revoke

Revoke.cash напоминает, что в связи с инцидентом безопасности Magic Eden на прошлой неделе, Revoke.cash рекомендует пользователям перейти на страницу своего аккаунта в модуле Auto-Revoking и проверить, есть ли желтые предупреждающие значки для каждой сети; если есть, необходимо сначала восстановить этот адрес как обычный аккаунт в других кошельках, а затем обновить его до смарт-аккаунта через MetaMask.Кроме того, пользователи должны подтвердить, что все используемые сети включены, и убедиться, что каждый кошелек в подписке имеет отдельные соответствующие разрешения. Revoke.cash добавляет, что пользователи Ultimate подписки должны подтвердить, что кошелек соответствует двум условиям, чтобы функция Auto-Revoking могла нормально защищать активы: во-первых, необходимо предоставить этому кошельку разрешение на Auto-Revoking в MetaMask; во-вторых, этот кошелек должен быть обновлен до смарт-аккаунта MetaMask в соответствующей сети. Обычно второй шаг выполняется автоматически в процессе авторизации, но если ранее этот адрес был обновлен до смарт-аккаунта через другие кошельки, обновление может не сработать.

Revoke.cash сообщает, что у платежного процессора Limit Break существует известная уязвимость, пользователи, которые ранее торговали NFT на рынке Magic Eden на Ethereum, могут по-прежнему иметь соответствующие разрешения на контракты.Эта уязвимость была устранена белыми хакерами, исследователем безопасности 0xQuit, в настоящее время ожидается, что активы NFT не пострадали, но пользователям все же следует проверить и отозвать затронутые разрешения, чтобы снизить последующие риски.

Celsius founder Alex Mashinsky submitted a motion to a New York court seeking to overturn his 12-year sentence for fraud and market manipulation. The documents show that Mashinsky chose to represent himself (pro se) after his lawyer withdrew, stating that his lawyer "stopped communicating with him," forcing him to submit documents to the court personally. He claims that there was "ineffective legal representation" in his previous defense and invokes the "fruit of the poisonous tree" doctrine to question the legality of some evidence in the case.Mashinsky also accused Sam Bankman-Fried of attempting to "destroy Celsius" in the submitted materials and attributed market manipulation related to the CEL token to FTX. Additionally, he publicly shared text messages with former Celsius Chief Revenue Officer Roni Cohen-Pavon, claiming that the latter had attempted a "hostile takeover" of the company. In 2025, Mashinsky pleaded guilty to commodity fraud and securities fraud and was sentenced to forfeit $48 million, while also required to pay $10 million in settlement to the Federal Trade Commission. Cohen-Pavon, who previously assisted the prosecution as a witness, has been sentenced to "time served" and paid over $1 million in fines.

The U.S. Commodity Futures Trading Commission (CFTC) announced on Tuesday that it has jointly filed a motion with Gemini Trust Company LLC in the U.S. District Court for the Southern District of New York, requesting the dismissal of a previous judgment against Gemini.The case was originally filed in June 2022, and the parties reached a consent order in January 2025. After a comprehensive review, the CFTC concluded that the lawsuit should not have been filed and would not be filed under current enforcement standards.The review identified six major issues: the complaint was primarily based on statements from a whistleblower of questionable credibility; the investigation targeted Gemini as a victim of fraud rather than the alleged fraudster; there were serious doubts about the strength of the evidence against Gemini; relevant supporting materials were concealed and not submitted to the commissioners during the CFTC's vote on the complaint; the litigation team invoked deliberative process privilege to prevent Gemini from obtaining evidence necessary for its defense; and personnel improperly used CFTC regulatory power to create leverage for settlement.The CFTC determined that continuing to enforce the forward-looking provisions of the consent order is neither consistent with its mission nor in the public interest, and that the non-forward-looking provisions of the consent order (such as civil penalties) have been fulfilled. The parties jointly request the court to vacate the remaining forward-looking provisions.

