Crypto
GoPlus Report: Web3 Security Incidents in October Trigger $45.8M in Losses
October proved to be another difficult month for Web3 security, with new data from GoPlus Security showing that the crypto ecosystem suffered more than $45.84 million in losses from hacks, scams, and other malicious activity.
According to the on-chain security firm’s latest monthly report, the incidents spanned a wide range of attack types—including protocol exploits, social engineering schemes, phishing attacks, honeypot tokens, rug pulls, and Ponzi operations. In total, 16 major incidents were recorded, each resulting in losses ranging from a few thousand dollars to tens of millions.
Major Incidents: SBI Crypto Hack Leads October Losses
The SBI Crypto hack, which unfolded at the start of the month, was the most significant single event, causing roughly $21 million in losses across multiple assets such as Bitcoin, Ethereum, Litecoin, Dogecoin, and Bitcoin Cash.
An investigation by blockchain analyst ZachXBT and security firm Cyvers suggested possible links to North Korean–affiliated hacking groups. The laundering pattern—funneling funds through Tornado Cash—mirrored tactics historically associated with groups like Lazarus. However, SBI Crypto has not confirmed any attribution.
Garden Finance and Astra Nova Also Hit
Additional major exploits highlighted in the report include:
- Garden Finance: Approximately $10.8 million lost.
- Astra Nova: A hack of its official social account triggered a large forced sell-off of its RVV token, leading to losses of about $10.3 million.
These incidents underscored continued vulnerabilities across Web3 platforms, particularly those with access control or operational security gaps.
Phishing Attacks Surge, Affecting 11,000 Victims
GoPlus also reported a rise in phishing campaigns throughout October, with estimated losses reaching $3.5 million and impacting more than 11,000 users.
One of the largest incidents involved the trading platform GMGN, where attackers created a convincing third-party phishing site that tricked users into signing malicious transactions. More than 100 users were affected, with total losses exceeding $700,000.
Other notable cases include:
- A trader who lost $325,000 in Coinbase Wrapped BTC after approving a fraudulent “increaseAllowance” request.
- Another user who lost $440,000 in multiple assets after unknowingly authorizing a malicious “permit” signature.
GoPlus noted that attackers are increasingly using Phishing-as-a-Service (PhaaS) tools and AI-powered site generators, lowering the barrier to launching large-scale phishing operations.
Honeypot Tokens Spike 600%
The report also highlighted an alarming jump in honeypot tokens, which surged 600% month-over-month to 2,189 tokens across several blockchains—including Ethereum, Base, and BNB Smart Chain.
Honeypot tokens are designed to lure buyers in, while embedded smart contract restrictions prevent them from selling or withdrawing funds.
Breakdown by chain:
- BNB Smart Chain: 1,780 honeypot tokens
- Ethereum: 216 tokens
- Base: 131 tokens
Although the increase is significant, it is still well below the extreme spike recorded in June 2025, when the market saw more than 40,000 honeypot tokens deployed in a single month.
Crypto
Circle Launches USDC Bridge for Seamless Cross-Chain Transfers
Stablecoin issuer Circle has introduced USDC Bridge, a new interface designed to make moving USDC across blockchains faster and easier.
Built on top of its existing Cross-Chain Transfer Protocol (CCTP), the tool aims to simplify one of crypto’s more complex user experiences, cross-chain transfers.
Simplifying Cross-Chain Transfers
The USDC Bridge allows users to transfer USDC between blockchains using a native burn-and-mint mechanism, removing the need for wrapped or synthetic versions of the token.
Circle says the process is designed to be more transparent and predictable, with key improvements such as automatic gas fee handling, upfront cost visibility, and real-time status updates.
The goal is to eliminate much of the friction that has historically made bridging assets difficult, especially for less experienced users.
Built on Existing Infrastructure
The new interface expands on Circle’s CCTP, launched in April 2023, which already processes hundreds of millions of dollars in USDC transfers daily.
By removing reliance on wrapped tokens, CCTP helped standardize how stablecoins move across networks, and the USDC Bridge now aims to make that functionality more accessible.
Broad Blockchain Support
USDC Bridge currently supports transfers across at least 17 Ethereum Virtual Machine-compatible networks.
These include major blockchains such as Ethereum, Avalanche, Arbitrum, Base, Optimism, and Polygon, along with newer networks like Monad and Sonic.
Meanwhile, the underlying CCTP infrastructure also supports non-EVM chains such as Solana, Sui, and Aptos.
Improving Crypto Interoperability
Cross-chain bridges play a key role in connecting fragmented blockchain ecosystems, allowing users to move assets freely between networks.
However, complex interfaces and unclear fee structures have often made them difficult to use, slowing broader adoption.
Circle’s new tool is part of a wider industry effort to make interoperability more intuitive and user-friendly.
Challenges Still Loom
Despite the launch, Circle is currently facing legal scrutiny.
The company was recently hit with a class action lawsuit related to its handling of USDC transfers linked to the Drift Protocol exploit, where it allegedly failed to freeze stolen funds.
The case highlights ongoing debates around the responsibilities of crypto infrastructure providers during security incidents.
Driving Stablecoin Utility Forward
With USDC Bridge, Circle is doubling down on making stablecoins more practical for everyday use across multiple blockchains.
As demand for cross-chain functionality grows, tools that simplify asset movement could play a crucial role in expanding the utility of stablecoins within the broader crypto ecosystem.
