xpl

The Chief Information Security Officer of Slow Fog, 23pds, posted on platform X that the APT29 professional organization related to Eastern Europe is spreading iOS and Android exploit tools through compromised websites and hijacked web analytics tool scripts.It pointed out that DarkSword and AndroSnitch have begun mass attacks, and normal websites or apps that users visit may contain backdoors. He advised users to upgrade their systems to the latest version.

Anthropic disclosed that the exploit program written by Claude can remotely execute commands on specific Linux servers, and the fixes for multiple versions of Ubuntu are still in progress.

The liquidity service provider Quote Markets team member filo published a review of the XPL flash crash event on Hyperliquid. During the flash crash of XPL on Hyperliquid, 16 wallets associated with funds and trading activities withdrew approximately $2,038,600 in margin before the price plummeted, leading to HLP taking over a large number of XPL long positions.HLP ultimately took over about 160 million XPL and completed the sale within approximately 75 minutes, incurring a loss of about $555,787, equivalent to 55.6% of the clearing vault's own funds. Investigations showed that 14 of the 16 wallets had connections in terms of funding sources or trading activities, with 12 wallets withdrawing funds in advance, contributing to 90.7% of the positions taken over by HLP. However, the investigation did not find direct evidence that these wallets caused the XPL crash, nor could it confirm whether they hedged on other trading platforms.It is worth noting that these 16 wallets did not profit from this event on Hyperliquid, collectively incurring a loss of about $711,000. Additionally, XPL had already dropped about 6% before the first liquidation occurred on Hyperliquid, so the liquidation was not the starting point of this crash, and the initial active selling volume of Binance perpetual contracts was also significantly larger.

According to on-chain data monitoring, the flash crash of XPL price caused Hyperliquid's HLP treasury to incur a loss of approximately $556,000.Previously, 16 wallets funded through centralized exchanges had been continuously building long positions in XPL since October 29, holding a total of about 269 million XPL, with a nominal exposure of approximately $23 million. Among them, the funds of 14 wallets were transferred from Binance about two months ago, with 12 wallets withdrawing approximately 2.02 million USDC before the price drop to reduce margin exposure.As XPL rapidly fell from $0.086431 to $0.069429, it triggered a chain liquidation of long positions. After the liquidation, the HLP treasury passively took over approximately 160.39 million XPL long positions, with an average holding cost of $0.07592, and a nominal value of about $12.18 million. The HLP treasury ultimately closed at $0.0725, recording a loss of approximately $556,000.

Cosmos ecosystem NFT marketplace Talis Protocol stated on October 31 on X that attackers exploited vulnerabilities in its market and auction contracts on Injective, resulting in approximately 5,700 hosted NFTs being extracted and sold into public collection bids.Talis indicated that it has suspended new listings and auctions on Injective and will return over 26,000 NFTs in the contract to their holders. As a precaution, new listings and auctions on other chains have also been suspended. Please do not buy, list, or bid on Talis until the fixes are confirmed safe; users can still cancel unexecuted bids. If listings or auctions disappear, please check your wallet.The project stated that the repaired contracts are ready and are undergoing pre-deployment review, with a timeline to be announced later. The team has recorded each affected NFT, the holders before the theft, and each transaction bid, and is formulating a plan to return the NFTs to their original holders and compensate the bidders. A list of affected NFTs will be published, and please do not purchase these NFTs in the meantime.Talis also stated that it will not request wallet connections to claim any content via private messages, and a complete post-incident explanation will be released later.RootData shows that Talis Protocol was established in 2021 and completed a $2.35 million private fundraising round in November of the same year.

On October 31, the DeFi strategy platform Troves on Starknet announced that its xWBTC/WBTC treasury was exploited that day, resulting in an initial loss of approximately 8.6 BTC. Troves stated that, according to the investigation as of the time of the announcement, the exploitation was limited to that treasury, and no impact on other Troves treasuries had been found.Troves mentioned that the exploitation involved an old rebalancing contract that retained permissions even after being replaced. The team has revoked the relevant contract permissions and proactively paused the affected and potentially exposed treasuries. The team is continuing to verify the extent of the exposure and is tracking funds with security partners to assess possible recovery options.Troves later updated that approximately 40 minutes after discovering the exploitation, the problematic old contract was revoked, and all rebalancing permissions on its LST treasury were revoked. As a precaution, the three treasuries xWBTC/WBTC, xSTRK/STRK, and xstrkBTC/strkBTC are currently in a paused state. Troves provides automated DeFi strategies on Starknet, and the team stated that a detailed post-analysis and options for affected depositors will be announced after verification.

The stablecoin infrastructure platform Interlace officially announced its ecological cooperation with the AI Agent platform X-Agent. The two parties will explore cooperation around AI Agents, stablecoin payments, and Web3 financial applications, promoting the deep integration of payment infrastructure and AI Agent application scenarios.As the first landing scenario of the cooperation, Interlace will participate in the Halloween-themed event "The Great Treat Hunt 2026" initiated by X-Agent, and collaborate with multiple ecological partners to explore innovative applications of AI Agents and Agentic Payment through community interaction and online AMAs. The event will be held from October 30 to November 6.X-Agent is committed to connecting Web3 social networks with autonomous AI Agents, supporting users in creating and deploying agents through natural language, with over 1 million certified users globally. Interlace focuses on issuing card infrastructure, helping exchanges, wallets, fintech platforms, and financial institutions quickly launch their own branded card projects through API and white-label solutions, with a cumulative issuance of over 10 million cards.In the future, both parties will continue to explore the collaborative scenarios of AI Agents and stablecoin payments, promoting the innovative development of autonomous interaction, automated settlement, and the Agent Economy.

