Feed

$3.47B Lost in the 24 Biggest Hacks Since 2025, and Ledger Is the Newest One

On October 9, an attacker drained over $93M from 315 wallets in a few hours. All the confirmed victims had bought Ledger devices from CryptoBilis, an authorized reseller in Southeast Asia. Ledger says its own systems weren’t breached, but it confirmed a hidden hardware implant inside one of the devices.

That makes it stand out on the list. Most of the $3.47B lost in these 24 hacks came from exchanges and protocols, with Bybit alone at $1.43B. Here, users kept their crypto in cold storage, as security advice says, and still lost it, because the device had been tampered with before it reached them.

Top 7 Perks | Variational Points +12% | Nado Private Invite | Kolo Free Card Issuance | $20 in KAST Points

Standard Chartered now offers custody for XRPL-issued $RLUSD through its Dubai branch, with about $1.14 billion circulating on the ledger and an LMAX collateral link still pending.

https://defiprime.com/standard-chartered-launches-rlusd-custody-dubai

Papertrade One-Pager. 1000x Perps on Hyperliquid

Papertrade opened on October 10 with BTC and ETH perps at up to 1000x. Notional volume has passed $770B, but in a day open interest fell from $3.3B to $51M and margin to $6.4M.

Nobody seeded the house pool: it starts at $0 and grows only from trader losses, which also mint PAPER. The pool holds about $5M, and stakers have collected around $25M in USDC.

The weak spot is pricing. The only feed is Hyperliquid's mid, and one wallet netted $1.28M by moving ETH there, so Papertrade tightened its caps. Deposits peaked near $102M and now sit around $59M.

https://starciest.xyz/market/activity
https://x.com/starciestark

easy x2. floor 50 strk. near vibe

I mentioned it at the early stages and also sent a link to Mint in the chat

How $93M Left 315 Ledger Wallets in 47 Minutes

Bitquery traced the CryptoBilis drain: $93.2M from 315 wallets on 6 chains in 47 minutes, all via devices from Ledger's reseller in Southeast Asia.

After 41 test runs, the thief took $29M USDT on TRON in 6 seconds on October 9 and emptied 111 Bitcoin wallets in one block. Ledger confirmed "an unauthorized hardware implant" in one victim's device but sees "no indication" its own systems were compromised. Tether froze $10M, while $14.9M was swapped into USDD, which Tether can't freeze.

Ledger's warning covers 90 days of purchases, yet over 80% of victim wallets were first funded from June. Bought from CryptoBilis since then? Move to a new device with a new seed.

Weekly Recap: AI, Tech & Crypto
October 5–11, 2026

A rough week for crypto and a loud one for AI. Bitcoin slid to ~$80.5K with $1B+ in liquidations, and spot ETFs saw $681M in outflows, ending a three-week inflow streak. OpenAI made ChatGPT answer with interactive charts and forms instead of text, and Vitalik warned that AI could replace traditional onchain apps within two years.

Big money kept moving: SpaceX made an $8B push into wireless, Waymo closed a $5B loan, and Manus raised $500M after China blocked Meta’s $2B acquisition. Firmus showed the limits of the AI boom by pulling its $5B IPO when investors balked at a $30.6B valuation.

Top 7 Perks | Variational Points +12% | Nado Private Invite | Kolo Free Card Issuance | $20 in KAST Points

Kraken Clears Dubai's Final Step to Launch in the UAE

Kraken got Full Market Approval from Dubai's VARA, the last licensing stage after its preliminary nod in May. Parent Payward can now start regulated activity for retail, professional and institutional clients.

At launch, UAE clients get spot and margin trading in AED pairs, dirham deposits and withdrawals, on-chain staking, xStocks and Krak transfers, while institutions get OTC spot trading and Kraken Prime. "From launch, clients in the UAE get the same order book and multi-asset coverage we run in every other market," said co-CEO Arjun Sethi.

Crypto derivatives and new yield products should follow later in 2026 and into 2027, pending further approval. No launch date yet.

Partner Offers | Get Your Instant BTC Cashback | Your Gateway To Crypto | Arcus Private Whitelist

CONTEST GIVEAWAY IS OVER!

Thank you all for participating! I reviewed every tweet and selected the best ones.

Of course, I couldn’t make everyone happy this time. Next time, I’ll choose more winners so that more people can walk away satisfied.

Thank you all for your support and love. ❤️🦉

Send me your wallet addresses DM on X

https://x.com/0xHilary/status/2109577765087215648
https://x.com/emmm_one/status/2109569248267821140
https://x.com/LoneRogue8/status/2109516781140258939
https://x.com/0xValeriy/status/2109581613197820167
https://x.com/0xhuak/status/2109559288389677444

2 GIVEAWAYS on X
Sealedpunk - 25 gtd freemint spots
Zamkuro - 5 gtd spots

​​Updated: ​​A short list of the upcoming TGEs, primary listings, product releases you should know about.

