News linked to both this project and an event.
Odaily reports: A community user posted that after connecting to free WiFi at Singapore Changi Airport, a "burner wallet" that had been inactive for a long time was drained of 3.7 BNB, and warned users not to casually connect to public WiFi. The user stated that the wallet had no transaction records for several months prior, but the assets were transferred out after connecting to the airport's free network.In response, Binance founder CZ said, "I've always advised against connecting to Wi-Fi, especially public Wi-Fi. But just connecting to Wi-Fi shouldn't be enough to get your wallet compromised. Was there some other operation in between?"
According to CertiK's monitoring, the decentralized protocol 79thVault exhibited suspicious activity. The attacker dumped 2.01 million 79AU tokens via a privileged function and transferred 16,200 BNB (approximately $12.5 million) to an attacker-controlled address. Approximately 90% of the stolen funds currently remain in the relevant address, and the project team has extended a 10% bug bounty offer for their return.
Odaily News: Galaxy Research on-chain tracking shows that the US government transferred approximately 9,261 BTC, worth about $770 million, to Coinbase Prime over two days. Since the deposit address was first activated in December 2025, it has cumulatively received 11,567 BTC, of which 6,406 came from wallets already labeled as belonging to the US government, and 5,160 came from previously unlabeled wallets.Of the 9,261 BTC transferred this time, nearly half can be traced back to Bitfinex hacker funds recovered by the US government, with some coming from previously known Binance-related seized assets; among them, 2,456 BTC previously had no clear government attribution label, but because they entered this address through the same path as government funds, they are currently regarded as US government seized assets. The US government currently holds approximately 319,100 BTC, of which about 71% comes from LuBian-related BTC and Bitfinex recovered funds.In January 2025, a US federal court approved the return in kind of seized Bitfinex hacker funds to Bitfinex, and the main address holding approximately 94,600 BTC has still not moved. In October 2025, the US Department of Justice filed a civil forfeiture lawsuit against Chen Zhi and related assets, involving approximately 127,300 BTC; this batch of LuBian BTC entered addresses attributed to the US government between June and July 2024. Since 2013, US government-related addresses have received a total of approximately 555,300 BTC, worth about $16.1 billion at prices at the time; during the same period, approximately 236,200 BTC flowed out, worth about $3.8 billion at prices at the time. After excluding internal transfers between the government's own addresses, this transfer, based on labeled government addresses, ranks 9th among the largest single-day BTC outflows in US government history, and is also the largest since December 2, 2024. BTC being transferred to Coinbase Prime does not mean the US government has already sold it, and on-chain transfers alone cannot confirm the specific purpose of the funds.
Odaily News — According to on-chain analyst Yu Jin's monitoring, trader @frogmanhaha's wallet (0x14...5794, 9wMS...ov8z) was suspected of being hacked approximately 5 hours ago, with 9 types of assets worth about $4 million transferred, sold, and swapped into ETH, BNB, and SOL, then dispersed through tools such as Privacy Cash and Chainflip. The stolen assets mainly include 1.43 million BP, worth approximately $1.77 million; 13.96 million MarsCoin, worth approximately $1.55 million; and 3.7 million Cash Cat, worth approximately $510,000.
