Track market-moving stories before they get noisy

A series of security vulnerabilities have been disclosed in internet infrastructure software within a single day, affecting PHP, Node.js, and Go.

Multiple internet infrastructure software projects rolled out security updates in a single day, addressing vulnerabilities including remote code execution, TLS certificate validation bypass, and certificate trust risks. PHP fixed two critical flaws: CVE-2026-109618 and CVE-2026-109619, both enabling unauthenticated remote code execution that impacts PHP environments processing web requests. The patched versions are 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Node.js’ advisory details 10 vulnerabilities, four of which are high-severity: these include remote code execution via out-of-bounds write in the Brotli decoder, DNS name truncation, and two TLS certificate hostname validation bypass issues. Fixed versions are 26.12.1, 24.22.1, and 22.23.4. Additionally, Go’s crypto/x509-related risk is tracked as CVE-2026-111943, rated "Important" by Red Hat with a CVSS 3.1 score of 6.8. Attackers with specific network access and valid certificates could impersonate legitimate servers to intercept or alter communications. Go 1.26.10 and 1.27.3 have been added to a deny list, blocking trust for compromised intermediate certificates.

1 hours ago

Dataline completes $10.6 million seed round funding, and plans to conduct an ICO.

Decentralized data network for AI agents Dataline has closed a $10.6 million seed round, co-led by Lattice and Samsung-backed Dispersion Capital, with participation from Symbolic Capital, Coinbase Ventures, Anagram, and Robinhood co-founder & CEO Vlad Tenev, among others. The round, completed in April, utilized a SAFE agreement with token warrants; valuation was not disclosed. Dataline is now live, covering approximately 50 data sources to deliver on-chain and off-chain data, and scores data reliability, timeliness, and consistency using AI. Proceeds will be allocated to expanding data sources, enhancing data validation, and expanding into robotics, AI training data, and other sectors. Dataline plans to launch a token by the end of 2026 for network payments and data access, and intends to conduct a public token sale on Base via Uniswap’s Continuous Clearing Auction (CCA) system, with details set to be revealed next week. The public sale’s target fundraising amount, token quantity, and other terms remain undisclosed.

1 hours ago

Trump plans to leverage White House cyber crime efforts to showcase achievements in combating cross-border crypto fraud.

White House officials said on October 21 that Trump planned to focus on the U.S. government’s actions to crack down on overseas crypto fraud rings during the White House’s cybersecurity event that day, including recovering funds and shutting down fraudulent operations. These transnational criminal groups steal funds from U.S. citizens via romance scams, phishing, ransomware and other methods. The U.S. government noted that law enforcement agencies have seized approximately $833 million in crypto assets linked to overseas fraud, and shut down 503 fraudulent crypto websites under the supervision of the Homeland Security Task Force. Relevant authorities have also notified nearly 9,000 U.S. citizens to alert them they are being targeted by fraud. The U.S. Treasury Department previously announced the establishment of an inter-agency "Fraud Strike Task Force" to target "pig butchering" scams run by organized criminal groups in Myanmar, Cambodia, Laos and the Philippines. Since last year, the U.S. has also imposed multiple sanctions aimed at cutting off support for related fraud websites and their infrastructure.

1 hours ago

American Bankers Association voices dissatisfaction with OCC’s final GENIUS Act rule, which abandons proposed restrictions on stablecoin yields.

Crypto journalist Eleanor Terrett reported that the American Bankers Association (ABA) has voiced dissatisfaction with the final rules implemented by the U.S. Office of the Comptroller of the Currency (OCC) under the GENIUS Act. The OCC abandoned the previously proposed restrictions on stablecoin yields, a move the ABA argues will "maintain the status quo for crypto platforms." The ABA’s CEO stated: "It is a mistake to wait until deposit outflows and economic harm have already occurred before attempting to address these issues."

1 hours ago

Beyond PHP, three Node.js version branches are also affected by high-severity vulnerabilities, and users need to update their runtime environments promptly.

Node.js rolled out a security update on October 21, covering its 26.x, 24.x, and 22.x version branches, with corresponding patched releases: 26.12.1, 24.22.1, and 22.23.4. The advisory details 10 total vulnerabilities, categorized as 4 critical-severity, 3 medium-severity, and 3 low-severity, with varying impact scopes across the three version lines. The critical CVE-2026-111497 is an out-of-bounds write flaw in the Brotli decoder that could enable remote code execution (RCE), affecting all three branches. Other critical issues include improper null character handling in DNS resolution and a TLS certificate hostname validation bypass. The update also resolves problems with persistent connection response processing, random number cache duplication, and permission models, while updating dependencies including c-ares, OpenSSL, and Undici. The official note warns that end-of-life (EOL) versions may still be vulnerable, advising users to use the latest supported releases. Separately, prior reports noted PHP has fixed two critical unauthenticated RCE vulnerabilities, with patches available for versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35; PHP users are urged to upgrade immediately.

1 hours ago

Bonk Guy: This round is the "privacy cycle", privacy protocol MASK is undervalued.

Renowned trader Bonk Guy posted that the current crypto market is showing characteristics of a "privacy cycle". He noted that since yesterday, Bitcoin has risen approximately 3%, ZEC is up 16%, adding over $3 billion in market capitalization. MASK currently has a market cap of roughly $26 million, with its protocol trading volume and fees hitting consecutive all-time highs, he added. Citing data from DefiLlama, he stated that MASK ranks first among privacy protocols by revenue, outearning the next 10 privacy protocols combined. By comparison, ZEC’s market cap gain over the past 24 hours is roughly 115 times MASK’s entire market cap. Bonk Guy also said that MASK’s upcoming deployment on Solana is set to launch in the coming days, which he expects will further drive growth in usage, trading volume, and fees. He went on to call MASK the most undervalued privacy protocol in the crypto market.

1 hours ago

A series of security vulnerabilities have been disclosed in internet infrastructure software within a single day, affecting PHP, Node.js, and Go.

Multiple internet infrastructure software projects rolled out security updates in a single day, addressing vulnerabilities including remote code execution, TLS certificate validation bypass, and certificate trust risks. PHP fixed two critical flaws: CVE-2026-109618 and CVE-2026-109619, both enabling unauthenticated remote code execution that impacts PHP environments processing web requests. The patched versions are 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Node.js’ advisory details 10 vulnerabilities, four of which are high-severity: these include remote code execution via out-of-bounds write in the Brotli decoder, DNS name truncation, and two TLS certificate hostname validation bypass issues. Fixed versions are 26.12.1, 24.22.1, and 22.23.4. Additionally, Go’s crypto/x509-related risk is tracked as CVE-2026-111943, rated "Important" by Red Hat with a CVSS 3.1 score of 6.8. Attackers with specific network access and valid certificates could impersonate legitimate servers to intercept or alter communications. Go 1.26.10 and 1.27.3 have been added to a deny list, blocking trust for compromised intermediate certificates.

1 hours ago

Dataline completes $10.6 million seed round funding, and plans to conduct an ICO.

Decentralized data network for AI agents Dataline has closed a $10.6 million seed round, co-led by Lattice and Samsung-backed Dispersion Capital, with participation from Symbolic Capital, Coinbase Ventures, Anagram, and Robinhood co-founder & CEO Vlad Tenev, among others. The round, completed in April, utilized a SAFE agreement with token warrants; valuation was not disclosed. Dataline is now live, covering approximately 50 data sources to deliver on-chain and off-chain data, and scores data reliability, timeliness, and consistency using AI. Proceeds will be allocated to expanding data sources, enhancing data validation, and expanding into robotics, AI training data, and other sectors. Dataline plans to launch a token by the end of 2026 for network payments and data access, and intends to conduct a public token sale on Base via Uniswap’s Continuous Clearing Auction (CCA) system, with details set to be revealed next week. The public sale’s target fundraising amount, token quantity, and other terms remain undisclosed.

1 hours ago

Trump plans to leverage White House cyber crime efforts to showcase achievements in combating cross-border crypto fraud.

White House officials said on October 21 that Trump planned to focus on the U.S. government’s actions to crack down on overseas crypto fraud rings during the White House’s cybersecurity event that day, including recovering funds and shutting down fraudulent operations. These transnational criminal groups steal funds from U.S. citizens via romance scams, phishing, ransomware and other methods. The U.S. government noted that law enforcement agencies have seized approximately $833 million in crypto assets linked to overseas fraud, and shut down 503 fraudulent crypto websites under the supervision of the Homeland Security Task Force. Relevant authorities have also notified nearly 9,000 U.S. citizens to alert them they are being targeted by fraud. The U.S. Treasury Department previously announced the establishment of an inter-agency "Fraud Strike Task Force" to target "pig butchering" scams run by organized criminal groups in Myanmar, Cambodia, Laos and the Philippines. Since last year, the U.S. has also imposed multiple sanctions aimed at cutting off support for related fraud websites and their infrastructure.

1 hours ago

American Bankers Association voices dissatisfaction with OCC’s final GENIUS Act rule, which abandons proposed restrictions on stablecoin yields.

Crypto journalist Eleanor Terrett reported that the American Bankers Association (ABA) has voiced dissatisfaction with the final rules implemented by the U.S. Office of the Comptroller of the Currency (OCC) under the GENIUS Act. The OCC abandoned the previously proposed restrictions on stablecoin yields, a move the ABA argues will "maintain the status quo for crypto platforms." The ABA’s CEO stated: "It is a mistake to wait until deposit outflows and economic harm have already occurred before attempting to address these issues."

1 hours ago

Beyond PHP, three Node.js version branches are also affected by high-severity vulnerabilities, and users need to update their runtime environments promptly.

Node.js rolled out a security update on October 21, covering its 26.x, 24.x, and 22.x version branches, with corresponding patched releases: 26.12.1, 24.22.1, and 22.23.4. The advisory details 10 total vulnerabilities, categorized as 4 critical-severity, 3 medium-severity, and 3 low-severity, with varying impact scopes across the three version lines. The critical CVE-2026-111497 is an out-of-bounds write flaw in the Brotli decoder that could enable remote code execution (RCE), affecting all three branches. Other critical issues include improper null character handling in DNS resolution and a TLS certificate hostname validation bypass. The update also resolves problems with persistent connection response processing, random number cache duplication, and permission models, while updating dependencies including c-ares, OpenSSL, and Undici. The official note warns that end-of-life (EOL) versions may still be vulnerable, advising users to use the latest supported releases. Separately, prior reports noted PHP has fixed two critical unauthenticated RCE vulnerabilities, with patches available for versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35; PHP users are urged to upgrade immediately.

