BlockchainUnmasked

Detection is solved. Four exploits this week, all flagged within minutes. Response isn't. It runs on relationships most teams don't have until the morning they need them. The platforms trace. We run the response. How the BU War Room works, end to end 👇 blockchainunmasked.com/post/…

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | November 7, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 A fake job interview reportedly preceded a Binance signing service compromise, with $6.43 billion moving across 11 chains and about $2.85 billion frozen or intercepted. Researchers say attackers swapped stolen tokens for $124 million in bitcoin, with little of the stolen crypto likely cashed out. (via @RektHQ and @TheBlockCo) 𝗛𝗮𝗰𝗸𝘀 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝘀 - Chainalysis says a recent attack on its systems exposed credentials and live tokens for all customers. (via @BleepinComputer) - Gnosis Pay disclosed unauthorized access to its legacy debit card system on Nov. 3, exposing card details, personal data, and crypto wallet information; customer funds were not affected. (via @TheBlockCo and @Cointelegraph) - MetaMask confirmed attackers accessed part of its staking infrastructure in September, redirecting approximately 0.385 ETH in rewards by manipulating recipient addresses; wallet funds and private keys were not compromised. (via @DarkWebInformer) 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁, 𝗔𝗿𝗿𝗲𝘀𝘁𝘀 & 𝗦𝗲𝗶𝘇𝘂𝗿𝗲𝘀 - Patrick Steven Yaroch, 37, pleaded guilty to stealing more than $2.4 million in cryptocurrency using his position on an FBI investigative squad and faces up to 20 years in prison on wire fraud and money laundering charges. (via @TheRecord_Media) - The US is seeking extradition of three suspects from Europe over alleged CEO-impersonation fraud exceeding $100 million, with officials saying AI was used to carry out the scheme. (via @TheRecord_Media) - Thailand's SEC filed a criminal complaint against Bitget's operator, alleging it ran an unlicensed crypto exchange for Thai users from 2022 to 2025. (via @CoinDesk) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - WorkOS says an AI-powered hacking agent operated by a security researcher breached its internal sales application and accessed customer information after the tool allegedly escaped its testing environment. (via @BleepinComputer) - SonicWall released security updates fixing seven SonicOS vulnerabilities, including an SSL-VPN authentication bypass flaw actively exploited in attacks. (via BleepingComputer) - A researcher reports an active malware campaign on X in which verified accounts post AI-generated content that delivers malware, with each example traced to a Korea-based VPN and a shared C2 that encoded its IP as decimals. (via @vxunderground) 𝗥𝗲𝗴𝘂𝗹𝗮𝘁𝗶𝗼𝗻 & 𝗣𝗼𝗹𝗶𝗰𝘆 - The Treasury Department withdrew a proposal that would have expanded requirements for cryptocurrency transactions. (via The Block) 𝗦𝗮𝗻𝗰𝘁𝗶𝗼𝗻𝘀 & 𝗗𝗲𝘀𝗶𝗴𝗻𝗮𝘁𝗶𝗼𝗻𝘀 - OFAC designated eight Canada-based money services businesses under Operation Economic Outcast on November 6, citing transactions with sanctioned Iranian digital asset exchanges. (via @trmlabs and @Cointelegraph) - FinCEN ordered US financial institutions to halt transfers involving MEXC Global under Operation Economic Outcast; Treasury says the exchange facilitated $16 billion in illicit finance tied to Iran, North Korea, and Russia. (via @decryptmedia) - OFAC targeted 45 additional offshore companies and associates it says helped Prince Group executives hide assets and evade earlier sanctions. (via Decrypt) Follow BlockchainUnmasked for your daily news digest every morning

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | November 5, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 OFAC sanctioned 10 individuals and one entity linked to DPRK IT worker networks. On-chain analysis of the listed crypto addresses found an Ethereum address listed under both Boykov and Obertas, a reported transfer of approximately $9.88M to that address, and TRON addresses that sent a combined 1.66M USDT to an address attributed to Obertas. (via @SlowMist_Team) 𝗛𝗮𝗰𝗸𝘀 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝘀 - Crédit Mutuel Arkéa confirmed a cyberattack after hackers allegedly stole more than $133 million by compromising a third-party service provider and making transfers using the bank's own account. Some stolen funds were potentially converted into cryptocurrency, some assets have been frozen, and French authorities are investigating. (via @DarkWebInformer and @TheRecord_Media) - Binance and Polymarket are seeking a Polygon hard fork to recover $6.8M in stolen crypto already frozen by block producers, which would allow the funds to be returned to their owners. (via @Cointelegraph) - The Mercado Bitcoin hack reportedly continued for hours after the exchange said the attack was contained, with the same attacker taking about $391,000, mostly from wallets that Bitquery ties to BitMart, whose founder confirmed a Nov. 2 hack and suspects a link. (via @CoinDesk) 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁, 𝗔𝗿𝗿𝗲𝘀𝘁𝘀 & 𝗦𝗲𝗶𝘇𝘂𝗿𝗲𝘀 - Ryan Roach was extradited to the US in a case the Department of Justice says dates back to 2016. Prosecutors allege Roach and a co-defendant targeted US universities with supercomputers, stealing logins and secretly mining crypto on the institutions' machines. (via @decryptmedia and @TheRecord_Media) - A US court sentenced a Venezuelan national to 12 years for laundering over $1 billion. (via @OCCRP) - A federal court sentenced CPA Ethan Joseph Sanchez to 63 months for stealing over $8.2 million from victims by tricking them into investing in bogus accessory dwelling unit plans. (via @FBI) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - Developers of Goddess of Victory: NIKKE confirmed hackers tampered with the game's PC launcher scripts in a supply-chain attack, distributing malware capable of stealing credentials and cryptocurrency wallet data. (via @BleepinComputer) - Chainalysis said some information belonging to all its users was exposed in a cyberattack. The company's users include those in the law enforcement and national security sectors. (via The Record) - Multiple Asian airlines, including Japan Airlines, Cathay Pacific and Singapore Airlines, reported data breaches traced back to IT provider Amadeus IT Group. (via The Record) 𝗥𝗲𝗴𝘂𝗹𝗮𝘁𝗶𝗼𝗻 & 𝗣𝗼𝗹𝗶𝗰𝘆 - Thailand's SEC filed a criminal complaint against Bitget's operator, with access to its website and app set to be blocked from Dec. 5 over unlicensed crypto trading. (via @Cointelegraph) Follow BlockchainUnmasked for your daily news digest every morning

