foundation

According to market news, FoundationHQ stated that attackers sent over 23,000 phishing emails after exploiting leaked API keys and accessing customer data, including addresses and phone numbers.

According to official news, Tether announced the establishment of the Swiss non-profit foundation FASE (Financial Access and Systemic Empowerment) on October 28, focusing on four main areas: financial security, financial inclusion, access to basic resources, and responsible AI and robotics.Founding members include Anchorage Digital, Bitfury, Bybit, Chainalysis, Fasanara Capital, Kraken, Opera, Pave Bank, Prosper Global (formerly Mercy Corps), and the Solana Foundation. The United Nations Office on Drugs and Crime (UNODC) will provide technical consulting.The first batch of projects includes: establishing a global youth alliance with Goodwall, aiming to provide anti-fraud education to up to 10 million young people, prioritizing coverage in Africa, Latin America, and Southeast Asia; launching a stablecoin humanitarian aid pilot with Prosper Global, initially covering up to 1 million people; and collaborating with the United Nations Trust Fund for Victims of Trafficking in Persons to support survivor assistance.

The Ethereum Foundation forwarded tweets related to the privacy tool Kohaku, expressing support for the development of privacy-protecting wallet tools. In response to the attacks and exploits that occurred over the past week, the Ethereum Foundation pointed out that privacy and security should not be viewed as mutually exclusive goals. Setting privacy protection as a default feature helps reduce the risk of attackers exploiting users' on-chain historical records to carry out attacks.According to developer Jordan Enev, the Kohaku team is working to make privacy protection a standard feature of Ethereum. Currently, its SDK has integrated privacy protocols such as Railgun, Privacy Pools, and Tornado Cash, with development progress becoming increasingly mature, and they are calling for more wallets to promote related integrations.

Initia officially stated that, with the support of the Initia Foundation, the 1:1 asset backing of the affected assets in the security incident on October 23 will be fully restored when the chain resumes operation.The Initia Foundation has approved funding to cover the reserve shortfall of Noble USDC, WETH, and AUSD0 used as collateral for iUSD, involving up to 1.08 million USDC, 105 ETH, and 1.4 million AUSD0 respectively. The specific amounts still need to be verified and receive final transfer approval.

According to the official announcement from Foundation, regarding the recent phishing email incident, the team’s investigation found that their email system recorded over 23,000 phishing email sending attempts, of which 19,057 were sent via Mailgun, and another 1,503 were sent via Google Workspace.Due to some email accounts receiving multiple emails, and some sending attempts being unsuccessful or intercepted, it is currently not possible to confirm the actual number of affected individuals.

Due to the ChainSecurity report revealing compatibility and security issues with EIP-8037 and certain smart contracts, core developers decided last week to postpone the Hoodi testnet upgrade to Glamsterdam. The issues identified so far include: the remaining Gas during transaction execution may increase, leading to underflow in some Gas counting logic and triggering rollbacks, or causing code paths that should not be executed to be triggered, making the transaction appear successful. Additionally, some contracts may underestimate usage due to the inability to correctly calculate Gas consumption during calls.ChainSecurity previously stated that 13 real cases have been identified and they are responsibly disclosing this information to the affected projects. Toni Wahrstätter mentioned that this week they will further investigate the relevant contracts and assess subsequent solutions, which may require collaboration among application developers, core developers, auditors, and node operators. In the worst-case scenario, adjustments to the protocol specifications may be necessary. He reminded application developers and auditors to check the compatibility of contracts with EIP-8037 and EIP-8038 and to report issues in a timely manner.

According to U.S. SEC filings, the Dogecoin Foundation has terminated its exclusive trademark licensing agreement with the Nasdaq-listed company House of Doge, effective October 19. House of Doge and its U.S. subsidiaries must rebrand by the end of 2026 and cease using titles such as "official commercial partner of the Dogecoin Foundation." The relevant subsidiaries are also required to pay the foundation a termination fee of $400,000.Under the new agreement, House of Doge retains non-exclusive trademark rights to three existing 21Shares DOGE investment products. House of Doge plans to transfer assets related to Such App to Dogecoin Labs in exchange for shares valued at approximately $4 million, a transaction that has yet to be completed. Dogecoin Labs has become the foundation's new official commercial partner.

According to Onchain Lens monitoring, the Ethereum Foundation exchanged 2,785 ETH for USDS through CoWSwap, with a transaction amount of approximately 6.42 million USD.

Reuters reported on October 23 that Elizabeth Barron, the Executive Director of the non-profit organization PHP Foundation, which supports the open-source language PHP, stated in an email interview on Friday that the foundation is severely underfunded. She mentioned that recent events indicate a high reliance on PHP by businesses and governments, and given this reliance, PHP's funding is clearly insufficient.Barron noted that the foundation currently has only one full-time employee, which is herself, along with 14 part-time contractors, with funding coming from donations and grants. The increase in coding related to artificial intelligence has roughly doubled the foundation's workload. The number of code change proposals received by the PHP project is nearly double that of a year ago, but the number of contributors has not doubled. She stated that reviewing code contributions and bug reports requires a significant amount of manual input and expertise.Reuters reported that two serious vulnerabilities in PHP were discovered this week, prompting urgent patches for websites worldwide, highlighting the critical importance of this nearly thirty-year-old open-source language to the internet. The article stated that PHP may support approximately 70% of websites globally, and there is currently no evidence that these vulnerabilities were exploited before their disclosure. The report was filed by journalist Toby Sterling from Amsterdam.

