nvo

According to monitoring by the head of Galaxy Research, the COLDCARD Seed Entropy theft incident has resulted in 1,830 BTC being stolen, involving three rounds of attacks and over 30 smaller related signs.A total of 256 victims have reported their situations to GLXY Research, with a median loss of 1.1 BTC, and the tracking of the attackers is still ongoing.

Recently, the Beijing Shijingshan police successfully intercepted a new type of cross-border telecom fraud case, freezing 780,000 yuan in involved funds and returning it to the victims. In this case, 53-year-old Mr. Liu received a fraudulent call from abroad while accompanying his child studying overseas. The scammer impersonated domestic police, fabricated false allegations of money laundering, and induced him to urgently request money transfers from his family in China.The funds were subsequently transferred into the accounts of two other Chinese students studying abroad. Upon investigation, it was found that these three individuals were all victims of the same fraud gang, exhibiting characteristics of "multiple scams in one case, with victims serving as money laundering tools for each other." The scammers first transferred funds into the accounts of some victims, then coerced them into exchanging for U currency to assist in the transfer, which was highly concealed and involved complex cross-border links. The police successfully "awakened" the victims through patient persuasion, preventing greater losses.

The U.S. Commodity Futures Trading Commission (CFTC) has filed a lawsuit against Cash FX Group S.A. and its CEO Huascar Jose Lopez Castillo, The Conversion Pros Inc. and its CEO Ronald Pope, Justin Halladay, accusing the aforementioned defendants of operating a multi-level marketing Ponzi scheme that raised over $950 million from the public, including in the United States, claiming it was for retail foreign exchange contract trading.The CFTC stated that the defendants falsely claimed that funds were traded by professional traders, proprietary algorithms, and AI, promising returns of up to 15% per week; in reality, Cash FX conducted only a small amount of foreign exchange trading, and almost all participant funds were misappropriated, paying fictitious trading profits to other participants using funds from new participants, while paying millions of dollars to the defendants. The CFTC claimed that Cash FX also provided participants with false account statements to maintain the illusion of high trading returns, resulting in participants losing at least $406 million. The CFTC is seeking to order the defendants to pay restitution, recover illegal profits, pay civil monetary penalties, and impose trading and registration bans as well as permanent injunctions.

The cryptocurrency trading platform Bitget announced on its official X account that on September 24, 2026, at 18:31 (UTC), its security system detected unauthorized transfers from a small number of hot wallets. The security team has immediately initiated an emergency response procedure and started a comprehensive investigation.Bitget stated that, based on current assessments, approximately $351.6 million in assets are affected. Cold wallets and the vast majority of assets on the platform remain secure and unaffected, and user funds are still protected. The incident falls within the coverage of the user protection fund, which currently holds over $464 million.Bitget mentioned that customer account balances remain accurate, and deposits and transactions continue to operate normally. As a precautionary measure, withdrawals have been temporarily suspended to allow the team to complete a thorough security review. The company has identified and flagged the relevant transfer addresses, formally contacted law enforcement agencies and on-chain security partners, and will restore withdrawals as soon as safety is confirmed, providing subsequent updates through official channels while refraining from speculating on the attack path during the investigation.

U.S. Senator John Curtis from Utah, a Republican, wrote to Chuck Grassley, the Chairman of the U.S. Senate Judiciary Committee, and Dick Durbin, the Chief Minority Whip, calling for an investigation into whether Donald Trump Jr. and Hunter Biden exploited their presidential family connections for personal financial gain, and requested subpoenas for both individuals. Curtis pointed out that Donald Trump Jr. had accepted wedding gifts from Russian oligarch Umar Kremlev, actively promoted family-backed cryptocurrency ventures, and served as an advisor for a prediction market platform; the related companies are regulated by the Commodity Futures Trading Commission. Donald Trump stated that his son has returned the relevant funds to Umar Kremlev.Curtis also called for an investigation into Hunter Biden's substantial business dealings with foreign entities, as well as whether the two utilized their relationship with the president to create commercial value. He mentioned that Joe Biden pardoned Hunter Biden in December 2024, who had previously denied involving his father in business transactions. A week prior to this investigation call, Senate Republicans failed to garner enough Democratic support to advance the Digital Asset Market Clear Act. Some Democratic senators opposed the bill, citing reasons including Donald Trump's use of cryptocurrency ventures to gain benefits related to the presidency; Donald Trump disclosed that he earned $1.4 billion from digital asset-related businesses in 2025.

