Tree News

Market-moving crypto news, instantly: exchange listings, SEC filings, court cases, macro and TradFi.

Tree Chart Bot for Discord and Telegram

Latest

• Institutional-grade assets are moving on-chain, opening up new possibilities for everyday investors. During Hong Kong Fintech Week, we are hosting a panel at our office on the convergence of TradFi and Web3, from Wall Street to on-chain vaults. Our very own @bchan8938 will join industry leaders, including Chetan Karkhanis (@FTDA_US) and Chen Shanlong (@XDCNetwork), moderated by Jingyi Sun (@talostrading). Together, they will explore how tokenized RWAs are expanding access for traders and retail investors, followed by networking with peers from across TradFi and DeFi. Animoca Brands
• Do ETF Flows Predict Where Bitcoin Goes Next? DWF
• Identification of 9 illegal cryptocurrency farms with 133 mining machines in Varamin TASNIM
• NEW: South Korea's National Tax Service plans to finalize its digital asset tax notice draft by Oct. 30, followed by a preliminary review and public notice in November, ahead of a targeted Jan. 1, 2027 start, according to local media reports. Yesterday, Ruling Party leader Kim Min-seok said he is reviewing various inputs on the crypto tax plan, as pressure to delay taxation builds. The Block
• BIT Asset Management Receives FINMA Approval for Switzerland's First and Europe's Only Spot Bitcoin ETF PRN
• 'New Broomhill Lido revamp plans sent me to bed very happy' BBC
• the bets one takes living in SF do i win soon? a solid rogue mythosy model i win i think of course everyone loses but still these bets shape the cultural expectations. php in shambles today. will donate all proceeds to remedies which advance the plot. so $1100 :| of course the market forces will drive much more. thanks again markets. i don’t work on the models that can do this wild stuff. i just see this as risky. not risky like you can’t hang out with your friends at a lake or buy coffee in a coffee shop. but risky like the internet breaks which maybe doesn’t matter as much as nerds think. like it doesn’t matter to my nieces if the internet is down. bet made June 2023. Richard Craib
• CZ Warns Users to Be Extra Cautious Online in Coming Days Amid PHP Exploits Binance founder Changpeng Zhao (CZ) warned users to exercise caution when visiting websites over the coming days, citing two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting servers running popular applications such as WordPress and Magento. The flaws, patched on October 21 after details leaked ahead of disclosure, could allow unauthenticated attackers to execute malicious code on vulnerable servers, potentially exposing visitors to credential theft. Exploitation attempts have already been detected, while some website operators may not yet have applied security updates. Wu Blockchain
• Following today's PHP, Node.js, and Railway security alerts, Frax reviewed our infrastructure and confirmed no exposure. Frax products and user funds remain safe, as they have throughout our 5+ years of operation. Security is our product. Frax Finance ¤⛓️¤
• #TeamOM, save this for your season plans. 🔵⚪ Take a look at the @OM_Officiel experiences coming this season, including your chance to play at the OM Training Centre. Start with the one you’d most want to be there for. 👇 SOCIOS.COM®
• 📢 DeepScan Community Nominations · Round 3 | Web3 Security Hot Topics Quantum computing takes another leap. OpenAI’s math results are all over the timeline. The community is asking: Can Bitcoin hold up? Could smart contracts get rekt? CryptoBilis, a Ledger reseller, shipped tampered wallets. About $100M was stolen. Which is safer: a hardware wallet, or an offline iPhone? Binance’s .ai domain is lighting up agentic wallets. How do you use an agent wallet without getting drained? Which topic do you care about most? GoPlus will publish a security research report based on the votes. 🎁 Giveaway: 10 eligible participants win 10 USDT each. 🗳️ How to enter: 1️⃣ Follow @GoPlusSecurity and repost. 2️⃣ Voting closes October 26 at 23:00 UTC. Winners and the security report will be announced afterward. GoPlus Security 🚦
• Move over memecoins: Crypto 'meme games' coming, bagholders and all COINTELEGRAPH