1 hours ago

Bonk Guy: This round is the "privacy cycle", privacy protocol MASK is undervalued.

Renowned trader Bonk Guy posted that the current crypto market is showing characteristics of a "privacy cycle". He noted that since yesterday, Bitcoin has risen approximately 3%, ZEC is up 16%, adding over $3 billion in market capitalization. MASK currently has a market cap of roughly $26 million, with its protocol trading volume and fees hitting consecutive all-time highs, he added. Citing data from DefiLlama, he stated that MASK ranks first among privacy protocols by revenue, outearning the next 10 privacy protocols combined. By comparison, ZEC’s market cap gain over the past 24 hours is roughly 115 times MASK’s entire market cap. Bonk Guy also said that MASK’s upcoming deployment on Solana is set to launch in the coming days, which he expects will further drive growth in usage, trading volume, and fees. He went on to call MASK the most undervalued privacy protocol in the crypto market.

1 hours ago

The Drift Protocol exploiter has transferred approximately $109 million in Ethereum to Tornado Cash over the past two days, heightening concerns about the movement of funds stolen in one of the largest decentralized finance attacks this year.

Details of Recent Ethereum TransfersBlockchain analytics platform Onchain Lens reported that addresses controlled by the Drift exploiter sent a total of 44,510 ETH to Tornado Cash between October 20 and 21. The transfers consisted of 25,710 ETH, worth around $63 million, on October 20, followed by 18,800 ETH, valued at roughly $46 million, on the following day.

These movements account for more than one-third of the $295.7 million equivalent stolen in April during the Drift Protocol exploit. Analyst data shows the exploiter’s wallets now hold close to 56,569 ETH, with the balance estimated at about $138 million as of October 21, according to Arkham Intelligence.

Records from Tuesday indicate that the exploiter’s monitored balance was near 81,454 ETH, which represented approximately $194 million. This reduction reflects a combination of outgoing transfers and fluctuating Ether prices.

Ongoing Use of Tornado CashThe Drift exploiter has previously used Tornado Cash to obscure transactions. In August, linked wallets sent approximately $44 million in ETH through the mixer. On October 20, Lookonchain identified an influx of about 25,700 ETH sent to the service within just two hours. Additional transfers continued through October 21, tracked across various blockchain monitoring tools.

Recent blockchain activity demonstrates an ongoing effort by the Drift exploiter to move substantial amounts of stolen funds through Tornado Cash, underscoring the complexity of tracing assets once they enter mixing services.

Analysts caution that blockchain analysis alone may not be sufficient to identify the eventual recipients of funds leaving Tornado Cash, creating ongoing challenges for investigators and affected users.

Aftermath of the April ExploitThe Drift Protocol suffered a $295.7 million loss on April 1. Discrepancies in early loss estimates reflected differences in token valuations over time. The attack stands as one of the largest in the decentralized finance ecosystem during 2024.

A June 3 update from Drift highlighted findings provided by Mandiant, which linked the incident to North Korean threat actor UNC6862 through operational evidence and analysis of prior attack patterns. The attackers had reportedly spent months building relationships with platform contributors before launching the exploit, which involved transaction approvals and access compromise rather than vulnerabilities in the smart contract code.

In response to the attack, Drift hired former Helium executive Noah Prince to oversee engineering and brought in staff from Gauntlet to review the protocol’s risk management and liquidation systems. The platform is moving to restart trading operations and intends to dedicate part of its future revenue to compensate victims of the hack. However, any funds moved by the exploiter function independently from these recovery efforts.

User Compensation and Recovery MechanismsDrift’s compensation process began on October 1 with the issuance of DFX tokens on Solana. These tokens allow verified users to redeem one DFX for every USDT lost during the exploit, with a capped supply of about 299.5 million DFX.

At the onset, approximately 3.1 million USDT was available in the recovery pool, setting the initial redemption value at $0.0104 per DFX. This structure means that direct recovery to pre-hack balances will not happen instantly, and the real value received depends on available funds.

Compensation options allow affected users to redeem DFX tokens against pool funds, sell their tokens, or hold them with the prospect of future value. Burned tokens are permanently removed from circulation as they are redeemed.

The recovery system allocates between 60% and 90% of Drift’s daily net revenue to the recovery pool, depending on performance. In addition, any assets recovered through legal measures will be added to compensatory funds. Tether has pledged up to 127.5 million USDT in assistance, with further commitments of up to 20 million USDT from other sources.

Nevertheless, these contributions are not yet available for redemption. Eligible users must claim their DFX tokens before January 1, 2028; any unclaimed tokens will be permanently burned afterward.

As the crypto market shows how quickly funds and meme tokens can gain momentum, timing and investor decisions remain critical. In the meme token sector, viral internet trends have transformed modest investments into substantial profits within days. Data from Fomo App illustrates this with an instance where a $99 investment in “Niu Lai” grew to about $370,000. Tools like Fomo App, which integrate token discovery, investor rankings, and trade notifications, offer traders a way to closely follow investor movements and activity in the fast-paced world of meme tokens.

20h05 ▪ 8 min read ▪ by Ering N.

Summarize this article with:

Crypto authorizations granted to a contract remain active as long as you don’t withdraw them. From May 5, 2026, attackers exploited this rule. They withdrew approximately 1.42 million dollars from 31 addresses, thanks to authorizations given to a router of the Ekubo protocol. The main victim had granted theirs 158 days earlier, according to the founder of SlowMist.

In Brief $1.42 million: that’s how much attackers drained starting May 5, 2026, using approvals users had granted to an Ekubo router. 158 days: the age of the unlimited approval that cost the main victim about 17 WBTC. 60%: the share of unlimited approvals on Ethereum, according to a 2022 study of transactions through July 2021. May 6, 2026: the day after the first drain, Ekubo’s founder proposed ERC-8255, a standard for approvals that expire by default. A crypto authorization does not stop with the transaction To exchange a token on a decentralized application, you first sign an authorization. This message thus allows a contract to withdraw your tokens on your behalf. The ERC-20 standard stipulates that it can do so “multiple times, up to the set amount”. However, your wallet does not always display what you are signing, as shown in our article on clear signing.

Moreover, this authorization has no end date. The official ethereum.org guide on revocation states plainly: “There is no expiration date on contract permissions.” They can therefore be used years later.

Disconnecting from the site does not change anything either. The authorization exists in the token’s contract, on the blockchain, and not in your browser. According to the same guide, the project therefore retains access to your tokens after disconnection. Your digital wallet does indeed keep your keys, not your authorizations. You must then revoke the authorization to cut this access.

The amount then poses a second problem. Many applications request unlimited access, so as not to ask again at each exchange. A university study published in 2022 measured this on transactions made up to July 31, 2021. At the time, 60% of authorizations on Ethereum were for an unlimited amount.

Crypto authorizations: what you think you accept When you validate an exchange, you think you authorize only that single operation. In reality, the authorization goes further. It allows the contract to take a token amount, at any time, until withdrawn.

As long as the contract functions well, it only withdraws for your own operations. However, a code flaw can allow a third party to trigger the withdrawal. The authorization does not verify who calls the contract. It only checks that the contract has the right to take your tokens.

Ekubo has revised its own explanation. On May 8, its report probably attributed large authorizations to users who raised the ceiling themselves. On May 16, the text changed. The team indicates that its interface may have created some of these authorizations and no longer tries to attribute their origin.

Ekubo: how a forgotten router drained wallets Ekubo is an exchange protocol present on Starknet and on several blockchains compatible with Ethereum. The attack targeted the HuffRouter, a router optimized to reduce fees, deployed on Ethereum and Arbitrum. Its users had indeed given it the right to withdraw their tokens to execute their exchanges.

A data parsing bug in HuffRouter […] allowed a caller to add arbitrary bytes after a otherwise valid exchange path, and have them interpreted as data set by the router upon settlement.

Specifically, the attacker could designate any user as the payer of an exchange. Anyone who had authorized this router thus became a target. The first withdrawal was on May 5, 2026, at 5:50 p.m. UTC.

Ekubo estimates losses at around 1.42 million dollars, across 31 addresses. However, a single address lost about 17 WBTC, or nearly 1.37 million dollars, as well as 0.34 cbBTC. It therefore concentrates 98% of the total. The attack did not affect the liquidity providers nor the Starknet version of the protocol.

The team also acknowledges not having audited this contract. They considered its risk low. According to them, authorizations could be limited, and exchanges via the interface should remain small and rare. These routers can no longer be modified: they “remain vulnerable,” the report specifies. Ekubo then deployed on June 23 a reimbursement fund, capped per address and voluntarily paid by its DAO.

Socket, LI.FI, SwapNet: the same pattern for years Ekubo is not an isolated case. The site Revoke.cash lists these attacks in its annual report. It counts 9 authorization exploits in 2025, totaling just over 6 million dollars. In 2024, they had cost 80 million.

In July 2024, the LI.FI platform lost about 11.6 million dollars, taken from 153 wallets. According to the report published by LI.FI, the flaw only affected unlimited authorizations. In January 2024, a similar flaw at Socket targeted about 200 users, all with unlimited access.

In January 2026, 18 users lost 13.43 million dollars through SwapNet’s contracts. According to the post-mortem of the Matcha Meta platform, victims had disabled the one-time use authorization offered by default. Matcha notes, however, that a precise unused amount also left funds exposed.

These attacks differ from signature scams. In that case, a fake site makes you sign an authorization for the scammer. This type of theft cost 83.85 million dollars in 2025, according to the 2025 report from security company ScamSniffer.

Reducing the risk of crypto authorizations The first reflex is to limit the amount. MetaMask allows setting a spending cap when signing. Their official help is clear: “Never grant unlimited (astronomically high) authorizations.”

Then, clean up regularly. The tool Revoke.cash displays your crypto authorizations on more than 80 networks. The verifier on the Etherscan explorer does the same on Ethereum. Revoking one authorization at a time is free, excluding network fees. Revoke.cash charges 1.50 dollars per batch revocation. In a January 2024 advisory, the police and cybersecurity agency of Singapore also recommend reviewing and revoking large authorizations.