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | November 4, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 Binance says North Korean hackers used a fake job interview to trick an employee into installing malware, compromising the exchange's wallet infrastructure and stealing about $6.34 billion in digital assets. According to the exchange's investigation, attackers exploited compromised employee computers and stolen credentials to breach the wallet infrastructure. (via @BleepinComputer and @Cointelegraph) 𝗛𝗮𝗰𝗸𝘀 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝘀 - Blockchain investigator ZachXBT says French bank Crédit Mutuel Arkéa may have lost more than $133 million from crypto exchange accounts and that the theft is being "covered up," allegedly letting more than $30 million be laundered. Crypto.com confirms it has blocked funds linked to the theft. (via @CoinDesk and @decryptmedia) - Brazil's Mercado Bitcoin says customers won't pay for a hack that drained tens of millions, with withdrawals still frozen and no restart date. Hop wallets have since sold stolen tokens for $10.55 million of ETH, with one $650K bridge to BTC reportedly halted. (via @decryptmedia and @arkham) - A flash-loan-funded oracle attack inflated a CoreVault redemption approximately 33 times, depleting InsurancePool and leaving the attacker with 160.26 BNB, approximately $112.2K, after reversing the trade. (via @CertiKAlert) 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁, 𝗔𝗿𝗿𝗲𝘀𝘁𝘀 & 𝗦𝗲𝗶𝘇𝘂𝗿𝗲𝘀 - Led by the German Itzehoe Public Prosecutor's Office, an operation targeted a company suspected of supplying fraudulent trading websites to criminal groups with potential victims in at least 50 countries. Authorities searched 17 locations, seized over 100 servers, and arrested seven suspects, with estimated losses exceeding EUR 4 million. (via @Europol and @OCCRP) - A federal grand jury indicted two Canadians suspected of hacking multiple US universities and using the compromised systems to mine cryptocurrency. (via @BleepinComputer) - A proposed agreement would resolve a federal anti-money-laundering investigation involving Block for $764 million. (via @CoinDesk) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - A 3AM ransomware affiliate encrypted around 37 of nearly 50 machines across a UK school estate from an unmanaged host. Researchers believe the intrusion, which ran September 10 to 19, may have combined a human operator with AI-generated commands, though no specific AI model could be identified. (via @DarkWebInformer) - Attackers compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. (via BleepingComputer) 𝗦𝗮𝗻𝗰𝘁𝗶𝗼𝗻𝘀 & 𝗗𝗲𝘀𝗶𝗴𝗻𝗮𝘁𝗶𝗼𝗻𝘀 - Russia's main bourse, which is U.S.-sanctioned, plans to list bitcoin and Tether's USDT in December, aiming to recapture crypto trading Russians conduct abroad. One listed coin is issued by a company that freezes wallets on the U.S. sanctions list. (via CoinDesk) Follow BlockchainUnmasked for your daily news digest every morning

