recover

The International Criminal Police Organization stated that Operation Serengeti III took place from June 29 to August 31, 2026, across 21 countries, resulting in the arrest of 1,462 suspects, the dismantling of 10,909 malicious networks, and the recovery of over 105 million dollars in illegal funds. The investigation also confirmed that 65,929 victims were attacked by cybercrime gangs, with related losses exceeding 385 million dollars.This operation focused on combating online fraud, ransomware, business email compromise, online scams, and digital extortion. In specific cases, the Ugandan police dismantled two transnational fraud gangs and arrested 365 foreign nationals; Angola seized two illegal cryptocurrency mining centers, arrested 9 individuals, and confiscated over 2,000 mining machines; in Nigeria, another case involved over 2.4 million dollars in suspected criminal proceeds, a significant portion of which was laundered through cryptocurrency transactions.

Interpol announced that from June 29 to August 31, 2026, it coordinated law enforcement agencies from 21 countries to carry out Operation "Serengeti III," targeting online fraud, ransomware, business email compromise, online scams, and digital extortion. The operation resulted in the arrest of 1,462 suspects, the dismantling of 10,909 malicious networks, and the recovery of over $105 million in illegal funds. Investigations confirmed 65,929 victims, with financial investigations linking losses exceeding $385 million.In Angola, law enforcement dismantled two illegal cryptocurrency mining centers, arrested 9 suspects, and seized over 2,000 cryptocurrency mining devices and 6 illegal power transformer stations, with the seized power infrastructure alone valued at over $1 million. In Nigeria, authorities arrested a suspect linked to large-scale phishing and business email compromise, with the operation collecting approximately 2.1 million email addresses and software credentials; another investigation uncovered an international investment scam promoted through instant messaging applications that transferred over $2.4 million in suspected criminal proceeds, most of which were laundered through cryptocurrency transactions.Neal Jetton, head of cybercrime at Interpol, stated that cybercrime networks disregard borders and exploit technology to target victims on an unprecedented scale; the operation demonstrates that despite the increasingly borderless nature of cybercrime, international cooperation remains an effective tool for dismantling criminal networks, recovering criminal assets, and protecting communities. The operation received support from private sector partners such as Group-IB, Kaspersky, Fortinet, and Meta, and was co-funded by the EU and the joint project GLACY-e of the European Commission.

According to a post by Ki Young Ju, founder and CEO of CryptoQuant, on the X platform, the continuous recovery of Bitcoin's hash rate is an "indirect bullish signal" from institutional investors. He pointed out that a higher hash rate means stronger security and better value storage fundamentals, and most publicly listed mining companies are supported by traditional financial institutions (TradFi). Therefore, the rise in hash rate can be seen as institutional recognition of Bitcoin's security and long-term value. Hash rate is an indicator of the computational power of a blockchain network, representing the number of hash calculations that can be completed per second.CryptoQuant data shows that Bitcoin's hash rate has rebounded by about 45% from its summer low, rising from approximately 726 EH/s in July to about 1,050 EH/s on Wednesday. However, the global hash rate is still below the peak of 1,305 EH/s set in October 2025, when Bitcoin's price was above $111,000. On Thursday, when the U.S. stock market opened, Bitcoin's price was approximately $81,843.Publicly listed mining companies are still expanding their production capacity. Nasdaq-listed NIP Group (NIPG) announced a third batch of asset purchase agreements, which will acquire approximately 4.47 EH/s of deployed Bitcoin mining machines. After the transaction is completed, the total hash rate from the three batches is expected to reach 13.85 EH/s. The company currently ranks 16th among publicly listed mining companies with an operational hash rate of 3.11 EH/s, while Bitdeer leads with 79.9 EH/s. On Wednesday, NIPG's stock price fell 6.8% to $6.1, down 86% over the past year; affected by higher-than-expected inflation data, U.S. stocks experienced the most severe sell-off since July, with TeraWulf, Core Scientific, Cipher Mining, and IREN all seeing stock prices drop by about 12%.

ARK Invest's Q3 2026 DeFi report shows that stock tokenization has become the main driving force behind the rebound in on-chain trading activity for the quarter. The trading volume of tokenized stock spot DEX reached approximately $50 billion, about 9 times that of the previous quarter, with its share of total spot DEX trading volume rising from about 1% to around 9%. Overall, DEX spot trading volume increased by approximately 13% quarter-over-quarter to $571 billion, marking the first growth in nearly four quarters.Robinhood Chain achieved approximately $65 billion in DEX trading volume and $51 million in network revenue in its first quarter, with network revenue nearing the level of BNB Chain during the same period. However, ARK expects that recent adjustments to the Gas mechanism will cause the chain's revenue to decline from current levels. The total supply of stablecoins decreased by about 3% quarter-over-quarter to $309 billion, but adjusted trading volume increased by approximately 16% quarter-over-quarter to $781 billion, with the number of monthly active addresses growing by about 39% to 73 million.In the perpetual contract DEX, there is a divergence between open positions and trading volume: the value of open contracts increased by about 76% quarter-over-quarter to $24 billion, while quarterly trading volume decreased by about 16% to $1.4 trillion. Among them, Hyperliquid's open contract value is about $13 billion, accounting for approximately 53%. ARK believes this indicates fewer but larger positions held for longer durations.

