encrypted

According to CoinDesk, Google has announced a crypto asset custody security product called Google Multi-Party Compute (MPC) aimed at banks and other financial institutions. This product is currently in private preview, with several large financial institutions participating in testing, and it is planned to be commercially available in early 2027.The system decentralizes control of private keys across multiple independent systems, reducing the risk of single-point theft through collaborative signing. Google's parent company Alphabet has used this technology to protect its digital assets on Ethereum and Solana, but the specific types of assets and the list of financial institutions participating in the testing have not been disclosed.

Galaxy Research published an analysis stating that over the past three weeks, the Bitcoin network has seen approximately 40 inscriptions composed of random letters each day, which appear to be encrypted text but are not actually cryptographic information. The related address had previously written the U.S. Constitution into the Bitcoin network in May.The research found that after analyzing 562 texts, the frequency of the 26 English letters is almost evenly distributed, which is significantly different from the characteristics of normal English and substitution ciphers; metrics such as word length distribution and frequency of repeated words also indicate that these texts are likely generated by a random letter generator.Galaxy Research refers to the operator as the "Babel Scribe," believing it is more like testing a data publishing tool on the Bitcoin mainnet rather than attempting to convey hidden information. The structure of on-chain transactions, the continuous use of change addresses, and the regularity of publication times all exhibit characteristics of automated scripts. Related activities also include testing texts, random words in different languages, binary data, and the subsequent writing of the U.S. Declaration of Independence.It is estimated that the project has transferred approximately 3.33 million satoshis in total, of which about 24% was used to pay miner fees, while the remaining funds are still held in the related address. Researchers suggest that there is no need to interpret these garbled texts as hidden information.

According to CCTV News reports, the National Computer Virus Emergency Response Center and the National Engineering Laboratory for Computer Virus Prevention and Control recently discovered multiple incidents of users encountering the "Weaxor" ransomware attack within our country, relying on the National Computer Virus Collaborative Analysis Platform.After the user's important files are encrypted, the file names are changed to the original file name with the ".weax" suffix added. The attackers leave a ransom note on the host, demanding that users contact them and pay the ransom.

Cryptocurrency payment infrastructure company Mesh announced a partnership with Visa, allowing users to directly spend their cryptocurrency and stablecoin balances from participating wallet applications at over 175 million merchant locations worldwide. This integration supports both offline and online payments through Visa credentials configured in the backend, with Mesh responsible for transaction fund transfers and currency conversion, so users do not need to sell or transfer assets in advance.Bam Azizi, CEO and co-founder of Mesh, stated that cryptocurrency has never been a consumption issue, but rather a "last mile" problem, and previously solving this issue meant needing to obtain a separate card. Mesh handles fund transfers and conversions, allowing balances to be converted into purchasing power at the moment of payment, without users needing to transfer any assets, and merchants not needing to make any changes. The specific launch date of this partnership, supported devices, and participating platforms have not yet been announced.Mesh is a cryptocurrency payment infrastructure company that previously supported the launch of PayPal's "Pay with Crypto" service. In August 2025, institutions such as PayPal Ventures and Coinbase Ventures raised Mesh's total funding to over $130 million. In January of this year, Mesh completed a $75 million Series C funding round led by Dragonfly, entering the unicorn ranks. This partnership is also Visa's latest initiative to continuously integrate cryptocurrency assets into its merchant network, having previously engaged in similar collaborations with WeFi, Bridge, and others.

