risk

GMO Internet was previously attacked, leading to suspected leakage of customer information data. The company refused to pay the ransom and stated plans to compensate customers for their losses.It is reported that GMO Internet operates the cryptocurrency exchange "Z.com EX," which has obtained licenses from the Thai Securities and Exchange Commission and the Thai Ministry of Finance. The exchange has disclosed that it has been acquired, involving the acquisition of all shares of the target company held by shareholders such as GMO Internet and its related subsidiaries. It is currently unclear whether the customer information data is related to the cryptocurrency exchange.

According to Bloomberg, Anthropic warned in its IPO-related documents that its public advocacy for AI safety regulation and statements from executives may expose the company to risks such as pressure from the Trump administration and selective scrutiny. This risk is related to the company's multiple conflicts with the Trump administration, including disputes over requests to impose safety restrictions on the use of its AI technology by the Department of Defense, as well as disagreements regarding the safety of the Mythos model and export controls.Anthropic also warned that even if other similarly situated companies are not treated equally, Anthropic may still become a specific target for certain departments of the Trump administration. Future export restrictions and cybersecurity or biosafety incidents triggered by AI models could impact its product deployment, international expansion, and business growth.The company also acknowledged that once the regulatory measures it advocates are implemented, they may increase compliance costs, restrict product development and release, and slow its own growth.

Yuxuan Tang, the Head of Asian Rates and FX Strategy at JPMorgan Private Bank, stated that due to thin liquidity and the potential for further interest rate increases, gold faces downside risks. The Federal Reserve is expected to raise interest rates in December and the first quarter of 2027, pushing the 10-year U.S. Treasury yield to peak between 5.25% and 5.5% by mid-year.Despite the weakness in the gold market, its appeal as a hedging tool may drive a rebound in gold prices later next year.

The Hong Kong Investor and Financial Education Committee issued a notice highlighting the risks of trading tokenized funds in the secondary market, including price discrepancies and trading risks, liquidity risks, price fragmentation risks, and reliance on market makers risks. The Committee stated that tokenized funds traded on virtual asset trading platforms may experience significant premiums or discounts compared to their net asset value.The Committee pointed out that investors should understand the investment objectives, strategies, characteristics, operations, and related investment risks of the underlying funds, as well as the tokenization arrangements, including whether transactions are ultimately settled on-chain or off-chain and the associated risks. Investors should also pay attention to trading channel information, market maker arrangements, applicable fees, potential trading suspensions, secondary market trading risks, and the options and related impacts of purchasing or redeeming tokenized fund units at net asset value.

The founder and trader of the NFT project DeGods, Frank, posted on X that although Anthropic's latest S-1 shows strong revenue growth, it cannot be concluded that the resistance to AI investment has disappeared. He stated that the second quarter of 2026 will be a peak for companies to purchase and consume AI Tokens in large quantities, and the market will only begin to pay attention to AI spending management by July; the rise in model homogeneity and the narrowing of output differences may intensify competition and compress profit margins, a trend that has not yet fully manifested in the second quarter.Frank also mentioned that there is still a lack of clear evidence proving that AI can create more profits for most companies, and Anthropic's large enterprise clients are also under pressure to improve their profit margins, which may lead to cuts in spending related to Claude in the future. Large tech companies and AI labs have signed capital expenditure commitments extending to 2034, and related expectations may have already been factored into stock prices; if companies improve the efficiency of existing chips to reduce costs or issue more shares to raise additional capital expenditure, it could put pressure on the valuations of related stocks. He expressed a long-term optimistic view on AI and may participate significantly in the Anthropic IPO, but believes that the ultimate winners in the industry have yet to be determined, and real investment opportunities may only emerge after the current market cycle ends.

