wallets

Zhao Changpeng stated that no cryptocurrency wallet can achieve absolute security, and there is no software without vulnerabilities or technology that is 100% secure.He pointed out that any action carries risks, and so does inaction; it is inevitable to encounter problems, setbacks, and challenges that need to be addressed during the process. Zhao Changpeng advised users to stay informed about the latest developments, manage risks effectively, and actively solve problems.

According to monitoring by Lookonchain, another 4 newly created wallets received a total of 1,127 BTC from the cryptocurrency market maker Wintermute, worth approximately 93.45 million USD. Based on the transfer amount, the average price of BTC is about 82,900 USD.

According to Lookonchain, three newly created wallets have received 1,090 BTC from the market maker Wintermute, worth 90.38 million USD.

Layer-1 blockchain Qubic has restarted the network and initiated the fund recovery process. Previously, attackers exploited a wallet seed vulnerability to transfer approximately 1.4 million USD worth of QU tokens from 1,404 accounts. The network validator Computors has approved the recovery plan, and affected users can submit claims, with a deadline of May 1, 2027.The Qubic block explorer shows that the network resumed processing ticks on October 19 at 20:00, with progress exceeding the previously paused 85,371,949. The vulnerability affects wallet seeds generated by certain Apple devices and browsers. Qubic recommends using version 4.26.4 or above to create new wallets and to transfer funds as soon as possible.

Digital hardware wallet manufacturer NGRAVE disclosed that attackers hijacked the third-party notification service used by its LIQUID companion app and sent false security alerts to users, resulting in approximately 70 wallet addresses being stolen across 4 blockchains, amounting to about 2.56 million dollars. Among these, the loss in Bitcoin was approximately 1.77 million dollars, XRP about 454,000 dollars, Ethereum assets about 316,000 dollars, and Stellar about 18,000 dollars.The attackers induced users to click on a counterfeit website and enter their 24-word recovery phrase or Perfect Key, subsequently using automated scripts to transfer assets within minutes. NGRAVE stated that the ZERO hardware wallet and private keys were not directly compromised; the victims voluntarily provided their recovery credentials during the phishing process. Unauthorized access may have begun on October 11. After obtaining an access key, the attackers acquired a broader access key and sent false notifications on October 17; NGRAVE detected anomalies about 1 minute after the notifications appeared, but the first wallet was emptied 6 minutes later, and the notification system was shut down that evening.NGRAVE's CEO stated that the company failed to fulfill the most basic security responsibilities of a cryptocurrency security firm and mentioned that affected keys have been replaced, with new dual approval, domain restrictions, and emergency shutdown mechanisms implemented. The company also reminded affected users to create new wallets and contact the support team, as some device information, wallet activity, IP addresses, and approximate locations may have been exposed.

According to Bitcoin News monitoring, two wallets that have held Bitcoin for 12 and 13 years without any transfers moved their entire balance this weekend, totaling approximately 416.7 BTC, worth about 33.8 million USD, and sent it to the same address.According to Onchain Lens, when these Bitcoins were initially received, the Bitcoin prices were close to 127 USD and 355 USD, with returns of approximately 638 times and 229 times, respectively, and the initial total value was about 105,000 USD.

White Whale Labs released a study titled "The Audit Of The Memecoin Casino," stating that since late August, it has recorded all Pump.fun and Stonk new coin transactions on Solana, covering over 1 million liquidity pools and 7.7 million wallets with 384 million exchanges, with data exceeding 56 GB and 820 million rows. This dataset adds 18 to 25 million transactions daily, with up to about 1 million wallets and over 60,000 newly issued projects.The study claims that among the coins that have had real transactions, about one-tenth will double within the following 24 hours. Among 22.8 million first purchases within two weeks, 17% doubled before a 40% drop; using a doubling take-profit and a 40% drop stop-loss while accounting for costs, the average loss per transaction is about 19%. Clusters consisting of 450 to 2000 wallets often concentrate their purchases within one to two minutes after going live, with the doubling ratio for related coins being 28% to 46%, and their entry doubling before a 40% drop is 50% to 60%, higher than the 17% of other wallets. The daily count of groups tracked is between 9 and 33.Copy trading tests show that entering two minutes behind large clusters results in a single coin loss of 41% for 93 coins, with a median drop of 95%; tracking groups with positive records still shows a single coin loss of 11%, and backtesting a single wallet shows a single transaction loss of 20%. A few tight-knit groups made about 10% profit on 16 coins. Neural networks increased the doubling ratio from about 10% to 26%, but out of 771 selections over 8 days, daily results were negative, with an average loss of about 11%, a median drop of 45%, and 55% triggering stop-loss within 24 hours. White Whale Labs stated that after spending thousands of dollars on API, VPS, and model costs, no monetizable advantage was found, and they believe that meme coin trading is almost entirely driven by cluster wallets.

