users

Coinbase's EU policy head Roeland Van der Stappen stated that the EU's efforts to tighten regulation on DeFi may push crypto users towards platforms with less investor protection. He told Cointelegraph that regulated crypto platforms might limit or even eliminate access to DeFi services as a result. He mentioned that rules aimed at protecting investors will ultimately push activities towards the least protected areas.In September, the European Securities and Markets Authority, in response to the EU Commission's MiCA consultation, suggested establishing a new category of regulated crypto services for companies providing access to DeFi protocols for customers. The European Banking Authority urged the Commission to explore new regulations for crypto lending that include suitability testing as one of the options. Van der Stappen noted that extending such tests to other DeFi services could treat simple stablecoin exchanges and leveraged lending equally, despite the different risks involved; lending, liquidity provision, and on-chain exchanges would be the most affected activities.He warned that restricting access through regulated platforms could fragment DeFi liquidity into smaller pools, resulting in worse trading prices for EU users and fostering isolated "walled garden" services that direct users towards providers outside the EU with less protection. An Adan-Ipsos survey in 2026 showed that 49% of French crypto buyers preferred accessing DeFi through exchanges, while 14% preferred personal wallets. Chainalysis reported that the slight decline in crypto activity in Germany was mainly due to reduced activity on decentralized exchanges; overall crypto activity in the EU grew by 2.2% in the 12 months leading up to June 2026.

According to the Coinbase blog, its MCP service Coinbase for Agents has launched Agent Controls, allowing users to set limits, product permissions, and stop conditions for trades conducted through the AI Agent. The relevant control settings run on Coinbase's server side, and users must log into their accounts via the Coinbase App or web to manage them; the AI Agent cannot modify or bypass them on its own.The features launched include: Maximum trade size, which sets the maximum amount for each trade in USD; 24-hour volume limits, where trades exceeding the limit cannot be executed; Auto-stop, which will stop the AI Agent from placing orders when the portfolio loss exceeds a set percentage, until the user re-enables trading in the App.In addition, the product permissions feature will soon be available, allowing users to choose the categories of products that the AI Agent can trade, including cryptocurrencies, stocks, and derivatives.

Xie Jiayin discussed Bitget's Open Custody Network (OCN), stating that its core idea is to recognize the limitations of traditional asset custody and trading services. Therefore, he proposed the concept of "assets stored in banks, trading on Bitget."By connecting banks, professional custody institutions, and Bitget's trading infrastructure through OCN, banks and professional custody institutions can leverage their advantages in the asset custody field, while Bitget focuses on trading services, liquidity, and trading experience. He believes that financial services should not force users to choose between asset security and trading efficiency, but should provide more options through better infrastructure, returning the choice to the users.

The cross-chain protocol Across announced that it has regained control of its official website domain, and all systems have returned to normal operation. Across stated that it will fully compensate all affected users and will release a complete post-incident analysis report in the coming days.According to previous disclosures from Across, the attacker gained control of the domain through a social engineering attack on the domain registrar Namecheap. During the period when the domain was out of control, the security response team SEAL 911 assisted in marking it as a phishing site. Across noted that some wallets or browsers may still display phishing warnings, which are expected to be eliminated soon.

The Sui native hardware wallet project Suiball announced the termination of operations on platform X and will refund all pre-order users. Suiball stated that due to recent security incidents involving hardware wallets in the industry, the Sui Foundation believes the risks of continuing to support the hardware wallet project are too high.Suiball indicated that its hardware products have completed development and entered the production phase, with plans to ship to the first batch of supporters. Approximately 80% of on-chain pre-order orders will automatically receive USDC refunds within the next week, with funds sent to the wallets holding the pre-order NFTs.Credit card pre-order users need to provide their Sui wallet address via official email to receive the USDC refund. The project team stated that after the refunds are completed, they will permanently delete the personal information provided by users and officially close Suiball.

