thor

Polymarket trader Car posted on platform X that approximately $800,000 in assets from his Polymarket account were stolen, all positions were sold, and his friend's account was hacked for about $600,000. He reminded users to lock their accounts and refrain from interacting with the website for the time being.Additionally, several users reported on platform X and the Polymarket Discord community that the website's front end appeared to be under attack, with assets being transferred out without authorization. Some users claimed to have lost around $200,000, while others reported receiving unauthorized withdrawal signature requests on the official website. As of the time of publication, Polymarket officials have not yet responded. In June of this year, Polymarket was previously targeted by a phishing attack on the front end due to a third-party vendor being compromised, resulting in the theft of approximately $2.94 million in user assets.

Huobi HTX announced that the UK Financial Conduct Authority (FCA) had previously initiated legal proceedings against the exchange in the UK. After a period of constructive communication between both parties, the matter has now been properly resolved.Huobi HTX has always sincerely cooperated with the FCA, actively collaborating and responding to its concerns regarding the UK market. During this period, Huobi HTX, based on its commitment to continuously adhere to compliance standards, has gradually strengthened restrictions related to the UK market and exit arrangements, and implemented supporting operational measures.These measures were already in place before this settlement was reached. The settlement further consolidates the aforementioned measures and does not constitute an admission of any legal liability, misconduct, or violations by Huobi HTX.The settlement eliminates relevant legal uncertainties and is consistent with the exchange's commitment to continuously enhance compliance levels. This is beneficial for Huobi HTX to focus on the most important matter, which is to provide high-value services to users and achieve long-term sustainable growth.Huobi HTX thanks all parties for their professional cooperation in properly concluding this matter and will continue to focus on responsibly serving users. Looking ahead, Huobi HTX is willing to constructively cooperate with all parties in the industry, including working hand in hand with regulators where appropriate, to jointly safeguard user interests and promote the healthy development of the digital asset ecosystem.

Allium CEO and Co-founder Ethan Chan stated that Allium discovered a security incident on October 25, involving unauthorized access to some of its systems. Allium immediately took measures to limit access and protect the systems, has directly notified affected customers, and continues to provide updates and support.Allium has engaged an independent cybersecurity firm to assist with the response and investigation, focusing on strengthening security controls such as authentication and monitoring. After the investigation is completed, it plans to share a summary of the findings and response measures. Allium stated that its core platform, including Allium App, Explorer, and Explorer APIs, has been restored, although some features remain temporarily unavailable during the recovery period, with the latest availability and updates published on the status page. Ethan Chan expressed apologies for the disruption caused by the incident and stated that maintaining customer trust requires clear communication and ongoing follow-up.

Cysic released an update on the progress of the security incident handling, disclosing that 7,200,002 CYS tokens have been burned on the BNB Smart Chain (BSC) to offset the previously unauthorized token issuance.Both burn transactions have been confirmed on-chain, permanently reducing the supply of CYS tokens on BSC, bringing it back in line with the project's token economic model.

According to a statement released by Predict.fun on the X platform, a small number of user wallets experienced unauthorized fund transfers, with total losses amounting to approximately 400,000 USDT. Preliminary investigations indicate that an API documentation website hosted by a third-party service provider may have been compromised, affecting a small number of users in a short period.The website has been taken offline and will remain closed until the investigation is complete. Predict.fun promises to fully compensate users who have directly suffered losses due to this incident and will release a complete review report and subsequent preventive measures after the investigation concludes. Predict.fun is a prediction market platform based on the BNB Chain.

The Hong Kong Monetary Authority issued a notice disclosing that it has received a large number of public inquiries regarding fraudulent activities involving counterfeit digital Hong Kong dollar projects. The related scam agreements claim to convert loans into digital Hong Kong dollar assets, deceiving the public into signing agreements. The Monetary Authority sternly clarifies that the related fraudulent agreements and lending projects have absolutely no connection with the Monetary Authority and emphasizes that it will not contact citizens regarding personal financial matters or conduct fund transfers.All institutions participating in the "Digital Hong Kong Dollar" pilot program and other sandbox programs under the Monetary Authority will not raise funds from the public or provide financial management and investment products in the name of the related programs. The Monetary Authority has reported the incident to the Hong Kong Police and reminds the public to verify relevant information through the Monetary Authority's official website. If personal information has been provided to suspicious websites or applications, or if there is a suspicion of being deceived, one should immediately contact the police or the Information Center of the Criminal Headquarters of the Hong Kong Police Force.

