bridge

The SVM Rollup project SOON's official account announced that the SOON Foundation has temporarily closed the cross-chain bridge between svmBNB and the SOON mainnet. The announcement stated that on October 31, 2026, around 11:00 UTC, abnormal withdrawal activities occurred on the aforementioned cross-chain bridge, and the foundation immediately closed the bridge service after discovering the anomaly at 14:00 UTC on the same day.The SOON Foundation stated that it has currently controlled the relevant cross-chain bridge and is conducting an in-depth investigation. During the investigation period, the cross-chain bridge between svmBNB and the SOON mainnet will remain suspended, and further updates will be announced separately.svmBNB uses SVM as the execution layer and BNB Chain as the settlement layer, while the SOON mainnet is based on the decoupled SVM Rollup network. Official SOON materials show that the project has received support from Jump, Hack VC, and Anagram.

According to on-chain detective Specter, North Korea-related addresses transferred over 38 million dollars through the Relay cross-chain bridge within 7 hours, and the related transfers are still ongoing.Specter stated that although Relay claimed to have enabled a transaction monitoring (KYT) system, this system failed to stop the aforementioned flow of funds.

According to Decrypt, the Israeli National Prosecutor's Office announced on Thursday that it has extradited Alexander Block, who holds dual citizenship in Israel and Russia (formerly known as Alexander Gurevich), to the United States. He is accused of stealing approximately $2.8 million in assets from the cross-chain bridge Nomad in 2022.Block was handed over to the U.S. authorities early that morning after failing multiple appeals in Israel. He was arrested at Tel Aviv's Ben Gurion Airport in May 2025 while preparing to fly to Russia, shortly after changing his surname and obtaining a passport under his new name.According to the U.S. extradition request disclosed in the Israeli Supreme Court ruling, a federal grand jury in the Northern District of California had indicted Block in August 2023 on four counts of computer fraud, one count of transporting stolen property, and three counts of money laundering. The U.S. formally submitted the extradition request in December 2024.Prosecutors stated that a vulnerability was left in the Nomad smart contract after a software update in June 2022, allowing users to obtain tokens on one chain without locking equivalent assets on another chain. Block, using the username "Bitlik," first conducted six test transfers and then completed four major transfers around August 1, 2022, acquiring tokens worth over $2.8 million, which he transferred through multiple wallets and exchanged for other cryptocurrencies to conceal the source of the funds.The U.S. allegations claim that his actions exposed the vulnerability, leading other users to withdraw nearly all of the over $186 million in user funds controlled by Nomad's wallet. Days later, Block returned some tokens and contacted Nomad executives via Telegram, proposing to return the remaining assets in exchange for a bounty for the vulnerability, but then cut off communication, prompting Nomad to report to U.S. law enforcement. Block argued that the transactions utilized features provided by Nomad's automated system and that on-chain transfers are publicly visible, thus not constituting money laundering.The Israeli Supreme Court rejected both claims, ruling that even if the software technically allowed the operation, exploiting a programming vulnerability could still constitute illegal intrusion into a computer system, and publicly visible transactions do not necessarily identify the actual controller behind the wallets.In December 2025, the U.S. Federal Trade Commission proposed a settlement regarding Nomad's operator Illusory Systems, stating that the cross-chain bridge lost $186 million due to insufficiently tested software updates, and the settlement required it to return recovered funds to users who had not yet been compensated; Nomad recovered approximately $22 million within days after the attack.

BNB Chain stated that it supports Binance and the relevant teams that have been continuously handling security incidents since last night, and confirmed that BNB Smart Chain, opBNB, BNB Greenfield, and the BNB Chain cross-chain bridge have not been affected by this incident. Currently, all networks are operating normally, and the funds on BNB Chain are secure.BNB Chain also expressed full trust in the Binance team to handle this incident and will continue to collaborate with ecosystem partners to strengthen security protection and maintain industry trust.

Blockaid has released two attacker addresses, example attack transactions, affected contracts, and cross-chain bridge addresses. One of the attacker addresses (0xaCA0...5718) currently has a balance of approximately $11,000.

According to market news, U.S. Treasury Secretary Janet Yellen stated that regardless of whether Congress takes action, the U.S. Treasury will push to bridge the regulatory gap between the Securities and Exchange Commission (SEC) and the Commodity Futures Trading Commission (CFTC) regarding cryptocurrency.

