ltin

Bitcoin infrastructure company Blockstream announced the launch of consulting services for financial institutions and established an office in Lugano, Switzerland. This business enables banks, asset management institutions, and others to directly connect with Blockstream's engineering team and Bitcoin infrastructure. Blockstream Consulting Services will assist institutions in assessing, designing, and implementing Bitcoin-based financial infrastructure, as well as developing related solutions such as tokenized asset issuance and confidential settlements, covering areas such as technology strategy, system architecture, integration, and implementation.Blockstream stated that the Lugano office will serve Swiss clients, including those in Zurich, Geneva, and Zug, and will act as its European business hub, supporting client relationships, strategic partnerships, and collaboration with local financial and technology communities. The company's Chief Marketing Officer Peter Bain stated that Switzerland has a long-standing banking tradition and a regulatory framework supporting digital assets, making it an important market for Blockstream; the company aims to provide local expertise in markets where it sees demand for Bitcoin infrastructure, and the consulting business along with the Lugano office will bring customized Bitcoin solutions to European financial institutions.Founded in 2014, Blockstream's business covers Bitcoin custody, settlement, payments, asset issuance, and self-custody, with products including the sidechain Liquid Network, Elements, Simplicity, Core Lightning, Jade hardware wallet, and Blockstream App. The company has launched Simplicity smart contracts on the Liquid network and added Lightning Network support for the Jade hardware wallet. Co-founder and CEO Adam Back stated that the next phase of Bitcoin adoption is to integrate into the existing financial system, and the company's experience in Bitcoin cryptography, protocol development, and engineering can address the related complexities. This announcement did not disclose the pricing of the consulting services, the size of the Lugano office's staff, or the names of clients.

The Securities and Exchange Commission of Thailand (SEC) stated to Cointelegraph that several asset management companies have consulted with them regarding the launch of cryptocurrency ETFs, but no asset management company has submitted an application for the establishment of a crypto ETF. The SEC did not disclose the names of the relevant companies.The Thai SEC also mentioned that it is still too early to determine whether the first batch of products can be approved by the end of 2026; the timeline depends on the preparedness of the applying institutions, the progress of regulatory review, and investor protection requirements. The new regulations for crypto ETFs in Thailand took effect last Friday, allowing asset management companies to establish and list spot Bitcoin and Ethereum ETFs locally.Previously, some companies provided Bitcoin exposure to Thai investors through products linked to overseas ETFs. ONE Asset Management became the first Thai asset management company approved for a Bitcoin ETF-linked fund in 2024, followed by MFC Asset Management, which launched a fund investing through BlackRock iShares Bitcoin Trust (IBIT).

According to Lookonchain monitoring, a certain whale was liquidated 121.33 BTC during the market downturn, worth 9.91 million dollars.

On-chain detective ZachXBT posted that a certain institution was allegedly hacked by the North Korean-linked organization SquidSquad on October 8, resulting in the theft of approximately 2.84 million USD on the BNB Smart Chain (BSC).According to its tracking, the attackers deposited 1,111.2 ETH into Tornado Cash on October 20, then withdrew it to three addresses, and subsequently transferred the funds from Ethereum to Tron via USDT, consolidating them into two addresses. The aforementioned consolidation addresses are all financially linked to addresses previously attributed to North Korea. The funds were then directed to Chinese over-the-counter (OTC) traders through intermediary addresses within minutes, and ZachXBT believes this move may be to evade potential fund freezes by Tether.

Larry Fink, CEO of the world's largest asset management company BlackRock, stated in an interview with CNBC on Wednesday that if the United States implements "some kind of pause" on data center construction, it will plunge the U.S. economy into recession. He said, "A large part of our economy is built on such capital expenditure expansion." Data centers are buildings that house a large number of computers and provide computing power for artificial intelligence. Fink's remarks were in response to calls to halt data center construction due to concerns about environmental impacts.Fink dismissed concerns about data centers, stating that most fears are based on "misinformation," and emphasized that "data centers are not the problem." He also pointed out their demand for labor in construction, energy infrastructure, and AI computing hardware. A survey by the Pew Research Center shows that at least 49% of Americans believe data centers negatively impact the environment and the quality of life for surrounding residents. Moody's estimates that U.S. capital expenditure on data centers will reach $700 billion this year, accumulating between $2.4 trillion and $2.48 trillion by 2030, with the global total reaching $7 trillion by the end of this decade.Fink also warned about the government debt issue, stating that the U.S. fiscal deficit is having a serious impact, with national debt rising from $8 trillion in 2000 to $40 trillion in 2026, "an increase of $32 trillion over 26 years," causing a huge shock to credit demand and leading to larger government bond auction sizes. He believes that private capital needs to be unleashed to drive the U.S. economy to achieve 3% growth. BlackRock saw a net inflow of $205 billion in the third quarter, with revenue growth of 19%, adjusted earnings per share increasing by 38% year-on-year, and operating profit margin rising to 47.8%.

