user

According to Slow Fog's Yu Xian monitoring, users should promptly update their iPhone and iPad systems and be vigilant about certain installed apps being poisoned by DarkSword.DarkSword mainly targets iPhone cryptocurrency users for pinpoint attacks and coin theft, exploiting iOS-related vulnerabilities to break through the sandbox and steal various passwords and other private data from the Keychain, as well as local wallet private key files, memos, and other private data.

The cryptocurrency wallet Phantom is opening the Kalshi prediction market to users in the United States, allowing users to trade event contracts directly within the Phantom app. This feature will begin rolling out on October 23 and will gradually expand coverage over the coming weeks. Users must first complete Kalshi's KYC.Transactions will be conducted using the CASH stablecoin in the Phantom Cash account, and funds will be converted to fiat currency for settlement after being transferred to Kalshi. Withdrawals and profits will return to Phantom Cash. Phantom currently shows a fee of $0.02 per contract, with a small additional fee for network transfer.Due to local regulatory controversies, Phantom will restrict market categories in certain states: Michigan temporarily blocks sports markets; Nevada restricts sports, elections, politics, and entertainment markets; Washington state has broader restrictions, including categories such as culture, technology, and geopolitics. Phantom's General Counsel Kevin Jacobs stated that the company believes the CFTC's jurisdiction over relevant products is clear and will continue to comply with existing restrictions in various states.

According to the latest episode of the Gatecast podcast, Gate founder and CEO Dr. Han shared the product philosophy and future plans of Gate Money. He stated that Gate is extending years of accumulated experience into the fields of asset management and daily payments, reaching a broader user base, with the goal of doubling the user scale of Gate Money in the next one to two years.Leveraging the technical systems, institutional clients, and market-making liquidity accumulated from years of trading operations, Gate supports the exchange between various types of assets; relying on a global licensing layout and partnerships with banks and payment networks, Gate Money creates conditions for users' fund collection, payment, and consumption applications. These capabilities collectively form the operational foundation of Gate Money, enabling the platform to reduce exchange and fund circulation costs in different usage scenarios.Through various capabilities such as holding, exchanging, appreciating, and paying, Gate Money connects multiple types of assets with life needs. Dr. Han illustrated the consumption use of assets beyond investment by using the example of "buying coffee with stocks." In eligible regions, users can open bank accounts in their own names, using familiar payment methods, with transfers processed by underlying blockchain technology; idle funds can also participate in appreciation through yield products.Looking ahead, Dr. Han also shared the application prospects of AI Agent providing round-the-clock assistance in asset allocation and fund management. With the integration of investment, wealth management, and daily payments, Gate Money will continue to expand the application boundaries of various assets, promoting Gate's services deeper into more everyday life scenarios.

According to Digital Asset, the Bank of Korea will require virtual asset transfer service providers to report monthly to the foreign exchange information system the end-of-month holdings of users who have conducted cross-border cryptocurrency asset transfers to overseas exchanges, personal wallets, etc., since July 19, 2024, starting from December 2. Even if there are no cross-border transactions in that month, reports must still be submitted.The report covers the number of coins held, the converted balance in Korean won, and the total amount of cross-border inflows and outflows for the month. Dormant accounts, delisted assets, and staked assets are also included in the scope and must be submitted by the 10th of the following month at 17:30. It has not yet been determined whether there will be a requirement to retrospectively submit records of cross-border transfer transactions conducted before the implementation of the reporting system.

The Browser Company announced that it will completely cease the operation of the macOS and Windows versions of the Arc browser on December 22, 2026, and has closed new user registrations. Starting from November 23, the AI features on mobile, login, and tab synchronization will gradually be disabled, and the team will fully shift its focus to the AI browser Dia.Arc was launched in 2022, initially limited to Mac users through invitations, and was fully opened in 2023, with plans to gradually launch on Windows and mobile platforms in 2024. The product design includes a vertical tab bar, independent workspaces, automatic tab organization, split-screen browsing, and allows users to directly modify the appearance of web pages. The official disclosure indicated that Arc had over 1 million weekly active users.Founder Josh Miller stated in 2025 that Arc was too complex for ordinary users, with a high learning cost, and only 5.52% of daily active users frequently used multiple workspaces. The team stopped developing new features that year and shifted to Dia. In October of the same year, the parent company was acquired by Atlassian for approximately $610 million. The reason for the shutdown was that browser security in the AI era requires continuous investment, and engineering and security resources must be concentrated on Dia.

