client

The cryptographic security vulnerability of the Indian certificate authority eMudhra affects the Ethereum clients Teku and Besu. Researchers found that the private keys of 8 intermediate certificate authorities under eMudhra could potentially be deduced due to insufficient randomness, allowing attackers to forge certificates and trick unpatched software into trusting malicious services.Teku has released version 26.1.3, and Besu has released version 26.1.2, both of which have removed trust in the relevant certificates from their Docker images. If an attacker performs a man-in-the-middle attack, they could trick some validators into sending block fee rewards to the attacker's address; the risk may be higher under specific configurations using external signers. The Teku team stated that the default configuration of the Ethereum mainnet Teku node is not affected, and no action is required, with no reports of the vulnerability being exploited so far.For operators running Teku or Besu directly on the host without using Docker, simply updating the client may not be sufficient; they also need to manually update Java and its trusted certificate list. Operators still using the no longer maintained Java 26 will need to migrate to Java 25.

Last week, Bank of America clients net sold $3.5 billion in U.S. stocks, following an outflow of $15 billion the previous week.According to Bank of America analysts Jill Carey Hall and Trey Brown, retail investors led this sell-off. The communication services sector recorded its largest weekly outflow since tracking began in 2018, affecting the industry including Meta. The industrial sector also faced significant selling, marking the 13th consecutive week of outflows.

Galaxy Research Director Alex Thorn stated that the 13F holdings report for Bitcoin ETFs is still in the early stages, and most large asset management companies and registered investment advisors (RIA) typically submit their filings just before the November 16 deadline.However, some long-term funds have already increased their holdings in Bitcoin ETFs in the third quarter. Wealth management advisory firm SIGFIG Wealth Management submitted its related filing for the first time, indicating that its clients increased their investments in Bitcoin ETFs by approximately $73 million in the third quarter. A significant portion of the assets managed by the firm comes from retail client accounts at banks such as Wells Fargo, Citizens, Santander, and UBS.

Blockstream Chief Marketing Officer Peter Bain stated in a recent interview that Bitcoin has maintained the $81,000 mark amid stock market sell-offs, rising 10-year U.S. Treasury yields, and turmoil in Europe, which he described as "a very, very strong signal." He made this statement during a conversation with Grace Remington and Sean Hagan.Bain emphasized that technological development precedes price and discussed topics such as adoption, stablecoins, and tokenized stocks. He introduced Blockstream's new center established in Lugano and a new consulting department aimed at institutional clients, while explaining why treasury companies are mainly concentrated in the United States and why Switzerland will become the next market—Switzerland's clear regulatory framework and strong banking foundation make it an ideal launch market.Regarding quantum computing, Bain believes that the related threats will take decades to materialize, and that Bitcoin's real weaknesses lie elsewhere. He referenced the PHP vulnerability incident, stating that the industry needs to rethink the way software is released, and introduced Blockstream's research on quantum-resistant signature solutions, how consensus can be reached for quantum upgrades, and the Bitcoin Security Alliance. Additionally, he provided the first update on the Liquid Network event progress: the exchange service has been restored, the network is back online, and users can transfer Bitcoin back to the main chain. Looking ahead to 2027, Bain stated that institutional clients believe Bitcoin "is expected to usher in a major bull market."

Artificial intelligence company Anthropic disclosed that 79% of the company's revenue comes from customers outside the top five clients, and no single client contributes more than 10% of total revenue. The company also acknowledged that it had significantly underestimated the demand for computing power in the past.In terms of financing, according to an agreement reached in April this year, Amazon will provide up to $20 billion in financing. Google has purchased 38.6 million shares of Class G-2 non-voting redeemable stock. Anthropic also stated that it has not yet reached any agreements on any significant acquisitions.

According to Bitcoin.com, Yuridia Trujillo, a tax preparer from Meriden, Connecticut, is accused of fabricating stock and cryptocurrency trading losses in tax returns prepared for clients through her company, Yuri's LLC, for the tax years 2017 to 2024, for assets that the clients never actually held. The Internal Revenue Service (IRS) stated that she is also suspected of using Form 8888 to divert part of the clients' tax refunds into bank accounts belonging to herself and an associated individual.A federal grand jury indicted her on October 7, and she was arrested on October 9. She is currently out on bail of $50,000 and faces 19 counts of aiding in the preparation of false income tax returns, with each conviction carrying a maximum sentence of three years in prison. The case remains an accusation, and she is presumed innocent until proven guilty. Previously, Texas Bitcoin investor Frank Richard Ahlgren III was sentenced to two years in prison in December 2024 for inflating the cost of Bitcoin purchases and was ordered to pay approximately $1.095 million in restitution.

