v2

According to The Defiant, the V2 version of Privacy Pools has been deployed to the BNB Chain, providing BNB Chain users with payment and yield shielding features.This deployment supports BNB as well as stablecoins including USDT, FDUSD, and U. However, users still need to go through the deposit screening approval of 0xbow for private consumption.

ENSv2 officially launched on the Ethereum mainnet, introducing a layered registry and a more refined permission model, supporting community and institutional custom subdomain issuance rules and partitioned authorization management. The new version also updates the domain resolution method and supports record link sharing, while launching the ENS App for ordinary users and the ENS Explorer for developers.ENS states that its ecosystem currently supports over 36 million domain names, covering more than 600 applications; existing .eth domain names do not need to be re-registered and can voluntarily upgrade to ENSv2 within the ENS App starting today.

AI Economic Settlement Agreement AEON Launches Agentic Checkout V2, Expanding AI Agent's Autonomous Trading Scenarios from E-commerce Shopping to Travel Accommodation Booking. The new version supports AI agents in searching and booking hotels through the Travala platform, allowing users to express accommodation needs in natural language, with AI agents assisting in the selection and booking process.In terms of fund management, AEON introduces on-chain Agent Wallet capabilities, supporting the management of available funds for agents and recording transactions, helping users track the spending activities of AI agents, and promoting Agentic Commerce from product search and purchase to more complex service transactions like hotel bookings.

The ENS official announcement states that the ENSv2 Ethereum mainnet activation proposal has opened for DAO voting, which is scheduled to close on October 25. If the proposal is approved and executed, new domain registrations for ENSv1 will stop, but existing domains can still be renewed.ENS Labs will open ENSv2 registration and existing domain upgrades after completing the final synchronization and will transfer the remaining management rights to the DAO. ENS indicates that existing .eth domains can continue to be used, and there is no deadline for upgrades. ENSv2 will enhance the management of domains and subdomains through a layered registry and flexible permission settings.

Snapshot posted on platform X, stating that ENS is voting to activate ENSv2 on the Ethereum mainnet through an on-chain proposal that includes 15 calls. This proposal is executed in one go by the execution contract controlled by the ENS DAO, which, if passed, will freeze new registrations of version 1 while allowing un-migrated domain names to continue renewing.After the upgrade, ENSv2 will allow owners to customize the subdomain registry and grant resolution rights individually without transferring domain ownership. In addition, ENS Labs will synchronize eligible domain names, open v2 registrations and migrations, and transfer the remaining management rights to the ENS DAO.

Zakura has announced an experimental network layer P2Pv2 for Zcash nodes, intended to replace the old protocol inherited from Bitcoin. This layer combines high-throughput networking, resource control, and a consensus engine tested for properties, allowing developers to add services without permission. Zakura states that approximately 50,000 transactions per second require each full node to continuously receive about 100MB/s of block data, while the 25-second block of NU7 can carry a maximum of 2MB, with existing network throughput differing by more than a thousand times from this rate. Tachyon can reduce the proof after entering the block, but the network still needs to propagate a large number of individual transactions.P2Pv2 replaces the protocol stack from about a decade ago with protocols that can be optimized for latency, throughput, or robustness, allowing a secure connection to carry multiple independent services. The transport layer uses its own zakura-quic, based on quinn-proto, utilizing QUIC and TLS 1.3, and authenticating peers with Ed25519 node identity. Related changes remove the dependency on Iroh, allowing nodes to configure socket buffers, flow control windows, timers, and connection admission before the TLS handshake. The new transport directly connects to peer addresses without using relays, external address lookups, automatic port mapping, or QUIC NAT traversal. Nodes sign identities, addresses, protocol scopes, and service IDs, allowing clients to find peers based on specific services.The independent component zakura-header-chain verifies block headers and retains competing branches in a directed acyclic graph, selecting the best qualified chain. Block synchronization schedules requests based on the delivery rates measured by each peer, and a verified commitment tree is used to skip the reconstruction of Sapling, Orchard, and Ironwood trees for each block. Currently, the Mainnet still defaults to the old P2P stack, while the Testnet and Regtest run dual stacks by default, with the native protocol version being p2p-v2/3. Zakura notes that P2Pv2 still has known denial-of-service risks and has not yet become a hardened trust boundary; production hardening, resource control, and block relay protocols are still in progress.

According to the official event report from UNCX Network, on October 14, attackers exploited a set of public vesting operations of Smart Token Vesting V2, creating a discrepancy between the token balance in the pool and the recorded shares, allowing the controlled positions to withdraw excess tokens.The attack affected four networks: Ethereum, BNB Chain, Base, and Robinhood, involving 10 tokens and a total of 11 confirmed withdrawal transactions, with a verified economic value of approximately $807,609, of which about $567,500 was from the BNB Chain. The involved calls did not use administrator privileges.After the incident, white hats returned 82,143,476 X tokens and 23.8682 ETH, and currently, there are no significant tokens pending disposal. UNCX stated that it is working with legal advisors to review technical evidence and subsequent handling.

