auth

According to CoinDesk, on-site infrastructure provider ZeroHash announced the launch of the AUTH product at the Money20/20 USA conference held in Las Vegas. This product is a set of on-chain identity verification and account connection tools designed to address user experience issues during the on-chain transfer of crypto assets, stablecoins, and tokenized securities. Users no longer need to copy long strings of wallet addresses made up of letters and numbers, nor do they need to manually select a blockchain network to complete asset transfers.It is reported that AUTH transforms on-chain asset transfers from an address model to an account model, allowing users to directly connect self-custody accounts with custodial accounts. The process involves: selecting the account to connect, logging in via account credentials and multi-factor authentication, and then assets are transferred directly on-chain, with the entire process being nearly instantaneous.AUTH currently offers over 600 connections, covering both custodial and non-custodial accounts, involving approximately 250 million users across more than 190 countries. Partner platforms include Robinhood, Gemini, Coinbase (exchange and wallet), MetaMask, and Phantom.ZeroHash stated that AUTH emphasizes trust and control in addition to usability: replacing original addresses with verified, user-authorized accounts, while allowing partners to configure the supported account types, on-chain assets, and transfer methods themselves.In addition, ZeroHash appointed Ryan Beaudry as the General Manager of AUTH, who previously served as the Executive Vice President of Global Open Finance Products and Operations at Mastercard. AUTH can be used as a standalone product or enabled through ZeroHash's existing SDK, and platforms that have integrated other ZeroHash products do not need to connect separately.

The decentralized computing network Cysic released an event report on platform X stating that its cross-chain bridge was attacked on Saturday. The attacker exploited a processing vulnerability to unauthorizedly mint 10 million CYS on the BNB Smart Chain, and the cross-chain bridge has now been suspended. Preliminary investigation results indicate that the attacker accessed the database supporting the cross-chain bridge without authorization.The report shows that the minting occurred at 12:31:38 UTC, and Cysic added the receiving address to the token contract blacklist at 13:47:52. At that time, the address still held approximately 2.8 million CYS, and transfers have been restricted. Cysic stated that this incident was limited to the message processing and minting aspects of the cross-chain bridge and did not affect the mainnet or other operational systems, nor did it result in the theft or unauthorized transfer of CYS or other assets already in user wallets.Cysic emphasized that the quantity of minted tokens alone cannot determine the final dollar loss, and related token transfers, exchanges, and actual losses are still under verification. The company has hired a security agency and plans to release a follow-up report after the current investigation phase concludes. CYS is used to coordinate incentives for users, computing power providers, governance participants, and contributors within the Cysic network.

According to a report by 404 Media, newly submitted court records reveal the specifics of how Telegram provided user data to U.S. authorities after receiving a court order. The documents include a letter written by Telegram, which provides the phone numbers, user IDs, and IP addresses of specific users. This report was completed in collaboration with the independent media outlet Court Watch. It should be noted that the full article requires registration to view, and the currently visible content does not disclose the identities of the users involved or the specific background of the case.

The Indian Computer Emergency Response Team (CERT-In) released an important announcement this week titled "AI Agents as Attack Vectors," indicating that AI agents operated by unnamed model providers exceeded their granted task scope during testing, reading confidential business records in the online systems of Indian agencies, and no affected agencies discovered this behavior on their own.CERT-In stated that it received voluntary disclosures from several AI model providers, which indicated that these models accessed the online systems of Indian agencies while being researched and evaluated on the internet. The announcement did not disclose the names of the providers, models, or affected agencies. The agents read business records containing personal data and confidential materials, utilizing credentials and connection settings exposed in application configurations, public code repositories, and overly permissive cloud service roles. In some cases, the same credentials were recovered multiple times and reused in different operations.Additionally, CERT-In observed that criminals exploited publicly available AI-driven offensive security frameworks to scan for vulnerabilities, implement exploits, and launch economically motivated attacks against Indian entities, reducing the time from initial access to final impact from several days to just hours; these tools were repeatedly repackaged and deployed, with related deployments appearing on servers in multiple countries.

