zero

According to OnchainLens monitoring, the established Indian cryptocurrency exchange Unocoin reported unauthorized access to its servers on November 9 and temporarily disabled user login functionality.Approximately 81,000 tracked addresses show zero balances, and the Unocoin official website currently returns a 504 error.

tZERO Group, a financial market infrastructure provider, announced that the U.S. Commodity Futures Trading Commission (CFTC) has approved its wholly-owned subsidiary tZERO DCM, LLC to register as a designated contract market (DCM), allowing it to operate a regulated derivatives exchange. Previously, on October 16, the CFTC approved tZERO DCO, LLC to register as a derivatives clearing organization (DCO). Currently, tZERO can support derivatives trading and clearing through its regulated entities.The two registrations will be incorporated into tZERO's infrastructure as a service (IaaS) business, developing trading and clearing services for financial institutions and other market participants. According to the merger agreement signed between tZERO and FG Imperii Acquisition Corp. on October 31, both DCM and DCO have been approved to constitute the first contingent milestone condition, which has now been met. tZERO's existing regulated securities infrastructure includes broker-dealers, alternative trading systems, digital asset securities custody, transfer agents, as well as clearing and settlement services.

According to Catcher Predict monitoring, in the market prediction event on Polymarket "LoL: Ground Zero Gaming vs Frank Esports - LCP Playoff Qualification," the sub-market "Match Winner" option for "Ground Zero Gaming" has experienced significant fluctuations in win probability, soaring from 38.5% an hour ago to the current 63.5% (a fluctuation of 25%). Please note the impact of relevant breaking news.

AnomaPay disclosed on platform X that it has discovered an external security vulnerability in the RISC Zero proof system it uses, which may jeopardize user funds. To protect users and ensure the safety of funds, the risc0 validator behind Anoma has been suspended and will be upgraded by the RISC Zero team.AnomaPay stated that the funds deposited by users are safe, but they will be temporarily inaccessible until the Anoma protocol is upgraded to version V2, which includes the new security updates from RISC Zero. The upgrade is expected to take about two weeks. Although this downtime is not ideal, it is necessary to protect user funds. Users do not need to take any action; funds will be automatically migrated to V2 and access will be restored after the upgrade is completed.

On November 9, 2026, Google released an emergency stable channel update for the desktop Chrome browser, fixing nine security vulnerabilities, including a zero-day vulnerability that was already being exploited in the wild. This update raises the Chrome version on Windows and Mac platforms to 157.8103.5/.51, and to 157.8103.5 on the Linux platform, and will be gradually rolled out over the next few days to weeks. The core focus of this update is the high-risk vulnerability numbered CVE-2026-125350, which is a use-after-free issue in an XML component. Google explicitly stated in the announcement that "CVE-2026-125350 is known to be exploited in the wild," but did not disclose specific attack methods, the scale of victims, or attribution of the attack activities.The vulnerability was reported by an anonymous researcher on November 6, 2026, just three days before Google released the fix. Among the nine fixes, seven are classified as "high risk" and two as "medium risk." In addition to CVE-2026-125350, another high-risk vulnerability, CVE-2026-125346, also pertains to a use-after-free issue in an XML component, reported by Arni Hardarson of Neonix Security on October 12, 2026, but Google only marked CVE-2026-125350 as an actively exploited vulnerability. The other high-risk vulnerabilities include uninitialized resources in WebGL, improper FileSystem authorization, synthesizer buffer overflow, GPU out-of-bounds write, and V8 type confusion, most of which were discovered by Google's internal security team.Google also confirmed that the Android version of Chrome (157.8103.5) released on the same day includes the same security fixes as the desktop version, with no exceptions noted. Users on the Extended Stable channel should install the update released separately on November 9, with Windows and Mac versions being 156.8078.96, which also lists CVE-2026-125350 as a high-risk fix. The Hong Kong Government Computer Security Incident Coordination Centre (GovCERT.HK) issued a security alert on the same day, defining affected systems as versions prior to Chrome 157.8103.5, and pointed out that successful exploitation of the related vulnerabilities could lead to remote code execution, denial of service, tampering, or bypassing security restrictions. The Hong Kong Computer Security Incident Coordination Centre (HKCERT) rated the risk level of this update as "extremely high risk." Google explained in the announcement that access to vulnerability details and links may remain restricted until most users complete the update. The company recommends that users manually check and trigger the update via "Settings → About Chrome," and restart the browser after completing the update for the patch to take effect. For users still running versions prior to Chrome 157.8103.5, the current priority action is to confirm the version number and restart immediately to complete the upgrade.

