It's time to turn off the ZCG funding stream. ZCG has over $125M in funding, and will receive millions more before the spigot is turned off. The program was never designed to handle this amount of funding. Draft ZIP: github.com/zcash/zips/blob/e…

INVESTIGATION UPDATE 2 In our last update, we said we would share how many people had personal information exposed once we could confirm it. We can now share those numbers. Across our old WooCommerce store and our current Shopify store, records containing approximately 5,600 mailing addresses and 5,200 phone numbers, along with names and email addresses, were held in systems the attackers were able to reach. We cannot say for certain whether the attackers accessed all of these records, so we are treating all of them as potentially exposed. These records are a subset of our total customers. Why the data was still there: In our last update, we explained that copies of orders remained in old database tables after past migrations. We have since found that the 60-day redaction also did not cover every type of order, and that some customer details were stored in other parts of the store, such as abandoned carts and contact forms, that redaction never reached. Addresses not in our records: More than 5,000 of the email addresses that received phishing emails do not appear in our WooCommerce or Shopify customer records. Some match our support and hiring inboxes. Together with reports of details that were never shared with us, this makes us confident the attackers also used data from outside Foundation. We are still tracing where these addresses came from. What we are doing: Out of an abundance of caution, we are rotating all keys and secrets across our systems, including those we have no evidence were accessed.We are keeping a single copy of the legacy WooCommerce data offline as evidence for the investigation. Once the investigation is complete, that data will be permanently deleted. We have found no evidence that this incident compromised Passport devices or the private keys they hold. Never enter your recovery phrase into a website or share it with anyone, including someone claiming to be Foundation. We will continue sharing confirmed findings and publish our full report when the investigation is complete.

Official Statement | Security Incident Update TL;DR: No private keys were compromised, unaffected wallets are safe, and all affected users will be fully reimbursed by Bloom. Following our investigation, we have identified the exact attack vector and confirmed the scope of the incident. The attack exploited a third-party module through a complex Remote Code Execution (RCE) vulnerability. No private keys were accessed or compromised, and we have ruled out broader exposure of users' wallets. Incident Overview Affected: 49 wallet addresses belonging to 9 users. • Total losses: Approximately 9,408 SOL ($947,000). • Root cause: Exploited third-party module enabling an RCE vulnerability. • Refunds: Bloom will fully reimburse 100% of the stolen funds directly to secure wallets designated by the affected users. • We are also working to trace the stolen funds, explore recovery and freezing options, and identify the attacker. Our team has been developing software since 2018 and operating in crypto since 2021. We are an established team, committed to building for the long term and protecting the trust of our users. Security threats are an unfortunate reality of this industry, even with extensive precautions in place. Our commitment to user safety, transparency, and business continuity remains unchanged. The Bloom Team

I just opened my first 2 pack of 10 and pulled a Prestige and a rare 🃏 & 7 uncommons. Honestly, not bad packs at all 👀 @BoredApeYC

HSBC Launches HKD-Backed RedCoin Stablecoin for 3.3 Million PayMe Users in Hong Kong According to the South China Morning Post, HSBC is rolling out its Hong Kong dollar-backed stablecoin, RedCoin, to more than 3.3 million PayMe users starting October 23. The initial phase supports peer-to-peer transfers and merchant payments, with users able to activate RedCoin wallets without additional account-opening requirements or minimum balances. Full availability is expected before the weekend. HSBC also plans to integrate RedCoin into its Hong Kong mobile banking app by year-end, enabling instant subscriptions to tokenized money market funds starting from HK$100, with tokenized gold and third-party funds to follow. HSBC received its stablecoin issuer license from the Hong Kong Monetary Authority in April 2026.

AX1 Console 2.0 is here. Starting today, Top 50 agents get paid in tokenized SpaceX stock $SPCXc. Check it out: console.ax1.vc And that is the most exciting news about our agentic launchpad activities on @Base, yet not the most important one. Getting your first quest done used to take 27 actions. Now it only takes 5. Enter ticker, hit CHECK, done. First five runs are on us. 6 weekly episodes so far. Agents already earned over $10K, with 96,510 paid runs in one episode alone. Everything onchain. The top 50 is now a payout ladder. Below it, no top 300 cutoff anymore: for each run your agent paid for, you receive a share of the pool. SPCXc is tokenized by Coinbase on Base. You claim it straight to your own wallet. Let your agent work for a week, and you could hold a piece of a rocket company. 1/4

As of Oct 23, 2026, 3:41:30 PM UTC, the Initia L1 and Rollups have been halted due to a security incident. Our team is actively investigating the situation and working to establish the full scope of any impact with security teams, validators, and exchanges. We will share verified information through our official channels as it becomes available. Please remain cautious of unofficial links, messages, or claims circulating during this time.

Convinced my brotha to come to ApeFest, Threw a banger golf event & now he has a sick ass ape. Give the homie a follow. #ApeFollowApe