星星的Web3计划

The most dangerous link in a cold wallet’s security may not be your recovery phrase, but the person who sold you the wallet.

In a statement on October 10, Ledger confirmed that at least one victim’s device among those distributed by Southeast Asian reseller CryptoBilis was found to contain an unauthorized hardware implant. This is the first time Ledger has officially confirmed physical tampering. Here’s the timeline: On October 9, Ledger received reports of stolen funds, launched an investigation, and asked the reseller to stop sales. On October 10, the implant was officially confirmed, and CryptoBilis further suspended sales of all hardware wallet inventory. Ledger said its own systems and services had not been compromised, and that the incident appeared to be limited to this reseller and the Southeast Asian markets it serves.

So far, loss figures are only on-chain estimates and have not been verified by Ledger. Investigator Specter estimates losses of more than $86 million, involving multiple chains, including $BTC $ETH $USDT. Bitquery estimates about $92.9 million across 311 wallets; another analysis puts the figure at about $93.4 million across 471 addresses. Around $70 million of the funds were $USDT on the Tron network. Ledger thanked the security team SEAL 911 for its assistance and set up a bounty email address to collect tips.

Official guidance: If you bought a device through this channel and have not initialized it, do not unseal or use it. If you have already initialized it, move your assets to a new device as soon as possible and use a brand-new recovery phrase. Remember: Ledger will never ask for your 24-word recovery phrase.

The lesson in a nutshell: The last mile of cold-wallet security rests in the hands of the reseller.
#LedgerConfirmsUnauthorizedHardwareImplantInUserDevice
#Ledger #Security
This is not investment advice. DYOR; trading involves risk.

Watching whether funds are flowing into large-cap coins or spreading across altcoins can give you a sense of market appetite.
$HANA : Down 5.12% in 15 minutes, up 6.91% over 24 hours. Where have you set your defense level?

#HANA

Argentina’s central bank has just shut the door on crypto banking for at least two years.

According to reports, Juan Curutchet, head of the Argentine Central Bank’s supervision of financial and foreign exchange institutions, made it clear at the Pulso 2026 payments industry event that crypto assets will not be allowed into the banking and payments system over the next two years. The 2022 rule prohibiting financial institutions from offering crypto services remains in effect.

The reason is straightforward: the economy is too fragile. Curutchet believes Argentina’s current fragility cannot support this kind of integration. As for when the ban might be lifted, it “depends on economic conditions,” and the issue could be revisited during Milei’s second term.

But the door isn’t completely shut. Here’s an interesting detail: despite the ban, several Argentine banking groups are reportedly building institutional stablecoin projects through independent entities. The compliant route remains closed, but a workaround is already taking shape.

What are the implications?
1. For crypto assets such as $BTC , Argentina is one of Latin America’s countries with the highest adoption rates. With banking channels unlikely to open in the near term, the lack of a formal on-ramp and off-ramp between fiat and crypto will continue, leaving P2P and over-the-counter channels to carry the load for another two years.
2. For stablecoins like $USDT, this is further confirmation of demand. In a high-inflation environment, Argentinians have a strong need to use stablecoins to hedge against the peso’s depreciation. The ban won’t stop that demand; it will only push more of it on-chain and over the counter.
3. The policy signal matters more than the substance: the extension of the 2022 ban was expected. The real point of interest is the “second term” timeline. If Milei is re-elected and lifts the ban, Argentina could become one of the first countries in Latin America to fully integrate crypto into its banking system.

In short: banks may keep crypto out, but stablecoins will keep going. Argentina’s crypto story continues—it’s just that the banking chapter will have to wait another two years.

This is not investment advice. DYOR; trading involves risk.

#ArgentinaCentralBankWillNotPushCryptoIntoBankingForTwoYears
#BTC #USDT

After following trending topics for so many years, the only thing I’ve gotten better at is finding connections faster.
This time, it’s “Shanghai EDG.M defeats Guangzhou TTG in the KPL,” which made me think of $SAND in the blockchain gaming sector.

