revoke

A MEXC user posted on X that their account was compromised after someone reset the security items. MEXC has confirmed the account was hacked, frozen the account, and assisted in recovery, but did not revoke the API left by the attacker. From 04:12 to 04:25 on September 27, 2026 (Beijing time), the account transferred out 322,110 USDT and 9,133,999 ONE, totaling approximately $340,000, about 27 minutes after the 24-hour transfer limit was lifted.The user stated that at 03:10 on September 25, they received a reset security item email that was not submitted by them, and about 10 minutes later, the request was approved. Subsequently, the account was logged in from an IP in Jakarta, Indonesia, bound to Google verification, and at 05:05, an API was created, approximately 83 seconds after logging in. At 10:55 that day, MEXC froze the account after a risk review and reverted to the original email. Customer service responded in writing that the review materials met the requirements, so the binding change was approved, and after the risk review, the account was urgently frozen and reverted to the initial email. The user changed their password and Google verification on September 26 but stated that the API was not revoked, and there were no related records in the security operation history.The user also claimed that there were no new login records in the login history when the assets were transferred out. They have submitted a formal claim to MEXC and attempted to report to the police, with the ticket number M2026092712031, requesting the platform to preserve logs, provide a written explanation of the review and API situation, and return the aforementioned assets. MEXC customer service stated that it is currently unable to confirm whether these transfers were initiated via APP, WEB, or API, and the issue has been forwarded to the relevant department.

Revoke.cash stated that Limit Break's payment processor has a known vulnerability, and users who traded NFTs on the Magic Eden Ethereum marketplace may still retain relevant contract authorizations.The vulnerability has been addressed by white hat security researcher 0xQuit. Currently, NFT assets are expected to be unaffected, but users should still check and revoke affected authorizations to reduce subsequent risks.

Magic Eden announced that the vulnerability occurred in the NFT trading protocol Payment Processor V2 maintained by Limit Break. Magic Eden adopted this protocol for EVM network transaction settlements in 2024 but stopped using V2 in October 2024 and will completely shut down the EVM market in the first quarter of 2026. Therefore, NFTs currently listed on Magic Eden are not affected by this vulnerability.NFTs listed through its EVM market between February and October 2024 may be affected, while listings after October 2024 are generally not impacted. The platform is contacting the protocol owner and maintainer Limit Break to explore other risk mitigation measures, including pausing protocol transfers, and will continue to investigate the actual scope of the impact.Magic Eden reminds users who have listed or traded NFTs on its EVM market to revoke relevant contract authorizations on the Ethereum, Polygon, and Base networks. Users can filter the address through revoke.cash and revoke all authorizations marked as "approved for all" for NFTs. Magic Eden emphasizes that revoking authorization cannot recover assets that have already been transferred.Yuga Labs' Vice President of Blockchain Quit stated today that at 9 AM Eastern Time, attackers exploited the Payment Processor V2 vulnerability to steal a large number of NFTs. After contacting the LimitBreak team, the latter quickly paused the similarly affected Payment Processor V3. However, V2 could not be paused, and V3 on ApeChain is also temporarily unable to be paused. Therefore, the team implemented a white-hat operation, successfully transferring and protecting 23,155 NFTs valued at over 5.7 million dollars.

The payment service provider license of CoolCash (Xiao Yi Payment), the parent company of Tianxu International Technology Co., Ltd., has been revoked by the National Bank of Cambodia and has entered liquidation proceedings. The company and its director, Pang Weizhi, were included in the UK government's sanctions list in March this year due to alleged ties with the Prince Group.The National Bank of Cambodia announced on the 10th that it revoked the payment service provider license of Tianxu International Technology on August 3. This license was issued on May 27, 2024, and was originally valid until 2030. The bank also appointed Morrison Kak MKA Audit Accounting Firm as the liquidator in accordance with Article 68 of the Law on Banking and Financial Institutions to handle liquidation matters and return relevant funds to the company's clients in accordance with the legal priority order.UK sanction documents indicate that Pang Weizhi holds Cambodian and Chinese nationality, with the Cambodian name Pang Visal, and serves as a director of Tianxu International Technology and the parent company of Elephant Delivery, U-Life KH Super App Company Limited. The UK side claims to have reasonable grounds to suspect his ties with the Prince Group and that he has provided financial services or funds, economic resources, goods, or technology to the group. The UK side alleges that the Prince Group is involved in operating scam centers in Cambodia, which include forced labor and serious human rights violations. Tianxu International Technology and Pang Weizhi have been listed as targets of sanctions in both corporate and personal capacities.

