chain

The Bitcoin financial application Mezo announced that the cross-chain withdrawal deadline for swBTC and USDe is October 13, and the withdrawal for SolvBTC and xSolvBTC will continue until October 29. Currently, the recharge for the above four tokens has been suspended.Mezo is developed by the Thesis team, which has been deeply involved in the Bitcoin ecosystem for over 10 years and has launched products such as tBTC, Fold, and Taho. Mezo is positioned as a Bitcoin financial application, providing users with loans collateralized by Bitcoin, a yield vault supported by Upshift Finance, and a native stablecoin MUSD that is 100% backed by Bitcoin reserves.

Hardware wallet manufacturer Trezor stated that in light of recent supply chain security incidents, it has decided to reduce the number of distributors to more effectively review partners.Currently, there is no evidence that Trezor devices have been compromised. This adjustment is a precautionary measure taken out of caution.

According to The Defiant, trading firm DRW executed a total return swap with Marex on the Canton network through Derivnex, referencing the on-chain corporate bond benchmark from S&P Dow Jones Indices. S&P Dow Jones Indices announced this transaction with Kaiko on October 13.The swap was provided by Marex, with DRW as the counterparty, referencing the iBoxx USD Liquid Investment Grade Index, which tracks investment-grade corporate bonds that are dollar-denominated and have good liquidity. The swap provides both parties with exposure to the index without holding the underlying bonds. The transaction will synchronize events such as valuations during the contract's duration between both parties, and plans to migrate margin, collateral, and contract payments to the same infrastructure will be advanced in subsequent phases.Kaiko's tokens combine benchmark data with access permissions and usage rules, retaining the authorized control of S&P Dow Jones Indices, and distributing signed official index values for Derivnex to use for valuation. Derivnex expresses the transaction terms in the form of Canton smart contracts and introduces a universal domain model standard for derivatives trading. DRW founder and CEO Don Wilson stated that both parties can "work off the same record, thereby simplifying the process," and noted that once cash and collateral flows are integrated, more transactions are expected to achieve greater efficiency.

According to CoinDesk, asset management company Federated Hermes, with a management scale of 911 billion dollars, plans to launch its first batch of on-chain fund shares early next year, further participating in Wall Street's push to bring traditional assets on-chain.Federated Hermes has partnered with digital securities infrastructure company Prometheum to introduce blockchain-based fund shares into traditional brokerage accounts and financial advisor channels. The company has not yet disclosed the specific types of tokenized funds and the blockchain network used, but its head of digital asset products and platforms, Kevin Barr, stated that money market funds may become the first tokenized products.

According to monitoring by PeckShield, hackers minted 19 million THEO tokens on the Base chain, then exchanged them for 700.8 ETH (approximately 1.76 million USD), and transferred the ETH to the Ethereum mainnet via a cross-chain bridge.As a result of this incident, the THEO token has fallen by 92% in the past 24 hours.

According to official news, Payy announced the initiation of the compensation process for affected users regarding the cross-chain bridge contract theft incident on September 24, with a claim application window of 30 days. Compliant claims will be compensated in the form of USDC on the Ethereum network.At the same time, Payy Wallet is currently in a suspended state and will be completely shut down after the compensation window ends.

Surf AI will issue 6,666 NFTs on the Robinhood Chain, containing 130,000 combinations of artistic patterns, which can collect five stocks: NVDA, SPY, META, GOOGL, and SPCX once opened. The project claims it is not financing through NFT sales; rarity is divided into Pro-1, Pro-2, Pro-3, Max, and Ultra, with quantities of 3,500, 1,800, 860, 500, and 6 respectively.Users can reveal them through an annual subscription ticket or by purchasing SURFBOARD tokens. Those who purchase an annual membership before September 16, 2026, can receive a Pro or Max NFT ticket, and renewing for the second year beforehand will grant two tickets. Once opened, the Surfboard begins to collect stocks and is irreversible, with higher levels corresponding to more stocks. Revealed Surfboards can be traded on OpenSea, with accumulated stocks belonging to the new holder; SURFBOARD tokens that have not been converted to NFTs can still be traded as usual. Upon redemption, the Surfboard is destroyed, and the user receives 95% of the accumulated stocks, with the remaining 5% distributed to all opened Surfboards.