Crypto
Worldcoin Drops 13% as Iris-Scanning Tech Expands to Zoom and DocuSign
Worldcoin’s token saw a sharp decline on Friday, falling 13.4% to around $0.28, even as its parent company, World, unveiled a wave of new integrations for its identity verification technology.
The updates focus on expanding its “proof of human” system, which uses iris-scanning to confirm whether a user is a real person rather than an AI-generated identity.
Major Integrations Target Deepfake Risks
World announced partnerships with several major platforms aimed at tackling the growing threat of deepfakes.
Zoom is integrating World’s Deep Face authentication to help verify participants during video calls, while DocuSign is incorporating its identity verification technology into digital agreements. Tinder is also expanding its use of World ID verification to users in the United States.
The company said these integrations are designed to ensure that real humans are behind digital interactions, especially as AI agents become more common.
AI Growth Driving Demand for Verification
As AI-generated content becomes more advanced, distinguishing between humans and machines is becoming increasingly difficult.
World argues that tools like its proof-of-human system will be essential in preventing impersonation scams and fraud, which are becoming more sophisticated with the use of deepfake technology.
The platform’s core technology relies on its Orb device, which scans a user’s iris to create a unique digital identity without revealing personal data.
Privacy Concerns Remain
Despite the potential benefits, the expansion has sparked ongoing concerns around privacy.
Critics warn that collecting biometric data at scale could introduce risks, particularly if controlled by a single entity. There are also fears that such systems could be misused for surveillance if not properly regulated.
Token Drops Despite Positive Market Sentiment
Worldcoin’s price decline came even as the broader crypto market moved higher, buoyed by easing geopolitical tensions.
While many digital assets saw gains, WLD moved in the opposite direction, suggesting investor caution around the project’s long-term implications.
Expanding Ecosystem and Partnerships
World has been actively building out its ecosystem.
Recent integrations include partnerships with Amazon Web Services, Shopify, Browserbase, Exa, VanEck, and Coinbase. Coinbase is also using World’s AgentKit to help verify AI agents within its micropayments infrastructure.
The company has also introduced new features such as account recovery and multi-device support, aiming to make its identity system more practical and accessible.
Balancing Innovation and Trust
Worldcoin’s latest developments highlight a growing tension in the digital economy.
As AI continues to evolve, the need for reliable identity verification is increasing. However, striking the right balance between security, usability, and privacy will be key to long-term adoption.
Crypto
Russia Moves to Criminalize Unregistered Crypto Services
Russia is taking a stricter stance on crypto regulation, with lawmakers introducing a new bill that would impose criminal penalties on individuals and businesses offering unregistered crypto services.
The proposed legislation aims to tighten oversight of the digital asset sector by requiring all operators to obtain approval from the country’s central bank.
Licensing Requirement for Crypto Activity
Under the draft law submitted to the State Duma, anyone involved in organizing or facilitating digital currency circulation must register with the Bank of Russia.
Failure to do so could result in legal consequences, including fines and potential prison sentences.
The move reflects a broader effort by authorities to bring crypto-related activities under formal regulatory control.
Penalties Include Fines and Prison Time
The bill outlines penalties for unregistered activity, with individuals facing fines of up to $4,000 and prison sentences of up to four years.
More severe punishments apply to organized groups or cases involving large-scale financial damage or profits. In such cases, offenders could face up to five years of compulsory labor or as much as seven years in prison.
Additionally, courts could impose fines of up to 1 million rubles, or an amount equivalent to several years of income.
Part of Broader Regulatory Push
This proposal builds on earlier legislative efforts introduced in March, which included criminal penalties targeting illegal crypto mining operations.
Together, these measures signal Russia’s intent to establish tighter control over the crypto industry as it evolves.
Legal Concerns Raised by Supreme Court
Despite the government’s push, the bill has already drawn criticism.
Russia’s Supreme Court reportedly questioned the need for criminal penalties, stating that the proposal lacks sufficient justification.
The court also suggested the move may be premature, as the country’s broader “Digital Currency and Digital Rights” law is not expected to take effect until July.
Increasing Oversight of Crypto Sector
If passed, the legislation would significantly expand the government’s ability to monitor and regulate crypto-related activities.
Authorities appear focused on reducing risks tied to unregulated platforms while ensuring that digital asset services operate within a defined legal framework.
Industry Risks Highlighted by Recent Hack
The regulatory push comes as security concerns continue to affect the crypto sector in Russia.
Local exchange Grinex recently halted trading after suffering a hack that resulted in losses of more than $13 million.
The incident has been reported to law enforcement and is under investigation, further underscoring the risks associated with unregulated or vulnerable platforms.
-
Crypto4 years agoCardalonia Aiming To Become The Biggest Metaverse Project On Cardano
-
Press Release5 years agoP2P2C BREAKTHROUGH CREATES A CONNECTION BETWEEN ETM TOKEN AND THE SUPER PROFITABLE MARKET
-
Blockchain6 years agoWOM Protocol partners with CoinPayments, the world’s largest cryptocurrency payments processor
-
Press Release5 years agoETHERSMART DEVELOPER’S VISION MADE FINTECH COMPANY BECOME DUBAI’S TOP DIGITAL BANK
-
Press Release5 years agoProject Quantum – Decentralised AAA Gaming
-
Blockchain6 years agoWOM Protocol Recommended by Premier Crypto Analyst as only full featured project for August
-
Press Release5 years agoETHERSMART DEVELOPER’S VISION MADE FINTECH COMPANY BECOME DUBAI’S TOP DIGITAL BANK
-
Blockchain6 years ago1.5 Times More Bitcoin is purchased by Grayscale Than Daily Mined Coins