Zilliqa stated that the investigation into the recent security incident is still ongoing, with affected components including the X-Bridge and certain liquidity pools using ZRC2 proxy contracts, involving tokens such as zUSDT, SEED, kUSD, and Zoge.Zilliqa emphasized that the native ZIL and Zilliqa EVM network were not affected, and the X-Bridge will remain suspended; users are advised not to use the cross-chain bridge and the affected liquidity pools for the time being.

The Ethereum Layer 2 network Blast has reached the withdrawal interface deadline, but approximately 40 million dollars worth of assets are still stranded in the cross-chain bridge.The official contract-level exit guide has been released, but withdrawals still require proof submission and a one-day wait; for USDB holders, a separate DAI claim is also necessary.

Utexo co-founder Viktor Ihnatiuk tweeted that the bridged version of USDT launched on the Bitcoin network will initially be aimed at institutions, as there is currently a strong demand from institutions for minting, redeeming, and fund transfers.He pointed out that large fund transfers need to avoid wallet activity being viewed by others and front-running trades, and the launch arrangements for retail users will be announced later.

Cysic released an update on the cross-chain bridge security incident, stating that it plans to destroy 7.2 million CYS from the foundation's reserves by the end of October to offset the impact caused by unauthorized issuance and to realign the token supply with its token economic model.

The hedge fund Bridgewater's China business department informed investors that the institution's bullish stance on gold has decreased and that it holds a cautiously optimistic view on the domestic Chinese stock market. The Shanghai-based hedge fund stated in a letter to investors in September that it has gradually reduced its previously overweight position in gold.Bridgewater China noted that rising interest rates have increased the opportunity cost of holding gold, while rising oil prices have suppressed demand from energy-importing countries like India. The institution also expressed optimism about Chinese assets, believing that the current stock market valuation is not high, the policy direction is favorable for long-term capital formation, and that there may be more funds flowing into the stock market in the future against a backdrop of lower bond yields.

Cross-chain trading application Fomo recently announced the official public launch of its self-built internal cross-chain bridge (Fomo Bridge) and router. Official data shows that after integrating the self-built system, its cross-chain transaction confirmation time is less than 1 second, and the transaction execution speed is 50% faster than existing market solutions.Fomo stated that its internal router can average optimize execution prices by 0.5% and optimize the worst-performing 10% of transactions by over 2%. Currently, Fomo's cross-chain trading volume is more than 10 times that of other trading applications. As a large cross-chain trading application that possesses both a cross-chain bridge and routing system, Fomo has thus gained control over the entire trading stack, including pricing, indexing, bridging, and routing, ensuring that users can still achieve a fast and low-cost trading experience even in extreme market conditions.

GMGN co-founder Haze stated that GMGN's self-developed cross-chain bridge is currently undergoing a small-scale rollout test, focusing on ensuring the speed, security, and stability of transactions.Haze mentioned that after this feature goes live, users will be able to directly use USDC within the GMGN App to purchase tokens on multiple blockchains.

According to monitoring by Blockaid, the WAX multi-chain bridge on the WAX network is under attack, involving WAX, Solana, and Ethereum. The attackers extracted mapped tokens on the WAX chain without paying the corresponding assets, while the bridging contracts on Solana and Ethereum still released the corresponding tokens.The attackers transferred approximately 52,986 USDC, 21,558 USDT, 840 DAI, 2.55 WETH, and 0.11 WBTC through 5 transactions. It remains to be further confirmed whether the scope of the incident and the losses are still expanding.

The co-founder and Chief Operating Officer Alon of the meme coin issuance platform Pump.fun stated that the team had previously focused on launch pads for a long time and only began supporting cross-chain exchanges about 5 months ago. After investigating the cross-chain service provider Relay used at that time, he noted that over one-ninth of cross-chain purchases on Relay encountered errors, with typical purchase landing times close to 4 seconds, and one-tenth exceeding 7 seconds. The number of tokens users received was usually less than expected. He also mentioned that the social trading application FOMO still relies on Relay.Alon stated that the self-developed cross-chain bridge Pump Bridge has been opened to all Pump.fun application users. Compared to Relay, the purchase landing speed has improved by 2 times, and the error rate has decreased by 92%, dropping from over one-ninth to less than one percent. Users can obtain more tokens on average with the same amount of funds, and currently, no additional cross-chain fees are charged. He mentioned that due to the limitations of light speed and target chain confirmation time, the theoretical fastest landing time for purchases is about 1.1 seconds, and the team is still working to reduce the remaining gap.The above comparison comes from random tests conducted in the Pump.fun mobile application from September 28 to October 7, covering Robinhood, BSC, Base, Arc, and Ink, excluding Ethereum, with a total of 416,669 transaction results recorded. Among them, 383,326 transactions recorded the time taken from click to successful prompt, and an additional 35,333 transactions of completed USDC purchases under $500 were used for comparison. Alon also stated that the platform fee rate is 0.45%, with Callout rewards of at least $300,000 daily, totaling about $20 million over two months, and the platform does not retain platform fees.