The vulnerability bounty platform Immunefi's CEO Mitchell Amador warned that internet users still face the risk of cyberattacks triggered by PHP vulnerabilities, especially small websites that are slow to adopt emergency upgrades, which may take weeks to patch. He stated, "The vulnerability apocalypse" is coming as planned, where the cost of discovering vulnerabilities becomes cheap while the cost of fixing them remains high. He advised users to treat any websites they log into in the coming weeks as potentially compromised, avoid reusing passwords, exercise caution when connecting to encrypted wallets, and revoke token authorizations that are unrecognizable.Previously, the PHP Foundation admitted that it delayed fixing a critical security vulnerability first discovered in 2024 due to resource shortages. PHP developers released emergency patches for two critical vulnerabilities on the same day, but each website still needs to complete the upgrade on its own. Cloudflare CEO Matthew Prince stated that within 24 hours of the PHP vulnerability being publicly disclosed, the web recorded millions of exploitation attempts, with thousands of attempts even before the disclosure. According to W3Techs, PHP supports about 69% of websites with known server-side programming languages, and these vulnerabilities could allow attackers to spread malware or inject malicious scripts into websites.The FBI's Cyber Division also warned that these vulnerabilities could allow malicious actors to "remotely execute code in the PHP core, potentially compromising sensitive data and networks." Amador warned in an interview with Cointelegraph in June that the proliferation of cutting-edge AI models has changed the cybersecurity landscape, giving attackers an advantage, leading to the emergence of the "vulnerability apocalypse," and triggering a resurgence of DeFi hacking attacks. Immunefi is the world's largest vulnerability bounty platform, having paid out $140 million in bounties to 650 protocols to date.

Consensys and digital signature solution provider eMudhra team jointly issued a security warning, pointing out that Ethereum operators face risks when using the eMudhra signing solution. The team discovered vulnerabilities in some Java trust stores, and certain configurations could lead to exposure risks.According to the disclosure, the default settings are unaffected, but some Web3Signer deployments require immediate changes to access controls. Web3Signer is an open-source remote signing tool developed by Consensys, commonly used for key management in networks such as Ethereum.

The Wall Street Journal has published full-page paid advertisements in the past two days, themed "YOUR STOCK. THEIR TOKENS. YOUR PROBLEM." The Chinese expression is a reminder to CEOs of publicly listed companies: your stock, their tokens, your problem, warning the public about the risks of stock tokenization.The advertisement is funded by the American conservative nonprofit organization Common Sense Leadership Fund, warning that the cryptocurrency industry will tokenize company shares in unregulated venues and listing eight major risks: pricing divergence, ownership ambiguity, impaired capital raising, cyber theft, market manipulation, AML loopholes, lack of investor protection, and potential legal liabilities.Previously, a total of 22 companies, including Microsoft, Goldman Sachs, McDonald's, and Alphabet, have expressed opposition. The related documents outline the rules of the collaboration project between OKX and the Intercontinental Exchange (ICE) and list the companies that have opposed it, but do not specify the exact reasons for their opposition.

According to Lookonchain monitoring, if the market continues to decline, a certain whale's long position of 93,184 ETH (approximately 214 million USD) may face liquidation, with liquidation prices of 2256.45 USD and 2226.53 USD respectively.

According to Lookonchain monitoring, if the market continues to decline, a certain whale's long position of 93,184 ETH (approximately 214 million USD) may face liquidation, with liquidation prices of 2256.45 USD and 2226.53 USD respectively.

According to Bloomberg, SpaceX's proposed $40 billion AI financing plan has been reported to encounter obstacles. Sources revealed that SpaceX intends to raise funds through a special purpose vehicle (SPV) structure, which can move related liabilities off the balance sheet to protect SpaceX's own investment-grade credit rating.However, recent volatility in the credit market has complicated negotiations over borrowing costs, and investors have begun to reassess the risks associated with financing large-scale AI infrastructure projects. Currently, Goldman Sachs is leading discussions with investors, including Apollo Global Management.

