Venice Token

Ponzi

Starknet

Aerodrome Finance

<h2 id="ai-agents-message-board-set-up-to-rescue-glamsterdam-fork">AI agents message board set up to rescue Glamsterdam fork</h2>
<p>The second and final testnet for Ethereum’s Glamsterdam hard fork was cancelled this week, after ChainSecurity found vulnerabilities in two gas scaling Ethereum Improvement Proposals <a href="https://ct.com/news/ethereum-delays-glamsterdam-testnet-fork-gas-security-risks" rel="noopener noreferrer nofollow">that could have spelled big trouble for at least 13 DeFi contracts</a>.</p>
<p>The bugs were connected to EIP-8037/8038 and resulted in contracts, that rely on the way gas currently behaves, breaking when a call runs out of gas. It’s all fairly technical and complicated, but the upshot is that an attacker may have been able to exploit the resulting vulnerabilities.</p>
<p>The hard fork testnet dress rehearsal on Hoodi is not expected to be rescheduled until all the second order effects of the fork have been gamed out properly. In an article on X today, Derek Chiang from <a href="https://x.com/decentrek/status/2114405149729079607" rel="noopener noreferrer nofollow">Ethlabs</a> noted the issues were found very late in the process, which is less than ideal, “causing everyone to scramble to deal with the fallout.”</p>
<blockquote>
 “In the future, protocol designers would do well to conduct much more thorough analysis of potential breakages that their update might introduce, and to do so much earlier in the process.”
</blockquote>
<p>Chiang says two researchers from Ethlabs and the Ethereum Foundation had independently spun up a bunch of AI Agents to scan contracts for vulnerabilities. When they realized they were both employing the same strategy they “set up a message board for their agents in the form of a github repo” to coordinate the work.</p>
<p>He noted the similarities to the OpenAI &lt;&gt; Hugging Face hack where rogue agents had set up a message board to coordinate the attacks. “Well, turns out the same pattern is useful for the good agents too,” he said. The exercise has been so successful at finding potential problems that a second board has been set up to examine the effects of EIP-8198, aka “Quick Slots”, which has been proposed for the subsequent Hegota hard fork.</p><img src="https://s3-images.ctmedia.io/media/content/2026/10/01M5TGA02BDYG0D5TA1VYHT74V/illia-polosukhin-quote-artwork.png" alt="" width="700" height="525">
<p style="text-align: center;"><br></p>
<h2 id="steal-my-bitcoin-site-is-successfully-hacked">Steal My Bitcoin site is successfully hacked</h2>
<p><em><strong>Updated October 26 12.10am UTC with the result of the challenge.</strong></em></p>
<p>A website that challenged users to “Steal My Bitcoin” by exploiting unpatched PHP2Shell&nbsp;vulnerabilities, was successfully hacked within the space of a day. The site owner hid the key to a Bitcoin wallet worth around $2000 which was accessible to the PHP user account through a binary called print-flag.</p><img src="https://s3-images.ctmedia.io/media/content/2026/10/01M5TGCNTCPJ9ZQ2X7EGK0WPPV/steal-my-bitcoin.jpg" alt="" width="723" height="413">
<p style="text-align: center;"><em>Source: StealMyBitcoin</em></p>
<p>The site generated a huge amount of interest and went offline periodically offline due to heavy traffic and probing attempts. <br><br>It was <a href="https://github.com/KillaBoi/StealMyBitcoin-PoC#the-live-run-that-solved-it" rel="noopener noreferrer nofollow">solved by KillerBoi </a>who successfully extracted the private key — however in a plot twist, the key could not access the wallet address shown on the site. Challenge organizer <a href="https://x.com/JamesPavur/status/2114501212313653696?s=20" rel="noopener noreferrer nofollow">James Pavur </a>acknowledged this was a mistake and said the funds would be transferred.</p>
<p>WordFence founder Mark Maunder <a href="https://x.com/mmaunder/status/2114505952020111836?s=20" rel="noopener noreferrer nofollow">said</a> the despite the key being extracted within a day: “This is the absolute best explanation you’ll see on how hard <a href="https://x.com/hashtag/php2shell?src=hashtag_click" rel="noopener noreferrer nofollow">#php2shell</a> is to exploit. The author had to trigger a precise memory corruption condition, leak internal memory addresses, bypass aslr, reverse engineer php’s internal memory structures, forge structures to hijack execution, and account for php build differences, worker behavior and timing.”</p>
<p>PHP is a programming language widely used to power websites and web applications, including content management systems.&nbsp;<a href="https://cointelegraph.com/news/php-foundation-admits-structural-failure-delayed-critical-security-fix" rel="noopener noreferrer nofollow">Government agencies and other organizations in the Netherlands, Australia, Japan, Finland and elsewhere took critical websites offline Wednesday</a> as a precaution while emergency patches were developed for two related critical vulnerabilities. The flaws could allow unauthenticated attackers to execute code on affected servers without logging in.</p><img src="https://s3-images.ctmedia.io/media/content/2026/10/01M5TRPGTD411V24EMHACH48F5/screenshot-2026-10-26-111014.jpg" alt="" width="610" height="302">
