News linked to both this project and an event.
Odaily reports: Bitget stated on X platform that an investigation by Google Cloud's Mandiant into Bitget's September 24 security incident found that attackers gained unauthorized access to certain third-party security devices, then laterally moved into Bitget's exchange wallet environment and obtained access to both warm and hot wallets. The investigation findings are consistent with the attack path previously disclosed by Bitget.
According to Cointelegraph, Greece has been added to the EU's MiCA registry for the first time, with BCash, Xenios Blockchain Group, Capital Wallet Greece, and Piraeus Bank receiving authorization. The total number of registrations under ESMA now reaches 359. Among them, the first three are supervised by the HCMC, while Piraeus Bank is regulated by the Bank of Greece, demonstrating Greece's dual-track regulatory framework for MiCA. Previously, Binance applied for MiCA authorization in Greece. If approved, it could have leveraged the passporting system to offer services across Europe, but it voluntarily withdrew the application on June 24. On September 18, the Wall Street Journal reported that ECB President Lagarde had intervened, asking the Greek prime minister to prevent the application's approval. The HCMC explicitly denied this to Cointelegraph, stating that no officials had communicated with ECB staff regarding Binance's application, and that the report's claims were entirely untrue. Both Binance and the ECB declined to comment.
Odaily News: The European Securities and Markets Authority (ESMA) has updated the MiCA register, with BCash, Xenios Blockchain Group, Capital Wallet Greece, and Piraeus Bank becoming the first batch of Greek crypto asset service providers to be included. The register added 6 institutions from Germany, France, and Slovenia, bringing the total number of registered institutions to 359.The Hellenic Capital Market Commission (HCMC) is responsible for supervising the first three institutions, while the Bank of Greece oversees Piraeus Bank. The HCMC denied that its officials had communicated with European Central Bank (ECB) officials regarding Binance's Greek MiCA application, and also denied making any statements about Lagarde intervening in the application; Binance withdrew its application on June 24. (Cointelegraph)
Odaily News: Tether has announced a partnership with Shiga to launch self-custodial financial products in Africa and the Gulf Cooperation Council (GCC) region based on its open-source Wallet Development Kit (WDK), enabling users and institutions to hold and transfer USD₮, Bitcoin, and Tether Gold (XAU₮).Among them, ENTA targets individuals, high-net-worth users, and enterprises, while Pulse targets institutions such as banks and fintech companies, used for building digital asset payment, treasury management, and settlement services. Shiga is currently in the final stage of approval for a digital asset intermediary license in Nigeria.
Bitget CEO Gracy Chen 发布安全事件最新进展称，平台正与独立第三方安全团队 Mandiant 和慢雾合作，对此次事件展开全面调查。 Gracy Chen 表示，目前用户账户余额保持完整，此次平台层面安全事件造成的影响将由 Bitget 用户保护基金覆盖；Bitget Wallet 采用自托管模式，其基础设施与 Bitget Exchange 相互独立，因此未受到此次事件影响。 目前 Bitget Exchange 的充值、交易及奖励等功能继续运行，但提币仍暂时暂停，平台正在进行额外安全核查，确认安全后将恢复。Bitget 官方公告也显示，提币服务目前仍处于暂停状态，充值和交易正常运行。 Bitget 表示，后续调查进展及安全事件相关信息将通过官方渠道持续公布。
Bitget CEO Gracy Chen posted a 12-hour progress report on the security incident on X, including:1. Affected assets include ETH, XRP (largest single-chain loss), BNB, AVAX, USDT, USDC, and other tokens. Affected chains include: Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base. All on-chain cold wallets have been confirmed secure and unaffected.2. All foundations of the affected chains have been contacted, and some foundations have confirmed the freezing of the hacker's wallet addresses.3. Based on IP behavioral characteristics and on-chain analysis, the attack methodology is highly consistent with known patterns of North Korean hacker groups. Relevant authorities have been notified, and full cooperation is being provided for a global investigation.4. Bitget Wallet (decentralized wallet) operates completely independently from Bitget exchange infrastructure, and this incident has no impact on it. Bitget Wallet assets are completely safe.5. Transparent disclosure regarding the platform's financial status: In addition to over $464 million in protection funds (all held in publicly verifiable wallet addresses), Bitget's own assets exceed $1 billion. User funds are covered at a 1:1 ratio, and all data can be verified on-chain.6. Regarding withdrawal recovery timing: The goal is to achieve full recovery as soon as possible. Once a specific time window is confirmed, an announcement will be made immediately. No commitment will be made to timelines that cannot be fulfilled.
