偷偷炒币的巴菲特

#Ledger继续暴雷
‼️Attention everyone using a Ledger hardware wallet‼️

Ledger has confirmed that some devices were implanted with malicious hardware. Using LTE chips and eSIMs, hackers sent out the recovery phrases users saw during initial setup.

On-chain organizations estimate losses of over $93 million. Most absurdly, the security chip was completely normal, and the devices even passed official authenticity checks.

For over a decade, the crypto community has taught users: don’t take screenshots, don’t go online, and don’t tell anyone your recovery phrase.

But this time, users dutifully wrote their 24 words down on paper—while hackers were already waiting inside the device.

I believe the hardware wallet manufacturers should be the ones under the most pressure over this.

If you expect users to take 100% responsibility for their own assets, you should give them the means to verify that their devices are secure.

Otherwise, users are buying a hardware wallet that costs hundreds of dollars, while bearing the security risks of the entire supply chain.

What’s especially ironic is that CryptoBilis, the distributor involved, was an authorized reseller.

Today, similar reports of tampering have emerged in Europe at MediaMarkt. All Ledger products have now been removed from MediaMarkt’s stores and website.

Two questions:

First, who can prove that devices already sold haven’t been tampered with?

Second, if users buy through an officially authorized channel and still get robbed, who should bear the loss?

If there are no answers to these two questions, then “Not your keys, not your coins” may need an addition:

Not your hardware, not your security. Better keep it on Binance!

#Ledger #CryptoSecurity

#比特币反弹至8.3万美元上方
$BTC The nastiest playbook: liquidate the longs first, then the shorts.

I suspect Bitcoin is about to stage a liquidation sweep in both directions.

Take a look at this 48-hour Binance liquidation heatmap.

BTC is currently hovering around $83,600. The liquidation band above, at $84,300–$84,500, is glaringly bright yellow, while a large pool of liquidity is also piled up below at $82,100–$82,300.

Interesting.

BTC has just bounced from around $81,000, reigniting hopes for many that it could surge to $85,000.

But here’s what to watch out for: first, dump to $82,200 and shake out the longs who just jumped in. Then suddenly reverse and rally to $84,400, taking out the short sellers too.

Price makes a round trip without the trend going very far, while leverage on both sides gets thoroughly cleared out.

If BTC instead holds firmly above $84,500 on rising volume, we’ll need to reassess the outlook for a downward sweep. So which level do you think the market will target first: $82,200 or $84,400?
#BTC #Bitcoin

#Strategy增持250枚比特币
The money Saylor spent buying crypto this week was only about one-ninth of what was spent on preferred stock buybacks.

Strategy disclosed on October 12 that from October 5 to 11, it spent $21.5 million to buy 250 BTC, while spending $192.4 million that same week to repurchase $STRC preferred shares. The two expenditures differed by about a factor of nine.

The STRC shares being repurchased are preferred stock the company had previously used to raise funds, and they come with an ongoing dividend obligation. The policy the company announced in July is clear: when the price is below $100 per share, it can buy shares back at a discount to reduce future dividend payments. Once the shares are bought back, the associated dividend obligation is reduced accordingly.

So companies that buy crypto face a choice: use their dollars to increase their Bitcoin exposure, or to reduce what they’ll have to pay in the future?

For $BTC holders, the new buying this week amounted to $21.5 million. For $MSTRB shareholders, the preferred stock buyback has another benefit: easing the burden of future cash outlays. But the trade-off is just as clear: those funds have been used for the buyback and can’t also be used to buy crypto.

I see this announcement as a capital allocation decision: Strategy is still adding to its BTC holdings, while also spending a larger amount to address the dividend obligations left over from its financing. Going forward, its purchasing power should be assessed by looking at both of these figures together.

#BTC #Strategy

What a coincidence, the posts I happened to see from two big shots arguing side by side—algorithms really are getting more and more impressive 👍!
From love comes hate; they once loved so deeply, so now they hate so deeply too! Once the hatred reaches the extreme, will these two big shots end up falling in love again! 😁#比特币重回8.4万美元

Choose two out of four—which would you pick? #BTC

One sentence about a ceasefire, $CL oil prices fall 1.5% first

Trump announced in a post on Sunday that Russia and Ukraine had agreed to an “energy ceasefire,” effective immediately. He ended with one more sentence: “Don’t break it.”

