cross-chain

According to Decrypt, Chainlink and Moody's Ratings have completed a pilot project demonstrating how to simultaneously distribute credit ratings across multiple blockchains. The test was announced on Tuesday, using Chainlink's cross-chain interoperability protocol CCIP to distribute Moody's ratings to both permissioned and permissionless chain networks.The pilot operates through Moody's Ratings Token Integration Engine TIE, which was built by the 125-year-old rating agency to disseminate credit assessments and related data in a blockchain environment. Both parties stated that the pilot proves that ratings can be transmitted across chains through a single interoperability layer while retaining Moody's existing publishing and governance processes. Moody's has rated or assessed over 70 digital issuances, including digital bonds and tokenized funds, from January 2017 to October 2026.Johann Eid, Chief Business Officer of Chainlink Labs, stated that as more financial assets go on-chain, credit intelligence must flow cross-chain and accompany every rating change. Fabian Astic, Global Head of Digital Economy at Moody's, believes that the future of tokenized finance is unlikely to exist solely on a single blockchain, platform, or market infrastructure.This pilot runs entirely on a testnet using representative test data and has not published any actual rating actions on-chain; it is a proof of concept rather than a live product. Previously, Moody's launched TIE on the institutional-grade Canton Network and subsequently expanded to Solana.

An address withdrew approximately 220 ETH from Tornado Cash, exchanged it for USDT, and then cross-chained it to TRON, with the latest transfer being 450,000 USDT.

Cosmos Labs has donated the cross-chain communication protocol IBC to the decentralized trust project under the Linux Foundation (Linux Foundation Decentralized Trust).The initial technical committee established after the transfer of IBC consists of seven members, with Cosmos Labs occupying five seats, and the remaining maintainers coming from Datachain and OpenZeppelin.

Slow Fog Analysis stated that the attacker used the same Optimism transaction to construct five forged receipts, and the unauthorized signed source is still under investigation.

According to monitoring by Blockaid, the Ethereum cross-chain bridge of the node and staking infrastructure service provider Ankr is currently under attack, with losses amounting to approximately $292,000, and the attack is still ongoing.The attacker initiated five withdrawal calls to the cross-chain bridge on Ethereum and used a small deposit on Optimism to unlock all assets locked in the cross-chain bridge and transfer them to a newly created address.

The Threshold tBTC cross-chain bridge has resumed on-chain operations, but the application still suspends new deposits, minting, and Bitcoin redemptions, and the Aave-related reserves remain frozen.

According to market news, the relevant address received at least approximately 6.01 million dollars in cross-chain transfers, and the losses from the Keplr incident have not yet been verified.

Cross-chain trading application fomo announced the appointment of Kyle, the creator of the social trading network Clicker, as the head of cooperation, focusing on promoting public chain collaboration and team tags-related business, helping to enhance activity, and enabling project teams to directly reach token holders.Kyle had previously angel invested in fomo, with his public account ranking in the top 20 of fomo's historical trading leaderboard.

According to the security agency Blockaid, the Ethereum execution client Reth and its derivative client op-reth have a state root calculation error that affects several EVM blockchains, including multiple OP Stack chains. Unfixed nodes may experience synchronization stalls or return incorrect state proofs (eth_getProof). This issue is classified as a client correctness defect and is not a known attack event; no financial losses have been detected so far.Reth merged the fix code on November 3, with the fixed versions including reth v2.10.0, op-reth v2.8.1, and Base node-reth v1.5.3. As a precaution, the cross-chain interoperability protocol LayerZero has suspended the off-chain infrastructure of some affected chains, resulting in delays for related cross-chain messages, but no messages will be lost; some protocols have also suspended deposits or cross-chain routing. Blockaid recommends that relevant node operators and RPC service providers upgrade as soon as possible.

OlympusDAO stated: The official OHM cross-chain bridge has fully migrated from LayerZero to Chainlink CCIP, covering seven chains that support OHM.