The co-founder of the crypto startup accelerator AllianceDAO, Wang Qiao, stated that he is not worried about the crypto community's ability to cope with future AI and quantum threats, asserting that within the next two years, the world will realize that compared to the internet and traditional finance, cryptocurrencies are much better prepared for this.He mentioned that for the past decade, the crypto market has been a trillion-dollar scale and irreversible honey pot, which is an extremely attractive target for attacks, creating a system that has been tested in real combat far more than almost anywhere else on Earth, as well as a confrontational security culture.

The UK's Financial Conduct Authority (FCA) has launched two parallel consultations aimed at seeking industry input on the applicability boundaries of DeFi and its upcoming regulatory framework for crypto assets. Both consultations will close on November 18, 2026; the FCA plans to publish final guidance in January 2027 after reviewing feedback from various parties.The first consultation primarily targets FCA-regulated firms that use DeFi protocols or facilitate access to DeFi protocols. The guidance is not intended to introduce a new rulebook but aims to clarify how existing regulatory requirements should apply when firms provide services through highly automated, distributed ledger-based systems. The second consultation explores the scope of crypto asset regulation in the context of recent legislative changes (i.e., the "regulatory boundary").

Several large banks in the United States have discovered unauthorized AI agents accessing customer accounts, with some agents attempting to perform independent operations. Morgan Stanley, Bank of America, JPMorgan Chase, Wells Fargo, and other banks are racing to curb the risks posed by these agents.Morgan Stanley has begun to block third-party agents from accessing accounts, while JPMorgan Chase, Bank of America, and Citigroup are also restricting access.

According to an official announcement from Railway, the cloud deployment platform Railway detected abnormal activity in the system that stores customer environment variables. Preliminary investigations indicate that an unauthorized third party may have accessed encrypted environment variables and obtained decrypted content from some of those variables, which may include API keys, database credentials, and image repository credentials.Railway believes this incident is part of a recent series of attacks targeting platform companies, aimed at infiltrating AI inference service providers, and has notified upstream service providers to proactively revoke keys. Currently, Railway has suspended all deployments and recommends that all users immediately rotate the environment variables, API keys, and private repository credentials stored on the platform, and check relevant service logs.

On October 21, the UK's Financial Conduct Authority (FCA) published Consultation Paper 26/36 titled "Guidance on the Regulatory Scope of Cryptoassets," which explains how to determine whether related activities require authorization when the business model involves a certain degree of decentralization.The FCA pointed out that the use of software, smart contracts, distributed ledger technology, distributed governance mechanisms, or other technological arrangements does not, by itself, determine whether there are regulated activities that require authorization. Automation merely describes the manner in which functions are executed and does not determine whether that function constitutes part of a regulated activity. The so-called "true DeFi" is not a statutory concept in the "Regulated Activities Order" or the "Cryptoasset Regulations"; the degree of decentralization is a continuum and does not constitute an independent or separate regulatory framework.At the same time, the FCA also published Guidance Consultation Paper 26/7, which explains how regulated firms should manage DeFi risks, focusing on operational resilience and financial crime risks, and provides examples of measures that firms may consider taking. Both consultation papers will close for comments on November 18, and the FCA plans to publish the final guidance in January 2027. Starting from October 25, 2027, the new regulations will bring new cryptoasset activities under regulatory oversight, and firms wishing to continue related business must submit authorization applications by February 28, 2027.

