小楼

The contracts weren’t hacked—the “instruction manual” was: around 400,000 $USDT stolen from Predict.fun

It wasn’t the smart contracts that were compromised—it was the documentation site.
On October 27, prediction market Predict.fun, which runs on BNB Chain, posted a statement on X: a small number of users’ wallets had experienced unauthorized transfers totaling around 400,000 $USDT.
Officials’ preliminary assessment is that the issue stemmed from a potentially compromised API documentation website hosted by a third-party provider, affecting a small number of users for a short time. Three steps are being taken: take the documentation site offline and keep it down until the investigation is complete; fully reimburse direct losses; and later publish a full postmortem and prevention measures.
The timeline is also worth noting. Before the official statement, on-chain investigator Naeven had already traced at least 19 victim addresses and around 105 $ETH (about $260,000). The funds were bridged to Ethereum and then sent to Tornado Cash (according to crypto.news). The official figure of $400,000 uses a broader scope; the two figures are based on different criteria, and the postmortem will provide the final accounting.

PREDICT+3.57%

Borrow in DeFi without moving coins out of custody: $LINK builds institutions a “side door”

What has always stopped institutions from entering DeFi lending isn’t the interest rate—it’s that one rule: the coins can’t leave custody.
On October 26, Chainlink announced CustodySync, with Anchorage Digital Bank (a federally chartered U.S. crypto bank) as its first launch partner. The idea is straightforward: the collateral stays with a qualified custodian, while only a “shadow” goes on-chain.
According to Chainlink’s official blog, the process works roughly like this:
1. An institution deposits assets with a custodian. The custody balance is published on-chain via Chainlink Proof of Reserve, where anyone can check it.
2. A transfer-restricted receipt token is issued on-chain to represent the collateral held in custody, and is used as collateral in lending markets. Under this integration, it confers no rights whatsoever to the underlying assets.

AAVE-2.83%

LINK-0.40%

$176 Million Poured Into U.S. Midterms: Crypto Is Buying Itself a Head Start in the ‘Post-Trump Era’

The crypto industry’s biggest “long-term investment” this year may not be on-chain, but in Congress.
A Reuters survey on October 27 found that the crypto industry has spent about $176 million across more than 100 races in this U.S. midterm election cycle. As of October 20, Fairshake and its affiliated PACs had spent about $150.8 million, while other crypto groups had spent around $25 million.
A few points worth noting:
- Fairshake says 53 of the 58 candidates it backed in this year’s primaries and special elections won and will appear on the November 3 ballot.
- Its main funders are Coinbase, Ripple, and a16z. In the previous cycle (2024), Fairshake spent $196 million.

XRP+1.81%

Leverage before the listing: Anthropic “pre-market perpetuals” hit the blockchain

Anthropic’s prospectus has just gone public, and several places on-chain are already “pricing it in” ahead of time.
First, the facts:
On October 26, trade.xyz launched ANT, an Anthropic pre-market perpetual contract, on Hyperliquid. According to the official announcement, the contract tracks the USD price of one share of Anthropic Class A common stock (which is expected to list on Nasdaq under the ticker ANT). Before the listing, it reflects the “expected share price”; after the official listing, it is expected to convert to a regular perpetual contract. The announcement also cautioned that volatility may be higher during the pre-market phase, and that the mark price may hit the upper and lower bounds of the price discovery range more frequently.

This morning, we were just talking about Ripple securing a federal trust bank charter. By evening, it had brought Robinhood aboard.

This time, it’s not an MOU making big promises—it’s an official press release from both parties (Business Wire) plus CNBC coverage, dated 10/27:

1️⃣ RLUSD is now live on Robinhood Chain and Bitstamp by Robinhood, with Robinhood’s main app expected to follow later this year
2️⃣ Robinhood’s institutional business will use RLUSD on XRPL for settlement
3️⃣ Robinhood is bringing its own treasury operations onto Ripple Treasury: cash and liquidity management, cash flow forecasting, payments, and internal netting—all covered
4️⃣ Ripple Prime will provide Bitstamp with lending and margin financing across around 20 assets, and plans to support perpetual futures before year-end

Figures from the press release: RLUSD has a market cap of around $2.5 billion, and Robinhood has 28.6 million funded customers globally.

