Under the Hood now shows you which posts received a visibility-limiting label, making it easier to see what’s affected: This was a top request — thanks for the feedback. You’ll see the specific posts listed when fewer than 5% of your posts during the report period have that label.

🔝 Introduction to the Global Cybersecurity Alliance (GCSA) and Its Ecosystem Product Matrix I. Alliance Introduction and Vision The Global Cybersecurity Alliance (GCSA) brings together governments, enterprises, individual users, and cybersecurity experts worldwide. With a global perspective, it focuses on emerging cyber risks in AI and Web3, developing cross-border cybersecurity standards and practical defense systems to safeguard security and trust in the digital world. Currently, GCSA ecosystem products serve more than 380 million users globally. The GCSA Agent achieved a 91.3% success rate in the CyberGym Level 1 evaluation, demonstrating industry-leading performance. II. Academic Research Collaboration GCSA collaborates with leading academic and engineering institutions to advance AI and cybersecurity research: The University of Hong Kong (HKU) × GCSA: Jointly established the Centre for AI and Cybersecurity Research. Academy of Engineering and Technology of the Developing World (AETDEW) × GCSA: Jointly established the AI and Cybersecurity Research Center. III. Ecosystem Product Matrix GCSA has developed dozens of proprietary cybersecurity products serving governments, enterprises, and individuals. Its ecosystem covers threat intelligence, asset mapping, AI security auditing, edge protection, and infrastructure security, supporting flexible and modular deployment. More innovative security products are on the way. Stay tuned! Explore GCSA Products:

我们注意到一些账号集中传播“OKX 被盗”的说法，依据是一笔从 OKX 转出至“未知钱包”的链上交易。我能理解对于流量和关注度的追求，但，这种罔顾事实、制造恐慌的行为，不仅误导用户，也损害整个行业的信任。 “未知钱包”意味着链上监测平台尚未识别该地址的归属，并不意味着资产被盗。这笔 1.72 亿枚 USDT 的转账是 OKX 自行进行的内部资金划转。我们此前也已通过同一媒体渠道发布澄清： 令人遗憾的是，相关澄清发出后，仍有一些账号反复将正常的链上转账解读为“黑客盗窃”，制造不必要的恐慌。行业面临安全挑战时，我们更应该共同维护信任、共克时艰，而不是让未经核实的说法进一步放大恐慌。 同时，也欢迎链上监测平台 @whale_alert 与我们联系。我们愿意提供相关地址信息，协助完善标注，减少因地址归属不明而产生的误解。 最后，OKX 13 年来日夜不停地投入安全建设，力争为每一位用户提供安全的使用环境！

Binance 63亿美元被盗事件｜第二次官方公告要点： 承诺承担全部63亿美元损失、准备相应补偿资产、推进约30亿美元被冻结资产的追偿，并提出提币恢复和储备金披露时间表。 1️⃣确认被盗约63亿美元； 2️⃣ 币安承诺全额承担损失； 3️⃣ 约30亿美元被盗资产已被冻结； 4️⃣ 初步调查：可能不只是员工电脑被入侵，攻击路径可能更复杂； 5️⃣ 提币恢复时间表，计划在公告发布后约 34小时内开始分阶段恢复提币； 6️⃣ 准备公布新的储备金证明（PoR）：计划在公告发布约12小时后进行首次储备金快照。 7️⃣ 后续还将发布完整事故复盘：币安承诺公布攻击过程、安全漏洞、整改措施及防止再次发生的方案。

A record-breaking $6.3B breach demands a complete paradigm shift in cybersecurity architecture. 🚨 In our newest insight, GCSA examines the critical vector from Binance-related DevOps vulnerabilities to cross-border attribution. Dive into the report: #GCSAInsights# #CryptoSecurity# #Binance#

