thor

According to the Straits Times, Edward Robinson, Chief Economist of the Monetary Authority of Singapore, stated at the Beijing Financial Street Forum on October 20 that once artificial intelligence leads to widespread productivity improvements, central banks may relax monetary policy. However, currently, the AI investment boom is driving demand, and policies should maintain appropriate restrictions. He pointed out that AI-related investments are driving economic growth, but the technology has not yet brought significant productivity improvements to the broader economy, and he called for a gradual, data-driven approach.The Monetary Authority tightened monetary policy in April and July 2026 due to rising inflation risks, and maintained the policy unchanged in October. An October 14 statement warned that if the AI boom generates broader economic spillovers and raises unit labor costs, domestic inflation may remain high. Robinson noted that AI-driven electronic products accounted for over 70% of this year's export growth in Asia, but the growth of industries producing AI-related technologies mainly stems from increased investment and more intensive use of existing resources, rather than efficiency improvements. He cited OECD estimates stating that if sufficiently widespread and appropriately invested, AI could increase total factor productivity growth by up to 0.6 percentage points annually.

According to market news, the ransomware/disclosure organization FulcrumSec publicly claimed to have continuously stolen about 10.6 TB of data from PingCAP's managed database service TiDB Cloud and released about 200 GB of the first phase sample.PingCAP issued a statement acknowledging that "some internal operational data" was accessed without authorization, but emphasized that it does not involve product vulnerabilities and will not affect the security of customer databases and business data. Companies such as Bitget and Baidu have collaborated with this data company.

The Swiss Financial Market Supervisory Authority (FINMA) has approved the country's first Bitcoin ETF aimed at retail investors. This product falls under "other alternative investment funds" according to Swiss law and is labeled as having special risks. FINMA did not disclose the issuer of the fund, but multiple media outlets have indicated that signs suggest it may come from BIT Asset Management (formerly Matrixport Asset Management), and FINMA did not deny this claim in response to inquiries. Additionally, several fund providers have submitted or announced plans to submit Bitcoin ETF applications.The fund is a single-asset product, with all funds directed towards Bitcoin. To this end, FINMA needed to grant an exemption regarding its risk diversification rules, citing that Bitcoin has a long trading history and extremely high trading volume. In terms of asset custody, participating institutions must take measures to prevent operational and custody risks, with standards referenced from the regulatory announcement issued by FINMA on January 12, 2026, which requires that customer crypto assets are not included in bankruptcy assets in the event of the custodian's bankruptcy. Meanwhile, the sales process must comply with Fidleg's conduct rules to provide higher investor protection than direct purchases of cryptocurrencies, and the fund documents must clearly indicate the associated risks.While approving the ETF, FINMA emphasized that even investing in Bitcoin through an approved ETF carries high risks, with severe volatility potentially leading to significant depreciation of the principal invested, and required the issuer to provide clear warnings about volatility and loss risks. The United States has approved Bitcoin spot ETFs starting January 2024, with BlackRock's iShares Bitcoin Trust launching on January 11, 2024, currently managing approximately $65 billion. The Swiss Exchange has been able to trade Bitcoin products for years, but they have existed in the form of ETPs and do not have fund status; this approved ETF is the first to incorporate Bitcoin into the approved public fund framework.

According to an announcement from the French Financial Markets Authority (AMF), the AMF has released a list of newly identified websites that illegally provide cryptocurrency assets or cryptocurrency asset services in France for the third quarter, including alphaairobot.com, aureoncorevix.net, bitgrokapp.com, bitkelttrade.com, cryptobullbear.com, investpathline.com, and others.Since the beginning of 2026, the AMF has added a total of 64 names to this blacklist. The AMF stated that this list will be updated frequently, but it is not exhaustive due to the continuous emergence of new unauthorized or fraudulent entities. The public can view the complete blacklist through the AMF official website under "Espace Épargnants > Protéger son épargne > Listes noires et mises en garde," as well as on the ABEIS website, and can check the whitelist of authorized cryptocurrency asset service providers (PSCA) on the AMF official website to verify whether relevant institutions are permitted to operate in France.

