encrypted

Cryptocurrency payment infrastructure company Mesh announced a partnership with Visa, allowing users to directly spend their cryptocurrency and stablecoin balances from participating wallet applications at over 175 million merchant locations worldwide. This integration supports both offline and online payments through Visa credentials configured in the backend, with Mesh responsible for transaction fund transfers and currency conversion, so users do not need to sell or transfer assets in advance.Bam Azizi, CEO and co-founder of Mesh, stated that cryptocurrency has never been a consumption issue, but rather a "last mile" problem, and previously solving this issue meant needing to obtain a separate card. Mesh handles fund transfers and conversions, allowing balances to be converted into purchasing power at the moment of payment, without users needing to transfer any assets, and merchants not needing to make any changes. The specific launch date of this partnership, supported devices, and participating platforms have not yet been announced.Mesh is a cryptocurrency payment infrastructure company that previously supported the launch of PayPal's "Pay with Crypto" service. In August 2025, institutions such as PayPal Ventures and Coinbase Ventures raised Mesh's total funding to over $130 million. In January of this year, Mesh completed a $75 million Series C funding round led by Dragonfly, entering the unicorn ranks. This partnership is also Visa's latest initiative to continuously integrate cryptocurrency assets into its merchant network, having previously engaged in similar collaborations with WeFi, Bridge, and others.

The security organization SlowMist has released an in-depth threat intelligence report on the DarkSword Trojan backend and iOS attack chain. The report tracks the evolution of this attack infrastructure and reveals its high danger to cryptocurrency asset users.According to SlowMist's analysis, after the relevant exploit code was made public in March 2026, DarkSword-PROV2 appeared on GitHub in July, and its attack infrastructure was observed to be operational by late September.The SlowMist team not only tracked its online infrastructure but also correlated its management panel with public GitHub repositories, dissecting the exploit code, delivery chain, and post-compromise capabilities. The report highlighted several key findings of this attack framework: a highly automated complete attack pipeline that integrates vulnerability delivery, device and data collection, data theft, and cryptocurrency wallet fund aggregation functions.The extensive and deep data theft capabilities of this toolkit target not only keychains, files, and information but also specifically cryptocurrency wallet data, with the ability to decrypt wallet data and aggregate funds. Although the toolkit claims to support iOS 13 and above, code analysis confirms that its actual effective exploit window is concentrated in the iOS 18.6--18.7.2 and iOS 26--26.1 version ranges. The publicly available vulnerability components have been weaponized and integrated into a deployable attack framework, significantly lowering the threshold for launching complex iOS attacks.In response to this threat, SlowMist has provided clear security recommendations. Users should keep their iOS systems updated and avoid clicking on untrusted links, as merely opening a malicious page in the Safari browser could trigger vulnerabilities. If a device has accessed suspicious landing pages, users should consider their mnemonic phrases and private keys as compromised and must create new wallets and transfer assets using a clean device that has never accessed that page.Additionally, users should thoroughly check for abnormal transactions and token authorizations across various chains and immediately revoke unnecessary authorizations.

According to official news from Aptos, the Aptos mainnet has officially launched the Encrypted Mempool feature. Users can choose to encrypt pending transactions before block finalization, keeping the transaction call functions and input content encrypted before execution, while the sender's address and fee information remain visible to the outside.This feature is mainly aimed at institutions (to avoid exposing intentions of large orders in advance), traders (to reduce MEV arbitrage risks), and AI entities (to ensure transaction inputs remain private before execution).

ChainCatcher live report, at the Token2049 conference in Singapore, Gemini co-founders Tyler and Cameron Winklevoss stated that Zcash is the cryptocurrency version of Bitcoin, just as the early internet was HTTP, Zcash is HTTPS. They also announced that they have submitted a spot Zcash ETF application to the SEC.

