deposit

Dmitry Gusakov, the engineering lead of the Ethereum liquid staking protocol Lido, warned at the developer conference ACDC #189 that the one-time builder access mechanism introduced by the Glamsterdam upgrade could interfere with the existing deposit protection logic of the staking protocol, leading to the hijacking of staking deposits. This issue involves multiple deposits sharing the same validator public key.According to Ethereum's current deposit rules, the first valid deposit determines the withdrawal credential, and staking protocols typically leverage this feature to prevent credential manipulation, such as initially depositing a small amount of ETH and then topping up the remaining funds once the expected credential appears. However, the special access mechanism introduced for builders by Glamsterdam may change the interpretation of subsequent pending deposits under the same public key during the fork transition period, putting the staking protocol at risk of a third outcome: the validator does not appear, and the deposited ETH is credited to the builder.Lido's proposed fix is to maintain the distinction between validator deposits and builder deposits during the one-time access process. However, core developers rejected this modification on the grounds of timing, mainly because the Sepolia testnet has already been activated according to existing specifications, and the Hoodi client version is also in preparation. Changing the behavior at this point could require redeploying Sepolia and conducting additional testing. The issue affects the access process during the fork transition period, rather than the ongoing deposit processing rules, but its consequences could impact deposits waiting in the queue.

According to monitoring by the blockchain security agency Salus, the Aztec Connect attacker made 30 transactions on October 19, depositing 1,255.8 ETH (approximately 3.01 million USD) into Tornado Cash. The batches consisted of 12 transactions of 100 ETH, 5 transactions of 10 ETH, 5 transactions of 1 ETH, and 8 transactions of 0.1 ETH.On June 14, the attacker exploited a settlement verification vulnerability in the deprecated Aztec Connect contract to steal approximately 2.19 million USD in assets, including 908.987 ETH as well as DAI, wstETH, and Yearn vault tokens. After holding the funds for about four months, the attacker redeemed the vault tokens on October 19, converting the token assets into an additional 346.767 ETH. The balances of the 6 stolen ERC-20 tokens have all been reduced to zero.

According to the Financial Times, the deposit scale of crypto lending vaults has surpassed $10 billion, a significant increase from $4 billion at the beginning of last year, reflecting the growing demand from investors for digital asset yield strategies. These vaults operate through smart contracts on decentralized finance platforms, with each vault having a "curator" who effectively acts as an investment manager responsible for selecting lending strategies, setting risk limits, and charging fees. Their yields typically range from 3% to 10%, with riskier strategies yielding up to 20% or even higher.The allure of returns comes with significant risks. Loans may be collateralized by illiquid tokens, crypto-asset-backed stablecoins, or tokenized private credit, and if the collateral depreciates or becomes difficult to sell, depositors will face losses. Automatic liquidation may exacerbate market downturns, while hacking attacks, code errors, and pricing mechanism flaws can introduce additional vulnerabilities. Although publicly accessible smart contracts provide transparency, investors may focus only on surface yields while overlooking their underlying risk exposures. Major depositors currently include fintech companies, digital asset treasury firms, and hedge funds.Bitcoin lending institution Two Prime is one of the companies that recently entered this market. The company launched a Bitcoin lending vault on the Pareto platform in September, targeting an annualized yield of 1.5% to 2% through institutional lending. This vault accepts wrapped Bitcoin, with a minimum deposit of 5 WBTC, and has invested approximately $10 million of its own funds to absorb initial losses. On the regulatory front, the U.S. Securities and Exchange Commission has raised questions regarding the securities held by the vaults, while European regulators have proposed regulating intermediaries that provide access to DeFi.

According to on-chain analyst Ai Yi (@ai_9684xtpa), three addresses that may belong to the same entity/whale redeemed 18.085 million ENA from Ethena within the last hour and deposited all of it into Binance, worth approximately 3.64 million dollars, with an average deposit price of 0.2013 dollars.

The outstanding balance of Coinbase's crypto asset collateralized loans has reached $2.3 billion, with the product launching in January 2025. Eligible users outside of New York State can stake Bitcoin to borrow USDC without selling their holdings, with loans routed through the Morpho decentralized lending protocol on the Base network.Coinbase has added fixed-rate loans through Morpho Midnight, expanding the stakable assets to XRP, DOGE, ADA, and LTC; as of mid-September 2026, the scale of floating-rate loans has exceeded $1.4 billion, supported by approximately $3 billion in collateral. JPMD tokenized deposits from JPMorgan Chase have been operating on Base for institutions since mid-2026, while Citigroup and BNY Mellon are also advancing related layouts, and several UK banks plan to launch related networks in 2027.