According to The Defiant, THORChain announced that its v3.21 upgrade will fix the FIN contract vulnerability on Rujira and allow the previously paused application layer to restart. The network has set the upgrade target at block height 28,366,100, with an expected time around October 23. After the restart, trading, lending, borrowing, and automated trading on Rujira will resume. Rujira's products run through smart contracts within THORChain, rather than on an independent blockchain, and the application layer can pause these contracts without affecting the underlying layer of THORChain.According to Rujira, the vulnerability was discovered on September 26, when an attacker transferred a custom concentrated liquidity position without holding a position. The team paused the application layer with the support of node operators, and only one position from the Rujira team itself was affected, with no loss of user funds. Rujira attributed the vulnerability to a flaw in the position transfer function, rather than the trading logic of the liquidity strategy. On September 27, Rujira stated that the fix is located at the underlying layer and has been scheduled for the v3.21 upgrade.Regarding the restart window, Rujira proposed a conditional grace period in its plan on October 15: if the application layer is ready to resume, any credit account position with a loan-to-value ratio above 100% and meeting liquidation conditions will request node operators to pause the credit account contract for an additional 24 hours, allowing borrowers to replenish collateral before liquidation resumes. Borrowers can replenish collateral through Rujira Borrow or by directly transferring assets to the credit account address. Rujira indicated on October 10 that positions still deemed unsafe after the grace period may be liquidated when the liquidator triggers the process.

The decentralized computing network Cysic released an event report on platform X stating that its cross-chain bridge was attacked on Saturday. The attacker exploited a processing vulnerability to unauthorizedly mint 10 million CYS on the BNB Smart Chain, and the cross-chain bridge has now been suspended. Preliminary investigation results indicate that the attacker accessed the database supporting the cross-chain bridge without authorization.The report shows that the minting occurred at 12:31:38 UTC, and Cysic added the receiving address to the token contract blacklist at 13:47:52. At that time, the address still held approximately 2.8 million CYS, and transfers have been restricted. Cysic stated that this incident was limited to the message processing and minting aspects of the cross-chain bridge and did not affect the mainnet or other operational systems, nor did it result in the theft or unauthorized transfer of CYS or other assets already in user wallets.Cysic emphasized that the quantity of minted tokens alone cannot determine the final dollar loss, and related token transfers, exchanges, and actual losses are still under verification. The company has hired a security agency and plans to release a follow-up report after the current investigation phase concludes. CYS is used to coordinate incentives for users, computing power providers, governance participants, and contributors within the Cysic network.

According to a report by 404 Media, newly submitted court records reveal the specifics of how Telegram provided user data to U.S. authorities after receiving a court order. The documents include a letter written by Telegram, which provides the phone numbers, user IDs, and IP addresses of specific users. This report was completed in collaboration with the independent media outlet Court Watch. It should be noted that the full article requires registration to view, and the currently visible content does not disclose the identities of the users involved or the specific background of the case.

The Indian Computer Emergency Response Team (CERT-In) released an important announcement this week titled "AI Agents as Attack Vectors," indicating that AI agents operated by unnamed model providers exceeded their granted task scope during testing, reading confidential business records in the online systems of Indian agencies, and no affected agencies discovered this behavior on their own.CERT-In stated that it received voluntary disclosures from several AI model providers, which indicated that these models accessed the online systems of Indian agencies while being researched and evaluated on the internet. The announcement did not disclose the names of the providers, models, or affected agencies. The agents read business records containing personal data and confidential materials, utilizing credentials and connection settings exposed in application configurations, public code repositories, and overly permissive cloud service roles. In some cases, the same credentials were recovered multiple times and reused in different operations.Additionally, CERT-In observed that criminals exploited publicly available AI-driven offensive security frameworks to scan for vulnerabilities, implement exploits, and launch economically motivated attacks against Indian entities, reducing the time from initial access to final impact from several days to just hours; these tools were repeatedly repackaged and deployed, with related deployments appearing on servers in multiple countries.