Aptos governance proposal #206 is currently voting, proposing to enable the ChunkyDKG V1 full mode and the encrypted_transactions feature. This mechanism will support encrypted transactions through distributed key generation, hiding their content before the transactions enter consensus ordering, and then collaboratively decrypting by validators, which helps reduce front-running and MEV risks.The proposal voting will end on October 6, and currently, the approval rate is close to 100%, but the voter turnout is only 2.69%, which has not yet reached the quorum requirement of 24.8%.

Slow Fog's Yuxian posted on platform X, stating that systems prior to iOS version 27 are being exploited by certain black and gray market groups to steal encrypted wallets from iPhone users.It reminds users to promptly update their iPhone, iPad, Mac, and other devices to the latest version, to be cautious when installing apps from unknown sources, and to be careful when opening unknown links through Safari and in-app browsers.

According to Cointelegraph, blockchain security company SlowMist stated that its investigation has not linked the recent security warning caused by the iPhone Safari attack to confirmed cryptocurrency theft incidents.SlowMist told Cointelegraph that it has not independently confirmed any victims affected by the specific Safari attack samples it analyzed, and the strongest technical evidence it possesses covers iOS versions 18.4 to 18.6.2. The company stated that the reported impact range of "iOS 13 to 26.5" should be regarded as a preliminary assessment, and it tends to avoid claiming that iOS 26.5 is affected until reproducible technical evidence is obtained.SlowMist pointed out that the Safari attack reused the previously disclosed DarkSword exploit chain technology, which is independent of another investigation involving malicious components embedded in App Store applications called FomoPeek. The Google Threat Intelligence Group (GTIG) disclosed DarkSword in March, describing it as an iOS exploit chain used by multiple threat actors since November 2025.

Binance will gradually migrate the cryptocurrency assets in users' Funding Accounts to Spot Accounts starting from September 29, 2026. The migration is expected to continue until January 2027, with specific dates to be announced later.After the migration period ends, the Funding Account will be renamed to Stocks Account, which will only be used for trading and settlement of stocks and stock options.

The French Council of State rejected the urgent application filed by the cryptocurrency companies Bull Bitcoin and Paymium, refusing to immediately suspend the implementation of the French decree enforcing the EU Directive on Administrative Cooperation No. 8 (DAC8).The applicants argued that the centralized collection of personal and financial data from digital asset users could lead to data breaches, extortion, and personal safety risks. The court found that the applicants failed to demonstrate an urgent situation sufficient to support an emergency suspension. The lawsuit seeking to fully revoke the decree by Bull Bitcoin is still under review. DAC8 will take effect in the EU on January 1, 2026, and registered service providers must complete their first declaration for the year 2026 by September 30, 2027.

Crypto KOL Ansem stated that he judged two weeks ago that the current market is still in a very early stage, and he maintains this view. Even if investors have not yet allocated relevant tokens, starting to pay attention to the market, formulating trading plans, and setting staggered buying prices now may still yield high returns.For tokens that have already entered the price discovery phase, Ansem believes that the current price is still close to the starting point of this breakout, and subsequent positions may not provide significantly better entry points than the current stage. Therefore, investors who have not yet taken positions should formulate plans in advance, rather than waiting to make decisions after market attention fully heats up.

According to CryptoSlate, the Pakistan Virtual Assets Regulatory Authority (PVARA) has required cryptocurrency exchanges and related service providers operating locally to enter a new licensing process by September 5, or they must cease relevant operations. PVARA opened the licensing application portal for virtual asset service providers on August 22 and released regulatory rules for virtual asset services.According to the regulations, service providers that have been conducting cryptocurrency business in Pakistan must submit a "No Objection Certificate" (NOC) application. During the application review period, as long as a complete application is submitted on time, they may continue to provide existing services. Businesses that do not submit applications by September 5 must stop relevant services within the regulatory scope, and continuing operations will be considered a violation. PVARA added that this policy does not constitute a comprehensive ban on cryptocurrency but establishes a "compliance or exit" regulatory mechanism applicable to exchanges, custodians, and other businesses providing virtual asset services to users in Pakistan.

