onfi

Bitcoin News posted on platform X that Trezor confirmed that three Safe 5 devices sold by CryptoBilis contained malicious implants that could steal recovery phrases and password phrases. The implants intercept screen data and send it to servers controlled by attackers via mobile networks.Trezor stated that the released firmware 2.13.1 can disable the discovered implants, and its dealer network has been reduced by about 80%; currently, no customers have reported stolen funds. Customers who purchased devices through CryptoBilis starting in March 2026 can apply for replacements, and affected users should still transfer their funds to wallets using a brand new recovery seed, as firmware updates cannot eliminate previously leaked information.

A hacker publicly sold suspected personal information of TSMC employees on an underground forum, claiming to possess up to 46,000 records with a data volume of 6.9GB, and is asking for 3 bitcoins. The hacker even threatened to fully disclose the related information if no one purchases it within a week.In response, TSMC confirmed that some personal information of current and former employees was disclosed without authorization. Preliminary investigations indicate that this information matches data from a certain cloud service provider's system, but there is currently no evidence that TSMC's own data systems have been breached. TSMC emphasized that the related information is unrelated to the company's production and customer data. The company has been notifying affected individuals and providing necessary assistance, while closely cooperating with the relevant cloud service provider, investigative agencies, and third-party cybersecurity organizations to expedite the clarification of the incident's cause and take necessary measures.

Nick Tomaino, a partner at 1confirmation, stated that 1confirmation has participated in all rounds of financing for Polymarket to date and has decided to increase its investment again. Although the fund focuses on seed-stage investments and typically does not participate in later-stage financing, it believes that Polymarket is worth breaking this investment convention.Nick Tomaino mentioned that there has been a demand for prediction markets for over a century, as users wish to place bets on events in politics, culture, and more. In the age of AI, one of the biggest challenges faced by young people is discerning the truth of information, and prediction markets can transform users' trading and investment enthusiasm into more accurate information.He emphasized that the long-term value of Polymarket is not just in sports betting, but in providing a more effective information discovery mechanism for political, geopolitical, and cultural events. Currently, while the U.S. market is primarily focused on sports trading, the accuracy of information is what gives prediction markets their more enduring value.Additionally, he believes that Polymarket's business is continuously upgrading, with the current management team performing excellently, and the products in the U.S. market are at an industry-leading level, with revenue consistently reaching new highs. Regarding the token program, he stated that while he did not fully agree with some of the related promotional methods previously, it is unreasonable to assert that the token program has lost its potential.Finally, Nick Tomaino stated that Polymarket founder Shayne has a strong desire for success and is one of the most direct and transparent people he knows.

Decrypt announces a partnership with the Solana infrastructure company Helius to introduce confidential transfer features for the Decrypt Money Account. This feature is based on Helius's Solana Privacy Rings privacy system, allowing users to send funds without disclosing the transfer amount, and transactions will not appear on the Solana public ledger. This move is part of Decrypt's evolution towards The Information Exchange, which integrates news reading, trading, and prediction markets into a single account.Decrypt co-founder and COO Ilan Hazan stated that he hopes the Decrypt Money Account will be at the forefront of on-chain finance, providing a user experience that goes beyond traditional financial platforms, with privacy as a core component.Helius's product head Tilo Palfner pointed out that public wallets expose users' holdings, transfer methods, and transaction behaviors. Once a wallet is linked to a personal identity, its financial history becomes visible to the entire network. He noted that the user experience of Solana Privacy Rings is similar to regular Solana transfers, completing almost instantly, with the difference being that outsiders cannot see the transfer details.The Decrypt Money Account does not require a mnemonic phrase, gas fees, or cross-chain bridges, and the underlying technology uses simple zero-knowledge proofs to allow users to prove ownership and control without disclosing their balance. Currently, the privacy feature only covers fund transfers and does not yet involve exchanges, earn, and prediction market positions supported by Jupiter on The Information Exchange.The core program is already running on the Solana mainnet and has been audited by Certora, OtterSec, and ZK Security; Helius plans to launch Custom Rings in the fourth quarter of 2026, allowing institutions to set their own compliance controls and audit access permissions.