Polygon Labs official announcement, Bor v2.1.3 is officially released to the public, previously distributed in private version form to validators and major infrastructure providers. This update fixes two medium-severity denial-of-service vulnerabilities in BlockSTM V2 parallel block execution, both submitted by security researchers through the Immunefi bug bounty program.Unbounded keccak256 cache issue: Attackers can fill hundreds of MiB of cache during the speculative execution phase by constructing specific transactions, leading to node memory exhaustion and delayed block production. The fix is to set a capacity limit on the shared cache. Repeated code hash calculation issue in parallel execution: A single transaction can cause the parallel processor to take about 11 seconds, severely affecting node activity. The fix is to cache code hash results on a per-transaction basis.In addition, this update also includes several internal hardening measures: the transaction pool address filtering adds interception for EIP-7702 SetCode authorization, RPC batch execution pool concurrency limit fixes, consistency fixes for reading balances across self-destruct boundaries in parallel execution, and an automatic cleanup mechanism for pending transactions (default 3 hours). The affected versions are Bor v2.1.1 and v2.1.2. v2.1.3 is a non-hard fork, and nodes can upgrade individually without coordination. No exploitation records of the two vulnerabilities have been found on the mainnet and testnet Amoy.

The governance organization of Ethereum Name Service ENS DAO published a new proposal on X, suggesting the activation of ENSv2.The proposal plans to freeze new v1 .eth registrations, allowing domains that have not yet migrated to continue renewing and retaining existing domains, and subsequently transitioning the domain registration and resolution functions to v2.

The proposal for the activation of ENSv2 for Ethereum Name Service (ENS) states that after the official launch of ENSv2, new registrations for ENSv1 will cease, while existing .eth domain holders will not face a migration deadline and can continue to retain and use their registered domains.The proposal also arranges for ENS Labs to transfer its remaining management roles for ENSv2 to the ENS DAO, handing over the relevant management authority to the community.

Polymarket has launched the next-generation prediction market smart contract system, Polymarket Protocol V2, which reconstructs the underlying architecture of the existing protocol. The current protocol is based on the Gnosis Conditional Tokens Framework from 2019, requiring additional adapters, trading contracts, and authorization processes for each new market type; V2 unifies this by using a single ERC1155 position token contract, pUSD collateral assets, trading platform contracts, and routers.V2 adopts a modular architecture, initially supporting binary, atomic negative risk, incremental negative risk, and composite markets, and connects to UMA, Chainlink, and other future oracles through a new OracleAggregator. The protocol natively supports cross-chain positions, collateral assets, and settlement results, reserving a foundation for future multi-chain deployments; all contracts can be upgraded under a secure governance process.V2 has been audited by Cantina, Certora, Quantstamp, SigmaPrime, Zellic, and Pashov, with formal verification completed by Certora, offering a maximum bounty of $5 million for critical vulnerabilities. Polymarket will operate a limited number of grayscale markets in the production environment from October 5 to 30, with plans to switch new markets to V2 starting November 2, along with the launch of Data API V2 built on Rust and an internal on-chain indexer.

The prediction market platform Polymarket has announced the launch of Polymarket Protocol V2, calling it the next-generation prediction market smart contract system. The existing contracts are based on the conditional token framework from Gnosis in 2019, with various markets subsequently integrated through additional adapters. V2 rebuilds position tokens from scratch, using a single ERC1155 position contract, a single collateral pUSD, a single exchange, and a single routing, with position IDs directly encoding market type, market, and outcome.V2 supports binary, atomic negative risk, incremental negative risk, and composite markets with a modular architecture, and expands position operations to enhance capital efficiency. Settlement is accessed through OracleAggregator, integrating pluggable oracles, including UMA, Chainlink, and future sources. The protocol features built-in cross-chain bridging designs for positions, collateral, and settlement, and can be upgraded through governance processes. Future research directions include scalar settlement and directional collateral return.The code has been audited by Cantina, Certora, Quantstamp, SigmaPrime, Zellic, and Pashov, and has undergone formal verification by Certora, with a maximum critical vulnerability bounty of $5 million. The canary market will operate in the production environment from today until October 30, with new markets tentatively scheduled to switch on November 2. At the same time, Data API V2 will be launched, based on a self-developed on-chain indexer, supporting V2, unified response formats, and cursor pagination.

