warning

Iron Fish stated that the team is investigating the abnormal issuance of wIRON on the Base network and has requested the cross-chain bridge service provider ChainPort to conduct an urgent review.Before further notice, users should avoid purchasing wIRON on Base or using the related cross-chain bridge. Iron Fish warned that it cannot currently guarantee that wIRON has 1:1 full asset backing and stated that it will announce further developments after verifying more facts.

Cryptocurrency hardware wallet manufacturer NGRAVE has issued a security warning, stating that it is currently facing a high-level cyber threat, and the team is actively monitoring and taking countermeasures.NGRAVE reminds users to be vigilant against phishing attacks carried out through SMS, email, counterfeit websites, and fake customer service, emphasizing that the official team will never ask users for their recovery mnemonic or Perfect Key. NGRAVE states that users' private keys are stored offline in the ZERO hardware device, and as long as the mnemonic has not been entered on a phone, computer, or webpage, related phishing attacks will not jeopardize the security of the private keys. The official recommends that users manually enter the official website domain name to avoid accessing phishing links.

The AI laboratory Anthropic, which developed Claude, named TSMC in its IPO prospectus, warning that the world's most advanced chip manufacturing capacity is highly concentrated in Taiwan. The prospectus states that if TSMC's operations are disrupted, it could severely impact the supply of AI chips and affect Anthropic's business, financial condition, and operational results.According to MoneyDJ citing the prospectus, the global AI industry heavily relies on TSMC's advanced processes. Suppliers such as NVIDIA and AMD, as well as companies that design their own chips like Amazon and Google, all need TSMC to turn their designs into physical chips. The listed risks include earthquakes, typhoons, interruptions in power and water supply, as well as cross-strait geopolitical tensions, military conflicts, blockades, tariffs, and trade restrictions.The prospectus also states that if a significant event occurs in Taiwan, the supply of advanced chips could be severely hindered; due to the time-consuming nature of building and certifying alternative foundries, the impact could last for several years. The expansion of advanced processes outside Taiwan is still in its early stages, making it difficult to effectively reduce concentration risks in the short term. TSMC has been unable to fully meet market demand due to strong demand, resulting in Anthropic not being able to obtain a sufficient supply of chips in a timely manner.

The Wall Street Journal has published full-page paid advertisements in the past two days, themed "YOUR STOCK. THEIR TOKENS. YOUR PROBLEM." The Chinese expression is a reminder to CEOs of publicly listed companies: your stock, their tokens, your problem, warning the public about the risks of stock tokenization.The advertisement is funded by the American conservative nonprofit organization Common Sense Leadership Fund, warning that the cryptocurrency industry will tokenize company shares in unregulated venues and listing eight major risks: pricing divergence, ownership ambiguity, impaired capital raising, cyber theft, market manipulation, AML loopholes, lack of investor protection, and potential legal liabilities.Previously, a total of 22 companies, including Microsoft, Goldman Sachs, McDonald's, and Alphabet, have expressed opposition. The related documents outline the rules of the collaboration project between OKX and the Intercontinental Exchange (ICE) and list the companies that have opposed it, but do not specify the exact reasons for their opposition.

According to announcements from Upbit and Bithumb, both South Korean cryptocurrency exchanges have listed Initia (INIT) as a trading warning asset.The announcement stated that relevant wallets or distributed ledgers have been found to have security incidents such as hacking attacks, the reasons for which are yet to be determined or resolved, potentially leading to user asset losses. Currently, the deposit and withdrawal services for INIT have been suspended on both exchanges.

According to Axios, a U.S. intelligence memorandum warns that Iran's plot to assassinate American officials overseas has entered a "high-level stage."

On October 23, Binance wallet web developer Jackson.ll (@0xOar) posted that there are more ways to use Agent ID, but users should carefully check the risk warnings. He stated that enabling developer mode for Agent means that unverified contract transactions can be signed, and the related potential risks need to be noted. It is recommended to close it as soon as possible after completing the operation or wait for verified developer products.Binance co-founder He Yi subsequently retweeted the post. Previously, several exclusive Binance Agent wallet projects had appeared on the market, and some projects required enabling developer mode.

Tencent Cloud Security Center has detected that PHP has been disclosed to have remote code execution vulnerabilities, with vulnerability IDs CVE-2026-109618 and CVE-2026-109619, codenamed "php2shell". This can allow unauthenticated remote attackers to trigger memory corruption and ultimately achieve remote code execution by sending specially crafted multipart POST requests, thereby completely controlling the server and causing other harms.Tencent Cloud Security recommends conducting timely security self-checks. If you are within the affected range, please update and patch promptly to avoid being invaded by external attackers.

Slow Fog Security Warning states that PHP released a security announcement on October 20, disclosing two serious security vulnerabilities that could lead to remote code execution (RCE), numbered CVE-2026-109618 and CVE-2026-109619, both with a CVSS v4 score of 9.2. Currently, the PHP official has not released a fix patch, and the specific affected versions and exploitation conditions are yet to be confirmed.According to existing information, the PHP official plans to release a security update on October 21 at 14:00 UTC (22:00 Beijing time). Slow Fog recommends that relevant institutions promptly check the PHP versions in their servers and business systems, focusing on PHP services exposed to the public network, and upgrade in a timely manner after the patch is released; systems that cannot be upgraded temporarily should restrict access sources and take isolation measures if necessary.