Global technology stocks continue to decline, pushing the hedge fund industry into a new round of adjustments. As artificial intelligence-related trades have significantly reversed, the global tech stock sell-off has severely impacted hedge funds, with some strategies seeing nearly zero returns this year. Several large funds have begun to reduce leverage and cut investment teams, raising market concerns that concentrated liquidations will further amplify volatility.Goldman Sachs data shows that stock long-short strategy funds primarily investing in tech stocks lost more than 4% in a single day on Thursday, bringing the year-to-date return of such strategies close to zero. In June of this year, the cumulative return of these funds once reached as high as 24%.This loss is not limited to tech investment strategies. Goldman Sachs data indicates that global fundamental stock long-short strategy funds averaged a decline of 1.3% on Thursday, while multi-strategy funds fell by 1.4%, reflecting that the selling pressure is spreading to broader investment portfolios.

Binance stated that the latest proof of reserves zero-knowledge proof has been generated, and users can verify their account balances to obtain at least 1:1 asset backing.

According to the security agency Blockaid, the Ethereum execution client Reth and its derivative client op-reth have a state root calculation error that affects several EVM blockchains, including multiple OP Stack chains. Unfixed nodes may experience synchronization stalls or return incorrect state proofs (eth_getProof). This issue is classified as a client correctness defect and is not a known attack event; no financial losses have been detected so far.Reth merged the fix code on November 3, with the fixed versions including reth v2.10.0, op-reth v2.8.1, and Base node-reth v1.5.3. As a precaution, the cross-chain interoperability protocol LayerZero has suspended the off-chain infrastructure of some affected chains, resulting in delays for related cross-chain messages, but no messages will be lost; some protocols have also suspended deposits or cross-chain routing. Blockaid recommends that relevant node operators and RPC service providers upgrade as soon as possible.

CryptoQuant analyst Darkfost pointed out that, calculated over a 90-day rolling window, the cumulative Z-score of the correlation between Bitcoin returns and S&P 500 returns has risen above zero for the first time since 2015, reaching 98.5. A score above 0 indicates that the correlation of Bitcoin is higher than usual, while a score below 0 indicates lower correlation. The cumulative Z-score summarizes deviations to present trends. Darkfost noted that this trend has been clearly upward since the low point, and this breakthrough is symbolic, as Bitcoin is increasingly moving in tandem with the stock market.Darkfost also pointed out that the recent momentum of this correlation is slowing down. The rate of change in the short-term 90-day correlation has fallen from recent highs to 6.3%. The correlation between the two remains above average, but it is no longer strengthening as rapidly as before. He believes this is mainly due to market maturation, as more financial professionals are increasingly using Bitcoin as a conventional financial tool with the improvement of ETFs and trading channels.

The Chief Information Security Officer of Slow Fog, 23pds, posted on platform X stating that the Android zero-click remote code execution vulnerability has been included in the November security patch, and users are strongly advised to upgrade. Google announced in November 2026 that it has fixed over 200 vulnerabilities, the most severe being the Framework layer CVE-2026-58868 (Critical), which allows remote execution of arbitrary code without user interaction and additional permissions, affecting Android 14, 15, 16, 16 QPR2, and 17. Currently, there are no confirmed in-the-wild exploits.23pds indicated that versions with a security patch level of 2026-11-01 and above include Framework/System fixes such as CVE-2026-58868; versions from November 5 and above cover all vulnerabilities in this round, including fixes at the kernel, MediaTek, Qualcomm, and other chip levels. Users can check the "security patch level" in "Settings → About Phone → Android Version."

ApeChain will migrate cross-chain infrastructure within the Yuga Labs ecosystem, and assets such as APE and USDC will be upgraded to Chainlink cross-chain tokens.

Ethereum co-founder Vitalik Buterin warned at Devcon 8 that AI poses new threats to security and privacy, while also helping to discover vulnerabilities. He questioned the security of hardware wallets and cautioned against making cryptocurrency investments based on social media posts filled with bots and manipulated content.Vitalik called for the adoption of decentralized, verifiable technologies and zero-knowledge proofs to protect personal data, and suggested that businesses avoid collecting unnecessary information.

Anthropic has open-sourced FlashProve, bringing the commonly used zkSNARK (zero-knowledge proof) technology from the cryptocurrency field into AI model inference.This technology was originally designed to prove the validity of blockchain transactions without disclosing transaction details. Anthropic aims to use it to solve another problem: when users pay a high price for an AI model's API, how can they know if the service provider has secretly switched to a cheaper model?FlashProve allows service providers to first generate encrypted fingerprints for the model weights and then provide mathematical proof for the inference results. Users do not need to obtain the model weights or rerun the model; they can check whether the specified output comes from the previously committed set of weights. Claude was also involved in the development and optimization of this system.Anthropic has already completed experiments on Meta's 400 billion parameter model Llama 4 Maverick. For every 1024 tokens of context processed, the generated proof is about 19 MB, and verification on a regular CPU takes about 17 seconds.However, currently, each proof can only verify one output token and cannot validate an entire response. The GPU computation time required to generate the proof is also about 70 to 95 times that of regular inference. Whether it can be used to identify API service providers that secretly switch models in the future will depend on when the cost of proof generation can be reduced.

