origin

Initia posted on platform X to disclose the progress of the security incident investigation, stating that on November 9, attackers exploited leaked GCP keys (used to configure private nodes) to illegally access Initia's infrastructure through a command injection attack, thereby obtaining its GitHub, GCP accounts, and more credentials, and gaining access to the Rollup hosting platform Anvil, which was used to forge 5 IBC withdrawals for Rollup validation, unlocking assets in Initia's L1 IBC hosting account.Approximately $3.27 million in assets was transferred to the attackers' address, while another $2.16 million in stolen funds remains on the suspended L1 and cannot be transferred. After selling the stolen assets on Initia DEX, the attackers withdrew 13,400 TIA, 8,000 USDC.inj, and 597,000 Noble USDC, without transferring any INIT. Initia stated that it plans to fully restore the affected assets and will rebuild the infrastructure in an isolated environment, with the expected restart time being longer than a regular network restart; asset recovery efforts are still ongoing with the assistance of law enforcement and security partners. Previously, it was reported that Initia L1 had suspended operations on November 10 at 14:18.

The cryptocurrency derivatives trading tool platform SignalPlus announced that it was attacked in the early hours of November 4, originating from a third-party Telegram account that was hacked, affecting a small number of accounts that had not enabled IP whitelisting.The team stated that they quickly identified and controlled the intrusion. As a precautionary measure, they have revoked all associated API keys with their centralized trading platform partners and temporarily suspended terminal services. The official statement indicated that the total loss was less than $82,000, and affected users will receive full compensation. They expect to fully restore services in the coming days, with subsequent updates and operational guidelines to be released through official channels.This evening, Binance also issued a statement indicating that it has taken precautionary measures regarding the potential security issues reported by the third-party platform SignalPlus, actively revoking all API keys associated with SignalPlus.Binance emphasized that its own system was not affected and that user funds are secure. Binance reminded SignalPlus users to log directly into their Binance accounts to check their positions and open orders, and not to rebind API keys until the issues with SignalPlus are completely resolved. They also advised to always enable IP whitelisting.

trade.xyz posted on platform X that GitBook has confirmed that the incident affecting its documentation originated from a security breach of its infrastructure.An internal investigation by trade.xyz found no evidence of a breach in its infrastructure, and security controls are functioning as expected, preventing the GitBook incident from affecting its infrastructure. trade.xyz will migrate away from the GitBook platform in the coming days.

Matthew Sigel, the Head of Digital Asset Research at VanEck, stated that Citigroup Wealth released a report titled "Expanding the Investable Universe: A Guide to Crypto ETFs," recommending spot BTC and ETH ETFs to suitable clients as a way to allocate digital assets through regulated brokerage accounts beyond stocks and bonds. Additionally, on August 18, Citigroup announced that its new Custody+ platform will begin holding Bitcoin for institutional clients this year.Sigel noted that this will make Citigroup the 6th bank among the 29 global systemically important banks to have launched or announced institutional Bitcoin custody, following BNY, Standard Chartered, Société Générale, State Street, and Deutsche Bank. BNY, Standard Chartered, and SG-Forge have been licensed and are serving institutions, while Deutsche Bank stated it will launch within weeks, and JPMorgan has indicated it will not provide custody at this time. Sigel mentioned that last week's Binance hacking incident may be one reason for Citigroup not announcing the timeline, as he heard the service was originally set to launch last week.

According to NexBlock, Gyeonggi Province in South Korea has suspended the research project for the introduction of stablecoins.The reason given is the need to consider the progress of related policies such as the "Basic Law on Digital Assets." It is reported that the project was initiated in early July this year, with the first phase of proof of concept (PoC) originally planned for August, and the second phase of expansion and testnet scheduled to proceed from October to December. However, no substantial progress has been made so far.However, an official from Gyeonggi Province explained that the project has not been canceled; the suspension is mainly due to considerations of the policy environment and not a comprehensive budget cut. The originally planned completion date in February 2027 may be affected, and the final completion time may be delayed.

According to The Defiant, the decentralized protocol Origin Protocol has restored the liquidity of its OGN token after withdrawing funds during the Binance-related incident. Origin stated that the attacker sold OGN at an average discount of about 79%.Records on the Ethereum chain show that after withdrawing 46.74 million OGN from the Curve pool, liquidity is now flowing back into that Curve pool.