The UK’s HM Revenue and Customs (HMRC) has sent out 81,000 warning letters to cryptocurrency investors suspected of unpaid taxes over the past 12 months, an increase of 25% from approximately 65,000 letters in the previous year. These letters aim to prompt recipients to disclose unpaid taxes, after which HMRC will initiate a formal investigation.Cryptocurrency exchanges, using tokens to purchase goods or services, and gifting tokens to others may all constitute taxable disposals. Income generated from activities such as lending and staking may be subject to income tax rules, and UK residents are generally required to pay tax on relevant income and gains worldwide.Rules set to be implemented in April 2027 will apply a no gain, no loss treatment to eligible crypto lending and automated market-making arrangements until an economic disposal occurs, expected to affect around 700,000 individuals. The crypto asset reporting framework requires service providers to submit transaction data for 2026, covering the reporting period from January 1, 2027, to May 31, 2027. It is anticipated that 52 jurisdictions will exchange relevant data in 2027, with an additional 15 jurisdictions joining in 2028.

According to Cointelegraph, cybersecurity company Rapid7 has disclosed a phishing operation named Operation Asterix, targeting approximately 885,000 phone numbers across multiple countries and directing victims to fake wallet service websites. A total of 5,576 phone numbers have been matched with Binance user accounts and are included in the attack queue.The attackers steal mnemonic phrases by impersonating fake applications of Ledger, Trezor, and Exodus, while also using forged customer service emails and phone calls to contact victims. Rapid7 also found that out of over 316,000 phone numbers in Germany, 43,066 matched with cryptocurrency trading accounts, resulting in a hit rate of approximately 13.6%. Related attacks also include a bulk phone number verification tool targeting Kraken accounts, with investigations revealing that AI tools have been heavily used in the phishing operations.Data from blockchain security company Hacken shows that phishing attacks and social engineering scams caused losses of $306 million in the first quarter of this year, accounting for the majority of the total losses of $482 million in the cryptocurrency industry.

According to Decrypt, security company Bitdefender has warned that the newly released Hollywood blockbuster "The Odyssey" has been embedded with Lumma Stealer information-stealing malware by attackers, who are attempting to steal users' cryptocurrency wallets, passwords, and browser data through fake movie files.Bitdefender revealed that the malicious files began spreading within days of the film's release, with attackers disguising them as high-definition WEBRip or Blu-ray version resources and using names similar to legitimate torrent files to entice users to download. In reality, these files are not videos but Windows executable programs that, when run, will infect the device. Attackers often replace the file icons to make them look like VLC player or video files, while also taking advantage of Windows' default setting to hide file extensions, reducing users' ability to recognize the risk.Once executed, Lumma Stealer will collect saved passwords, payment information, autofill data, remote desktop credentials, and sensitive information including cryptocurrency wallets. Additionally, the malware will steal authentication cookies, allowing attackers to potentially bypass some account protections even if the user has enabled multi-factor authentication (MFA).

According to Tech Funding News, the crypto travel platform Entravel has completed a $7.5 million financing round, led by Ethereal Ventures and Finality Capital, with participation from GSR, Varrock, G1 Ventures, Seier Capital, Veris Ventures, Funfair Ventures, and WTG Ventures.Entravel provides travel booking systems for over 40 brands, including Kraken and MetaMask, covering 300 million users, with an average booking conversion rate exceeding 10%. Founded in 2026, Entravel operates three interconnected businesses: MocatravelX directly collaborates with hotels to obtain inventory and pricing; RateStellar integrates supply from other channels, using AI to match hotels and room types from different suppliers, covering over 2.2 million hotels; on this basis, Entravel offers a white-label booking layer for partners, allowing them to provide hotel booking services to users without needing to build their own supplier network.

