Blog
Page 1 of 7
Crypto swap guides, coin analysis, and exchange comparisons.
Coldcard X account hijacked to push fake firmware alert, October 2026
On October 11, 2026, Coldcard’s official X account posted a fake “critical firmware vulnerability” alert for the Mk4, Mk5 and Q with a phishing link; no losses have been verified.
XRP Ledger overflow bug could have minted XRP from nothing, Oct 2026
On October 9, 2026, XRP Ledger developers disclosed a 2015-era overflow bug that could have created XRP beyond the 100 billion cap; it was quietly patched on September 25 and shows no sign of exploitation.
Ledger probes $86M+ losses tied to reseller CryptoBilis, October 2026
On October 9, 2026, Ledger opened an investigation into $86M+ in losses reported by users who bought devices from Southeast Asian reseller CryptoBilis, and told recent buyers not to set them up.
ESMA sets Jan 8, 2027 deadline for non-MiCA stablecoins like USDT
On October 8, 2026, ESMA told EU regulators that MiCA-licensed crypto firms must wind down client exposure to non-compliant stablecoins, USDT the most affected, no later than January 8, 2027.
Bitcoin falls to $84K as Hormuz oil spike wipes $555M: October 7, 2026
On October 7, 2026, bitcoin slid to about $84,286 as Brent topped $101 on Strait of Hormuz tanker attacks and 10-year yields hit 5.307%, liquidating roughly $555M of leveraged crypto positions.
Conduit sues Tether over $2.76M frozen USDT: October 2026 lawsuit explained
On October 5, 2026, payments firm Conduit sued Tether in New York federal court over $2.76M of USDT frozen for more than a year, seeking the funds back plus another $2.76M in damages and reserve profits.
FinCEN withdraws unhosted wallet and mixer rules: October 2026 explained
On October 5, 2026, FinCEN was reported to have withdrawn its 2020 unhosted-wallet proposal, with $3,000 ID and record-keeping checks, and its 2023 mixer rule; notices hit the Federal Register on October 6.
Base vault loses $6M in wstETH after 3-of-7 multisig whitelist change
On October 4, 2026, an unclaimed Base vault controlled by an anonymous 3-of-7 multisig lost about 1,783 wstETH, over $6M, minutes after two whitelist edits added a new borrower.
NEAR Intents hack: $3.8M returned in full after 48-hour ultimatum
By October 3, 2026, the full $3.8M taken in the October 1 NEAR Intents exploit was returned, NEAR GM Alex Shevchenko said, after the team identified the attacker and set a 48-hour deadline.
Blast layer-2 shuts down: how to withdraw before the October 26 deadline
On October 2, 2026, Ethereum layer-2 Blast said it is shutting down because costs exceed revenue. TVL is ~$32M, down from $2B+; users can withdraw through the interface until October 26.
SEC proposes crypto self-custody rule for advisers and funds (October 2026)
On October 1, 2026, the SEC proposed letting investment advisers and funds self-custody client crypto when no permitted custodian is available, and treating state trust companies as qualified custodians.
FCA opens UK crypto authorisation gateway: apply by Feb 28, 2027
On September 30, 2026, the UK FCA opened its crypto authorisation gateway: firms that want to keep operating must apply by February 28, 2027, ahead of the new regime taking effect on October 25, 2027.