According to The Defiant, Blockaid data shows that from January to August 2026, the 60 cryptocurrency attack incidents it tracked involved approximately $1.18 billion in funds, with victims recovering about $9.8 million, accounting for less than 1%.The report pointed out that all frozen or returned funds were achieved through on-chain governance or validator actions, and the blacklist mechanism of stablecoin issuers did not recover any funds in these 60 incidents.

Elon Musk stated that SpaceX will attempt to recover both the booster and the spacecraft simultaneously during the 15th test flight of Starship.

The Liquid Network officially announced the progress of the phased recovery, stating that the network recovery work has entered the final stage, focusing on strengthening security mechanisms, conducting independent audits, and gradually restoring the redeeming function of pegged assets.In terms of functional recovery, the network will first gradually open semi-automated BTC and LBTC exchange services, coordinating with participating exchange service providers to implement this service, which itself does not impose transaction volume limits at the protocol layer.In the next phase, the Liquid Network will restore the 1:1 Bitcoin reserve support for the network, and then gradually reopen the Federation redeeming function to authorized PAK key holders, but the full restoration of related functions still depends on the completion of remaining security checks and operational requirements.

The cryptocurrency market data agency Kaiko stated that one year after the largest liquidation event in the crypto market, the market has not fully recovered.Kaiko noted that in terms of Bitcoin, the open interest of Bitcoin perpetual contracts is still about 16% lower than pre-crash levels, while the spot depth in USD is down 27%. The decline in leverage is faster than the decline in liquidity, with leverage corresponding to each dollar of market depth being 20% lower than before October 10.

CryptoQuant's latest analysis indicates that while Bitcoin has support, the recovery process is uneven. First, regarding exchange reserves, it has risen from about 2.67 million BTC at the beginning of October to about 2.68 million BTC, still far below January levels. Low reserves do not mean that supply is continuously shrinking; transfers may reflect custody changes, and the increase itself does not prove selling pressure. Secondly, the recovery of spot demand has been hindered, with 30-day spot demand once approaching zero before turning negative again. Perpetual contract demand is positive, supporting overall demand.Finally, the behavior of whales is diverging. Addresses holding 100 to 1,000 BTC have still net accumulated over the past 60 days, but this is below the peak at the end of September; the group holding 1,000 to 10,000 BTC has seen a net decrease approaching zero; and the group holding over 10,000 BTC is negative. Accumulation is not fully underway. CryptoQuant believes that conditions still exist to support Bitcoin's bottoming out. For a solid recovery to occur, sustained spot demand support is needed, buyers must be able to absorb the BTC flowing back to exchanges, and accumulation behavior should spread to more holding groups. Market expectations regarding the U.S. midterm elections and monetary policy must translate into actual buying behavior. The key is whether price increases can attract a growing and lasting group of buyers.

According to Gate quotes, the Japanese and South Korean stock markets opened higher today but the gains have slightly retreated.The South Korean KOSPI opened up 1.80% to 5653.99 points, currently reported at 5623.72 points, with an intraday increase of 1.25%; KOSDAQ opened up 1.49%. The memory chip sector continues to lead the gains, with Samsung Electronics and SK Hynix both rising over 2%. The South Korean stock market saw a significant drop yesterday, triggering a circuit breaker, and today is experiencing a recovery rebound. The Japanese Nikkei 225 opened up 0.78% to 64925.29 points, briefly surging to 1% after opening, and is currently maintaining a high-level fluctuation.

According to reports from Strait News, in March 2025, Zheng Mouyi, Zou Moumou, and others exploited the weak regulation and difficulty of evidence collection in offline USDT over-the-counter trading to plan a "black eat black" robbery crime under the guise of virtual currency offline trading.The gang raised over 340,000 yuan and invited virtual currency merchants for offline transactions. During the transaction, after the merchant transferred over 40,000 USDT into the virtual wallet controlled by the gang, Zheng Mouyi sprayed the victim's eyes with chili water on the spot and, along with others, violently seized all the transaction funds. After the incident, six involved individuals divided the stolen money. The day after the incident, the public security authorities quickly arrested all involved individuals, recovering most of the stolen funds and returning them to the victim.The Jin'an District Prosecutor's Office legally prosecuted Zheng Mouyi, Zou Moumou, and four others for robbery. In 2026, the court heard the case and sentenced the five defendants to fixed-term imprisonment ranging from five years and seven months to ten years and four months for the crime of robbery.

According to a report by Vortexa, the U.S. maritime blockade has caused Iran's maritime crude oil exports to drop to zero since the second week of September, and they have not yet recovered as of October 5.Iran's liquefied petroleum gas exports decreased by 48% month-on-month, reaching the lowest level since 2023.Meanwhile, Russia's crude oil exports increased by 6% month-on-month in September to 3.79 million barrels per day, accounting for about 80% of the total high-risk crude oil exports from the three countries.

