pol

Bitcoin core developer Antoine Poinsot announced an adjustment to the security vulnerability disclosure policy in the Bitcoin development mailing list. He stated that in the past, vulnerabilities were often kept secret for a long time to allow users to complete upgrades before details were made public, but this also led to fixes not being backported to older versions, requiring users to wait for the next major release. Poinsot pointed out that large language models make some vulnerabilities very easy to rediscover, and the protection that continued delays in fixing can provide is now quite limited.According to the new policy, vulnerabilities deemed "easy to discover" will be fixed as soon as possible in all maintained major versions, with security announcements released simultaneously. This classification applies to vulnerabilities that can be discovered with minimal effort, such as through simple LLM prompts. Other vulnerabilities will still follow the disclosure timeline based on severity: low-severity vulnerabilities will be disclosed two weeks after the major release containing the fix; medium to high-severity vulnerabilities will be disclosed two weeks after the last affected version reaches its end of life (usually one year after the fix is released in a new major version). Critical vulnerabilities are not covered by the standard policy and may require ad hoc procedures.Bitcoin ecosystem security researcher Luke de Wolf stated that he previously disagreed with Poinsot's security strategy but believes this update is a good adjustment. In August of this year, the volunteer-based Bitcoin Red Team reported nearly 5,000 potential issues across 390 projects, with only about one-fifth being reproducible at that time. In the same month, Core Lightning developers urged operators to upgrade or take nodes offline after receiving multiple AI-generated vulnerability reports, while keeping technical details confidential for two weeks.

According to Bitcoin.com, the Colombian Attorney General's Office announced on Wednesday that, in coordination with U.S. intelligence agencies, it has arrested 8 individuals suspected of using cryptocurrency to launder money for drug trafficking organizations. Police and military conducted simultaneous operations in four locations: Cúcuta, Maicao, Barranquilla, and Bogotá.Among those arrested were 7 individuals, including the gang leader Guillermo Carpio Cárdenas (nicknamed "Gallo"). The U.S. District Court for the District of Puerto Rico has charged that the gang used deposit networks, cryptocurrency tokens, and small transaction splitting (smurfing) to conceal the source of drug money and evade monitoring by financial intelligence agencies.Another suspect, Nassim Orfale Vasquez, was arrested in Barranquilla and has been indicted by the U.S. District Court for the Southern District of New York. According to the IRS, he has handled over $42 million in suspicious cryptocurrency transactions since 2018, and authorities are investigating whether there are larger money laundering organizations in Colombia's coastal regions.

Recently, the Qingshanqiao Police Station of the Xiangtan County Public Security Bureau in Xiangtan City, Hunan Province, with the support of the county bureau, went to Loudi and successfully dismantled a fraud den that used malicious links to steal virtual currency, arresting 3 criminal suspects.Upon investigation, on September 4, a local resident reported that after clicking on a strange link in a virtual currency QQ group, 6814 yuan worth of USDT was stolen from their account. Since August, three individuals, Zhou, Chen, and Liang, have been seeking illegal profits by obtaining malicious virus links through the Telegram app, specifically searching for virtual currency exchange groups in QQ and WeChat, sending malicious links in the groups, and waiting to steal the virtual currency from the accounts of those who clicked. Currently, all three suspects have been criminally detained in accordance with the law on suspicion of theft, and the case is under further investigation.

According to the New York Post, citing informed sources, Matthew Modabber, who has served as the Chief Marketing Officer of the prediction market platform Polymarket since January 2024, has been fired. Previously, the company conducted an internal investigation into a series of events that raised public concern and worried investors.One of the issues involved Modabber's team being accused of creating fake webpages to promote staged videos, which showed users profiting from fake trades. This situation was exposed in a June report by the Wall Street Journal, which subsequently triggered an investigation by the U.S. CFTC. The investigation is still ongoing, and no violations have been determined yet.Informed sources stated that Modabber was a confidant of 28-year-old CEO Shayne Coplan, and during his tenure as an executive, he often made impulsive decisions that led the company into a public relations crisis. Polymarket is finalizing Modabber's departure agreement, and both parties are maintaining mutual respect during the process.