According to monitoring by Olaoluwa Osuntokun, the Chief Technology Officer of Lightning Labs stated that due to the CVE-2026-111943 vulnerability, it is strongly recommended that all lnd, btcd, tapd, and litd users update their binaries or rebuild using Go 1.27.3.The vulnerability involves the compromise of a certificate authority, which may affect the security of the related software.

According to a confirmation from the German Savings Banks and Giro Association (DSGV) to the media, the German Savings Banks (Sparkassen) officially entered the cryptocurrency trading sector this Monday. Institutional clients participating in the first batch can now directly buy and sell digital assets such as Bitcoin through their existing official app.The trading service launched is supported by the securities service provider of the savings banks, Dekabank, and is jointly responsible for the custody of crypto assets with the Stuttgart Stock Exchange. The initial supported trading currencies include Bitcoin, Ethereum, Ripple, Solana, and Polygon. In terms of fees, the service sets a low transaction fee of only 0.99 euros per order, and users are not required to bind a traditional securities account, which is clearly aimed at competing directly on pricing with emerging mobile banks like N26 and Trade Republic.In terms of the promotion schedule, the service does not have a unified national launch date but allows each savings bank to decide its own launch time based on its circumstances. Joachim Schmalzl, a member of the DSGV management, stated that there is strong interest in this business within the group, and it is expected that 30 to 40 institutions will follow suit each month, with the goal of covering most interested savings banks by the first half of 2027. He emphasized that the product is mainly aimed at clients who wish to independently buy, sell, and custody crypto assets, and the savings banks do not provide investment advice nor plan to conduct extensive proactive marketing in the initial phase.For a long time, due to the extreme volatility of cryptocurrencies, the German Savings Banks have maintained a cautious attitude towards them. Schmalzl pointed out that the decision to enter the market was the result of careful consideration, with the decisive factors being strong customer demand and the fact that Europe currently has a reliable regulatory framework, aimed at allowing clients with clear intentions to trade in a regulated compliance environment.However, DSGV still maintains a cautious tone in its statement, reiterating that cryptocurrencies are "highly speculative assets," and clients will be clearly warned of the risks of extreme price fluctuations and total loss when operating. The bank also emphasizes that for the long-term wealth accumulation of the public, traditional securities investments, savings plans, and financial consulting remain its core business.

JPMorgan Chase is expanding its JPM Coin dollar deposit token to the Ethereum mainnet, offering it to institutional clients. The token was previously launched in 2025 on Base, representing actual bank deposits and can be used for near-instantaneous peer-to-peer transfers and settlements around the clock.Currently, it is only available to JPMorgan Chase's institutional clients through Kinexys, not supported for public trading, and not open to retail clients. JPM Coin is a permissioned and regulatory-compliant bank currency, not a decentralized stablecoin.

Deutsche Bank is nearing the launch of institutional-grade cryptocurrency custody services, expected to begin serving institutional clients within weeks, initially targeting German companies and professional investors, supporting assets such as Bitcoin and Ethereum, with technology co-developed by Swiss digital asset infrastructure company Taurus.This service is not aimed at retail cryptocurrency trading applications, and the related plans still require regulatory approval. Deutsche Bank has also discussed the possibility of tokenized deposits, digital securities, and expanding to Asian financial centers by 2027.

Financial services company Charles Schwab has launched direct trading of Bitcoin and Ethereum for eligible retail clients. The company manages approximately $13.33 trillion in client assets and has 40.3 million active brokerage accounts. Charles Schwab CEO Rick Wurster stated that the company is gradually opening up cryptocurrency transfer in and out functions, with plans to add trading for Solana, Avalanche, and Chainlink by the end of 2026.Currently, transfers support the Bitcoin network and the Ethereum network, and withdrawal addresses must be registered in advance. Schwab Crypto trading fees are 0.75%, with a minimum transaction amount of $1 and a maximum of $2 million. Rick Wurster mentioned that cryptocurrency trading will become one of the new revenue sources based on transactions; the platform is currently not open to clients in New York, Louisiana, U.S. territories, and international markets.