Finally, some applications already limit the duration. The Uniswap application uses Permit2 and grants 30-day authorizations, according to its help center. However, you first give an authorization to the Permit2 contract itself, and that one does not expire. On Starknet, tokens follow the same model as Ethereum, without expiration.

ERC-8255 wants authorizations to expire by default On May 6, 2026, Moody Salem, founder of Ekubo, submitted the project ERC-8255 on the EIP site. Its principle is simple: a classic authorization would expire after a maximum duration, set by each token. A new function would also allow granting a shorter authorization, down to a single block.

The text first adds new functions, compatible with existing applications. However, it changes the behavior of ordinary authorizations, which divides developers. On the Ethereum Magicians forum, some prefer to leave the classic authorization untouched. Researcher pcaversaccio believes instead that “authorizations have always been a bug, not a feature” (editorial translation).

Other approaches also exist. The ERC-7674 proposal provides for authorizations erased at the end of the transaction. Since the Pectra update of May 2025, a compatible wallet can also bundle authorization and exchange in a single operation.

As of October 18, 2026, ERC-8255 remained a project, and its text referenced no implementation. The Ekubo routers targeted on May 5 cannot be modified. Their unlimited authorizations therefore only disappear if each user revokes them. Our comparison of the most secure crypto wallets presents other available protections.

Maximize your Cointribune experience with our "Read to Earn" program! For every article you read, earn points and access exclusive rewards. Sign up now and start earning benefits.

Join the program

A

A

Lien copié

Ering N.

Independent author, specialized in decentralized artificial intelligence and crypto ecosystems. I analyze projects by what they actually do, not by the noise around them. Openly a supporter of the Qubic project: my articles about Qubic and its direct competitors carry a disclosure.

Dogecoin Labs Launches to Expand DOGE Payments, DeFi, Real-World Adoption

A series of security vulnerabilities have been disclosed in internet infrastructure software within a single day, affecting PHP, Node.js, and Go.

Multiple internet infrastructure software projects rolled out security updates in a single day, addressing vulnerabilities including remote code execution, TLS certificate validation bypass, and certificate trust risks. PHP fixed two critical flaws: CVE-2026-109618 and CVE-2026-109619, both enabling unauthenticated remote code execution that impacts PHP environments processing web requests. The patched versions are 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Node.js’ advisory details 10 vulnerabilities, four of which are high-severity: these include remote code execution via out-of-bounds write in the Brotli decoder, DNS name truncation, and two TLS certificate hostname validation bypass issues. Fixed versions are 26.12.1, 24.22.1, and 22.23.4. Additionally, Go’s crypto/x509-related risk is tracked as CVE-2026-111943, rated "Important" by Red Hat with a CVSS 3.1 score of 6.8. Attackers with specific network access and valid certificates could impersonate legitimate servers to intercept or alter communications. Go 1.26.10 and 1.27.3 have been added to a deny list, blocking trust for compromised intermediate certificates.

1 hours ago

Dataline completes $10.6 million seed round funding, and plans to conduct an ICO.

Decentralized data network for AI agents Dataline has closed a $10.6 million seed round, co-led by Lattice and Samsung-backed Dispersion Capital, with participation from Symbolic Capital, Coinbase Ventures, Anagram, and Robinhood co-founder & CEO Vlad Tenev, among others. The round, completed in April, utilized a SAFE agreement with token warrants; valuation was not disclosed. Dataline is now live, covering approximately 50 data sources to deliver on-chain and off-chain data, and scores data reliability, timeliness, and consistency using AI. Proceeds will be allocated to expanding data sources, enhancing data validation, and expanding into robotics, AI training data, and other sectors. Dataline plans to launch a token by the end of 2026 for network payments and data access, and intends to conduct a public token sale on Base via Uniswap’s Continuous Clearing Auction (CCA) system, with details set to be revealed next week. The public sale’s target fundraising amount, token quantity, and other terms remain undisclosed.

1 hours ago

Trump plans to leverage White House cyber crime efforts to showcase achievements in combating cross-border crypto fraud.

White House officials said on October 21 that Trump planned to focus on the U.S. government’s actions to crack down on overseas crypto fraud rings during the White House’s cybersecurity event that day, including recovering funds and shutting down fraudulent operations. These transnational criminal groups steal funds from U.S. citizens via romance scams, phishing, ransomware and other methods. The U.S. government noted that law enforcement agencies have seized approximately $833 million in crypto assets linked to overseas fraud, and shut down 503 fraudulent crypto websites under the supervision of the Homeland Security Task Force. Relevant authorities have also notified nearly 9,000 U.S. citizens to alert them they are being targeted by fraud. The U.S. Treasury Department previously announced the establishment of an inter-agency "Fraud Strike Task Force" to target "pig butchering" scams run by organized criminal groups in Myanmar, Cambodia, Laos and the Philippines. Since last year, the U.S. has also imposed multiple sanctions aimed at cutting off support for related fraud websites and their infrastructure.

1 hours ago

American Bankers Association voices dissatisfaction with OCC’s final GENIUS Act rule, which abandons proposed restrictions on stablecoin yields.

Crypto journalist Eleanor Terrett reported that the American Bankers Association (ABA) has voiced dissatisfaction with the final rules implemented by the U.S. Office of the Comptroller of the Currency (OCC) under the GENIUS Act. The OCC abandoned the previously proposed restrictions on stablecoin yields, a move the ABA argues will "maintain the status quo for crypto platforms." The ABA’s CEO stated: "It is a mistake to wait until deposit outflows and economic harm have already occurred before attempting to address these issues."

1 hours ago

Beyond PHP, three Node.js version branches are also affected by high-severity vulnerabilities, and users need to update their runtime environments promptly.

Node.js rolled out a security update on October 21, covering its 26.x, 24.x, and 22.x version branches, with corresponding patched releases: 26.12.1, 24.22.1, and 22.23.4. The advisory details 10 total vulnerabilities, categorized as 4 critical-severity, 3 medium-severity, and 3 low-severity, with varying impact scopes across the three version lines. The critical CVE-2026-111497 is an out-of-bounds write flaw in the Brotli decoder that could enable remote code execution (RCE), affecting all three branches. Other critical issues include improper null character handling in DNS resolution and a TLS certificate hostname validation bypass. The update also resolves problems with persistent connection response processing, random number cache duplication, and permission models, while updating dependencies including c-ares, OpenSSL, and Undici. The official note warns that end-of-life (EOL) versions may still be vulnerable, advising users to use the latest supported releases. Separately, prior reports noted PHP has fixed two critical unauthenticated RCE vulnerabilities, with patches available for versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35; PHP users are urged to upgrade immediately.

1 hours ago

Bonk Guy: This round is the "privacy cycle", privacy protocol MASK is undervalued.

Renowned trader Bonk Guy posted that the current crypto market is showing characteristics of a "privacy cycle". He noted that since yesterday, Bitcoin has risen approximately 3%, ZEC is up 16%, adding over $3 billion in market capitalization. MASK currently has a market cap of roughly $26 million, with its protocol trading volume and fees hitting consecutive all-time highs, he added. Citing data from DefiLlama, he stated that MASK ranks first among privacy protocols by revenue, outearning the next 10 privacy protocols combined. By comparison, ZEC’s market cap gain over the past 24 hours is roughly 115 times MASK’s entire market cap. Bonk Guy also said that MASK’s upcoming deployment on Solana is set to launch in the coming days, which he expects will further drive growth in usage, trading volume, and fees. He went on to call MASK the most undervalued privacy protocol in the crypto market.

1 hours ago

Dogecoin Labs, a new organization announced on October 21, 2026, brings three DOGE-focused projects under a single banner: the MyDoge wallet, the DogeOS application layer and the payments-focused Such App. The stated goal is to move DOGE into payments, decentralized finance (DeFi), gaming and consumer apps.

What Dogecoin Labs actually brings together Dogecoin Labs is backed by the Dogecoin Foundation. It is described as a joint effort between the Foundation and House of Doge.

CEO Jordan Jefferson co-founded both MyDoge and DogeOS, so two of the three projects were already in his orbit.

MyDoge is the consumer entry point. The wallet has more than 500,000 users, and its V3 update is designed to integrate apps built on DogeOS.

DogeOS is the developer layer. It is a zero-knowledge rollup that supports Ethereum-compatible smart contracts and lets developers use Dogecoin to pay transaction fees.

Such App handles the real-world side. It is built around self-custodial wallets and in-person QR code payments in DOGE, with some early beta features already live.

The testnet, the funding and the gaps DogeOS opened its public testnet, named Chikyū, on September 30, 2026. Projects on the testnet reportedly include lending protocols, liquidity management tools, perpetual trading and stablecoin products.

No timeline has been announced for a DogeOS mainnet.

DogeOS raised $6.9 million in a seed round in May 2025, led by Polychain Capital.

Why Dogecoin needed an upgrade path Dogecoin’s base ledger has always been deliberately simple, moving coins from one address to another and not much else. Without native smart contract support, DOGE has largely sat on the sidelines while other networks built lending markets, trading venues and stablecoin systems.

Dogecoin Labs says it intends to expand functionality while preserving the integrity and simplicity of the original Dogecoin ledger. The rollup design is how it plans to square that circle.

What this means for DOGE holders and builders For holders, if DogeOS goes live and developers ship lending, trading and stablecoin apps, DOGE becomes a fee token for that activity. But utility only shows up in the numbers when users actually transact, and none of that happens on a testnet.

MyDoge’s user base of more than 500,000 gives builders a ready-made audience. Such App gives them a potential merchant-facing channel. DogeOS gives them the tools.

The key signals going forward are a DogeOS mainnet announcement, the number of testnet projects that actually migrate to live deployment, growth in MyDoge’s user count after the V3 integration, and whether Such App moves beyond its early beta features.

Disclosure: This article was edited by Estefano Gomez. For more information on how we create and review content, see our Editorial Policy.

REUTERS: House Of Doge - Secures Strategic Equity Stake In Dogecoin Labs

Cover image via U.Today Disclaimer: The opinions expressed by our writers are their own and do not represent the views of U.Today. The financial and market information provided on U.Today is intended for informational purposes only. U.Today is not liable for any financial losses incurred while trading cryptocurrencies. Conduct your own research by contacting financial experts before making any investment decisions. We believe that all content is accurate as of the date of publication, but certain offers mentioned may no longer be available.