The security organization SlowMist has released an in-depth threat intelligence report on the DarkSword Trojan backend and iOS attack chain. The report tracks the evolution of this attack infrastructure and reveals its high danger to cryptocurrency asset users.According to SlowMist's analysis, after the relevant exploit code was made public in March 2026, DarkSword-PROV2 appeared on GitHub in July, and its attack infrastructure was observed to be operational by late September.The SlowMist team not only tracked its online infrastructure but also correlated its management panel with public GitHub repositories, dissecting the exploit code, delivery chain, and post-compromise capabilities. The report highlighted several key findings of this attack framework: a highly automated complete attack pipeline that integrates vulnerability delivery, device and data collection, data theft, and cryptocurrency wallet fund aggregation functions.The extensive and deep data theft capabilities of this toolkit target not only keychains, files, and information but also specifically cryptocurrency wallet data, with the ability to decrypt wallet data and aggregate funds. Although the toolkit claims to support iOS 13 and above, code analysis confirms that its actual effective exploit window is concentrated in the iOS 18.6--18.7.2 and iOS 26--26.1 version ranges. The publicly available vulnerability components have been weaponized and integrated into a deployable attack framework, significantly lowering the threshold for launching complex iOS attacks.In response to this threat, SlowMist has provided clear security recommendations. Users should keep their iOS systems updated and avoid clicking on untrusted links, as merely opening a malicious page in the Safari browser could trigger vulnerabilities. If a device has accessed suspicious landing pages, users should consider their mnemonic phrases and private keys as compromised and must create new wallets and transfer assets using a clean device that has never accessed that page.Additionally, users should thoroughly check for abnormal transactions and token authorizations across various chains and immediately revoke unnecessary authorizations.

According to official news from Aptos, the Aptos mainnet has officially launched the Encrypted Mempool feature. Users can choose to encrypt pending transactions before block finalization, keeping the transaction call functions and input content encrypted before execution, while the sender's address and fee information remain visible to the outside.This feature is mainly aimed at institutions (to avoid exposing intentions of large orders in advance), traders (to reduce MEV arbitrage risks), and AI entities (to ensure transaction inputs remain private before execution).

ChainCatcher live report, at the Token2049 conference in Singapore, Gemini co-founders Tyler and Cameron Winklevoss stated that Zcash is the cryptocurrency version of Bitcoin, just as the early internet was HTTP, Zcash is HTTPS. They also announced that they have submitted a spot Zcash ETF application to the SEC.

Aptos governance proposal #206 is currently voting, proposing to enable the ChunkyDKG V1 full mode and the encrypted_transactions feature. This mechanism will support encrypted transactions through distributed key generation, hiding their content before the transactions enter consensus ordering, and then collaboratively decrypting by validators, which helps reduce front-running and MEV risks.The proposal voting will end on October 6, and currently, the approval rate is close to 100%, but the voter turnout is only 2.69%, which has not yet reached the quorum requirement of 24.8%.

Slow Fog's Yuxian posted on platform X, stating that systems prior to iOS version 27 are being exploited by certain black and gray market groups to steal encrypted wallets from iPhone users.It reminds users to promptly update their iPhone, iPad, Mac, and other devices to the latest version, to be cautious when installing apps from unknown sources, and to be careful when opening unknown links through Safari and in-app browsers.

According to Cointelegraph, blockchain security company SlowMist stated that its investigation has not linked the recent security warning caused by the iPhone Safari attack to confirmed cryptocurrency theft incidents.SlowMist told Cointelegraph that it has not independently confirmed any victims affected by the specific Safari attack samples it analyzed, and the strongest technical evidence it possesses covers iOS versions 18.4 to 18.6.2. The company stated that the reported impact range of "iOS 13 to 26.5" should be regarded as a preliminary assessment, and it tends to avoid claiming that iOS 26.5 is affected until reproducible technical evidence is obtained.SlowMist pointed out that the Safari attack reused the previously disclosed DarkSword exploit chain technology, which is independent of another investigation involving malicious components embedded in App Store applications called FomoPeek. The Google Threat Intelligence Group (GTIG) disclosed DarkSword in March, describing it as an iOS exploit chain used by multiple threat actors since November 2025.

Binance will gradually migrate the cryptocurrency assets in users' Funding Accounts to Spot Accounts starting from September 29, 2026. The migration is expected to continue until January 2027, with specific dates to be announced later.After the migration period ends, the Funding Account will be renamed to Stocks Account, which will only be used for trading and settlement of stocks and stock options.