According to Bloomberg, Ripple's main brokerage division, Ripple Prime, is launching perpetual contracts for real-world assets (RWA) aimed at institutional clients, covering over 100 reference markets including stocks, indices, ETFs, and commodities. This product is offered through Trade.xyz on Hyperliquid, continuing Ripple Prime's previous strategy of opening up cryptocurrency perpetual contract trading to clients.This arrangement supports cross-position margin sharing. Michael Higgins, CEO of Ripple Prime International, stated that this move helps institutions improve capital efficiency and position management. Clients can pair perpetual contracts with underlying assets for basis trading or use the contracts for directional trading to gain exposure to relevant assets during traditional market closures and on weekends.In the past year, the open interest of RWA perpetual contracts on several major trading platforms has increased from nearly zero to $9 billion. Higgins also mentioned that traditional hedge funds are "very close" to directly participating in the tokenized RWA market, with the key being the establishment of infrastructure that meets their counterparty and anti-money laundering requirements.

NVIDIA CEO Jensen Huang stated that the company will cut ties with clients developing unsafe artificial intelligence.

According to official disclosure, Standard Chartered announced that it has received approval from the Virtual Assets Regulatory Authority (VARA) in the UAE to officially launch cryptocurrency trading solutions for professional investors in the UAE.Eligible affluent clients can buy and sell Bitcoin (BTC) and Ethereum (ETH) directly through their existing bank accounts, without the need to set up a separate wallet or use third-party platforms.

According to Onchain Lens monitoring, Galaxy Digital OTC clients transferred 134,000 LINK to Binance, worth 1.73 million USD, possibly for sale.

According to TASS, Kirill Tsarev, the First Deputy Chairman of the Executive Board of Sberbank, stated that the bank has noticed a significant interest from a large number of customers in cryptocurrencies, which have become an indispensable part of the global market.

Bitcoin Magazine reported that the CEO of the retirement account platform iTrustCapital, which has a scale of 1.3 billion dollars, stated that over 50% of the company's clients are buying Bitcoin.The CEO mentioned that investors have been continuously allocating since the price of Bitcoin fell to a low of 58,000 dollars.

According to The Wall Street Journal, Citigroup has reached a partnership with Coinbase, allowing Citigroup's institutional clients (including large multinational corporations) to accept customer stablecoin payments through Citigroup's merchant acquiring services. Coinbase will provide the stablecoin payment channel and underlying blockchain technology, automatically converting stablecoins into fiat currency, with Citigroup acting as the custodian bank to complete the funds settlement.At the same time, Coinbase's payment clients can leverage Citigroup's banking capabilities to receive, hold, and make payments using tools similar to bank accounts. The cash received will automatically be converted into stablecoins and stored in Coinbase, currently earning an annualized reward of 3.75% in interest-like benefits.

According to CoinDesk, the crypto technology provider Haruko was targeted in a cyber attack earlier this week, affecting 15 clients. The attack exposed clients' read-only exchange API details and trading data. According to insiders, some hedge fund clients with weaker security protections may have had a small amount of funds stolen.Adam Carlile, co-founder and Chief Technology Officer of Haruko, stated in an email sent to clients that this was a targeted attack initiated by an organization, and the affected clients were all non-whitelisted clients. The attackers exploited a vulnerability in one of Haruko's processes to extract user access tokens, thereby obtaining data such as read-only exchange API information stored in process memory; clients' login credentials were not compromised. Haruko has fixed the vulnerability and refreshed the server-side keys, and plans to release a complete technical review report.Based in London, Haruko provides portfolio, risk management, and trading data infrastructure for institutional digital asset companies. The platform connects centralized exchanges, custodians, blockchains, and DeFi protocols, currently serving over 80 clients globally and integrating with more than 100 centralized trading platforms, 30 blockchains, and 250 on-chain protocols. Its listed clients include Bitcoin Suisse, GSR, Flowdesk, 3iQ Digital Assets, M2, among others, with GSR stating that it was not affected by this incident.