The FSB puts stablecoins at around $300 billion, with 99 per cent pegged to the US dollar, and says supervisors still lack reliable geographic data on holdings, redemptions, and reserves.

https://defiprime.com/fsb-maps-cross-border-stablecoin-risks

Alameda-Backed Miner Pivots to AI Compute

SWI Group raised €800M ($900M) at a €6.1B valuation to turn Genesis Digital Assets, the bitcoin miner it took over this year, into AI data centers.

Alameda Research put about $1.15B into Genesis in 2021, a bet FTX's estate called one of Bankman-Fried's most reckless. SWI bought into Genesis for $500M in June, now controls it and is renaming it SWI Digital. CEO Max-Hervé George says he has "zero interest" in bitcoin mining.

Sites in Texas, the Carolinas and Sweden will be marketed to hyperscale cloud providers, and the remaining Kazakhstan mining sites are up for sale.

Partner Offers | Get Your Instant BTC Cashback | Your Gateway To Crypto | Arcus Private Whitelist

Kraken entity Payward FZCO now holds an active Dubai VARA licence for broker-dealer and management and investment services across retail, qualified, and institutional clients.

https://defiprime.com/kraken-payward-dubai-vara-licence

China Builds Blockchain, Keeps Crypto Banned

Beijing called for a national blockchain network in new guidelines from the Party leadership and State Council. It fits a 13-year pattern: ban the tokens, back the tech.

Banks were barred from Bitcoin in 2013, ICOs and local exchanges were shut in 2017, and all crypto trading and mining were banned in 2021. In between, Xi Jinping named blockchain a core technology in 2019, and the state BSN network and e-CNY pilots launched in 2020. Hong Kong now licenses stablecoin issuers, while the mainland ban still stands.

The market still trades China headlines: CKB gained 32.2% over the past week and CFX 17.2%, though the document names no tokens.

Partner Offers | Get Your Instant BTC Cashback | Your Gateway To Crypto | Arcus Private Whitelist

- Vulnerabilities in Liquity forks Part 1 and Part 2 by VulSight.

- Yo Protocol's Unseen Dangers: Why Code Audits Aren't Enough - link
@EthSecurity1

XRP Ledger Patches a Bug That Could Mint Free XRP

XRP Ledger disclosed a critical payment bug that could create spendable XRP from nothing, breaking the 100B supply cap. RippleX found no sign it was exploited.

The flaw sat in the payment engine since 2015. An attacker could open a few hundred accounts, have each offer a token for a huge amount of XRP, then buy them all in one payment. The total overflowed to a tiny number: sellers got paid in full, the buyer paid almost nothing, and the "no new XRP" check missed it.

The attack needed only a few hundred XRP in reserves plus fees. A researcher reported it via the XRPL bug bounty on Sept 22, and the fix shipped in xrpld 3.4.1 on Sept 25.

Partner Offers | Get Your Instant BTC Cashback | Your Gateway To Crypto | Arcus Private Whitelist

DATA Network Ditches Its Own Chain for Sui

Sui Foundation is investing $30M in DATA Network, the AI training data protocol formerly known as Story, and becomes its largest institutional holder.

DATA Network will retire its own chain and run natively on Sui, with Walrus as the default storage layer. Running a dedicated chain for one use case meant paying for validators, security and infrastructure, a DATA Foundation spokesperson said. Its Trace registry, launched in June, has logged 250M+ data contributions and handles 3M+ receipts a day.

DATA tokens move to Sui 1:1, with locked and vesting positions carried over unchanged. The current network keeps running until the switch, and a migration timeline comes before the upgrade.

Partner Offers | Get Your Instant BTC Cashback | Your Gateway To Crypto | Arcus Private Whitelist

Papertrade is tightening directional OI caps after traders targeted its Hyperliquid BBO pricing, reducing new exposure while leaving the underlying manipulation path open.

https://defiprime.com/papertrade-tightens-caps-after-bbo-manipulation

PLabs proposed a private Ethereum stablecoin design that separates unbacked inventory from 1:1 reserve-backed notes and leaves redemption open to holders and relayers.

https://defiprime.com/plabs-proposes-private-stablecoin-protocol-on-ethereum

French lawmakers backed taxing crypto-to-stablecoin conversions from 2027 and extending exit tax to crypto portfolios above €800,000.

https://defiprime.com/france-committee-backs-stablecoin-tax-change

XRPL patched a payment overflow that could create 18 trillion $XRP in one transaction, closing a route that bypassed both payment accounting and the no-$XRP-created invariant.

https://defiprime.com/xrpl-patches-payment-overflow-that-could-mint-xrp

The IMF found $300 billion to $350 billion in daily tokenized repo volume, while fragmented venues still leave tokenized markets relatively illiquid and more volatile than traditional counterparts.

https://defiprime.com/imf-tokenized-markets-liquidity-risks

ALPHA OWLS COMMUNITY CONTEST- $100 PRIZE POOL

It’s time to show your creativity and tell the world about Alpha Owls 🦉

5 winners - $20 each!

