revoke

Revoke.cash phát văn nhắc, do ảnh hưởng từ sự kiện an ninh Magic Eden tuần trước, Revoke.cash khuyên người dùng nên truy cập vào trang tài khoản của mình trong mô-đun Auto-Revoking, kiểm tra xem có xuất hiện biểu tượng cảnh báo màu vàng nào trên các mạng hay không; nếu có, cần phải khôi phục địa chỉ đó thành tài khoản thông thường trong các ứng dụng ví khác trước khi nâng cấp thành tài khoản thông minh qua MetaMask.Ngoài ra, người dùng cũng nên xác nhận đã bật tất cả các mạng đang sử dụng và đảm bảo rằng mỗi ví trong danh sách đăng ký đều được cấp quyền riêng biệt. Revoke.cash bổ sung rằng, người dùng đăng ký Ultimate cần xác nhận ví của họ đáp ứng hai điều kiện, thì chức năng Auto-Revoking mới có thể bảo vệ tài sản một cách bình thường: thứ nhất là cấp quyền Auto-Revoking cho ví đó trong MetaMask; thứ hai là ví đó đã được nâng cấp thành tài khoản thông minh MetaMask trên mạng tương ứng. Thông thường, bước thứ hai sẽ được hoàn thành tự động trong quá trình cấp quyền, nhưng nếu trước đó đã nâng cấp địa chỉ đó thành tài khoản thông minh qua các ứng dụng ví khác, việc nâng cấp có thể sẽ thất bại.

Revoke.cash cho biết, bộ xử lý thanh toán của Limit Break có lỗ hổng đã biết, người dùng đã giao dịch NFT trên thị trường Magic Eden Ethereum có thể vẫn giữ quyền ủy quyền hợp đồng liên quan.Lỗ hổng này đã được nhà nghiên cứu an ninh mũ trắng 0xQuit xử lý, hiện tại tài sản NFT dự kiến không bị ảnh hưởng, nhưng người dùng vẫn nên kiểm tra và thu hồi quyền ủy quyền bị ảnh hưởng để giảm thiểu rủi ro sau này.

Celsius founder Alex Mashinsky submitted a motion to a New York court seeking to overturn his 12-year sentence for fraud and market manipulation. The documents show that Mashinsky chose to represent himself (pro se) after his lawyer withdrew, stating that his lawyer "stopped communicating with him," forcing him to submit documents to the court personally. He claims that there was "ineffective legal representation" in his previous defense and invokes the "fruit of the poisonous tree" doctrine to question the legality of some evidence in the case.Mashinsky also accused Sam Bankman-Fried of attempting to "destroy Celsius" in the submitted materials and attributed market manipulation related to the CEL token to FTX. Additionally, he publicly shared text messages with former Celsius Chief Revenue Officer Roni Cohen-Pavon, claiming that the latter had attempted a "hostile takeover" of the company. In 2025, Mashinsky pleaded guilty to commodity fraud and securities fraud and was sentenced to forfeit $48 million, while also required to pay $10 million in settlement to the Federal Trade Commission. Cohen-Pavon, who previously assisted the prosecution as a witness, has been sentenced to "time served" and paid over $1 million in fines.

The U.S. Commodity Futures Trading Commission (CFTC) announced on Tuesday that it has jointly filed a motion with Gemini Trust Company LLC in the U.S. District Court for the Southern District of New York, requesting the dismissal of a previous judgment against Gemini.The case was originally filed in June 2022, and the parties reached a consent order in January 2025. After a comprehensive review, the CFTC concluded that the lawsuit should not have been filed and would not be filed under current enforcement standards.The review identified six major issues: the complaint was primarily based on statements from a whistleblower of questionable credibility; the investigation targeted Gemini as a victim of fraud rather than the alleged fraudster; there were serious doubts about the strength of the evidence against Gemini; relevant supporting materials were concealed and not submitted to the commissioners during the CFTC's vote on the complaint; the litigation team invoked deliberative process privilege to prevent Gemini from obtaining evidence necessary for its defense; and personnel improperly used CFTC regulatory power to create leverage for settlement.The CFTC determined that continuing to enforce the forward-looking provisions of the consent order is neither consistent with its mission nor in the public interest, and that the non-forward-looking provisions of the consent order (such as civil penalties) have been fulfilled. The parties jointly request the court to vacate the remaining forward-looking provisions.

