onfi

According to The Defiant, the Monero exchange service Wagyu has confirmed a data breach, with the leaked content involving Monero exchange order records.Cybersecurity company Hudson Rock discovered that the breach includes 4,580 orders, which associate public chain recharge transactions, Monero receiving addresses, and customer IP addresses.

According to a report from the Beijing Daily client, the Market Supervision Administration of Haidian District, Beijing, investigated and handled the city's first illegal case of assisting pyramid schemes using blockchain and virtual currency technology, resulting in a technology company being fined and confiscated a total of over 930,000 yuan.The technology company involved is an outsourcing service provider for a certain public blockchain, offering support such as operations, market services, publicity and promotion, exchange docking, and maintenance. This public blockchain launched the "Atomic Plan" and "Hathaway Plan," which are centered around recruiting people for rebates, using the number of recruited individuals as the basis for rebates, and requiring participants to invest funds to obtain membership qualifications. Despite being aware of the pyramid scheme applications associated with this public blockchain, the involved company continued to provide technical operations, external publicity, and maintenance of virtual currency trading channels, facilitating the flow of funds and the spread of activities related to the pyramid scheme.Ultimately, the pyramid scheme activities of this public blockchain were investigated by public security authorities, the organizers were criminally detained, and the involved technology company was administratively punished with a total fine and confiscation of over 930,000 yuan for providing facilitative conditions.

The Chief Information Security Officer of Slow Fog, 23pds, stated that the data breach at Coinbase has been confirmed, but it has not yet been confirmed whether passwords or funds have been stolen. Hackers obtained contact information for over 70,000 users.

NEAR ecosystem announces the launch of the Confidential Jio pre-IPO trading contract, allowing users to participate in the trading of related assets before Jio officially goes public.The contract offers up to 5 times leverage, providing investors with a more flexible risk management tool. According to official statements, this product is expected to transform into an equity perpetual contract after Jio completes its IPO, thereby extending its trading lifecycle.It is important to note that this contract currently does not involve the delivery of actual shares, nor does it provide IPO allocation quotas; its core positioning is focused on price discovery and risk hedging around pre-listing assets.

U.S. President Trump stated that consumer confidence has risen by 7.5%, which is a very significant increase.

The Consumer Confidence Index for October in the United States is 91.7, expected to be 81, with the previous value revised from 81.9 to 84.2.

a16z co-founder Marc Andreessen commented on the online programming platform Replit and its CEO Amjad Masad's proposed concept of Agent Habitat, believing that more companies will become autonomous driving companies as a result. He stated that the keyword pointed out by Masad is chaos, and quoted his viewpoint that most agents today operate in chat windows, personal accounts, and one-off scripts, holding credentials and data given to them by others, but no one decides what they can access, nor can anyone see what they have done.Andreessen noted that disruptive technologies like personal computers, spreadsheets, and email entered the workplace in a bottom-up chaotic manner, and only later did they require habitats to moderately constrain that chaos. He cited examples such as early employees bringing personal computers into the office, spreadsheets enabling non-programmers to create business models and forecasts, but also introducing hard-to-audit formula errors; email bypassed the information flow controlled by the mailroom in the past. He believes this kind of chaos indicates that employees are claiming tools that can bring alignment and significant productivity improvements.Andreessen also stated that code is the ultimate product of alignment, and expanding the range of code contributors will bring chaos, thus requiring a free-range style of agent habitat rather than cages, but it cannot be completely laissez-faire. He mentioned that an employee from Sumitomo Mitsui Finance and Leasing completed a development process originally planned to take 6 people 6 months in just one week. He indicated that for companies to become autonomous driving companies, they must achieve alignment, and in the future, the degree of alignment may be measured by the richness of the agent habitat; Replit and its clients have already understood this, while most companies have not yet grasped it.

