BTC $64,517.44 -2.14%
ETH $1,813.43 -1.35%
BNB $590.67 +0.11%
XRP $0.9492 -0.67%
SOL $71.20 -1.93%
TRX $0.3051 -0.60%
DOGE $0.0585 -2.83%
ADA $0.1531 -1.28%
BCH $207.62 +0.11%
LINK $9.19 +0.45%
HYPE $66.26 +1.06%
AAVE $106.32 +3.84%
SUI $0.7190 -1.37%
XLM $0.1380 +0.81%
ZEC $895.12 +4.09%
AAPL $356.44 +0.19%
AMZN $263.42 +0.37%
GOOGL $291.50 +0.49%
MSFT $519.96 +0.03%
META $633.16 -0.17%
NVDA $160.01 +0.37%
TSLA $387.06 +0.54%
SNDK $855.36 +1.13%
INTC $57.64 +1.03%
SPCX $138.76 +2.77%
MU $756.68 +0.32%
AMD $520.22 +0.50%
BTC $64,517.44 -2.14%
ETH $1,813.43 -1.35%
BNB $590.67 +0.11%
XRP $0.9492 -0.67%
SOL $71.20 -1.93%
TRX $0.3051 -0.60%
DOGE $0.0585 -2.83%
ADA $0.1531 -1.28%
BCH $207.62 +0.11%
LINK $9.19 +0.45%
HYPE $66.26 +1.06%
AAVE $106.32 +3.84%
SUI $0.7190 -1.37%
XLM $0.1380 +0.81%
ZEC $895.12 +4.09%
AAPL $356.44 +0.19%
AMZN $263.42 +0.37%
GOOGL $291.50 +0.49%
MSFT $519.96 +0.03%
META $633.16 -0.17%
NVDA $160.01 +0.37%
TSLA $387.06 +0.54%
SNDK $855.36 +1.13%
INTC $57.64 +1.03%
SPCX $138.76 +2.77%
MU $756.68 +0.32%
AMD $520.22 +0.50%

vice

All
Article
Flash

Financial Supervisory Service of Korea: Plans to restrict active-duty military personnel from applying for high-interest small loans within the year

According to a report by the Korean News Agency, the Financial Supervisory Service (FSS) of South Korea announced that it will collaborate with the Financial Services Commission and the banking industry to promote several new financial consumer protection regulations. These include completing the establishment of standard business norms by the end of the year and fully restricting microcredit institutions from issuing general credit loans to active-duty military personnel.Data shows that the loan scale for active-duty military personnel from the top 30 credit institutions registered with the Financial Services Commission in South Korea has surged from 350 million Korean won at the end of 2022 to 24.2 billion Korean won (approximately 17 million USD) by the end of 2025. South Korean regulators pointed out that some active-duty military personnel blindly invest borrowed funds into high-risk investments such as virtual assets (cryptocurrencies) and online gambling, which is one of the main reasons for excessive debt.In addition, the Financial Supervisory Service of South Korea will also promote the expansion of flexible banking outlet operations and shorten the notification period for long-unused prepaid electronic payment accounts from 1 year to 3 months.

Coinone: Customer service outsourcing vendor's server was hacked, user inquiry information leaked

The South Korean cryptocurrency exchange Coinone announced that in the early hours of November 12, its customer service outsourcing partner MetaM's server was externally breached, resulting in the leakage of some customers' personal information left during chat or phone consultations.Coinone received a report from the outsourcing partner around 9:20 AM on the same day and disclosed the matter on November 15. Users without customer service consultation records are not affected by this incident. Coinone stated that its account, trading, and wallet systems operate independently from the outsourcing partner's server, and no direct intrusion into these systems has been found so far.The potentially leaked information includes names, phone numbers, emails, birth dates, account numbers, passwords, Korean resident registration numbers, document issuance dates, addresses, wallet addresses, and transaction hashes (TXID). The actual leaked items vary based on the information provided by users during consultations. Coinone has not disclosed the number of affected individuals and will inform users through separate notifications or inquiry services.Coinone has blocked the illegal access path, switched customer service to email consultations, and strengthened monitoring of abnormal logins and transactions. The platform has reported to the relevant regulatory authorities in South Korea and reminded users who provided passwords during customer service consultations to change their passwords on Coinone and other websites using the same password as soon as possible, and to be wary of phishing calls, texts, and emails impersonating customer service.