Bitcoin.com published an article stating that the model of Web3 startups conducting corporate pilots by paying traditional financial institutions "is a dead end," with 95% of pilot projects failing to reach production environments. Web2 companies only want the idle venture capital and revenue sharing from startups, rather than their open-source innovations. The article argues that true defensiveness comes from a "structural moat"—compliance licenses, deep network liquidity, or distribution lock-ins that Web2 engineering teams cannot replicate.The article cites recent cases: Stripe was acquired for $1.1 billion after proving an annual cross-border transaction volume of $5 billion with Bridge, and Robinhood acquired Bitstamp for $200 million to gain 50 global regulatory licenses and institutional liquidity, rather than maintaining long-term vendor relationships. The article predicts that the next round of B2C expansion will present an 80/20 pattern: 80% of retail liquidity will be controlled by 3 to 5 Web2/fintech giants such as Visa, Stripe, Robinhood, PayPal, and BlackRock, providing compliance and fiat entry; 20% will be an unlicensed DeFi sandbox for validating initial product-market fit. The growth path for startups should be to first validate PMF in the DeFi sandbox, then integrate or sell to the few Web2 gateways controlling the 80% distribution layer. The article believes that the current protocol cancellations and wave of startup closures are part of a "necessary market cleanup."

The Financial Supervisory Service (FSS) of South Korea has launched a three-month project to rebuild the fraud refund system with a budget of approximately 119 million won. This upgrade aims to align with the revised Telecommunications Fraud Damage Compensation Act, which will officially take effect on October 1, and formally includes virtual assets in the categories of "damaged property" and "refundable property."The new system will support the calculation of compensation amounts based on token types and quantities, using the value of the won at the time the funds were frozen as a reference benchmark, and will also have the capability to dismantle mixed fraud funds across multiple accounts. Major exchanges such as Upbit, Bithumb, Coinone, Korbit, and GOPAX will be required to undertake anti-fraud and victim relief obligations equivalent to those of banks, including verifying transaction purposes, monitoring suspicious funds, and freezing suspected accounts.

On July 17, French Foreign Minister Jean-Noël Barrot submitted Bill No. 921 to the Senate, proposing to incorporate the Crypto Asset Reporting Framework (CARF) established by the Organisation for Economic Co-operation and Development (OECD) into French law and to automatically exchange encrypted data with 48 countries that have signed related agreements.The exchanged information includes specific transactions, user names, addresses, tax identification numbers, places of residence, and the cumulative transaction value during the reporting period. EU member states have prepared to conduct relevant data exchanges based on the DAC-8 directive, which will take effect on September 30, 2027. After the bill is approved, the French government will accelerate the collection of encrypted data. A Chainalysis report indicates that by 2026, France had recorded 30 publicly known violent robberies of crypto assets; the report states that a tax official in the Paris region is suspected of selling data on high-net-worth crypto holders.

According to a16z crypto, the monthly spending on crypto payment cards has grown from a niche scale to $759 million. These cards allow users to pay with cryptocurrency in all scenarios that support traditional card organizations, with stablecoins converted to local currency at the point of sale, making it no different for merchants than regular card transactions.As of July 31, looking at the spending composition from various card programs, RedotPay has long held the majority share, while EtherFi, KAST, Karta, and others have gradually increased their share since the end of 2025. a16z crypto states that crypto cardholders do not need traditional bank accounts and can deposit stablecoins with the issuer or hold them directly through self-custody. These cards have expanded global users' access to dollar accounts and provided a convenient spending method for stablecoin holders.

According to The Kobeissi Letter analysis, cryptocurrency trading activity continues to decline. Data from 44 spot exchanges tracked by Kaiko shows that last week, the average daily trading volume for cryptocurrency spot trading dropped to about $15 billion, the lowest level of the year, down approximately 70% from the peak in January. In comparison, there were two trading days in February where the trading volume exceeded $100 billion.It states that since December 2025, the trend of average daily trading volume has decreased by about 50% to $20 billion, also the lowest level of the year. Meanwhile, trading volume remains highly concentrated, with the largest 6 exchanges accounting for over 60% of total trading activity, and liquidity in the cryptocurrency market is drying up.