Dogecoin (DOGE) price in focus as deep holder losses spark hopes for a near-term recovery. Dogecoin (DOGE) 365-day MVRV is near 0.74 (average loss for recent holders), according to Santiment.

MVRV helps to show if recent buyers are sitting on excessive profits or painful losses. High MVRV can be a warning that profit-taking risk is building up, while low MVRV can signal areas where selling pressure is closer to exhaustion. Traders can use those extremes to judge risk and crowd positioning rather than relying on price alone.

🚨 XRP And DOGE Flashing Strong MVRV Opportunity Signals 🐕 $DOGE is standing out among top caps, with its 365-day MVRV near 0.74, meaning recent holders are deeply underwater on average. $XRP sits around 0.92, also placing traders in net losses and creating a historically more favorable, lower-risk opportunity zone than when holders are sitting on large profits. ⚖️ $BTC, $ETH and $LINK look much more neutral. Their 365-day MVRVs cluster around 0.97 to 1.04, suggesting average traders are near breakeven with little evidence of either extreme profit-taking risk or unusually deep capitulation. 🧭 MVRV helps show whether recent buyers are sitting on excessive profits or painful losses. High MVRV can warn that profit-taking risk is building, while low MVRV can identify areas where selling pressure may be closer to exhaustion. Traders can use those extremes to judge risk and crowd positioning rather than relying on price alone. 🔗 Our Live MVRV Comparison Chart: https://t.co/XNOJTzhB9K

HOT Stories

— Santiment Intelligence (@SantimentData) October 20, 2026 This MVRV opportunity arises as Dogecoin rebounds alongside the broader crypto markets as investors await fresh data for insights ahead of next week's Federal Reserve interest rate decision.

You Might Also Like

At the time of writing, Dogecoin was up 3.38% in the last 24 hours to $0.0819 after reaching an intraday high of $0.082 following yesterday's sharp surge.

In the short term, traders will be looking for evidence that DOGE can establish support and build on the current recovery. In this scenario, a run-up to $0.10 is ultimately expected, achieving a double-digit cent price but bulls will have to surmount key resistance levels at $0.087 and $0.088 at the daily MA 200 and 50, respectively.

Dogecoin Labs launchesDogecoin Labs is being formed by the teams behind the Dogecoin wallet, an application network, and merchant payment tools, with the goal of providing DOGE holders with more locations to spend and utilize their coins.

You Might Also Like

Dogecoin Labs, which was formed in partnership with the Dogecoin Foundation, announced in a recent release that it will own and operate MyDoge, DogeOS and Such App.

The company will concentrate on broadening the utility of Dogecoin through consumer applications, payments, commerce, DeFi, gaming and other goods, while the Foundation will continue to be responsible for ecosystem stewardship and open-source development.

The announcement comes at a time when Dogecoin's foray into traditional finance has failed to spark enduring investor interest, with Bitwise about to shut down its Dogecoin ETF. 

Cover image via depositphotos.com

Disclaimer: The opinions expressed by our writers are their own and do not represent the views of U.Today. The financial and market information provided on U.Today is intended for informational purposes only. U.Today is not liable for any financial losses incurred while trading cryptocurrencies. Conduct your own research by contacting financial experts before making any investment decisions. We believe that all content is accurate as of the date of publication, but certain offers mentioned may no longer be available.

The launch of the independent structure Dogecoin Labs has provoked a big wave of attention within the crypto industry. The coin's official account on X has already supported the large-scale merger of product teams, reinforcing the news with the iconic "Shibes" motto and bringing the event to the top of social media trends.

Until now, Dogecoin has developed chaotically: wallets, smart contracts, and trading gateways were handled by isolated groups of enthusiasts. The new structure, created in partnership with the non-profit Dogecoin Foundation, is designed to centralize these efforts. 

HOT Stories

The organization is headed by Jordan Jefferson, the creator of MyDoge and DogeOS.

You Might Also Like

Three ready-made products are coming under the control of Dogecoin Labs at once. DogeOS, an operating system that is currently introducing smart contracts to the network in a public testnet, will be responsible for the technical base. The audience will be provided by the MyDoge crypto wallet (version V3) with a base of more than 500,000 users. Commercial integration and QR payments for real businesses will be handled by the team behind the Such App service. 

In addition, the investment platform House of Doge Inc. (NASDAQ: HODO) has transferred its personnel and intellectual property to the project. The goal is pragmatic: to turn DOGE from a purely speculative instrument into a fully fledged means of payment.

And how much does one DOGE cost now?The spot market reacted to the changes inside the ecosystem with pointed calm. The coin is more likely feeling out a local bottom after a prolonged decline than preparing to soar. On Wednesday, the DOGE/USD rate froze at around $0.0820, showing a purely symbolic daily gain of 0.05%. 

On the weekly chart, the dynamics are slightly more upbeat: a gain of 3.37% within the $0.079–$0.082 range. The external background nevertheless remains complicated: investors are still digesting the September closure of the DOGE ETF from Bitwise.

This reorganization is a direct attempt to protect Dogecoin from an outflow of institutional capital. DOGE-developing enthusiasts want to prove that the coin's colossal retail reach can be converted into real business. Investors have so far taken a wait-and-see position and are watching what the first practical steps of the unified team will be.

You Might Also Like

No wonder the market refuses to price in positivity in advance. Dogecoin has been associated exclusively with speculative hype and random tweets for too long for investors to instantly believe in its corporate rebirth. 

Until Dogecoin Labs shows real transaction volumes through its new trading gateways and stable operation of smart contracts on the mainnet, any loud slogans about the merger of teams will remain, for exchange charts, merely beautiful background noise.

XRP, Dogecoin Flash ‘Opportunity’ Signals Again: Can Bulls Break Through?

In brief
Dogecoin Labs launched together with the Dogecoin Foundation, consolidating the meme coin’s scattered products, IP, and development teams.
Led by CEO Jordan Jefferson, it aims to close the gap between Dogecoin’s massive community and its thin lineup of real apps.
It builds on recent groundwork: DogeOS’s Sept. 30 testnet and MyDoge’s 500,000-plus users.
Dogecoin is getting a dedicated company to build out its ecosystem, as the teams behind the meme coin’s biggest consumer products fold into a single organization aimed at giving DOGE more everyday uses.

Announced Tuesday, Dogecoin Labs was formed together with the Dogecoin Foundation to consolidate the products, intellectual property, and development teams scattered across the Dogecoin world into one independent outfit.

Myriad: Where does Solana go next? Click to make your prediction.It will own and operate three flagship products: the MyDoge wallet, the DogeOS app platform, and Such App, a merchant-payments tool, with assets and talent contributed by both the Foundation and House of Doge.

The pitch is to close a gap the company sees as Dogecoin’s defining weakness. Despite ranking among the largest and most recognizable cryptocurrencies, with deep liquidity, millions of holders and one of crypto’s most active communities, the number of actual products and businesses built on DOGE remains small relative to that audience. Dogecoin Labs, led by CEO Jordan Jefferson, the founder of MyDoge and DogeOS, intends to change that by building wallets, payments, commerce, trading, DeFi, gaming, AI and social apps.

“No other digital asset has Dogecoin’s combination of liquidity, community and cultural reach, and its potential has barely been tapped,” Jefferson said, adding that the community has chanted “DOGE to $1” for years and that the goal now is “to build the economy that ambition calls for.”

The move builds on recent groundwork. DogeOS opened its public testnet on Sept. 30, giving developers an Ethereum-compatible environment to build Dogecoin apps, while MyDoge, which grew past 500,000 users without paid acquisition, rolled out a V3 update connecting the wallet to those applications. Together with Such App’s merchant rails, the three products are meant to link developers, consumers and businesses into a functioning DOGE economy.

The Foundation will continue its stewardship, open-source support and advocacy while Labs handles commercial product development.

The reorganization arrives during a soft stretch for the token. DOGE traded around $0.084 on Tuesday, up 3.9% on the day for a roughly $13 billion market cap, but down about 14% over the past month and off roughly 88% from its May 2021 record.

Dogecoin’s institutional story has been mixed, too: a Dogecoin Foundation-backed 21Shares DOGE ETF launched on Nasdaq this year, though Bitwise later shut its own Dogecoin fund citing low demand and a need to “optimize its product range to meet evolving investor needs.”

Daily Debrief NewsletterStart every day with the top news stories right now, plus original features, a podcast, videos and more.

Join 72,000+ readers

Create an account to save your articles.

Add on Google

Add Decrypt as your preferred source to see more of our stories on Google.

Dogecoin Labs, an independent structure designed to steer Dogecoin’s development, has officially launched, attracting significant attention across the crypto community. The official Dogecoin account on X lent its support by referencing the well-known “Shibes” motto, propelling the announcement to trending status on social platforms.

New direction for Dogecoin developmentHistorically, Dogecoin’s ecosystem has lacked cohesive management, with wallets, smart contracts, and trading gateways all built by separate groups of volunteers and enthusiasts. Dogecoin Labs, founded in collaboration with the non-profit Dogecoin Foundation, now seeks to unify these efforts and offers centralized guidance for future projects.

Dogecoin Labs is led by Jordan Jefferson, the creator of the MyDoge wallet and DogeOS, an operating system tailored for the Dogecoin network.

Three core products will now operate under the Lab’s structure: DogeOS, which is piloting smart contract functionality on a public testnet; MyDoge wallet (V3), serving more than 500,000 users; and the Such App team, which is responsible for commercial integration and enabling QR code payments for real-world businesses.

Additionally, personnel and intellectual property from House of Doge Inc.—a NASDAQ-listed investment platform—have transitioned to Dogecoin Labs. This consolidation is intended to evolve DOGE from what has often been viewed as a speculative asset into a credible, widely accepted tool for transactions.

Mini dictionary: Dogecoin Foundation, a non-profit organization that oversees Dogecoin development and provides legal and organizational backing for the project.

Market reaction remains cautiousDespite the organizational overhaul, the DOGE spot market displayed limited enthusiasm. The token hovered near $0.0820 on Wednesday, reflecting a modest daily increase of 0.05% following a lengthy downtrend. Over the past week, DOGE has gained 3.37%, trading within the $0.079 to $0.082 price band.

PeriodDOGE/USD PriceChangeDaily$0.0820+0.05%Weekly$0.079–$0.082+3.37%Market sentiment remains influenced by external factors, notably the September closure of the Bitwise DOGE ETF, which has contributed to investor uncertainty. The reorganization appears to be a strategic move aimed at retaining institutional interest in Dogecoin by demonstrating potential for real-world use cases and organizational maturity.