Approximately half of the market value of the tokenized stocks issued by Coinbase has been deployed in DeFi protocols on the Base network, involving fractional shares of large companies such as Apple and Nvidia, and is open to eligible non-U.S. users on the Base platform. As of the time of reporting, approximately $262.4 million of such assets have been deployed in DeFi protocols, an increase of about 18 times compared to $14.66 million at the beginning of 2026.Related assets can be traded on decentralized exchanges and used as collateral for lending. Coinbase previously disclosed that the trading volume of tokenized U.S. stocks on Base reached $1.5 billion on DEX in the past 30 days, an increase of 313% compared to the previous 30 days.

The Bank for International Settlements (BIS) published a working paper titled "Are Stablecoins and Bank Deposits Substitutes?" The study is based on weekly data from the United States from January 2019 to June 2025. After controlling for factors such as Bitcoin prices, government bond yields, and financial market conditions, it was found that the rise in bank deposit rates is associated with a slowdown in the growth rate of stablecoin market capitalization.According to the benchmark model estimates, a 1 basis point (0.01 percentage point) increase in the average deposit rate corresponds to a reduction of about 3 percentage points in the cumulative growth rate of stablecoin market capitalization over the following ten weeks, from an average level of approximately 15% to around 12%, rather than a decline in market capitalization. The response of USDC is stronger than that of USDT.The authors note that the study cannot conclude that the total amount of bank deposits or lending decreases, and the sample only covers one cycle of high interest rates. The views in the paper belong to the authors and do not necessarily represent the position of the BIS or its member central banks.

The cross-chain exchange protocol NEAR Intents released a post-mortem report attributing a $3.8 million vulnerability to a flaw in the deposit notification feature. The protocol deploys a public settlement contract on NEAR that maintains an internal ledger of deposited tokens, while withdrawals transfer tokens out via a cross-chain bridge. The report was published by NEAR Intents General Manager Alex Shevchenko on October 16, stating that the attacker withdrew $3.8 million before the protocol was shut down on October 1 and returned all funds within 36 hours of detection, with all affected users fully compensated.The report indicates that the feature notifies third-party contracts when tokens are deposited. The attacker created a contract that intentionally caused the notification to fail, allowing the token contract to refund the deposit while NEAR Intents retained the corresponding ledger credit. Through 23 failed deposit transactions, the attacker accumulated $3.8 million in unsupported balance, referred to in the report as ghost funds, and subsequently withdrew real tokens based on this and transferred them to other chains via the Omni infrastructure. Shevchenko stated that this was a vulnerability in the NEAR Intents contract, not in the Omni infrastructure.Withdrawals occurred between September 29 and October 1. The settlement contract was paused and reopened on October 1, with affected routes gradually restored, and contract-side deposits resumed on October 2. The report noted that the vulnerability went undetected because monitoring only compared the original chain assets with the total balance of NEAR side tokens, without comparing the total internal user balances with the actual tokens held by the contract; the team has since added this check and will automatically pause the contract when there is a balance inconsistency. The fix for the October vulnerability was deployed on October 2, but another serious vulnerability report regarding the same feature prompted its complete removal on October 7, with the relevant researcher receiving a $300,000 reward.

Upbit's official announcement states that due to BitMEX terminating the integration of the travel rule solution VerifyVASP, Upbit will suspend deposits and withdrawals of digital assets of 1 million Korean Won and above with BitMEX starting from October 16. Deposits below 1 million Korean Won will continue to be supported as usual.Manual deposits of over 1 million Korean Won from BitMEX to Upbit will cease at 14:00 on December 18, and any similar assets credited thereafter will enter the refund process, which users must follow to retrieve.

According to the official announcement, Upbit has listed HBD and DNT as trading warning coins, and deposit and withdrawal services have been suspended.

According to on-chain analyst Ai Yi's monitoring, a certain whale that built a position in ETH at the top of this bull market started accumulating around $4600 in September 2025. Subsequently, during the price decline, it continued to add to its position, extracting a total of 15,810 ETH, worth $63.85 million, with an average price of $4,101.85.From October 2025 to October 2026, this whale deposited a total of 15,361.1 ETH to exchanges, worth $49.55 million, during which it made deposits at price levels such as $4,478 and $1,910. The most recent deposit occurred 5 hours ago, with a final average deposit price of $3,226.22. If the aforementioned ETH were sold, it would incur a loss of $13.45 million. Currently, there are still 572 ETH remaining on-chain.