Australia's financial intelligence agency AUSTRAC has canceled, suspended, or refused to renew the registrations of 45 cryptocurrency and remittance service providers in the past year to strengthen the scrutiny of high-risk payment businesses. The involved institutions faced issues such as inactivity, insolvency, or lack of operational capability, as well as failure to report significant changes, incorrect registration information, and significant money laundering or terrorism financing risks. AUSTRAC CEO Brendan Thomas stated that businesses whose registrations have been canceled are not allowed to continue operations, and some related individuals have been referred to domestic and international law enforcement or regulatory agencies. AUSTRAC specifically mentioned BA Digital Ventures operating under the name GetCoins, whose virtual asset registration was canceled in June due to customer complaints, allegedly because the platform was exploited by organized cryptocurrency investment scams, with related actions conducted in cooperation with the national anti-fraud center. The public VASP registration list also included recent disposals of institutions such as Cryptolink, Self Custody, Jam Xchange, and Coinsec Australia. Additionally, AUSTRAC has launched an investigation into Western Union and suspended the cryptocurrency ATM network of Cryptolink.

Coinflip and its CEO Benjamin Weiss have been accused by the Washington State Department of Financial Institutions (DFI) of violating the Uniform Money Services Act. The DFI seeks to revoke Coinflip's money transmission license, prohibit the company and its related personnel from continuing to operate, and impose a fine of $1,029,600.The DFI stated that an inspection in 2025 found that Coinflip had insufficient anti-money laundering controls, inadequate transaction monitoring, failure to enforce transaction limits, inaccurate regulatory reporting, and unclear fee disclosures. The agency also accused Coinflip of failing to timely refund at least 15 customers as required. The proposed order requires Coinflip to refund eligible customers in Washington State, with customers aged 60 and above eligible for refunds of transaction fees and markup fees. Coinflip and Benjamin Weiss may request an administrative hearing to contest the allegations, refund requirements, license revocation, fines, and industry bans.

DeFi protocol Term Labs updates on the progress of the attack incident, disclosing that the affected entity is the Term Vault governance mechanism, rather than the underlying Term protocol and its direct lending market. All Meta Vaults have now been closed and DAO governance permissions revoked to prevent further inflow of funds. This closure operation is irreversible and will permanently block new deposits.Currently, the withdrawal function remains open, and they are working with external security teams to conduct repairs and recovery. If a funding gap is ultimately confirmed, corresponding solutions will be explored. Term Labs reminds users to pay attention only to information released by official accounts and to be wary of impersonators and fraud. Previously, it was reported that Term Labs suffered a governance attack resulting in losses of approximately $8.5 million.

According to The New York Times, in March 2022, Sylwester Suszek, the founder of the Polish cryptocurrency exchange Zondacrypto (formerly BitBay), went missing and left a desperate voice message for his sister, leading his family to suspect he may have been murdered. Przemyslaw Kral, the lawyer who took over the management of the company, has also been missing for four months.Kral had previously released a video to reassure clients, stating that the company held over $330 million worth of Bitcoin, but the only person who possessed the unlocking keys was the missing Suszek. About two months after the website closed around April (on June 29), the Estonian Financial Intelligence Unit (FIU) revoked the license of its parent company.

GoPlus Security issued a security alert stating that a user signed a malicious Permit transaction 183 days ago, resulting in approximately $1,625 of USDC being transferred by a phishing attacker.Since the user did not revoke the relevant authorization afterwards, the attacker again used that authorization to transfer approximately $75,780 of USDC.