According to CryptoBriefing, the Ethereum Economic Zone (EEZ), jointly initiated by Gnosis and Zisk and funded by the Ethereum Foundation, launched the Rollup X development testnet (devnet) at Devcon 8 to demonstrate synchronous composability. The EEZ aims to connect applications on dedicated chains through Ethereum's neutral infrastructure, enabling atomic cross-chain execution, allowing one EEZ rollup or a contract on the Ethereum mainnet to call another contract in a single transaction, with ETH as the default gas token, without introducing new tokens.The EEZ is governed by a Swiss non-profit organization, with alliance members including Aave, Safe, and Centrifuge. Gnosis Chain plans to migrate to the EEZ rollup in the spring of 2027, becoming the first major active network to test this framework. The report notes that its risks lie in the high technical difficulty, and multi-system atomic execution may expand the attack surface.

On-chain analyst @FabianoSolana posted that suspected North Korean hackers transferred approximately $1.46 million through the Jupiter Lend and Circle cross-chain bridge. According to his analysis, the funds were initially transferred from a Solana wallet address marked by the FBI (starting with AffzFD), then dispersed to about 35 temporary addresses via intermediary wallets before being re-aggregated and deposited into Jupiter Lend. A few minutes later, a similar amount was withdrawn by another new wallet.Subsequently, the funds were exchanged for USDC and transferred out of Solana through the Circle cross-chain bridge, returning to a new address on the Solana network via Noble and dYdX. The related funds were transferred out in approximately 16 transactions totaling about $1.4634 million, and then returned in 19 transactions, with a difference of about $10 between the amounts transferred out and returned. According to the analyst, the related funds have not been frozen.In response, Jupiter's Chief Operating Officer Kash Dhanda stated that based on the current investigation results, the attackers only performed deposit and withdrawal operations through Jupiter Lend, which is different from the previous Aave incident where stolen stablecoins were borrowed and could not freeze the assets. The flow of related funds can still be fully tracked through LP tokens, and the relationship of the funds has not been severed, so it cannot be concluded that the attackers used Jupiter Lend to launder the source of the funds. The Jupiter security team has been monitoring the flow of related funds in real-time. As of the time of publication, Circle has not publicly responded to the reasons for the aforementioned fund transfer and why they have not been frozen.

According to official news, to prevent stolen funds from Binance from flowing through its protocol, Relay has taken measures that have resulted in some transactions and routing being paused or delayed, and users do not need to take action.Relay stated that the team is using multi-layer risk and compliance screening measures to block addresses related to hackers and is collaborating with Binance, law enforcement agencies, and ecosystem security teams. Due to ongoing work, the information that can be disclosed is limited.

On-chain detective ZachXBT issued a community alert based on personal judgment, stating that a certain EU entity was suspected to have been attacked on November 1, with multiple centralized exchange accounts being hacked, resulting in losses exceeding $106 million. The attacker withdrew the stolen funds in the form of USDC and USDT.Monitoring has shown that in the past 24 hours, the attacker has continuously exchanged USDC for ETH and transferred it to instant exchange platforms such as WellWallet and Kyrrex, then converted the funds into Monero (XMR) through Wagyu, while also utilizing cross-chain bridges to transfer funds across multiple blockchain networks. ZachXBT disclosed 11 involved addresses and reminded the community to pay attention to the relevant flow of funds.

Swell announced that it has opened a claim channel on Ethereum, allowing users affected by the shutdown of Swellchain to retrieve tokens that were stranded on that network.The project team disclosed that they have recovered 72.77 million SWELL, 100.99 swETH, and 55.28 rswETH through a temporary cross-chain path on BNB Chain, and users can now claim them on Ethereum.

The SVM Rollup project SOON's official account announced that the SOON Foundation has temporarily closed the cross-chain bridge between svmBNB and the SOON mainnet. The announcement stated that on October 31, 2026, around 11:00 UTC, abnormal withdrawal activities occurred on the aforementioned cross-chain bridge, and the foundation immediately closed the bridge service after discovering the anomaly at 14:00 UTC on the same day.The SOON Foundation stated that it has currently controlled the relevant cross-chain bridge and is conducting an in-depth investigation. During the investigation period, the cross-chain bridge between svmBNB and the SOON mainnet will remain suspended, and further updates will be announced separately.svmBNB uses SVM as the execution layer and BNB Chain as the settlement layer, while the SOON mainnet is based on the decoupled SVM Rollup network. Official SOON materials show that the project has received support from Jump, Hack VC, and Anagram.