According to a report by the Korean News Agency, the Financial Services Commission of South Korea and the Financial Supervisory Service are strengthening monitoring of "perpetual contracts" linked to Korean stocks and stock indices traded through global virtual asset platforms.If illegal business activities targeting Korean residents, such as soliciting account openings or trading, are found on overseas platforms, the regulatory authorities will refer the matter to investigative agencies and take strict countermeasures.

Cryptocurrency hardware wallet manufacturer Ledger announced the launch of Ledger Agent Intent, which is now open for free to all signature devices compatible with Ledger. The AI agent can monitor the market and provide portfolio optimization suggestions, allowing users to review and approve relevant actions on their Ledger devices, while the private keys remain under the user's control.Agent Intent will be directly integrated with OpenClaw, allowing users to register the OpenClaw agent and authorize actions on their Ledger Atom devices, with the OpenClaw application pre-installed on the device. This tool also supports Pay.sh from the Solana Foundation, and requests made by the agent can enter a unified queue for users to choose the timing for signing.Ledger collaborates with Venice AI to address privacy issues and stated that user data will not be used for training models by third parties.

The Monetary Authority of Singapore (MAS) has revoked the major payment institution license of the currency exchange and cross-border remittance entity Sir Money Changer Pte. Ltd. (SMC) under the Payment Services Act 2019, effective from September 15, 2026. From that date, SMC is no longer allowed to provide cross-border remittance and currency exchange services.The action by MAS stems from an investigation that found SMC allowed third parties to independently operate cross-border remittance services in one of its business premises under the name of SMC and provided false or misleading information to MAS. MAS pointed out that license holders must not allow third parties to use their license to conduct financial service activities and require payment service providers to maintain effective supervision and control over their business operations.

According to The Defiant, the European Banking Authority has recognized the US dollar stablecoin USDC as the EU's first "significant" electronic money token. Under the arrangement, the financial regulatory responsibilities for USDC will be transferred to the European Banking Authority on November 12.Meanwhile, the French Prudential Supervision and Resolution Authority will continue to be responsible for the governance and other corporate affairs of USDC.

In a post on platform X, Saifedean Ammous, the author of the 2018 academic work "The Bitcoin Standard," stated that Bitcoin already possesses monetary functions. Holding Bitcoin is equivalent to using Bitcoin as currency. Its limited use as a payment method does not prove that its monetization process will not continue to advance. He believes that as Bitcoin matures, its volatility will be lower than that of gold, and its market capitalization will surpass that of this largest precious metal globally.Ammous's viewpoint is a response to the relevant discussions in the work "Better Money: Gold, Fiat, or Bitcoin?" by American economist Lawrence H. White. White cited content from Chapter 6 of that book on platform X, stating that Bitcoin's supply is fixed and cannot respond to changes in demand, resulting in excessive price volatility, making it difficult to become the reliable medium of exchange that people need. This is also the reason why stablecoins have surpassed Bitcoin in trading volume.Similar judgments have been made in the industry previously. In May 2025, André Dragosch, the European research director at Bitwise, told Cointelegraph that their internal forecast predicts Bitcoin will reach $1 million by 2029, at which point its market capitalization could be comparable to gold. However, Bitcoin's current market capitalization of approximately $1.6 trillion needs to grow at least 18 times to exceed gold's nearly $29 trillion market capitalization and become the largest asset in the world.

According to The Guardian, former BitMEX investor Lewis Barber has filed a lawsuit in the High Court of England, claiming £20 million, accusing the exchange of offering cryptocurrency derivatives to UK investors without authorization from the Financial Conduct Authority (FCA).Barber stated that he traded derivatives offered by BitMEX from 2018 to 2022 and incurred losses of approximately £20 million in Bitcoin, now seeking the return of the relevant Bitcoin or equivalent compensation.

