authorization

A hacker publicly sold suspected personal information of TSMC employees on an underground forum, claiming to possess up to 46,000 records with a data volume of 6.9GB, and is asking for 3 bitcoins. The hacker even threatened to fully disclose the related information if no one purchases it within a week.In response, TSMC confirmed that some personal information of current and former employees was disclosed without authorization. Preliminary investigations indicate that this information matches data from a certain cloud service provider's system, but there is currently no evidence that TSMC's own data systems have been breached. TSMC emphasized that the related information is unrelated to the company's production and customer data. The company has been notifying affected individuals and providing necessary assistance, while closely cooperating with the relevant cloud service provider, investigative agencies, and third-party cybersecurity organizations to expedite the clarification of the incident's cause and take necessary measures.

According to a report by Business Wire, the U.S. brokerage infrastructure provider DriveWealth announced that its European affiliate UAB DriveWealth Europe has been authorized by the Bank of Lithuania to become a crypto asset service provider under the EU's Markets in Crypto-Assets Regulation (MiCA). DriveWealth plans to gradually open related services to partners starting in 2027, with specific launch dates to be announced later.UAB DriveWealth Europe previously held a MiFID II license issued by the Bank of Lithuania. After the launch of crypto asset services, banks, fintech companies, digital wallets, and brokerages can access crypto asset services along with existing investment services such as U.S. stocks, ETFs, fixed income products, and options through the same interface.DriveWealth also announced a partnership with Ripple, planning to introduce RLUSD stablecoin settlement, cross-border payments, and digital asset custody in Europe first.

On November 5, MetaMask released a security incident update stating that on September 28, part of its infrastructure was accessed without authorization. The attacker modified the reward receiving addresses of some Ethereum validators, transferring approximately 0.385 ETH in staking rewards.MetaMask stated that the related issues were fixed on the same day, and all affected Ethereum validators have now completed their exit. This incident caused temporary delays in withdrawals for some customers and may have resulted in losses of staking rewards. MetaMask emphasized that there is currently no evidence that user wallets, private keys, or customer staking principal have been leaked or withdrawn without authorization.

The Iranian Islamic Revolutionary Guard Corps Navy announced that on the evening of November 1, two oil tankers crossed the Strait of Hormuz without Iranian authorization and were hit by mines, one of which was a supertanker. These two oil tankers turned off their navigation systems in an attempt to secretly cross with the support of the U.S. military, but were forced to stop after hitting the mines.

The Bitcoin dual-staking protocol b14g released a security update stating that on October 31 at 09:29 UTC, approximately 97 million CORE staked through b14g were unauthorizedly withdrawn and transferred to an address controlled by the attacker. The project team has suspended the affected contracts upon discovery.b14g stated that they are currently investigating the incident with the Core team, security partners, and exchanges, tracking the funds, and coordinating to freeze and recover them. According to existing tracking, approximately 68 million CORE remain on the Core network, and exchange partners have frozen about 9 million CORE related to the attacker. The affected assets are the CORE staked through b14g; the BTC staked through b14g is still in a time-locked state on the Bitcoin network and is unaffected.The project team stated that the current priority is to protect users and recover the affected funds, and they will release a detailed post-mortem analysis covering the technical reasons, scope of impact, and follow-up arrangements for affected users. The two disclosed attacker addresses are 0xc556ed208285406d71705927f92d4f4eaea579f1 and 0x27758c30f8e424fbd8ca605bf31e9496c26ce92c. b14g is positioned as a BTCFi coordination layer, providing dual-staking matching for Core and Babylon.

Kintsu officially announced that its website is experiencing DNS hijacking due to issues with its domain registrar, and currently accessing the official website may lead to malicious sites.Kintsu reminds users not to visit the official website, connect wallets, or sign any transactions. If users have connected wallets or signed transactions since October 31 at 00:00 (UTC), they should immediately revoke the relevant authorizations through the Revoke platform and transfer their assets.The official statement indicates that a further notice will be issued once the website's security is confirmed to be restored.