Investors await operational progressAnalysts view this consolidation as a way for Dogecoin advocates to show that its vast user base can support sustainable business activity. However, most investors are taking a cautious, wait-and-see approach, monitoring for tangible results from the now unified development efforts.

Dogecoin has remained associated with speculative volatility and viral social media moments for years; the market remains skeptical until Dogecoin Labs demonstrates measurable transaction volumes and reliable smart contract operations on the mainnet.

The broader community believes that only proven, on-chain metrics—such as increased transaction activity through integrated gateways and the successful deployment of smart contracts—will shift sentiment and move DOGE beyond its meme-driven legacy.

For now, market participants hold back from premature optimism, awaiting evidence that Dogecoin’s shift toward corporate-style management will translate into real progress and sustained growth.

Cardano is flashing a bearish signal that could precede another significant price decline, according to Ali Martinez, a popular market commentator.

Taking to X, Martinez highlighted a bearish shift in an important Cardano indicator, warning of potential downside risks. However, large ADA holders have yet to demonstrate a clear selling bias, making the $0.21 support level a critical area to watch.

Cardano Whales Show No Clear Selling Bias
Martinez explained that changes in the holdings of ADA whales, from 100 million to 1 billion tokens, have historically coincided with significant price movements. However, these large investors have held stable positions since October 10.

During this period, their combined holdings fluctuated between 2.72 billion and 2.76 billion ADA. This limited movement suggests that major holders have yet to establish their next line of movement. 

Consequently, Martinez is monitoring these wallets for signs of distribution, which could indicate that large investors are beginning to reduce their exposure to ADA. A sustained decline in their holdings could reinforce concerns about mounting selling pressure.

Cardano Whale Holdings
SuperTrend Indicator Flashes Bearish Warning
While Cardano whale activity remains stable, its SuperTrend indicator has turned bearish, raising concerns about ADA’s near-term outlook.

Martinez identified May 22 as the last time the indicator flashed a similar signal. At the time, ADA traded around $0.25 before plunging to around $0.135, marking a decline of about 46%. Rumors that Cardano founder Charles Hoskinson was leaving the ecosystem further intensified the downturn.

Although this previous correction highlights the potential severity of a bearish reversal, Martinez stressed that it does not guarantee that ADA will repeat the same price action. 

Martinez SuperTrend Indicator
ADA Risks Falling to $0.17 if $0.21 Support Breaks
According to Martinez, $0.21 marks the lower boundary of Cardano’s rising price channel and represents a critical support level that could determine its next major move.

A daily close below this threshold would signal a breakdown of the channel, potentially exposing ADA to a decline toward $0.17. From $0.21, such a move would represent a drop of 19%. 

Martinez ADA Daily Chart
Crypto Tony Also Warns of ADA Downside
Meanwhile, Martinez is not the only analyst expressing concerns about Cardano’s price outlook. Widely followed crypto analyst Crypto Tony recently warned that ADA could fall to $0.19 after failing to overcome resistance around $0.23.

His projection suggests that ADA could face further losses if sellers maintain control around this resistance zone. Consequently, the token’s ability to reclaim $0.23 could prove important in determining whether it can regain upward momentum or face another downturn.

Nevertheless, ADA has continued to trade above the crucial $0.21 support level while attempting to break through the $0.23 resistance zone.

At press time, ADA traded at $0.2243, representing a 3.79% gain over the previous 24 hours. Despite this short-term recovery, the token remained down 4.44% over the past week and 3.7% over the past month. 

ADAUSD 2026 10 21 08 37 44

Six blockchain organizations, including the Cardano Foundation, have asked the US Securities and Exchange Commission to make its “digital commodity” definition official. They want it written into the binding text of a proposed rule, not left in guidance that can change.

The joint comment letter landed on October 20, 2026, the last day of the public comment period.

Who signed and what they want The co-signers are Aptos Labs, Ava Labs, Cardano Foundation, Chainlink Labs, Hedera, and Stellar Development Foundation. Together they represent the teams behind APT, AVAX, ADA, LINK, HBAR, and XLM.

Their target is the SEC’s proposed Regulation Crypto Assets rule. The letter urges the agency to firmly codify the digital commodity definition within the rule’s operative text.

That detail matters more than it sounds. The operative text is the part of a regulation that actually binds. Preambles, footnotes, and staff guidance can explain or interpret a rule, but they carry less weight.

The groups argue that putting the definition in the rule itself would give developers and other participants long-term regulatory certainty. A token’s status would not hinge on how the next set of officials reads informal guidance.

Taylor Barr, head of policy at Chainlink, framed the push around durability. He emphasized that building lasting regulatory foundations into US law would help keep the country an attractive place for digital asset innovation.

The March footnote that set the stage The six tokens tied to the letter already share some regulatory history. ADA, XLM, HBAR, APT, AVAX, and LINK were referenced in a footnote of the SEC’s March 17, 2026 guidance.

That footnote connected the tokens to futures regulated by the Commodity Futures Trading Commission. The CFTC oversees commodity derivatives, while the SEC oversees securities. Which side of that line a token falls on shapes how it can be listed, traded, and marketed in the US.

Being named in a footnote is a signal. It is not a guarantee. Footnotes in guidance documents do not have the legal staying power of rule text, which helps explain why the issuers behind these tokens want something sturdier.

The comment period formally closed on October 20, 2026. The SEC may still continue accepting feedback after that date, so the October filing may not be the final word from the industry.

Ripple files its own letter The six-party coalition was not the only voice that day. Ripple submitted a separate comment letter on October 20 that supported the same general effort.

Ripple’s letter focused on refining existing classifications rather than challenging the broader rulemaking.

Why this fight keeps coming back The proposed regulation is meant to address ongoing confusion in the crypto sector about how tokens are treated under US law. That confusion has been sharpened by enforcement actions against major players such as Binance and Coinbase.

The digital commodity label is attractive to token issuers for a straightforward reason. A commodity classification would place a token outside the securities framework that drives much of the SEC’s enforcement activity.

The coalition’s argument is that a definition living in guidance is vulnerable. Guidance can be revised, reinterpreted, or withdrawn with far less process than amending a formal rule.

What this means for the market and builders There are real limits. Comment letters are requests, not outcomes. The SEC is under no obligation to adopt the coalition’s language, and the final rule could look different from the proposal.

The final shape of Regulation Crypto Assets is the key variable. Watch whether the adopted text includes a binding digital commodity definition, and whether it references specific criteria that tokens like ADA would need to meet.

For ADA holders specifically, the letter does not change the token’s legal status today. It puts the Cardano Foundation on record asking the SEC to give the commodity framework, and the tokens tied to it, a firmer legal footing than a footnote can provide.

Disclosure: This article was edited by John Chen. For more information on how we create and review content, see our Editorial Policy.

Cardano Foundation has reported that 100,000 farms in India have been registered on Cardano through 5am.earth’s agricultural data project.

Summary

Cardano Foundation says 100,000 Indian farms are registered on-chain through 5am.earth’s agricultural data project.
Farm records combine local field information, satellite-verified boundaries, and historical sustainability data.
A proposed Seedstars pilot covers 1,000–5,000 farmers, with initial loans ranging from $100–$500.
5am.earth’s treasury proposal seeks 10 million ADA over 18 months through milestone-based payments.

In its Oct. 21 announcement, Cardano Foundation said that the registrations support verifiable, reusable farm records across the project’s ecosystem. The organization linked to a Cardanoscan address and said each transaction there represents an individual farm.

2/ This collaborative project involved many teams: @Catalyst_onX, @AIquantTech, @Syngenta, @SyngentaFndnInd, , @AnastasiaLabs, @VeridianID, @Andamio_Teams, @ZengateGlobal, @NMKR_io, @Elkconnect_web3, Digifarm and numerous others across the Cardano community.

Congratulations…

— Cardano Foundation (@Cardano_CF) October 21, 2026

The project involves 5am.earth and Syngenta Foundation India, with technical contributions from AIQUANT, Anastasia Labs and Andamio. The Foundation’s case study describes a satellite-based system for recording agricultural information, including field boundaries, crop data and sustainability histories.

Cardano farm records combine field checks and satellite evidence
In its explanation of the registration process, 5am.earth describes four stages, beginning with an Agri-Entrepreneur recording information about the farmer, field, and activity where the work takes place. Satellite imagery then checks the field’s boundaries against current observations and its land history.

Identity and consent are attached to the evidence so its source can be traced, according to the project. Farmers can subsequently authorize the same record to support another service or decision.

On its website, 5am.earth says the system anchors identities and information from multiple sources on Cardano while keeping farmers’ personal data private. Its first stated uses cover land-border verification and historical sustainability ratings.

The project describes repeated verification as a cost faced by farmers and service providers. Banks, buyers, insurers, and governments often check the same farmer separately, creating isolated records, according to 5am.earth. Its proposed service lets financial institutions examine field evidence, buyers trace produce to supporting records, and government or nonprofit programs track participation using information already collected.

The Foundation’s case study says farm parcels receive decentralized identifiers linked to satellite-verified boundaries. Sustainability assessments draw on 12 years of biomass and crop data, while the blockchain records verified datasets for independent validation.

The Foundation describes reuse across finance, insurance, government programs, and agricultural trade. Its case study previously listed more than 15,000 farms following mainnet deployment and initial field trials, before the latest announcement put registrations at 100,000.

5am.earth outlines credit pilot with Seedstars
In its Cardano treasury proposal, 5am.earth names the operating project Swaminathan, after Indian agricultural scientist M.S. Swaminathan. The proposal identifies six active districts in Maharashtra and describes implementation through Syngenta Foundation India’s Agri-Entrepreneur model.

The proposal assigns different roles to commercial and technical partners. DigiFarm provides satellite-based farm verification, Zengate Global handles supply-chain traceability, Andamio records reputation on-chain, and Seedstars supplies credit scoring and loan origination, according to 5am.earth.

For the finance component, the project describes a Seedstars pilot covering 1,000–5,000 farmers. Its proposed initial input loans and working capital range from $100 to $500, with a later scale of $1,000.

Seedstars’ stated role includes using verified agricultural data to produce credit scores and structure loan offers, then feeding repayment information back into the records system. The proposal presents those figures as the pilot’s design, without establishing completed lending to the 100,000 registered farms.