According to the Straits Times, Edward Robinson, Chief Economist of the Monetary Authority of Singapore, stated at the Beijing Financial Street Forum on October 20 that once artificial intelligence leads to widespread productivity improvements, central banks may relax monetary policy. However, currently, the AI investment boom is driving demand, and policies should maintain appropriate restrictions. He pointed out that AI-related investments are driving economic growth, but the technology has not yet brought significant productivity improvements to the broader economy, and he called for a gradual, data-driven approach.The Monetary Authority tightened monetary policy in April and July 2026 due to rising inflation risks, and maintained the policy unchanged in October. An October 14 statement warned that if the AI boom generates broader economic spillovers and raises unit labor costs, domestic inflation may remain high. Robinson noted that AI-driven electronic products accounted for over 70% of this year's export growth in Asia, but the growth of industries producing AI-related technologies mainly stems from increased investment and more intensive use of existing resources, rather than efficiency improvements. He cited OECD estimates stating that if sufficiently widespread and appropriately invested, AI could increase total factor productivity growth by up to 0.6 percentage points annually.

According to market news, the ransomware/disclosure organization FulcrumSec publicly claimed to have continuously stolen about 10.6 TB of data from PingCAP's managed database service TiDB Cloud and released about 200 GB of the first phase sample.PingCAP issued a statement acknowledging that "some internal operational data" was accessed without authorization, but emphasized that it does not involve product vulnerabilities and will not affect the security of customer databases and business data. Companies such as Bitget and Baidu have collaborated with this data company.

The Swiss Financial Market Supervisory Authority (FINMA) has approved the country's first Bitcoin ETF aimed at retail investors. This product falls under "other alternative investment funds" according to Swiss law and is labeled as having special risks. FINMA did not disclose the issuer of the fund, but multiple media outlets have indicated that signs suggest it may come from BIT Asset Management (formerly Matrixport Asset Management), and FINMA did not deny this claim in response to inquiries. Additionally, several fund providers have submitted or announced plans to submit Bitcoin ETF applications.The fund is a single-asset product, with all funds directed towards Bitcoin. To this end, FINMA needed to grant an exemption regarding its risk diversification rules, citing that Bitcoin has a long trading history and extremely high trading volume. In terms of asset custody, participating institutions must take measures to prevent operational and custody risks, with standards referenced from the regulatory announcement issued by FINMA on January 12, 2026, which requires that customer crypto assets are not included in bankruptcy assets in the event of the custodian's bankruptcy. Meanwhile, the sales process must comply with Fidleg's conduct rules to provide higher investor protection than direct purchases of cryptocurrencies, and the fund documents must clearly indicate the associated risks.While approving the ETF, FINMA emphasized that even investing in Bitcoin through an approved ETF carries high risks, with severe volatility potentially leading to significant depreciation of the principal invested, and required the issuer to provide clear warnings about volatility and loss risks. The United States has approved Bitcoin spot ETFs starting January 2024, with BlackRock's iShares Bitcoin Trust launching on January 11, 2024, currently managing approximately $65 billion. The Swiss Exchange has been able to trade Bitcoin products for years, but they have existed in the form of ETPs and do not have fund status; this approved ETF is the first to incorporate Bitcoin into the approved public fund framework.

According to an announcement from the French Financial Markets Authority (AMF), the AMF has released a list of newly identified websites that illegally provide cryptocurrency assets or cryptocurrency asset services in France for the third quarter, including alphaairobot.com, aureoncorevix.net, bitgrokapp.com, bitkelttrade.com, cryptobullbear.com, investpathline.com, and others.Since the beginning of 2026, the AMF has added a total of 64 names to this blacklist. The AMF stated that this list will be updated frequently, but it is not exhaustive due to the continuous emergence of new unauthorized or fraudulent entities. The public can view the complete blacklist through the AMF official website under "Espace Épargnants > Protéger son épargne > Listes noires et mises en garde," as well as on the ABEIS website, and can check the whitelist of authorized cryptocurrency asset service providers (PSCA) on the AMF official website to verify whether relevant institutions are permitted to operate in France.