The vulnerability bounty platform Immunefi's CEO Mitchell Amador warned that internet users still face the risk of cyberattacks triggered by PHP vulnerabilities, especially small websites that are slow to adopt emergency upgrades, which may take weeks to patch. He stated, "The vulnerability apocalypse" is coming as planned, where the cost of discovering vulnerabilities becomes cheap while the cost of fixing them remains high. He advised users to treat any websites they log into in the coming weeks as potentially compromised, avoid reusing passwords, exercise caution when connecting to encrypted wallets, and revoke token authorizations that are unrecognizable.Previously, the PHP Foundation admitted that it delayed fixing a critical security vulnerability first discovered in 2024 due to resource shortages. PHP developers released emergency patches for two critical vulnerabilities on the same day, but each website still needs to complete the upgrade on its own. Cloudflare CEO Matthew Prince stated that within 24 hours of the PHP vulnerability being publicly disclosed, the web recorded millions of exploitation attempts, with thousands of attempts even before the disclosure. According to W3Techs, PHP supports about 69% of websites with known server-side programming languages, and these vulnerabilities could allow attackers to spread malware or inject malicious scripts into websites.The FBI's Cyber Division also warned that these vulnerabilities could allow malicious actors to "remotely execute code in the PHP core, potentially compromising sensitive data and networks." Amador warned in an interview with Cointelegraph in June that the proliferation of cutting-edge AI models has changed the cybersecurity landscape, giving attackers an advantage, leading to the emergence of the "vulnerability apocalypse," and triggering a resurgence of DeFi hacking attacks. Immunefi is the world's largest vulnerability bounty platform, having paid out $140 million in bounties to 650 protocols to date.

According to a statement from Keystone Hardware Wallet, its official website was breached on October 20 due to a vulnerability in third-party monitoring tools, resulting in the acquisition of approximately 25,964 purchase records containing personal information, 12,873 unpaid checkout records, and device WebAuth authentication keys. Mnemonic phrases, private keys, and payment information were not affected.Keystone will destroy 18,835 devices containing old keys from its inventory, suspend shipments from the official website, and switch to pre-sales, while reminding users that there is no need to transfer assets and to be wary of scams such as "recalls."

According to CoinDesk, the Indian cryptocurrency exchange CoinDCX has confirmed a loss of $16 million. The reason is that its fund sweeping process failed to transfer customer deposits from the wallet that was hacked in July 2025.The exchange stated that it will bear this loss itself and claimed that the funds of active users are still safe.

In October, the U.S. Consumer Confidence Index slightly declined to 48, nearing a historical low. The University of Michigan Consumer Survey indicated that the index fell from 48.1 in September to 48, below economists' forecast of 46.3.The current index is 10% lower than a year ago and 15% lower than in February, before the conflict in Iran.

Cross-chain trading application Fomo recently announced the official public launch of its self-built internal cross-chain bridge (Fomo Bridge) and router. Official data shows that after integrating the self-built system, its cross-chain transaction confirmation time is less than 1 second, and the transaction execution speed is 50% faster than existing market solutions.Fomo stated that its internal router can average optimize execution prices by 0.5% and optimize the worst-performing 10% of transactions by over 2%. Currently, Fomo's cross-chain trading volume is more than 10 times that of other trading applications. As a large cross-chain trading application that possesses both a cross-chain bridge and routing system, Fomo has thus gained control over the entire trading stack, including pricing, indexing, bridging, and routing, ensuring that users can still achieve a fast and low-cost trading experience even in extreme market conditions.

According to CoinDesk citing The Paper, Chinese prosecutors are seeking to confiscate over 61,800 bitcoins and other assets related to a fraud case involving more than 40 billion yuan. The case revolves around Qian Zhimin, the actual controller of Tianjin Lantian Ge Rui Electronic Technology. Prosecutors stated that from 2014 to 2017, the company sold unlicensed financial products in China, raising over 40.378 billion yuan from more than 102,000 investors, resulting in nearly 20 billion yuan in losses for investors.The related funds were reportedly used to repay early investors, operate fraudulent investment projects, and purchase bitcoins, real estate, cars, and jewelry, rather than being invested in legitimate businesses. Qian Zhimin fled China in 2017 and settled in the UK. UK authorities have seized his assets, including over 61,800 bitcoins, as well as Bitcoin Cash, Bitcoin Gold, Bitcoin SV, Ripple, Dogecoin, cash, jewelry, and investment holdings.On October 13, the Tianjin Second Intermediate People's Court stated that it has accepted the prosecutors' application to confiscate the aforementioned assets as illegal gains and has initiated a six-month announcement period for victims and stakeholders to participate in the litigation; those who do not participate can still apply for compensation regarding the recovery of assets. Previously, the UK High Court ruled that for the over 61,000 bitcoins seized in the UK, victims claimed that Chinese law should apply rather than UK law. This ruling requires determining whether victims have property rights under Chinese law, and a hearing will be held subsequently, with some victim lawyers seeking to appeal.

The core feature of the NU7 upgrade is to reduce the time interval between Zcash blocks from 75 seconds to 25 seconds. This change means that the time required to wait for three transaction confirmations will be shortened from nearly four minutes to about 75 seconds. This upgrade has been running on Zcash's test network and is awaiting final integration into the node software.In addition to improving speed, NU7 will also bring two important adjustments: first, 60% of the fees collected from each block will be removed from circulation, and these tokens will begin to be returned to miners around February 2031. Second, Zcash's original Sprout privacy system will be completely shut down, so all funds still held in that system must be transferred out before the upgrade is activated; otherwise, they will become unusable.