Odaily News: The Central Bank of Brazil has issued Resolutions No. 588 and No. 589, requiring virtual asset service providers (VASPs) to report inbound and outbound transactions involving self-custodial wallets valued at or above $10,000, while strengthening anti-money laundering and counter-terrorism financing oversight.Resolution No. 588 stipulates that relevant transaction data will be submitted to the Financial Activities Control Council (COAF). The agency may use this information to organize transactions and establish a database of self-custodial addresses, recording the asset holdings of Brazilian users who hold crypto assets through authorized centralized exchanges.Resolution No. 589 prohibits conducting business with virtual asset service organizations or entities operating in Brazil without authorization. The new regulations will take effect on October 1, 2026. Currently, only 5 VASPs have applied for licenses to operate in Brazil. (Bitcoin.com News)
According to Yonhap News Agency, the Busan Metropolitan Police Agency revealed that on the morning of September 12, an unauthorized individual breached the SMS agency account used by the marketing department of a mixed-use shopping complex in Sasang-gu, Busan. The attacker bulk-sent scam messages to over 260,000 unspecified recipients, claiming "your cryptocurrency wallet has been updated" and urging quick installation. Once users clicked the attached links, they could fall victim to a smishing attack, potentially resulting in the theft of their virtual assets. Police have since blocked access to the relevant accounts and are actively investigating the intruders.
Odaily News: Bitget Wallet has announced its integration with RWA protocol Reality, opening trading access to over 1,700 rToken tokenized US stocks. Through this integration, users can trade tokenized US stocks 24/7 on Arbitrum and Morph without needing to open an overseas brokerage account, submit KYC, complete a W-8BEN form, or arrange a wire transfer. Dividends generated by the corresponding underlying assets will be credited to Bitget Wallet in USDT at a 1:1 ratio.Reality is a compliant tokenized asset issuance platform, licensed under El Salvador's digital asset issuance law framework. Its issued rTokens are backed 1:1 by real US stocks, currently supporting over 1,700 tokenized US stocks including rTSM, rNVDA, rAAPL, and rQQQ, covering approximately 95% of US market trading volume. rTokens can connect directly to liquidity across all US markets including Nasdaq and the NYSE, with underlying assets compliantly custodied by FINRA-licensed broker-dealer Alpaca Securities, maintaining a reserve ratio exceeding 100%, with third-party CPA firms issuing daily real-time Proof of Reserve (PoR). This integration will further advance Bitget Wallet's Everyday Finance strategy, aiming to enable users to seamlessly conduct everyday transactions of traditional financial assets through an on-chain wallet.
Odaily Report: CoinEx has issued an announcement stating that after careful evaluation, due to factors including the prolonged downturn in the crypto market, the significant contraction in overall industry trading volume and liquidity, and the continuously rising regulatory requirements and compliance costs, CoinEx has decided to cease operations and will enter an orderly wind-down process starting September 15. CoinEx stated that its current asset reserve ratio exceeds 100%, and all user assets are fully backed by sufficient reserves.According to the arrangement, CoinEx will cease all non-spot business on September 22, halt all spot trading on September 29, and CoinEx Smart Chain (CSC) and OneSwap will also cease operations on the same day; withdrawal services will continue until December 22, at which point the CoinEx trading platform will officially cease operations. CoinEx Wallet and CoinEx Vault are not affected by this shutdown and will continue to provide services as normal.