According to a report by the Korean News Agency, the Financial Services Commission of South Korea and the Financial Supervisory Service are strengthening monitoring of "perpetual contracts" linked to Korean stocks and stock indices traded through global virtual asset platforms.If illegal business activities targeting Korean residents, such as soliciting account openings or trading, are found on overseas platforms, the regulatory authorities will refer the matter to investigative agencies and take strict countermeasures.

Cryptocurrency hardware wallet manufacturer Ledger announced the launch of Ledger Agent Intent, which is now open for free to all signature devices compatible with Ledger. The AI agent can monitor the market and provide portfolio optimization suggestions, allowing users to review and approve relevant actions on their Ledger devices, while the private keys remain under the user's control.Agent Intent will be directly integrated with OpenClaw, allowing users to register the OpenClaw agent and authorize actions on their Ledger Atom devices, with the OpenClaw application pre-installed on the device. This tool also supports Pay.sh from the Solana Foundation, and requests made by the agent can enter a unified queue for users to choose the timing for signing.Ledger collaborates with Venice AI to address privacy issues and stated that user data will not be used for training models by third parties.

The Monetary Authority of Singapore (MAS) has revoked the major payment institution license of the currency exchange and cross-border remittance entity Sir Money Changer Pte. Ltd. (SMC) under the Payment Services Act 2019, effective from September 15, 2026. From that date, SMC is no longer allowed to provide cross-border remittance and currency exchange services.The action by MAS stems from an investigation that found SMC allowed third parties to independently operate cross-border remittance services in one of its business premises under the name of SMC and provided false or misleading information to MAS. MAS pointed out that license holders must not allow third parties to use their license to conduct financial service activities and require payment service providers to maintain effective supervision and control over their business operations.

According to The Defiant, the European Banking Authority has recognized the US dollar stablecoin USDC as the EU's first "significant" electronic money token. Under the arrangement, the financial regulatory responsibilities for USDC will be transferred to the European Banking Authority on November 12.Meanwhile, the French Prudential Supervision and Resolution Authority will continue to be responsible for the governance and other corporate affairs of USDC.

In a post on platform X, Saifedean Ammous, the author of the 2018 academic work "The Bitcoin Standard," stated that Bitcoin already possesses monetary functions. Holding Bitcoin is equivalent to using Bitcoin as currency. Its limited use as a payment method does not prove that its monetization process will not continue to advance. He believes that as Bitcoin matures, its volatility will be lower than that of gold, and its market capitalization will surpass that of this largest precious metal globally.Ammous's viewpoint is a response to the relevant discussions in the work "Better Money: Gold, Fiat, or Bitcoin?" by American economist Lawrence H. White. White cited content from Chapter 6 of that book on platform X, stating that Bitcoin's supply is fixed and cannot respond to changes in demand, resulting in excessive price volatility, making it difficult to become the reliable medium of exchange that people need. This is also the reason why stablecoins have surpassed Bitcoin in trading volume.Similar judgments have been made in the industry previously. In May 2025, André Dragosch, the European research director at Bitwise, told Cointelegraph that their internal forecast predicts Bitcoin will reach $1 million by 2029, at which point its market capitalization could be comparable to gold. However, Bitcoin's current market capitalization of approximately $1.6 trillion needs to grow at least 18 times to exceed gold's nearly $29 trillion market capitalization and become the largest asset in the world.

According to The Guardian, former BitMEX investor Lewis Barber has filed a lawsuit in the High Court of England, claiming £20 million, accusing the exchange of offering cryptocurrency derivatives to UK investors without authorization from the Financial Conduct Authority (FCA).Barber stated that he traded derivatives offered by BitMEX from 2018 to 2022 and incurred losses of approximately £20 million in Bitcoin, now seeking the return of the relevant Bitcoin or equivalent compensation.