According to Bitcoin.com, the High Court of Windhoek, Namibia, revoked the bail of 8 absent defendants in a cryptocurrency fraud and human trafficking case and confiscated approximately $29,800 in bail money. The prosecution stated that the 8 individuals include 6 Chinese nationals, 1 Vanuatu national, and 1 Singaporean national, with 6 Chinese suspects tracked down to China. Namibian authorities have requested assistance from Interpol to locate them.The criminal group operated under a front company called Raylon Investments from December 2022 to October 2023. The group is suspected of recruiting unemployed Namibians and forcing them into labor. The state government stated that these employees were compelled to create fake social media accounts impersonating women from Europe and the United States to lure international victims into romantic relationships. Once trust was established, victims were manipulated into transferring money to cryptocurrency accounts controlled by the criminal group. Investigators estimate that the group stole approximately $267,800 from victims worldwide.

According to Bloomberg, the Monetary Authority of Singapore has announced the revocation of the major payment institution (MPI) license of the cryptocurrency payment company Bsquared Technology. The reasons include flaws in risk management and conflict of interest policies, violations of outsourcing management regulations, and providing false or misleading information to regulators multiple times during the license application and on-site inspection processes.Bsquared obtained a digital payment token service license 16 months ago and is now required to submit a closure certificate issued by an auditing firm to confirm that all customer funds have been returned. The MAS stated that it is further reviewing the responsibilities of the company's key management personnel. Currently, only 37 institutions in Singapore are approved to provide digital payment token services, and license revocations are relatively rare.

According to CoinDesk, the U.S. Securities and Exchange Commission (SEC) has rescinded the "no denial" rule that has been in place for about 50 years. The new rule allows defendants who reach a settlement with the SEC to publicly question or deny the allegations made by the SEC in enforcement actions. Previously, defendants were typically restricted from publicly rebutting the relevant allegations after signing a settlement agreement.

According to Decrypt, the closed cryptocurrency exchange Bittrex has filed a motion to a federal judge to withdraw its settlement agreement with the U.S. SEC and is requesting the SEC to return the $24 million fine.Bittrex was accused by the SEC of offering unregistered securities trading during the Biden administration, ultimately reaching a settlement and paying a fine, and then closed due to the "current U.S. regulatory and economic environment" that made it impossible to continue operations. Bittrex's lawyers pointed out in the latest filing that the SEC's stance on cryptocurrency regulation has fundamentally changed since the Trump administration took office, acknowledging that the legal theory that most tokens are considered securities was incorrect, that the enforcement strategy has been flawed from the beginning, and that almost all lawsuits and investigations against cryptocurrency companies have been withdrawn.Bittrex is asking the judge to order the return of the funds before the SEC transfers the money to the Treasury for compensation. In March of this year, the SEC initiated the process to transfer the fine to the Treasury.

AMM infrastructure Ekubo posted on platform X that a security incident occurred with the Swap routing contract on the EVM chain, but liquidity providers were not affected, and Starknet was not affected. The team is investigating the scope of the incident and recommends that users immediately revoke all authorizations for the affected addresses.The affected addresses include the V2 and V3 contract addresses on Ethereum, as well as the V3 contract address on Arbitrum. The team is preparing a post-incident analysis report and reminds users to be cautious of links claiming to be related to the Ekubo Protocol or the vulnerability.

The token permission query tool Revoke.cash has launched a portal for checking affected addresses of CoW Swap. Users can enter their addresses in the portal to check if there are any unrevoked authorizations affecting them.Previously, CoW Swap's technical lead Felix Leupold tweeted that the CoW Swap frontend has resumed online, and users can access it via swap.cow.finance. He reminded users that they should only authorize the original GPv2VaultRelayer contract address.

The South Korean court ruled on the administrative lawsuit filed by Upbit operator Dunamu against the Financial Intelligence Unit (FIU), deciding to revoke the previous three-month partial business suspension. The court stated that, in the absence of clear enforcement guidelines from the regulatory agency, Dunamu had taken measures, including customer commitment letters and internal monitoring, to fulfill its reasonable obligations.Although there is still controversy over whether the relevant measures are sufficient to completely block transactions with unreported operators, they are not enough to support the previous penalty decision.