On Tuesday, the cross-chain bridge protocol Across Protocol issued a warning on platform X, stating that it is investigating a potential security incident and reminding users not to access its applications or connect wallets temporarily, nor to sign transactions or authorize. The protocol did not specify the exact nature of the incident and did not confirm whether its website had been compromised. Across is a cross-chain bridge protocol that allows users to transfer digital assets between Ethereum and other blockchain networks.Multiple users reported financial losses on X. One user claimed to have lost 9,000 USDC, while another user reported losing 7,053 USDT through seven transactions on the Plasma network. A third user stated that their wallet was emptied after multiple uses of the cross-chain bridge and claimed that the website had been compromised. Across has requested transaction details from these users to conduct an investigation.

According to official news, Kraken has launched a bank automatic deposit feature for U.S. users, allowing users to choose the deposit amount and plan duration, with no deposit fees.Kraken stated that users can pause or cancel the automatic deposit plan at any time.

According to official news, Binance announced that the total traditional financial assets held by users through stocks and bStocks on the platform have exceeded 3 billion dollars.

According to The Defiant, Compound V2 users must claim their COMP rewards by November 10. After the deadline, unclaimed tokens will be returned to the Compound treasury.This reward program is part of the legacy rewards plan left by Compound on Ethereum, with a total of 40,419 COMP distributed at launch.

On November 9, 2026, Google released an emergency stable channel update for the desktop Chrome browser, fixing nine security vulnerabilities, including a zero-day vulnerability that was already being exploited in the wild. This update raises the Chrome version on Windows and Mac platforms to 157.8103.5/.51, and to 157.8103.5 on the Linux platform, and will be gradually rolled out over the next few days to weeks. The core focus of this update is the high-risk vulnerability numbered CVE-2026-125350, which is a use-after-free issue in an XML component. Google explicitly stated in the announcement that "CVE-2026-125350 is known to be exploited in the wild," but did not disclose specific attack methods, the scale of victims, or attribution of the attack activities.The vulnerability was reported by an anonymous researcher on November 6, 2026, just three days before Google released the fix. Among the nine fixes, seven are classified as "high risk" and two as "medium risk." In addition to CVE-2026-125350, another high-risk vulnerability, CVE-2026-125346, also pertains to a use-after-free issue in an XML component, reported by Arni Hardarson of Neonix Security on October 12, 2026, but Google only marked CVE-2026-125350 as an actively exploited vulnerability. The other high-risk vulnerabilities include uninitialized resources in WebGL, improper FileSystem authorization, synthesizer buffer overflow, GPU out-of-bounds write, and V8 type confusion, most of which were discovered by Google's internal security team.Google also confirmed that the Android version of Chrome (157.8103.5) released on the same day includes the same security fixes as the desktop version, with no exceptions noted. Users on the Extended Stable channel should install the update released separately on November 9, with Windows and Mac versions being 156.8078.96, which also lists CVE-2026-125350 as a high-risk fix. The Hong Kong Government Computer Security Incident Coordination Centre (GovCERT.HK) issued a security alert on the same day, defining affected systems as versions prior to Chrome 157.8103.5, and pointed out that successful exploitation of the related vulnerabilities could lead to remote code execution, denial of service, tampering, or bypassing security restrictions. The Hong Kong Computer Security Incident Coordination Centre (HKCERT) rated the risk level of this update as "extremely high risk." Google explained in the announcement that access to vulnerability details and links may remain restricted until most users complete the update. The company recommends that users manually check and trigger the update via "Settings → About Chrome," and restart the browser after completing the update for the patch to take effect. For users still running versions prior to Chrome 157.8103.5, the current priority action is to confirm the version number and restart immediately to complete the upgrade.

The founder of Slow Fog, Yu Xian, posted on the X platform stating that iOS has released a security update again, and the security of the iPhone is not as good as before, with various malicious exploits emerging.He reminded users not to install apps or open unfamiliar websites casually, especially those involving adult content, and noted that such reminders were mainly aimed at Windows in the past.

The Internal Revenue Service (IRS) is sending a large number of Notice 6174 to cryptocurrency taxpayers, reminding recipients to review their past filings. Clinton Donnelly, CEO of Cryptotaxaudit, stated that dozens of individuals have contacted the company recently, including its clients; he noted that receiving the notice itself does not imply any wrongdoing.Donnelly previously estimated that the IRS sends about 10,000 such notices each month. Notice 6174 is a voluntary compliance reminder, informing taxpayers that the IRS has information about their cryptocurrency transactions and asking them to verify whether they have fulfilled their tax filing obligations. Donnelly mentioned that the notice does not specify any particular filing issues and typically does not require a direct response. He advised recipients to carefully read the notice and understand their situation before hastily amending their filings or submitting information to the IRS.