Odaily reports: Cross-chain swap service Near Intents announced that the $3.8 million in funds stolen in a previous exploit has been fully returned, and the team has closed its investigation. Near Intents General Manager Alex Shevchenko had previously issued a 48-hour return deadline to the attacker, providing Bitcoin, BNB, Ethereum, and Solana addresses.The attacker acknowledged wrongdoing in an on-chain message, stating that all funds had been returned and urging others to report issues through the bug bounty program. The incident stemmed from a vulnerability in the interaction between its Omni deposit and withdrawal layer and the main smart contract. Near Intents had suspended services and promised full compensation to users. (Decrypt)
Odaily News: The U.S. Attorney's Office for the District of Massachusetts filed a civil forfeiture lawsuit on September 28, seeking the forfeiture of 110,300 USDT seized from a Binance account. The case involves phishing text messages impersonating Coinbase, which led to the theft of 33.7 bitcoins, worth approximately $900,000 at the time, from a beneficiary and their family trust held in the same Coinbase account.Investigators said that between June 5 and June 15, 2023, 11.2 of the stolen bitcoins were traced to the Binance account and were quickly converted into Monero. When the FBI requested the account be frozen, it held approximately 758.55 Monero; Binance transferred 110,300 USDT to a government-controlled wallet on August 3, 2026. (Bitcoin.com News)
according to monitoring by neil lee (@neillee99), they claim to have withdrawn approximately 50 BTC from Binance on July 8, converted it into SolvBTC and BTC+ to earn approximately 3% annualized yield, after which BTC+ minting and redemption functionality was suspended. On July 22, Solv Protocol publicly disclosed the related security incident and stated that assets were not affected; on July 31, the project team said functionality had been restored, but their address remained restricted, and approximately 50 BTC still cannot be redeemed to this day. They claim to have submitted proof of fund sources and wallet control, and called on Binance and investors to pay attention.
Control over the X account of Jack Kong, founder of Nano Labs, a US-listed BNB crypto treasury company, has been regained. Previously, attackers sent a phishing email to a publicly used email address of his. AI misidentified the link in the email as an official X third-party verification link, and after the verification code sent by X to the linked email was entered into the spoofed page, the account was compromised. Scam content was briefly posted during the account takeover.
Senator Cynthia Lummis (@SenLummis) posted that the U.S. Senate voted on the "Clarity Act," which aims to empower the Treasury Department to cut off money laundering activities conducted through offshore exchanges such as Binance. Lummis accused Democrats of voting against the bill, claiming they are unwilling to protect American citizens from the threat of offshore money laundering. Critics, however, pushed back, citing constitutional concerns and a corruption loophole targeting the current president as reasons for its defeat.
MistTrack (@MistTrack_io) disclosed that, following the transfer of nearly $1.2 billion in stolen funds from last year's $1.46 billion Bybit hack via THORChain, Bitget has recently suffered another major security breach, with stolen funds suspected of again flowing through THORChain. In response, the official THORChain team stated that its protocol is a decentralized, permissionless network, just like Bitcoin, Ethereum, and BNB Chain.
Odaily News: Today, THORChain officially posted on X platform stating, "We have noticed the recent Bitget hack and are deeply saddened by it. We can imagine this is a difficult time for everyone in the industry. (However,) THORChain is as decentralized and permissionless as Bitcoin, Ethereum, and BNB Chain. When dealing with known stolen funds, what responsibility should Bitcoin, Ethereum, and BNB Chain bear?" Subsequently, it called out OKX CEO Star and Bitget CEO Gracy.However, crypto community members in the comments pointed out that when THORChain previously suffered an attack, it once suspended services for 39 days, and they are deeply ashamed of the differentiated treatment between the two situations.
Odaily News: OKX Star posted on X in response to THORChain, stating that he does not believe THORChain's TSS + validator model represents true decentralization. THORChain's validators collectively control the underlying assets in the TSS vault, and funds can be moved once the signature threshold is reached. Therefore, from a custody perspective, it cannot be compared to the underlying consensus mechanisms of Bitcoin and Ethereum, but instead acts as an intermediary between users and native chains. "TSS distributes control among multiple participants, but decentralizing an intermediary does not eliminate the intermediary itself."Previously, discussions arose after some stolen Bitget funds were transferred through THORChain. THORChain responded that it is decentralized and permissionless, just like Bitcoin, Ethereum, and BNB Chain, and stated that if stolen funds were known to flow through Bitcoin, Ethereum, or BNB Chain, what responsibility should those networks bear?