The founder of Flap posted on platform X to explain the impact of the official website domain anomaly event.He stated that the risk only involves users who accessed the abnormal website and connected their wallets or signed authorizations within a few minutes before the announcement was made. Users who had previously connected to the FLAP official website normally are not affected by this event and do not need to change their wallet addresses.The founder of Flap also emphasized that FLAP does not store users' private keys, mnemonic phrases, or wallet data; this information will not be saved in the FLAP backend. Until the issue is resolved, users should temporarily avoid accessing the official website, and once the site is restored, the team will issue a notification through the official account.For users who have just connected their wallets on the abnormal website, the founder of Flap stated that they can contact him for assistance via private message.

According to on-chain data, one of the stolen hot wallets of Binance, Binance 14, revoked the EIP-7702 authorization on October 30 at 8:10 AM Beijing time. This incident involving Binance pertains to the EIP-7702 authorization mechanism, where after signing such authorization, the wallet will be taken over by a specific program until the authorization is revoked.This attack exploited that mechanism. The attacker managed to have Binance's hot wallet sign an EIP-7702 authorization, delegating control of the wallet to a malicious cleanup contract pre-deployed by the attacker. Once the authorization took effect, the malicious contract gained permission to operate the wallet, allowing it to automatically transfer assets in bulk without requiring additional signatures from the wallet owner.

Polymarket trader Car posted on platform X that approximately $800,000 in assets from his Polymarket account were stolen, all positions were sold, and his friend's account was hacked for about $600,000. He reminded users to lock their accounts and refrain from interacting with the website for the time being.Additionally, several users reported on platform X and the Polymarket Discord community that the website's front end appeared to be under attack, with assets being transferred out without authorization. Some users claimed to have lost around $200,000, while others reported receiving unauthorized withdrawal signature requests on the official website. As of the time of publication, Polymarket officials have not yet responded. In June of this year, Polymarket was previously targeted by a phishing attack on the front end due to a third-party vendor being compromised, resulting in the theft of approximately $2.94 million in user assets.

On October 21, the UK's Financial Conduct Authority (FCA) published Consultation Paper 26/36 titled "Guidance on the Regulatory Scope of Cryptoassets," which explains how to determine whether related activities require authorization when the business model involves a certain degree of decentralization.The FCA pointed out that the use of software, smart contracts, distributed ledger technology, distributed governance mechanisms, or other technological arrangements does not, by itself, determine whether there are regulated activities that require authorization. Automation merely describes the manner in which functions are executed and does not determine whether that function constitutes part of a regulated activity. The so-called "true DeFi" is not a statutory concept in the "Regulated Activities Order" or the "Cryptoasset Regulations"; the degree of decentralization is a continuum and does not constitute an independent or separate regulatory framework.At the same time, the FCA also published Guidance Consultation Paper 26/7, which explains how regulated firms should manage DeFi risks, focusing on operational resilience and financial crime risks, and provides examples of measures that firms may consider taking. Both consultation papers will close for comments on November 18, and the FCA plans to publish the final guidance in January 2027. Starting from October 25, 2027, the new regulations will bring new cryptoasset activities under regulatory oversight, and firms wishing to continue related business must submit authorization applications by February 28, 2027.

According to market news, the ransomware/disclosure organization FulcrumSec publicly claimed to have continuously stolen about 10.6 TB of data from PingCAP's managed database service TiDB Cloud and released about 200 GB of the first phase sample.PingCAP issued a statement acknowledging that "some internal operational data" was accessed without authorization, but emphasized that it does not involve product vulnerabilities and will not affect the security of customer databases and business data. Companies such as Bitget and Baidu have collaborated with this data company.