According to on-chain investigator vxdb, the cryptocurrency exchange platform Gamdom is suspected to have been hacked, involving a total asset value of approximately 4.208 million USD.In terms of losses by chain, EVM networks such as Ethereum, BNB Chain, Polygon, Arbitrum, and Optimism account for about 2.2 million USD, Solana approximately 965,000 USD, TRON around 375,000 USD, and Bitcoin about 668,000 USD.On-chain tracking shows that some of the stolen funds have been transferred to platforms such as Hyperliquid and THORChain through cross-chain bridges and token exchanges.

According to the security agency Blockaid, the token vesting pool of UNCX was attacked, resulting in a loss of approximately $86,000.The attack transaction involved a total of five different tokens, and the affected Ethereum contract currently still holds about $3.25 million in assets.

According to Lookonchain monitoring, a certain trader has accumulated a loss of 637,000 USD in Papertrade, with a cumulative nominal trading volume of 2.84 billion USD. Their trading losses amount to 1.71 million USD, and they have received 136 million PAPER tokens.In addition, the trader earned a reward of 1.07 million USD in USDC through staking, of which 943,000 USD has been claimed, and 130,000 USD remains unclaimed. In total, their net loss is 637,000 USD.

According to monitoring by Lookonchain, LUMIA has recently risen by 100%. Six wallets have longed a total of 11.7 million LUMIA on Aster_DEX with 3x leverage, valued at 1.9 million USD, with a total floating profit of approximately 949,000 USD, among which the highest return rate exceeds 160%.

According to Bernama, a man's cryptocurrency wallet in Perak, Malaysia is suspected to have been hacked, resulting in a loss of approximately 12.47 million ringgit (about 3.05 million USD). The Perak police chief stated that the victim discovered on the afternoon of October 9 that his crypto assets had been transferred out without authorization.Preliminary investigations show that the relevant transactions were conducted through the blockchain network. The police are collaborating with the Commercial Crime Investigation Department's cryptocurrency division to trace the flow of funds and investigate the individuals involved. The case is currently being investigated under Section 420 of the Malaysian Penal Code regarding fraud, and the specific method of attack has not been disclosed.

Ark Protocol project Second disclosed that its server was exploited on Monday, resulting in a loss of 0.75 Bitcoin of its own funds, approximately $62,300. The team stated that user funds were not affected and repairs were completed within a few hours.The attacker subsequently continued to attempt to extract more funds from the project and launched a denial-of-service attack. Second stated on Tuesday that the attack could lead to a decrease in the ability of wallets based on Bark to receive Lightning Network transfers. Second indicated that the vulnerability occurred in the boarding process of the Ark server, allowing the attacker to register and exit related boards solely with their own signature, while spending the same batch of VTXO in the nodes through the Lightning Network. The attacker also attempted to use Bitcoin related to the security vulnerability of Blink Wallet from September 19, but was unsuccessful.

According to Scam Sniffer monitoring, a user suffered an address poisoning attack on Ethereum, resulting in a loss of 30,004 USDT.

According to Defimon Alerts monitoring, a new address funded by Tornado Cash withdrew 200 WETH from a dormant MakerDAO ETH-A liquidation bot on October 6, resulting in a loss of approximately $538,000.This upgradable proxy had won four ETH-A liquidation auctions in 2020 (numbers 1457 to 1460, each with 50 WETH), but did not call deal(), leaving the collateral in Flipper.The withdrawal function of the implementation contract was not protected by ds-auth, allowing any caller to trigger it: first calling deal() on the aforementioned old auctions, then transferring the collateral to the keeper via Vat.flux, and subsequently using GemJoin.exit to transfer 200 WETH to the address specified by the caller and unpacking it into ETH. The MakerDAO core contracts operated as designed, with the vulnerability lying in the unprivileged exit function of the third-party bot.