The French Council of State rejected the urgent application filed by the cryptocurrency companies Bull Bitcoin and Paymium, refusing to immediately suspend the implementation of the French decree enforcing the EU Directive on Administrative Cooperation No. 8 (DAC8).The applicants argued that the centralized collection of personal and financial data from digital asset users could lead to data breaches, extortion, and personal safety risks. The court found that the applicants failed to demonstrate an urgent situation sufficient to support an emergency suspension. The lawsuit seeking to fully revoke the decree by Bull Bitcoin is still under review. DAC8 will take effect in the EU on January 1, 2026, and registered service providers must complete their first declaration for the year 2026 by September 30, 2027.

Crypto KOL Ansem stated that he judged two weeks ago that the current market is still in a very early stage, and he maintains this view. Even if investors have not yet allocated relevant tokens, starting to pay attention to the market, formulating trading plans, and setting staggered buying prices now may still yield high returns.For tokens that have already entered the price discovery phase, Ansem believes that the current price is still close to the starting point of this breakout, and subsequent positions may not provide significantly better entry points than the current stage. Therefore, investors who have not yet taken positions should formulate plans in advance, rather than waiting to make decisions after market attention fully heats up.

According to CryptoSlate, the Pakistan Virtual Assets Regulatory Authority (PVARA) has required cryptocurrency exchanges and related service providers operating locally to enter a new licensing process by September 5, or they must cease relevant operations. PVARA opened the licensing application portal for virtual asset service providers on August 22 and released regulatory rules for virtual asset services.According to the regulations, service providers that have been conducting cryptocurrency business in Pakistan must submit a "No Objection Certificate" (NOC) application. During the application review period, as long as a complete application is submitted on time, they may continue to provide existing services. Businesses that do not submit applications by September 5 must stop relevant services within the regulatory scope, and continuing operations will be considered a violation. PVARA added that this policy does not constitute a comprehensive ban on cryptocurrency but establishes a "compliance or exit" regulatory mechanism applicable to exchanges, custodians, and other businesses providing virtual asset services to users in Pakistan.

The UK’s HM Revenue and Customs (HMRC) has sent out 81,000 warning letters to cryptocurrency investors suspected of unpaid taxes over the past 12 months, an increase of 25% from approximately 65,000 letters in the previous year. These letters aim to prompt recipients to disclose unpaid taxes, after which HMRC will initiate a formal investigation.Cryptocurrency exchanges, using tokens to purchase goods or services, and gifting tokens to others may all constitute taxable disposals. Income generated from activities such as lending and staking may be subject to income tax rules, and UK residents are generally required to pay tax on relevant income and gains worldwide.Rules set to be implemented in April 2027 will apply a no gain, no loss treatment to eligible crypto lending and automated market-making arrangements until an economic disposal occurs, expected to affect around 700,000 individuals. The crypto asset reporting framework requires service providers to submit transaction data for 2026, covering the reporting period from January 1, 2027, to May 31, 2027. It is anticipated that 52 jurisdictions will exchange relevant data in 2027, with an additional 15 jurisdictions joining in 2028.

According to Cointelegraph, cybersecurity company Rapid7 has disclosed a phishing operation named Operation Asterix, targeting approximately 885,000 phone numbers across multiple countries and directing victims to fake wallet service websites. A total of 5,576 phone numbers have been matched with Binance user accounts and are included in the attack queue.The attackers steal mnemonic phrases by impersonating fake applications of Ledger, Trezor, and Exodus, while also using forged customer service emails and phone calls to contact victims. Rapid7 also found that out of over 316,000 phone numbers in Germany, 43,066 matched with cryptocurrency trading accounts, resulting in a hit rate of approximately 13.6%. Related attacks also include a bulk phone number verification tool targeting Kraken accounts, with investigations revealing that AI tools have been heavily used in the phishing operations.Data from blockchain security company Hacken shows that phishing attacks and social engineering scams caused losses of $306 million in the first quarter of this year, accounting for the majority of the total losses of $482 million in the cryptocurrency industry.

