 of which were found in the verification tools themselves. The team also listed the assumptions that still rely on: hash collision resistance, validators rejecting forged proofs, and contract behavior being consistent with the model.

According to Bloomberg, Japanese IT giant GMO Internet has faced a cyber attack, and hackers claim to have released customer information due to the failure to receive a $50 million ransom. It is reported that its foreign exchange trading services have been suspended and are no longer accepting new subscriptions. In addition, all servers of its domain and cloud service Onamae have been compromised, which may affect users.It is reported that GMO Internet operates the cryptocurrency exchange "Z.com EX," which has been licensed by the Securities and Exchange Commission of Thailand and the Ministry of Finance of Thailand. Last week, the exchange disclosed that it had been acquired, with the acquisition involving all shares of the target company held by GMO Internet and its related subsidiaries and shareholders.

The Shanghai Municipal Economic and Information Technology Commission issued the "Action Plan for Accelerating the Development of a New Generation of Intelligent Manufacturing in Shanghai." The plan proposes to strengthen the industrial network and computing power infrastructure, support manufacturing enterprises in carrying out new industrial network transformations, promote the integrated evolution of control systems, industrial networks, and computing power facilities, and advance the pilot projects for industrial 5G/EUHT independent private networks.The plan also proposes to support the deployment of high-quality networks such as 5G-A and 10 Gigabit optical networks, accelerate breakthroughs in AI high-performance chips, and expedite the construction of a "hub-region-edge" computing power facility system. At the same time, it aims to strengthen the overall scheduling of intelligent computing resources, accelerate the construction of national computing power interconnection nodes, promote standardized access and on-demand invocation of computing power resources, and advance the inclusive supply actions of computing power services, enhancing the efficiency of the industrial intelligent computing cloud platform.

The hardware wallet OneKey co-founder Yishi stated that in light of recent data breaches and supply chain attacks in the hardware wallet industry, OneKey will further strengthen user privacy protection.OneKey has confirmed through the Shopify API that relevant historical order records and personal information such as names, emails, and shipping addresses have been deleted, and is further investigating other systems and third-party integration services. In the future, it will ensure that personal information related to orders within its control is permanently deleted within 30 days, and plans to gradually migrate its e-commerce business to self-controlled infrastructure to reduce reliance on third-party platforms like Shopify.Yishi also stated that the data retention policies of logistics service providers such as FedEx and UPS are not controlled by OneKey, and it cannot guarantee that all third parties adhere to the same 30-day timeframe.

According to the official announcement from Foundation, regarding the recent phishing email incident, the team’s investigation found that their email system recorded over 23,000 phishing email sending attempts, of which 19,057 were sent via Mailgun, and another 1,503 were sent via Google Workspace.Due to some email accounts receiving multiple emails, and some sending attempts being unsuccessful or intercepted, it is currently not possible to confirm the actual number of affected individuals.

According to a statement from Keystone Hardware Wallet, its official website was breached on October 20 due to a vulnerability in third-party monitoring tools, resulting in the acquisition of approximately 25,964 purchase records containing personal information, 12,873 unpaid checkout records, and device WebAuth authentication keys. Mnemonic phrases, private keys, and payment information were not affected.Keystone will destroy 18,835 devices containing old keys from its inventory, suspend shipments from the official website, and switch to pre-sales, while reminding users that there is no need to transfer assets and to be wary of scams such as "recalls."

On October 26, B.AI announced the official launch of Android App version 1.3.0. The new version supports 11 language options, breaking language barriers and providing a more convenient AI experience for users worldwide; it also completes a comprehensive performance upgrade, with faster response times and smoother operation.Users can visit the B.AI official website to scan the QR code in the upper right corner, or go to Google Play to search for and download the latest version, enabling mobile AI experiences anytime, anywhere.

Strive CEO Matt Cole posted the company's Bitcoin holdings data chart on the X platform, captioned "The sats/$SATS perpetual swap has been activated," which may hint at disclosing BTC accumulation data next week.

Galaxy Research published an analysis stating that over the past three weeks, the Bitcoin network has seen approximately 40 inscriptions composed of random letters each day, which appear to be encrypted text but are not actually cryptographic information. The related address had previously written the U.S. Constitution into the Bitcoin network in May.The research found that after analyzing 562 texts, the frequency of the 26 English letters is almost evenly distributed, which is significantly different from the characteristics of normal English and substitution ciphers; metrics such as word length distribution and frequency of repeated words also indicate that these texts are likely generated by a random letter generator.Galaxy Research refers to the operator as the "Babel Scribe," believing it is more like testing a data publishing tool on the Bitcoin mainnet rather than attempting to convey hidden information. The structure of on-chain transactions, the continuous use of change addresses, and the regularity of publication times all exhibit characteristics of automated scripts. Related activities also include testing texts, random words in different languages, binary data, and the subsequent writing of the U.S. Declaration of Independence.It is estimated that the project has transferred approximately 3.33 million satoshis in total, of which about 24% was used to pay miner fees, while the remaining funds are still held in the related address. Researchers suggest that there is no need to interpret these garbled texts as hidden information.

Tom Lee stated in an interview that approximately 99% of financial activities are still operating on traditional financial infrastructure, but this situation may create misleading short-term biases, causing investors and businesses to view cryptocurrencies as a niche area and underestimate the potential speed of transformation in the financial system.Tom Lee believes that the current dominance of traditional financial infrastructure does not mean that this pattern will be maintained in the long term. If financial activities gradually shift towards cryptocurrency infrastructure, institutions' reliance on the existing market structure may lead them to underestimate the speed of industry changes. He also warned that banks that have not established cryptocurrency business channels or formulated relevant strategies may face competitive disadvantages as cryptocurrency adoption increases.

The National Information Security Vulnerability Sharing Platform (CNVD) released a security announcement titled "Analysis and Repair Suggestions for PHP Remote Code Execution Vulnerability," in which it supports affected users to closely monitor official information, download and update to the latest version through official channels. Users who are temporarily unable to update can take measures to reduce certain attack vectors, mitigate vulnerability threats, and continuously monitor for abnormal PHP process exits, abnormal system command calls, unfamiliar process creations, and abnormal file writes, while retaining logs for traceability analysis.In its protection recommendations, CNVD stated that information system operating units should further strengthen security protection, comprehensively sort out their network assets, and reduce the public exposure of information systems according to the principle of not connecting to the internet unless necessary. Operating units that are currently unable to repair should take temporary response measures such as network isolation, network access restrictions, and taking unnecessary business systems offline.