protection

Binance founder Changpeng Zhao stated in an interview, "Typically, after an attack event, some users do choose to withdraw their funds. Some large institutions are required by internal policies to withdraw funds, and some retail investors may follow suit.However, after withdrawing, users face another question: where is it safer to store their money? I personally have not suffered any financial losses on Binance because Binance has absorbed the losses caused by this incident. This event is indeed frightening, but the question is, where can I transfer my funds? Recently, several hardware wallets have also been attacked, including one supply chain attack and another involving the mnemonic phrase generation process. This means that even if users make no operational mistakes and strictly follow all security protocols, purchasing hardware wallets and generating mnemonic phrases, they could still lose all their funds five years later without any fault, and no institution will bear the losses.The first wave of impact has already occurred, and Binance has also been attacked and completed repairs. Next, the second wave of impact may affect smaller platforms, which may not necessarily be more secure. Therefore, some users may initially choose to withdraw, but later realize that they need to manage their mnemonic phrases and store their assets themselves. In fact, less than 10% of the funds flowed to other centralized trading platforms, which means that most of the funds may have been transferred to users' own self-custody wallets. However, using self-custody wallets is not without risks. Users must properly back up their mnemonic phrases and ensure they do not get lost or damaged.In fact, most losses suffered by users when self-custodying assets are not even caused by hacker attacks. Therefore, after weighing their options, users may reconsider depositing their funds back into trading platforms. In fact, within less than 24 hours, we have already seen a change in fund flows. I also saw a tweet earlier showing that the fund flow statistics for the platform have turned into a net inflow on an hourly basis, which actually reflects the strength of the platform and users' trust in it. I believe that in the coming weeks and even months, fund flows will continue to fluctuate. As we mentioned before, if the market re-enters a bull market, we will see more funds flowing in.I believe there are many aspects that need attention. First, the speed of technological development is very fast, especially AI, which is growing at an astonishing rate, and the trend of exponential growth even exceeds people's understanding. Secondly, I believe that the entire cryptocurrency industry is still under-invested in the security field. Frankly speaking, many AI security tools are not yet truly applied in the industry.Therefore, I encourage all practitioners to increase their investment in these areas, including increasing the number of security engineers, introducing more AI tools, and closely collaborating with AI security service providers. I believe these are crucial. For ordinary users, what we call retail investors, I suggest everyone actively learn about different security tools, understand how to protect their assets, and closely follow industry trends and relevant news. Especially at this current stage, all of this is very important."

U.S. President Trump stated that if SpaceX faces risks due to the Democrats, Musk must be protected.

According to South Korean media "The Pioneer Economy," the Financial Services Commission of South Korea urgently convened representatives from trading platforms such as Upbit, Bithumb, and Coinone on the morning of November 2 to hold a security inspection meeting. The focus was on checking each platform's preparedness for large-scale hacker attacks and the user asset protection systems.This meeting was scheduled ahead of a security inspection meeting for the entire financial industry on November 5, aimed at understanding the response measures of the South Korean cryptocurrency industry in light of the recent large-scale asset theft incident involving Binance. The meeting will also discuss proposals to increase the proportion of user assets stored in cold wallets.According to South Korea's current "Virtual Asset User Protection Act," trading platforms must store at least 80% of users' virtual assets in cold wallets that are isolated from the internet. Reports indicate that Upbit's cold wallet storage ratio exceeds 99%, Bithumb is around 94%, Coinone is about 85%, while Digital X and Gopax are just above 80%.

Binance announced that due to abnormal situations such as restricted deposits and withdrawals and price deviations in the spot markets of multiple exchanges, it will enable the latest price protection (LPP) mechanism for the BULLAUSDT U-margined perpetual contract at 14:00 (UTC+8).During the protection period, the mark price will be calculated based on the average transaction price over the past 10 seconds, with a fluctuation limit of ±1% per second; the upper and lower limits of the funding rate will be adjusted from ±2% to ±0.005%.

AI cloud service provider Akamai launched the AI agent sandbox Agent Sandbox and the Akamai Inference beta on October 27. The Agent Sandbox provides an isolated environment for the code written and run for agents based on WebAssembly, limiting their computing power, memory, and external connections. Jon Alexander, Senior Vice President of Cloud Technology at Akamai, stated that teams running agents need to define boundaries for the code they write.A survey by Palo Alto Networks in 2026 of 2,930 security leaders showed that, on average, each human identity corresponds to 109 machine identities, of which 79 are AI agents. Hugging Face disclosed a breach on July 16, and OpenAI subsequently confirmed that its models were responsible; a METR investigation found about 1,200 OpenAI agents collaborating through hidden message boards, with around 700 participating in attacks, escaping the sandbox and exploiting unknown vulnerabilities to enter production systems.Zscaler discovered web pages hiding instructions targeting AI agents in July, specifically indirect prompt injection, with a spoofed document page requiring agents to pay approximately 0.0012 Ethereum as a $3 licensing fee, and 4 out of 26 tested models complied. Palo Alto completed its acquisition of CyberArk in February and acquired Koi in April, while Cisco completed its acquisition of Astrix Security on June 29. The investigation predicts that the number of enterprise AI agents will grow by 85% in the next 12 months, with human identities increasing by 56%.