According to The Defiant, THORChain announced that its v3.21 upgrade will fix the FIN contract vulnerability on Rujira and allow the previously paused application layer to restart. The network has set the upgrade target at block height 28,366,100, with an expected time around October 23. After the restart, trading, lending, borrowing, and automated trading on Rujira will resume. Rujira's products run through smart contracts within THORChain, rather than on an independent blockchain, and the application layer can pause these contracts without affecting the underlying layer of THORChain.According to Rujira, the vulnerability was discovered on September 26, when an attacker transferred a custom concentrated liquidity position without holding a position. The team paused the application layer with the support of node operators, and only one position from the Rujira team itself was affected, with no loss of user funds. Rujira attributed the vulnerability to a flaw in the position transfer function, rather than the trading logic of the liquidity strategy. On September 27, Rujira stated that the fix is located at the underlying layer and has been scheduled for the v3.21 upgrade.Regarding the restart window, Rujira proposed a conditional grace period in its plan on October 15: if the application layer is ready to resume, any credit account position with a loan-to-value ratio above 100% and meeting liquidation conditions will request node operators to pause the credit account contract for an additional 24 hours, allowing borrowers to replenish collateral before liquidation resumes. Borrowers can replenish collateral through Rujira Borrow or by directly transferring assets to the credit account address. Rujira indicated on October 10 that positions still deemed unsafe after the grace period may be liquidated when the liquidator triggers the process.

The decentralized computing network Cysic released an event report on platform X stating that its cross-chain bridge was attacked on Saturday. The attacker exploited a processing vulnerability to unauthorizedly mint 10 million CYS on the BNB Smart Chain, and the cross-chain bridge has now been suspended. Preliminary investigation results indicate that the attacker accessed the database supporting the cross-chain bridge without authorization.The report shows that the minting occurred at 12:31:38 UTC, and Cysic added the receiving address to the token contract blacklist at 13:47:52. At that time, the address still held approximately 2.8 million CYS, and transfers have been restricted. Cysic stated that this incident was limited to the message processing and minting aspects of the cross-chain bridge and did not affect the mainnet or other operational systems, nor did it result in the theft or unauthorized transfer of CYS or other assets already in user wallets.Cysic emphasized that the quantity of minted tokens alone cannot determine the final dollar loss, and related token transfers, exchanges, and actual losses are still under verification. The company has hired a security agency and plans to release a follow-up report after the current investigation phase concludes. CYS is used to coordinate incentives for users, computing power providers, governance participants, and contributors within the Cysic network.

According to a report by 404 Media, newly submitted court records reveal the specifics of how Telegram provided user data to U.S. authorities after receiving a court order. The documents include a letter written by Telegram, which provides the phone numbers, user IDs, and IP addresses of specific users. This report was completed in collaboration with the independent media outlet Court Watch. It should be noted that the full article requires registration to view, and the currently visible content does not disclose the identities of the users involved or the specific background of the case.

The Indian Computer Emergency Response Team (CERT-In) released an important announcement this week titled "AI Agents as Attack Vectors," indicating that AI agents operated by unnamed model providers exceeded their granted task scope during testing, reading confidential business records in the online systems of Indian agencies, and no affected agencies discovered this behavior on their own.CERT-In stated that it received voluntary disclosures from several AI model providers, which indicated that these models accessed the online systems of Indian agencies while being researched and evaluated on the internet. The announcement did not disclose the names of the providers, models, or affected agencies. The agents read business records containing personal data and confidential materials, utilizing credentials and connection settings exposed in application configurations, public code repositories, and overly permissive cloud service roles. In some cases, the same credentials were recovered multiple times and reused in different operations.Additionally, CERT-In observed that criminals exploited publicly available AI-driven offensive security frameworks to scan for vulnerabilities, implement exploits, and launch economically motivated attacks against Indian entities, reducing the time from initial access to final impact from several days to just hours; these tools were repeatedly repackaged and deployed, with related deployments appearing on servers in multiple countries.

According to a report by the Korean News Agency, the Financial Services Commission of South Korea and the Financial Supervisory Service are strengthening monitoring of "perpetual contracts" linked to Korean stocks and stock indices traded through global virtual asset platforms.If illegal business activities targeting Korean residents, such as soliciting account openings or trading, are found on overseas platforms, the regulatory authorities will refer the matter to investigative agencies and take strict countermeasures.