Solana's largest network upgrade since 2020, Alpenglow, officially launched on Wednesday. This upgrade moves validator voting from on-chain to off-chain, packaging votes into certificates that can lock transactions within one to two rounds, aiming to reduce the final confirmation time for transactions from about 6 seconds to approximately 150 milliseconds, speeding it up by about 40 times. If this goal is achieved on the mainnet, Solana's transaction settlement speed will be faster than the blink of an eye, bringing it closer to the trading and payment experience of centralized exchanges.Currently, a 6-second confirmation time means that prices may change before the transaction is locked, causing exchanges and payment applications to wait before considering deposits as complete. In comparison, Ethereum takes about 13 minutes to achieve full final confirmation. At the same time, validator costs are expected to decrease by about 60%: currently, validators spend about 2 SOL daily on voting fees, which doubled after Solana recently reduced block time to about 200 milliseconds; Alpenglow eliminates voting fees, replacing them with a fixed validator entry fee of 0.8 SOL per epoch (approximately 24 hours).The upgrade launch process was not smooth. The testnet has been cleared and restarted from scratch six times since its launch in early May, with one migration failing across the entire network and having to be rolled back. According to an article published by Galaxy Digital, one of about 100 validator operators on the testnet, a subsequent migration was successfully completed, clearing the way for Wednesday's launch. Since these events occurred on a network built specifically for testing, there was no risk to real funds. The upgrade was scheduled to switch at the start of epoch 1064 on Wednesday, with actual changes occurring at slot 459,653,000 after a transition of 5,000 slots.

Elon Musk stated that SpaceX is "quite confident" about achieving 10 gigawatts of computing power online by 2027; the possibility of exceeding 20 gigawatts of computing power online by 2027 is not zero.

According to Crypto Briefing, NEAR Protocol has launched a confidential multi-signature treasury management platform called NEAR Business, aimed at crypto-native teams and institutions. It supports handling payroll, vendor payments, cross-chain exchanges, and fund allocation within a single dashboard, covering over 35 blockchains including Bitcoin, Ethereum, and Solana, as well as more than 200 types of assets. Cross-chain transfers are completed through NEAR Intents.The platform operates on NEAR's private sharding infrastructure, with transaction details kept confidential but available for auditing; the platform is free to use, with a 0.35% fee for exchanges, currently limited to invite-only access.

Cryptocurrency market analyst Darkfost expressed the view that the Bitcoin market is currently in a stage of insufficient investor confidence, with both buyers and sellers hesitant. The current profit supply ratio has fallen from a previous brief breakthrough of 60% to 53.8%, approaching the breakeven line of 50%. This indicator excludes Bitcoin held for more than 10 years to better reflect the current state of the circulating market.It is not uncommon for this situation to occur at the end of a bear market. After the market experiences a phase of sell-off and capitulation, and the profit supply ratio falls below 40%, it usually takes some time to regain the 50% level. The restoration of investor confidence and the formation of new demand require time, and the market still needs to wait for investor behavior to gradually stabilize, driving continuous improvement in profit status.

On October 19, the team from the fully homomorphic encryption company Zama announced that users participating in the incentive distribution platform Merkl on the Zama confidential vault can now directly receive cZAMA rewards in the Zama app. The rewards are settled through confidential transfers, and both the positions and the reward amounts remain confidential from deposit to distribution.In September 2026, Zama launched confidential access to 16 selected vaults on the lending protocol Morpho and initiated the first batch of confidential incentives with Merkl, where rewards are calculated based on encrypted balances. When depositing into eligible vaults, users can activate additional incentive options, granting viewing permissions for Merkl to read encrypted balances to calculate rewards without disclosing personal positions. This permission is enabled by default on the deposit interface, and deposits not shared with Merkl do not qualify for incentives.Confidential vaults accumulate based on the user's confidential vault shares and can be claimed during the ongoing activity; existing public vaults with confidential access have rewards collectively obtained by the vault packaging contracts, which are distributed after the activity ends. Zama recommends claiming confidential activities at the end to reduce multiple on-chain fees. Taking the Flowdesk Confidential High Yield USDT vault on Morpho as an example, the related activity ended on October 12, and eligible depositors can now claim their rewards. Users need to check their earnings in Merkl using their wallet and complete the claim in the Zama app by connecting the same wallet; the amount received will not be publicly disclosed on-chain.