Arbitrum posted on platform X that users can now make private transfers, deposits, and check balances on Arbitrum through @NullMaskio.

According to the official announcement from LNbits, the Lightning Network wallet and account system LNbits has encountered a wave of attacks, urging all users to immediately stop their LNbits servers.LNbits stated that the team needs to push multiple security patches and will take precautionary measures before the patches are released, and will announce further developments as soon as possible.

Binance Co-CEO He Yi published a statement regarding an issue where a user mistakenly transferred the wrong cryptocurrency while using two separate apps. Binance is legally unable to directly transfer funds from another person's account, and she will personally subsidize the user's losses caused by the mistaken transfer.He Yi explained that due to historical compliance reasons, Binance has three completely independently developed local sites, with product architecture and business models different from the main site, primarily focusing on local fiat currency trading. To prevent similar situations from occurring again, the next step will be to add three confirmations during the Binance payment transfer process. Additionally, He Yi stated that open discussions are a driving force for continuous iteration and hopes that peers will pay attention to their users just as they do with Binance. She invited users to submit product suggestions in the comments section, with the activity lasting one week. The product team will select the 10 best suggestions, and each selected participant will receive 1 BNB.

SignalPlus announced that after discovering abnormal activity on November 4, full compensation for all 23 affected users was completed within 72 hours, totaling $81,897. Following the incident, SignalPlus immediately notified partner exchanges, proposed and pushed for the suspension of all related API keys, while also suspending affected platform services and initiating a comprehensive security review. The team contacted users to complete verification while investigating, successfully completing the compensation. The platform is currently strengthening security measures, including enhancing API access requirements, implementing IP whitelisting verification, and tightening employee device and internal access controls. Services will gradually resume after the system review and upgrades are completed.

After the Financial Crimes Enforcement Network (FinCEN) of the U.S. Department of the Treasury issued a special measures order against MEXC Global, some community users reported that funds withdrawn from MEXC to centralized exchanges such as OKX, Binance, and Gate encountered risk reviews, delays in crediting, or entered refund review processes at the receiving platforms.In addition, Bitget Wallet officially stated that its bank card recharge service does not currently accept funds identified as coming from MEXC. At present, the relevant order from FinCEN has not yet officially taken effect. The aforementioned situations at the exchanges mainly come from community user feedback and are not a unified restriction announcement issued by the platforms; the specific scope of restrictions and the subsequent handling results of the related funds remain unclear.

On November 7, Tencent's Q&A community Sogou Wenwen and Wenwen Mall officially ceased operations. According to the official shutdown announcement released in October, both will stop services at 23:59 on November 7, 2026. At that time, the related pages will no longer be accessible, and the question bean redemption function will be closed simultaneously; after the shutdown, user accounts will be automatically canceled without manual operation.The official previously reminded users that the questions, answers, and personal content accumulated in Sogou Wenwen need to be screenshot or copied for backup in the personal center before the shutdown; after the shutdown, all content on the platform will be deleted or anonymized in accordance with the Personal Information Protection Law of the People's Republic of China and other relevant laws and regulations. Sogou Wenwen is a knowledge application product and Q&A interactive platform under Sogou, formerly known as the interactive Q&A community SOSO Wenwen under Tencent, covering dozens of categories such as computer digital products and games, with over 100 million users.

Binance founder CZ retweeted a warning about a critical vulnerability in Microsoft Paint, stating: "The application cannot protect you from operating system vulnerabilities, please update your operating system immediately."It is reported that Microsoft has disclosed a Windows Paint vulnerability numbered CVE-2026-83844, with a CVSS score of 8.1, affecting versions of Microsoft Paint below 11.2605.91. The vulnerability stems from an out-of-bounds read issue, which could allow an unauthenticated attacker to remotely execute malicious code without user interaction. Microsoft has released a security patch, and there have been no confirmed reports of the vulnerability being actively exploited. CZ uses this to remind users that application layer security measures cannot replace the security updates of the operating system itself, and system and software patches should be installed promptly.