Hedera, a public blockchain, has launched Agent Accounts, described as programmable, non-custodial spending accounts that allow AI agents to autonomously transact within rules set by users and enforced on-chain. This includes payment APIs, data retrieval, invoice settlement, and purchasing on behalf of users, with private keys remaining in the user's wallet.Agent Accounts are funded from the user's existing Hedera wallet and are created separately for designated agents, rather than handing over the entire account to the agent. Users connect their wallets through a web application, designate agents, and configure total spending limits, daily caps, single transaction limits, and whitelists for merchants and payees. The rules are written into Hedera smart contracts and are not stored on company servers, making them unmodifiable by anyone other than the user. Funds do not leave the user's account before a purchase occurs; agents do not hold balances but send spending requests to the smart contract, which validates and executes them. Users can pause or revoke agent spending with a single click from their wallet.This feature is supported by Agentic Payment Services, including MCP server, REST API, and relayer. Hedera states that any agent capable of using MCP or REST can connect, with payments available in HBAR, USDC, or other Hedera tokens, and compatible with x402. Each strategy, transaction, and agent action is recorded on the Hedera Consensus Service. The timeline aims for a limited partner testnet launch in Q4 2026, a public testnet in Q1 2027, and a target mainnet launch in Q2 2027, depending on security audits and legal agreements.

Web3 security platform Blockaid co-founder Ido Ben-Natan posted on the X platform that since the release of the first half report in August, the number of on-chain cybersecurity incidents has continued to reach historical highs month by month. Attackers, motivated by profit, find that attacking on-chain infrastructure offers the highest return for hackers, and this trend will become even more severe as the funds callable by AI agents increase.According to Fortune, Ben-Natan stated that the company is currently in its "busiest ever" state, one reason being the significant increase in hacker attacks. Additionally, Nansen CEO Alex Svanevik predicted that by 2028, trading cryptocurrency assets through AI agents rather than manual interface clicks will become the norm.

According to GMGN market data, the market capitalization of the meme coin BONER on the Robinhood Chain has dropped over 37% in 24 hours, currently reported at 26.2 million USD.According to on-chain transaction data, trader Him (@himgajria) sold approximately 286,700 USD worth of BONER today and currently still holds about 10.147 million BONER. The price of meme coins is highly volatile, please be aware of trading risks.

The Internet of Things public chain IoTeX announced the launch of IOTX supply integration and the IOTX Redemption Portal. Users can exchange the ERC-20 IOTX issued on Ethereum in 2018 at a 1:1 ratio with zero fees for the native IOTX on the IoTeX mainnet. After completing the connection, sending, and signing, the native tokens will be sent to the same address.IoTeX stated that IOTX was issued in 2018 in the form of Ethereum ERC-20. A year later, the IoTeX mainnet went live, and the native IOTX is used to pay for Gas, secure network safety through staking, and complete settlements on IoTeX L1. Since the 2018 contract is still in circulation, IOTX has coexisted in two forms for a long time, and this integration aims to unify the supply.IoTeX also mentioned that the European fintech company Revolut has supported native IOTX, with over 70 million global customers; the licensed exchange in Thailand, Bitkub, has also supported it. Both have joined platforms that already support native IOTX, such as Binance, Upbit, Bithumb, and Kraken.

Cryptocurrency community user Johannes posted that he found suspected spyware and hardware modifications, including additional cables and LTE modules, in two Ledger hardware wallets purchased at different stores of the European retailer MediaMarkt, and called for Ledger to immediately recall the related products.Johannes stated that MediaMarkt employees confirmed that the second device was not a returned item, as returned Ledger products would be sent directly back to the manufacturer rather than resold as new. Store records show that the relevant inventory came from the supplier Aqipa GmbH. Since the company operates distribution in Europe, Johannes suspects that the issue may involve a broader retail inventory, but there is currently no evidence to confirm that Ledger's supply chain has been widely compromised in Europe.Johannes mentioned that he has handed over the first device for analysis and plans to send the second device to Ledger for investigation, while also releasing an unboxing video as evidence. He reminded users that if they purchase devices from merchants outside of Ledger's official channels, they should check for any abnormalities in the devices. Currently, the above claims mainly come from this user's personal disclosure, and the reasons for the device damage, the scope of impact, and whether it involves a supply chain attack still need to be verified by Ledger and other relevant parties.