Odaily news: According to Lookonchain monitoring, about 11 hours ago, an address withdrew 257.6 ETH, worth $692,000, and 545,000 USDT from Binance, then swapped 545,000 USDT for 200.2 ETH. About 1 hour ago, the address transferred all 457.9 ETH, worth $1.23 million, into the Bitget hacker wallet.
Binance CEO Richard Teng stated that following Bitget's recent security incident, the Binance security team has been closely collaborating with the Bitget team since the breach was identified. The teams are currently sharing threat intelligence, tracking relevant funds, and assisting in asset recovery. Richard Teng emphasized that the industry will collectively tackle attackers in response to such security incidents, with ongoing operations continuing to advance.
Bitget CEO Gracy Chen posted a 12-hour progress report on the security incident on X, including:1. Affected assets include ETH, XRP (largest single-chain loss), BNB, AVAX, USDT, USDC, and other tokens. Affected chains include: Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base. All on-chain cold wallets have been confirmed secure and unaffected.2. All foundations of the affected chains have been contacted, and some foundations have confirmed the freezing of the hacker's wallet addresses.3. Based on IP behavioral characteristics and on-chain analysis, the attack methodology is highly consistent with known patterns of North Korean hacker groups. Relevant authorities have been notified, and full cooperation is being provided for a global investigation.4. Bitget Wallet (decentralized wallet) operates completely independently from Bitget exchange infrastructure, and this incident has no impact on it. Bitget Wallet assets are completely safe.5. Transparent disclosure regarding the platform's financial status: In addition to over $464 million in protection funds (all held in publicly verifiable wallet addresses), Bitget's own assets exceed $1 billion. User funds are covered at a 1:1 ratio, and all data can be verified on-chain.6. Regarding withdrawal recovery timing: The goal is to achieve full recovery as soon as possible. Once a specific time window is confirmed, an announcement will be made immediately. No commitment will be made to timelines that cannot be fulfilled.
Binance Wallet announced the launch of real-time detection and risk blocking features targeting high-risk signature scenarios to prevent phishing attacks exploiting DeFi project authorization mechanisms. Binance stated that certain attacks only require tricking users into completing gas-free offline signatures, which can directly lead to stolen assets. It will continue to expand its risk identification scenarios and security protection coverage moving forward.
Odaily News: According to LookonChain monitoring, the breakdown of assets stolen from Bitget is as follows:102.93 million XRP (approximately $157.48 million);31,890 ETH (valued at $85.75 million);34.75 million USDT (approximately $34.75 million);21.05 million USDC ($21.05 million);19.67 million USD₮0 ($19.67 million);3,000 XAUt (equivalent to $12.82 million);12,719 BNB (valued at $9.88 million);821,012 AVAX (valued at $8.38 million);20.59 million $TRX (approximately $7.07 million).
According to Lookonchain data, the assets stolen in the Bitget incident comprise 9 different token categories, totaling approximately $356.9 million in value. Of these, approximately 102.93 million XRP (worth around $157.48 million) represents the highest-valued category, alongside 31,890 ETH (approximately $85.75 million). The remaining stolen assets include approximately 34.75 million USDT ($34.75 million), 21.06 million USDC ($21.06 million), 19.67 million USD₮0 ($19.67 million), 3,000 XAUt ($12.82 million), 12,719 BNB ($9.88 million), 821,000 AVAX ($8.38 million), and 20.59 million TRX ($7.07 million).
According to Blockaid, Meter is facing ongoing attacks on BNB Chain. Attackers are exploiting Meter Passport to mint a large amount of wrapped MTRG and sell portions on PancakeSwap. Approximately $2.3 million in unbacked wrapped MTRG has been minted through around two issuance transactions so far, and the attack remains ongoing.
According to Blockaid monitoring, Meter is currently under a sustained attack on BNB Chain. The attacker exploited Meter Passport to mint a large amount of wrapped MTRG and sold some of the tokens on PancakeSwap. So far, approximately $2.3 million in unbacked wrapped MTRG has been minted through about 2 minting transactions, and the attack is still ongoing.