An important ruling has been made by a UK court regarding the cross-border asset recovery dispute involving over 61,000 Bitcoins related to the illegal fundraising case of Tianjin Blue Sky Ge Rui in China. On October 12, local time, a judgment obtained by Caixin from the High Court of England and Wales indicated that the UK High Court determined that the property rights claims made by Chinese investors regarding the Bitcoins in question should be judged according to Chinese law rather than UK law.This means that approximately 16,000 Chinese victims who have participated in the UK recovery process may not be able to share in the substantial appreciation gains brought about by the soaring Bitcoin prices under UK law, and can at most recover their principal and interest.

Cryptocurrency analyst Darkfost stated that the Bitcoin long-term holder SOPR (Spent Output Profit Ratio) has re-established itself above the 1.1 annual average line and maintained that level, indicating that the average profit margin achieved by long-term holders over the past year is about 10%. Currently, the weekly average of BTC long-term holder SOPR is 1.25, and the monthly average is 1.16, both above the annual average, suggesting an improvement in market conditions and that long-term holders are starting to realize profits again.Darkfost pointed out that this change is worth comparing to the previous bear market: at that time, as the bear market approached its end, long-term holders also began to profit again. He believes that moderate profits in the market are a positive signal and may further boost investor expectations for the future market.

Dragonfly Managing Partner Haseeb Qureshi posted on platform X, referring to the "obfuscation mode" warning proposed by Ethereum researcher Justin Drake as "crypto doomsday theory." He stated that migrating tokens to a new address is not a real solution under the threat of artificial intelligence potentially cracking cryptographic signatures. The "obfuscation mode" can only provide protection if investors do not transfer tokens out of the new address, and once other tokens are hacked and sold off in large quantities, these tokens will also become worthless.Qureshi then called for blockchain networks to take proactive protective measures and proposed the "crypto recovery mode" plan: a hash-based backup signature mechanism that users can map to their own addresses. If cryptographic signatures are cracked, validators can force the recovery of assets based on this. According to Glassnode data, there are currently 6.26 million Bitcoins stored in at-risk addresses, accounting for over 31% of the total Bitcoin supply. Among them, approximately 4.33 million are exposed due to address reuse, and another 1.94 million are exposed due to address format; about 1.8 million exposed Bitcoins are stored on exchanges, accounting for 57% of the total balance on exchanges.Previously, Ethereum researcher Justin Drake warned that the rapid advancement of artificial intelligence could crack the Elliptic Curve Digital Signature Algorithm (ECDSA) protecting crypto wallets sooner than expected. He cited a report from OpenAI regarding AI's mathematical advancements, stating that in the worst-case scenario, ECDSA could be compromised in "months rather than years," and advised users to gradually migrate funds to new wallets where the public key is not exposed.

Analyst Darkfost stated that the recent demand for Bitcoin in the market has significantly improved, especially as spot demand continues to rise. Currently, the total demand for Bitcoin has returned to positive territory, exceeding 14,000 BTC, while futures demand remains relatively stable, averaging about 32,000 BTC recently.Spot demand is currently around negative 17,000 BTC. Although it is still in negative territory, it has improved significantly from negative 207,000 BTC on September 20. Darkfost believes that while the current Bitcoin price is declining, market demand is gradually recovering, which is a positive market signal.

Drift Foundation has explained the compensation plan following the hacking of the protocol: for every 1 USDT lost, users can receive 1 DFX token, and the redemption amount depends on the recovery pool balance, which currently only covers about 1% of the total claims;Tether has committed to providing up to 127.5 million USDT to support the protocol restart and user compensation, with the funds being linked to the net protocol revenue of Velocity and not disbursed in a lump sum; the claims deadline is January 1, 2028, and users can choose to hold DFX or trade on secondary markets like Raydium, with the only official link being dfx.drift.trade.

NEAR co-founder @ilblackdragon revealed on the X platform that the recovery of stolen funds from NEAR Intents was mainly due to the AI security layer SHIELD on Intents, as well as some proactive investigative work.The Intents team identified the responsible party and established communication within less than 24 hours of the hack, successfully recovering the funds in full today at 14:30 UTC.@ilblackdragon also stated that NEAR will continuously strengthen its security systems and further adapt to the ever-changing cybersecurity landscape. While AI may accelerate the exploitation of vulnerabilities, it can also help us defend against them. It is hoped that the entire industry will respond with vigilance and feel the same sense of urgency to collaborate together.

The Chief Information Security Officer of Slow Fog Security, 23pds, stated that Alex Shevchenko, the General Manager of NEAR Intents, indicated that the exploiters of the NEAR Intents vulnerability transferred 1 BNB to the recovery wallet and left a message expressing willingness to cooperate and requested the other party to provide a Signal contact.This transfer came from the same address that previously moved approximately 3.8 million USD. About an hour ago, that address also transferred 0.295 ETH on the Ethereum network and sent the same message.