Bitcoin News posted on X platform stating that Coin Center says the latest revised BRCA text removes the provision that provided explicit criminal liability protection for developers who do not control user funds under 18 U.S.C. § 1960. The revised text would still protect developers who do not control user funds from being deemed money transmitters under the Bank Secrecy Act and FinCEN regulations, thereby significantly raising the difficulty of prosecuting developers solely for failing to obtain a money transmitter license or register with the federal government. However, the text cannot prevent prosecutors from arguing that developers knowingly transmitted funds derived from criminal activity, a theory that has become the core basis in the criminal cases against Tornado Cash developer Roman Storm and Samourai Wallet developers. Coin Center believes that this compromise represents substantive progress on the regulatory front, but developers still face broader money transmission criminal prosecution theories from the U.S. Department of Justice; if the CLARITY Act passes with the revised BRCA, the related disputes will mainly shift to the courts.
The EU's Cyber Resilience Act has taken effect. Cryptocurrency hardware and software wallet providers must submit an initial early warning within 24 hours after discovering actively exploited vulnerabilities or severe security flaws in their products, and submit a full notification within 72 hours.Manufacturers must submit a final report within 14 days after corrective or mitigating measures become available; serious incidents must be reported within one month. Companies that violate the relevant regulations may face fines of up to €15 million or 2.5% of global annual turnover, whichever is higher; providing false, incomplete, or misleading information may result in fines of up to €5 million. (Cointelegraph)
Odaily News: Bitget Wallet has announced its official membership in the Blockchain Collaborative Consortium (BCCC) of Japan, becoming the first global ToC self-custodial wallet to join the BCCC to date.As Japan officially implements new regulations related to crypto-asset intermediation services in June 2026, Bitget Wallet will participate in industry policy discussions as a BCCC member, exploring the role and positioning of self-custodial wallets within the regulatory framework; at the same time, it will leverage its global self-custodial wallet operational experience to engage in institutional dialogue in the Japanese market, and promote awareness and adoption of on-chain everyday finance among Japanese users.Founded in 2016, the BCCC is Japan's first and largest blockchain industry association, with over 270 member companies and multiple specialized committees including DeFi and stablecoin committees. The alliance has long served as a policy communication and collaboration bridge between Japan's blockchain industry and regulatory authorities.
According to Bitcoin.com, Mastercard officially launched the Wallet Pay payment solution on September 10, aiming to connect global digital wallets to its international payment network. The solution supports NFC contactless, QR code, online, and cross-border payments, covering over 200 countries and regions and 150 currencies. Global digital wallet users currently exceed 4.3 billion and are projected to surpass 6 billion by 2030. Participating entities include major wallet operators such as Alipay+, Mercado Pago, and MTN. Additionally, Mastercard announced support for the settlement of six compliant stablecoins across eight blockchain networks, and is partnering with over 85 institutions through its Crypto Partner Program to advance blockchain payment infrastructure.
According to Decrypt, privacy-focused Bitcoin wallet Sparrow Wallet released version 2.5.4 on August 28. Developer Craig Raw stated that the update was driven by an AI-assisted code review, with the majority of fixes originating from it. This review was prompted by the recent seed generation code vulnerability exploit affecting Coldcard, as well as the release of unrestricted AI models in China, which has significantly enhanced vulnerability scanning capabilities across large codebases. Key updates include: validating the authenticity of transactions returned by Electrum servers, enforcing stricter BitBox02 hardware wallet security requirements (firmware v9.4.0 or higher required), patching local DNS leaks, and masking sensitive credentials in debug logs. Raw noted that there are no indications of any exploits being leveraged, user funds remain secure, and he still advises all users to update at their earliest convenience.