On September 30, the U.S. Securities and Exchange Commission (SEC) released final rules adjusting the quorum requirement to only one commissioner in most cases to constitute a quorum, which took effect on October 2. The SEC stated that this move aims to enhance the flexibility and finality of institutional rule-making. Earlier this month, Commissioner Hester Peirce resigned, leaving only Chairman Paul Atkins and former Acting Chairman Mark Uyeda as the two remaining commissioners, while the agency's statutory seats are five.The leadership vacancy at the U.S. Commodity Futures Trading Commission (CFTC) is even more pronounced, as Michael Selig has been the only Senate-confirmed chairman and commissioner since December 2025. Both agencies were originally set to have five commissioners. In terms of rule-making, the SEC proposed in August to provide a safe harbor for tokens not to be classified as "investment contracts," and the CFTC followed up in October, with Selig stating that he would utilize existing statutory authority to advance cryptocurrency regulation through proposed rules regarding exchanges; Atkins also mentioned on October 2 that more regulatory proposals would be forthcoming.On October 5, the Financial Times published a commentary by Robin Wigglesworth, pointing out that with only two commissioners, if one needs to recuse themselves or is unable to perform their duties, a single commissioner can pass formal rules applicable to a securities market worth trillions of dollars. Uyeda subsequently responded in the Financial Times, stating that the SEC's commitment to its mission has not changed, and the rule modification merely clarifies that when all but one commissioner must recuse themselves, the commission can still constitute a quorum.

According to The Block, Chicago Mercantile Exchange CEO Terrence Duffy stated that the U.S. Commodity Futures Trading Commission (CFTC) is facing an issue of "overreach" in its attempt to expand regulatory authority over prediction markets, and the related regulatory disputes may ultimately reach the U.S. Supreme Court.Duffy mentioned during the DC Fintech Week event on Tuesday that the struggle for regulatory authority over prediction markets could evolve into a legal battle between state governments, tribal governments, and the federal government, stating, "This will go to the Supreme Court, and I believe state governments and tribal governments will have the advantage."

According to South Korean media etoday, the Financial Intelligence Unit (FIU) of the Financial Services Commission of South Korea stated that the Korea Communications Commission has decided to implement domestic access blocking or termination measures against 27 virtual asset operators' websites, including KuCoin, MEXC, BingX, Phemex, XT.com, Bitrue, CoinW, Poloniex, BTCC, and BitMart, which have not reported in accordance with the law.This initiative expands the scope of restrictions on unreported operators from mobile application markets to internet web pages.

The cross-chain exchange protocol THORChain officially announced that its native token RUNE has been 100% unlocked. The official statement indicated that the supply of RUNE has been continuously decreasing, starting with 1 billion tokens, which later dropped to 500 million. In May, based on ADR-023, 64.4 million RUNE were destroyed from reserves, further reducing the supply to 360 million.The official also introduced the system's revenue distribution. Nodes must bind RUNE to ensure the security of THORChain and receive 59% of the system's revenue, which comes from the fees paid by users during cross-chain exchanges. An additional 20% flows into the protocol's own liquidity, and every 3 days, the protocol deposits RUNE into the liquidity pool with the highest relative depth of fees, half of which is retained in the form of RUNE and held by THORChain.

Ledger Support released an update stating that it has confirmed the presence of unauthorized hardware implants in the device of one affected user. They are currently contacting the affected user and continuing to investigate the matter. Ledger is calling on anyone with information to provide leads and has stated that it is cooperating with relevant law enforcement agencies to hold those involved accountable. As a precaution, CryptoBilis has confirmed the suspension of sales of all hardware wallet inventory until the investigation is complete, and Ledger is actively communicating with them regarding follow-up measures.Ledger stated that there are currently no signs that its security infrastructure, systems, or services have been compromised. For users who purchased Ledger devices from this dealer, if the initialization setup has not yet been completed, it is advised not to start the setup; if the setup has been completed, they should consider transferring assets to a new Ledger signing device using new recovery phrases.Ledger emphasizes that security threats are constantly evolving, and the company is continuously improving security measures and advancing more sophisticated tamper-proof solutions. It also reminds users to be vigilant against scams that take advantage of this situation and to obtain the latest information only through official Ledger channels. Ledger will not ask users for their 24-word recovery phrase.