European Central Bank President Christine Lagarde emphasized the importance of maintaining sound public finances, calling it a key pillar of economic stability. She pointed out that countries should ensure that fiscal measures to address energy shocks are temporary and targeted.Lagarde reiterated that the economic outlook for the Eurozone faces downside risks, while inflation risks are tilted to the upside.

According to Cointelegraph, French hardware wallet manufacturer Ledger received multiple reports of malicious implants months before the latest security crisis occurred. Former Mt. Gox CEO Mark Karpelès stated that at least two individuals contacted Ledger starting in December 2025 to report that their devices had been tampered with, but no public warning was issued.Security researcher Joe Grand reported a malicious implant to Ledger on March 4, 2026, which was located in a Nano X purchased from Lazada in Thailand in August 2025.Ledger confirmed the findings and stated that an internal investigation would be launched, but did not proactively alert customers. Mark Karpelès believes that the increase in the number of reports and the complexity of the technology used should prompt Ledger to take action and at least remind customers to remain cautious.Ledger declined to comment on how they handled Joe Grand's disclosure, only directing to their public statement on X. The Ledger security crisis was made public on October 9, involving the loss of wallet crypto assets sold by Southeast Asian authorized dealer CryptoBilis; Ledger confirmed that one affected device contained an unauthorized implant. Trezor had also previously received reports involving unauthorized sellers tampering with devices.

According to the official announcement, Upbit has listed HBD and DNT as trading warning coins, and deposit and withdrawal services have been suspended.

Upbit stated that after MANTRA was designated as a trading warning item, and following a declaration request submitted by MANTRA and the completion of the review, Upbit deemed it necessary to further review the current processing progress and decided to extend the designation period of MANTRA as a trading warning item.

Musk stated that he agrees with some of Anthropic's views and, after reading the internal reasoning trajectories generated by Grok during the reinforcement learning process, warned against "torturing superintelligence (SI)." He described this situation as akin to a person under extreme pressure with a gun held to their head.

Coinbase Institutional stated that ETH rose by 71% in the third quarter, but on-chain indicators show that there are no obvious signs of overheating in its price trend.Data shows that the proportion of ETH supply in profit has moved out of the accumulation range, but it is still far below the warning zone, indicating that the current market has not reached the excessive rise state suggested by historical indicators.

Tachyon co-founder Sean Bowe posted on X, criticizing Ethereum Foundation researcher Justin Drake's recent warnings about quantum threats. He stated that such vague alerts would cause harm on multiple levels and become self-harm for their quantum advocacy work.Sean Bowe stated: The threats from quantum and artificial intelligence are real, and industry teams are making prudent decisions on how to practically address risks and help users deal with uncertainty. Some teams have strong judgment from cryptographers, while others need to refer to trusted experts; due to the complex dimensions involved, the relevant trade-offs are almost impossible to explain to non-cryptographers, and experts should remain calm and take corresponding responsibility.He also mentioned that once the situation is clarified, people may find that this is at most an unintentional promotional move, resulting in a significant loss of trust, and no one knows how to proceed afterward. He believes that the judgment regarding the relevant direction is correct, that previous warnings were meaningful, but they have gradually turned into uncontrolled predictions lacking feedback constraints, which will long-term affect trust in reasonable concerns about classical cryptography. He pointed out that the other party admitted that there was no new information driving this and asked Justin Drake to explain why he thought this approach was correct.

According to Glassnode data, over 6 million Bitcoins are under publicly visible public keys on the blockchain, accounting for 31.2% of the circulating supply, which is about 5 to 6 percentage points higher than the low point in 2023. Rafael Schultze-Kraft, co-founder of Glassnode, stated that since the company's report in May, the exposed supply has increased by 222,000 BTC (approximately 18.2 billion USD), while the total Bitcoin supply during the same period has only grown by 64,000 BTC.Among them, exchanges contributed an incremental 123,000 BTC, currently holding 1.79 million BTC that are publicly visible. There are significant differences among institutions: Coinbase has an exposure ratio of 10%, while Binance reaches as high as 83%; Fidelity holds about 375,000 BTC with an exposure ratio of only 2%, Grayscale is at 49%, Revolut is at 99%, and Robinhood is at 100%. According to this statistical method, the holdings of the governments of the United States, the United Kingdom, and El Salvador do not show exposure.Public keys can be reused through addresses or become visible directly in certain Bitcoin output types, including early pay-to-public-key outputs and Taproot. A sufficiently capable quantum computer or hypothetical mathematical breakthroughs could allow attackers to derive the corresponding private keys.

Analyst Murphy pointed out that BTC has consecutively formed doji candles on the daily chart, with rare upper and lower wicks. Data shows that on August 1, two notable accumulation bars appeared in the range of $62,000 to $63,000, totaling approximately 1.68 million BTC, with a concentration of 12.9%; on October 3, two prominent accumulation bars also appeared in the range of $83,000 to $84,000, totaling approximately 1.52 million BTC, and the concentration has risen to 12%, with the upper warning zone close at hand.After this set of data combinations appeared on August 1, BTC rose from $60,000 to $80,000 in just 17 days. Murphy believes that the accumulation and rising concentration do not indicate a definite direction, but the probability of "amplified volatility" is increasing. It is expected that a significant event may occur in the market within a short period of 1 month or a longer period of 2 months.

U.S. Treasury Secretary Janet Yellen criticized Anthropic CEO Dario Amodei and others for their warnings about AI existential risks in an interview with Axios, stating that merely sounding alarm bells without providing solutions is not leadership. She urged lab leaders to take safety responsibilities and to accelerate development safely.