• 🎁 DeepScan Community Nominations · Round 3 | Web3 Security Hot Topics Quantum computing takes another leap. OpenAI’s math results are all over the timeline. The community is asking: Can Bitcoin hold up? Could smart contracts get rekt? CryptoBilis, a Ledger reseller, shipped tampered wallets. About $100M was stolen. Which is safer: a hardware wallet, or an offline iPhone? Binance’s .ai domain is lighting up agentic wallets. How do you use an agent wallet without getting drained? Which topic do you care about most? GoPlus will publish a security research report based on the votes. 🎟️ Giveaway: 10 eligible participants win 10 USDT each. 🗳️ How to enter: 1️⃣ Follow @GoPlusSecurity and repost. 2️⃣ Voting closes October 26 at 23:00 UTC. Winners and the security report will be announced afterward. 👇 Vote for the topic you care about most 👇 GoPlus Security 🚦
• Solana completes Alpenglow upgrade. Here's what it means for users COINDESK
• Kaia does not use PHP anywhere in its core stack. CVE-2026-109618 and CVE-2026-109619 do not affect the chain, consensus, or user funds. Your assets on @KaiaChain are safe and unaffected. Kaia
• New York Times Bestselling Author, Andrew Klavan, has just written a great new book, "Find Me Nowhere." It's fantastic. Get it now! President DJT Donald J. Trump
• Bitcoin Falls Below $83,000 as AI Jitters Weigh on Sentiment BLOOMBERG
• Building and collaboration IRL. At this week’s HotDesk Wednesday, we brought our Dubai community together for a chance to connect, work, and learn. @Legoman_Grizu from @hypewrks hosted a workshop on how GenAI is reshaping video production and how teams can collaborate at scale. To join next week’s HotDesk event, register here: DWF Labs
• XRP Ledger bug fix moved to November after validator support dipped for two hours COINDESK
• Something super juicy coming to RH next week👀 Alex | Sushi
• This Week in AI, brought to you by Holoworld A Chinese-speaking hacker used AI agents to break into 100+ company websites for roughly $50 per successful breach. At @AnthropicAI, AI-generated code pushed daily merges from 2,500 to over 30,000, forcing the company to build its own source control system. And @tenstorrent raised $1.5B at a $6.2B valuation to scale its AI compute business. Holoworld AI
• How Staking Works Inside the Canary Staked INJ ETF INJ
• ON #6: Verifiable NAV, Reserves and Eligibility for Tokenized Collateral Tokenized Treasury bills, stocks and private credit funds are now used as collateral in on-chain lending protocols, and a tokenized private credit fund is already used in DeFi leverage strategies. Smart contracts cannot see the off-chain world, so oracles and attestation services bring that data in. When a lending protocol accepts a tokenized fund as collateral, three of those data inputs matter most. 1. Net Asset Value The fund's NAV reaches the token contract through an oracle, along with prices and corporate actions. This is how a lending protocol prices the collateral and sets its liquidation levels. The protocol receives the NAV figure, but the calculation behind it comes from fund holdings that stay private, so the protocol has no way to check that calculation on its own. 2. Reserves and ownership Reserves and ownership data are checked by independent attesters at regular intervals. Each attestation gives lenders a solid checkpoint. Between two checkpoints, a protocol holding the token as collateral works from the latest report while the fund's positions keep changing. 3. Holder eligibility Tokenized funds follow securities and AML/KYC rules, so the token contract lets only cleared investors hold or transfer the token, usually through a whitelist. The wallet is approved on-chain, but the evidence behind that approval stays with the issuer and its KYC provider, and publishing it would expose investor identity data. Where Zero-Knowledge Proofs fit All three data inputs share one pattern. The underlying data is too sensitive to put on-chain, so the chain receives a result without evidence of how that result was produced. Zero-Knowledge Proofs can add that evidence next to the oracles, attesters and KYC providers already in place. A proof can show that a NAV was computed as stated from the stored holdings data, that the reserve data was updated as claimed, and that a holder meets an eligibility rule, while the underlying data stays private. The proof covers how the data was stored and processed; whether the holdings, reserves and KYC data match the real world still rests on the custodian, the attester and the KYC provider. A smart contract can then verify