ole

According to Catcher Predict monitoring, the predicted market on Polymarket for the "Milwaukee Brewers vs. Baltimore Orioles" event shows that the "Milwaukee Brewers" option in the sub-market "Milwaukee Brewers vs. Baltimore Orioles" has experienced significant fluctuations in winning probability, soaring from 82.5% an hour ago to the current 97.55% (a fluctuation of 15.05%). Please note the impact of relevant breaking news.

The North Korean hacker group WaterPlum disguises itself as a cryptocurrency, AI, and NFT company recruiter, deploying malware disguised as programming tasks or video conference repair files to software developers and IT professionals.The organization has infected at least 30,000 devices in over 100 countries and extracted funds or account credentials from more than 7,000 cryptocurrency wallets between December 2025 and July 2026, stealing at least $10.7 million.

The firmware vulnerability of the hardware wallet Coldcard in 2021 led to insufficient randomness in some recovery seeds. Since July 30, attackers have transferred approximately 1,600 to 1,800 Bitcoins from affected wallets, involving thousands of addresses, with a valuation exceeding 100 million dollars. Coldcard manufacturer Coinkite stated that it must be assumed that someone is using AI to review its public firmware. This vulnerability has existed for about five years, and whether AI was involved in the related attacks has not been confirmed.Shielded Labs researcher Taylor Hornby used Claude Opus 4.8 audit agent to discover a vulnerability in the Zcash Orchard shielded pool circuit that began in 2022, which could generate an unlimited amount of counterfeit ZEC without detection during testing. Developers completed the fix within a few days, and no theft of coins has been confirmed.Blockchain analysis company Chainalysis statistics show that the on-chain write volume carrying malware instructions and command control information has increased from an average of about 2.06 times to 11.1 times daily, a growth of 440%.

According to Onchain Lens monitoring, an attack cluster transferred approximately 1.54 million dollars' worth of FET from Fetch AI's token converter on Ethereum.The cluster also received approximately 452,000 dollars in newly minted NTX from Nunet Global deployers. As of now, the total confirmed amount involved is approximately 2.01 million dollars.

According to Catcher Predict monitoring, in the market prediction on Polymarket for the "LSU vs. Ole Miss" event, the "LSU" option in the sub-market "Spread -20.5" experienced severe fluctuations in winning probability, dropping from 54.5% an hour ago to the current 11% (a fluctuation of 43.5%). Please note the impact of related breaking news.

Visa has informed participants in the payment industry that the "digital goods media" merchant category code used by Crossmint for processing Meme coin transactions is not applicable for Meme coin purchases. Visa has notified payment processors, including Checkout.com, to stop using this category code and has provided a transition period for relevant institutions, which is expected to end next week.Previously, Robinhood Wallet and Fomo users could purchase Meme coins using Visa and Mastercard credit cards through Apple Pay or Google Pay, with the transactions processed by Crossmint, but categorized as digital media transactions such as e-books and movies, thereby bypassing cryptocurrency transaction classification and earning regular credit card points or cash back.JPMorgan Chase had previously raised concerns with Visa regarding the classification of these transactions, and Visa subsequently determined that at least one transaction was misclassified and should not have received credit card rewards. In the future, purchases of Meme coins will need to be processed as cryptocurrency transactions and will be subject to Visa's corresponding rules and restrictions.

According to Catcher Predict monitoring, in the Polymarket event "Milwaukee Brewers vs. Baltimore Orioles," the "Over" option in the sub-market "O/U 8.5" has experienced significant fluctuations in winning probability, soaring from 50% an hour ago to the current 81% (a fluctuation of 31%). Please note the impact of related breaking news.

According to CoinDesk, the crypto technology provider Haruko was targeted in a cyber attack earlier this week, affecting 15 clients. The attack exposed clients' read-only exchange API details and trading data. According to insiders, some hedge fund clients with weaker security protections may have had a small amount of funds stolen.Adam Carlile, co-founder and Chief Technology Officer of Haruko, stated in an email sent to clients that this was a targeted attack initiated by an organization, and the affected clients were all non-whitelisted clients. The attackers exploited a vulnerability in one of Haruko's processes to extract user access tokens, thereby obtaining data such as read-only exchange API information stored in process memory; clients' login credentials were not compromised. Haruko has fixed the vulnerability and refreshed the server-side keys, and plans to release a complete technical review report.Based in London, Haruko provides portfolio, risk management, and trading data infrastructure for institutional digital asset companies. The platform connects centralized exchanges, custodians, blockchains, and DeFi protocols, currently serving over 80 clients globally and integrating with more than 100 centralized trading platforms, 30 blockchains, and 250 on-chain protocols. Its listed clients include Bitcoin Suisse, GSR, Flowdesk, 3iQ Digital Assets, M2, among others, with GSR stating that it was not affected by this incident.