The market reacted quickly. Brent crude fell 1.47% to $103.18, while diesel futures dropped 3%. At the same time, BTC returned to around $83,500, up 0.85% over 24 hours; ETH was around $2,543, up 1.75%. The drop in oil prices could ease some inflation and interest-rate pressures, giving risk assets a temporary breather.

But confirmation of the ceasefire was conspicuously lacking: Zelensky said he was still waiting for details from the United States, while Russia had not responded. Ukraine also said that Russian forces continued attacking its energy facilities after Trump’s announcement.

Russia pledged an initial supply of 300,000 tonnes of diesel, or about 2.25 million barrels. The world consumes nearly 29 million barrels of diesel a day—so the initial supply would last the entire world only about 1.9 hours.

Including all subsequent pledges, the total comes to around 4.8 million tonnes, equivalent to about 1.24 days of global demand. Deliveries would be spread out over time and would also depend on the capacity of Russian refineries. The quantity is not as massive as the headlines suggest.

In this latest drop in oil prices, the market is trading on the likelihood of a ceasefire, expectations of restored Russian supply, and the shift in sentiment prompted by political statements. Watch three things next: whether Russia and Ukraine each confirm the ceasefire, whether attacks on energy facilities stop, and whether Wednesday’s U.S. CPI comes in below expectations. A reversal on any one of these could send crude and BTC through today’s moves all over again.

#比特币 #原油 #Trump

‼️Donald Trump bought McDonald’s stock when the share price was around $270. $MCD

Disclosure documents from the Office of Government Ethics show that Trump purchased between $1 million and $5 million worth of MCD stock on August 10, 2026, when it was trading near $274.

It’s now at $235.

Use this information as you wish. #MCD

$PLTRB
$PLTR
‼️PALANTIR executives are selling…

Zero purchases in 2026…

What they did:
February 20: Alex Karp sold $65.9 million
March 2: Peter Thiel sold about $290 million
August 20: Alex Karp sold another $86 million
Total for 6 executives in August: about $95 million
#PALANTIR

If $HYPE pulls this off in the next 30 days, those begging for a pullback will be too scared to buy. #HYPE

In 2023, you sold $BTC because Binance and Coinbase were sued.

Then it rose from $25K to $126K.

Now you’re selling because of quantum computing and the USDT ban.

The scariest headlines always appear at the best entry points. #BTC

#Ledger确认用户设备遭植入未授权硬件
Ledger confirms: Extra hardware was installed in one affected cold wallet

On October 10, Ledger updated its investigation into the CryptoBilis incident: an unauthorized hardware implant was found in a device belonging to an affected user. The day before, the company had asked the Southeast Asian distributor to suspend sales and shipments.$BTC

This development brings the investigation into the realm of physical evidence. Where in the supply chain the device was tampered with, which batches were involved, and how the implant worked all have implications for the safety of other buyers’ funds. So far, one device has been confirmed. The full attack method and its connection to the total losses are still under investigation. The reported loss of $86 million circulating online is also a third-party estimate.$ETH

The official guidance for affected buyers includes a specific instruction: devices purchased through CryptoBilis in the 90 days before the warning that have not yet been set up should not be initialized for now. Users who have already set up their devices should consider transferring their assets to a new device and using a newly generated recovery phrase.

Switching devices and importing an old recovery phrase restores the same set of accounts. If the old phrase has been exposed, the other party will still have access; changing the PIN will not solve the problem. Funds need to be transferred to accounts associated with a new recovery phrase.

People who buy a cold wallet can hardly be expected to conduct their own hardware inspection. The manufacturer needs to provide details of affected batches, practical ways to identify affected devices, and a remedy for users who have been harmed. When the sales channel fails, buyers should not be left to bear the verification costs indefinitely.

#Ledger #加密安全 #CryptoBilis

#XRP账本修复可增发XRP的漏洞

$XRP This vulnerability was serious enough that the fix bypassed the regular voting process.

On October 9, 2026, XRPL disclosed a vulnerability dating back to 2015 that could create spendable XRP out of thin air. The team said it had found no evidence that the bug had been exploited on the public network.