Grvt has subscribed to the tokenized financing notes arranged by the Hong Kong subsidiary of Mirae Asset Securities, one of South Korea's largest brokerages, as the first step in the cooperation between the two parties.Grvt stated that it plans to integrate the relevant exposure into its wealth management feature Grvt Earn. In the future, both parties will also explore products such as tokenized government bonds, corporate bonds, and ETFs. Grvt indicated that products like tokenized government bonds are only potential directions and not confirmed for launch, depending on regulatory and internal approvals.

According to an official announcement from Ripple, Bank of New York Mellon (BNY) has supported XRP and the US dollar stablecoin RLUSD on its digital asset custody platform. Eligible institutional clients can custody, hold, and transfer related assets through this platform. The two parties are further expanding their digital asset collaboration based on the existing RLUSD reserve custody and Ripple Prime custody partnership.BNY plans to expand support for tokenized assets and investment products on the XRP Ledger (XRPL) and collaborate with Ripple, allowing clients to directly mint and redeem RLUSD through BNY in the future. Additionally, both parties are exploring XRPL-based supply chain financing solutions with the working capital platform C2FO, tokenizing trade financing assets such as accounts receivable to broaden investor participation channels.

According to The New York Times, the market generally expects the Federal Reserve to maintain interest rates at the FOMC meeting this week (October 27 to 28). Federal Reserve Chairman Kevin Walsh needs to explain why he is not raising interest rates while inflationary pressures remain high, while also indicating that the determination to combat inflation has not weakened and keeping the possibility of another rate hike this year.The report states that the Federal Reserve raised rates once in September, and the market had once priced in another rate hike in October. New York Fed President John Williams, Vice President Jefferson, and Governor Waller expressed at the end of September to early October that they could wait a bit longer, causing the probability of an October rate hike to drop from over 70% to less than 30%. High oil prices and the demand for materials and electricity driven by AI infrastructure increased price pressures in September. The Nasdaq 100 index has fallen more than 7% since its historical high on October 6, and the yield on the 10-year U.S. Treasury bond had previously stood above 5% for several consecutive weeks.Stephen Stanley, Chief Economist at Santander U.S. Capital Markets, stated that he expects interest rates to remain unchanged this week but believes there may still be another rate hike in December. Walsh needs to explain why he is not taking action in October while also clarifying why December is still under consideration. Since taking office in May, Walsh has provided little forward guidance on the interest rate path. The press conference after the decision to hold rates steady in July caused market volatility due to overly brief wording, and subsequent hawkish remarks in August, along with the rate hike in September and signals of another hike this year, somewhat repaired communication. This week's decision is approaching the U.S. midterm elections on November 3, and Trump had previously criticized the rate hike in September.

Goldman Sachs' latest research shows that over the past three weeks, semiconductor stock exposure has been able to explain about 54% of the return performance differences between different asset classes, while oil price exposure accounts for only 2%. As the influence of AI trading continues to expand, technology stocks are becoming an important factor driving global market risk appetite and asset performance differentiation.Goldman Sachs pointed out that recent investor risk appetite has been highly synchronized with the relative performance of large technology stocks. Last week, concerns about AI investment returns, financing costs, and capital expenditures intensified, leading to a sell-off in technology stocks and corporate bonds, with Goldman Sachs' risk appetite indicator falling to its lowest level since April 2025. The South Korean stock market has become a typical case of this impact, with the KOSPI rising 3.1% on Tuesday, and SK Hynix and Samsung Electronics increasing by 5.2% and 4.2%, respectively.Due to the high weight of semiconductor stocks in the Korea Composite Stock Price Index, changes in global AI investment expectations directly affect local market performance. Goldman Sachs emphasized that the 54% and 2% figures reflect a statistical relationship within a specific time window and do not imply that AI factors long-term determine global market fluctuations; the impact of high oil prices on inflation, monetary policy, and asset pricing cannot be ignored. Major technology companies such as Microsoft, Google, and Amazon are about to announce their earnings reports, and the market will focus on whether AI demand can continue to grow and whether massive capital expenditures can be converted into actual profits.

According to The Block, BlackRock Financial Management, BlackRock Japan, and Japan's financial group SBI Holdings, along with Startale Group, have signed a memorandum of understanding to explore connecting tokenized money market funds with the yen stablecoin JPYSC, and to study the related technological infrastructure, business models, distribution channels, and regulatory requirements.The four companies stated that the collaboration aims to promote interoperability between tokenized assets and stablecoins, and to open up cooperation opportunities for financial institutions and businesses in Japan and internationally. The collaboration is still in the exploratory stage, and a specific implementation timeline has not yet been announced.BlackRock launched the tokenized fund BUIDL in 2024, managing approximately $2.17 billion in assets at the time of the report. SBI Holdings will launch JPYSC with Startale in June 2026, issued by SBI Shinsei Trust Bank, with SBI VC Trade responsible for distribution.

A researcher successfully cracked the "Steal My Bitcoin" challenge using a PHP vulnerability.The prize for the challenge was 0.02511679 BTC. However, the challenge operators later discovered that the server had saved the wrong wallet key, and ultimately had to manually transfer the prize to the researcher.