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | November 3, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 Brazilian crypto exchange Mercado Bitcoin was reportedly hacked, with losses described as over $46M and separately as approximately $49 million, and nearly $10M in stolen funds has been frozen. The attacker is said to still hold altcoins including 372.99B PEPE and 12.82K AAVE, which could face selling pressure. (via @lookonchain and @chainalysis) 𝗛𝗮𝗰𝗸𝘀 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝘀 - Researchers traced how North Korea is laundering the USD 6.36 billion Binance theft using self-minted tokens, receipt tokens, and chained bridges. (via @trmlabs and @CoinDesk) - Liquid Network said its bitcoin reserves are back to full backing following September's $320 million exploit, with Blockstream providing the funds. (via @TheBlockCo and @decryptmedia) - Crypto investigators flagged a suspected theft in which a European entity may have lost $106 million from exchange accounts, while a wallet linked to a Solana arbitrage bot may have lost another $786,000. (via @Cointelegraph) 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁, 𝗔𝗿𝗿𝗲𝘀𝘁𝘀 & 𝗦𝗲𝗶𝘇𝘂𝗿𝗲𝘀 - Led by the German Itzehoe Public Prosecutor's Office, an operation targeted a company suspected of supplying fraudulent trading websites to criminal groups. Authorities searched 17 locations, seized more than 100 servers and assets, detained seven suspects, and estimate losses exceeding EUR 4 million across at least 50 countries. (via @Europol) - Prediction market Polymarket said it will repay the $3.9 million lost by users and compensate them for downtime following an October 29 site compromise. (via @TheRecord_Media) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - Google said it worked with industry partners to dismantle a botnet of more than 1.3 million Android TV set-top boxes used for residential proxies and advertising fraud, and banned manufacturer Videostrong Technology from producing certified Android devices after finding a backdoor embedded in its firmware. (via @briankrebs and @DarkWebInformer) - Russia-linked hackers are reportedly targeting Ukraine's war crimes investigations and military aid routes, using relatively simple malware to steal sensitive documents, credentials, and other information from Ukrainian organizations near the front line. (via The Record) - More than 1,000 GitLab servers remain exposed to an actively exploited remote code execution flaw, CVE-2026-97229, rated CVSS 10.0, allowing an unauthenticated attacker to execute arbitrary code; CISA added the flaw to its Known Exploited Vulnerabilities catalog. (via Dark Web Informer) Follow BlockchainUnmasked for your daily news digest every morning

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | November 2, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 The FBI and U.S. Secret Service alleged this weekend that North Korean state-sponsored hackers known as TraderTraitor stole more than $6.3 billion from Binance last week, and urged the crypto industry to block transactions. (via @BleepinComputer and @TheRecord_Media) 𝗛𝗮𝗰𝗸𝘀 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝘀 - An address labeled as the Pando Rings exploiter supplied 16.8M USDT to Aave, borrowed 5K ETH, then swapped 16.7M DAI for 7,548 ETH and deposited 4,000 ETH into Tornado Cash, in what researchers describe as an attempt to launder the funds. (via @PeckShieldAlert and @lookonchain) - BTCPay Server urged operators to shut down their servers after receiving reports of attackers draining funds from hot wallets, saying attacks targeted versions 2.4.1 and older, days after it shipped an emergency fix for a critical flaw. (via @decryptmedia and @Cointelegraph) - Trezor lifted its passphrase length limit, citing July's Coldcard attacks in which strong passphrases helped protect some users whose wallet recovery information was compromised, with the report referencing $100M in wallet thefts linked to Coldcard. (via @Cointelegraph) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - More than 1,000 internet-exposed GitLab servers remain unpatched against a maximum-severity flaw actively exploited in remote code execution attacks. (via @BleepinComputer) - Synology warned customers to update their devices immediately due to a surge in C3RB3R ransomware attacks targeting network-attached storage appliances. (via BleepingComputer) - Ivanti released security updates to patch two Connect Secure remote access gateway flaws that have been chained in zero-day attacks since at least October 1. (via BleepingComputer) 𝗥𝗲𝗴𝘂𝗹𝗮𝘁𝗶𝗼𝗻 & 𝗣𝗼𝗹𝗶𝗰𝘆 - FATF's Paris plenary removed four jurisdictions from its grey list and opened a targeted review of money laundering controls, with initial findings on compliance with its crypto standards due in June 2027. (via Cointelegraph) Follow BlockchainUnmasked for your daily news digest every morning

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | November 1, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 The FBI has attributed a record $6.3B Binance hack to North Korea and is seeking private-sector help to block further laundering of the stolen assets. Separate monitoring placed the incident at approximately $6.3B, with $3B already frozen. (via @Cointelegraph and @PeckShieldAlert) 𝗛𝗮𝗰𝗸𝘀 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝘀 - Hackers hijacked about a dozen DeFi websites all registered through Name.com and stole approximately $138,000. (via @TheBlockCo) - PremiaLabs was reportedly exploited for $464.6K. The exploiter bridged funds from Arbitrum to Ethereum, then swapped them to BTC via Chainflip and NEARIntents. (via @PeckShieldAlert) 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁, 𝗔𝗿𝗿𝗲𝘀𝘁𝘀 & 𝗦𝗲𝗶𝘇𝘂𝗿𝗲𝘀 - Europol, the European Labour Authority, and 34 countries announced 27 arrests from an EMPACT action week targeting human trafficking for labour exploitation across high-risk sectors. (via @Europol) - The fifth EMPACT Hackathon, held in Amsterdam and supported by Europol and Eurojust, identified 51 potential human trafficking victims and five suspects across 20 countries. (via @Europol) - Five suspects in the June 2022 TEFAF robbery in Maastricht were added to the EU Most Wanted list as of October 29, 2026, according to Dutch Police and the Limburg Public Prosecutor's Office. (via Europol) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - Operation SIMCARTEL dismantled a cybercrime-as-a-service network, resulting in seven arrests and seizure of 1,200 SIM box devices, 40,000 active SIM cards, and five servers. The network reportedly enabled creation of over 49 million online accounts. (via @DarkWebInformer) - A previously unknown threat actor tracked as UTA0576 chained three Ivanti Connect Secure vulnerabilities to achieve unauthenticated root access on fully patched appliances, extracted VPN and Active Directory credentials, and deleted system logs. CISA added all three flaws to its Known Exploited Vulnerabilities catalog. (via Dark Web Informer) - Cloud hosting platform Northflank is warning customers to rotate all credentials after a security breach led to unauthorized use of customers' AI API keys. (via @BleepinComputer) Follow BlockchainUnmasked for your daily news digest every morning