The treasury request seeks 10 million ADA over 18 months. Its proposed payments comprise 5 million ADA on approval, followed by installments of 2 million and 3 million ADA tied to milestones.

Cardano’s industrial projects include fuel records in Brazil
Outside agriculture, the Foundation announced two research-stage applications with Petrobras and PUC-Rio’s Ledger Labs on Sep. 30, as crypto.news previously reported in its coverage of low-carbon fuel tracking.

The aviation project uses a Book-and-Claim model that separates the physical use of sustainable aviation fuel from the allocation of its environmental benefits. According to the Foundation, Cardano records the origin and recipient of each benefit.

The associated case study describes checking certificates before issuing standardized digital tokens. Participants can transfer and inspect those tokens, then retire them once the environmental benefit has been claimed to prevent reuse.

For Petrobras’ renewable-content Diesel R, the Foundation describes digital checkpoints covering production, transportation and use. Connecting those checkpoints would provide a fuel history for emissions accounting.

Both applications form part of the organizations’ research collaboration. Petrobras’ role concerns fuel information and environmental claims, while PUC-Rio’s Ledger Labs contributes through the research work.

Fireblocks support and Leios remain scheduled work
On Sep. 24, the Foundation and Fireblocks announced plans to make Cardano Native Tokens standard assets on the custody platform by March 2027. Their planned native token support would let institutional clients custody, send, and receive assets issued on Cardano.

Fireblocks has supported ADA since 2021. According to the announcement, the new integration covers other Cardano assets, including tokens using the CIP-26 registry standard and CIP-68 metadata standard, with further decentralized-finance integrations to be assessed during 2027.

At the protocol level, Input Output outlined its staged Leios rollout on Oct. 20. The developer targets an initial capacity of three to five times the current ceiling, followed by later steps toward 10–15 times, subject to mainnet results and governance approval.

Input Output says the Dijkstra hard fork will introduce the protocol changes before stake pool operators register new BLS voting keys. Its activation estimate requires registration covering roughly 90–95% of delegated stake, followed by live network load exercises and separate parameter updates to permit more traffic.

Important Cardano News and ADA Price Update: October 21

Cardano Foundation urges EU against expanding MiCA rules to DeFi and stakingLatest NewsPublishedOct 21, 2026

The foundation called for regulation based on financial risks rather than technology, warning that overlapping rules could create uncertainty for crypto businesses across the EU.

The Cardano Foundation has urged the European Union not to introduce new, standalone regulations for decentralized finance and staking, arguing that existing financial laws should govern such activities based on their functions and risks rather than the technologies they use.

In a Wednesday blog post outlining its 19-page Sept. 30 submission to the European Commission, the foundation called for a distinction between direct participation in decentralized networks and financial services provided by intermediaries, particularly those involving custody or control of users’ assets.

“Regulation should follow the substance of an activity, the functions performed, and the risks created, not the technology through which it is conducted,” the foundation wrote.

The foundation said Cardano users can delegate their native ADA (ADA) tokens to help secure the network without surrendering custody or locking their tokens, arguing that such participation should be treated differently from staking services operated by intermediaries.

The submission also called for clearer distinctions between the EU’s Markets in Crypto Assets Regulation (MiCA) and existing financial laws, warning that overlapping requirements and inconsistent interpretations across member states could create uncertainty for crypto businesses.

The foundation’s position comes as EU regulators consider expanding oversight of crypto services. In September, the European Securities and Markets Authority (ESMA) recommended additional safeguards for staking, lending and borrowing, along with a new regulated service category for firms providing access to DeFi protocols.

The Cardano Foundation has also pushed for greater regulatory clarity across the Atlantic, joining five other blockchain organizations in an Oct. 20 letter urging the US Securities and Exchange Commission to formally recognize digital commodities as non-securities under its proposed crypto framework.

Magazine: Can the SEC and CFTC’s pro-crypto rules be overturned? Legal opinion

Subscribe to daily byte-sized crypto news from Cointelegraph Subscribe Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.

EuropeCardanoEuropean UnionMiCADeFiStakingRegulation

More on the subject

Tether Invests in Peso to Expand USD₮ Payment Infrastructure Across Latin America

21 October 2026 – Tether, the largest company in the digital asset industry, led the pre-seed round in Peso, a Bolivian fintech company that provides access to payments, savings, and investments across Latin America. The investment aims to help Peso expand access to fast, low-cost, stablecoin-powered payments in the region while accelerating the use of USD₮ in everyday transactions across retail, institutions, e-commerce, food delivery, ride-hailing, and banking rails.

Peso provides a global USD₮ account that lets users save, spend, invest, and send money across borders from a single app. The company also brings USD₮ payments into the digital services people use every day, starting with Yango, a digital services platform operating in Bolivia, where users can now order food and pay in USD₮ directly in the app. In addition, Peso offers point-of-sale acceptance and virtual accounts in the user’s own name that connect USD₮ directly to the full Bolivian banking system via QR and ACH rails, enabling users to move seamlessly between stablecoins and local fiat.

The investment aligns with Tether’s broader mission to bridge the gap between traditional finance and digital assets by supporting platforms that address real-world financial challenges with stable, liquid, blockchain-powered payment solutions. In doing so, Tether aims to advance the global use of stablecoins and make them more practical and accessible.

The funding will support Peso’s expansion of local on- and off-ramps across its active markets in Bolivia, Brazil, Colombia, and Argentina, deepening USD₮’s role as the settlement layer connecting local currencies. It will also accelerate Peso’s broader product roadmap, including its merchant-facing point-of-sale network and virtual account infrastructure, delivering more transparent and accessible financial services to users and merchants across the region.

“Peso is building the kind of everyday-spend infrastructure that turns USD₮ from a savings tool into a payments channel people rely on daily. This aligns with our goal to promote financial inclusion and ensure access to faster, easier, and more interoperable financial services,” said Paolo Ardoino, CEO of Tether. “By supporting Peso’s growth across the region, we aim to create a new standard for stablecoin-powered solutions.”

“Latin Americans are already using USD₮; what was missing was the infrastructure to spend it in everyday life without friction. This investment lets us accelerate what we have been building: making it possible for anyone in the region to open an account in minutes and use USD₮ daily, from paying by QR code to sending money across borders. That a company like Tether chose a Bolivian startup for this investment is a recognition of the talent and execution capacity that exists here, and we are proud to have them as collaborators at this stage,” said Alejandro Terán, CEO and Co-Founder of Peso.

What Falling USDT Supply Means for Bitcoin’s Price Recovery

Tether has led a pre-seed funding round in Peso, a Bolivian fintech startup building payment infrastructure around USD₮ across Latin America.

The size of the check was not disclosed. The investment was announced on October 21, 2026. It lands as Peso begins stepping outside its home market of Bolivia and into three of the region’s larger economies: Brazil, Colombia, and Argentina.

What Peso actually does Users get app-based USD₮ accounts that handle saving, spending, investing, and sending money across borders.

In Bolivia, Peso links into the domestic banking system through QR codes and ACH networks, letting users shift funds between stablecoins and local bank balances.

Peso has also integrated USD₮ payments into Yango, a digital services platform operating in Bolivia. That means users can pay for food delivery and other services in the stablecoin.

What the executives are saying Tether CEO Paolo Ardoino framed the deal as an attempt to set a “new standard” for stablecoin solutions.

Peso CEO Alejandro Terán said the investment shines a light on Bolivian talent and is aimed at making it smoother for people to spend USD₮.

Part of a broader Latin America push In September 2026, Tether backed Plenti with a $3M seed investment. Back in July 2026, it put $20M into Ualá.

The Peso round is the smallest-stage bet of the group so far. Pre-seed is about as early as venture investing gets.

Why Latin America keeps coming up Stablecoins tend to find their warmest reception in places where people have reason to distrust their local currency. Peso’s model addresses that access problem directly by wrapping USD₮ inside a familiar banking-style experience and linking it to local payment systems.

What this means For Peso, the backing brings resources, but the expansion is where the real test begins. Integrating with Bolivia’s banking system is one achievement; replicating that across Brazil, Colombia, and Argentina means dealing with different payment rails, different regulators, and different competitors in each market.

Governments that worry about losing control over their monetary systems may not welcome widespread use of a privately issued dollar token. How regulators in Brazil, Colombia, and Argentina respond to apps like Peso will shape how far this model can scale.

The metrics worth watching are not the funding headlines. They are the usage figures: how many people hold USD₮ in Peso accounts, how often they spend it, and whether integrations like Yango expand into other merchants and services.

Disclosure: This article was edited by John Chen. For more information on how we create and review content, see our Editorial Policy.

Table of contents

On January 18, 2027, every firm that wants to put a dollar-pegged stablecoin in front of American users will answer to a single federal rulebook for the first time. The Office of the Comptroller of the Currency published that rulebook on Tuesday, October 21, 2026, in a final rule that locks in reserve, redemption, capital, and risk-management standards for payment stablecoin issuers — while the industry’s loudest fight, over whether issuers may keep paying yield or rewards, stays a case-by-case question the agency declined to settle in one stroke.

The final rule and its three companion bulletins take effect the same day as the GENIUS Act itself, January 18, 2027. The stakes are written in the market’s own numbers: Tether’s USDT carried a $182.8 billion market capitalization on October 21, and Circle’s USDC another $72.1 billion, according to CoinGecko data — more than $254 billion in dollar substitutes that, from that date forward, must sit inside the framework the OCC just finished. Put against a total cryptocurrency market value of roughly $2.88 trillion, the two largest dollar stablecoins alone are about 8.9 percent of the entire asset class.

Secretary of the Treasury Scott Bessent framed the moment in historic terms. “The GENIUS Act marks a watershed moment in American finance, further cementing the United States as the crypto capital of the world. Just as President Abraham Lincoln’s National Currency Act of 1863 established a national framework for bank-issued currency, the GENIUS Act establishes a federal framework for payment stablecoins in the digital age,” Bessent said in the agency’s release.

Eighteen Months From Bill to Binding Rule The rule did not arrive quickly. The GENIUS Act was enacted on July 18, 2025, and its implementing framework has been under construction ever since. The OCC published its notice of proposed rulemaking on March 2, 2026, closed the formal comment window on May 1, and kept accepting late comments through July 1. By the time the final rule landed, roughly 328 comments had stacked up from crypto firms, trade groups, banks, academics, and individuals — a signal of how much the industry had riding on the details.