According to the GoPlus security team, an unclaimed treasury contract on the Base chain was attacked. The attacker added a malicious contract to the lending whitelist through Safe multi-signature and withdrew 1783 aBaswstETH, then redeemed approximately 1783 wstETH on Aave V3, resulting in a loss of about 6 million dollars.It is reported that the attack stemmed from failures in multi-signature governance and access control. The project team had not executed Safe transactions on the treasury contract for 25 days prior to the attack, which may have been due to social engineering attacks or internal collusion; the core contracts of Aave and the Base chain itself were not affected. As of the time of publication, approximately 31.7 million dollars in assets remain at risk in the attacked treasury.

According to on-chain analyst PeckShield (@PeckShieldAlert), the same attacker successively exploited vulnerabilities in the SingularityNET bridging contract to illegally mint 260 million AGIX and 53.83 million WMTx on Ethereum.Currently, the attacker holds approximately 16.77 million USD in crypto assets, including 198.3 million AGIX (approximately 14.42 million USD), 649 ETH (approximately 1.67 million USD), and 33.58 million WMTx (approximately 627,000 USD).

According to Forbes, a warning jointly issued by multiple agencies including the Federal Bureau of Investigation (FBI) and the National Police Agency (NPA) of Japan indicates that the North Korea-linked hacker group WaterPlum (also known as Contagious Interview) will launch attacks on global IT developers from December 2025 to July 2026 by disguising itself as companies in the AI, cryptocurrency, or NFT sectors and offering fake job positions.Attackers contact job seekers on social media and recruitment platforms, luring them into downloading malicious files under the pretext of technical interviews or programming tests. They successfully infected over 30,000 devices, covering more than 100 countries and regions, and stole data from over 7,000 cryptocurrency wallets. Related funds of at least $10.71 million have flowed into wallets controlled by the attackers.

Recently, the meme coin market has been booming, and on-chain trading has become increasingly active. However, with the warming market, meme coin display pages have frequently shown highly disguised phishing links, and the "novel" attack methods have caused several seasoned traders to fall victim. Crypto KOLs @insidecalls and @cladzsol recently revealed that while scanning chains, they clicked on the meme coin homepage, which resulted in a "cloudfare verification" prompt. After completing the verification as instructed, the victim's on-chain funds were stolen. Among them, @cladzsol lost approximately $600,000 in assets.According to market news, on several recently popular meme coin display pages, the homepage redirects to a "cloudfare verification" page, which is actually a phishing link. If users follow the prompts, their computer systems will download and execute malicious scripts, leading to asset loss. This phenomenon is so rampant that it may be related to the delayed review processes of mainstream trading aggregation platforms like DexScreener. Currently, the display logic of relevant platforms is to directly reference the "official website" or social media links filled in the token metadata. These fields can be updated by token creators or those who later claim "community takeover." Hackers are exploiting this review loophole to transform meme coin display pages into new "fishing grounds" for phishing attacks. Users may inevitably click on unfamiliar links during the chain scanning process; if a "cloudfare verification" or other highly suspicious page appears, they should close it immediately to avoid interaction and protect their asset security.

According to a survey by the Financial Times, the Polish state-owned energy company Orlen had prepaid $230 million to the Dubai trader Hannon International for the purchase of approximately 6 million barrels of Venezuelan crude oil, but ultimately received only about 500,000 barrels of fuel oil. During the transaction, part of the funds was converted into USDT and delivered to the Venezuelan side through intermediaries.Hannon stated that at least $132 million in USDT was given to two intermediaries, after which the two intermediaries went missing. After accounting for expenses such as tanker leasing and legal fees, the Polish government estimates that Orlen's total loss amounts to at least $424 million. Orlen is currently seeking to recover the advance payment through arbitration.

According to Blockaid monitoring, an attack was discovered on an unidentified user's Safe multi-signature wallet on Ethereum. The attacker introduced a custom Uni V4 LP Safe module into a liquidity pool they created through a public keeper multicall, and then the hook unpacked aEthrsETH into rsETH, completing the extraction of Yoink MEV within the block. Currently, two transactions have been confirmed to cause approximately 7.73 million dollars in rsETH losses.