According to Bitcoin.com, the High Court of Windhoek, Namibia, revoked the bail of 8 absent defendants in a cryptocurrency fraud and human trafficking case and confiscated approximately $29,800 in bail money. The prosecution stated that the 8 individuals include 6 Chinese nationals, 1 Vanuatu national, and 1 Singaporean national, with 6 Chinese suspects tracked down to China. Namibian authorities have requested assistance from Interpol to locate them.The criminal group operated under a front company called Raylon Investments from December 2022 to October 2023. The group is suspected of recruiting unemployed Namibians and forcing them into labor. The state government stated that these employees were compelled to create fake social media accounts impersonating women from Europe and the United States to lure international victims into romantic relationships. Once trust was established, victims were manipulated into transferring money to cryptocurrency accounts controlled by the criminal group. Investigators estimate that the group stole approximately $267,800 from victims worldwide.

According to Bloomberg, the Monetary Authority of Singapore has announced the revocation of the major payment institution (MPI) license of the cryptocurrency payment company Bsquared Technology. The reasons include flaws in risk management and conflict of interest policies, violations of outsourcing management regulations, and providing false or misleading information to regulators multiple times during the license application and on-site inspection processes.Bsquared obtained a digital payment token service license 16 months ago and is now required to submit a closure certificate issued by an auditing firm to confirm that all customer funds have been returned. The MAS stated that it is further reviewing the responsibilities of the company's key management personnel. Currently, only 37 institutions in Singapore are approved to provide digital payment token services, and license revocations are relatively rare.

According to CoinDesk, the U.S. Securities and Exchange Commission (SEC) has rescinded the "no denial" rule that has been in place for about 50 years. The new rule allows defendants who reach a settlement with the SEC to publicly question or deny the allegations made by the SEC in enforcement actions. Previously, defendants were typically restricted from publicly rebutting the relevant allegations after signing a settlement agreement.

According to Decrypt, the closed cryptocurrency exchange Bittrex has filed a motion to a federal judge to withdraw its settlement agreement with the U.S. SEC and is requesting the SEC to return the $24 million fine.Bittrex was accused by the SEC of offering unregistered securities trading during the Biden administration, ultimately reaching a settlement and paying a fine, and then closed due to the "current U.S. regulatory and economic environment" that made it impossible to continue operations. Bittrex's lawyers pointed out in the latest filing that the SEC's stance on cryptocurrency regulation has fundamentally changed since the Trump administration took office, acknowledging that the legal theory that most tokens are considered securities was incorrect, that the enforcement strategy has been flawed from the beginning, and that almost all lawsuits and investigations against cryptocurrency companies have been withdrawn.Bittrex is asking the judge to order the return of the funds before the SEC transfers the money to the Treasury for compensation. In March of this year, the SEC initiated the process to transfer the fine to the Treasury.

AMM infrastructure Ekubo posted on platform X that a security incident occurred with the Swap routing contract on the EVM chain, but liquidity providers were not affected, and Starknet was not affected. The team is investigating the scope of the incident and recommends that users immediately revoke all authorizations for the affected addresses.The affected addresses include the V2 and V3 contract addresses on Ethereum, as well as the V3 contract address on Arbitrum. The team is preparing a post-incident analysis report and reminds users to be cautious of links claiming to be related to the Ekubo Protocol or the vulnerability.

The token permission query tool Revoke.cash has launched a portal for checking affected addresses of CoW Swap. Users can enter their addresses in the portal to check if there are any unrevoked authorizations affecting them.Previously, CoW Swap's technical lead Felix Leupold tweeted that the CoW Swap frontend has resumed online, and users can access it via swap.cow.finance. He reminded users that they should only authorize the original GPv2VaultRelayer contract address.

The South Korean court ruled on the administrative lawsuit filed by Upbit operator Dunamu against the Financial Intelligence Unit (FIU), deciding to revoke the previous three-month partial business suspension. The court stated that, in the absence of clear enforcement guidelines from the regulatory agency, Dunamu had taken measures, including customer commitment letters and internal monitoring, to fulfill its reasonable obligations.Although there is still controversy over whether the relevant measures are sufficient to completely block transactions with unreported operators, they are not enough to support the previous penalty decision.

The DeFi protocol Neutrl announced on platform X that its frontend is suspected to have been attacked, and the team is conducting an urgent investigation. For security reasons, the official advises users not to interact with the website until further updates are released.At the same time, Neutrl reminds users to promptly go to Revoke.cash to revoke Permit2 authorizations for the relevant addresses, and also reminds users to check and revoke authorizations for other suspicious addresses to reduce potential asset risks.

