rsi

Aave disclosed that its V4 version has reached a stock mortgage market deposit of 25 million dollars on Base.

Alibaba announced that the new generation of the Qwen large model, Qwen4, has begun open testing, with the flagship preview version Qwen4-Max launched. This model has been integrated with Alibaba's Token Plan, Qwen Office, Qoder, Qwen App, and QwenStudio.This generation focuses on upgrading complex programming, front-end design, and agent capabilities. Alibaba also emphasizes professional office and software operations, hoping the model can autonomously use tools and complete multi-step tasks.Qwen4 has been in a warm-up phase for several months. In September of this year, Alibaba announced that the Qwen4 based on the new architecture is in training. The earlier released Qwen3.8-Flash-Next has already opened an experimental version of the new architecture. According to the previously showcased product plan, the Qwen4 series also includes Flash, Plus, and a 27B version aimed at local deployment.

According to the Bitcoin Core security announcement, the medium-severity vulnerability CVE-2025-62859 was disclosed on November 10, 2026. This vulnerability exists in versions prior to 29.2 and 30, where malicious nodes can exploit witness malleation in compact blocks to stall the block processing of victims under specific conditions.The announcement states that affected nodes will clear the download status after rebuilding the compact block and before checking the witness data. If the check fails, the node will revert to requesting the full block from the same node and wait for a 10-minute timeout. If the attacker controls three high-bandwidth peer nodes of the victim, or if the victim is running in -blockonly mode, this attack can be repeated indefinitely.This vulnerability was discovered and responsibly disclosed by Eugene Siegel, and the fix has been included in Bitcoin Core versions 29.2 and 30.

On-chain data research account Sparsity released a study on November 10, stating that in the past 30 days, pump.fun accounted for 92% of the total launch volume of all Meme launch platforms and 84% of the trading volume of launch platforms. The study noted that 95% of pump.fun's protocol revenue comes from trades when tokens are still on the joint curve or have a market cap of less than $250,000. A fee of 1.25% is charged on each transaction on the joint curve, with 0.95% going to pump.fun and 0.30% to the creators, resulting in a round-trip cost of 2.5% before price changes.The study indicated that approximately three-quarters of the aforementioned revenue comes from tokens that have been listed for less than 1 hour, and 87% comes from tokens that have been listed for less than 1 day. A total of 15 top tokens with a peak market cap of $1.4 billion paid about $1.5 million to pump.fun, while tokens on the joint curve or with a market cap of less than $250,000 paid $506 million. The research also stated that the top 25 deployers collectively launched 761,000 tokens, with a graduation rate of less than 1%, and received $128 million; the wallet that launched the most issued 171,195 tokens, averaging about $200 per token.The study reported that since August, call rewards have paid $29.6 million to 51,115 wallets, with 10 wallets receiving 16%, and the median being $13. In the fourth quarter of 2024, out of 3.16 million launches, 207 reached a market cap of $10 million, while in the third quarter of 2026, out of 3.05 million launches, 24 reached that level. The study stated that out of a total of 24.4 million launches on pump.fun, currently, 312 have a market cap above $100,000, which is about 1 in every 78,000. The article was written by Kioto.

OpenAI has released the beta version of Businesses in ChatGPT.

According to Barron's, Robbie Mitchnick, head of BlackRock's digital asset business, stated that since regulators approved the physical creation and redemption of crypto assets last year, the company has recorded approximately $3.6 billion in physical conversions of directly held Bitcoin into shares of its spot Bitcoin ETF, IBIT. Since BlackRock does not handle all transactions itself and may not see every conversion, the actual scale may be larger.BlackRock also provides physical conversions for the iShares Ethereum Trust ETF and the iShares Staked Ethereum Trust ETF, but the related scale is much smaller than IBIT. Mitchnick noted that demand continues to rise, and this is currently the highest level of interest the company has seen, which does not change with Bitcoin price fluctuations. The primary motivation is security and peace of mind. Outsourcing custody to an institutional-grade cold storage model is more attractive for holders; holding ETF shares managed by large fund managers is generally seen as less risky than placing assets on crypto trading platforms or in always-online hot wallets.He mentioned that the recent hacking incident at Binance has once again highlighted the risks of trading platforms, although large Bitcoin holders have long understood these risks. The minimum threshold for physical conversions has been reduced from the initial approximately $30 million to about $1 million to $2 million, with the threshold set by intermediary firms facilitating the transactions, such as Galaxy Digital, Talos, and Virtu. Mitchnick expressed hope that the threshold could be lowered to a single ETF share, but the cost structure is unlikely to drop to zero in the short term.