OKX 将通过与 ICE（纽交所母公司）的合资企业，为零售用户提供参与相关永续合约交易的渠道 新美国市场由 ICE 独家运营，结合 Trade[XYZ] 的链上永续合约创新，共同推动这一交易模式走向美国受监管市场 链上有新的产品和交易方式，传统金融有成熟的市场基础设施，但对普通用户来说，最终重要的不是背后有多少技术名词，而是这些创新能不能通过受监管的渠道，成为自己可以使用的产品。 而这，正是我们在做的。这次，我们不只是把传统资产带给加密用户，也在把链上交易创新带进更加合规的市场🫡 昨天还在和朋友聊，永续合约真是 Crypto 最了不起的创新之一。今天再看这条消息，突然觉得「Crypto will eat the world」又具体了一点 这一步，梅西是真的期待💚

I suspect IBIT is already on North Korea’s shortlist. In February 2025, the attackers behind the Bybit hack compromised a Safe{Wallet} developer’s Mac through a malicious project disguised as legitimate Docker-related tooling. They had access for 17 days before the theft, giving them enough time to manipulate the transaction interface used by Bybit’s signers. The signers believed they were approving a legitimate transaction. Instead, they unknowingly authorized the theft of $1.5 billion from a cold wallet. The keys could stay offline while the signers approved a theft through a compromised interface. TRM Labs attributes the recent Binance incident with high confidence to TraderTraitor, the North Korean group also linked to Bybit and the theft of 4,502.9 BTC from DMM Bitcoin. Binance’s preliminary investigation points to a compromised DevOps engineer’s laptop as the entry point. Binance says there’s no evidence that private keys were leaked, while TRM’s analysis suggests the attackers may have gained control of the signing infrastructure. If confirmed, the attackers could have moved funds through a compromised approval process without extracting the keys. Now imagine the same thing happening to IBIT. BlackRock’s IBIT is the world’s largest Bitcoin ETF, holding roughly 815,000 BTC worth around $63 billion. Coinbase remains its active Bitcoin custodian. Although Anchorage Digital has been appointed as an additional custodian, the fund’s latest quarterly filing says there are currently no plans to transfer any Bitcoin there. That’s an extraordinary concentration of Bitcoin under one custodian. Regardless of how large or well-funded that provider is, a critical failure in its security infrastructure could put the entire fund at risk. A $6 billion theft would wipe out roughly 9.5% of IBIT’s assets, equivalent to around $4 per share at current valuations. Binance managed to freeze some stolen stablecoins. Bitcoin has no such mechanism, making stolen BTC far harder to recover. BlackRock doesn’t separately insure the Bitcoin held by the fund. Coinbase has disclosed $320 million in commercial crime insurance coverage, shared across its customers. Its custody agreement also limits liability to $100 million per cold storage address, with any recovery subject to contractual terms, liability determinations, and other conditions. If a major theft occurred and the fund couldn’t recover the Bitcoin or obtain sufficient compensation, the remaining losses would ultimately be borne by IBIT shareholders. Bitcoin ETFs have made owning Bitcoin much more accessible, and there’s real value in that convenience. But as more capital flows into these products, enormous amounts of Bitcoin are also being concentrated among a handful of custodians and the infrastructure they depend on. The larger these pools become, the more attractive they are to attackers. A compromise at any critical point could have consequences far beyond a single institution. And that’s why security has no finish line. Even the most sophisticated cold storage setup still depends on hardware, software, supply chains, signing workflows, and the people operating them. Keeping private keys offline is essential, but it doesn’t eliminate the risks surrounding the transaction approval process. Spread your assets across independent custody setups. Keep your private keys offline. Verify transaction details on a trusted device screen, independently of the computer initiating the transaction. Continuously review your security architecture, and build it around the assumption that some part of your infrastructure will eventually be compromised. There are no silver bullets in security, and no permanent guarantees. Stay vigilant, keep verifying, and never mistake a clean track record for proof that you’re safe. Bunker mode.

Binance Hack: $6.01B Stolen, $2.80B Frozen The Binance Hacker took $6.01B from Binance hot wallets on nine chains between 20:10 and 23:05 UTC on 29 October. Issuers have frozen $2.80B of it. $2.9B in ETH, BTC, TRX, SOL and altcoins is still movable.

**Service Update** Deposits remain unaffected and continue to operate as normal. Our team is currently working on enhancements to the withdrawal service and related address controls. We expect to begin resume withdrawal services in the next 48 hours. We will continue to share updates through official Binance channels as progress is made.