#SAND

$STRK stole the show once again.

Over the past 24 hours, Starknet’s token surged from around $0.07 to briefly top $0.11. Multiple media outlets reported gains of 39% to 54%, while 24-hour trading volume climbed to $600–800 million and futures open interest jumped by more than 50%. The catalyst was a bold idea floated on October 8 by founder Eli Ben-Sasson: Starknet is seriously considering breaking away from Ethereum to become an independent Layer 1 resistant to quantum and AI attacks, with the goal of achieving post-quantum security by 2027—two years ahead of Ethereum’s own 2029 plan.

It’s an exciting narrative, but it’s also highly controversial. On one hand, Starknet’s STARK proof system is based on hash functions and is indeed structurally more resistant to quantum attacks than elliptic-curve cryptography. On the other, moving from L2 to L1 means building its own consensus mechanism, validator set, and economic security. There isn’t even a formal governance proposal yet, so the rally is essentially driven by speculation around the idea. On-chain data also shows that around 70% of trading volume has been flagged as wash trading, and another token unlock is coming on October 15, making it risky to chase the rally.

For $ETH , this is even more awkward: its own L2 is talking about “going solo,” shaking the foundations of the Layer 2 narrative. Is this a debate over technical roadmaps, or simply market hype? The fate of Starknet in this rally is worth watching for all L2 players.

This is not investment advice. DYOR; trading involves risk.

#STRKRisesAbout20%In24Hours
#STRK #Ethereum

A vulnerability that had been lurking for a decade nearly turned $XRP ’s 100 billion supply cap into a meaningless formality.

On October 9, the XRP Ledger team disclosed that its payment engine had an integer overflow flaw when aggregating quotes. An attacker could create hundreds of accounts and post sell orders at wildly inflated prices, then use a single payment to take all the offers at once. When calculating the total amount owed by the buyer, the software would encounter a 64-bit integer overflow, reducing the amount due to a tiny figure—while sellers were paid in full. The difference would become $XRP minted out of thin air, yet still usable.

More alarmingly, the ledger’s built-in check against unauthorized XRP issuance used the same summation logic and overflowed in tandem. It was effectively checking itself—and letting everything through. Per-account limits were no help either, since the illicit funds could be spread across hundreds of accounts.

Fortunately, this was only a “could have happened.” Researchers Cayden Liao and Veria AI reported the vulnerability through a bug bounty program on September 22. RippleX reproduced it in an isolated environment and raised its severity rating to critical. It was then fixed in xrpld version 3.4.1, released on September 25. The official investigation found no evidence of exploitation on any public ledger. According to reports, the vulnerability may have dated back to 2015.

Notably, the patch went through an emergency process, bypassing the usual amendment process, which requires more than 80% of validators to vote over a two-week period. It was the first time in more than a decade.

The core logic never actually failed, and the fix came in time. But an integer overflow in decade-old code is a reminder to everyone: the greatest enemy of a public blockchain is often not hackers, but arithmetic left untended for too long.

#XRPLedgerPatchesXRPCreationBug
#XRP

This is not investment advice. DYOR. Trading involves risk.

After losing the level for a week, $ETH has finally climbed back above $2,500.

According to multiple media reports, on October 10, $ETH rebounded from a low of around $2,400 this cycle, briefly reaching approximately $2,513 intraday, up about 0.8% over 24 hours. Over the past week, $ETH fell from above $2,700, breaking below $2,600 and then $2,500. Now that it has reclaimed this round-number level, market sentiment has finally had a chance to catch its breath.

Notably, the “counterparty” to this rebound has been the whales. Analysts’ data shows that whales accumulated approximately 166,000 $ETH over the past 72 hours. Meanwhile, outflows from U.S. spot $ETH ETFs have continued for nine consecutive trading days, with roughly $540 million flowing out over the week—their worst weekly performance since January. Prices are rising while ETF funds are fleeing, suggesting this rebound has been driven mainly by spot buyers buying the dip, rather than a return of institutional capital.