Warren's committee assistant stated that she plans to focus on predicting market regulation and the Trump family's cryptocurrency business after taking charge of the Senate Banking Committee in January next year.

BIT Securities announced the launch of a dollar-cost averaging feature for U.S. stocks starting today, covering all stocks and ETFs in the U.S. market. Users only need to set the investment amount (starting from a minimum of US$10) and the period (daily, weekly, or monthly), and the system will automatically buy according to the plan without the need to place manual orders each time. Users can activate the plan with one click when viewing individual stock details or the "Assets" page, and can adjust, pause, or terminate it at any time; additionally, the dollar-cost averaging plan can also choose to use margin funds for purchases.Compared to a one-time investment, dollar-cost averaging spreads the investment over different time points, helping to average out the holding costs and reduce timing pressure.Currently, BIT Securities supports trading in U.S. and Hong Kong stocks, and covers various investment methods including U.S. stock options, margin trading, and stock dollar-cost averaging. Elio Cui, the head of BIT Securities, stated: "We always hope that users with different investment styles can find suitable tools at BIT. The essence of dollar-cost averaging is long-term investment, which aligns with the group's long-termism philosophy. We hope to accompany users in combating volatility with discipline and growing together with quality assets."BIT Securities is also launching new user benefits: new account holders can enjoy commission-free trading for U.S. stocks, a US$100 platform fee rebate card, and a real-time market data card, with tasks completed earning rewards worth up to US$320; a transfer incentive campaign is also ongoing, with rewards worth up to US$300. Details of the activities are subject to BIT's official announcements.Risk Warning: Dollar-cost averaging does not guarantee profits and is not necessarily superior to other investment methods. Investors should formulate investment plans based on their own financial situation and risk tolerance.

According to CoinDesk, Solana developers have proposed to abolish the persistent nonce transaction feature, which was used in the April attack on the trading protocol Drift, resulting in a loss of at least $270 million. The proposal still requires technical approval and is expected to take effect on the mainnet as early as May 5, 2027.Persistent nonce allows signed transactions to remain valid for a long time, enabling custodians and exchanges to perform offline signing. Relevant institutions will need to migrate to alternative solutions, and the migration requirements from the Solana Foundation may delay the final deadline.

Slow Fog confirmed that a Windows software impersonating a cracked version of TradingView Premium will steal browser credentials, cryptocurrency wallets, and Telegram data.

The Ethereum forum released a draft for "Versioned Opcodes for Gas Repricing." The draft proposes achieving Gas repricing through versioned opcodes while maintaining backward compatibility. Newly deployed contracts must use V2 opcodes and follow the Gas scheduling tables of EIP-8037 and EIP-8038, while existing contracts will continue to use the old scheduling table.The V2 opcode set does not include Gas introspection-related opcodes such as GAS and GASLIMIT; if included, the deployment will revert. The draft also introduces DELEGATECALL_V2, which behaves similarly to DELEGATECALL but requires the target contract's code_version to be greater than or equal to 2, otherwise it fails immediately. This design aims to allow future adjustments to Gas costs without disrupting already deployed contracts.

The Bitcoin wallet Electrum announced the release of version 4.8.4 on platform X, stating that this is another security update. According to the GitHub changelog, the release date of this version is November 6, and it fixes vulnerabilities related to Lightning Network onion messages: malformed onion messages from arbitrary sources may cause Electrum to disconnect from its channel peer nodes.Electrum will currently discard all incoming onion messages until practical use cases are implemented. In addition, the new version also fixes issues such as the failure to recover some mnemonic phrases from versions prior to 2. The previous version of Electrum, 4.8.3, was released in late October and fixed a high-risk vulnerability that had been exploited in the wild.