We're typically quiet about our daily work alongside federal law enforcement or ongoing investigations, but now that this is public, we are proud to say we contributed to the identification and freezing of funds in this case. A big congratulations to the law enforcement who worked quickly and brilliantly to bring this to a positive conclusion. We believe that public-private partnerships remain the best tool for fighting digital asset crimes where speed is one of the most important factors. Onward. thebitgazette.com/texas-brot…

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | October 31, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 Investigators link a hack of Binance to North Korea, describing a compromise of hot-wallet signing infrastructure and tracing where funds moved. The reported haul of 18,270 BTC is worth about $1.4 billion, according to blockchain investigators tying the attack to North Korea. (via @TheBlockCo and @CoinDesk) 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁, 𝗔𝗿𝗿𝗲𝘀𝘁𝘀 & 𝗦𝗲𝗶𝘇𝘂𝗿𝗲𝘀 - Raymond and Isiah Garcia were sentenced to 15 years for holding a Minnesota family at gunpoint for more than nine hours, forcing the father to transfer over $8 million in cryptocurrency. (via @TheBlockCo and @decryptmedia) - Ahmad Umar Agha, known online as Th3Pr0, was sentenced in federal court in Virginia to 42 months for his role in a Syrian Electronic Army conspiracy targeting Western media outlets and nonprofits. Fellow member Firas Dardar remains a fugitive. (via @TheRecord_Media and @DarkWebInformer) - Israel reportedly extradited an alleged Nomad Bridge exploiter to the U.S. over a $2.8 million theft. Israel's Supreme Court ruled that exploiting a coding flaw can count as computer intrusion, even when the software allowed the transaction. (via @decryptmedia) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - Chainalysis disclosed a data breach after attackers used offensive agentic techniques to access internal systems, exposing customer names, email addresses, user IDs, and organizational roles. (via @BleepinComputer and @chainalysis) - Florida's Department of Education said a breach of its student financial aid website, discovered October 19, may have exposed data of 4.9 million people, potentially including Social Security numbers, names, dates of birth, and addresses. (via @TheRecord_Media and @DarkWebInformer) - A malicious version of Anthropic's Claude Code VS Code extension circulated on Cursor's marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors. (via @BleepinComputer) Follow BlockchainUnmasked for your daily news digest every morning

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | October 30, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 Binance confirmed a security breach with a reported ~$6.3B impact, attributing initial findings to a compromised DevOps engineer's laptop that allowed an attacker to reach a service container and submit unauthorized withdrawals, with no evidence of leaked wallet private keys. Roughly $3B has been frozen, deposits and withdrawals are suspended, and Binance said it will cover losses from its SAFU fund and reserves. (via @officer_secret and @arkham) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - Polymarket temporarily suspended trading after attackers compromised a third-party service to distribute a cryptocurrency-draining JavaScript, with approximately $2.5 million in assets traced to a suspected attacker wallet. The company reported outages beginning at 2 p.m. Eastern U.S. time Thursday and attributed the downtime to an unnamed provider. (via @BleepinComputer and @TheRecord_Media) - Trezor warned CryptoBilis buyers following a report of a hardware implant in a Safe 5 device. The company said it has yet to examine the device but is treating the report as credible, and told buyers to move their funds. (via @decryptmedia) Follow BlockchainUnmasked for your daily news digest every morning