My take: The stablecoin battle has long been about distribution, not issuance. USDT has exchanges, USDC has Coinbase, and what RLUSD was missing was a major retail on-ramp. Robinhood fills that gap nicely. And Robinhood is even handing its own treasury operations to Ripple—that’s more meaningful than simply listing a coin.

But don’t get too excited just yet: the app rollout is still “later this year,” and $2.5 billion is still a drop in the bucket compared with the biggest players. Let’s talk about a three-way race once it’s actually live in the app and we see real usage.

$XRP

Not investment advice. DYOR.
Source: Official Ripple / Robinhood press release (Business Wire, 2026-10-27), CNBC

XRP+1.81%

Ripple Moves Into Robinhood’s Back Office: $RLUSD Goes On-Chain First, Coming to the App This Year

Stablecoins are vying for shelf space, and the most valuable thing isn’t issuance volume—it’s distribution. Tonight, Ripple landed a major shelf: Robinhood.
According to Ripple’s official October 27 press release (Business Wire, also reported by CNBC), the two companies have expanded their partnership across three layers:
1) Front end: $RLUSD launched today on Robinhood Chain and Bitstamp by Robinhood, and is expected to be available in the Robinhood App later this year. Bitstamp’s institutional business will use $RLUSD on the XRPL for settlement.
2) Back end: Robinhood’s own treasury is adopting Ripple Treasury, moving cash and liquidity management, cash flow forecasting, payments, risk management, and internal netting onto the platform. This is the most interesting part—it’s not for users; Robinhood itself is using it.

Verified

The Nasdaq-100 is officially onchain.

Janus Henderson (a long-established asset manager with around $500 billion in assets under management) just launched JQQQ. According to an exclusive report by the WSJ, it’s the first tokenized fund to receive official licensing for the Nasdaq-100 Index.

1️⃣ Underlying asset: Tracks the Nasdaq-100—a basket of leading non-financial tech companies like Nvidia, Apple, and Tesla
2️⃣ Tech stack: Tokenized by Centrifuge and runs on the Stellar blockchain $XLM
3️⃣ Access: Initially open only to qualified professional investors outside the U.S., with a minimum investment of $100,000

The key word is “licensed.” Over the past few years, there have been plenty of synthetic U.S. stocks and knockoff index products onchain. But without authorization from the index provider, they’re essentially knockoffs. JQQQ has an official license—that’s the kind of thing institutions are willing to invest in.

My take is simple: the S&P 500 and Nasdaq bundle modern capitalism and technological progress, making them some of the most resilient long-term assets. Now TradFi is moving them onchain, showing that RWA is expanding beyond Treasuries and money-market funds into stock indices.

Retail investors can’t get in just yet ($100,000 minimum + professional investor status), but the direction is clear. $CFG and the Stellar ecosystem just got some serious validation.

Source: WSJ, Crypto Briefing (2026-10-27)
Not investment advice. DYOR.

#RWA #代币化 #Nasdaq

XLM+0.00%

CFG+7.72%

Some are blacklisting tokenized stocks, while others go straight for a license: the Nasdaq-100 has been put on-chain

Two very different styles in the same week.
On one side is OKXICE's tokenized U.S. stock solution, which has already been formally opposed by 26 companies, including IBM, Oracle, and Intel, preventing their own stocks from being included.
On the other hand, Janus Henderson took a different route: instead of asking each listed company for approval, it went directly to obtain a Nasdaq-100 index license and launched an on-chain fund.
According to an exclusive report by WSJ and The Block (October 27):
1. The product, JQQQ, managed by Janus Henderson, is said to be the first authorized tokenized fund tracking the Nasdaq-100.
2. The technology provider is the tokenization platform Centrifuge ($CFG ), with issuance on the Stellar ($XLM ) chain.

Half from crypto, half from data centers: Galaxy made $323 million in Q3

Half of Galaxy’s money this quarter came from rising crypto prices, and the other half came from building data centers for AI.
On October 27, Galaxy (Nasdaq: GLXY) released its Q3 earnings report: net profit was $323 million, after a loss of $85 million in the previous quarter; diluted earnings per share were $0.66, adjusted EPS was $0.83; adjusted EBITDA was $455 million.
Several numbers worth taking a closer look at:
- Cash, stablecoins, and U.S. Treasuries totaled $4.9 billion, nearly doubling quarter over quarter, of which U.S. Treasuries were about $2.76 billion.
- Adjusted gross profit from the data center business was $79 million, up 293% quarter over quarter (Wu Shuo cited the financial report, mainly from delivering 133 MW to CoreWeave).

