BTC $83,215.37 -1.70%
ETH $2,674.35 -0.38%
BNB $761.29 -2.21%
XRP $1.48 -2.48%
SOL $117.72 -4.17%
TRX $0.3355 +0.61%
DOGE $0.0931 -4.26%
ADA $0.2438 -4.74%
BCH $306.98 -7.79%
LINK $15.14 +7.94%
HYPE $86.85 -5.04%
AAVE $146.08 -5.51%
SUI $1.13 -9.96%
XLM $0.2248 +3.75%
ZEC $1,464.20 -8.51%
AAPL $338.57 -0.48%
AMZN $246.40 -1.41%
GOOGL $342.51 -0.42%
MSFT $509.78 -1.45%
META $717.55 -4.12%
NVDA $229.17 +1.83%
TSLA $357.86 -4.06%
SNDK $1,713.15 -3.90%
INTC $115.85 -7.09%
SPCX $145.91 -2.28%
MU $1,053.75 -3.74%
AMD $608.47 -3.96%
BTC $83,215.37 -1.70%
ETH $2,674.35 -0.38%
BNB $761.29 -2.21%
XRP $1.48 -2.48%
SOL $117.72 -4.17%
TRX $0.3355 +0.61%
DOGE $0.0931 -4.26%
ADA $0.2438 -4.74%
BCH $306.98 -7.79%
LINK $15.14 +7.94%
HYPE $86.85 -5.04%
AAVE $146.08 -5.51%
SUI $1.13 -9.96%
XLM $0.2248 +3.75%
ZEC $1,464.20 -8.51%
AAPL $338.57 -0.48%
AMZN $246.40 -1.41%
GOOGL $342.51 -0.42%
MSFT $509.78 -1.45%
META $717.55 -4.12%
NVDA $229.17 +1.83%
TSLA $357.86 -4.06%
SNDK $1,713.15 -3.90%
INTC $115.85 -7.09%
SPCX $145.91 -2.28%
MU $1,053.75 -3.74%
AMD $608.47 -3.96%

not

All
Article
Flash

first_img MEXC user: API not revoked after account was hacked, approximately 340,000 USD was transferred away

A MEXC user posted on X that their account was compromised after someone reset the security items. MEXC has confirmed the account was hacked, frozen the account, and assisted in recovery, but did not revoke the API left by the attacker. From 04:12 to 04:25 on September 27, 2026 (Beijing time), the account transferred out 322,110 USDT and 9,133,999 ONE, totaling approximately $340,000, about 27 minutes after the 24-hour transfer limit was lifted.The user stated that at 03:10 on September 25, they received a reset security item email that was not submitted by them, and about 10 minutes later, the request was approved. Subsequently, the account was logged in from an IP in Jakarta, Indonesia, bound to Google verification, and at 05:05, an API was created, approximately 83 seconds after logging in. At 10:55 that day, MEXC froze the account after a risk review and reverted to the original email. Customer service responded in writing that the review materials met the requirements, so the binding change was approved, and after the risk review, the account was urgently frozen and reverted to the initial email. The user changed their password and Google verification on September 26 but stated that the API was not revoked, and there were no related records in the security operation history.The user also claimed that there were no new login records in the login history when the assets were transferred out. They have submitted a formal claim to MEXC and attempted to report to the police, with the ticket number M2026092712031, requesting the platform to preserve logs, provide a written explanation of the review and API situation, and return the aforementioned assets. MEXC customer service stated that it is currently unable to confirm whether these transfers were initiated via APP, WEB, or API, and the issue has been forwarded to the relevant department.

first_img Doubao Mobile Assistant responded to the login issues of Honor of Kings, stating that it did not operate the Tencent system

On September 27, Doubao Mobile Assistant released a statement in the official community regarding the abnormal usage of the Nubia NaviX Ultra phone in Honor of Kings, stating that starting from the evening of September 24, they have received feedback from users that the Nubia NaviX Ultra equipped with Doubao Mobile Assistant displays an abnormal device environment prompt when logging into Honor of Kings or during matchmaking, and users are forcibly kicked offline.Doubao Mobile Assistant stated: Upon confirmation, they have not made any operations on the Tencent game system throughout the process, and there are no violations such as unauthorized clicks, cheats, or simulation behaviors by the AI. The team is still in communication with relevant parties at Tencent, and as of now, they have not received a clear response, for which they apologize. The assistant also advises users not to repeatedly attempt to log into Honor of Kings on this model. If the account has been banned, users can appeal through the official game customer service channels.Tencent has not publicly responded. On September 28, a reporter learned from informed sources that Honor of Kings ensures game fairness through various security risk strategies, and these strategies have been consistently used over the past period without targeted adjustments.