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | October 27, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 Chukwuemeka Victor Amachukwu was sentenced to eight years for hacking, fraud, and identity-theft schemes in which he and conspirators used stolen identity information to file fraudulent tax returns with the IRS and state tax authorities, seeking at least approximately $8.4 million in refunds and obtaining at least approximately $2.5 million. (via @FBI) 𝗛𝗮𝗰𝗸𝘀 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝘀 - Mumbai-based CoinDCX says 15.99 million USDT was drained from wallets it retired after last year's $44 million hack, bringing combined losses to nearly $60 million. The confirmation came days after its CEO called the matter a false alarm. (via @decryptmedia) - Crypto wallet maker Keystone plans to destroy almost 19,000 devices after a breach that exposed 25,964 buyer records and allowed hackers to steal a key that could let counterfeit wallets pass authenticity checks. (via @CoinDesk and @Cointelegraph) - Researchers observed multiple Tornado Cash deposits tracing to an address linked to an actor that allegedly drained approximately $1.58 million from unknown victims. (via @CertiKAlert) 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁, 𝗔𝗿𝗿𝗲𝘀𝘁𝘀 & 𝗦𝗲𝗶𝘇𝘂𝗿𝗲𝘀 - Dutch police extradited 44-year-old Zheng Zhao over allegations he was a key money-launderer working with scammers who called U.S.-based victims and urged them to invest in fictitious businesses. (via @TheRecord_Media) - Dutch police arrested two suspects accused of NFC relay fraud that stole 380,000 euros from 170 victims, reportedly using AI-generated audio calls and a fake bank employee to relay card data to an accomplice at an ATM. (via @DarkWebInformer) - An FBI cybercrime operation resulted in nine arrests in Nigeria. (via @OCCRP) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations; a former pentester is accused of using the ARTEX AI framework to steal 8.2 million data records. (via @BleepinComputer) - CISA added PHP2Shell vulnerabilities to its catalog of actively exploited flaws and ordered federal agencies to patch their systems by Thursday. (via @BleepinComputer) - The University of Copenhagen confirmed hackers accessed a test environment containing personal data belonging to 525,000 people. (via BleepingComputer) 𝗥𝗲𝗴𝘂𝗹𝗮𝘁𝗶𝗼𝗻 & 𝗣𝗼𝗹𝗶𝗰𝘆 - Ripple gained final OCC approval to launch a national trust bank, placing RLUSD reserve management and custody under federal supervision while leaving issuance with the New York-regulated entity. The bank will manage reserves for the $2.6 billion RLUSD stablecoin. (via @decryptmedia and @TheBlockCo) - Ottawa opened a 60-day consultation on draft rules requiring one-to-one reserves and fast redemption from stablecoin issuers, capping redemption fees at 1% while keeping the ban on paying holders interest. (via Decrypt) - The US OCC called on community banks to become payment stablecoin issuers following the regulator finalizing its rules for the GENIUS Act, a stablecoin law set for implementation in January. (via @Cointelegraph) Follow BlockchainUnmasked for your daily news digest every morning

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | October 26, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 LiteLLM, an open-source tool widely used by AI developers, said a key accidentally exposed in May was behind a supply-chain attack believed to have hit tens of thousands of users last week. The company tied the incident to the unrevoked key. (via @TheRecord_Media) 𝗛𝗮𝗰𝗸𝘀 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝘀 - Keystone said a website breach exposed hardware wallet buyers' shipping details. A security researcher warned the leaked data could expose crypto holders to targeted scams and physical attacks, and customers say the breach exposed data the maker had promised to delete. (via @Cointelegraph and @TheBlockCo) - A Bitcoin wallet bug let rogue servers steal funds when users tried to speed up payments by replacing legitimate transactions with fake ones and waiting for users to approve higher fees. At least one person lost bitcoin before developers patched the flaw. (via @CoinDesk) 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁, 𝗔𝗿𝗿𝗲𝘀𝘁𝘀 & 𝗦𝗲𝗶𝘇𝘂𝗿𝗲𝘀 - Mumbai-based CoinDCX, which initially dismissed reports of suspicious outflows as a false alarm, confirmed it lost $16 million tied to a retired wallet and will absorb the loss. (via @CoinDesk and @TheBlockCo) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - Two critical remote-code-execution vulnerabilities tracked as PHP2Shell, CVE-2026-109618 and CVE-2026-109619, have been successfully exploited in the wild. (via @BleepinComputer) - Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue npm package. (via @BleepinComputer) - Researcher Erica Windisch of Cyberdione Labs publicly released details for 11 unpatched flaws affecting Tailscale and headscale without coordinated disclosure; the most serious could allow an authorized Tailscale SSH user to gain root-level capabilities through port forwarding. (via @DarkWebInformer) 𝗥𝗲𝗴𝘂𝗹𝗮𝘁𝗶𝗼𝗻 & 𝗣𝗼𝗹𝗶𝗰𝘆 - Aviva Investors launched a tokenized share class of its Sterling Liquidity Fund on the XRP Ledger, marking the firm's second fund to list tokenized shares under a broader collaboration with Ripple. (via The Block) - South Korea is reportedly weighing a fourth delay of its crypto gains tax, now eyeing a 2029 start to align with U.S. integration of CARF, the OECD's international tax framework for digital assets. (via The Block) - Latvia is targeting tokenization rules in 2027 with commercial property in focus, though an overdue assessment remains unfinished. (via CoinDesk) Follow BlockchainUnmasked for your daily news digest every morning