In the short term, $2,550–$2,600 is the first major resistance zone, with several short-term moving averages still exerting downward pressure from above. If ETF outflows continue, this hold may prove to be nothing more than a technical rebound. Conversely, once a return of fund inflows is confirmed, $2,500 could turn from resistance into new support.

#EthereumSurpasses2500USDT
#ETH #ETF

This does not constitute investment advice. DYOR; trading involves risk.

$Lobster intraday breakout signal
Up 2.4% to 0.04477 over 15 minutes; down 0.82% over 4h.
But it’s still down 3.07% over 24h, so for now this looks more like a rebound. Don’t get too optimistic until it holds above the intraday resistance.
Anyone who knows their stuff care to weigh in?

#龙虾

Nine straight days of outflows: U.S. spot $ETH ETFs are having their worst week since the start of the year.

The latest data shows that U.S. spot Ethereum ETFs saw combined net outflows of about $542 million over the five trading days from October 5 to 9—their worst week since January. The wave of redemptions has now lasted nine consecutive trading days, since September 29, with cumulative outflows nearing $697 million. That matches the record set from June 17 to 30, making this the third-longest outflow streak on record.

Who were the main sellers? The answer is quite concentrated: BlackRock’s ETHA alone accounted for about $477 million in outflows this week, or 88% of the industry total. The heaviest single-day outflow was on October 6, at $201.9 million. Institutional investors are clearly keen to rebalance their portfolios.

The knock-on effects are already showing up in the market: $ETH briefly fell below $2,500, while total ETF assets shrank from $17.9 billion in late September to $15.71 billion. Still, viewed over the full year, U.S. spot Ethereum ETFs have continued to see cumulative net inflows of about $13.26 billion, so the underlying base remains intact.

An interesting contrast: during the same week, U.S. spot Bitcoin ETFs actually saw net inflows of $21.13 million on October 9. Capital is choosing between different crypto assets, and this wave of selling is concentrated on the Ethereum side.

My take: Nine consecutive days of net outflows reflect not the sentiment of a single investor, but institutional repricing amid a broader cooling toward risk assets. Rising Treasury yields are weighing on risk appetite, and $ETH has been hit harder than $BTC . But the pace of redemptions has eased each day since peaking on October 6. If inflows return next week, that could be the first sign that sentiment is stabilizing.

This is not investment advice. DYOR—trading involves risk.

#EtherETFsExtendOutflowsToNineDays
#ETF #CryptoNews

Argentina’s central bank has put crypto banking on hold—for at least two years.

According to Bitcoin.com, Juan Curutchet, head of financial regulation at Argentina’s central bank (BCRA), made it clear: banks and payment institutions will not be allowed to engage with crypto assets for the next two years, and the existing ban will remain in place. The reason is straightforward: the economy is still too fragile—so fragile that it’s “not possible to move forward on too much.”

But the door isn’t completely closed. Curutchet described the issue as “on the agenda”: if Milei wins reelection, crypto could be permitted during his second term. That’s a contrast with the hardline stance in 2022, when Banco Galicia announced crypto services and was shut down by the central bank less than 48 hours later.

Interestingly, despite the ban, Argentina’s banking sector isn’t sitting idle: several banks are pursuing institutional-grade stablecoin projects through independent entities. After all, the country has 10 million crypto users and $91 billion in on-chain transactions, over 60% of which involve stablecoins like $USDT. With the peso losing value, the demand is real.

Regulators can wait two years. Users can’t.

#ArgentinaCentralBankWillNotPushCryptoIntoBankingForTwoYears

This does not constitute investment advice. DYOR; trading involves risk.

Saw this during my lunch break: CFX breaks above $0.07, surging 36.7% in 24 hours.
As an amateur contrarian indicator, I hereby solemnly declare: I have no comment. Last time I commented, the candlestick chart immediately went the other way.
$CFX Make up your own minds. This news is enough to keep the comments section arguing for three days.