Zhao Changpeng: Does not oppose Hyperliquid, welcomes more DEX to participate in competition

Binance founder Changpeng Zhao stated during his appearance on the podcast "When Shift Happens" that he does not oppose Hyperliquid and welcomes more centralized and decentralized trading platforms to participate in innovation, as the industry is far from saturated. He estimates that the proportion of the population holding some form of cryptocurrency is about 5% to 15%, but when calculated based on individual wealth allocation, the penetration rate of cryptocurrency assets may be less than 1%, indicating that the industry is still in its early stages.Changpeng Zhao mentioned that some members of the Hyperliquid community are trying to establish their own community by criticizing centralized trading platforms and Binance, but he views this as normal competition and does not oppose the project. Previously, Trump mentioned Hyperliquid, which is very good for the industry. Assets like HYPE, BNB, and Bitcoin could all benefit from the overall growth of the industry.Changpeng Zhao also pointed out that first movers do not necessarily become the long-term biggest winners. Google, Facebook, and Binance were not the first products in their respective fields, and later entrants can often further optimize based on the groundwork laid by the pioneers. Although he holds a significant amount of Binance shares and BNB, the centralized trading platform is just part of his asset allocation; rather than expanding a single platform, he hopes to promote the growth of the entire cryptocurrency industry.

first_img SEC updates cryptocurrency FAQ, stating that token buybacks and network upgrades do not necessarily constitute securities

The U.S. Securities and Exchange Commission's Division of Corporation Finance updated its frequently asked questions document on cryptocurrency assets on Friday, clarifying that token buybacks, network upgrades, and marketing promotions do not automatically make cryptocurrency assets securities. The division stated that announcing a buyback plan for an already functioning cryptocurrency network does not, by itself, make the associated tokens constitute an investment contract; however, for networks that are not yet operational, if the issuer promotes the buyback as a source of returns for holders, this conclusion may not necessarily apply.Regarding the ongoing development issues of cryptocurrency projects after their launch, the document pointed out that once a cryptocurrency system is operational, services used to protect, maintain, improve, or enhance that system and its functions, or to promote network effects, do not fall under the managerial efforts referred to in the Howey test. The existing uses of marketing networks generally do not create profit expectations, and statements regarding future functionalities are similarly true, provided that profit potential is not promoted. The document reiterated that specific judgments still heavily depend on the actual circumstances of each case.This document is based on the interpretive guidance issued by the SEC in March of this year regarding the application of securities laws to cryptocurrency assets, released just weeks after the Clarity Act failed to advance in the Senate, with regulators continuing to operate under existing laws. Additionally, the U.S. Commodity Futures Trading Commission updated its cryptocurrency FAQs on Thursday, stating that futures companies and clearinghouses may invest customer funds in tokenized versions of previously permitted assets, provided that investment and custody requirements are met; regulated companies may use blockchain for record-keeping but must be able to provide relevant records when the blockchain or its block explorer is not operational.

Magic Eden: Current open orders are not affected by this vulnerability; users in the EVM market from February to October 2024 need to revoke related contract authorizations

Magic Eden announced that the vulnerability occurred in the NFT trading protocol Payment Processor V2 maintained by Limit Break. Magic Eden adopted this protocol for EVM network transaction settlements in 2024 but stopped using V2 in October 2024 and will completely shut down the EVM market in the first quarter of 2026. Therefore, NFTs currently listed on Magic Eden are not affected by this vulnerability.NFTs listed through its EVM market between February and October 2024 may be affected, while listings after October 2024 are generally not impacted. The platform is contacting the protocol owner and maintainer Limit Break to explore other risk mitigation measures, including pausing protocol transfers, and will continue to investigate the actual scope of the impact.Magic Eden reminds users who have listed or traded NFTs on its EVM market to revoke relevant contract authorizations on the Ethereum, Polygon, and Base networks. Users can filter the address through revoke.cash and revoke all authorizations marked as "approved for all" for NFTs. Magic Eden emphasizes that revoking authorization cannot recover assets that have already been transferred.Yuga Labs' Vice President of Blockchain Quit stated today that at 9 AM Eastern Time, attackers exploited the Payment Processor V2 vulnerability to steal a large number of NFTs. After contacting the LimitBreak team, the latter quickly paused the similarly affected Payment Processor V3. However, V2 could not be paused, and V3 on ApeChain is also temporarily unable to be paused. Therefore, the team implemented a white-hat operation, successfully transferring and protecting 23,155 NFTs valued at over 5.7 million dollars.
app_icon
ChainCatcher Building the Web3 world with innovations.