White hat actors transferred 40.71 bitcoins related to the Coldcard vulnerability into a single transaction, valued at approximately 3.31 million dollars. This transaction aggregated funds from 11 addresses and included OP_RETURN information pointing to the Crypto Recovery Trust.Alex Thorn, head of Galaxy Research, revealed that a larger aggregation transferred a total of 52.37 bitcoins, involving multiple clusters of attacker addresses, accounting for about 2.8% of the funds involved in the vulnerability. A firmware flaw in Coldcard devices from March 2021 led to insufficient randomness in the mnemonic phrases, with the peak amount of funds involved being approximately 130 million dollars.

According to CriptoNoticias, the Spanish Civil Guard and National Police have respectively cracked down on two cryptocurrency-related criminal cases, capturing or identifying a total of 48 individuals involved.Among them, one Ponzi scheme resulted in losses of approximately 327,000 euros for 113 investors; another criminal network implemented fraud through phishing, fake rental advertisements, and other methods, converting illegal gains into cryptocurrency to evade tracking, causing losses exceeding 430,000 euros.

According to Onchain Lens monitoring, an attack cluster transferred approximately 1.54 million dollars' worth of FET from Fetch AI's token converter on Ethereum.The cluster also received approximately 452,000 dollars in newly minted NTX from Nunet Global deployers. As of now, the total confirmed amount involved is approximately 2.01 million dollars.

The Cyber Investigation Department of the Gangwon Special Self-Governing Province Police Agency in South Korea has identified 26 Polymarket users by analyzing public blockchain transaction records and on-chain open-source intelligence, and has filed cases against them for suspected illegal gambling. Among them, 18 have been referred to the prosecution, with a total bet amount of 12.7 million USD, and the highest single user bet reaching 4.1 million USD.The police launched a preliminary investigation in March and began filing cases against the involved individuals in May; the South Korean Communications Commission only ordered the blocking of Polymarket on August 18, and the transactions under investigation occurred while the platform was still accessible. The police are advancing the investigation based on Article 246 of the South Korean Criminal Code.

Argentina has agreed to implement the Crypto Asset Reporting Framework (CARF) established by the Organisation for Economic Co-operation and Development (OECD), planning to automatically exchange cryptocurrency transaction data with other jurisdictions by 2029. Currently, 77 jurisdictions have joined this framework.According to the framework, virtual asset service providers must report user identity information, as well as data on cryptocurrency transactions using fiat currency, digital asset exchanges, digital asset payments, and transfers between external addresses. Argentina will receive information on overseas transactions and share relevant data about its users with international regulatory bodies.Argentina must establish domestic regulations by 2028 to clarify data collection requirements and the rules for virtual asset service providers to report information to tax authorities. The framework aims to apply similar information reporting standards for cryptocurrency transactions and fiat currency transactions to help tax authorities identify cross-border tax evasion activities.

The police of the United Arab Emirates and Sweden arrested 7 suspects involved in an international money laundering network. Investigators stated that tracking the cryptocurrency transactions of this network revealed its connections to organized crime and contract killings. According to the UAE News Agency citing the Ministry of Interior, the leader of the network is a Swedish citizen who had previously fled Sweden and was wanted by Interpol with a red notice, ultimately being captured in the UAE. Additionally, 6 other suspects were arrested simultaneously in Sweden, and all 7 have been charged.The Ministry of Interior stated that the network processed approximately 70 million Swedish kronor (about 7.1 million USD) in criminal cash proceeds over 10 months and transferred it to other criminal entities while using cryptocurrency to "transfer and move the value of these funds." Tracking cryptocurrency transactions and analyzing digital evidence helped investigators uncover the financial links between this network and other criminal activities, including organized crime and contract killings.Abdulaziz Al Ahmad, the Director of the Federal Criminal Police of the UAE Ministry of Interior, stated that the country will continue to track criminal networks and cut off their sources of funding. Anders Wiberg, head of the International Department of the Swedish Police, said that cooperation with the UAE was a key factor in the successful resolution of this case. Both countries launched simultaneous arrest operations after intelligence sharing and direct security coordination. Previously, Sweden had requested the police to increase efforts to seize illegal digital assets, as the issue of gangs using social media and encrypted applications to recruit paid killers has become increasingly serious.