According to Ledger Insights, the Hong Kong Monetary Authority plans to launch a wholesale central bank digital currency (wCBDC) for interbank settlement by the end of this year, as part of Project EnsembleTX, for 24-hour settlement of tokenized deposit transactions.The project is set to enter the real transaction pilot phase by the end of 2025, but currently, interbank settlements still rely on the RTGS system that operates only during working hours. The wCBDC will be used to address this limitation. In addition, the wCBDC is also planned to be used for the settlement of over-the-counter derivatives trading on the Hong Kong Stock Exchange (HKEX), with the goal of implementing related real fund transactions within this year.

According to Catcher Predict monitoring, in the Polymarket event "Baltimore Orioles vs. New York Mets," the sub-market "Baltimore Orioles vs. New York Mets" option "Baltimore Orioles" has experienced significant fluctuations in winning probability, soaring from 60.5% an hour ago to the current 93.5% (a fluctuation of 33%). Please note the impact of related breaking news.

The managed cross-chain bridge Long released a post-mortem report on the WETH hacking incident on September 14. On that day at 07:07 UTC, the bridge paid 46.7928 WETH (approximately $118,000) to the attacker's address from the Robinhood Chain treasury. There were no user fund losses, and the treasury has been fully replenished from platform revenue. The bridge has been rebuilt, reinforced, and continues to operate. During the recovery period, some orders were delayed by several hours.The bridge's keeper read the burn events on Arc via RPC to release assets. At that time, the official mainnet endpoint was not online, relying on public RPC. After the backup endpoint was overloaded, the main endpoint provided the keeper with forged withdrawal event logs within a short window, which did not exist on Arc. The keeper's protection at that time was against replay and double spending, and did not question the data source, thus releasing the WETH. Meanwhile, three other forged withdrawals were completely reverted on-chain. The forged events entered through the RPC channel, and the contract, keys, and treasury were not breached.

The cross-chain protocol Chainflip disclosed that an attack incident targeting Tron USDT occurred yesterday. It has been confirmed that 736,442.17 USDT was stolen through 6 unauthorized payments, and an additional 115,654.41 USDT from user exchanges remains in the vault due to payment failures, while other funds were unaffected.Chainflip stated that the attacker exploited a vulnerability in the Tron transaction memo mechanism, attaching a custom memo to transactions that had already been signed by validators, causing the system to recognize the same deposit as a separate exchange and refund it again, ultimately leading to funds being paid out multiple times. The attacker executed 8 operations within approximately 90 minutes, gradually increasing the amounts. Chainflip claims to have completed a repair plan and has flagged the stolen funds to relevant authorities in an attempt to recover them, with operations expected to resume as early as Monday, and they will be responsible for compensating affected users for their losses.

Blockstream tweeted that it will not pay a ransom for the return of the stolen Bitcoin from the Liquid Network, stating that acquiring assets without authorization and refusing to return them constitutes theft, which does not fall under responsible disclosure or white hat behavior.Blockstream stated that if the stolen funds are not returned, it will cooperate with law enforcement agencies, exchanges, service providers, and forensic experts to track, recover the assets, and identify the responsible parties through all legal means, while emphasizing that Bitcoin transactions are transparent and relevant evidence will not disappear. Blockstream is the main developer and technical provider of the Liquid Network. Liquid Network stated that "approximately 4,000 BTC were taken by white hat hackers," and the sidechain has therefore suspended operations.

Cardano ecosystem project Empowa disclosed that two interconnected unauthorized asset transfer incidents occurred involving its three project wallets. Between November 2025 and June 2026, approximately 143,710 ADA was transferred out in 18 transactions from one project treasury wallet, which was also registered and claimed by unknown individuals using the private key corresponding to the Midnight airdrop, of which about 36,000 NIGHT has been transferred away.From June to August 2026, approximately 4.24 million EMP was transferred out from the other two project wallets, some of which have been sold through Minswap, VyFi, and others. Empowa stated that the funds from the two incidents ultimately flowed to the same intermediary wallet, indicating control by the same party, but the identity of the individuals operating these private keys cannot currently be confirmed. The project team has hired a professional blockchain investigation agency and plans to seek KYC information through the centralized exchanges where the relevant funds ultimately entered.