The security organization SlowMist has released an in-depth threat intelligence report on the DarkSword Trojan backend and iOS attack chain. The report tracks the evolution of this attack infrastructure and reveals its high danger to cryptocurrency asset users.According to SlowMist's analysis, after the relevant exploit code was made public in March 2026, DarkSword-PROV2 appeared on GitHub in July, and its attack infrastructure was observed to be operational by late September.The SlowMist team not only tracked its online infrastructure but also correlated its management panel with public GitHub repositories, dissecting the exploit code, delivery chain, and post-compromise capabilities. The report highlighted several key findings of this attack framework: a highly automated complete attack pipeline that integrates vulnerability delivery, device and data collection, data theft, and cryptocurrency wallet fund aggregation functions.The extensive and deep data theft capabilities of this toolkit target not only keychains, files, and information but also specifically cryptocurrency wallet data, with the ability to decrypt wallet data and aggregate funds. Although the toolkit claims to support iOS 13 and above, code analysis confirms that its actual effective exploit window is concentrated in the iOS 18.6--18.7.2 and iOS 26--26.1 version ranges. The publicly available vulnerability components have been weaponized and integrated into a deployable attack framework, significantly lowering the threshold for launching complex iOS attacks.In response to this threat, SlowMist has provided clear security recommendations. Users should keep their iOS systems updated and avoid clicking on untrusted links, as merely opening a malicious page in the Safari browser could trigger vulnerabilities. If a device has accessed suspicious landing pages, users should consider their mnemonic phrases and private keys as compromised and must create new wallets and transfer assets using a clean device that has never accessed that page.Additionally, users should thoroughly check for abnormal transactions and token authorizations across various chains and immediately revoke unnecessary authorizations.

Qubic announced that between 23:42 yesterday and 01:26 today UTC, attackers exploited a vulnerability in the randomness of some wallet Seeds, accessing and transferring approximately 29.4 trillion QU from 1,404 Qubic wallets. The issue lies in the Seed generation mechanism, not in the Qubic protocol itself.The affected Seeds include those created in any browser on iPhone or iPad before October 18, 2026, those created in Mac Safari on the same date, and those created through the Qubic iOS App before July 2025. The network has been paused at tick 85,371,949, with 87.1% of the stolen funds remaining on the Qubic network and frozen, while the remaining 12.9% has been transferred to MEXC, and the related receiving accounts have also been frozen.Qubic stated that the Seed generation issue has been fixed in version 4.26.4, and subsequent handling will be determined by the Computor quorum according to network rules. A complete technical report will be released after the fund recovery plan is finalized.

According to Onchain Lens monitoring, two whale wallets that have been dormant for 12 to 13 years transferred a total of 416.6941 BTC (approximately 33.82 million USD) to the same address, including:The wallet dormant for 13 years transferred 167.8402 BTC, worth about 13.62 million USD;The wallet dormant for 12 years transferred 248.8539 BTC, worth about 20.20 million USD.These BTC were initially valued at approximately 105,400 USD and have currently appreciated by about 33.71 million USD.

Turkish Minister of Justice Akın Gürlek confirmed on Saturday that Ethereum ecosystem token Hex and PulseChain founder Richard Heart were detained in Istanbul. Gürlek stated on the X platform that Heart, whose real name is Richard James Schueler, was detained along with his wife during an operation in the Beşiktaş district of Istanbul on Wednesday, and the police subsequently detained three individuals confirmed to be his bodyguards. The operation was carried out by the Istanbul Chief Prosecutor's Office in conjunction with the city's police intelligence and financial crimes department, with support from Turkey's intelligence agency MİT.Gürlek indicated that the police conducted searches at 15 addresses in the Beşiktaş, Üsküdar, and Sarıyer districts, seizing $7.15 million in cash, six cold wallets, 160,000 Turkish lira, 28 watches, 97 pieces of jewelry, 300 bags, and 19 graphics cards, while also confiscating four long-barreled rifles, three unlicensed handguns, and 1,400 rounds of ammunition. Gürlek stated that judicial procedures and the examination of seized items are still ongoing. Turkey's state news agency Anadolu reported separately that the police seized nine vehicles registered under Heart's wife's name. According to CoinGecko data, Hex has dropped about 14% in the past 24 hours.Gürlek linked Heart's red notice to the $1 billion cryptocurrency fraud charges involving the United States and Finland. The notice was issued in December 2024 at the request of Finnish authorities, who sought his arrest on charges of serious tax evasion and assault. In the United States, a federal judge dismissed the Securities and Exchange Commission's lawsuit against Heart in February 2025 on jurisdictional grounds, and the agency decided not to refile the lawsuit in April of that year.