The gap between enactment and effective date spans 18 months, but the sharper arithmetic sits in the tail. The OCC finalized its rule 233 days after proposing it, and issuers now have exactly 89 days from publication to bring operations into line before the framework becomes binding. That compressed runway is the piece that will occupy compliance teams between now and January.

For readers new to the statute, what the GENIUS Act actually requires is a three-category licensing system: bank subsidiaries, federally qualified nonbank issuers, and state-qualified issuers under a $10 billion ceiling. The OCC’s part of that architecture is now finished, apart from the anti-money-laundering chapter still sitting in a separate rulemaking.

The provision that drew the most heat never left the statute: a payment stablecoin issuer may not pay “interest or yield to a payment stablecoin holder solely in connection with the holding, use, or retention of such payment stablecoin.” The proposal tried to police evasion with a rebuttable presumption that certain affiliate and third-party payments violated the ban. Commenters tore at it from both directions.

Some wanted the presumption broadened, or argued that a presumption was inadequate and that certain indirect payments should be conclusively banned. Others pushed to narrow or delete it entirely, warning that a presumption this wide could sweep in ordinary payments to related third parties that had nothing to do with rewarding holders for simply sitting on a token. This is not a theoretical squabble — it is the difference between Coinbase, PayPal, or Kraken being able to keep marketing a rewards rate on a stablecoin balance and having to redesign the product outright.

The OCC’s release does not hand down a blanket answer on existing rewards programs. The rule keeps the statutory ban intact and leaves the application of it to be assessed on the facts of each arrangement, with the agency free to update the regulations as issuer business models evolve. For the firms that spent the past two years building rewards features around stablecoin holdings, that is the closest thing to a live question this “final” rule could have produced.

Reserves, Redemption, and the Run the OCC Was Warned About Away from the yield fight, the final rule’s edits read as a deliberate loosening. The OCC made reserve asset management more flexible than proposed while keeping core liquidity, diversification, and concentration requirements so issuers “remain sufficiently reserved and capable of meeting redemption requests in a timely manner.” Capital and operational backstop requirements are more detailed than the proposal but simplified, and risk-management standards under new §15.13 scale with the nature, scope, and risk of an issuer’s activities rather than applying one block to everyone. The final rule also accommodates special purpose vehicle issuers structured to protect the rights of payment stablecoin holders.

Comptroller of the Currency Jonathan V. Gould put the emphasis on the practical floor the rule builds. “We are providing a clear, practical framework for payment stablecoin innovation, with strong standards for reserve backing, redemption, and risk management,” Gould said.

But the comment record carried a warning the agency itself summarized: several commenters argued against any freeze or extension of redemption during a spike in withdrawal requests, on the ground that such provisions could accelerate a run. That is the paradox at the center of stablecoin regulation — the tools meant to slow a panic can themselves be read as a signal that redemptions might not be honored. The final rule’s treatment of redemption timing, down to a definition of “business day” that excludes weekends and federal holidays, shows the OCC working through exactly that tension.

What Still Has No Final Answer For a document titled “final,” the OCC left a striking amount of runway. The Bank Secrecy Act, anti-money-laundering, and sanctions chapters are being written in a separate rulemaking, and the agency will announce separately when it begins accepting applications and waiver requests from prospective issuers. The final rule also narrows the definition of “customer” to direct counterparties of the issuer, so a holder who bought a stablecoin through a third-party distributor is not a customer of the issuer until they redeem directly — a change that quietly redraws who is owed what protections.

The honest read is that January 18, 2027 is the beginning of compliance, not the end of the argument. The Treasury’s own comment window on its parallel Section 3 proposal closed on October 19 with the industry still litigating the same questions the OCC just heard. What to watch is concrete: the separate BSA/AML final rule, the OCC’s application-processing announcement, and the first public moves by Tether, Circle, and the exchanges to explain whether their existing yield and rewards features survive contact with the new text.

Disclosure: This article does not represent investment advice. The content and materials featured on this page are for educational purposes only.

In brief Ken Kutaragi, the founder of PlayStation, said that physical discs are a "metaphor" for owning games, and calls it a "mentality issue" if you're upset about physical discs not being produced. It follows Sony's decision to discontinue the production of game discs as of 2028, which has received major backlash from fans. Game veterans told Decrypt that the disc decision is usually pushed by publishers to boost profits, and that Sony miscalculated its community's reaction. PlayStation founder Ken Kutaragi has pushed back against fans' anger over Sony's plan to discontinue physical game discs, calling it a "mentality issue." One game industry veteran claims that cutting discs is "only" ever pushed by publishers as they seek better profit margins.

It comes amid a storm of controversy surrounding Sony's decision to stop disc production in 2028. Former PlayStation exec Shawn Layden called it a "heavily spreadsheeted decision" and said it damaged the company's reputation. Meanwhile, fans have garnered more than 385,000 signatures on a "Don't Kill the Disc" petition.

"I understand that physical discs have become a metaphor for 'owning' games. I really understand that mentality," Kutaragi said at the Game Republic New Horizons event. "But nobody thinks [physical media] is necessary for a networked device like a smartphone, for example, because people feel that they will keep their content. So it's a mentality."

Kutaragi retired from PlayStation in 2007 and is best known for being the architect of the first three generations of the PlayStation console. Since leaving, two more generations of the console have been released. He is currently serving as CEO of Japanese companies Ascent Robotics and Cyber AI Entertainment.

“I really understand [why some people are upset]," he said, according to the Video Games Chronicle. "But I don’t think it’s economically reasonable. Maybe it’s a mentality issue.”

Former creative strategist for Infinity Ward Robert Bowling told Decrypt that publishers are the "only ones ever pushing" to cut physical game discs. He said that it is because cutting discs can increase profit margins by reducing the cost of production, as well as crushing the game reseller market led by the likes of GameStop. 

"It speaks to the divide that has formed in our industry between those who see games as just a software product," Bowling, who is now studio head for game studio //18.bravo, told Decrypt, "And those who see them as something more like art, entertainment, collectibles, and a lifestyle."

Sony has argued in court that no reasonable consumer believes that they own digital games they buy on the PlayStation Store, according to court filings. Instead, Sony says that Store purchases equate to purchasing a revocable license.

Game industry veteran Chris Heatherly said that corporate executives are used to "issuing decrees" from their offices and "hiding behind their PR teams," but that doesn't work in the social media age. He argues that Sony isn't "in dialogue" with its audience, so it misjudged how the move would land.

"I think it’s insult upon injury for gamers who feel used and abused by these console makers in general," Heatherly told Decrypt. "If you look at Steam, people buy way more games than they play because they like to collect games. What is that other than owning them? You’re not playing them at all!"

Myriad: Where does the CS2 knife index go next? Click to make your prediction.That said, Heatherly argues that it isn't "an entirely rational coherent thought process" to want to own online multiplayer games, since the publisher usually controls the servers anyway. But he thinks there is a middle ground.

"I think there are models for ownership worth talking about, but not fake financialized ownership like web3," he told Decrypt. "I think people would be happy with local forever and peer-to-peer [online services], frankly."

Daily Debrief NewsletterStart every day with the top news stories right now, plus original features, a podcast, videos and more.

Join 72,000+ readers

Create an account to save your articles.

Add on Google

Add Decrypt as your preferred source to see more of our stories on Google.

A series of security vulnerabilities have been disclosed in internet infrastructure software within a single day, affecting PHP, Node.js, and Go.

Multiple internet infrastructure software projects rolled out security updates in a single day, addressing vulnerabilities including remote code execution, TLS certificate validation bypass, and certificate trust risks. PHP fixed two critical flaws: CVE-2026-109618 and CVE-2026-109619, both enabling unauthenticated remote code execution that impacts PHP environments processing web requests. The patched versions are 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Node.js’ advisory details 10 vulnerabilities, four of which are high-severity: these include remote code execution via out-of-bounds write in the Brotli decoder, DNS name truncation, and two TLS certificate hostname validation bypass issues. Fixed versions are 26.12.1, 24.22.1, and 22.23.4. Additionally, Go’s crypto/x509-related risk is tracked as CVE-2026-111943, rated "Important" by Red Hat with a CVSS 3.1 score of 6.8. Attackers with specific network access and valid certificates could impersonate legitimate servers to intercept or alter communications. Go 1.26.10 and 1.27.3 have been added to a deny list, blocking trust for compromised intermediate certificates.

1 hours ago

Dataline completes $10.6 million seed round funding, and plans to conduct an ICO.

Decentralized data network for AI agents Dataline has closed a $10.6 million seed round, co-led by Lattice and Samsung-backed Dispersion Capital, with participation from Symbolic Capital, Coinbase Ventures, Anagram, and Robinhood co-founder & CEO Vlad Tenev, among others. The round, completed in April, utilized a SAFE agreement with token warrants; valuation was not disclosed. Dataline is now live, covering approximately 50 data sources to deliver on-chain and off-chain data, and scores data reliability, timeliness, and consistency using AI. Proceeds will be allocated to expanding data sources, enhancing data validation, and expanding into robotics, AI training data, and other sectors. Dataline plans to launch a token by the end of 2026 for network payments and data access, and intends to conduct a public token sale on Base via Uniswap’s Continuous Clearing Auction (CCA) system, with details set to be revealed next week. The public sale’s target fundraising amount, token quantity, and other terms remain undisclosed.

1 hours ago

Trump plans to leverage White House cyber crime efforts to showcase achievements in combating cross-border crypto fraud.

White House officials said on October 21 that Trump planned to focus on the U.S. government’s actions to crack down on overseas crypto fraud rings during the White House’s cybersecurity event that day, including recovering funds and shutting down fraudulent operations. These transnational criminal groups steal funds from U.S. citizens via romance scams, phishing, ransomware and other methods. The U.S. government noted that law enforcement agencies have seized approximately $833 million in crypto assets linked to overseas fraud, and shut down 503 fraudulent crypto websites under the supervision of the Homeland Security Task Force. Relevant authorities have also notified nearly 9,000 U.S. citizens to alert them they are being targeted by fraud. The U.S. Treasury Department previously announced the establishment of an inter-agency "Fraud Strike Task Force" to target "pig butchering" scams run by organized criminal groups in Myanmar, Cambodia, Laos and the Philippines. Since last year, the U.S. has also imposed multiple sanctions aimed at cutting off support for related fraud websites and their infrastructure.