Cryptocurrency hardware wallet manufacturer Ledger announced the launch of Ledger Agent Intent, which is now open for free to all signature devices compatible with Ledger. The AI agent can monitor the market and provide portfolio optimization suggestions, allowing users to review and approve relevant actions on their Ledger devices, while the private keys remain under the user's control.Agent Intent will be directly integrated with OpenClaw, allowing users to register the OpenClaw agent and authorize actions on their Ledger Atom devices, with the OpenClaw application pre-installed on the device. This tool also supports Pay.sh from the Solana Foundation, and requests made by the agent can enter a unified queue for users to choose the timing for signing.Ledger collaborates with Venice AI to address privacy issues and stated that user data will not be used for training models by third parties.

According to The Guardian, former BitMEX investor Lewis Barber has filed a lawsuit in the High Court of England, claiming £20 million, accusing the exchange of offering cryptocurrency derivatives to UK investors without authorization from the Financial Conduct Authority (FCA).Barber stated that he traded derivatives offered by BitMEX from 2018 to 2022 and incurred losses of approximately £20 million in Bitcoin, now seeking the return of the relevant Bitcoin or equivalent compensation.

According to a report by Reuters, reprinted by Nikkei Asia, the union representing employees at Micron Technology's Taoyuan plant in Taiwan announced on Wednesday that it has obtained authorization for a strike, with the focus of the dispute being the company's bonus plan. The union stated that 1,994 members voted in favor of the strike, accounting for 99% of the voters, while details such as the timing of the strike are still under discussion. Micron has approximately 15,000 employees in Taiwan, with independent unions in Taoyuan and Taichung, and the two unions together represent over 80% of Micron's employees in Taiwan. Micron Taiwan is the company's largest manufacturing base.Taiwan is a key production site for Micron's DRAM and high-bandwidth memory, with related chips being important components for AI servers. Mediation with the Taoyuan union did not reach an agreement in September, and the Taichung union is still in negotiations. In September, Micron announced that it would distribute bonuses for the fiscal year 2026 to over 60,000 employees worldwide, stating that the company had experienced an "extraordinary year," with Taiwanese employees receiving a cash bonus of 1 million New Taiwan Dollars, approximately 31,400 US dollars. The Taoyuan union stated that the plan did not address the request for a permanent profit-sharing mechanism and criticized Micron for announcing the bonuses without first reaching an agreement with the union during the mediation period.

Salus posted on platform X, claiming that the project Revenue Family, which claims to be X Money's withdrawal bridge, involves malicious authorization. The perpetrators submitted user permit signatures to obtain unlimited USDG authorization, and then called transferFrom within the same transaction to transfer funds, with the funds flowing into two hacker addresses in an 80/20 ratio.On October 1, the project claimed that its social media account was stolen by internal reviewers, suspended exchanges, and denied that REV is the official token.

According to Scam Sniffer monitoring, a user lost LINK tokens worth $167,342 after signing a phishing authorization for Permit2 on Ethereum.The authorization was signed on August 18, 2025.

According to Quit monitoring, the Payment Processor V2 (PPV2) vulnerability attack is still ongoing. Even if users are not affected by the incident, as long as the relevant authorization has not been revoked, assets may still be at risk, and it is recommended to revoke the authorization immediately.About 1 hour ago, a certain address lost 0.15246 WETH in the next block after accepting a quote and receiving funds. The attacker paid 99% of it as a tip to Titan Builder, keeping only about 0.0015 ETH, which is almost impossible to recover through front-running. Quit suggests that OpenSea should check whether there are still risk authorizations before users accept quotes and require users to revoke them first; when transferring NFTs, it should also check whether the receiving address has relevant authorizations left.

NVIDIA (NVDA.O) announced an increase in the stock repurchase authorization scale by $150 billion.

Revoke.cash stated that Limit Break's payment processor has a known vulnerability, and users who traded NFTs on the Magic Eden Ethereum marketplace may still retain relevant contract authorizations.The vulnerability has been addressed by white hat security researcher 0xQuit. Currently, NFT assets are expected to be unaffected, but users should still check and revoke affected authorizations to reduce subsequent risks.