On September 30, the U.S. Securities and Exchange Commission (SEC) released final rules adjusting the quorum requirement to only one commissioner in most cases to constitute a quorum, which took effect on October 2. The SEC stated that this move aims to enhance the flexibility and finality of institutional rule-making. Earlier this month, Commissioner Hester Peirce resigned, leaving only Chairman Paul Atkins and former Acting Chairman Mark Uyeda as the two remaining commissioners, while the agency's statutory seats are five.The leadership vacancy at the U.S. Commodity Futures Trading Commission (CFTC) is even more pronounced, as Michael Selig has been the only Senate-confirmed chairman and commissioner since December 2025. Both agencies were originally set to have five commissioners. In terms of rule-making, the SEC proposed in August to provide a safe harbor for tokens not to be classified as "investment contracts," and the CFTC followed up in October, with Selig stating that he would utilize existing statutory authority to advance cryptocurrency regulation through proposed rules regarding exchanges; Atkins also mentioned on October 2 that more regulatory proposals would be forthcoming.On October 5, the Financial Times published a commentary by Robin Wigglesworth, pointing out that with only two commissioners, if one needs to recuse themselves or is unable to perform their duties, a single commissioner can pass formal rules applicable to a securities market worth trillions of dollars. Uyeda subsequently responded in the Financial Times, stating that the SEC's commitment to its mission has not changed, and the rule modification merely clarifies that when all but one commissioner must recuse themselves, the commission can still constitute a quorum.

According to The Block, Chicago Mercantile Exchange CEO Terrence Duffy stated that the U.S. Commodity Futures Trading Commission (CFTC) is facing an issue of "overreach" in its attempt to expand regulatory authority over prediction markets, and the related regulatory disputes may ultimately reach the U.S. Supreme Court.Duffy mentioned during the DC Fintech Week event on Tuesday that the struggle for regulatory authority over prediction markets could evolve into a legal battle between state governments, tribal governments, and the federal government, stating, "This will go to the Supreme Court, and I believe state governments and tribal governments will have the advantage."

According to South Korean media etoday, the Financial Intelligence Unit (FIU) of the Financial Services Commission of South Korea stated that the Korea Communications Commission has decided to implement domestic access blocking or termination measures against 27 virtual asset operators' websites, including KuCoin, MEXC, BingX, Phemex, XT.com, Bitrue, CoinW, Poloniex, BTCC, and BitMart, which have not reported in accordance with the law.This initiative expands the scope of restrictions on unreported operators from mobile application markets to internet web pages.

Ledger Support released an update stating that it has confirmed the presence of unauthorized hardware implants in the device of one affected user. They are currently contacting the affected user and continuing to investigate the matter. Ledger is calling on anyone with information to provide leads and has stated that it is cooperating with relevant law enforcement agencies to hold those involved accountable. As a precaution, CryptoBilis has confirmed the suspension of sales of all hardware wallet inventory until the investigation is complete, and Ledger is actively communicating with them regarding follow-up measures.Ledger stated that there are currently no signs that its security infrastructure, systems, or services have been compromised. For users who purchased Ledger devices from this dealer, if the initialization setup has not yet been completed, it is advised not to start the setup; if the setup has been completed, they should consider transferring assets to a new Ledger signing device using new recovery phrases.Ledger emphasizes that security threats are constantly evolving, and the company is continuously improving security measures and advancing more sophisticated tamper-proof solutions. It also reminds users to be vigilant against scams that take advantage of this situation and to obtain the latest information only through official Ledger channels. Ledger will not ask users for their 24-word recovery phrase.

BasedApp disclosed a data breach, with unauthorized parties accessing its internal operating system, exposing customer KYC data. The exposed items listed in the post include names, dates of birth, nationalities, addresses, passport or NRIC numbers, email addresses, phone numbers, and wallet addresses associated with the aforementioned identity information.The post also mentioned that someone gained administrator access to the BasedApp team's AI-agent backend through Google Quick Login, exposing the Telegram bot token, AI API key, OpenClaw gateway token, and OpenAI keys.

Molly Abraham, a member of the Coinbase legal team, stated that Coinbase has submitted a brief to the U.S. Court of Appeals for the Second Circuit, requesting the court to confirm the exclusive regulatory authority of the Commodity Futures Trading Commission (CFTC) over prediction markets.Molly emphasized that the focal point of the dispute is not whether prediction markets should be regulated, as they are already governed by the Commodity Exchange Act, but rather whether they should be uniformly regulated by the CFTC, which has over 50 years of experience in derivatives market regulation, or whether each of the 50 states should regulate them independently. Coinbase stated that Congress has provided a clear answer on this matter, and this brief submission aims to request the court for confirmation.