Interpol announced that from June 29 to August 31, 2026, it coordinated law enforcement agencies from 21 countries to carry out Operation "Serengeti III," targeting online fraud, ransomware, business email compromise, online scams, and digital extortion. The operation resulted in the arrest of 1,462 suspects, the dismantling of 10,909 malicious networks, and the recovery of over $105 million in illegal funds. Investigations confirmed 65,929 victims, with financial investigations linking losses exceeding $385 million.In Angola, law enforcement dismantled two illegal cryptocurrency mining centers, arrested 9 suspects, and seized over 2,000 cryptocurrency mining devices and 6 illegal power transformer stations, with the seized power infrastructure alone valued at over $1 million. In Nigeria, authorities arrested a suspect linked to large-scale phishing and business email compromise, with the operation collecting approximately 2.1 million email addresses and software credentials; another investigation uncovered an international investment scam promoted through instant messaging applications that transferred over $2.4 million in suspected criminal proceeds, most of which were laundered through cryptocurrency transactions.Neal Jetton, head of cybercrime at Interpol, stated that cybercrime networks disregard borders and exploit technology to target victims on an unprecedented scale; the operation demonstrates that despite the increasingly borderless nature of cybercrime, international cooperation remains an effective tool for dismantling criminal networks, recovering criminal assets, and protecting communities. The operation received support from private sector partners such as Group-IB, Kaspersky, Fortinet, and Meta, and was co-funded by the EU and the joint project GLACY-e of the European Commission.

Recently, Sun Yuchen discussed his lawsuit against the Trump family's cryptocurrency project WLFI in a conversation with Jin Ming. He clearly stated that he remains firmly supportive of President Trump's cryptocurrency policy and AI strategy, believing it to be very successful.The reason for suing World Liberty Financial is entirely a normal action for commercial investors to protect their rights. The cause stems from the project's lack of investment transparency and insufficient information disclosure, even involving allegations of fraud. The case has been formally submitted to the federal court in California and is to be decided by a federal judge, which fully complies with the operation of the rule of law in the United States.Sun Yuchen further clarified that this lawsuit will not affect his judgment of the macro trends in the United States. He continues to hold a significant position in U.S. technology stocks and is optimistic about TRX being approved for a spot ETF in the U.S., the on-chain business of U.S. stocks, as well as expectations for a stronger dollar and the continued strength of the AI industry.Sun Yuchen believes that public opinion has exaggerated and complicated this lawsuit; in fact, it is simply a "business-to-business" lawsuit. Even if the agreement's subject matter involves 400 to 500 million dollars, it does not significantly impact his overall asset portfolio.Sun Yuchen also stated that he invests with the patience of an old hunter. Once he is thoroughly optimistic and makes a significant decision, he will invest at least 4 to 5 billion dollars or more in a single transaction.

The Bank of Korea has maintained the policy interest rate at 3%, in line with market expectations.Previously, South Korea had raised interest rates in consecutive meetings in July and August.

The Polkadot Community Foundation issued a security warning on the Polkadot forum stating that versions 3.1, 3.3, 3.4, and 3.5 of the browser extension for the third-party wallet Fearless Wallet contain malicious code, which may send users' private keys to a server controlled by attackers when unlocking the wallet.The related code was added on February 19, 2025, with a code change named "TON ecosystem," and it will take effect intermittently from February 2025 to October 10, 2026.

Dragonfly partner Haseeb Qureshi posted on X that the claims regarding Polymarket CEO Shayne Coplan using company funds for expenses such as private jets, discovered by Peter Thiel's Founders Fund, are untrue. Qureshi stated that Dragonfly is one of Polymarket's largest early investors.He mentioned that Coplan was not receiving a salary at the time, disclosed all expenses, which amounted to an annual salary roughly equivalent to that of a software engineer, and that the flight tickets were not for personal use. He stated that the accounting and reimbursement process was initiated by Coplan, and the relevant amounts have been fully reimbursed to the company, after which Coplan began receiving a normal salary. Qureshi believes this is an accounting issue, not a matter of integrity.

According to the official announcement, Binance will update the full margin borrowing and withdrawal collateral rates for POL, SHIB, XLM, COW, NEXO, RVN, and SAND on October 23, 2026, at 06:00 (UTC). The update is expected to be completed within 30 minutes.