According to Sifted, the Dutch startup Photon Bridge announced the completion of a €10 million seed round financing. The company is developing laser technology that can be used for internal connections of AI chips in data centers, aiming to enhance inter-chip connectivity performance.The company claims that its laser technology can be manufactured at scale to meet the rapidly growing demand for AI infrastructure.

Cross-chain stablecoin bridge Cashmere announces expansion plans, with the automated liquidity product Goat LP set to open to all users, followed by the launch of the main product Mountain and the token $CSM. Cashmere Bridge currently supports zero-slippage stablecoin transfers across 16 chains, and Goat Street features 6,666 goat NFTs on the Robinhood Chain. The team states that there is currently no official $CSM, and the related arrangements are part of the current plan and may change.Goat LP targets Uniswap v3 and v4 positions on the Robinhood Chain, with positions remaining in users' wallets as Uniswap NFTs. Automatic reinvestment incurs a 10% reinvestment fee, with Gas covered by the project team; automatic adjustment of ranges and automatic exits both incur a 0.15% fee. The official description refers to it as experimental software. The Mountain code has completed testing and will undergo external auditing before going live. Barn is a soulbound NFT with a maximum of 10 slots, and after issuance begins, new $CSM will be distributed every second. Goat NFTs can be permanently bound to receive issuance shares and cannot be sold or withdrawn after binding.The plan is to issue 1,000 founding Barns, with a guaranteed slot price of 0.125 ETH, whitelist at 0.25 ETH, and public auction prices dropping from 1.5 ETH to 0.25 ETH. $CSM will begin trading through the official Uniswap v4 ETH pool, while market making and tokens on Anvil have been canceled and redeployed due to technical issues. The maximum supply is planned at 666 million, with 10% allocated for official pool liquidity, 25% for the team and treasury with designated ownership, and 65% issued as the system operates. The team also plans to airdrop to Barn participants, Goat Street activators, and early users, with wallets that have listed goat NFTs on OpenSea being excluded.

On October 17, ILITY announced on platform X that a security incident occurred with the ILITY Network, and the ILITY cross-chain bridge has been temporarily closed. They are cooperating with law enforcement agencies, cryptographic forensic experts, and investors to investigate, and have not yet disclosed the amount of losses or details of the attack.On-chain analyst Specter stated that they observed a certain wallet transferring approximately 35,700 ZEC (worth about $41 million at the time) from a privacy pool, which was then transferred to the Bitcoin and Ethereum networks via NEAR Intents and multiple addresses. Their tracking suggests that the related addresses are associated with the ILITY cross-chain bridge and claim that approximately 4.1 million ILY tokens flowed out of that bridge. Due to the privacy features of Zcash, it has not yet been confirmed whether this ZEC belongs to stolen funds or its exact relationship with the ILITY incident.

The decentralized computing network Cysic released an event report on platform X stating that its cross-chain bridge was attacked on Saturday. The attacker exploited a processing vulnerability to unauthorizedly mint 10 million CYS on the BNB Smart Chain, and the cross-chain bridge has now been suspended. Preliminary investigation results indicate that the attacker accessed the database supporting the cross-chain bridge without authorization.The report shows that the minting occurred at 12:31:38 UTC, and Cysic added the receiving address to the token contract blacklist at 13:47:52. At that time, the address still held approximately 2.8 million CYS, and transfers have been restricted. Cysic stated that this incident was limited to the message processing and minting aspects of the cross-chain bridge and did not affect the mainnet or other operational systems, nor did it result in the theft or unauthorized transfer of CYS or other assets already in user wallets.Cysic emphasized that the quantity of minted tokens alone cannot determine the final dollar loss, and related token transfers, exchanges, and actual losses are still under verification. The company has hired a security agency and plans to release a follow-up report after the current investigation phase concludes. CYS is used to coordinate incentives for users, computing power providers, governance participants, and contributors within the Cysic network.