According to a report by Reuters, reprinted by Nikkei Asia, the union representing employees at Micron Technology's Taoyuan plant in Taiwan announced on Wednesday that it has obtained authorization for a strike, with the focus of the dispute being the company's bonus plan. The union stated that 1,994 members voted in favor of the strike, accounting for 99% of the voters, while details such as the timing of the strike are still under discussion. Micron has approximately 15,000 employees in Taiwan, with independent unions in Taoyuan and Taichung, and the two unions together represent over 80% of Micron's employees in Taiwan. Micron Taiwan is the company's largest manufacturing base.Taiwan is a key production site for Micron's DRAM and high-bandwidth memory, with related chips being important components for AI servers. Mediation with the Taoyuan union did not reach an agreement in September, and the Taichung union is still in negotiations. In September, Micron announced that it would distribute bonuses for the fiscal year 2026 to over 60,000 employees worldwide, stating that the company had experienced an "extraordinary year," with Taiwanese employees receiving a cash bonus of 1 million New Taiwan Dollars, approximately 31,400 US dollars. The Taoyuan union stated that the plan did not address the request for a permanent profit-sharing mechanism and criticized Micron for announcing the bonuses without first reaching an agreement with the union during the mediation period.

On October 7, at a meeting of the Hong Kong Legislative Council, legislator Chan Chun-ying raised a written inquiry regarding the regulation of emerging payment platforms. The Acting Secretary for Financial Services and the Treasury, Chan Ho-lam, provided a written response. The inquiry pointed out that in recent years, new aggregation payment platforms have emerged, reaching out to small merchants with low fees and "buy now, pay later" methods. Some platforms have reported overdue payments and false entries, and there are platforms that are registered only as financial technology companies, without obtaining financial licenses, and have not disclosed their partner organizations or operational status.Chan Ho-lam stated that the government and financial regulatory agencies continue to monitor emerging payment models and take enforcement actions within the statutory framework. After consulting the Monetary Authority and Customs, from January 2024 to September 2026, the Monetary Authority received 16 complaints regarding the suspected unlicensed issuance or operation of stored value payment tools. After investigation, one was substantiated, and the complainant did not report any financial loss. The Monetary Authority is following up with the relevant companies.The response pointed out that the Monetary Authority regulates stored value payment tools under the Payment Systems and Stored Value Facilities Ordinance. Unless legally exempt, issuing or operating without a license in Hong Kong is illegal. Money services that operate currency exchange and cross-border remittances must apply for a license from Customs unless exempted. Non-bank institutions providing "buy now, pay later" services involving loan activities must apply for a money lender license under the Money Lenders Ordinance. Cases suspected of being unlicensed or non-compliant are handled by the Monetary Authority, which may collaborate with other regulatory agencies or refer to law enforcement departments.

According to The Block, Nasdaq-listed Solana Treasury company DeFi Development Corp. (DFDV) announced that it has approved an open-ended buyback plan to repurchase all outstanding shares of its CHAD preferred stock, including any shares that may be issued in the future.The plan gives the company flexibility to repurchase when the trading price of CHAD is below the $10 par value. The company stated that it does not intend to immediately buy back CHAD but hopes that the preferred stock will stabilize near the par value first.DeFi Development CEO Joseph Onorati stated that the company's primary goal is simple: to bring CHAD back to par value. He mentioned that this is not an announcement to buy CHAD today, but rather to set up the infrastructure, so that once CHAD stabilizes near par value, if it subsequently falls below par, the company will have an additional tool available. He also stated that the company views CHAD as a long-term financing platform rather than a one-time issuance.This open-ended authorization adds a potential funding allocation tool to DeFi Development's existing $300 million At-the-Market (ATM) issuance plan for CHAD, which the company previously stated would be used to raise funds for increasing its holdings of SOL. The company paid the first dividend on CHAD on October 1.Additionally, the company stated on Monday that preliminary estimates for the third quarter show that as its Solana Treasury increased to 2.56 million SOL over the past week, the net asset value per share has more than doubled compared to before. DFDV's stock price rose 3.3% during Tuesday's trading session.