According to a report by Reuters, the Chief Minister of Johor, Malaysia, stated on Tuesday that the Johor state government has noted and fully supports the decision made at the special meeting of the municipal hall: to revoke the business license of NS0 Malaysia Sdn. Bhd. (Network School) located in Forest City, and to order it to cease all activities starting from July 22, 2026.He stated that this decision was made in accordance with due process and relevant legal provisions, and was ultimately decided after a comprehensive review of the law enforcement inspection report, investigation results, and the statements submitted by the company.Network School had previously attracted widespread attention due to allegations on social media. Some netizens claimed that the project accepted participants from Israel, while Malaysia has not established diplomatic relations with Israel.

According to a community alert released by Blockaid, the old governance proposals (#14 and #15) of BarnBridge Smart Yield have token authorization risks. If maliciously executed or upgraded, they may jeopardize existing token authorizations. It has not yet been confirmed that any funds have been withdrawn, but users are advised to check and revoke relevant authorizations on Ethereum as soon as possible.Proposal #14 is in an executable grace period, while proposal #15 is queued, with an expected on-chain execution time of July 16 at 09:23:58 UTC. The affected tokens include USDC, DAI, USDT, GUSD, and RAI, and the relevant contract addresses have been publicly disclosed. Blockaid reminds users to use trusted authorization management tools, not to trust links in replies or accounts claiming to be "support," and not to send funds or sign transfers to any address, only revoke authorizations through trusted tools.

According to Livecoins, the Chilean Financial Market Commission (CMF) announced the cancellation of the registration qualifications of the cryptocurrency platform Plusspay, due to its investigation revealing connections with the Venezuelan criminal organization "Tren de Aragua," which was used to provide financial support to the gang.In addition to Plusspay, several other institutions, including Pixeltec and Iuinvest, that failed to submit complete information on time as required by the Financial Technology Law (Lei Fintec) have also had their qualifications to provide services in the Chilean market revoked. These institutions are prohibited from expanding their customer base and may only conduct operations related to clearing services and returning frozen funds to existing users. Regulators emphasized that payment and cryptocurrency service providers must enhance transparency to prevent money laundering and illegal fund flows.

According to Jinshi, the U.S. Supreme Court declined to review the constitutionality of a now-repealed policy of the U.S. Securities and Exchange Commission (SEC).The policy previously required individuals and companies that reached enforcement settlements with the SEC not to publicly criticize or question the allegations made by this Wall Street regulatory agency. The U.S. Supreme Court justices did not provide any explanation on Monday when they rejected the challenge regarding whether the SEC's so-called "gag order" infringed on individual constitutional rights.

Celsius founder Alex Mashinsky submitted a motion to a New York court seeking to overturn his 12-year sentence for fraud and market manipulation. The documents show that Mashinsky chose to represent himself (pro se) after his lawyer withdrew, stating that his lawyer "stopped communicating with him," forcing him to submit documents to the court personally. He claims that there was "ineffective legal representation" in his previous defense and invokes the "fruit of the poisonous tree" doctrine to question the legality of some evidence in the case.Mashinsky also accused Sam Bankman-Fried of attempting to "destroy Celsius" in the submitted materials and attributed market manipulation related to the CEL token to FTX. Additionally, he publicly shared text messages with former Celsius Chief Revenue Officer Roni Cohen-Pavon, claiming that the latter had attempted a "hostile takeover" of the company. In 2025, Mashinsky pleaded guilty to commodity fraud and securities fraud and was sentenced to forfeit $48 million, while also required to pay $10 million in settlement to the Federal Trade Commission. Cohen-Pavon, who previously assisted the prosecution as a witness, has been sentenced to "time served" and paid over $1 million in fines.