1 hours ago

American Bankers Association voices dissatisfaction with OCC’s final GENIUS Act rule, which abandons proposed restrictions on stablecoin yields.

Crypto journalist Eleanor Terrett reported that the American Bankers Association (ABA) has voiced dissatisfaction with the final rules implemented by the U.S. Office of the Comptroller of the Currency (OCC) under the GENIUS Act. The OCC abandoned the previously proposed restrictions on stablecoin yields, a move the ABA argues will "maintain the status quo for crypto platforms." The ABA’s CEO stated: "It is a mistake to wait until deposit outflows and economic harm have already occurred before attempting to address these issues."

1 hours ago

Beyond PHP, three Node.js version branches are also affected by high-severity vulnerabilities, and users need to update their runtime environments promptly.

Node.js rolled out a security update on October 21, covering its 26.x, 24.x, and 22.x version branches, with corresponding patched releases: 26.12.1, 24.22.1, and 22.23.4. The advisory details 10 total vulnerabilities, categorized as 4 critical-severity, 3 medium-severity, and 3 low-severity, with varying impact scopes across the three version lines. The critical CVE-2026-111497 is an out-of-bounds write flaw in the Brotli decoder that could enable remote code execution (RCE), affecting all three branches. Other critical issues include improper null character handling in DNS resolution and a TLS certificate hostname validation bypass. The update also resolves problems with persistent connection response processing, random number cache duplication, and permission models, while updating dependencies including c-ares, OpenSSL, and Undici. The official note warns that end-of-life (EOL) versions may still be vulnerable, advising users to use the latest supported releases. Separately, prior reports noted PHP has fixed two critical unauthenticated RCE vulnerabilities, with patches available for versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35; PHP users are urged to upgrade immediately.

1 hours ago

Bonk Guy: This round is the "privacy cycle", privacy protocol MASK is undervalued.

Renowned trader Bonk Guy posted that the current crypto market is showing characteristics of a "privacy cycle". He noted that since yesterday, Bitcoin has risen approximately 3%, ZEC is up 16%, adding over $3 billion in market capitalization. MASK currently has a market cap of roughly $26 million, with its protocol trading volume and fees hitting consecutive all-time highs, he added. Citing data from DefiLlama, he stated that MASK ranks first among privacy protocols by revenue, outearning the next 10 privacy protocols combined. By comparison, ZEC’s market cap gain over the past 24 hours is roughly 115 times MASK’s entire market cap. Bonk Guy also said that MASK’s upcoming deployment on Solana is set to launch in the coming days, which he expects will further drive growth in usage, trading volume, and fees. He went on to call MASK the most undervalued privacy protocol in the crypto market.

1 hours ago

Source: Binance EN

This is a general announcement and marketing communication. Products and services referred to here may not be available in your region. Disclaimer: This is not available for users in the EEA. Fellow Binancians, Binance is thrilled to launch a Spot Trading Tournament where eligible users will have a chance to share a total prize pool of 400 BNB in token vouchers! In addition, Binance is introducing a “Sprint Reward” for a limited period – the more you trade, the higher your extra rewards! Promotion Period: 2026-10-21 10:00 (UTC) to 2026-10-28 10:00 (UTC) Join Now Eligibility: All verified new, regular users and Binance VIP 1-6 users can participate.Liquidity providers in the Binance Spot Liquidity Provider Program and Binance Brokers are not eligible to participate. Eligible Trading Pair(s) Trading pair(s): ENA/USDC, VANA/USDT How to Participate: Click the [Join Now] button on the landing page to register.Total Trading Volume reaches at least 500 USD equivalent in any of the aforementioned eligible pair(s) on Binance Spot during the Promotion Period. Users who do not meet this threshold will not qualify for any reward under this Trading Volume Tournament. Main Reward Structure: Statistical Period: 2026-10-21 10:00 (UTC) to 2026-10-28 10:00 (UTC)Rankings Based on the Cumulative Trading VolumeReward per Eligible Participant (in BNB Token Vouchers)1st Place12 BNB2nd Place10 BNB3rd Place8 BNB4th Place6 BNB5th Place4 BNB6th - 20th PlacesAn equal split of 40 BNB21st - 50th PlacesAn equal split of 40 BNB51st - 200th PlacesAn equal split of 64 BNB201st - 1,000th PlacesAn equal split of 56 BNBAll Remaining Eligible ParticipantsA proportional share* of 80 BNB, capped at 0.05 BNB per user Proportional Share Rewards Calculation Logic*: Your Final Allocation = (Your Trading Volume / Total Trading Volume of All Eligible Participants Ranked after the 1,000th) * Proportional Share Prize Pool Sprint Reward Structure: Binance is introducing a “Sprint Reward”. For a limited period, users will receive extra rewards based on their ranking by cumulative trading volume. The more one trades during the respective Statistical Periods, the higher the extra rewards can be. Please note that users can earn from both the "Sprint Reward" and the "Main Reward" pools at the same time. Rankings Based on the Cumulative Trading VolumeRound 1 Statistical Period: 2026-10-21 10:00 (UTC) to 2026-10-23 10:00 (UTC)Round 2 Statistical Period: 2026-10-23 10:01 (UTC) to 2026-10-25 10:00 (UTC)Reward per Eligible Participant (in BNB Token Vouchers)1st Place12 BNB12 BNB2nd Place10 BNB10 BNB3rd Place8 BNB8 BNB4th Place6 BNB6 BNB5th Place4 BNB4 BNB Promotion Rules: Trading volume of any zero-fee trading pairs is excluded from the final trading volume calculation.Transaction or gas fees will be excluded from the final trading volume calculation for the tournament.All eligible buy and sell orders will be counted towards the cumulative total trading volume.Token vouchers will be distributed to winners by 2026-11-11, and will expire within 21 days after distribution. Users will be able to login and redeem their token voucher rewards via Profile > Rewards Hub.The Spot Trading Volume leaderboard is updated at least once every 24 hours. The final update will be completed within a few hours after the campaign ends. The Main Reward leaderboard and Sprint Reward leaderboard will be displayed on the separate Sub-Spot landing page respectively. Data sync times vary daily but will always be completed by the end of the day.Only users who have met the minimum qualifying trading volume threshold will be displayed on the leaderboard along with their trading volume. Don’t miss out on this opportunity and share in the rewards now! To view more promotions for new listings on Binance, stay tuned to this page for the latest updates and exclusive opportunities. Guides & Related Materials: How to Spot Trade (App / Web) Terms & Conditions: These terms and conditions (“Activity Terms”) govern users’ participation in the activity above (“Activity”). By participating in this Activity, users agree to these Activity Terms, and the following additional terms: (a) Binance Terms and Conditions for Prize Promotions; (b) Binance Terms of Use; and (c) Binance Privacy Notice; all of which are incorporated by reference into these terms and conditions. In the case of any inconsistency or conflict between these Activity Terms, and any other incorporated terms, the provisions of these Activity Terms shall prevail, followed by the following in this order of precedence, and to the extent of such conflict: (a) Binance Terms and Conditions for Prize Promotions; (b) Binance Terms of Use; and (c) Binance Privacy Notice.Only verified users who complete the aforementioned criteria for the tournament by the end of the Promotion Period may receive rewards.This Trading Volume Tournament is available to verified new, regular and VIP 1 - 6 users enabled for Binance Spot Trading, subject to product (and where relevant, deposit methods’) availability in users’ regions, and may be restricted in certain jurisdictions or regions, or to certain users, due to legal and regulatory requirements.VIP level eligibility will be determined based on the user's VIP level at the time of joining the Activity. Users who join the Activity while they are VIP 6 or below will remain eligible for the Activity and may receive the applicable rewards based on their eligible trading volume during the Promotion Period, even if their VIP level is upgraded to VIP 7 or above during the Promotion Period.Reward Distribution:All token voucher rewards will be distributed to eligible, winning users by 2026-11-11.Users will be able to login and redeem their token voucher rewards via Profile > Rewards Hub. All token voucher rewards will expire within 21 days after distribution. Winning users should claim their vouchers before the expiration date, and no replacement reward will be provided. Learn how to redeem a Binance voucher.Please note that the actual value of rewards received by a user is subject to change due to market fluctuation.Token voucher rewards are subject to additional terms and conditions.Rewards are not negotiable nor transferable.Once the available rewards have been allocated to users, no further rewards will be provided notwithstanding that an eligible user may have completed the missions.A user’s trading volume in this Trading Volume Tournament will be calculated after the user has opted-in and will be based on the trading volume (i) in their master and sub-accounts, and (ii) on all Spot products, including Spot Trading, Spot Copy Trading and Trading Bots. API trades are allowed. Binance’s calculation of a user’s trading volume is final.Binance reserves the right to disqualify a user’s reward eligibility if the account is involved in any dishonest behavior (e.g., wash trading, illegally bulk account registrations/logins, self dealing, or market manipulation). Binance further reserves the right to disqualify any participants who tamper with Binance program code, or interfere with the operation of Binance program code with other software. Rewards that have already been disqualified will not be returned to the prize pool.Binance reserves the right at any time in its sole and absolute discretion to determine and/or amend or vary these terms and conditions without prior notice, including but not limited to canceling, extending, terminating, or suspending these activities, the eligibility terms and criteria, the selection and number of reward recipients, and the timing of any act to be done, and all participants shall be bound by these amendments.The commencement and operation of the campaign (including the commencement of the Promotion Period) are subject to the successful listing of the relevant token on Binance Spot. If the listing is postponed or cancelled for any reason, the campaign (including the Promotion Period and reward distribution) may be delayed, amended or withdrawn at Binance’s discretion. Binance will not be liable for any loss or inconvenience caused by such changes.There may be discrepancies between this original content in English and any translated versions. Please refer to the original English version for the most accurate information, in case any discrepancies arise. Thank you for your support! Binance Team 2026-10-21 Disclaimer: USDC is an e-money token issued by Circle Internet Financial Europe SAS (https://www.circle.com/). USDC’s whitepaper is available here. You may contact Circle using the following contact information: +33(1)59000130 and [email protected]. Holders of USDC have a legal claim against Circle SAS as the EU issuer of USDC. These holders are entitled to request redemption of their USDC from Circle SAS. Such redemption will be made at any time and at par value.