Odaily News: Sparrow Wallet v2.5.4 has been released following an extensive AI-assisted review, featuring multiple security hardening updates aimed at reducing users' reliance on external servers such as Electrum.Additionally, this version strengthens Ledger, Keycard, Trezor, Payjoin, PSBT, and multi-signature handling, removes Bitcoin Core credentials and other sensitive information from debug logs, restricts permissions for existing wallet and backup directories to owner-only access, closes residual local DNS resolution leaks when using Tor, and reinforces validation for wallet import, signing, downloads, and server responses. The update expands Sparrow Wallet's scope of independent verification for transaction data, hardware devices, and other inputs, reducing dependence on data provided by external servers. (Bitcoin News)
According to BeInCrypto, payment company Banxa launched Banxa Native on August 20, providing embedded fiat deposit and withdrawal infrastructure for wallets, exchanges, and fintech platforms. Partners can execute fiat purchases or sales of crypto assets within their own interfaces, while Banxa provides backend pricing, compliance verification, and settlement services, reducing the need to redirect to third-party pages or undergo repetitive KYC verifications. For example, users can directly purchase USDC via Apple Pay, Google Pay, or bank cards within the wallet; for users who have already completed identity verification, their KYC information can be passed from the partner platform to Banxa, streamlining the process for subsequent transactions. Trust Wallet CEO Felix Fan stated that this partnership helps directly embed compliant fiat-to-crypto channels into the user journey.
Odaily News - The U.S. Internal Revenue Service (IRS) has issued a warning about an advanced email phishing campaign targeting cryptocurrency holders in the United States. Attackers are using forged official tax letters to trick users into scanning malicious QR codes, aiming to steal crypto wallet credentials and private keys.According to reports, the attackers are impersonating the IRS by sending physical letters that create a sense of urgency under the guise of "tax compliance" or "account verification," and include QR codes within the correspondence. Once users scan these codes, they may be redirected to counterfeit websites, potentially exposing wallet login information, recovery phrases, or private keys, ultimately leading to the theft of digital assets.The IRS reminds taxpayers that official agencies will never request users to provide crypto wallet private keys, recovery phrases, or perform similar "wallet verification" procedures through unofficial channels. Cryptocurrency holders should remain vigilant against any suspicious emails or letters that ask them to scan QR codes, connect wallets, or submit sensitive information.As the number of crypto asset holders continues to grow, social engineering attacks targeting digital wallets are on the rise. Regulatory and security agencies are stepping up efforts to raise awareness and prevent such fraudulent activities. (CoinDesk)
Odaily News Figure Co-founder and Executive Chairman Mike Cagney announced that the company will launch a mobile application called The Wallet Co, designed to combine the ease of modern fintech with self-custody and blockchain-native products.The Wallet Co will offer features such as instantly spendable interest-bearing cash, RWA yields, and securities prediction markets, with an AI Agent built into every wallet.Additionally, The Wallet Co is publicly hiring for operations and compliance lead roles, requiring relevant experience in KYC/AML, payments, and fund flows.
Odaily News: Cryptocurrency platform Bitcoin.com has announced the integration of USDU into its self-custody Bitcoin.com Wallet, serving millions of wallet users. USDU, issued by Universal Digital Intl Limited (Universal), is the first USD stablecoin registered as a foreign payment token by the Central Bank of the UAE (CBUAE). USDU is an Ethereum ERC-20 token, with each token backed 1:1 by liquid USD reserves held by regulated banks in the UAE. The reserves are independently attested monthly by a third-party accounting firm, with reports published on Universal's official website. Bitcoin.com Wallet's web and mobile versions will support self-custody holding, sending, and receiving of USDU. Bitcoin.com will accept USDU as payment for designated services and plans to enable its use for payments between users and merchants within its products. The wallet will also offer stablecoin education and Learn-to-Earn content. Exchange and buy/sell functionalities will be launched after support from third-party service providers, with availability varying by jurisdiction. (Bitcoin.com News)