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | October 24, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 Joshua Lybolt, 47, of Castle Rock, Colorado, was sentenced to 20 months in federal prison, ordered to pay $5,346,802.61 in restitution, and fined $50,000 after pleading guilty to one count of wire fraud and one count of money laundering. He received $4,950,000 in COVID-19 EIDL funds and $41,667 in PPP funds under the plea agreement. (via @FBI) 𝗛𝗮𝗰𝗸𝘀 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝘀 - Initia suspended its layer-1 network and rollups after security researchers identified unauthorized token minting and millions in assets transferred to Ethereum, with onchain data showing a $2.7M ether transfer and reported losses over $2.6M. (via @Cointelegraph and @TheBlockCo) - The entity labeled the Bitget Hacker moved $19.48M across 52 transfers between October 21 and October 22, with $19.33M in BTC and the remainder in ETH. Investigators are examining whether the funds are being laundered. (via @arkham) 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁, 𝗔𝗿𝗿𝗲𝘀𝘁𝘀 & 𝗦𝗲𝗶𝘇𝘂𝗿𝗲𝘀 - New York's attorney general asked a court to order NovaTech's founders, who fled the country, to pay about $1.37 billion, and separately settled with four top promoters for nearly $6 million. (via @decryptmedia) - Operation Serengeti III reportedly led to 1,462 arrests across 21 countries and recovered $105M, while Angolan police seized more than 2,000 crypto mining devices. (via @decryptmedia) - Sen. Richard Blumenthal demanded Tether's records on payments to Nxum, a firm co-owned by former White House crypto adviser Bo Hines. (via Decrypt) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - Researchers warned that DarkSword targets crypto users by exploiting iOS vulnerabilities to steal Keychain credentials, locally stored wallet private keys, and Notes data, with more than 1,500 related phishing sites identified including fake Binance and OKX pages. (via @SlowMist_Team) - Cloud platform Railway says an attacker accessed internal systems between October 20 and October 22, potentially exposing encrypted environment variables in roughly 100,000 workspaces, with some decrypted using compromised credentials. (via @DarkWebInformer) - Quest Diagnostics disclosed that patient records were exposed after a threat actor gained unauthorized access to its Quanum LSM system. (via @BleepinComputer) 𝗥𝗲𝗴𝘂𝗹𝗮𝘁𝗶𝗼𝗻 & 𝗣𝗼𝗹𝗶𝗰𝘆 - Bitcoin Core developers will now backport fixes and issue releases immediately for flaws flagged as easily discoverable, abandoning extended embargoes for bugs an attacker can surface with a single AI prompt. (via Decrypt) Follow BlockchainUnmasked for your daily news digest every morning

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | October 23, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 Interpol said more than 1,400 suspected cybercriminals were arrested across Africa this summer as part of a crackdown targeting gangs behind online fraud, ransomware, and business email compromise attacks, with $105 million seized. (via @TheRecord_Media and @OCCRP) 𝗛𝗮𝗰𝗸𝘀 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝘀 - An attacker moved $744,000 in ETH and BNB to Tornado Cash after exploiting Cysic's bridge to mint 10 million tokens on BNB Smart Chain; Cysic has offered the exploiter a 10% bounty. (via @Cointelegraph) - Arkham said Bitget was hacked for $388 million in late September and outlined how to track the stolen funds. (via @arkham) - CoinDCX denied that its active wallets were hacked after blockchain sleuths flagged $16 million in outflows from addresses linked to the India-based exchange. (via @CoinDesk) 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁, 𝗔𝗿𝗿𝗲𝘀𝘁𝘀 & 𝗦𝗲𝗶𝘇𝘂𝗿𝗲𝘀 - New York's attorney general is seeking over $1.3 billion from NovaTech's founders, whose platform allegedly took in $1.16 billion and traded only a fraction of it, following an August 2025 default judgment and nearly $6 million in settlements with four promoters. (via @TheBlockCo and @Cointelegraph) - The Central Bank of Ireland penalized Coinbase Ireland EUR 3,252,618 for leaving its safeguarding account underfunded and mixing customer funds with group accounts; it is the exchange's second Irish penalty in the last year. (via @decryptmedia) - A U.S. district court found four Lebanese defendants liable for fraud, torture, and civil conspiracy in the 2019 detention of Elie and Lara Samaha and ordered $35 million. (via @OCCRP) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - Microsoft said a Chinese government-aligned hacking group used automated ARTEX AI agents to carry out the recent supply-chain attack on ConnectWise and is using the same techniques to target organizations worldwide. (via @TheRecord_Media) - Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images carrying a payload that steals credentials, secrets, and environment variables. (via @BleepinComputer) - SlowMist said users reported a GitHub repository named sol-live, presented as a Solidity interview practice project, that contained a hidden command capable of collecting browser login databases, wallet extension storage, and macOS Keychain files; the actual scope of infection is not confirmed. (via @SlowMist_Team) 𝗦𝗮𝗻𝗰𝘁𝗶𝗼𝗻𝘀 & 𝗗𝗲𝘀𝗶𝗴𝗻𝗮𝘁𝗶𝗼𝗻𝘀 - Brendon Luo, sanctioned by the U.S. Treasury in June over ties to a Cambodian scam compound, still owns a California mansion estimated at $5 million, according to OCCRP. (via OCCRP) Follow BlockchainUnmasked for your daily news digest every morning

