CryptoOct 12, 2026Research brief
As the theft investigation into the incident continues, Ledger said the implant was found in at least one affected user's device and that the incident appeared isolated to CryptoBilis, an authorized Southeast Asian reseller. Loss figures vary by source: Cointelegraph's headline says losses may exceed $86M, while CryptoSlate cites independent investigators' estimate of $93.2M in suspected thefts and says the implant exposes a gap in Ledger's authenticity check.
Read research brief →
CryptoOct 12, 2026Research brief
Cointelegraph says the foundation pushed back on claims that the patch was forced on network operators. The Block and CryptoSlate describe an overflow bug in the payment engine that could have minted about 18 trillion spendable XRP in one transaction; CryptoSlate says testing produced spendable XRP but the disclosure reports no evidence of public-network exploitation, and Cointelegraph's weekly digest says the researchers got a $250K bounty for a bug it headlines as "$94 billion."
Read research brief →
CryptoOct 12, 2026Research brief
CryptoSlate, citing SoSoValue, says bitcoin, ether, and solana funds lost nearly $1.25B in the week ended Oct. 9 ($681.1M, $542.07M, and $24.81M respectively), and Decrypt counts $386.3M of bitcoin ETF outflows over October's first seven trading days plus nine straight days of ether fund losses. CoinDesk's headline says bitcoin shrugged off the outflows to trade above $84,000 as oil fell.
Read research brief →
CryptoOct 12, 2026Research brief
Decrypt says the IMF analysis found that more than half of tokenized-stock trading happens outside US market hours, and that the roughly $2.3B market is more volatile and less liquid than traditional equities.
Read research brief →
CryptoOct 12, 2026Research brief
CryptoSlate cites a CoinGlass snapshot at 20:28 UTC on Oct. 11 with STRK at $0.1190, up 17.7% in 24 hours and 116.7% over seven days, after Starknet said on Oct. 8 it was actively considering leaving Ethereum for its own Layer 1. Decrypt says Zcash full-node developer Zakura expects hash-based signatures in January and is rolling out a privacy tool for rotating transparent addresses this week.
Read research brief →
CryptoOct 12, 2026Research brief
Cointelegraph says holders could face fines of up to 10,000 euros for failing to declare qualifying assets. The item reports lawmakers' backing; it does not report final adoption.
Read research brief →
CryptoOct 12, 2026Research brief
The Block says the AI data protocol will be upgraded to run natively on Sui and its independent chain will be retired; Cointelegraph reports the same migration and investment.
Read research brief →
CryptoOct 12, 2026Research brief
Cointelegraph says the Financial Stability Board urged G20 policymakers to support stronger safeguards against both.
Read research brief →
CryptoOct 12, 2026Research brief
The Block says the same wallet later lost $450,000 when 30 short positions were liquidated on Saturday night after staying open for more than three hours.
Read research brief →
CardanoOct 10, 2026Research brief
A merge into cardano-scaling/hydra at 14:26 UTC on 2026-10-09, "Followups on some recent work (#2899)", makes sure the node doesn't "observe something else as a deposit". It also tidies decommit-related code. It continues the run of Hydra deposit merges covered here on 2026-10-06 and 2026-10-07, but the commit doesn't say which earlier work it follows up, and doesn't call itself a security fix.
A Hydra node acts on what it observes on chain. If it read the wrong thing as a deposit, its view of a head's funds could drift from the chain. This change tightens that check. It lands days after the deposit-related security fixes covered here on 2026-10-06, so builders and operators using deposits or decommits should watch which release ships it.
Limit: The message doesn't say what "something else" is, or whether a misread deposit ever happened. It doesn't say what one could have caused, or which "recent work" this follows up. It names no advisory, severity or affected versions. It's a merge to master, not a release, so running heads are not shown to be patched. This is Hydra, not the Cardano base protocol.
Read research brief →
CardanoOct 10, 2026Research brief
"benchmark fixes (#2898)", merged at 12:23 UTC on 2026-10-09, makes Hydra's benchmark reports show average live heap during the load instead of peak memory since start. The slope row now needs 8 snapshots in its window instead of 4, and a row is coloured only when at least 3 of the 4 pairs measured it. It follows the PR-benchmark queue-size change covered here on 2026-10-07. This changes measurement, not Hydra's performance.
Anyone using Hydra's benchmark reports to size or compare deployments should know the memory metric changed. Peak-since-start and average live heap answer different questions: worst case versus typical load. So memory figures from before and after this change measure different things. The stricter slope and colouring rules should mean fewer trend signals drawn from thin data.
Limit: The commit doesn't say Hydra uses less memory or got faster. Reported memory may fall simply because the metric changed. No benchmark figures are given. It doesn't say what the "pairs" are, or whether peak memory is still reported anywhere. It's benchmark tooling, not a release or a protocol change.
Read research brief →