first_img Apache has a serious vulnerability, and the HTTP/2 service may be subject to remote code execution

A serious security vulnerability has been found in the open-source server software Apache HTTP Server. Attackers can exploit this vulnerability to corrupt server memory by crafting requests when they have access to the affected service, allowing them to execute code with the privileges of the web service process. The vulnerability is located in the HTTP/2 module, and attackers can trigger a concurrent synchronization flaw without authentication, leading to heap memory corruption. If successfully exploited, it allows code execution with the privileges of the Apache worker process and access to data that the process can read.The affected range includes Apache HTTP Server versions 2.4.55 to 2.4.70, as well as mod_h2 versions 2.0.8 to 2.0.42 used separately from GitHub. Red Hat stated that the risk involves servers that enable HTTP/2 through the Protocols directive, including H2 for encrypted connections and H2C for plaintext connections. Administrators need to check both global configurations and individual virtual host configurations; if a CDN or reverse proxy is deployed on the website frontend, it is also necessary to check whether the Apache origin server can be accessed directly via HTTP/2.Apache released HTTP Server 2.4.71 on November 11, 2026, and it is recommended that websites using Apache upgrade immediately. If an upgrade cannot be performed temporarily, HTTP/2 can be disabled as a temporary measure. The issue lies in the assign_headers() function of mod_http2. HTTP/2 allows multiple requests to be processed concurrently over the same connection, and the affected code has a synchronization flaw when handling shared resources, which may lead to heap memory corruption. This vulnerability was discovered by the Anthropic OSS Scanner open-source project and the Google Cloud vulnerability research team. Anthropic reported it to the Apache Foundation on October 26, and the Google Cloud team reported the same vulnerability on November 3.

first_img The New York Department of Financial Services issued advertising marketing guidelines for licensed cryptocurrency entities

According to The Block, the New York State Department of Financial Services has issued new guidelines for advertising and marketing requirements for licensed cryptocurrency entities in the state, which include avoiding misleading or deceptive content. Acting Superintendent Kaitlin Asrow stated in a press release that today's guidelines reinforce the commitment to protecting New York residents and ensure that advertising and marketing practices in the virtual currency space are clear, comprehensive, and accessible.The New York State Department of Financial Services announced on the same day that these guidelines apply to virtual currency entities licensed or chartered by the department, requiring them to establish and implement policies and procedures for advertising and marketing materials related to virtual currency products, services, and activities, with a focus on content accuracy, clear disclosures, and governance and review processes. Relevant entities must update their policies and procedures according to the guidelines by May 10, 2027, review them at least once a year, and maintain records for regulatory inspection. The Department of Financial Services will assess the implementation and effectiveness of these policies and procedures through examinations and ongoing supervision.Common practices listed in the guidelines include: reviewing marketing claims to ensure they fairly present products, services, or activities, are supported by evidence and verifiable, and do not contain exaggerated or false statements about performance or regulatory status; customer disclosures should be clear, prominent, easily understandable to the general audience, and clearly identify the entity providing the products, services, or activities; establishing governance review processes for advertising and marketing materials, designating responsible parties, conducting due diligence on third-party promoters, and promptly monitoring and addressing instances of fraudulent or improper use of their name or brand by others.