The stablecoin network Plasma builder Googly, while forwarding reports of a cryptocurrency-related home invasion in France, stated that in another case, criminals broke into a residence and violently attacked the entire family, mistakenly believing the homeowner held 660 BTC. Googly mentioned that the homeowner made a typo when filing taxes and that related information was leaked, with the actual holding being only 0.066 BTC. Googly is also engaged in trading and angel investing at APG Capital.The cited post references Le Parisien, stating that on February 6, 2026, several masked men broke into the home of a couple and their 20-year-old daughter in Juilly, Seine-et-Marne. The attackers believed the father held 660 bitcoins, worth about 40 million euros, and beat the father in front of the family, demanding access to the cryptocurrency wallet. After checking the accounts, the first wallet contained only 3,000 dollars, and the other two accounts totaled nearly 7,000 euros. Two members of the assault team were sentenced to 3 years and 18 months in prison on October 16.

a16z Frontier founding partner Chris Dixon stated that early Web2 platforms were built on fragile tacit agreements: independent creators, bloggers, news media, and community volunteers contributed high-quality content for free, while platforms provided traffic distribution, audience accumulation, and commercial revenue opportunities.He pointed out that after forming a monopoly through network effects, platforms continuously tightened algorithms, forcing creators to pay for traffic. With the advent of the generative AI era, large model companies collect long-accumulated content from the entire internet through crawlers and directly provide answers in search and Q&A interfaces, no longer diverting traffic to the original websites, thus severing the economic cycle of independent creators.Dixon believes that if this trend continues, high-quality original content may be depleted, and the internet could be flooded with low-quality machine-generated content. He proposed that verifiable data ownership could be established through blockchain protocols, allowing data calls, reasoning, and training to be traceable and automatically receive economic returns. Reshaping this contract is one of the important missions of the Frontier fund.

Blue Origin aims to increase the launch frequency of the New Glenn heavy rocket to multiple times a week by 2030, challenging SpaceX's market position. The company has invested over $3 billion in Florida and plans to add another $330 million to expand its facilities.

The cross-chain exchange protocol NEAR Intents released a post-mortem report attributing a $3.8 million vulnerability to a flaw in the deposit notification feature. The protocol deploys a public settlement contract on NEAR that maintains an internal ledger of deposited tokens, while withdrawals transfer tokens out via a cross-chain bridge. The report was published by NEAR Intents General Manager Alex Shevchenko on October 16, stating that the attacker withdrew $3.8 million before the protocol was shut down on October 1 and returned all funds within 36 hours of detection, with all affected users fully compensated.The report indicates that the feature notifies third-party contracts when tokens are deposited. The attacker created a contract that intentionally caused the notification to fail, allowing the token contract to refund the deposit while NEAR Intents retained the corresponding ledger credit. Through 23 failed deposit transactions, the attacker accumulated $3.8 million in unsupported balance, referred to in the report as ghost funds, and subsequently withdrew real tokens based on this and transferred them to other chains via the Omni infrastructure. Shevchenko stated that this was a vulnerability in the NEAR Intents contract, not in the Omni infrastructure.Withdrawals occurred between September 29 and October 1. The settlement contract was paused and reopened on October 1, with affected routes gradually restored, and contract-side deposits resumed on October 2. The report noted that the vulnerability went undetected because monitoring only compared the original chain assets with the total balance of NEAR side tokens, without comparing the total internal user balances with the actual tokens held by the contract; the team has since added this check and will automatically pause the contract when there is a balance inconsistency. The fix for the October vulnerability was deployed on October 2, but another serious vulnerability report regarding the same feature prompted its complete removal on October 7, with the relevant researcher receiving a $300,000 reward.

Australian AI data center operator Firmus, supported by NVIDIA, stated via email to CNBC that the company has withdrawn its planned large IPO due to market volatility and conditions. The board believes that the proposed issuance terms do not adequately reflect the business's strength and long-term growth prospects, and continuing with the issuance is not in the best interests of the company and its shareholders. The company stated it will turn to private market financing and consider other public and private market options.Reportedly, Firmus originally planned to raise $5 billion through the IPO, pricing shares at AUD 11. If successful, it would have become the second-largest IPO in Australian history, with a valuation of approximately $30.6 billion. In August 2026, the company announced the completion of $2 billion in financing, with investors including NVIDIA, Coatue Management, Blackstone, and Jane Street; the previous year, it raised over $3 billion in equity financing, with a valuation exceeding $10.5 billion. Last month, Firmus announced an agreement with Meta to provide GPU computing power for AI research, model development, and training based on NVIDIA's DSX platform in Southeast Asia.