GLXYUS+5.83%

Asked AI Where to Put Idle Cash, It Didn’t Pick $USDC: Mizuho Cuts Circle Price Target

The latest reason to be bearish on Circle is a new one: it’s not rate cuts or competitors, but AI assistants.
According to The Block, Mizuho lowered its price target for Circle ($CRCL ) from $45 to $43 on Monday, October 26, while maintaining its “Underperform” rating. CRCL closed down 7% that day at $79.84.
Mizuho’s approach was straightforward: ask an AI financial assistant (the report specifically named Muse), “Where should I put my cash?” The result: AI is more inclined to recommend bank savings products with FDIC deposit insurance and higher yields, such as SoFi. Even if users insist on staying in crypto, AI tends to favor other platforms rather than putting USDC in Circle’s own ecosystem.

USDC-0.01%

CRCL+0.63%

If you transfer coins overseas once, do you have to report the month-end balance to the Bank of Korea?

Korea's rule is pretty strict: it doesn't just look at that one transfer; once you've sent funds out even once, the monthly balance afterward may also need to be reported.
According to the Bank of Korea's (Virtual Asset Transfer Operators Foreign Exchange Electronic Network Reporting Business Manual) obtained by the office of lawmaker Park Soo-young of the Korean National Assembly (disclosed on October 23 and reported by Digital Asset, Seoul Economic Daily, and others):
1. After the revised version of the Foreign Exchange Transactions Act takes effect on December 3, exchanges must report each inflow and outflow of virtual assets such as $BTC and $USDT that users transfer to overseas exchanges or personal wallets, through the Bank of Korea's foreign exchange electronic network by 11 a.m. on the next business day.

The Interview Test Is the Trojan: Binance Says It Blocked Several North Korean Attacks in One Week

These days, the most dangerous thing isn’t a candlestick chart—it’s an interview invitation for a “high-paying remote job.”
On October 27, Binance said its security team had identified and blocked several cyberattacks linked to North Korea over the past week. The company’s systems were not compromised, and no assets were lost (as reported by ChainCatcher, TechFlow, Wu Shuo, and others, citing Binance).
The tactic isn’t new. It’s called a “Contagious Interview.” The basic setup is this: someone posing as a recruiter for an AI or crypto company invites you to an interview, then gives you a “coding test” or asks you to install software to “fix” a video call. You think you’re showing off your skills, but you’re actually running the attacker’s malware yourself.

Trade for a chance to win: Robinhood offers $700,000 to promote 7 coins, including $SUI

Brokerages are starting to use giveaways to drive crypto trading volume.
Robinhood’s official account announced on October 26 that it’s holding a crypto trading giveaway over the next 4 weeks, with a total prize pool of $700,000 and 6,001 winners: one grand prize of $100,000 and 6,000 smaller prizes of $100 each, all paid in crypto assets.
It’s simple to participate: Trade any of 7 designated coins on Robinhood Crypto, including $SUI , $ONDO , $INJ , and others, for a chance to qualify for the giveaway. According to rules compiled by the community, you must first sign up in the app. Each eligible trade counts as one entry, with a maximum of 6 entries per week and 24 total. The promotion runs through November 22, with winners expected to be drawn around December 7. Open only to certain U.S. users.

From $12 Million to $4,700: Machi Big Brother Still Has a 25x $ETH Long Position

The takeaway first: the most expensive leverage lesson this month was paid for by someone else, but don’t just treat it as a joke and move on.
I just checked the public Hyperliquid API for the address belonging to Machi Big Brother (Machi, Huang Licheng), which has been repeatedly cited by various on-chain monitoring services. Data as of today at 18:54 Beijing time:
Account equity is approximately $4,768, with $0 available to withdraw.
Position: 68 $ETH long, 25x cross margin, average entry price around 2,313.9, liquidation price around 2,290.7. In other words, it’s only about 1% away from liquidation.
Over the past 30 days: account equity peaked at around $12.25 million, with interval PnL of approximately -$8.63 million.