In October, the core CPI in the United States exceeded expectations for three consecutive months, with rising costs in energy, services, and AI increasing pressure for interest rate hikes

Inflation data for October in the United States sends multiple warning signals. The data shows that the core CPI rose by 0.3% month-on-month, higher than the market expectation of 0.2%, exceeding expectations for the third consecutive month; the overall CPI rose by 0.4% month-on-month, also above expectations. The impact of rising energy prices is spreading to areas such as food and transportation, and service inflation remains robust, further complicating the Federal Reserve's efforts to control inflation.Specifically, food prices in the U.S. rose by 0.5% month-on-month in October, with grocery prices recording the largest monthly increase since April; urban transportation service prices saw the largest monthly increase since 2020, and prices for airline tickets and delivery services also increased. Additionally, service prices excluding energy and housing rents rose by 0.4% month-on-month, while owners' equivalent rent increased by 0.3%.AI investments are bringing new cost pressures. Over the past three months, the annualized price increase for computers and peripheral devices in the U.S. reached 25%, and electricity prices rose by 0.9% month-on-month in October, marking the largest increase in six months. Morgan Stanley estimates that AI-related factors have contributed about 6 basis points to the core CPI this year, with the current impact still relatively limited, but as data center investments expand, related pressures may rise further.In terms of monetary policy, Chicago Fed President Goolsbee described the latest inflation data as approaching an alarming level. Fed Governor Waller previously stated that if the core CPI month-on-month increase reaches 0.3% or higher, the December meeting should consider raising interest rates by 50 basis points. Goldman Sachs has included a forecast for an additional 25 basis point increase in March 2027, expecting that the target range for the federal funds rate will rise to 4.25% to 4.50%. However, some economists warn that there is a lag in the transmission of energy prices, and over-reliance on current data may lead to excessive tightening of monetary policy.

DTCC: Tokenization services will integrate with Solana, scheduled to launch in the second half of 2027

According to PR Newswire, the Depository Trust & Clearing Corporation (DTCC) announced plans to integrate its Tokenization Service (DTCC Tokenization Service, DTS) with Solana's Layer 1 network, allowing eligible assets held by DTC to be converted into token form and to gain corresponding token lifecycle functionalities. This integration is expected to go live in the second half of 2027.DTS was officially launched on October 28, and this integration with Solana is an extension of its "multi-chain strategy." DTCC stated that after the integration, DTC tokenized assets will retain the same investor protections, ownership rights, and regulatory safeguards as traditional held securities, while enhancing liquidity, collateral liquidity, and capital efficiency.DTCC President and CEO Frank La Salla stated that this brings regulated DTC tokenized securities to another mainstream blockchain ecosystem; Brian Steele, President of Clearing and Securities Services, emphasized that the service is a "secure, interoperable, and market-neutral" infrastructure; Nadine Chakar, Global Head of Digital Assets at DTCC, mentioned that interoperability is key to the scalability of digital markets; Nick Ducoff, General Manager of Institutional Business at the Solana Foundation, stated that after the integration, tokenized securities can be settled and circulated like other on-chain assets.

first_img BitGo will include USDC in its institutional stablecoin minting and redemption services

According to The Block, digital asset infrastructure company BitGo announced that it has added minting and redemption features for USDC in its Go Account. This service is open to qualified clients of its subsidiary BitGo Bank & Trust, which is a digital asset trust bank regulated by the Office of the Comptroller of the Currency (OCC). Clients can initiate and monitor USDC orders on the BitGo platform or via API, and BitGo will process them through its Circle Mint account, charging a fixed fee disclosed before the client confirms the transaction.The service supports USDC on Ethereum, Solana, Base, Arbitrum, Polygon, Avalanche, HyperEVM, Monad, and Aptos, with specific availability depending on jurisdiction and account requirements. Eligible orders can be processed on-chain 24/7, but fiat deposits and withdrawals must still adhere to banking processing windows and settlement times.BitGo launched the Mint service for the first time in April this year, initially supporting USD1 from World Liberty Financial and SoFiUSD from SoFi Bank, allowing institutions to access related assets without establishing separate relationships with each issuer.BitGo CEO and co-founder Mike Belshe stated that the more assets institutions use, the greater the workload for managing independent accounts and relationships with issuers. The company is enabling clients to access more assets through a single BitGo account based on the infrastructure they have already used.Just a week prior, BitGo launched BitGo Global Markets, led by former NYDIG executive Pete Janney, offering institutional trading and financial services such as crypto collateral financing, options, and swaps; this business stems from the acquisition of NYDIG's institutional trading business on August 27, with about 30 employees joining as a result.
app_icon
ChainCatcher Building the Web3 world with innovations.