According to Durov's Code, Telegram is expected to launch a brand new cryptocurrency wallet, Gram Wallet, in the latest release of version 13, which is not yet officially open to users.Meanwhile, the original Wallet service has been renamed to Walt and has moved from the settings menu to the mini-app interface, with existing accounts and assets unaffected.

According to Fox News, Jeff Bezos stated that Blue Origin has raised $10 billion from external investors for the first time.

Smart wearable device company OURA has postponed its IPO plans due to market uncertainty. The company previously planned to issue 50 million shares to raise up to $2.2 billion.OURA is currently profitable and is expected to see a 90% year-over-year revenue growth in fiscal year 2026. CEO Tom Hale stated that the company still has flexibility in choosing the timing.

Bitget's Greater China Regional Head, Xie Jiayin, recently addressed community concerns during a live broadcast. He reflected that since Bitget's establishment 8 years ago, user asset security has always been the top priority, successfully resisting multiple attempts of cyber attacks and maintaining a long-term record of secure operations. This incident marks the first security crisis in the platform's 8-year development history.Upon complete tracing, this incident is classified as a special attack targeting a third-party security software supply chain. The attacker exploited vulnerabilities in third-party products to obtain internal network credentials; however, private keys were not leaked, and cold wallet assets were unaffected. Currently, Bitget has partnered with security agencies Mandiant and SlowMist to conduct an independent review and will comprehensively upgrade the monitoring and management standards for third-party components. We are not only committed to promoting a full recovery following this incident but will also contribute to a safer, more robust, and healthier development of the industry through continuous technological iteration and system upgrades.

In today's community live broadcast, Bitget CEO Gracy responded to recent security incidents and the platform's financial status. She candidly stated that this is the first security incident encountered since Bitget was established 8 years ago. After a complete trace, it was found that hackers exploited vulnerabilities in third-party security products to steal internal network access credentials, forged withdrawal commands to the wallet system, and deceived the wallet into executing abnormal transfers that bypassed risk checks. Gracy emphasized that no private keys were leaked, and cold wallets were unaffected; specific technical details will be disclosed in the formally released security report.Gracy pointed out that the verified losses from this incident are within the coverage of the protection fund, and user funds are not affected. The platform's own funds exceed $1.4 billion, which includes approximately $464 million in the user protection fund. The platform will continue to uphold the security commitments made when the protection fund was established in 2022, planning to replenish the fund to the baseline of $300 million within a week."The protection fund is not just a slogan, but an important mechanism that provides tangible security for users in the event of extreme security incidents," Gracy stated. In the face of sudden security challenges, the platform's comprehensive strength and its ability to take responsibility are important criteria for measuring its risk response capability and long-term credibility. Bitget will continue to uphold its long-term commitment to prioritize user interests.

Ethereum co-founder Vitalik Buterin announced today that the original novel "Snowmoon" has been completed, consisting of 32 chapters.The novel unfolds in a speculative science fiction setting, depicting a world that heavily relies on cryptography and decentralized governance. The story focuses on the ideological conflicts between societies such as Veridia and the Arctic Empire, involving elements like zero-knowledge proofs, second voting, privacy technologies, and content-oriented tax mechanisms, integrating themes of mechanism design and digital sovereignty that have long been of interest to Vitalik.The work is released under the GPL v3 license. Vitalik stated that adaptations into films, animations, and other derivative works are allowed, but requires the related production pipeline (including AI prompts, scripts, and other non-generic materials) to be open-sourced. He declared that all text was written by him, with AI assistance only used for spelling and grammar checks, consistency verification, and webpage formatting, and noted "Snowmoon was written with love."

Since its founding by Amazon founder Jeff Bezos in 2000, Blue Origin has invested approximately $30 billion. Blue Origin is undergoing its first external financing, having raised about $10 billion, with the company valued at $140 billion. The company plans to achieve growth through rocket launches, satellite communications, and artificial intelligence satellite services.