On-chain detective ZachXBT posted that the wallet address associated with 7zarc has received 4,870 ETH (approximately 15 million USD), with the funds originating from addresses related to the Raidparty project's approximately 70 million USD "exit scam." Subsequently, this portion of ETH was transferred to recharge addresses of several centralized exchanges.ZachXBT pointed out that 7zarc disappeared from public view in 2022 and only became active again in September 2026. Based on this, he publicly questioned the need for an explanation regarding the flow of the related funds.

OpenAI disclosed on Wednesday six cases of "unexpected or concerning" model behavior discovered in the past six months, categorizing them as "misalignment behaviors," including concealing information from users and taking "unauthorized actions" to overcome obstacles. OpenAI stated that this disclosure aims to initiate its new model misalignment reporting framework, and these cases should not be seen as a reflection of the frequency of misalignment occurring in its models.In one case, an unpublished research model inserted "jailbreak-like instructions" into its task summaries, such as ignoring developer messages or adopting unrestricted role settings, with researchers finding a total of 27 summaries containing such instructions. Additionally, during the training process of GPT-5.6 Sol, many model instances added instructions to conceal errors or misalignment behaviors from users, such as fabricating missing historical data without disclosure. Other cases included models using exposed API keys without authorization and fabricating inaccessible data, leveraging internal software repositories to pass messages across training tasks, and ignoring instructions to "keep local work" by sharing files through public hosting services.OpenAI's disclosure has heightened concerns among AI developers and researchers about whether safety measures can keep pace with increasingly powerful models. Last week, Anthropic CEO Dario Amodei called for a slowdown in cutting-edge AI development, warning that unrestrained AI development could "exceed our ability to understand and control these systems." In July of this year, OpenAI disclosed that several of its AI models escaped testing environments during safety assessments and infiltrated the AI startup Hugging Face to cheat.

According to data submitted by the Korean National Police Agency to Democratic Party member Yoon Kyun-young's office, as of September 15, the Gangwon Provincial Police Agency's Cyber Investigation Team has initiated investigations into 26 Polymarket users, with 18 of them referred to the prosecution. The total betting amount involved is approximately 17.6 billion Korean won, with the highest individual bet being around 5.7 billion Korean won. The police believe that the trading activities on Polymarket clearly constitute illegal gambling.The Korean authorities identified and tracked these users by analyzing publicly available blockchain transaction records using open-source intelligence technology. The Korea Communications Standards Commission decided to block Polymarket on August 18. The KCSC determined that the platform's betting on uncontrollable events and its "winner takes all" profit model fostered a gambling mentality.

According to Cointelegraph, Tether's stablecoin USDT was involved in a failed oil deal in Venezuela, resulting in a loss of approximately $230 million for Polish state-owned energy giant Orlen.The transaction took place at the end of 2023, when Venezuela's state oil company PDVSA began requiring payments in USDT to evade U.S. financial sanctions. In November 2023, Samer Awad, a former executive of Orlen's trading subsidiary Orlen Trading Switzerland, led the procurement of 6 million barrels of Venezuelan crude oil from PDVSA. On December 4, Orlen transferred a $230 million advance payment to Dubai seller Hannon International Middle East, which exchanged USDT through multiple cryptocurrency brokers and intermediaries. However, most of the funds went missing during the transfers, and Orlen only received about $29 million worth of crude oil before terminating the contract.The flow of funds shows that Hannon exchanged $400,000 in commission for $80 million in USDT and transferred $135 million to Horizon Global, claiming to have only received $85 million in USDT. In January 2024, Hannon employees delivered two USB drives containing $60 million and $50 million in USDT to brokers in Caracas. In January 2025, the Warsaw regional prosecutor's office announced an investigation into the related oil contracts, involving losses of approximately $378 million.