How to participate:

Create an original tweet about Alpha Owls. Tell people why you’re part of the community, what makes Alpha Owls special, or why others should join us.

Tag @OwlLfg and @alpha_owls in your tweet.

Be creative. Make your tweet stand out. The best entries will have a chance to win!

Let’s show everyone what Alpha Owls is all about.

You must be followed to my X, Owls and Telegram. Good luck, Owls! 🦉

https://opensea.io/collection/the-pebbles/overview
https://x.com/Pebble_agent

Mint 0.02 eth -> floor 0.06 eth
Full public mint

NFTs is back on eth?

Fresh Watchlist

Vault Street - freemint on hood

Influence - an interesting project on hood. Form. Your influence has value (c)

Degen moves:
Hushed fun - launchpad on starknet
Sakura - early rwa on base
Pleat - early on base

More nft, degen moves, etc: https://x.com/OwlLfg/status/2109203701302780045

Papertrade hacked for $ 1.28M

- A quant trader with $13M+ all-time PnL manipulated Papertrade’s oracle by executing massive ETH buys/sells on Hyperliquid to briefly move its price, profiting $1.73M gross on timed long/short flips before a final $450k liquidation left $1.28M net.

- The attack involved 305 trades (296 wins) over 8 hours, with average 98-second holds: open $200M+ Papertrade positions, manipulate Hyperliquid price within seconds, close for profit, and reverse direction repeatedly.
- Papertrade prices directly off Hyperliquid’s ETH spot at the exact second, making it vulnerable to short-term manipulation; the post suggests the team blocked some closes and recommends upgrading to Hyperliquid’s less manipulable official multi-feed oracle.
@EthSecurity1

Papertrade hacked for $ 1.28M
A quant trader with $13M+ all-time PnL manipulated Papertrade’s oracle by executing massive ETH buys/sells on Hyperliquid to briefly move its price, profiting $1.73M gross on timed long/short flips before a final $450k liquidation left $1.28M net.
The attack involved 305 trades (296 wins) over 8 hours, with average 98-second holds: open $200M+ Papertrade positions, manipulate Hyperliquid price within seconds, close for profit, and reverse direction repeatedly.
Papertrade prices directly off Hyperliquid’s ETH spot at the exact second, making it vulnerable to short-term manipulation; the post suggests the team blocked some closes and recommends upgrading to Hyperliquid’s less manipulable official multi-feed oracle.
@EthSecurity1

How We Claimed a Pre-Bedrock Optimism Withdrawal

Link: https://medium.com/coinsbench/how-we-claimed-a-pre-bedrock-optimism-withdrawal-4d1df1ba017f

How We Claimed a Pre-Bedrock Optimism Withdrawal

• https://x.com/officer_secret/status/2109077519198462370?s=46

#development

French lawmakers backed taxes on stablecoin swaps and crypto portfolios above €800,000, which would change reporting for active users and wealthy holders leaving France.

https://defiprime.com/france-committee-backs-stablecoin-swap-and-exit-taxes

Papertrade scheduled trading for 14:00 UTC, with $1 billion of per-market, per-side OI headroom and frontend relayers controlling launch transaction flow.

https://defiprime.com/papertrade-sets-launch-caps-and-profit-haircut

Coinbase and Gennius plan to let Argentine bank customers convert eligible deposits into $USDC-backed ONED USD, transfer around the clock and spend through Visa.

https://defiprime.com/coinbase-gennius-oned-argentina-bank-rollout

The CFTC wants event contracts treated as swaps, putting about $1.5 billion in monthly volume under a federal derivatives framework while retail access remains limited to designated contract markets.

https://defiprime.com/cftc-event-contracts-swap-proposal

XRPL patched a payment engine overflow that could mint spendable $XRP, using direct server upgrades after validators judged an exploit worse than a halt.

https://defiprime.com/xrpl-patches-payment-engine-xrp-overflow

Upgrade to 7.2.9 or later. That is the only thing that actually closes the problem. The rest reduces exposure.

• Turn on “ask where to save each file”. With that setting, automatic download does not happen at all, and the instruction file never reaches the disk. It is the most effective mitigation short of upgrading.

• Limit who can add you to groups to your contacts only. Stolen files can only be sent to a channel or a supergroup, so this takes away the place the attacker would have them delivered to.

• Set a local passcode, and choose it like a real password. It does not prevent the files from being stolen; it only makes the stolen session unusable.

• Disable automatic download:

1. Open Telegram Desktop and click the three horizontal lines (menu icon) in the top-left corner.
2. Click on Settings.
3. Select Advanced.
4. Scroll down to the Automatic Media Download section.
5. Choose the chat types to manage (Private Chats, Groups, and Channels) and toggle off photos, videos, and files as desired.

• https://x.com/officer_secret/status/2108713090783076373?s=46

#telegram #security #alert