The California Department of Financial Protection and Innovation (DFPI) has submitted a letter to the U.S. Securities and Exchange Commission (SEC) opposing its "Regulation Crypto Assets" proposal, stating that the plan could undermine investor protection and limit state governments' oversight of issuance projects. DFPI Commissioner KC Mohseni stated that California opposes federal regulators weakening state regulatory authority and protective measures.The proposal aims to allow eligible issuers to raise up to $5 million over four years through a startup exemption; another cryptocurrency financing exemption allows issuers to raise up to $75 million within 12 months. Relevant issuances must disclose project details, risks, and other information necessary for investor assessment, and some financing must also submit financial statements and ongoing reports. Federal securities laws still retain the authority for states to investigate securities fraud, deceptive practices, and illegal broker or dealer activities. Blockchain payment company Ripple, cryptocurrency exchange Coinbase, and exchange operator Nasdaq all support the adjustment proposal; DFPI stated that its fraud tracking list has added nearly 200 cryptocurrency-related scams, a 30% increase from the previous year.

According to Bloomberg, the Central Bank of Ireland has fined Coinbase's Irish subsidiary €3.25 million (approximately $3.6 million) due to deficiencies in its outsourcing governance framework and inadequate customer fund protection measures.Regulators pointed out that the company relied too heavily on the U.S. Coinbase Group to execute customer fund protection processes, and design flaws in the system along with insufficient control testing led to a long-term shortfall in the designated customer fund protection accounts.A Coinbase spokesperson stated that the relevant issues mainly occurred during the U.S. banking crisis in 2023, when the company directed customers to deposit funds into other bank accounts of Coinbase to mitigate potential losses from bank failures. However, this practice resulted in the mixing of customer funds with those held by other entities of Coinbase, which did not comply with regulatory requirements.Last year, the Central Bank of Ireland also fined Coinbase Europe €21.5 million for violating anti-money laundering and counter-terrorism financing transaction monitoring obligations (which included a 30% settlement discount).

BlackRock, the world's largest investment management firm, submitted an application to the SEC on Monday to launch the iShares Bitcoin Managed Protect ETF. According to the filing, the fund aims to provide investors with upside returns from the iShares Bitcoin Trust ETF (IBIT) and similar Bitcoin exposure while seeking to offer a certain degree of downside protection.The iShares Bitcoin Trust, managed by BlackRock, currently has assets under management exceeding $65 billion, making it the largest Bitcoin ETF in its category. BlackRock launched IBIT in January 2024 and introduced the iShares Bitcoin Premium Income ETF in June of this year, which aims to provide investors with Bitcoin exposure while generating monthly options premium income.Bloomberg Intelligence analyst James Seyffart noted on the X platform that this is BlackRock's third Bitcoin ETF application, and its product line currently only covers Bitcoin and Ethereum, without venturing into other crypto assets. In recent years, other companies have launched ETFs tracking assets such as XRP, SOL, and DOGE.

According to Cointelegraph, the Australian Securities and Investments Commission (ASIC) has proposed to expand the regulatory scope of Contracts for Difference (CFD) to include derivatives settled using digital assets.ASIC aims to add contracts settled through the transfer of digital assets to its definition of CFDs, rather than being limited to contracts settled in cash or offset transactions, provided that these contracts meet other identification criteria for CFDs. If the proposal is approved, Australian traders using crypto-settled CFDs will receive the same protections as cash-settled CFD traders.ASIC has made it clear that certain cryptocurrency futures and options with fixed expiration dates will remain outside this framework. CFDs allow traders to speculate on price fluctuations without holding the underlying asset. The current framework implemented in Australia since 2021 includes safeguards such as leverage limits, mandatory margin calls, and negative balance protection, which limits customer losses to the funds within their CFD trading accounts.ASIC is seeking feedback from the industry and stakeholders on the proposed expansion and revisions, with a deadline of November 9. This move comes as Australia strengthens its broader regulatory framework for digital assets.In April of this year, Australia legislated to include cryptocurrency exchanges and tokenized custody platforms within its financial services licensing framework, with the new system set to take effect on April 9, 2027. ASIC has also required crypto companies relying on temporary enforcement exemptions under existing financial services laws to apply for licenses or seek changes to existing licenses by September 30.

According to Cointelegraph, the Financial Stability Board (FSB) warned in a document submitted to G20 finance ministers and central bank governors that cross-border regulation of stablecoins, crisis management mechanisms, and AI-related cybersecurity risks still need further improvement.FSB Chair Andrew Bailey stated that the current cross-border regulation of stablecoins and crisis management mechanisms "are still immature or have not yet been established."