According to a research report released by the University of Oregon Blockchain Group (Dorm DAO), the student fund recommends a full investment in the AI mining project Pearl ($PEARL), with a target price of $2.50 to $3.00. Currently, Pearl has a market capitalization of approximately $531 million.The research report points out that Pearl is a Layer 1 public chain that replaces proof of work (PoW) with matrix multiplication, using "proof of useful work (PoUW)," allowing GPUs serving AI to simultaneously ensure network security and earn tokens. The fund views the potential listing expectations on Coinbase and Kraken, the FP8 kernel upgrade (which aims to reduce mining costs to nearly 0%), and the AI computing narrative as three major catalysts.The report also reveals several risks: currently, less than 1% of blocks are running real AI tasks, most of which are meaningless random matrix calculations; the token supply is expected to expand by approximately 86% next year; and the internal holding situation of the approximately 122 million tokens (accounting for 5.8% of the total supply) produced in the early days of the mainnet launch (within 6 days) has not been disclosed, and the project currently lacks a third-party code audit.

Federal Reserve's Williams stated that the U.S. labor market is exceptionally stable and robust, with remarkable economic resilience and enhanced growth. Currently, inflation levels in the U.S. are too high and have persisted for too long, and the inflation rate must be reduced to 2%.Energy prices affect ticket prices, and artificial intelligence has a limited impact on chip prices. The effects of tariffs have largely become a thing of the past.

According to Hongxing News, the individual involved in the incident of "Tsinghua graduates studying at University College London (UCL) being scammed" revealed that he was scammed for nearly 45 days. On the day he arrived in the UK and checked into his dormitory, he received a call from a number displayed as "Embassy," claiming that his phone number had sent a large number of harassment and fraud messages, and transferred him to so-called "cyber police." The caller accurately reported his personal information, requested him to download video software, and displayed materials such as police identification, arrest warrants, and confessions.Several "cyber police" bombarded him with information for more than three hours while he was still adjusting to the time difference and was physically and mentally exhausted, causing him to lose his judgment. Subsequently, the so-called "Interpol" led him to mistakenly believe he was assisting in an investigation into an international money laundering case and made him sign a so-called confidentiality document. For the first two weeks, they continued to strengthen control, requiring him to maintain a phone call 24 hours a day and turn on video for online monitoring, while also restricting his social interactions under the guise of investigation confidentiality.They ultimately induced him to purchase digital currency and transfer it to a designated account, and even made him deceive his family into transferring money for the so-called case, claiming it would be returned after the case was closed. He was also coerced into downloading foreign encrypted chat software to register an account for purchasing virtual currency. After returning to his home country, he discovered that during the period he was out of contact, the scammers had used his credit card to purchase tickets to other destinations. He reminded the public to pay more attention to anti-fraud campaigns, as scammers exploit time differences and information gaps to set traps.

The mobile trading application beta of Leap, a subsidiary of Solana Labs, has been launched and is currently undergoing public testing via iOS TestFlight, with the Android version set to be released soon. The application is based on the Solana network and supports trading tokenized stocks, ETFs, precious metals, foreign exchange, and crypto assets, with spot trading priced in USD, one-click confirmation, and executed as an on-chain swap.Leap was developed by the Dialect team, which was acquired by Solana Labs earlier this year. This team previously developed Solana Actions, the Blinks protocol, and the cashtags feature for the X platform. The application integrates with Jupiter for trading routing, Helius for infrastructure, and Birdeye for market data; there are no fees charged during the initial launch phase, with plans to use fee revenue to buy and burn SOL in the future.

GoPlus Security issued a security alert stating that the security organization SEAL recently reported multiple cases of asset loss among users of self-hosted wallets on iOS, involving several users. Users are reminded to update their iPhones to the latest iOS version as soon as possible and to check if any malicious applications are installed on their devices.During the period from October 28 to November 3, six related reports were received, with losses amounting to approximately $127,000, compared to four reports and about $434,000 the previous week. The related attacks are suspected to be associated with exploitation tools targeting wallet applications, such as DarkSword and Coruna, with victims mainly from Russia, Ukraine, and Kazakhstan.