The blockchain data platform Arkham stated on platform X that it has tagged the wallet addresses of Justin Sun across 10 blockchains, with on-chain assets totaling approximately $2.25 billion.Arkham added that in a ranking released in September, the platform's research team listed Justin Sun as the individual holder with on-chain holdings second only to Bitcoin founder Satoshi Nakamoto.

According to monitoring by Token Terminal, since the launch of Robinhood Chain on July 1, the weekly trading volume of tokenized stock decentralized exchanges (DEX) has increased by 447%, rising from an average of $627 million per week to $3.4 billion.

The cross-chain exchange protocol THORChain officially announced that its native token RUNE has been 100% unlocked. The official statement indicated that the supply of RUNE has been continuously decreasing, starting with 1 billion tokens, which later dropped to 500 million. In May, based on ADR-023, 64.4 million RUNE were destroyed from reserves, further reducing the supply to 360 million.The official also introduced the system's revenue distribution. Nodes must bind RUNE to ensure the security of THORChain and receive 59% of the system's revenue, which comes from the fees paid by users during cross-chain exchanges. An additional 20% flows into the protocol's own liquidity, and every 3 days, the protocol deposits RUNE into the liquidity pool with the highest relative depth of fees, half of which is retained in the form of RUNE and held by THORChain.

According to X user @0xJohannes, a Ledger hardware wallet purchased from an official dealer in Europe a few weeks ago was found to contain an unauthorized spy implant. The device has suspicious circuitry inside that genuine Ledger hardware does not possess, indicating it may have been physically tampered with before sale.The implant is suspected to be an older version, as newer versions typically hide components behind the screen. Funds in the affected devices have not yet been stolen. Currently, there are suspected case reports in Asia, South America, and Europe. If the original security components remain intact, Ledger's software Genuine Check cannot detect unauthorized physical modifications.

Cryptocurrency analyst Darkfost stated that after the security incident involving Ledger dealer CryptoBilis, discussions in the community have also brought up other potentially related dealer names, including some Lazada merchants.Darkfost indicated that the full extent of the incident's impact is still difficult to confirm. Although Ledger has confirmed a connection to the CryptoBilis incident, it is still unclear whether CryptoBilis is the only affected dealer. He compiled a list of Ledger dealers that may be at risk, stating that these dealers are in close proximity and could potentially have their supply chains compromised simultaneously. However, Darkfost emphasized that this assessment is merely speculative and has not yet been confirmed.Darkfost suggested that if users have purchased Ledger devices from the relevant dealers in the past six months, they may consider transferring their assets to other secure devices until the investigation into the incident is complete. Additionally, he mentioned that users can refer to the guidelines published by security researcher MagicalTux to check their Ledger devices for any signs of tampering.

According to Xinhua News Agency, on October 10, the Central Committee of the Communist Party of China and the State Council recently issued opinions on developing new quality productivity. The opinions propose promoting the deep integration of the real economy and the digital economy, building a national integrated computing power network and a national blockchain network, improving the system for determining data property rights, market transactions, rights distribution, and interest protection, implementing pilot demonstrations for data elements, and optimizing the layout and operation of national data infrastructure.The opinions also propose improving an open, shared, and secure data element market, exploring mechanisms for efficient cross-border data flow, enhancing the policy system for digital industrialization and industrial digitalization, creating internationally competitive digital industry clusters, and establishing mechanisms for future industry investment growth and risk sharing, thereby strengthening long-term capital investment in cutting-edge hard technology.

The blockchain security platform Phalcon stated that approximately 6 hours ago, around 3.55 million dollars of unclaimed cross-chain funds were claimed and transferred. Phalcon raised the question: Was the related transaction initiated by the fund owner, or did the attacker obtain valid EIP-7702 authorization?On-chain information shows that the claim was submitted by address 0x24a9, with funds coming from Tornado Cash and executed through EIP-7702 delegation on an external account. The two transaction amounts were 1.33 million dollars and 2.22 million dollars, with on-chain data confirming the validity of the related authorization.A few days ago, on-chain researcher stuckfunds.eth repeatedly sent messages to address 0x4943, informing the owner that the related funds were still claimable. Currently, on-chain data cannot confirm whether the owner intentionally signed, was induced to sign, or if the private key has been leaked.