On October 31, the Bitcoin cross-chain protocol Threshold Network announced that it has temporarily suspended new BTC deposits and tBTC minting through the Threshold application, as well as new Bitcoin redemption requests. This arrangement is a precautionary measure before the completion of security maintenance.Threshold stated that pending redemptions may still be processed on the Bitcoin network, but final settlements on Ethereum have been paused, and some transactions may experience delays. During the suspension, users should not send BTC to previously generated deposit addresses, nor should they initiate new deposits, minting, or redemptions through other interfaces. Users who have deposited BTC should retain their deposit receipts and transaction hashes, avoid resending transactions to clear pending statuses, and can check the status in the in-app Explorer.This suspension does not affect the holding, transfer, or use of tBTC. Threshold stated that it will release confirmed updates through official channels and provide an estimated time for resuming normal operations when possible. Threshold Network is the issuer of tBTC, positioned as a trust-minimized Bitcoin cross-chain solution, with its official introduction stating that the cross-chain scale is approximately $5.2 billion, and the collateralized lending scale is approximately $2.4 billion.

Circle has released a developer guide, introducing how token issuers can achieve cross-chain functionality for ERC-20 tokens other than USDC through CCTP. Issuers can deploy new native cross-chain tokens or configure already issued ERC-20 tokens as custom CCTP connections; both methods reuse Circle's messaging and proof infrastructure and adopt a burn-mint model.Issuers can set the owner, operator, pause permissions, rate limits, and per transaction limits themselves, and Circle cannot take over control. According to Circle's developer documentation, CCTP for non-USDC went live in September 2026, supporting EVM chains such as Ethereum, Avalanche, OP Mainnet, Arbitrum, Base, Polygon PoS, and Arc, but not supporting non-EVM chains like Solana.

According to Decrypt, the Israeli National Prosecutor's Office announced on Thursday that it has extradited Alexander Block, who holds dual citizenship in Israel and Russia (formerly known as Alexander Gurevich), to the United States. He is accused of stealing approximately $2.8 million in assets from the cross-chain bridge Nomad in 2022.Block was handed over to the U.S. authorities early that morning after failing multiple appeals in Israel. He was arrested at Tel Aviv's Ben Gurion Airport in May 2025 while preparing to fly to Russia, shortly after changing his surname and obtaining a passport under his new name.According to the U.S. extradition request disclosed in the Israeli Supreme Court ruling, a federal grand jury in the Northern District of California had indicted Block in August 2023 on four counts of computer fraud, one count of transporting stolen property, and three counts of money laundering. The U.S. formally submitted the extradition request in December 2024.Prosecutors stated that a vulnerability was left in the Nomad smart contract after a software update in June 2022, allowing users to obtain tokens on one chain without locking equivalent assets on another chain. Block, using the username "Bitlik," first conducted six test transfers and then completed four major transfers around August 1, 2022, acquiring tokens worth over $2.8 million, which he transferred through multiple wallets and exchanged for other cryptocurrencies to conceal the source of the funds.The U.S. allegations claim that his actions exposed the vulnerability, leading other users to withdraw nearly all of the over $186 million in user funds controlled by Nomad's wallet. Days later, Block returned some tokens and contacted Nomad executives via Telegram, proposing to return the remaining assets in exchange for a bounty for the vulnerability, but then cut off communication, prompting Nomad to report to U.S. law enforcement. Block argued that the transactions utilized features provided by Nomad's automated system and that on-chain transfers are publicly visible, thus not constituting money laundering.The Israeli Supreme Court rejected both claims, ruling that even if the software technically allowed the operation, exploiting a programming vulnerability could still constitute illegal intrusion into a computer system, and publicly visible transactions do not necessarily identify the actual controller behind the wallets.In December 2025, the U.S. Federal Trade Commission proposed a settlement regarding Nomad's operator Illusory Systems, stating that the cross-chain bridge lost $186 million due to insufficiently tested software updates, and the settlement required it to return recovered funds to users who had not yet been compensated; Nomad recovered approximately $22 million within days after the attack.