Confidential AI Infrastructure NEAR AI updated on platform X, stating that on November 8, an attacker exploited a vulnerability in its inference engine SGLang to access part of the infrastructure.NEAR AI has indicated that it has revoked relevant access permissions and completed the repairs. Affected users have been notified, and users who have not received notifications do not need to take any action.

CryptoQuant analyst PelinayPA pointed out that the price trend of Ethereum is diverging from staking activity. The staking rate for Ethereum 2 has increased by about 4.32% since May, with approximately 36.32% of the total ETH supply currently staked.Although the price of ETH on Binance has dropped from around $2,800 in October to $2,132, the staking rate continues to rise, indicating that investors have not significantly reduced their staking commitments due to the weak price. Analysts believe that a higher staking participation rate reduces the supply of ETH available for trading, which may provide price support when demand is strong, but staked ETH is not permanently locked, as validators can initiate withdrawals.At the same time, total staking inflows have decreased by 40.11%, highlighting the importance of distinguishing between long-term staking growth and daily inflow activity. Overall, Ethereum maintains a potentially supportive supply-side dynamic in the medium to long term; if the market can absorb selling pressure and attract sufficient demand, ETH may lay the groundwork for a stronger upward trend.

According to an interview with CBS News, U.S. President Trump confirmed that he is a co-owner of the cryptocurrency company World Liberty Financial, but stated that he knows nothing about the company's business.When asked about investors associated with the UAE government holding a stake in the company, and whether foreign investors believe they can gain influence through investment, Trump said he did not know and mentioned that his son runs the family business.

Binance Co-CEO He Yi published a statement regarding an issue where a user mistakenly transferred the wrong cryptocurrency while using two separate apps. Binance is legally unable to directly transfer funds from another person's account, and she will personally subsidize the user's losses caused by the mistaken transfer.He Yi explained that due to historical compliance reasons, Binance has three completely independently developed local sites, with product architecture and business models different from the main site, primarily focusing on local fiat currency trading. To prevent similar situations from occurring again, the next step will be to add three confirmations during the Binance payment transfer process. Additionally, He Yi stated that open discussions are a driving force for continuous iteration and hopes that peers will pay attention to their users just as they do with Binance. She invited users to submit product suggestions in the comments section, with the activity lasting one week. The product team will select the 10 best suggestions, and each selected participant will receive 1 BNB.

Uniswap has confirmed that it will support V4 Hooks functionality on the Hyperliquid L2 project Elysium, allowing developers to build customizable liquidity pools that support dynamic fees and custom trading logic using V4 Hooks. The Elysium mainnet is expected to officially launch on November 9.

Preliminary research from the University of Michigan shows that the U.S. Consumer Confidence Index has slightly increased by about 6%. Although consumer confidence among low-wealth and middle-wealth individuals has improved, confidence among high-wealth consumers has decreased by 5%. High prices are eroding living standards, with 57% of respondents mentioning cost of living issues.Inflation expectations for the coming year have dropped to 4.3%, while long-term inflation expectations have decreased to 3.4%.

Blockchain analysis company Chainalysis stated that it has confirmed that certain customer information, including the names, usernames, password hashes, and valid tokens of all Chainalysis users, was exposed to a malicious actor during this security incident. During the investigation, access to Reactor and Data Solutions was cut off by the officials. There is currently no evidence that any investigative data was accessed or that Chainalysis's attribution data was tampered with.It is reported that the officials implemented additional proactive monitoring systems to detect abnormal activities. After abnormal activities were discovered today, the KYT (User Interface and API) and other address screening products and login pages were taken offline. Customers whose KYT accounts appear to have been accessed without authorization are being directly notified.Chainalysis plans to restore access to KYT and address screening starting tomorrow. Customers can send trusted IP addresses to support@chainalysis.com or contact the Chainalysis customer team to be whitelisted. Subsequently, Chainalysis will authorize users to reset passwords and rotate API keys for transaction logging.