The DeFi protocol Neutrl announced on platform X that its frontend is suspected to have been attacked, and the team is conducting an urgent investigation. For security reasons, the official advises users not to interact with the website until further updates are released.At the same time, Neutrl reminds users to promptly go to Revoke.cash to revoke Permit2 authorizations for the relevant addresses, and also reminds users to check and revoke authorizations for other suspicious addresses to reduce potential asset risks.

According to Decrypt, the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) has revoked the registrations of 23 cryptocurrency service providers in an enforcement action.The Canadian Minister of Finance stated that this crackdown marks a "significant acceleration in action," and the government will maintain this momentum. Among the affected businesses, two operate entirely in foreign jurisdictions. The FINTRAC website indicates that registrations may be revoked for various compliance failures, including failure to respond to information requests in a timely manner, not meeting registration eligibility, and failure to update records promptly.Prior to this enforcement action, Canada had been taking an increasingly strict stance on cryptocurrency compliance. The Minister of Finance stated that the government will continue to monitor and take new measures to address the risks posed by cryptocurrency businesses (such as cryptocurrency MSBs and crypto ATMs).

According to Decrypt, Canada's financial intelligence agency, the Financial Transactions and Reports Analysis Centre (FINTRAC), took centralized enforcement action on Tuesday against 23 money service businesses (MSBs) that provide cryptocurrency-related services, revoking all of their registrations at once, marking a further escalation of Canada's anti-money laundering regulatory efforts.Canadian Finance Minister François-Philippe Champagne issued a statement characterizing this action as a "significant acceleration of enforcement pace," and stated that the government will continue to maintain this momentum. Among the revoked registrations, two companies are from abroad—Finast, registered in Slovakia, and Commerce Plex, registered in the UK, both of which also operate traditional currency exchange and transfer services.According to FINTRAC's official website, the reasons for the revocation of registration include: failure to respond to information requests in a timely manner, non-compliance with registration eligibility conditions, and failure to update relevant records in a timely manner, among other compliance violations.

According to Decrypt, Bitcoin Depot, the world's largest Bitcoin ATM operator, has had its money transmission license urgently suspended by regulators in Connecticut for several reasons: overcharging more than 500 users approximately $150,000 in fees (exceeding the 15% cap within the state), failing to fully refund scam victims, and insufficient compliance disclosures.The company must immediately cease operations in the state and shut down all ATMs. Meanwhile, Bitcoin Depot also expects to disclose "significant weaknesses" in internal controls in its annual report. Analysts point out that this suspension is a "structural blow" to Bitcoin Depot and indicates that the Bitcoin ATM industry as a whole will face stricter regulatory scrutiny.

In response to on-chain detective ZachXBT's disclosure that "some employees are suspected of abusing their authority to track user wallets for insider trading," Axiom posted a response on platform X stating: "We are shocked and disappointed to learn that someone on the team has abused internal customer support tools to query user wallets. Access to these tools has been revoked, and we will continue to investigate and hold those responsible accountable. This behavior does not represent the team, which has always been committed to putting users first."

According to the announcement from Paradex, the internal system of the Mithril trading bot was breached by attackers, resulting in the leakage of approximately 57 user sub-keys. Although these sub-keys cannot be used for withdrawals, they have trading permissions for accounts and are commonly used to connect third-party applications with trading bots. Paradex has suspended all XP transfers and revoked the sub-keys associated with Mithril.Affected users are limited to accounts that have authorized the Mithril bot. The official reminder advises users to be cautious when authorizing third-party services and to assess the risks themselves.

X product lead and Solana ecosystem advisor Nikita Bier stated: "We are revising the developer API policy: applications that incentivize users to post on X (the so-called InfoFi) will no longer be allowed. Such mechanisms have already caused a significant amount of low-quality AI content and reply spam on the platform.We have revoked the API access for these applications, so your X experience will soon begin to improve (once the bots realize that posting is no longer profitable).If your developer account has been terminated as a result, please reach out to us proactively, and we will assist you in migrating your business to Threads and Bluesky."As a result of this news, KAITO briefly dropped over 15%.

PayFi protocol Huma Finance posted on platform X, stating that some users reported that their Vanguard badges were revoked after the second quarter airdrop event went live. In fact, holders need to continuously meet the relevant staking requirements to retain their badges, including holding 10,000 HUMA tokens or staking 100% of the received airdrop tokens, but some users did not fully understand this ongoing requirement.Currently, Huma Finance has temporarily restored the Vanguard badges and set a grace period, with a deadline of January 5, 2026, 00:00 (UTC).