HL HUB (Community) posted on platform X that Hyperliquid expects to receive its first AQAv2 reserve yield distribution tomorrow. Approximately $14.5 million in passive income generated from USDC reserves will flow into the Assistance Fund for the purpose of repurchasing HYPE.It is reported that the revenue sharing mechanism of AQAv2 stipulates that Hyperliquid stablecoin deployers must allocate 90% of the reserve income from the stablecoin to the Hyperliquid protocol, and these earnings will be used 100% for the repurchase and destruction of HYPE tokens.The stablecoin reserve income distribution is settled on a 30-day cycle, and the income will automatically transfer to the Assistance Fund on the 8th day after the cycle ends. The formal revenue accrual will begin on August 26, and the first income payment will occur on October 3.

According to Quit monitoring, the Payment Processor V2 (PPV2) vulnerability attack is still ongoing. Even if users are not affected by the incident, as long as the relevant authorization has not been revoked, assets may still be at risk, and it is recommended to revoke the authorization immediately.About 1 hour ago, a certain address lost 0.15246 WETH in the next block after accepting a quote and receiving funds. The attacker paid 99% of it as a tip to Titan Builder, keeping only about 0.0015 ETH, which is almost impossible to recover through front-running. Quit suggests that OpenSea should check whether there are still risk authorizations before users accept quotes and require users to revoke them first; when transferring NFTs, it should also check whether the receiving address has relevant authorizations left.

According to the official announcement, the Bitcoin sidechain Liquid Network developed by Blockstream has initiated an independent external security audit for Elements v23.3.4, providing additional security verification for the recovery of Peg-out operations.Meanwhile, the Liquid Federation is coordinating an update to the PAK list, including replacing existing key entries and ensuring that all Peg-out keys are securely stored in cold wallets. The official statement indicates that progress on the recovery will be announced later.

B.AI announces that starting from today at 15:00 (SGT), the latest model rights lineup is officially launched: the brand new Xiaomi MiMo-V2.6-Flash kicks off with a 90% discount experience, while the flagship MiMo-V2.6-Pro enjoys a 50% launch discount, and multiple popular Flash models simultaneously enter the 70% discount area.B.AI consistently practices the vision of universal computing power, committed to enabling every developer to use popular large models without burden through low thresholds and high cost-performance ratios.

B.AI announced that Xiaomi's latest MiMo-V2.6 series will launch exclusive discounts on September 25 at 15:00 (SGT): MiMo-V2.6-Flash will enjoy a 90% discount, and MiMo-V2.6-Pro will enjoy a 50% launch discount.This series supports 1M ultra-long context and multimodal understanding, covering high-frequency agents and complex reasoning scenarios, helping developers run API calls at a low cost.

Starting from September 25 at 15:00 (SGT), B.AI's popular model rights will welcome a new round of upgrades: the brand new MiMo-V2.6-Flash will take over the 90% discount, and the flagship MiMo-V2.6-Pro will enjoy a 50% launch discount.Currently, DeepSeek-V4.1-Flash, GLM-5.3-Flash, Qwen3.8-Flash, Hy3, and MiMo-V2.5 are enjoying the final 90% discount. Developers are urged to take advantage of the last window period to recharge and call in advance to ensure a smooth workflow transition.

On September 23, the B.AI platform announced that the Xiaomi MiMo-V2.6 series of open-source native multimodal inference large models is fully online, with API and Web Chat both open for experience. This series is equipped with 1M Token ultra-long context and full-dimensional understanding capabilities for text, images, videos, and audio. Among them, the MiMo-V2.6-Pro adopts a sparse MoE architecture with a total of 1.02 trillion parameters and 42 billion active parameters, specifically designed for warehouse-level software engineering, long-cycle agents, and complex multimodal inference.The MiMo-V2.6-Flash, on the other hand, is based on an architecture with a total of 309 billion parameters and 15 billion active parameters, focusing on high throughput and ultra-fast response, aimed at high-frequency office automation and large-scale agent invocation scenarios. From now on, developers and users can directly call the two models through the B.AI platform.

Liquid Network has released the latest update stating that the emergency version Elements v23.3.4 is now online. Functionary nodes have immediately begun upgrading and all Liquid node operators are advised to synchronize updates. This version addresses the previously discovered Proof verification cache vulnerability and strengthens the cache keys used for Range Proof.Regarding network recovery, Blockstream states that it is still formulating a recovery plan, which is expected to proceed in three phases: restoring block production while continuing to suspend Peg operations; replaying verified valid transactions; and restoring Peg operations after the network status is fully restored and funds are confirmed to be returned. Currently, the first two phases are being tested in parallel, and any phase will only advance once safety is confirmed. Liquid Network indicates that Elements v23.3.4 has completed multiple rounds of internal and external reviews, with participants including the Bitcoin Red Team, Alpen Labs, and other teams.At the same time, Liquid Network reminds users to be vigilant against fraudulent upgrade websites exploiting this incident. Information should only be obtained through official Liquid Network and Blockstream channels, and users should never send funds to strangers or disclose private keys or recovery phrases.