According to Loopscale monitoring, the platform has restored the priority loan function, and all loans can have additional collateral; except for loans funded by the USDC Genesis Vault, all other loans can be repaid, and borrowers can retrieve their collateral after full repayment. The collateral withdrawal function for loans related to the USDC Genesis Vault remains temporarily closed, and treasury withdrawals and other protocol functions continue to be restricted.The team is working with partners to advance the security recovery efforts. Loopscale stated that it has identified and controlled two paths exploited by the attackers during this incident. The attackers first exploited a misconfiguration of asset pricing parameters, leading to collateral deposited in the SOL Genesis Vault being incorrectly valued as another asset, resulting in approximately $412,000 in under-collateralized loans. Subsequently, the attackers sold a loan with abnormally high interest rates to the USDC Genesis Vault through atomic transaction combinations, artificially inflating its net asset value (NAV) and extracting approximately $521,000 in redemption funds; this operation was intercepted by the system within 30 seconds after the transaction was generated. Loopscale stated that user deposits will not suffer losses as a result.

trade.xyz posted on platform X that GitBook has confirmed that the incident affecting its documentation originated from a security breach of its infrastructure.An internal investigation by trade.xyz found no evidence of a breach in its infrastructure, and security controls are functioning as expected, preventing the GitBook incident from affecting its infrastructure. trade.xyz will migrate away from the GitBook platform in the coming days.

Arthur Hayes stated that the FLOP development network is progressing smoothly, the team is adjusting some protocols, and they will determine the test network launch date early next week.

According to French media Cryptoast, France's Crédit Mutuel Arkéa has confirmed that it was attacked, and someone used this to conduct fraudulent transactions. The bank stated that the incident has been brought under control, and customers have not suffered any financial losses, but the amount of the losses has not been disclosed.Earlier reports indicated that analysts pointed out that the online banking service Fortuneo under the group may have suffered fraud losses exceeding 133 million dollars, with funds being laundered through cryptocurrency channels.

Binance co-founder He Yi commented on "Binance facing a second battlefield of public opinion after the security incident," stating, "When the storm comes, they believe that cutting down the biggest tree will make them the winner. Fanning the flames will only drive everyone away and reduce confidence in the industry, not just in Binance."Earlier, Binance founder CZ shared a lengthy article and referred to it as "another attack on Binance." According to the article, from October 30 at 05:00 to November 2 at 20:00, within approximately 78 hours, 1,083 accounts published 11,700 hostile posts regarding the theft of Binance's hot wallet, with about 20.93 million exposures, of which 79.6% were replies, and 3,354 posts were deemed false information, categorized into 15 types of rumors.The article suggests that alongside the real security incident, there was a rhythmic and organized narrative operation on X, with themes shifting according to Binance's response points, including internal sabotage, insolvency, a second FTX, reluctance to open withdrawals, a bank run upon opening, and exaggerating net outflows, among others.

Binance co-founder He Yi responded on the X platform regarding discussions related to the Binance security incident and internal device management, confirming that the previously circulated news about an employee being fired for downloading iQIYI on a work computer did occur at Binance.He Yi stated: "The person who was fired for downloading iQIYI on a work computer was also from Binance. We acknowledge our mistakes and take responsibility, but we cannot make the same mistake again."

According to the latest data, the Democratic Party has currently secured 218 seats in the House of Representatives, confirming control of the House. Counting is still ongoing, with the Republican Party winning 126 seats and the Democrats flipping 25 seats. It is expected that the Democrats will win by a significant margin in this election.According to the rules, there are a total of 435 seats in the House of Representatives, and to become the majority party, 218 seats must be won.

The founder of the cryptocurrency exchange BitMart, Sheldon Xia, announced the closure and is advancing the restructuring and liquidation process. He confirmed that BitMart also suffered a hacker attack yesterday, with a relatively small amount involved. The team has quickly launched an investigation and strengthened security defenses.Preliminary investigations indicate that yesterday's hacker attack may have been carried out by the same organization that attacked the Brazilian Bitcoin market Mercado Bitcoin yesterday.

According to the Decision Desk HQ page, as of now, in the confirmed seats for the 2026 U.S. midterm elections, the Democratic Party is leading in both chambers.In the House of Representatives, the Democratic Party has secured 147 seats, while the Republican Party has 92 seats, with the majority threshold being 218 seats. In the Senate, the Democratic Party has secured 47 seats, while the Republican Party has 38 seats, with the majority threshold being 51 seats.