Security
Crypto security incidents, service interruptions and recovery updates with dated source attribution.
BTCPay Urges Fresh Servers for Affected Old Instances, Beyond a Version Update
BTCPay’s November 2 advisory links attacks to 2.4.1 and earlier. It recommends a fresh server and new wallet for affected old instances, even if subsequently updated.
HKMA and HKUST Launch Post-Quantum Planning Toolkit for Banks
The HKMA and HKUST launched a PQC Toolkit on November 2. It supports bank transition planning after an initial readiness score of 2.3/10; full readiness by 2030 is a target.
Chainalysis Discloses Customer Data Access as Security Investigation Continues
Chainalysis says customer identity records were accessed, with no evidence to date of access to investigation content, clear-text passwords or session tokens.
Cursor Flags Two Malicious Claude Code Extension Versions
Cursor’s October 29 notice, updated October 30, identifies malicious Anthropic.claude-code versions 2.1.312 and 2.1.313 distributed for macOS and Windows.
Polymarket Restores Trading After Third-Party Security Incident
Polymarket Restores Trading After Third-Party Security Incident
Arbitrum Council Freezes 8,425 ETH and 74.56M ARB Linked to Binance Incident
Arbitrum Council Freezes 8,425 ETH and 74.56M ARB Linked to Binance Incident
Coinbase Says Vendor Incident Exposed Some Contact Data
Cointelegraph reported on October 28 that Coinbase attributed limited customer contact-data exposure to Amplitude, while saying its own systems were not breached and funds were unaffected.
Bitquery Traces 9,408 SOL Drain From Bloom-Linked Wallets
Bitquery’s October 26 investigation traced 9,408 SOL taken from 48 Bloom-linked wallets belonging to nine traders, with the drain spanning 94 seconds.
CISA Flags Exploited Collabora Built-in CODE Flaw; Fix Starts at 26.4.303
CVE-2026-110447 affects the Nextcloud built-in CODE app before 26.4.303. Standalone Collabora servers are unaffected, and disabling the app is insufficient.