Burn 1 $SOL to Report a Bug: Firedancer Is Drowning in AI Reports

AI has made finding vulnerabilities cheaper, but reviewing them is still expensive. Firedancer’s solution is straightforward: want to claim a bounty? Burn 1 $SOL first.
First, the facts. Firedancer, Solana’s independent validator client developed by Jump Crypto, has updated its bug bounty terms (the new version takes effect on October 26): for every report submitted, you must send 1 $SOL (about $100) to a burn address. It’s nonrefundable. If the report is invalid, out of scope, or duplicates one someone has already reported, that 1 $SOL is still gone. You can submit without burning, but you won’t be eligible for a reward.
Why so harsh? Jump reviewed its $1 million audit contest, which ran from April 9 to May 9 this year: 162 researchers submitted 809 reports, but only 127 were unique security findings. Nearly half of the valid submissions were duplicates. Jump believes AI was involved in finding or writing almost every report, and the review backlog peaked at 299. The contest charged a $100 entry fee per person, but that didn’t stop it.

SOL-0.48%

Staked funds nearly credited to someone else: Ethereum patches a Glamsterdam bug

The bug was never exploited, but the process is worth noting: the fix was rejected at first, then merged a week later.
According to a CoinDesk report on October 27, Ethereum developers merged a fix into the consensus specifications (consensus-specs) for the Glamsterdam upgrade on Monday. The issue involved how “deposits still in the queue and not yet credited” would be handled when the upgrade activated.
Glamsterdam separates the roles of “block builder” and “validator.” Both can deposit $ETH , so the ledger should keep their deposits separate.
The scenario raised by researcher avsetsin is this: a node operator first registers as a builder using a public key; later, a staking provider uses the same public key to deposit $ETH for a new validator. Under the old draft, the upgrade would credit both deposits to the builder, allowing the operator to withdraw the funds. The validator would never be created, leaving the staking provider without the proof needed to recover the funds.

The token hasn’t launched, but it already has a price: Hyperliquid lists pre-market perpetuals for $XTEN

The token hasn’t had its TGE yet, and the tokenomics won’t be announced until October 31—but the market has already put a price on it.
Hyperliquid launched pre-market perpetuals (hyperp) for Extended’s token, $XTEN, this afternoon. According to the parameters in Hyperliquid’s public API: up to 3x leverage, isolated margin only, and $USDC as collateral. The first trade was at around 14:42 Beijing time, at $0.1556. Shortly after 17:00, the mark price was around $0.28, with 24-hour trading volume of about $1.1 million.
These are the only hard facts Extended has shared as of October 23: a genesis supply of 1 billion tokens, with 30% (300 million) allocated to eligible participants in the points program; the token is launching in November; and the tokenomics will be disclosed starting October 31. Based on the 1 billion total supply, the current pre-market price implies an FDV of roughly $250 million to $300 million. The community is already using it to estimate “how much one point is worth.”

USDC-0.01%

$USDC lands on Friday night: YC-backed Indian team is building perpetuals on U.S. stocks

Indians who want to trade Nvidia earnings at 2 a.m. now have another option—at least, they can get on the waitlist.
On October 26, Jon Rotbard of CoinFund announced that CoinFund led a $5.5 million seed round in Mochatrade, with participation from Coinbase Ventures and others. YC and Pioneer Fund had previously invested in its pre-seed round.
The product logic is straightforward:
- Deposit rupees using India’s UPI and get them credited in minutes
- Go long or short on more than 50 U.S. stocks using perpetual contracts, including Nvidia, Tesla, and Apple
- Margin and P&L are displayed in rupees, and the market never closes

Go long on India at 3 a.m.: NIFTY perpetuals are now on Hyperliquid

The Indian stock market has closed, but India’s index is still trading onchain.
On October 27, trade.xyz announced on X that NIFTY perpetuals had launched on Hyperliquid, with up to 20× leverage and 24/7 trading year-round.
A few easy-to-miss details, compiled from the official documentation:
1. It’s a “synthetic” asset. It tracks the NIFTY 50 index (a free-float market-cap-weighted index of 50 leading Indian companies). What you’re buying is a contract—not Indian stocks or a new coin.
2. It’s calculated directly in rupee index points, with no currency conversion. Profits and losses are cash-settled in index points via $USDC . In other words, the contract itself is unaffected by how the rupee moves against the US dollar.

USDC-0.01%

HYPE+1.00%