The mechanism was quite absurd. When the payment system added up order amounts, the numbers got so large that the calculation wrapped around to a small value. Sellers received the full amount, while buyers were charged only a fraction, and the difference became new XRP. Even the program responsible for checking whether new coins had been issued used the same calculation method and made the same mistake. The development team has reproduced the issue in a single-machine test.

If someone had exploited it first and then transferred the newly created coins to an exchange, other holders could have faced extra sell pressure and dilution of their holdings. Keeping coins in a cold wallet would not protect against this price risk.

On September 25, fix version 3.4.1 was released. Developers initially withheld the source code and urged node operators to install it as soon as possible. Justin Bons, founder of Cyber Capital, later strongly criticized the move on X, questioning XRPL’s commitment to decentralization.

I can understand the urgency of this response: publishing the fix code would expose the vulnerability, while following the usual voting process would mean waiting for activation—effectively leaving attackers a window of opportunity.

The trade-off was that node operators had to trust the publisher first, without being able to fully review the source code. During the upgrade, old and new versions could also disagree when handling an attack transaction, potentially causing a split or even taking the network offline. The disclosure report acknowledged this risk, and the source code is now public.

The risk of unauthorized issuance, already reproduced, was serious enough. But emergency measures like this need to be explained each time and reviewed afterward. Node operators’ willingness to cooperate once should not be taken to mean they will automatically accept the same approach every time.

#xrp #Ripple #加密货币

#Tether冻结Ledger盗窃案相关USDT
Even cold wallets can be vulnerable during that stretch of the journey inside a shipping box.

Ledger is investigating devices sold by Southeast Asian distributor CryptoBilis. Several buyers have reported that their assets were transferred out, and the company has asked the distributor to suspend sales and shipments. Users who bought a device in the past 90 days but haven’t set it up are advised to hold off on activating it. Those who have already used one may want to consider replacing the device and generating a new recovery phrase.

This morning, blockchain analytics firm Bitquery counted 311 affected wallets across five chains, with losses totaling about $92.9 million. Tether has frozen $10 million in USDT, while 1,254 units of $ETH flowed into Tornado Cash.

Ledger has not confirmed the amounts or the cause. The investigation is currently focused on one distribution channel, and there’s no evidence that Ledger’s systems as a whole have been compromised. The next questions to investigate are where these devices were sourced and how the recovery phrases inside the boxes were generated.

#Ledger #钱包安全 #Cryptocurrency

Yesterday, Trump said he would not use force against Iran before the midterm elections. $BTC then bounced from a low of $80,391 to $82,468. The war isn’t over, and no deal has been reached in the negotiations, but oil prices and the dollar pulled back first, giving crypto prices a chance to catch their breath.

Meanwhile, in the week ending October 7, global money market funds saw net inflows of $153.81 billion, the most since May. The U.S. 10-year yield briefly climbed to 5.3645%, its highest level in 24 and a half years. Money is piling into places where it can earn interest with less volatility.

This morning, $BTC was around $82,500, still below this week’s level of around $86,000. Liquidity tends to be thin over the weekend, and if crude oil and Treasury yields rise again, this rebound may not go far.

#BTC #美债 #CryptoMarket

In last night's round of decline, $ETH took the heaviest hit.

So far, over the past 24 hours, $1.12 billion has been liquidated, 187,000 people were wiped out, and about 93% came from long positions. ETH liquidations reached $318.3 million, higher than $BTC 's $286.15 million; the largest single liquidation also came from ETH, at about $19.98 million.

Outside the market is no more stable: the Nasdaq fell 1.25%, the semiconductor sector dropped 3.4%, and Brent crude surged 4.1% to $104.28. Macro conditions first pushed risk assets lower, and contract liquidations then amplified crypto volatility once again.

Over the next two days, I will watch whether ETH/BTC and SOL/BTC can hold steady. If both ratios keep falling, leverage has come out, and the money willing to catch high-volatility assets has not yet returned.

#BTC #ETH

#美国政府转出9261枚BTC
The U.S. government’s wallet has been very active these days.