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | October 22, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 The Drift Protocol Exploiter reportedly sent $122.3M of ETH into Tornado Cash on 20 and 21 October across 520 transfers, described as the largest Tornado Cash deposit by any hacker in the last two years. (via @arkham) 𝗛𝗮𝗰𝗸𝘀 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝘀 - Researchers assessed the Fearless Wallet browser extension as malicious across versions 3.0.1 and 3.0.3-3.0.5, with a threat exposure period spanning nearly 20 months from February 2025 to October 2026. The code was designed to steal wallet recovery phrases, private keys, and keystore files. (via @SlowMist_Team) 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁, 𝗔𝗿𝗿𝗲𝘀𝘁𝘀 & 𝗦𝗲𝗶𝘇𝘂𝗿𝗲𝘀 - Chinese prosecutors are seeking to confiscate more than 61,800 Bitcoin tied to a $5.7 billion fraud scheme, days after a U.K. court ruled Chinese law governs victims' claims to the coins. A Tianjin court will hear the application after a six-month notice period while a parallel fight continues in London. (via @CoinDesk and @decryptmedia) - Italian police say a car-rental firm near Milan operated as an underground bank for 'Ndrangheta and Camorra figures, moving money abroad and into crypto. Authorities seized $24M. (via @decryptmedia) - Law enforcement agencies disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, targeting business email compromise, ransomware, and online scams. (via @BleepinComputer) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - LiteLLM was compromised in a supply-chain attack via release [email protected], with malware executing during Python startup to steal cloud credentials, AI API keys, and SSH private keys, and enabling remote code execution. (via @SlowMist_Team) - North Korean hackers are reportedly using a post-quantum cryptographic mechanism to secure malicious payload delivery in operations that combine old and new malware. (via @BleepinComputer) - GitLab released patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers. (via BleepingComputer) 𝗥𝗲𝗴𝘂𝗹𝗮𝘁𝗶𝗼𝗻 & 𝗣𝗼𝗹𝗶𝗰𝘆 - South Korea's crypto bill is reportedly nearing completion, seeking to establish licensing regimes for exchanges and rules for stablecoin issuance while a tax debate intensifies. (via @TheBlockCo) Follow BlockchainUnmasked for your daily news digest every morning

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | October 21, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 Wallets linked to April's $295 million Drift hack sent another $46 million in Ether to mixer Tornado Cash on Wednesday, bringing two-day movement to $109 million while the wallets still held $138 million in Ether. The attacker is described as North Korea-linked. (via @Cointelegraph and @decryptmedia) 𝗛𝗮𝗰𝗸𝘀 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝘀 - Qubic's validators approved a recovery plan and opened claims until May 1, 2027, following a $1.4M hack. (via @Cointelegraph) - Researchers reported a loss of approximately $41k affecting Slice, attributing it to a FundsModule flaw that allowed unbacked amounts to drive withdrawals from pooled reserves. (via @SlowMist_Team) 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁, 𝗔𝗿𝗿𝗲𝘀𝘁𝘀 & 𝗦𝗲𝗶𝘇𝘂𝗿𝗲𝘀 - Ygor Fokin Saviolli, a Brazilian national, was sentenced to 12 years in prison for managing a money laundering organization that laundered more than $30 million in illicit proceeds, including drug trafficking proceeds, authorities said. (via @FBI) - A Nigerian national who worked with a group to hack tax preparation businesses and conduct millions of dollars in fraud using customer data was sentenced to eight years. (via @TheRecord_Media) - A settlement announced by California Attorney General Rob Bonta requires 23andMe's successor to pay $6 million to resolve allegations that the company failed to properly protect customer data before a 2023 breach. (via @TheRecord_Media) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - The FBI, CISA, and cyber agencies in the UK and Germany said the SafePay ransomware gang has reportedly breached more than 600 critical infrastructure organizations worldwide since 2024, targeting victims through password guessing, vulnerability exploitation, and phishing. (via @BleepinComputer) - The PHP security team warned administrators to prepare for emergency patches addressing two critical remote code execution flaws rated CVSS v4.0 9.2, after information reportedly leaked ahead of scheduled disclosure. (via @BleepinComputer) - Development platform Zeabur disclosed a breach in which an attacker used leaked plaintext internal credentials to steal over 3.2 million environment variable records and data for 321,810 accounts. (via BleepingComputer) 𝗥𝗲𝗴𝘂𝗹𝗮𝘁𝗶𝗼𝗻 & 𝗣𝗼𝗹𝗶𝗰𝘆 - The OCC finalized its rule covering payment stablecoin issuance and some custody activities, setting reserve, redemption, and risk standards; the GENIUS Act framework takes effect in mid-January. (via Cointelegraph) - Utah's attorney general sued prediction market company Kalshi, also naming Susquehanna firms, seeking to recover alleged gambling profits and block bets across sports, politics, and culture. (via @TheBlockCo) - FINMA approved what is described as the first retail fund holding Bitcoin directly, waiving diversification rules while emphasizing custody and investor-protection safeguards. (via @decryptmedia) Follow BlockchainUnmasked for your daily news digest every morning