Cailian Press reported on October 22 that a joint report released by Google, Temasek, and Bain & Company shows that the number of generative AI users in Southeast Asia reached approximately 243 million in less than three years, accounting for 58% of the local labor force, with a penetration rate about four times that of mobile internet. Only 1% to 2% of the local population pays for personal AI services.Florian Hoppe, a partner at Bain & Company, stated in an interview that businesses can achieve AI commercialization through e-commerce, digital advertising, and other operations without having to rely entirely on consumers paying directly. They can also use AI to improve e-commerce conversion rates and handle routine customer inquiries. The report noted that about 80% of customer inquiries on the e-commerce platform Shopee are handled by AI chatbots, with the cost per customer contact decreasing by 30% year-on-year. In early cases, companies that applied AI saw a year-on-year increase in conversion rates of 10%, with the average spending per order increasing by as much as 75%.The report also stated that the total value of goods traded in Southeast Asia's digital economy is expected to grow by 17% year-on-year to $368 billion by 2026, and is projected to exceed $1 trillion by 2035. Among these, the online travel market is expected to grow by 10% to $59 billion, online media revenue is expected to grow by 22% to $44 billion, and the ride-hailing and food delivery market is expected to grow by 15% to $40 billion. The total value of goods traded in Southeast Asia's e-commerce market is projected to be $226 billion in 2026, an 18% year-on-year increase.

QuickSwap announced that its deployment interface on the Soneium network will cease operations on December 31, 2026, and advised liquidity providers and other users to withdraw assets and liquidity positions through the interface before this date.QuickSwap stated that after the interface stops service, users can still retrieve their assets through the official Soneium block explorer. The project team also released a list of usernames holding Soneium liquidity positions for relevant users to check.

Zhao Changpeng stated that no cryptocurrency wallet can achieve absolute security, and there is no software without vulnerabilities or technology that is 100% secure.He pointed out that any action carries risks, and so does inaction; it is inevitable to encounter problems, setbacks, and challenges that need to be addressed during the process. Zhao Changpeng advised users to stay informed about the latest developments, manage risks effectively, and actively solve problems.

Polkadot has issued a security warning that the browser extension of the third-party wallet Fearless Wallet has been compromised, intermittently leaking user private keys to attackers since February 2025. Investigations revealed that malicious code sends private keys to servers controlled by attackers when users unlock their wallets.According to an announcement from the Polkadot Community Foundation, 8 users have reported suspected unauthorized transactions related to this issue, involving 17,286 DOT. Polkadot urges all users who have used this extension to immediately create a new key pair through other wallets and transfer their assets, as merely changing passwords or switching wallet software will not eliminate the risk. Fearless Wallet is developed by an independent team and is not the official wallet of Polkadot.

According to monitoring by Olaoluwa Osuntokun, the Chief Technology Officer of Lightning Labs stated that due to the CVE-2026-111943 vulnerability, it is strongly recommended that all lnd, btcd, tapd, and litd users update their binaries or rebuild using Go 1.27.3.The vulnerability involves the compromise of a certificate authority, which may affect the security of the related software.

According to CCTV News reports, the National Computer Virus Emergency Response Center and the National Engineering Laboratory for Computer Virus Prevention and Control recently discovered multiple incidents of users encountering the "Weaxor" ransomware attack within our country, relying on the National Computer Virus Collaborative Analysis Platform.After the user's important files are encrypted, the file names are changed to the original file name with the ".weax" suffix added. The attackers leave a ransom note on the host, demanding that users contact them and pay the ransom.

