wallet

GoPlus Security issued a security alert stating that the security organization SEAL recently reported multiple cases of asset loss among users of self-hosted wallets on iOS, involving several users. Users are reminded to update their iPhones to the latest iOS version as soon as possible and to check if any malicious applications are installed on their devices.During the period from October 28 to November 3, six related reports were received, with losses amounting to approximately $127,000, compared to four reports and about $434,000 the previous week. The related attacks are suspected to be associated with exploitation tools targeting wallet applications, such as DarkSword and Coruna, with victims mainly from Russia, Ukraine, and Kazakhstan.

According to Lookonchain monitoring, a wallet suspected to be related to hackers that had been inactive for over 3 years (0xd175...CEC5) spent 4.16 million DAI to purchase 1734.1 ETH and deposited it into Tornado Cash.

Samsung Wallet has launched a stablecoin account for eligible Galaxy users in the United States, allowing them to buy, hold, send, and receive USDC issued by Circle on the Solana blockchain without the need to download a separate crypto app or manage private keys. This feature covers approximately 82 million compatible Galaxy devices in the U.S.The service is built in collaboration with licensed stablecoin custodian and infrastructure provider Bastion and Coinbase, with Coinbase acting as a sub-custodian for Bastion to hold USDC through Coinbase Prime Vault. Samsung emphasizes that this account is a crypto wallet and not a bank account. Users can transfer funds to other Samsung Wallet users within the U.S. and compatible external crypto wallets without incurring Samsung fees, and they can also remit to qualified bank accounts in over 60 countries, with the recipient possibly receiving funds in local currency, and fees varying by destination. A 4% fee is charged for credit card top-ups, and withdrawals to bank accounts or debit cards incur the same charge. New users who top up $50 for the first time can receive $25 in USDC. The service requires Android 13 or higher and is available to U.S. residents aged 18 and over, excluding New York State.Lily Liu, Chair of the Solana Foundation, stated that stablecoins have proven the technology viable over the past decade, but what is lacking is a way to reach mainstream users. Woncheol Chai, head of Samsung's mobile business digital wallet team, mentioned that stablecoins are expected to make global fund transfers faster and more convenient, with Solana helping Samsung expand this experience to its scale. Samsung first announced this feature on October 7 and indicated plans to explore online and offline stablecoin payments while expanding to more markets in compliance with local regulations.

The on-chain analysis platform Bubblemaps stated that it recently investigated four crypto KOLs and found that their wallet movements do not completely align with their public narratives. The conclusions are based on Bubblemaps' analysis and estimates. Regarding "Kimchi," which was launched in collaboration with Pump.Fun, there were rumors in the community that it earned about 40 million dollars on TRUMP. Bubblemaps estimated related profits to be about 6 million dollars based on its publicly available airdrop wallet and associated clusters, questioning the reasons for concealing the associations.For Solstice, Bubblemaps stated that the multiple meme coins it promoted showed dozens of new wallets buying in simultaneously, each holding about 0.5% to 1% of the supply, and the public wallets can be traced back to the token deployer.For Anglio, after analyzing about 534 posts in October, the platform noted that associated wallets bought in an average of about 20 seconds before approximately 61% of the calls and sold quickly afterward, estimating profits of about 130,000 dollars, and he has admitted to using such tactics.For 0xEthan, Bubblemaps stated that he often sells about three minutes after making a call, with public wallets and secret side wallets buying in simultaneously, estimating related profits of about 125,000 dollars.

According to Cointelegraph, the French National Assembly voted down the "revenue" portion of the national budget for 2027 on Wednesday evening, resulting in the removal of three cryptocurrency-related amendments that had previously been included in the bill. These amendments will no longer be part of the version of the bill that will be submitted to the Senate, but there is still a possibility that they could be reintroduced during the Senate review stage in the future.The National Assembly had previously passed three amendments related to cryptocurrency. On October 16, lawmakers passed an amendment that included the profits generated from exchanging cryptocurrencies for stablecoins within the scope of taxation. On Tuesday, lawmakers passed another amendment requiring taxpayers to declare their self-custodied crypto assets; if the total reaches or exceeds 100,000 euros (approximately 112,000 dollars), it must be declared, with the assessment benchmark date being December 31 of the tax year.Additionally, another amendment proposed that if cryptocurrency platforms fail to provide relevant information as required by tax authorities, the amount of fines they face will increase from 10,000 euros to 50,000 euros.

CZ cited security researchers regarding the discovery of counterfeit Trust Wallet websites, reminding users to be cautious in distinguishing between .cam and .com domain names.

The open-source Bitcoin payment processing tool BTCPay Server has received multiple reports of unauthorized fund theft from its Bitcoin and Litecoin hot wallets on the platform. The project team released an investigation update confirming that the attack targeted servers running BTCPay Server version 2.4.1 or earlier. The attackers exploited a vulnerability that was fixed in version 2.4.2 on August 7, gaining administrative access to the servers through various methods and draining the hot wallet funds.BTCPay Server founder Nicolas Dorier confirmed that only servers running versions prior to 2.4.2, particularly version 2.4.1, were affected; users running the latest version 2.4.7 have not reported any credible losses. Some affected service providers, including LunaNode, have automatically shut down at-risk older instances. The official recommendation for users still using version 2.4.1 or earlier is to immediately transfer any remaining funds in old hot wallets to a new wallet created with a completely new mnemonic, take the old server offline while retaining relevant logs, and then install the latest version on a new virtual machine and connect the new wallet, ensuring not to restore the old server entirely to the new machine.Simply updating the software version is not enough to eliminate the risk, as attackers may have gained persistent access to the old server. Funds stored outside the server, such as those in hardware wallets, were not affected by this incident. The vulnerability is related to a flaw fixed in August of this year, when attackers had manipulated nodes by obtaining LND administrative credentials. As of now, this vulnerability has not been assigned a CVE number and is not listed in CISA's known exploited vulnerabilities catalog.