The U.S. Securities and Exchange Commission (SEC) announced the inspection priorities for the fiscal year 2027, continuing to conduct risk-oriented inspections of over 34,000 registered entities, focusing on investment advisors, funds, brokers, clearing agencies, and other market participants.The SEC stated that the fiscal year 2027 will focus on the fiduciary duty and conflicts of interest of investment advisors, retail investor protection, private funds and private credit, brokers' anti-money laundering and transaction supervision, operational resilience, and cybersecurity, among other areas. Emerging technologies and market infrastructure are also listed as priorities.Among these, the SEC will pay attention to the impact of advanced technologies, including "superintelligence," on market operations, compliance, fraud prevention, and investor protection, while also assessing the risks brought by government bond clearing reform, tokenization, and related changes in market structure.

On October 23, Binance wallet web developer Jackson.ll (@0xOar) posted that there are more ways to use Agent ID, but users should carefully check the risk warnings. He stated that enabling developer mode for Agent means that unverified contract transactions can be signed, and the related potential risks need to be noted. It is recommended to close it as soon as possible after completing the operation or wait for verified developer products.Binance co-founder He Yi subsequently retweeted the post. Previously, several exclusive Binance Agent wallet projects had appeared on the market, and some projects required enabling developer mode.

The official listing account of the cryptocurrency exchange Kraken announced that the token SFI of the peer-to-peer risk-adjusted protocol Saffron will be launched soon, with trading starting on October 23. According to the introduction, Saffron's smart contracts will restructure the underlying decentralized finance yields based on the risk preferences indicated by users.

Analysts indicate that regulatory-led measures can encourage institutional participation in the cryptocurrency ecosystem in the short term, but only legislation can make the framework more robust in the long term. Currently, the cryptocurrency industry has to rely on a series of fragmented regulatory actions, which may be overturned in the next two years due to political changes. At the same time, the U.S. Securities and Exchange Commission (SEC) has issued a five-year "innovation exemption" for tokenized stocks, requiring that tokens must possess the financial and voting rights of the original stocks.Additionally, the U.S. Commodity Futures Trading Commission (CFTC) is exploring allowing leveraged cryptocurrency trading on regulated U.S. platforms, while the Office of the Comptroller of the Currency (OCC) has granted national trust charters to an increasing number of stablecoin issuers and digital asset companies, placing activities such as custody and reserve management under federal regulation. The Financial Accounting Standards Board (FASB) is also considering allowing companies to classify certain stablecoins as cash equivalents to support their broader use in payments and liquidity management.

The credit risk indicators of Meta Platforms have soared to an all-time high, and bond prices have fallen. The company plans to increase capital expenditures, raising market concerns about the rising debt for AI infrastructure.The five-year credit default swap prices rose by 8.9 basis points, reaching approximately 119.3 basis points per year. Meta stated it will invest about $825 billion in AI-related leases and contracts.

Zhao Changpeng stated that no cryptocurrency wallet can achieve absolute security, and there is no software without vulnerabilities or technology that is 100% secure.He pointed out that any action carries risks, and so does inaction; it is inevitable to encounter problems, setbacks, and challenges that need to be addressed during the process. Zhao Changpeng advised users to stay informed about the latest developments, manage risks effectively, and actively solve problems.

According to Bloomberg, Amazon's threat intelligence team discovered that hackers attempted to exploit related vulnerabilities days before the public disclosure of two security vulnerabilities in PHP. After the vulnerabilities were disclosed on Wednesday, hacker activities further expanded. Amazon stated that the related vulnerabilities are being widely exploited but did not disclose specific victim information.Cybersecurity company Palo Alto Networks found that there are over 22.6 million exposed instances worldwide with related vulnerabilities. Wiz researchers estimate that the vulnerabilities could affect about 70% of the internet and have existed for over a decade, while Matt Hull, Vice President of Cyber Intelligence and Response at NCC Group, warned that some vulnerable systems may have already been compromised or even implanted with backdoors.