According to Decrypt, the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) has revoked the registrations of 23 cryptocurrency service providers in an enforcement action.The Canadian Minister of Finance stated that this crackdown marks a "significant acceleration in action," and the government will maintain this momentum. Among the affected businesses, two operate entirely in foreign jurisdictions. The FINTRAC website indicates that registrations may be revoked for various compliance failures, including failure to respond to information requests in a timely manner, not meeting registration eligibility, and failure to update records promptly.Prior to this enforcement action, Canada had been taking an increasingly strict stance on cryptocurrency compliance. The Minister of Finance stated that the government will continue to monitor and take new measures to address the risks posed by cryptocurrency businesses (such as cryptocurrency MSBs and crypto ATMs).

According to Decrypt, Canada's financial intelligence agency, the Financial Transactions and Reports Analysis Centre (FINTRAC), took centralized enforcement action on Tuesday against 23 money service businesses (MSBs) that provide cryptocurrency-related services, revoking all of their registrations at once, marking a further escalation of Canada's anti-money laundering regulatory efforts.Canadian Finance Minister François-Philippe Champagne issued a statement characterizing this action as a "significant acceleration of enforcement pace," and stated that the government will continue to maintain this momentum. Among the revoked registrations, two companies are from abroad—Finast, registered in Slovakia, and Commerce Plex, registered in the UK, both of which also operate traditional currency exchange and transfer services.According to FINTRAC's official website, the reasons for the revocation of registration include: failure to respond to information requests in a timely manner, non-compliance with registration eligibility conditions, and failure to update relevant records in a timely manner, among other compliance violations.

According to Decrypt, Bitcoin Depot, the world's largest Bitcoin ATM operator, has had its money transmission license urgently suspended by regulators in Connecticut for several reasons: overcharging more than 500 users approximately $150,000 in fees (exceeding the 15% cap within the state), failing to fully refund scam victims, and insufficient compliance disclosures.The company must immediately cease operations in the state and shut down all ATMs. Meanwhile, Bitcoin Depot also expects to disclose "significant weaknesses" in internal controls in its annual report. Analysts point out that this suspension is a "structural blow" to Bitcoin Depot and indicates that the Bitcoin ATM industry as a whole will face stricter regulatory scrutiny.

In response to on-chain detective ZachXBT's disclosure that "some employees are suspected of abusing their authority to track user wallets for insider trading," Axiom posted a response on platform X stating: "We are shocked and disappointed to learn that someone on the team has abused internal customer support tools to query user wallets. Access to these tools has been revoked, and we will continue to investigate and hold those responsible accountable. This behavior does not represent the team, which has always been committed to putting users first."

According to the announcement from Paradex, the internal system of the Mithril trading bot was breached by attackers, resulting in the leakage of approximately 57 user sub-keys. Although these sub-keys cannot be used for withdrawals, they have trading permissions for accounts and are commonly used to connect third-party applications with trading bots. Paradex has suspended all XP transfers and revoked the sub-keys associated with Mithril.Affected users are limited to accounts that have authorized the Mithril bot. The official reminder advises users to be cautious when authorizing third-party services and to assess the risks themselves.

X product lead and Solana ecosystem advisor Nikita Bier stated: "We are revising the developer API policy: applications that incentivize users to post on X (the so-called InfoFi) will no longer be allowed. Such mechanisms have already caused a significant amount of low-quality AI content and reply spam on the platform.We have revoked the API access for these applications, so your X experience will soon begin to improve (once the bots realize that posting is no longer profitable).If your developer account has been terminated as a result, please reach out to us proactively, and we will assist you in migrating your business to Threads and Bluesky."As a result of this news, KAITO briefly dropped over 15%.

PayFi protocol Huma Finance posted on platform X, stating that some users reported that their Vanguard badges were revoked after the second quarter airdrop event went live. In fact, holders need to continuously meet the relevant staking requirements to retain their badges, including holding 10,000 HUMA tokens or staking 100% of the received airdrop tokens, but some users did not fully understand this ongoing requirement.Currently, Huma Finance has temporarily restored the Vanguard badges and set a grace period, with a deadline of January 5, 2026, 00:00 (UTC).