The founder of cryptocurrency exchange BitMart, Sheldon Xia, stated that the company's security team is currently severely understaffed. Employees are threatened and former employees are suspected of retaliation, making it more difficult for technical staff to stay; he mentioned that the team is still doing its best to protect data and assets.Blockchain analytics company Bitquery identified approximately $391,000 in suspected transfers from wallets related to BitMart, involving three blockchains. Bitquery stated that the funds are flowing to a wallet also involved in the attack on the Brazilian trading platform Mercado Bitcoin.

According to The Defiant, Stripe's Global Payouts now supports eligible U.S. businesses to issue USDC and OUSD stablecoins to external crypto wallets in over 160 markets. Currently in public preview, funds are disbursed from the Stripe Treasury balance, with a fee of 0.5% plus $0.50 per transaction.Stripe's official documentation indicates that this payment method typically arrives within minutes, and businesses in New York State must apply separately for early access.

According to Whale Alert monitoring, at 23:52 Beijing time, an unknown wallet transferred 813 BTC to Coinbase Institutional, equivalent to approximately 65.4 million USD based on the price at the time of the transfer.

According to Whale Alert monitoring, at 23:17 Beijing time, 21,294 ETH was transferred from an unknown wallet to Coinbase Institutional, valued at approximately 51.84 million USD based on the price at the time of transfer.

Coinbase published an article introducing its user asset protection mechanism and stated that it has not been affected by the previous security incident involving Binance's hot wallet. Currently, the platform's system and user funds remain unaffected.Coinbase stated that over 99% of user assets are stored in cold wallets, with hot wallets only retaining a small amount of funds to meet users' daily withdrawal and usage needs, dynamically adjusting the balance based on deposit and withdrawal demands. The assets in its institutional custody vaults are all stored in cold storage and are independently isolated on-chain.In terms of fund transfer security, Coinbase employs distributed key protection, withdrawal limits, abnormal activity monitoring, and emergency stop mechanisms. Cold wallet private keys are split and stored, and the signing process does not fully reconstruct them; the key signing service in the hot wallet production environment does not allow single-person independent access. If abnormal transactions or a surge in withdrawal amounts are detected, the system will trigger an investigation and limit, and if necessary, can pause part or all fund transfers by shutting down the signing key.Coinbase also stated that user assets are always held by the users, and the platform holds assets on a 1:1 basis, without lending or misappropriating them without user instructions. As of September 30, 2026, the asset scale on the Coinbase platform reached $377 billion, holding $8.6 billion in cash and cash equivalents, and $2.2 billion in investment cryptocurrencies. The company stated that as AI capabilities develop and change the security risk landscape, it will continue to increase investment in security technology.

According to Decrypt, Judge John Bodurtha of the Supreme Court of Nova Scotia, Canada, ruled to return a laptop containing a Bitcoin wallet to the family of William Sandeson, who has been sentenced to life in prison.Sandeson killed Dalhousie University student Taylor Samson in 2015, and the prosecution failed to prove that the Bitcoin involved was related to the murder, drug trafficking, or criminal proceeds, thus the court determined there was no basis to continue seizing the wallet.

According to Onchain Lens monitoring, a certain whale transferred 1,073.49 BTC (approximately 83.39 million USD) into a new wallet; this batch of BTC was originally received from @BTCMarkets three months ago.

According to monitoring by Lookonchain, a newly created wallet withdrew 521,501 UNI (3.69 million USD), 915,747 MORPHO (1.95 million USD), and 10 million ARB (1.54 million USD) from Bybit.

According to Lookonchain monitoring, a wallet created 3 months ago has withdrawn 6,912,500 PONS from OKX in the past 12 hours, worth approximately 13.97 million USD, as well as 5,887 ETH, worth approximately 13.45 million USD.

According to security company Salus, approximately 3,600 stolen Binance SOL flowed into the HitBTC hot wallet on November 3 at 16:51 Beijing time after being transferred through automated scripts and a peeling chain model via multiple paths.Salus stated that HitBTC had previously appeared in the fund transfer paths of major cryptocurrency theft cases; hackers often use nested services such as instant exchange services, small exchanges, and over-the-counter trading desks to transfer stolen funds.

According to a report by South Korea's News1, industry sources say that the Financial Services Commission (FSC) of South Korea held an emergency security inspection meeting on November 2 with major cryptocurrency exchanges and custodians, using the Binance theft incident as an opportunity to discuss increasing the proportion of cold wallet custody at exchanges. The current proposal is to raise this proportion from the 80% stipulated by the existing Virtual Asset User Protection Act to around 99%, which is maintained by some large exchanges.It is reported that the cold wallet custody ratio of Upbit user assets exceeds 99%, Bithumb is about 94%, Coinone is 85%, and exchanges like GOPAX are just above 80%. Industry insiders warn that increasing the ratio will reduce the assets available for immediate withdrawals in hot wallets, which may lead to withdrawal delays and increase the operational burden on small and medium-sized exchanges. In August of this year, Bithumb experienced delays of about 13 hours for withdrawals of some altcoins due to insufficient hot wallet balances. This proposal is still under discussion and has not yet been finalized.