According to Onchain Lens monitoring, two dormant whales that had been inactive for 12 to 13 years transferred 416.6941 BTC to the same address. Among them, the wallet that had been dormant for 13 years transferred 167.8402 BTC, worth 13.62 million dollars; the wallet that had been dormant for 12 years transferred 248.8539 BTC, worth 20.20 million dollars.The original value of the aforementioned BTC was approximately 105,400 dollars, and its current value has increased by about 33.71 million dollars.

Santiment tweeted that the number of wallets holding between 10 to 10,000 bitcoins has reached 20,338, setting a new historical high. Despite the significant fluctuations in bitcoin prices during this period, the number of this group has shown strong growth since mid-July.Santiment believes that, based on historical experience, this group is closely related to the future price trends of bitcoin. When prices fluctuate, if more large holders enter this range, it indicates that wealthy investors still maintain confidence rather than choosing to exit during market weakness.

According to on-chain analyst Yu Jin's monitoring, two wallets belonging to the same entity transferred 14.48 million WLD to the exchange Binance 9 hours ago, worth 7.21 million USD.

According to monitoring by Lookonchain, Bitcoin treasury company Hut 8 holds 10,300 Bitcoins, valued at 846 million dollars, and is currently suspected of selling Bitcoin.The wallet associated with Hut 8 (bc1q...xqka) has deposited 1,589 Bitcoins, valued at 130 million dollars, to multiple exchanges in the past two days.

On October 12, the Central Bank of Russia clarified in its updated guidelines that individuals are not allowed to withdraw cryptocurrency from regulated digital accounts to self-custodied wallets. The Central Bank stated that this restriction is based on Article 31(9) of the new Russian cryptocurrency market law (Federal Law No. 282-FZ), which will take effect on September 1, 2026. Digital accounts are statutory accounts used to record crypto assets, and digital custodians are registered institutions that register and transfer these assets and provide access to wallet addresses.This restriction applies to the withdrawal of funds under the regulated custodial system in Russia. For withdrawals from ordinary investment accounts, the rules cover resident individuals and do not provide exemptions for qualified investors. According to Article 31, individuals who pass the required tests and receive risk disclosures can transfer cryptocurrency to wallets managed by legally authorized foreign custodians, which is different from withdrawing to personal wallets outside of institutional custody. The law also sets exceptions for foreign trade settlements and mining.The Central Bank also stated that transfers between individuals using addresses managed by digital custodians are not allowed, including transfers generated from transactions between individuals. The aforementioned provisions belong to the general cryptocurrency market law and are not rules applicable only to participants in experimental projects. The Central Bank indicated that direct peer-to-peer transactions between individuals are only permitted until July 1, 2027, when Article 30(1) will take effect; thereafter, residents who are not authorized as intermediaries in the cryptocurrency market must complete transactions through or with the participation of authorized intermediaries, with optional channels including licensed brokers and operators of cryptocurrency exchanges listed in the Central Bank of Russia's registry.

According to Lookonchain monitoring, about 9 hours ago, 3 wallet addresses jointly sold 2.9 billion $PUMP at an average price of $0.00434, totaling 12.58 million $USDC.

Crypto KOL Qwerty posted that he plans to take a break for a while. He mentioned that he has started to treat trading as a role-playing game, playing the role of Qwerty, and he no longer feels like himself while trading.Qwerty stated that he has emptied all public wallets and will not be active for a long time. Previously, after his call "The Bull is Coming" swept the globe, he gained significant attention, and on October 15, his "The Bull is Coming" single coin profit ranked second on the FOMO platform.

Binance founder Zhao Changpeng posted on X stating: In the future, all hardware wallets must adopt transparent cases.

The on-chain data analysis platform Bubblemaps accused that wallets associated with Anglio traded in advance before recommendations were published on Pump.fun, estimating a profit of about $50,000 from trades and approximately $80,000 in recommendation rewards. Bubblemaps presents the relationships between on-chain wallets through visual bubble charts, used to identify the connections between token holders and the flow of funds.This accusation points to the recommendation behavior on Pump.fun, where certain accounts built positions before the tokens were publicly recommended. Meanwhile, Pump.fun is shifting its reward payment mechanism to focus on the earnings of followers, distributing rewards based on the returns of followers.