xpl

According to token unlocking data from the crypto asset data platform RootData, Plasma (XPL) will unlock approximately 29.722 million tokens at 12:00 PM Beijing time on September 28, worth about 28.47 million USD.

Binance Wallet Security Announcement: iPhone users please check if you have installed the FomoPeek application. Binance has noted a recent security incident disclosed by the community. According to security companies such as SlowMist, the third-party application FomoPeek (versions 1.1-1.2) contains malicious code that can exploit vulnerabilities in the iOS system to gain maximum permissions on the device and may access sensitive data stored on the device, including private keys, mnemonic phrases, login credentials, chat records, files, etc. Please note that such malware directly attacks the device itself. If the attack is successful, all application data on the affected device may be accessed.Please check the following:Are you using an iPhone or iPad running iOS 26.x or earlier?Have you installed the FomoPeek application?If both of the above apply to you, it is recommended to take the following steps immediately:Delete the FomoPeek application and do not reinstall it.Update the iOS system to the latest version.For users with self-hosted wallets: Create a new wallet on a device that has never installed the application and transfer assets to the new wallet address.If you notice any unusual asset activity, please retain the affected device and relevant evidence, and contact customer service for further investigation.At the same time, all users are reminded: Do not install applications from untrusted sources and keep your device software up to date.

Radix Foundation released an incident report stating that attackers exploited a previously undiscovered vulnerability in Radix Engine to extract assets from a third-party vault without the owner's authorization, and then sold them across chains to networks such as Ethereum, BNB Chain, and Solana via Hyperlane.The vulnerability originated from a code compilation in June 2023, and an independent security audit conducted by Zellic in August 2024 also did not identify the issue. About 3 hours after the incident occurred, Radix validators proactively took offline enough staked shares to prevent the network from reaching consensus, thereby stopping further exploitation of the vulnerability; affected assets included ETH, WBTC, USDT, USDC, BNB, and SOL.Radix stated that the vulnerability has been fixed and has undergone independent review and testing, and the network recovery is currently being advanced.

Liquid Capital founder Jack Yi posted on the X platform, stating that once again, in line with expectations, after the Federal Reserve's interest rate hike, Bitcoin briefly dropped below $76,000 but continued to rise after fluctuations. He repeatedly reminded that during a bull market trend, one should not short, and various factors will influence the process; one must not easily exit until the end of the bull market.Next, in line with the bull market, asset explosions, especially trading infrastructure and on-chain finance, are essential. During this cycle, try not to chase narrative projects and follower projects.

The Federal Reserve raised interest rates as expected in September, after keeping rates unchanged at the July meeting. Federal Reserve Chairman Waller stated that three things have changed between the two meetings.He said that data released in recent weeks indicates that the U.S. economy is performing strongly, especially in the labor market. At the same time, inflation rates remained high throughout the summer, significantly above the Federal Reserve's target of 2% year-on-year inflation.Finally, he noted that geopolitical factors also prompted the Federal Reserve to change its assessment of the economic outlook, although he did not directly mention the U.S.-Iran conflict in the Middle East. Waller stated, "These three factors contributed to our firm and consistent decision today."

Etherscan announced the launch of the Arc blockchain explorer ArcScan, where users can query data such as transactions, addresses, and blocks on the Arc chain.ArcScan also provides API support, and the Arc network chain ID is 5042.

According to SlowMist monitoring, a Brazilian banking malware operation, active since at least May 2025, known as REF9334, has recently been disclosed. Its KREMLIN malware ecosystem uses a multi-stage loader and malicious browser extensions to steal credentials, session tokens, and sensitive data. The malicious extensions can be installed into Chrome and Edge without user approval by bypassing the Chromium integrity mechanisms, including Secure Preferences, HMAC, and App-Bound encrypted hashes.The operation also uses Ethereum smart contracts as "dead letter parsers" to dynamically update C2 endpoints and payload hosting locations. After registering the network Canary domain name, analysts observed 1,515 infected hosts checking in, with 98.75% located in Brazil. SlowMist recommends that security teams monitor related malware, browser extension activities, and infrastructure associated with this operation.

According to the Financial Times, the UK's Financial Conduct Authority (FCA) is working with the Treasury and the Bank of England to establish a dedicated regulatory framework for tokenized gold or more broadly tokenized commodities, and is assessing exemptions for certain tokenized gold products or market infrastructure from the scope of Collective Investment Schemes (CIS) and Alternative Investment Funds (AIF) regulations. Specific plans have not yet been determined.