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | October 20, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 OVHcloud is warning users that attackers compromised its open-source command-line interface tool to distribute information-stealing malware targeting developer secrets through backdoored CLI releases. (via @BleepinComputer) 𝗛𝗮𝗰𝗸𝘀 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝘀 - The Drift exploiter reportedly moved $61M in ETH to Tornado Cash and still holds $194M; the April hack caused roughly $295M in losses and was later attributed to a North Korean threat group in a Mandiant investigation. (via @Cointelegraph) - A labeled address tied to the Aztec exploiter deposited 1255.8 ETH, worth approximately $3M, into Tornado Cash. (via @PeckShieldAlert) - Researchers assessed that Qubic Wallet uses the same non-cryptographically secure Math.random() stream for account seed generation and for dejaVu values exposed in network packet headers, potentially enabling private key recovery through network observations. (via @SlowMist_Team) 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁, 𝗔𝗿𝗿𝗲𝘀𝘁𝘀 & 𝗦𝗲𝗶𝘇𝘂𝗿𝗲𝘀 - US federal investigators pursuing the ShinyHunters hacking group have identified executives at two ransomware negotiation firms suspected of maintaining unusually close ties with the extortion group; sources say one US-based executive allegedly helped operate a site that pressured victims into paying. (via @briankrebs) - A federal judge denied WhatsApp's bid to hold NSO Group in contempt, ruling that WhatsApp had not disclosed enough information to support its claim that NSO violated a 2025 injunction barring use of the messaging app to spread spyware. (via @TheRecord_Media) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - Researchers said APT28, also known as Fancy Bear, used a recently documented backdoor to dwell in the networks of two defense contractors and a law enforcement agency in two NATO allies. (via @TheRecord_Media) - Some downloads of the Rank Math PRO WordPress plugin from the vendor's official website carried malware that planted hidden backdoors in a supply-chain attack last week. (via @BleepinComputer) - ConnectWise confirmed unauthorized access to its Cloud Backup environment and suspended the service. (via BleepingComputer) 𝗥𝗲𝗴𝘂𝗹𝗮𝘁𝗶𝗼𝗻 & 𝗣𝗼𝗹𝗶𝗰𝘆 - France's parliament approved a vote to apply a 31% capital gains levy to crypto-to-stablecoin trades; Amendment I-3898 removes tax deferral for MiCA-compliant stablecoins starting January 2027. (via @CoinDesk) - Seven more issuers have opted out of the planned OKX-ICE tokenized stock venue under the SEC's framework, bringing the disclosed objection count to 16, with Microsoft, Alphabet, and Goldman Sachs among those objecting. (via @CoinDesk) - The Blockchain Association filed comments on Treasury's proposed rule implementing the GENIUS Act, calling for clearer DeFi and foreign-issuer rules governing who can issue and sell payment stablecoins. (via @TheBlockCo) Follow BlockchainUnmasked for your daily news digest every morning

𝗧𝗵𝗲 𝗗𝗮𝗶𝗹𝘆 𝗧𝗿𝗮𝗰𝗲 | October 19, 2026 Your Daily Crypto News Digest 𝗧𝗼𝗽 𝗦𝘁𝗼𝗿𝘆 An Argent-style smart wallet system reportedly lost approximately $59.8k after two exploitable flaws were abused. A recovery-module setter allowed a crafted recovery period to wrap the deadline to a past timestamp, finalizing a recovery that changed the wallet owner, while the execution module failed to reject reuse of an identical signed payload across single transactions. (via @SlowMist_Team) 𝗛𝗮𝗰𝗸𝘀 & 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝘀 - Qubic froze its chain after an attacker drained 1.4K wallets with weak seeds. According to Qubic, 87.1% of stolen funds remain onchain and the rest were frozen at MEXC, as validators prepare to vote on a recovery plan. (via @Cointelegraph) - Cysic suspended its bridge after an attacker minted 10 million CYS and bridged about $727,000 in proceeds to Ethereum through Mayan, deBridge and SWFT's Bridgers. (via @TheBlockCo) 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁, 𝗔𝗿𝗿𝗲𝘀𝘁𝘀 & 𝗦𝗲𝗶𝘇𝘂𝗿𝗲𝘀 - HEX founder Richard Heart was reportedly detained in an early morning raid in Istanbul. (via @Cointelegraph) - Three men were jailed over a home invasion in a failed crypto theft attempt. The victim was hit over the head before his teenage sister alerted police, who arrested all three at the scene in May. (via @decryptmedia) - Dutch police seized the Autistici/Inventati server under a 1981 treaty after the U.S. designated the Italian activist group "global terrorists." (via @decryptmedia) 𝗖𝘆𝗯𝗲𝗿 𝗧𝗵𝗿𝗲𝗮𝘁 & 𝗠𝗮𝗹𝘄𝗮𝗿𝗲 - On 30 September 2026, law enforcement took control of KillSec's leak site, securing at least 110 terabytes of data. A teenager is suspected of leading the group, which threatened organisations with publication of stolen files unless they paid a ransom. (via @Europol) - Researchers traced live DarkSword attack infrastructure and linked admin panels to public GitHub repositories, assessing a pipeline covering exploit delivery, data exfiltration, and crypto wallet fund consolidation targeting Keychain data, files, messages, and wallet data. (via @SlowMist_Team) - Hackers stole passwords, access credentials and other sensitive data from customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its servers. (via @TheRecord_Media) 𝗥𝗲𝗴𝘂𝗹𝗮𝘁𝗶𝗼𝗻 & 𝗣𝗼𝗹𝗶𝗰𝘆 - France's National Assembly adopted a crypto tax amendment targeting certain stablecoin swaps, while separate proposals on exit taxes and self-custodial wallet reporting remain under consideration. (via Cointelegraph) - The SEC's tokenized stock framework faces issuer pushback, with Broadcom, Verizon and eight more companies objecting to trading on the planned OKX-ICE venue. Nasdaq has separately said it would opt out under the framework. (via @CoinDesk) - Latvia's parliament passed a law taxing crypto withdrawals above deposits rather than individual trades, featuring a one-time declaration mechanism, and eyes crypto tax payments in 2027. (via @CoinDesk) Follow BlockchainUnmasked for your daily news digest every morning