According to The Defiant, the Dogecoin Foundation and House of Doge have terminated their previous exclusive brand partnership agreement. Under the arrangement, House of Doge retains limited rights related to investment products.In addition, the two parties have a separate transaction that will exchange assets related to Such App for $4 million worth of Dogecoin Labs stock.

Amira Valliani, the Head of Payment Growth at the Solana Foundation, stated that there are tokens in both the cryptocurrency and artificial intelligence fields, and tokens are merely a machine-readable format of assets.She believes that in the next 10 years, it will become evident that any asset can become a token.

Anthropic announced that it will donate the Agent Skills standard to the Agentic AI Foundation (AAIF) under the Linux Foundation. This format was designed by Anthropic while developing Claude Code, set to launch in October 2025 and open as a cross-platform standard in December. Currently, over 70 agent platforms, including ChatGPT, Cursor, and GitHub Copilot, have integrated it.Anthropic describes Skills as reusable work manuals prepared for AI agents, where developers can write task steps in SKILL.md and attach scripts and reference materials for different agents to read as needed. MCP is responsible for connecting external tools and data, while Skills explain how agents complete specific tasks. What is being donated includes the standard name, logo, GitHub organization, and official website domain.AAIF was jointly initiated by Anthropic, OpenAI, and Block in 2025 and has previously received MCP. In the future, engineers from Anthropic, OpenAI, and Google will jointly maintain the Skills standard in their personal capacities, no longer solely led by Anthropic. Vercel statistics show that the skills.sh directory has recorded approximately 1 million skills, with nearly 280 million installations. Snyk has confirmed 76 malicious skills in ClawHub's skill samples, and Anthropic has proposed establishing version control, formal proposal processes, and security guidelines.

The Cardano Foundation calls on the European Union not to introduce new independent regulatory rules for DeFi and staking, advocating that existing financial laws should regulate based on the function and risk of activities rather than the technology used. The foundation outlined its 19-page opinion submitted to the European Commission on September 30 in a blog post released on Wednesday, urging a distinction between direct participation in decentralized networks and financial services provided by intermediaries, especially those involving the custody or control of user assets. The foundation stated that regulation should follow the substance of the activity, the functions performed, and the risks generated, rather than the technology relied upon to conduct the activity.The foundation pointed out that Cardano users can delegate native ADA tokens to help secure the network without relinquishing custody or locking up tokens, and this form of direct participation should be treated differently from staking services operated by intermediaries. The opinion also calls for a clearer distinction between the EU MiCA regulations and existing financial laws, warning that overlapping regulatory requirements and inconsistent interpretations among member states could create uncertainty for crypto businesses.This move comes as EU regulators consider expanding oversight of crypto services. In September, the European Securities and Markets Authority suggested adding additional safeguards for staking and lending activities and establishing a new category of regulated services for companies providing access to DeFi protocols. Additionally, the Cardano Foundation, along with five other blockchain organizations, sent a joint letter to the U.S. Securities and Exchange Commission on October 20, urging it to formally recognize digital commodities as non-securities under the proposed crypto framework.

U.S. Treasury Secretary Becerra stated that the "GENIUS Act" is a watershed moment in the U.S. financial sector, further solidifying the United States' position as a global cryptocurrency hub.He pointed out that just as President Lincoln's National Currency Act of 1863 established a national framework for banks to issue currency, the "GENIUS Act" establishes a federal framework for payment stablecoins in the digital age.Becerra noted that the Office of the Comptroller of the Currency's (OCC) final rule advances the implementation of this landmark legislation, providing a clear and pragmatic foundation for private sector innovation, competition, and the United States' leadership in the digital asset space.

The Polkadot Community Foundation issued a security warning on the Polkadot forum stating that versions 3.1, 3.3, 3.4, and 3.5 of the browser extension for the third-party wallet Fearless Wallet contain malicious code, which may send users' private keys to a server controlled by attackers when unlocking the wallet.The related code was added on February 19, 2025, with a code change named "TON ecosystem," and it will take effect intermittently from February 2025 to October 10, 2026.

According to CoinDesk, Dogecoin Labs was established with the support of the Dogecoin Foundation, integrating the MyDoge wallet, DogeOS application platform, and Such App payment products into a single independent organization, with Jordan Jefferson serving as CEO. The company will focus on consumer applications, payments, commerce, DeFi, and gaming, while the foundation will continue to be responsible for ecosystem maintenance and open-source development.According to the plan, developers can build applications on DogeOS, DOGE holders can discover and use these applications through MyDoge, and merchants can accept payments via Such App. The beta version of Such App currently supports invoice and offline QR code payments, but the connection with DogeOS is still in the planning stage.MyDoge stated that its user base has exceeded 500,000. DogeOS opened its public testnet on September 30, allowing developers to use test DOGE to build lending, trading, and gaming applications similar to Ethereum. However, the secure connection between DogeOS and the Dogecoin mainnet has not yet been completed, and the related rule modifications are still in draft stage.

The Starknet Foundation announced the launch of the Bramble wallet, which integrates STRK20 shielding features, allowing users to hold private balances. Currently, Bramble only offers a Chrome browser extension version, with plans to support a broader ecosystem in the future.

The Starknet Foundation announced the launch of the Bramble wallet, which integrates the STRK20 shielding feature, allowing users to hold privacy balances.Bramble is a wallet that only supports the Chrome browser, integrating privacy balances, Ledger hardware signing, and multi-signature account features, and provides recovery mnemonic phrases for backup.