According to Decrypt, security company Bitdefender has warned that the newly released Hollywood blockbuster "The Odyssey" has been embedded with Lumma Stealer information-stealing malware by attackers, who are attempting to steal users' cryptocurrency wallets, passwords, and browser data through fake movie files.Bitdefender revealed that the malicious files began spreading within days of the film's release, with attackers disguising them as high-definition WEBRip or Blu-ray version resources and using names similar to legitimate torrent files to entice users to download. In reality, these files are not videos but Windows executable programs that, when run, will infect the device. Attackers often replace the file icons to make them look like VLC player or video files, while also taking advantage of Windows' default setting to hide file extensions, reducing users' ability to recognize the risk.Once executed, Lumma Stealer will collect saved passwords, payment information, autofill data, remote desktop credentials, and sensitive information including cryptocurrency wallets. Additionally, the malware will steal authentication cookies, allowing attackers to potentially bypass some account protections even if the user has enabled multi-factor authentication (MFA).

According to Tech Funding News, the crypto travel platform Entravel has completed a $7.5 million financing round, led by Ethereal Ventures and Finality Capital, with participation from GSR, Varrock, G1 Ventures, Seier Capital, Veris Ventures, Funfair Ventures, and WTG Ventures.Entravel provides travel booking systems for over 40 brands, including Kraken and MetaMask, covering 300 million users, with an average booking conversion rate exceeding 10%. Founded in 2026, Entravel operates three interconnected businesses: MocatravelX directly collaborates with hotels to obtain inventory and pricing; RateStellar integrates supply from other channels, using AI to match hotels and room types from different suppliers, covering over 2.2 million hotels; on this basis, Entravel offers a white-label booking layer for partners, allowing them to provide hotel booking services to users without needing to build their own supplier network.

Bitcoin.com published an article stating that the model of Web3 startups conducting corporate pilots by paying traditional financial institutions "is a dead end," with 95% of pilot projects failing to reach production environments. Web2 companies only want the idle venture capital and revenue sharing from startups, rather than their open-source innovations. The article argues that true defensiveness comes from a "structural moat"—compliance licenses, deep network liquidity, or distribution lock-ins that Web2 engineering teams cannot replicate.The article cites recent cases: Stripe was acquired for $1.1 billion after proving an annual cross-border transaction volume of $5 billion with Bridge, and Robinhood acquired Bitstamp for $200 million to gain 50 global regulatory licenses and institutional liquidity, rather than maintaining long-term vendor relationships. The article predicts that the next round of B2C expansion will present an 80/20 pattern: 80% of retail liquidity will be controlled by 3 to 5 Web2/fintech giants such as Visa, Stripe, Robinhood, PayPal, and BlackRock, providing compliance and fiat entry; 20% will be an unlicensed DeFi sandbox for validating initial product-market fit. The growth path for startups should be to first validate PMF in the DeFi sandbox, then integrate or sell to the few Web2 gateways controlling the 80% distribution layer. The article believes that the current protocol cancellations and wave of startup closures are part of a "necessary market cleanup."

The Financial Supervisory Service (FSS) of South Korea has launched a three-month project to rebuild the fraud refund system with a budget of approximately 119 million won. This upgrade aims to align with the revised Telecommunications Fraud Damage Compensation Act, which will officially take effect on October 1, and formally includes virtual assets in the categories of "damaged property" and "refundable property."The new system will support the calculation of compensation amounts based on token types and quantities, using the value of the won at the time the funds were frozen as a reference benchmark, and will also have the capability to dismantle mixed fraud funds across multiple accounts. Major exchanges such as Upbit, Bithumb, Coinone, Korbit, and GOPAX will be required to undertake anti-fraud and victim relief obligations equivalent to those of banks, including verifying transaction purposes, monitoring suspicious funds, and freezing suspected accounts.