The South Korean cryptocurrency exchange Upbit announced that it has recently discovered that criminals are impersonating the GIWA blockchain project, spreading false information about the mainnet launch and digital asset issuance, and inducing users to transfer assets.Upbit stated that GIWA is an Ethereum Layer 2 network being developed by its parent company Dunamu, which is currently only running a testnet, and the mainnet is still in the development and preparation stage, with no official launch time announced yet. Upbit reminds users to be cautious of unverified information regarding the mainnet launch, token issuance, and investment, and not to trust unofficial channels that request the purchase of digital assets, transfers, or wallet connections. Project progress should be based on information released by the official GIWA website and official social media.

Meta CEO Mark Zuckerberg stated that since its launch in September, the user base of Meta's AI application Muse has exceeded 10 million. The main use case for Muse is shopping, with over a quarter of users purchasing goods through the app, and the average transaction amount exceeding 200 dollars.After the release, Meta's stock price rose 5% in after-hours trading and topped the Apple App Store charts.

According to an official announcement from Railway, the cloud deployment platform Railway detected abnormal activity in the system that stores customer environment variables. Preliminary investigations indicate that an unauthorized third party may have accessed encrypted environment variables and obtained decrypted content from some of those variables, which may include API keys, database credentials, and image repository credentials.Railway believes this incident is part of a recent series of attacks targeting platform companies, aimed at infiltrating AI inference service providers, and has notified upstream service providers to proactively revoke keys. Currently, Railway has suspended all deployments and recommends that all users immediately rotate the environment variables, API keys, and private repository credentials stored on the platform, and check relevant service logs.

Meta Platforms (META.O) CEO Mark Zuckerberg stated that the revenue generated per user by Muse AI in the future may exceed that of its Family of Apps.

NFT trading platform OpenSea posted on X that OpenSea Mobile is now open to all users. Users can view their assets, complete transactions, and interact with trading counterparts within the same application.OpenSea stated that the app covers categories such as emojis, artworks, trading cards, and perpetual contracts, supporting over 25 chains and all user wallets.

According to The Defiant, the cryptocurrency exchange MEXC announced that it will terminate services for users in Russia and Belarus. Affected customers will receive a separately set deadline to close positions and withdraw assets.MEXC stated that users who have not received the relevant notice can continue to use the exchange's services, but must comply with its terms.

Digital bank Revolut posted on platform X that it is currently experiencing service interruptions affecting multiple services. The company confirmed that all customer funds and data are secure.Revolut stated that since the issue was discovered on the morning of the same day, the team has been working on a fix and apologized to affected users for the inconvenience caused.

According to NetEase's report on "DeepTech," the open-source AI programming tool OpenCode has officially confirmed it was breached, affecting approximately 1.4% of OpenCode Console users, with some API keys for models stored on the platform potentially leaked. Multiple developers reported unusual charges on accounts used to call models from OpenAI, Anthropic, and others, with some claiming losses of hundreds of dollars and others stating amounts exceeding $1,700. The officials stated that the incident is related to a large-scale distillation attack and are currently working with OpenAI, Anthropic, and Google to address the issue.OpenCode was developed by members of the Anomaly team, with one of the main creators being Dax Raad. The team has previously worked on projects like SST and OpenNext. In addition to local programs, its cloud service Console can centralize API keys from providers like OpenAI, Anthropic, and Google in a workspace and call them on behalf of users; the incident occurred on this cloud service. A notification email stated that the attacker gained unauthorized access to a set of decommissioned old systems, and some third-party model API keys in the Console workspaces may have been exposed. Developer Colin Parsons reported unusual charges of about $281 on his OpenAI account and about $168 on his Anthropic account, while Preston Zeller reported losses of around $1,700. Other users reported unusual charges of about $400 on Anthropic and account restrictions triggered by unusual usage on Google services.OpenCode has notified affected users to revoke and replace their keys and check recent call records. Lydia Hallie, a member of the Anthropic Claude Code team, stated that Anthropic has collaborated with OpenCode and revoked the Claude API keys believed to be affected. Tibo, a member of the OpenAI team, stated that they are working with OpenCode to help affected API users restore access and refund the amounts that were unusually consumed during the attack. Dax Raad clarified that the affected service is OpenCode Console, not the locally running OpenCode, and that keys configured directly in the local tool will not be sent to OpenCode servers. On October 18, he stated on social media that the attacker had been continuously attempting to breach the system for the past 48 hours, and the team is strengthening defenses.