Liquid Compute CEO Ronit Jain published an article introducing the hedging of computing power prices. Purchasing computing power, holding GPUs, or lending based on this has exposed them to computing power price fluctuations. Hedging is a cash-settled contract that locks in future prices against an index without the need to transfer GPUs.Companies can buy forwards to fix the cost of next year's capacity as a budget item while still being able to purchase from any supplier. Neocloud can sell forwards to convert uncontracted hours into fixed cash flow, making it easier for lenders to provide loans based on this. Regarding the residual value of sale-leaseback, recent forwards can be rolled over when entering a tradable range, or put options can be bought on forwards, with more liquid near-term options available to pay for the option premium.Hedging locks in prices rather than quantities, and does not completely match actual rates, nor is it free: it requires giving up favorable price movements or paying option premiums. Legally, it usually requires signing an ISDA Master Agreement with the counterparty, obtaining permission for the settlement index, and determining the ratio of hedging exposure.

The founder of Liebit Mining Pool (B.TOP), Jiang Zhuoer, stated that since the significant rise of BTC on August 20, the market has not shown any obvious correction. We are still in the early stages of a bull market filled with distrust and skepticism, and many investors have a deep fear of a crash.The concentrated liquidation area near $76,000 below is larger than the area near $83,000 above. He believes that the market is more likely to reach the lower liquidation zone, and this "magnetic effect" is the main reason he sold all BTC positions at $82,000 the day before yesterday.

According to Decrypt, Google has fixed a high-severity vulnerability CVE-2026-85046 in the Chrome browser that was exploited by hackers. This vulnerability exists in the V8 engine, which is used to run JavaScript and WebAssembly.Google confirmed that the vulnerability has been exploited in the wild but did not disclose the identity of the attackers, the targets, or the specific method of exploitation. The patch has been included in Chrome versions 152.7977.82/83 and will be pushed out in the coming days or weeks.The vulnerability was reported by security researcher Salvatore Gulizia on August 4, and Google awarded him a $1,000 bug bounty. This update includes a total of 12 security fixes, of which 9 are high-severity and 2 are medium-severity. Google has not yet linked this vulnerability to cryptocurrency asset theft incidents, but browser wallets, exchange accounts, and trading extensions have previously been targeted in other ways.

Fidelity Digital Assets released the Q4 Crypto Market Outlook, noting that at the end of August, Bitcoin and the crypto market surged significantly, with major tokens like BTC and ETH recording their largest monthly gains since the end of 2025. Some investors are focusing on whether a bear market bottom will form in November (based on the 4-year cycle theory), but Fidelity warns that this pattern may not repeat— the bottom may have already occurred in July, or it could reach new lows in November or later.Fidelity pointed out that historically, the end of a bear market is usually accompanied by a low volatility period followed by price expansion. At the end of August, BTC rose over 25% in a single week, while ETH and SOL increased by 34.1% and 28%, respectively. Recent security incidents involving hardware wallets and the stagnation of the CLARITY Act have not suppressed prices, which may further reinforce the judgment that crypto assets are nearing a bottom. The trading volume of stablecoins has reached 2.3 times that of Visa, and the RWA market is expected to grow faster in 2026 than in previous years, with on-chain adoption continuing to increase. The CLARITY Act is still under review in the Senate, and the SEC proposed the Regulation Crypto Assets last week. Fidelity advises investors to maintain a long-term perspective.

OpenAI stated that its upcoming Astra model can autonomously discover previously unknown software vulnerabilities and convert them into usable attack vectors without human intervention, making it the company's first model to reach the "Critical" cybersecurity capability level threshold. In a blog post released on Tuesday, OpenAI mentioned that according to its Preparedness Framework, reaching this level means the model can discover zero-day vulnerabilities and develop usable exploit code in hardened real systems without human involvement, or design and execute attacks based solely on a high-level objective.In testing, Astra achieved a 100% score in benchmark tests for developing exploit code based on known vulnerabilities and discovered two previously unknown vulnerabilities in another internal test. Additionally, the model successfully broke through a hardened browser sandbox and executed commands on the host machine, while gaining root access by exploiting multiple weaknesses in the operating system. OpenAI stated that it has delayed some of Astra's development progress to enhance security measures and plans to make its advanced cybersecurity capabilities available only to selected testers.This capability is particularly relevant to the cryptocurrency industry, as software vulnerabilities can be converted into financial losses within minutes. CoinDesk reported in June that increasingly powerful AI models can compress the process of searching code, discovering misconfigurations, and assembling attacks from days or weeks to machine speed. Security researchers noted at the time that the significant change was not the emergence of new categories of attacks, but rather the dramatically increased speed at which existing vulnerabilities are discovered and exploited.

Cronos Network officially announced that the network has resumed block production and is fully operational again. Previously, Cronos paused block production due to a vulnerability exploitation incident involving the Tectonic protocol, and validators took emergency consensus measures to protect user funds, rolling back the chain state to before the Tectonic vulnerability exploitation on August 30.The network has resumed block production at UTC time August 30, 23:49:01 from block height 90,896,189. Cronos stated that node operators can now restart their nodes using Cronos v1.7.8 and the latest mainnet snapshot.The network is currently under continuous monitoring, and some protocols, RPC service providers, block explorers, and cross-chain bridges are expected to take longer to recover. Cronos stated that the team will release a complete event review report after confirming network stability.