The U.S. Commodity Futures Trading Commission (CFTC) announced on Tuesday that it has jointly filed a motion with Gemini Trust Company LLC in the U.S. District Court for the Southern District of New York, requesting the dismissal of a previous judgment against Gemini.The case was originally filed in June 2022, and the parties reached a consent order in January 2025. After a comprehensive review, the CFTC concluded that the lawsuit should not have been filed and would not be filed under current enforcement standards.The review identified six major issues: the complaint was primarily based on statements from a whistleblower of questionable credibility; the investigation targeted Gemini as a victim of fraud rather than the alleged fraudster; there were serious doubts about the strength of the evidence against Gemini; relevant supporting materials were concealed and not submitted to the commissioners during the CFTC's vote on the complaint; the litigation team invoked deliberative process privilege to prevent Gemini from obtaining evidence necessary for its defense; and personnel improperly used CFTC regulatory power to create leverage for settlement.The CFTC determined that continuing to enforce the forward-looking provisions of the consent order is neither consistent with its mission nor in the public interest, and that the non-forward-looking provisions of the consent order (such as civil penalties) have been fulfilled. The parties jointly request the court to vacate the remaining forward-looking provisions.

According to Bitcoin.com, the High Court of Windhoek, Namibia, revoked the bail of 8 absent defendants in a cryptocurrency fraud and human trafficking case and confiscated approximately $29,800 in bail money. The prosecution stated that the 8 individuals include 6 Chinese nationals, 1 Vanuatu national, and 1 Singaporean national, with 6 Chinese suspects tracked down to China. Namibian authorities have requested assistance from Interpol to locate them.The criminal group operated under a front company called Raylon Investments from December 2022 to October 2023. The group is suspected of recruiting unemployed Namibians and forcing them into labor. The state government stated that these employees were compelled to create fake social media accounts impersonating women from Europe and the United States to lure international victims into romantic relationships. Once trust was established, victims were manipulated into transferring money to cryptocurrency accounts controlled by the criminal group. Investigators estimate that the group stole approximately $267,800 from victims worldwide.

According to Bloomberg, the Monetary Authority of Singapore has announced the revocation of the major payment institution (MPI) license of the cryptocurrency payment company Bsquared Technology. The reasons include flaws in risk management and conflict of interest policies, violations of outsourcing management regulations, and providing false or misleading information to regulators multiple times during the license application and on-site inspection processes.Bsquared obtained a digital payment token service license 16 months ago and is now required to submit a closure certificate issued by an auditing firm to confirm that all customer funds have been returned. The MAS stated that it is further reviewing the responsibilities of the company's key management personnel. Currently, only 37 institutions in Singapore are approved to provide digital payment token services, and license revocations are relatively rare.

According to CoinDesk, the U.S. Securities and Exchange Commission (SEC) has rescinded the "no denial" rule that has been in place for about 50 years. The new rule allows defendants who reach a settlement with the SEC to publicly question or deny the allegations made by the SEC in enforcement actions. Previously, defendants were typically restricted from publicly rebutting the relevant allegations after signing a settlement agreement.

According to Decrypt, the closed cryptocurrency exchange Bittrex has filed a motion to a federal judge to withdraw its settlement agreement with the U.S. SEC and is requesting the SEC to return the $24 million fine.Bittrex was accused by the SEC of offering unregistered securities trading during the Biden administration, ultimately reaching a settlement and paying a fine, and then closed due to the "current U.S. regulatory and economic environment" that made it impossible to continue operations. Bittrex's lawyers pointed out in the latest filing that the SEC's stance on cryptocurrency regulation has fundamentally changed since the Trump administration took office, acknowledging that the legal theory that most tokens are considered securities was incorrect, that the enforcement strategy has been flawed from the beginning, and that almost all lawsuits and investigations against cryptocurrency companies have been withdrawn.Bittrex is asking the judge to order the return of the funds before the SEC transfers the money to the Treasury for compensation. In March of this year, the SEC initiated the process to transfer the fine to the Treasury.

AMM infrastructure Ekubo posted on platform X that a security incident occurred with the Swap routing contract on the EVM chain, but liquidity providers were not affected, and Starknet was not affected. The team is investigating the scope of the incident and recommends that users immediately revoke all authorizations for the affected addresses.The affected addresses include the V2 and V3 contract addresses on Ethereum, as well as the V3 contract address on Arbitrum. The team is preparing a post-incident analysis report and reminds users to be cautious of links claiming to be related to the Ekubo Protocol or the vulnerability.