Cryptocurrency market maker Wintermute today updated its market report, stating that multiple events such as the Federal Reserve's interest rate decision, the U.S. midterm elections, and third-quarter earnings reports are approaching, and the current narrow trading range of Bitcoin may soon be broken. If Bitcoin breaks above $87,000, it may confirm an upward breakout; if it effectively falls below $82,500, the price could further dip to just above $70,000.On the macro front, the overall CPI in the U.S. rose from 3.4% in August to 3.7%, with core CPI increasing by 0.3% month-on-month, higher than the market expectation of 0.2%, intensifying concerns about energy prices transmitting to core inflation. Wintermute pointed out that the recent rise in U.S. Treasury yields reflects more of a withdrawal of funds from crowded AI growth stock trades rather than an improvement in inflation expectations. The market currently expects the Federal Reserve to maintain interest rates at its meeting on October 28, but if hawkish signals are released, it may strengthen expectations for a rate hike in December, pushing up U.S. Treasury yields and suppressing risk assets.Internally, the cryptocurrency market shows a trend of funds concentrating on mainstream coins. The report indicates that Bitcoin's weekly decline was 1.99%, the Nasdaq index fell by 5.52%, and altcoins overall dropped by 5.69%. Funds continue to flow into BTC and ETH while withdrawing from most altcoins, with high beta and small-cap tokens facing more significant pressure. Wintermute believes that the current risk-reward ratio for mainstream coins is relatively more attractive, and a broad rally in altcoins may need to wait for Bitcoin to strengthen further.Wintermute also noted that the current implied volatility is relatively low, and with the Federal Reserve's decision and midterm elections approaching, the market may be underestimating the risk of subsequent volatility. The Federal Reserve's decision on October 28 will be a key catalyst in the near term, and the performance of AI-related companies' earnings reports will also influence the market's judgment on computing power investments, financing costs, and business models.

According to a report by Bloomberg, when Founders Fund was considering investing in Polymarket in 2025, it was discovered that at that time the company had no revenue, and CEO Coplan had used company funds to pay for personal expenses such as private jets and apartment rent. Founders Fund required the company to improve its financial controls and repay the related amounts before making the investment.

The Hyperliquid Policy Center issued a statement urging the U.S. Securities and Exchange Commission (SEC) to exclude airdrops from the definition of securities. The center advocates that the position proposed by the SEC in March 2026 should be written into the rules, stating that free airdrops do not constitute "monetary investment" and therefore do not fall under investment contracts.The center also argues for the extension of the above rules to include announced airdrops, including periodic or regular distributions. Applicable prerequisites include that the network is operational, eligibility is based on usage or contribution, such as trading, validating, providing liquidity, and governance, and that airdrops are not a means of financing.The center believes that investment requires tangible and identifiable consideration, and airdrops are rewards rather than investments. Processes for claiming, such as connecting wallets, signing, paying gas fees, completing KYC/AML, or accepting terms of service, should not be considered as consideration. Furthermore, the rule should be retroactively applicable to past airdrops or cover Hyperliquid's native airdrops.

Google's advertising policy announcement indicates that starting from October 21, 2026, advertisers targeting cryptocurrency exchanges and software wallets in the UAE must obtain permission from one of the designated local regulatory authorities and be certified by Google.Acceptable licensing authorities include the Capital Markets Authority (CMA), the Dubai Financial Services Authority (DFSA), the Financial Services Regulatory Authority (FSRA), and the Virtual Assets Regulatory Authority (VARA). Advertisers must also comply with other local legal requirements, and this policy applies to all accounts globally that target the aforementioned advertisements in the UAE.

The U.S. Commodity Futures Trading Commission (CFTC) stated in its latest court filing that CME only claims increased competition without reasonably explaining the existence of imminent financial harm, which is insufficient to qualify for a lawsuit challenging its perpetual contract policy. The CFTC pointed out that after the policy adjustment, CME's cryptocurrency futures trading volume has actually increased.In May of this year, the CFTC approved Kalshi's first Bitcoin perpetual contract and stated that it would regulate such products on a case-by-case basis under futures regulations. CME, on the other hand, believes that perpetual contracts do not have an expiration date and should be classified as swaps rather than futures, subject to a different regulatory framework. Last month, the CFTC requested a federal judge to dismiss the case, and this filing further elaborated on its rebuttal to CME's standing in the lawsuit.The CFTC also noted that CME had previously informed investors that it had not heard customer demand for perpetual contracts, and that such products could not replace its existing futures, and that it should not take different positions in court and during earnings calls. TD Cowen policy analyst Jaret Seiberg believes that CME may still have the upper hand regarding its standing in the lawsuit and the argument that the products should be classified as swaps. However, he is concerned that if the perpetual contract market continues to grow during the litigation, it may become more complicated to dismantle this market if CME wins.

Polygon announced the launch of Polygon CDK Besu, supporting banks and financial institutions to deploy private blockchains based on Hyperledger Besu, and connect to other blockchains and their liquidity through Agglayer from the outset. It currently supports deployment on the Ethereum mainnet.