On Tuesday, 833.6 coins were sent out to $BTC , and on Wednesday another 8428 coins were transferred; together 9261 coins, about $770 million, all went into Coinbase Prime.

Galaxy said that, among them, 2456 coins previously had no government labels. They followed the same path into government-designated custody deposit addresses, and the team is temporarily treating them as newly seized assets. This attribution still relies on on-chain analysis, and the government has not yet publicly explained it.

The on-chain records only show transfers to custody addresses. Whether they then entered the order book—at this time there is no public evidence. A White House order last year required that BTC that was formally seized and moved into the Strategic Reserve must not be sold, while keeping exceptions such as returning to victims, law-enforcement purposes, and court orders.

Tonight there are only transfers of evidence; evidence of selling is still missing.

#BTC #U.S. government

Samsung has put USDC into the phone’s built-in wallet.

Starting in late October, eligible Galaxy users in the U.S. will be able to send USDC directly from Samsung Wallet to external wallets, or transfer it to bank accounts in more than 60 countries; recipients can receive local currency. The coverage figure is 82 million compatible devices.

“82 million” refers to devices; the number of registrations will only be known after launch. Samsung’s official announcement also specifically mentions Solana and Sui, but has not yet disclosed how traffic will be allocated. The accounts are operated by Bastion, and the USDC is held at Coinbase Prime. Users do not need to manage private keys, and large user balances may also end up concentrated behind a small number of on-chain addresses.

This will directly expand the USDC entry points. How much value SOL and SUI can capture will depend on three factors at month’s end: actual registration numbers, the number of remittance transactions, and how much traffic each of the two chains handles.

#USDC #sol #SUI

Tokenized US stocks on the blockchain: Americans can’t buy them. Last night at 8 PM, JPMorgan Chase and Eli Lilly’s tokenized securities began trading on Binance. $JPMB and $LLYB can be traded directly using USDT; the contract is deployed on BNB Chain, and withdrawals are already open. Users can also convert directly held stocks 1:1 into the corresponding bStock, with no conversion fee for now.

What’s interesting is that the product is listed under an American company name, yet American users can’t access the platform. These bStocks haven’t been registered under US securities laws; the public offering is limited to the Abu Dhabi Global Market.

In the same week, an OKX–Intercontinental Exchange joint venture platform just filed an application with the SEC, aiming to include 24-hour trading of tokenized US stocks. The chain is already live. Next, each platform will have to answer four things: dividends, voting, redemption, and who is allowed to buy.

#代币化股票 #BNBChain

$300 million, 49 votes: This time, the crypto industry put its money on the table of American politics. Across the 2024 and 2026 election cycles, industry-related groups have spent more than $300 million. On September 15, the CLARITY Act received just 49 votes in the Senate; advancing the bill required 60.

Fairshake hasn’t backed down. It has intervened in 57 races and is now preparing to support 32 House candidates—19 Republicans and 13 Democrats. The list still spans both parties, but the Senate defeat split almost entirely along party lines. Democrats such as Booker and Warner, who had previously been open to discussing crypto rules, also voted against the bill, citing conflicts of interest involving the Trump family’s crypto interests.

If all the money that follows goes toward punishing opponents, they might win seats, but the bill will look more and more like one party’s project. Fairshake still has about $120 million. Who it spends that money on next could determine whether the next version of the bill can muster 60 votes again.

#加密监管 #CLARITYAct #USPolitics

$BTC inflows, $ETH outflows! Last night, ETF flows sharply diverged between BTC and ETH.

On October 6, U.S. spot BTC ETFs saw net inflows of $118.8 million; on the same day, ETH ETFs saw net outflows of $201.9 million. Including the October 7 figures disclosed so far, ETH ETFs have now recorded net outflows for six consecutive trading days, totaling about $448 million.

Prices have diverged too. This morning, BTC was around $83,200, down 2.6% over 24 hours; ETH was around $2,570, down 4.7%. Sepolia began its 200-million-gas stress test yesterday. This progress is worth recognizing, but institutional funds haven’t paused their outflows for it.

In this pullback, BTC remains institutions’ core holding, while ETH looks more like a high-beta position—and takes a harder hit when investors reduce risk. For a possible turn, we can first wait for this streak of ETF outflows to end.

#BTC #ETH #ETF