A Hyperliquid user account was unauthorizedly controlled, approximately 738,600 USDC was transferred away, and another 10,287 HYPE was unstaked. The victim account belongs to a certain address, and part of the stolen funds flowed to addresses suspected to be related to Bitget. As of the time of verification, 10,287 HYPE remains in the staked balance and has not yet entered the withdrawal queue.If the attacker continues to initiate cWithdraw, the related assets will be further transferred after a 7-day waiting period. In two recent similar cases, staked assets were stolen again due to the lack of an emergency pause mechanism that users could trigger, resulting in losses exceeding 1.1 million dollars. Related suggestions include launching a Guardian or Recovery mechanism that users can pre-enable, temporarily pausing withdrawals, transfers, and authorization changes, suspending automatic expiration, and requiring time locks and evidence review for recovery, with records on the blockchain.

On-chain investigator ZachXBT posted on X accusing user "Mr Austin Fine" (account "@xmrfine") of exchanging the stolen cryptocurrency assets of victim Malone for luxury goods in exchange for fees, stating that he "may be a whistleblower." ZachXBT indicated that until the victim is compensated, he will consider him "disassociated," which will negatively impact all current and future brand collaborations.ZachXBT later added that he has traced part of the funds on-chain flowing through Monero to purchase cars from the luxury car dealer TBTFW in Los Angeles.

Cronos confirmed in a post-mortem report that the attack on the lending platform Tectonic on August 30 involved $120.4 million in borrowing activities. The validators made the "difficult decision" to roll back the on-chain history, successfully recovering approximately $111.2 million (about 92% of the affected funds), while about $9.19 million flowed out before the network was paused and could not be recovered. The attacker leveraged weak DEX liquidity to inflate the price of Tectonic token TONIC by about 100 times within minutes and borrowed $120.4 million through a single transaction across nine markets. The validators paused the network about two hours later, restoring the chain to the last block before the suspicious activity, with block production resuming approximately 11 hours after the attack. The rollback involved reversing 1 hour and 54 minutes of on-chain history, totaling 10,961 blocks, with all transactions within that window being canceled, regardless of whether they were involved in the attack. Cronos stated that the alternative would have been to restart the network without restoring the previous state, which would have left the stolen assets in the hands of the attacker. This rollback closely followed Harmony's announcement of a similar plan, while Flow abandoned its rollback proposal last December due to community opposition. The validator cap for Cronos is 100, which facilitated quick coordination for the pause and restart, but also indicated that the network's finality in emergencies depends on validator consensus.

According to a report by ZDNet Korea, Samsung Display plans to significantly increase its OLED supply for Apple's foldable smartphones and iPads next year. The target for foldable OLEDs will rise from about 8 million units this year to 15 million units next year, while OLEDs for iPads will increase from about 2 million units this year to 9 million units next year, totaling an increase from about 10 million units this year to approximately 24 million units.Apple is a core customer for Samsung Display's small-sized OLEDs. Market research firm UBI Research estimates that the total demand for OLEDs for iPhones this year is about 264.7 million units, with Samsung Display supplying about 144 million units, and a target of approximately 148 million units next year. Apple will launch its first foldable smartphone in the second half of this year, and Samsung Display plans to supply a 7.8-inch foldable OLED. Starting in 2024, iPads will adopt OLEDs in the Pro models, expanding to the mini this year and further to the Air next year.The report cites industry insiders who say that if the foldable screen is priced at around $2,500, shipments this year and next year may be approximately 6 million and 11 million units, respectively; higher prices or supply chain issues could further reduce shipments. Samsung Display's supply targets may be adjusted according to market conditions.

According to Catcher Predict monitoring, in the event "Cleveland Guardians vs. Baltimore Orioles" on the prediction market Polymarket, the probability of the "Yes" option in the sub-market "NRFI" has experienced a sharp fluctuation, dropping from 44.5% an hour ago to the current 26% (a fluctuation of 18.5%). Please note the impact of related breaking news.