#CFX

The most dangerous attack surface of a cold wallet turned out to be its screen.

Ledger confirmed yesterday that an unauthorized hardware implant was found behind the screen of a victim’s hardware wallet. It secretly “read” the recovery phrase the first time the user set up the device, at the moment the screen displayed all 24 words. The packaging was completely intact, and the device even passed the official authenticity check.

The chain of events is now clear: devices supplied through CryptoBilis, an authorized distributor in Southeast Asia, had been tampered with. On-chain tracking puts the losses at around $90 million (Ledger has not independently verified the exact figure), involving more than 300 addresses. Tether has frozen about $10 million in $USDT across the addresses involved. The attackers quickly converted about $14.7 million in $USDT into $USDD to evade the freeze, while another approximately 430 $ETH went through Tornado Cash.

Ledger has asked CryptoBilis to suspend all hardware wallet sales and advised customers who bought through the distributor in the past 90 days: if you haven’t initialized the device, don’t unbox it; if you have, migrate as soon as possible to a new device with a brand-new recovery phrase.

The takeaway is simple: buy hardware wallets only through official channels, and verify authenticity before opening the box. $USDT $ETH

#TetherFreezesUSDTLinkedToLedgerTheft #LedgerConfirmsUnauthorizedHardwareImplantInUserDevice

This is not investment advice. DYOR; trading involves risk.

6 wallets are long 11.7 million LUMIA with 3x leverage, sitting on $949,000 in unrealized profit.
Let’s look at both sides:
Bullish case: The news gives the market a story, which could attract more attention;
Bearish case: Expectations may already be priced in, making the actual announcement an exit point;
My take: Both sides have a case. The real question is which way the volume and price action at $LUMIA will go.
Latest for $LUMIA : 0.1681, 24h +32.68%, 24h range: 0.1008–0.1833.

#LUMIA

【Latest】According to Butler monitoring, Papertrade had been live for only about 8 hours when an address exploited its pricing mechanism to make approximately $1.28 million.
Overall, the market is leaning bearish; $ETH is currently at 2507.62.
News often affects sentiment first, but the direction still depends on capital flows. Let’s wait and see how things unfold after the event.

#ETH

Do your research before placing an order.

Things are getting intense!
U.S. spot Ethereum ETFs saw net outflows of $542.1 million last week, while Solana ETFs ended a 14-week streak of inflows.
Are institutions getting out? Can $ETH hold up? The news is just the starting point—the price reaction is what matters. Did you get out?

For information and sharing only, not investment advice.

AI usage is growing, with token consumption expected to increase 24-fold by 2030.
Whenever big news breaks, I go through the same cycle: excitement → hesitation → didn’t get in → review. Today was no different.
$BTC , will you wait for confirmation before acting, or jump straight in?

#BTC

For reference only. Make your own decisions.

Checked the market at night and $PUMP hit a new 24-hour high (0.005686, previous high: 0.00565).
First reaction: take a screenshot. Second reaction: check my holdings. Third reaction: pretend to stay calm.
Sound off in the comments: did you miss the rally, or are you stuck holding the bag?

#PUMP

For the record only—not investment advice.

Watching the money flow? Take a look 👀
$MAGIC 5 minutes saw a 2.21% drop, with the current price at 0.1046.
However, it’s still up 35.67% over 24 hours. Most likely, short-term traders are taking profits; this doesn’t necessarily mean the trend has reversed.
A rebound near the point where the drop began will usually face resistance. No need to jump to conclusions—let’s watch how things unfold.

Stay calm and manage your position size.

Don't scroll away just yet—this move may have something to do with your position!
$LUMIA has fallen below the 0.11 level 📉
The first rebound after the breakdown is crucial. If the bounce is capped here, this level could turn from support into resistance.

#LUMIA

For discussion purposes only. Trade at your own risk.