each proof before it accepts the collateral. zkDatabase is designed for this: a verifiable database that can keep sensitive data off-chain and put a Zero-Knowledge Proof on-chain. It is designed to generate a proof for every update, so lenders and risk curators can check fund data without waiting for the next report. The value of a tokenized fund in DeFi depends on the custody, oracle and liquidity setup underneath the token. Verifiable Data is how the data part of that setup becomes something lenders and counterparties can check. Lending protocols and fund issuers working with tokenized collateral can explore zkDatabase to make that data verifiable. Orochi Network
• U.S. Bitcoin ETFs Draw $528 Million, Ether ETFs Add $15 Million According to SoSoValue, U.S. spot Bitcoin ETFs recorded $528 million in net inflows on October 21, led by BlackRock's IBIT with $235 million. Spot Ethereum ETFs attracted $14.96 million, with Grayscale's Ethereum Mini Trust (ETH) posting the largest inflow at $28.07 million. BlackRock is the world's largest asset manager, while Grayscale is a leading crypto-focused asset manager. Wu Blockchain
• Whales are accumulating $ETH! 0x4A85 withdrew 10,954 $ETH ($26.97M) from #Kraken and staked it after 4 months of inactivity. 0xdeA6 withdrew 9,000 $ETH ($22.42M) from #Binance and deposited it into Aave. 0xD338 withdrew 4,500 $ETH ($11.29M) from #Binance 10 hours ago. Lookonchain
• THE BLOCK: Japanese yen stablecoin issuer JPYC has partnered with SBJ Bank and LINE NEXT to explore a stablecoin top-up service linked to bank accounts. The three companies will conduct a proof of concept to test the integration of bank accounts, digital wallets, and stablecoin issuance and redemption. The Block
• Jeff Yan: Our Vision Is to Power Global Finance with Consumer-Grade Hardware On October 15, 2026, Hyperliquid founder Jeff Yan @chameleon_jeff said on Bloomberg’s Odd Lots podcast @podcasts that his vision is to power the global financial system with consumer-grade hardware rather than massive data centers. He emphasized that running the network should remain affordable, regardless of how many applications are built on it. Nodes currently require 128GB of RAM, which he considers a reasonable balance between hardware requirements and the network’s needs. Wu Blockchain
• With the recent PHP vulnerabilities causing some concern, we want to clarify that Cetus does not use PHP anywhere in our tech stack. Cetus is not affected by this issue, and user funds remain safe. Cetus🐳
• 🚨 GoPlus Security Alert: Node.js October 2026 Security Updates On Oct 21, Node.js patched 10 vulnerabilities: 4 high-, 3 medium-, and 3 low-severity. CVE-2026-111497 is an out-of-bounds write in the Brotli decoder. It can lead to remote code execution when an app processes untrusted compressed data. The other high-severity issues are `dns.resolve` truncating domain names that contain NUL characters, and two TLS certificate hostname-verification bypasses. The medium- and low-severity issues cover Keep-alive response handling, repeated random values, ZIP file handling, and the permission model. Patched releases: Node.js 22.23.4, 24.22.1, 26.12.1. Affected release lines vary by vulnerability. Running Node.js does not by itself mean there is an exploitable entry point. ⚠️ Checks and mitigation steps 1. Know what is actually running. Inventory the Node.js executable and image source actually in use across services, nodes, and containers, and check every replica. The version reported by a local `node -v` command may differ from the version used by the application process. 2. Prioritize upgrades based on exposure. Prioritize services that decode Brotli-compressed data from external sources, or that use untrusted input to construct DNS queries or specify HTTPS/TLS connection targets. Move to the patched release for that branch, or a verified vendor backport. Then restart and verify the running version on every node. 3. If you cannot upgrade now, restrict exposed inputs. Restrict the processing of untrusted compressed data, and limit which connection targets can be specified through untrusted input. Review logs for decoding errors, abnormal process behavior, and certificate alerts. These measures do not replace a runtime update. GoPlus Security 🚦
• Bitway does not use PHP anywhere in our tech stack, and our platform is not affected. Your funds are safe. Bitway

Loading the feed…