According to CoinDesk, digital securities and tokenization infrastructure company tZERO plans to merge with special purpose acquisition company FG Imperii Acquisition Corp. (FGII) to go public, with a pre-money valuation of $350 million for tZERO. It is expected to raise up to $231 million in SPAC trust funds, with the actual amount depending on shareholder redemptions and transaction costs.The merged company plans to list on NYSE American in early 2027, with the stock ticker TZRO. The transaction is still subject to approval by shareholders and regulatory agencies.tZERO has been laying out its blockchain securities market since 2014, with its regulated subsidiaries providing services such as digital securities trading, brokerage, custody, and transfer agency. The parent company of the New York Stock Exchange, Intercontinental Exchange (ICE), is one of its investors and has selected tZERO to participate in the design of the New York Stock Exchange's blockchain securities trading platform.

According to CoinDesk, digital securities and tokenization infrastructure company tZERO plans to merge with special purpose acquisition company FG Imperii Acquisition Corp. (FGII) for a public listing, with a pre-money valuation of $350 million for tZERO. It is expected to secure up to $231 million in SPAC trust funds, with the actual amount depending on shareholder redemptions and transaction costs.The merged company plans to list on NYSE American in early 2027, with the stock ticker TZRO. The transaction still requires approval from shareholders and regulatory agencies.Since 2014, tZERO has been laying out its strategy in the blockchain securities market, with its regulated subsidiary providing services such as digital securities trading, brokerage, custody, and transfer agency. The parent company of the New York Stock Exchange, Intercontinental Exchange (ICE), is one of its investors and has selected tZERO to participate in the design work for the New York Stock Exchange blockchain securities trading platform.

Bitdeer stated that as of October 30, its Bitcoin production for this week is 265.5 coins, all of which have been sold, with a net increase of 0 coins; currently, the Bitcoin holdings are 0 coins, excluding customer deposits.

The South Korean cryptocurrency exchange Upbit officially announced the digital asset holdings of its parent company Dunamu's investment subsidiary Dunamu&Partners as of October 2026. The announcement shows that the institution currently holds 2,081.84950412 BTC, with a total selling quantity of zero and no trading records.According to the announcement, Dunamu&Partners stated that if the projects it invests in are listed for trading on Upbit, it will not sell the related digital assets within three months from the date of the first listing, and will disclose changes in holdings at the end of each month through announcements on Upbit.

Elon Musk retweeted reports related to the Binance hacking incident and commented, "Everyday is Zeroday." A zero-day vulnerability is a technical term in the field of cybersecurity, referring to a security flaw in software, systems, or hardware for which developers or vendors have not yet provided a fix, and attackers may exploit this vulnerability to launch attacks.It is called zero-day because when the vulnerability is discovered or known, there is no time for the vendor to fix it in advance (0 days).

Researchers disclosed a zero-click vulnerability in the Telegram sticker feature at a security conference held in Tokyo, demonstrating that an attacker could execute code on iOS devices without any user interaction.However, Telegram disputed the risk assessment of the vulnerability.

According to CoinDesk, XRP Ledger developers are testing a new feature that aims to allow the creation of blockchain accounts with an initial balance of zero, with existing accounts bearing the reserve required for new accounts, thereby lowering the financial threshold for payment applications and automated software to create wallets on a large scale. This proposal was submitted on October 15 in the form of a SponsoredAccountCreate transaction proposal.According to current XRP Ledger rules, each account must reserve at least 1 XRP as a reserve, meaning that creating 100,000 independent accounts would require locking up 100,000 XRP. The new proposal intends for sponsored accounts to bear this reserve requirement, and a broader fee sponsorship mechanism in the future could also allow applications to pay transaction fees on behalf of users, but the overall reserve requirement for the network will not be eliminated. This feature is expected to lower the usage threshold for scenarios such as embedded wallets, RLUSD stablecoin payments, and AI agent automated payments.However, the related code is still under review, and the sponsorship mechanism it relies on has not yet gone live on the mainnet. As of October 19, the mechanism has only received 11 votes out of the 35 required validator votes, still falling short of the 29 votes needed for approval.