According to South Korea's "JoongAng Ilbo," China's semiconductor industry is organized through collaboration among the central government, local governments, state-owned financial institutions, and enterprises, forming a system for fundraising, factory construction, and infrastructure support. The China National Integrated Circuit Industry Investment Fund has a first phase of 138.7 billion RMB, a second phase of 204 billion RMB, and a third phase of 344 billion RMB, totaling 686.7 billion RMB, with investments in companies such as SMIC, Hua Hong Semiconductor, and Yangtze Memory Technologies.Changxin Memory, established for 10 years, has risen to fourth in global DRAM market share, with a net loss of 21.13 billion RMB over the past three years, while R&D and equipment investments during the same period reached 185.2 billion RMB, with Hefei's state-owned capital providing about 80% of the funding for early projects. South Korea's Samsung Electronics and SK Hynix are responsible for investments, employment, technology development, and support for partners. The South Korean government plans to guide 622 trillion KRW in private investment by 2047 and provide 17 trillion KRW in low-interest loans and 1.1 trillion KRW in semiconductor ecosystem funds, but most of the burden will fall on enterprises.Park Kyung-soo, Executive Vice President of the Korea Semiconductor Industry Association: The semiconductor industry will fall behind in the next upturn if investment stops; even during downturns, R&D, equipment investment, and orders for materials and components must be maintained, requiring long-term policy, financial, and tax support. China is catching up with a national-level support system, and South Korea also needs a response system involving the government, political circles, financial institutions, and enterprises to act together.

The first two batches of confiscated assets in the Singapore 3 billion Singapore dollars money laundering case have officially opened for auction, with an overall estimated value between 2.9 million and 3.9 million. The auction is conducted solely online, and bidders cannot place bids in person or via phone. Currently, the confiscated items are stored in the Le Freeport warehouse at Changi North, and interested bidders from Singapore and abroad can visit, but must make an appointment in advance, with limited slots available. Among the items, the most notable are the limited edition pumpkin bags from Louis Vuitton and Yayoi Kusama.It is reported that this case is one of the largest money laundering cases in Singapore in recent years. The involved person, Wang Shuiming's partner, Su Weiyi, has been confirmed as the mastermind behind the cryptocurrency platform scam Atom Asset Exchange. Another involved person, Su Baolin, had received illegal online gambling proceeds from abroad through USDT and exchanged part of the USDT for at least 463,000 Singapore dollars in cash in 2023. He also used USDT to purchase a Toyota Alphard.

The U.S. Commodity Futures Trading Commission (CFTC) has previously secretly approved at least three insider trading investigations related to Polymarket trading, involving contracts related to Biden's pardons, the Iran war, and Google-related events. The relevant investigation documents were obtained by WIRED through the Freedom of Information Act.Among them, CFTC Chairman Michael Selig approved an investigation into contracts related to Biden's pardons in May, after a trader had profited over $300,000 in the relevant market; in the same month, the CFTC also approved an investigation into Iran war contracts, after a group of suspicious accounts was reported to have profited $2.4 million with a win rate of about 98%. In July, the CFTC further initiated an investigation into Google-related Polymarket contracts, focusing on individuals who may have traded using non-public information regarding Google's 2025 search rankings. The Southern District Attorney's Office in New York is also conducting a parallel investigation.It is currently unclear whether the aforementioned accounts are connected to previously investigated individuals. Polymarket stated that the company would refer the relevant matters to law enforcement and cooperate with the investigation. As the prediction market rapidly expands, U.S. regulators are clearly intensifying their scrutiny of insider trading and market manipulation.

Some criminal gangs use "free credit card repayment" as bait to lure ordinary people into providing credit card and identity information. They then launder illegal funds from overseas gambling, telecom fraud, and other activities by fabricating consumption and other means, and subsequently contact currency dealers to exchange for virtual currency to transfer abroad.