According to Decrypt, the U.S. Department of Justice announced on Tuesday that a Canadian man has been extradited to the United States, facing charges of assisting in the intrusion of university computers, stealing login credentials, and secretly mining cryptocurrency.A federal grand jury in the Western District of New York indicted 35-year-old Ryan James Roach, a resident of Saskatchewan, and 41-year-old Mathiew James Stubbings, a resident of Ontario, on charges including conspiracy to obtain and damage protected computer information, obtaining protected computer information, and intentionally damaging protected computers, which could result in a maximum sentence of 10 years in prison and a $250,000 fine.The indictment shows that between June 2016 and December 2019, the two targeted U.S. educational institutions with supercomputers, first researching their cybersecurity weaknesses before executing the intrusions. Once inside the systems, they allegedly deployed malware, stole login credentials, and forced the victims' computers to mine for them.Victims included institutions in New York, Tennessee, North Carolina, and Massachusetts. The two reportedly used virtual private servers registered under false names in multiple countries to send malware and mining programs and store stolen credentials, while also forwarding attacks through other victims' compromised computers to hide their identities.Roach was extradited from Canada on October 28 and was arraigned in Rochester, New York, where he is currently detained awaiting a detention hearing. Extradition proceedings for Stubbings are still ongoing in Canada. This case falls under cryptocurrency hijacking, where attackers use others' computers to mine, leaving the victims to bear the electricity costs and suffer performance degradation. The Department of Justice did not specify the particular cryptocurrencies mined by the two.Google's Threat Intelligence team released a report on Monday stating that attackers are expected to increasingly prioritize LLMjacking over traditional resource thefts like cryptocurrency hijacking, which involves hijacking corporate access to AI models and shifting the billing.

On November 5, according to reports from BianNiuShi, Coze, the intelligent agent development platform under ByteDance, announced a phased discontinuation of its current enterprise version. Starting from November 30, the standard and flagship versions for enterprises will stop accepting new customer purchases; the old package on Volcano Engine will be discontinued on December 31 of this year, and the new enterprise package is planned to be fully discontinued by December 31, 2027.Existing enterprise customers can still renew and purchase additional seats, but the service period cannot exceed the discontinuation date of the corresponding product. According to the current announced arrangements, the adjustment targets are the enterprise packages, not the immediate shutdown of Coze as a whole. On August 24 of this year, ByteDance integrated the TRAE and Coze teams into the Doubao system, and the next day launched the Agent product brand "Doubao Work" aimed at productivity scenarios.According to the "2025 China Intelligent Agent Development Platform Market Share Report" released by IDC in June this year, by 2025, Volcano Engine (Coze) will hold the first position in China's public cloud intelligent agent development platform market with a revenue share of 19.3%, while Baidu Intelligent Cloud and Tencent Cloud rank second and third with 13.9% and 12.6%, respectively. Tencent's intelligent agent platform Yuanqi has already updated its service discontinuation announcement on October 8, stating that it will fully cease operations starting November 9, 2026.

The open-source Bitcoin payment processing tool BTCPay Server has received multiple reports of unauthorized fund theft from its Bitcoin and Litecoin hot wallets on the platform. The project team released an investigation update confirming that the attack targeted servers running BTCPay Server version 2.4.1 or earlier. The attackers exploited a vulnerability that was fixed in version 2.4.2 on August 7, gaining administrative access to the servers through various methods and draining the hot wallet funds.BTCPay Server founder Nicolas Dorier confirmed that only servers running versions prior to 2.4.2, particularly version 2.4.1, were affected; users running the latest version 2.4.7 have not reported any credible losses. Some affected service providers, including LunaNode, have automatically shut down at-risk older instances. The official recommendation for users still using version 2.4.1 or earlier is to immediately transfer any remaining funds in old hot wallets to a new wallet created with a completely new mnemonic, take the old server offline while retaining relevant logs, and then install the latest version on a new virtual machine and connect the new wallet, ensuring not to restore the old server entirely to the new machine.Simply updating the software version is not enough to eliminate the risk, as attackers may have gained persistent access to the old server. Funds stored outside the server, such as those in hardware wallets, were not affected by this incident. The vulnerability is related to a flaw fixed in August of this year, when attackers had manipulated nodes by obtaining LND administrative credentials. As of now, this vulnerability has not been assigned a CVE number and is not listed in CISA's known exploited vulnerabilities catalog.