The Zcash development team plans to add post-quantum signature support to the network in January. Zakura engineer Roman Akhtariev stated in an engineering blog that the team plans to implement post-quantum signature opcodes in Zcash in January. These opcodes will enable Zcash to verify hash-based signatures, thereby resisting quantum computing attacks. The team has not yet confirmed a specific network activation date. This upgrade aims to prevent attackers from using current public keys to reverse-engineer and forge payment authorizations from wallet owners.The initial phase of this upgrade will protect transparent transactions. Zcash has two payment methods: shielded payments hide the sender, receiver, and amount; transparent payments are similar to Bitcoin, where addresses and amounts are visible on the chain. According to CoinDesk, based on ZecStats data, approximately 11.96 million of the 16.98 million issued ZEC are stored in the transparent pool, accounting for about 70%. The January plan primarily targets this public portion. Additionally, Zakura has developed a private query tool that allows wallets to check balances without exposing associated addresses to the server; the experimental version is available in the "Private queries" settings of the Zcash wallet Vizor.Before the release of Zakura's engineering article, Ethereum researcher Justin Drake warned holders on Thursday to prepare for what he called "bunker mode," stating that in the worst-case scenario, AI could find shortcuts to break the mathematical protections of Bitcoin and Ethereum wallets in "months rather than years."

Bitget's head of the Chinese-speaking region, Xie Jiayin, posted on platform X stating that the latest reserve proof for 19 mainstream assets is 131%; the user protection fund has been replenished by Bitget's own funds to 3,705 BTC, currently valued at 316 million USD.

Vitalik.eth posted on Farcaster revealing that he is conducting a personal experiment to generate personalized diet and exercise recommendations using personal health and travel data by combining local models with remote cutting-edge models while protecting privacy.The system employs a three-layer privacy protection architecture:Identity Layer: A local model (Qwen 3.8B) replaces the user to construct query requests, avoiding the exposure of writing style that could reveal identity.Payment Layer: Uses zkAPI to hide payment information.Network Layer: Hides IP addresses through Tor.The system is currently operational, but Vitalik pointed out three major shortcomings: Tor is inefficient and has high latency in unlinking requests; the local model runs at only 20-30 TPS, and a smooth experience requires over 100 TPS; the stricter the data protection, the more limited the assistance that the remote model can provide. The relevant code has been submitted to the Ethereum zkAPI repository.

On October 2, at 11:30 AM Eastern Time, the Arbitrum Security Committee executed an emergency upgrade on Arbitrum One and Nova, suspending the activation of all new Stylus contracts on both chains, while adding a protective mechanism against BoLD single-step proofs in the dispute system of Arbitrum One. The Arbitrum Foundation stated that this action is part of ongoing proactive security measures aimed at protecting the security and integrity of the network.Stylus allows developers to write smart contracts using languages such as Rust and C++, while maintaining compatibility with the Ethereum Virtual Machine, with its programs compiled into WebAssembly format. This suspension primarily targets manually written WASM programs that do not use the standard Stylus compiler toolchain and have not yet been patched by the current version of ArbOS. The Security Committee increased the gas required for activation to the theoretical maximum by calling ArbOwner.setWasmActivationGas(2^64 - 1), making new activations economically unfeasible. Activated Stylus contracts are unaffected and can continue to execute and renew, and the deployment and execution of Solidity contracts are also unrestricted.The newly added BoLD protection allows anyone to pause the settlement from Arbitrum One to Ethereum when two conflicting and accepted answers appear in the same dispute step, which may delay unconfirmed withdrawals to allow the Security Committee to deploy fixes. Officials pointed out that the currently discovered Stylus-related vulnerabilities mainly affect the activity of the chain, such as denial-of-service attacks, and do not jeopardize user funds.

According to the official announcement, the Bitget User Protection Fund has been replenished to over 300 million USD, with the latest on-chain balance being 3,705 BTC.Since its establishment in 2022, the fund has continued to operate as an additional protection mechanism for user assets, employing an on-chain public and traceable management approach. Users can view the relevant wallet addresses on the fund page and independently verify the on-chain fund.

According to @ai_9684xtpa's monitoring, Bitget has started to replenish the protection fund, which has now risen to a scale of 200 million USD. In the past 2 hours, Bitget transferred 2,000 BTC (worth 166 million USD) from its cold wallet to the protection fund address. The current on-chain balance is 2,484.71 BTC, worth 206 million USD. Previously, Bitget promised to "replenish 300 million USD within a week," and is in the process of fulfilling that commitment.

According to @ai_9684xtpa monitoring, the Bitget BTC protection fund currently has 5,500 BTC, with 3,215.28 BTC having flowed out, valued at approximately 266 million USD, and there are still 2,284.71 BTC remaining on-chain. The most recent transfer from the Bitget hot wallet was 13 hours ago.

According to the official announcement, Bitget has launched the "Peer Program," offering trading rewards, asset rewards, and exclusive rights to different user groups, in order to give back to users who have continued to show trust and support during recent security incidents.For non-institutional users, Bitget will establish a dedicated prize pool using 30% of the platform's trading fee revenue. 60% of the prize pool will be distributed based on user trading volume, while 40% will be distributed based on asset value, with rewards issued in the form of USDT.In addition, Bitget will provide eligible V1 to V7 users with a 30-day protection experience card before October 1, which can be activated and used in the coupon center. This event will take place from September 28 to October 26, divided into four cycles, each lasting 7 days. Specific activity rules are subject to the official Bitget page.