According to monitoring by Lookonchain, Bitcoin treasury company Hut 8 holds 10,300 Bitcoins, valued at 846 million dollars, and is currently suspected of selling Bitcoin.The wallet associated with Hut 8 (bc1q...xqka) has deposited 1,589 Bitcoins, valued at 130 million dollars, to multiple exchanges in the past two days.

According to Cryptoquant data, the cumulative amount of XRP flowing into Binance from whales in the past 30 days has risen to 1.669 billion, reaching a new high in 7 months, surpassing the level of approximately 1.65 billion in September, indicating that the activity of large holders transferring XRP to trading platforms has intensified recently.The increase in whale inflows may raise the tradable supply of XRP on trading platforms, and if large holders choose to sell, it could increase market selling pressure. However, inflows do not necessarily indicate an imminent sell-off; they may also involve wallet rebalancing or the use of other trading services on Binance. This indicator alone cannot determine the future price trend of XRP; it still requires observation in conjunction with net flow, trading volume, and price changes.

According to Lookonchain monitoring, an Ethereum OG address that bought ETH for $14 nine years ago (0x8AC...aA93) deposited 6,369 ETH, worth $15.95 million, to Kraken about 40 minutes ago.

According to Bloomberg, the only Renminbi clearing bank in Hong Kong, Bank of China (Hong Kong) Limited, plans to issue interbank certificates of deposit in the mainland market, with the quota already registered with the People's Bank of China. A statement released by Bank of China Hong Kong on Tuesday indicated that the company plans to issue up to 22.2 billion Renminbi (approximately 3.3 billion US dollars) in interbank certificates of deposit this year.Interbank certificates of deposit are short-term debt instruments with a maturity of one year or less, commonly used by domestic banks to raise funds from peers. Bloomberg stated that this move is another step by Chinese authorities to strengthen Hong Kong as a hub for Renminbi business.

According to on-chain analyst AI Yi's monitoring, the TRUMP team allocated an address that transferred 11.78 million dollars worth of tokens to a new address after 12 days, which may be deposited into an exchange.Twelve days ago, he transferred 8.87 million dollars worth of Solana to the address 52RDq...rkaD1: 6p6xgHyF7AeE6TZkSmFsko444wqoP15icUSqi2jfGiPN. This portion of tokens was subsequently deposited into OKX through two addresses.

According to on-chain data, a suspected Yzi Labs address deposited approximately 10 million USD worth of ENA into Binance 11 hours ago, involving 40 transactions, with a total of about 47.86 million ENA transferred in.Currently, there are still about 268 million ENA remaining in the wallet address, valued at approximately 56.89 million USD.

According to Onchain Lens monitoring, Chun Wang (F2Pool) transferred 2,160 ETH from F2Pool's Gnosis Safe to Binance, worth 5.52 million USD, of which 1,150 ETH is worth 2.94 million USD and 1,010 ETH is worth 2.58 million USD.

According to official information, the synthetic perpetual protocol Papertrade based on HyperEVM has officially launched. Its pre-deposit has been closed, with 11,465 addresses depositing 138 million dollars.Papertrade is a fully on-chain synthetic perpetual trading platform deployed on HyperEVM, with prices sourced from the Hyperliquid order book BBO mid-price. Users interact directly with the protocol's LP as counterparties, without using traditional order book matching, focusing on high leverage, zero slippage, and no funding rates. The native token PAPER has an initial supply of zero, with no pre-mining, team, or VC shares; the only minting source is user losses or liquidations. At the initial launch, PAPER cannot be freely transferred and is primarily used for staking.

According to on-chain analyst Ai Yi's monitoring, a certain whale that built a position of 11.6 million dollars in UNI, Litecoin, and BNB since September 23 is suspected of liquidating BNB.The whale deposited 2,380 BNB, worth 1.85 million dollars, to Binance within 20 minutes, which would result in a loss of 73,000 dollars if sold; it holds 1,014,020 UNI, worth 8.91 million dollars, with an average extraction price of 8.79 dollars, currently facing an unrealized loss of 1.409 million dollars; it holds 12,397 Litecoins, worth 841,000 dollars, with an average extraction price of 67.86 dollars, currently facing an unrealized loss of 54,000 dollars. The total unrealized loss for the three altcoins amounts to 1.536 million dollars.