<h2 style="text-align: left;" id="solana-s-alpenglow-launches-on-mainnet">Solana’s Alpenglow launches on mainnet</h2>
<p style="text-align: left;">Solana’s f<a href="https://ct.com/news/solanas-alpenglow-launches-mainnet-99-faster-finality" rel="noopener noreferrer nofollow">irst major consensus upgrade, Alpenglow, went live on mainnet </a>around 1:54 pm UTC on Wednesday, according to the Solana Foundation’s Alpenglow <a href="https://solana.com/upgrades/alpenglow/dashboard" rel="noopener noreferrer nofollow">dashboard</a>.</p>
<p style="text-align: left;">Agave developer Anza said the time it takes a transaction to become final has now fallen from about 12.8 seconds to roughly 150 milliseconds. In the wake of the upgrade DeFi activity has been flat or fallen slightly — but it’s early days yet.</p>
<p style="text-align: left;">The upgrade’s first phase, Votor, replaces the existing voting and finalization mechanism with direct validator voting and a certificate-based system, which is expected to result in the headline transaction count falling by around 60%. A later phase will introduce Rotor, a new block data-distribution protocol intended to replace Turbine.</p><img src="https://s3-images.ctmedia.io/media/content/2026/10/01M5TGWQ2VBCHZGDN8PJBZY97V/anatoly-yakovenko-solana.png" alt="" width="1450" height="966">
<h2 style="text-align: left;" id="starknet-votes-to-start-work-on-becoming-a-post-quantum-l1">Starknet votes to start work on becoming a post-quantum L1</h2>
<p style="text-align: left;">Starknet’s community has voted <a href="https://ct.com/news/starknet-vote-post-quantum-l1-research-ethereum" rel="noopener noreferrer nofollow">to support research into becoming an independent, post-quantum layer-1 blockchain</a>.</p>
<p style="text-align: left;">A governance vote that ran for seven days drew about 3,200 votes, with 93.52% of voting power in favor of the transition.</p>
<p style="text-align: left;">The actual shift itself would require a separate, binding governance vote. For now, Starknet will continue operating as an Ethereum layer-2 network.&nbsp;</p>
<p style="text-align: left;">“We’re beginning work on a whitepaper even before we start the weekend, and hope to release a draft for public scrutiny in November,” StarkWare CEO Eli Ben-Sasson told Cointelegraph.&nbsp;Starknet saw the biggest fall of the top 100 coins this week, erasing one quarter of its value.</p><img src="https://s3-images.ctmedia.io/media/content/2026/10/01M5TH6RZGTZD4RPK1Z9TAC91J/eli-ben-sasson-starkware-exploding-ethereum-launch.png" alt="" width="2528" height="1684">
<p style="text-align: center;"><em>Source: Cointelegraph</em></p>
<h2 style="text-align: left;" id="us-senator-probes-tether-after-reported-deal-with-ex-trump-crypto-adviser">US senator probes Tether after reported deal with ex-Trump crypto adviser</h2>
<p style="text-align: left;">Senator Richard Blumenthal — the top Democrat on the Senate’s investigations subcommittee — has requested information from Tether CEO Paolo Ardoino after the Wall Street Journal reported the stablecoin firm had <a href="https://ct.com/news/us-senator-probe-bo-hines-trump-crypto-adviser-tether-deal" rel="noopener noreferrer nofollow">inked a $6.3 million deal with a marketing company co-founded by former White House crypto adviser Bo Hines</a>.</p>
<p style="text-align: left;">In a Thursday letter to Ardoino, the Connecticut lawmaker <a href="https://www.hsgac.senate.gov/wp-content/uploads/2026-10-22-Letter-from-Sen-Blumenthal-to-Tether.pdf" rel="noopener noreferrer nofollow">said</a> that the Senate Permanent Subcommittee on Investigations demanded “records and information related to contracts, payments, communications, and lobbying” about the deal. The politician believes it may contravene rules around ethics, corruption and lobbying. Tether says an external investigation “found no evidence of wrongdoing.”</p>
<p style="text-align: left;"><br></p>
<h2 style="text-align: left;" id="span-style-text-decoration-underline-winners-and-losers-span"><span style="text-decoration: underline;">Winners and Losers</span></h2>
<p>At the end of the week, Bitcoin (BTC) is down 1.2% to trade at $80,549, Ethereum (ETH) is down 1.9% to trade at $2,343 and XRP (XRP) is up 0.9% to $1.20. The total market cap is at $2.68 trillion according to CoinMarketCap.</p>
<p>Among the biggest 100 cryptocurrencies, the top three altcoin winners of the week are MemeCore (M) with a 24.4% gain, Venice Token (VVV) on 14.8%, and Ethena (ENA) on 14.1%.</p>
<p>The top three altcoin losers of the week are Starknet (STRK) which was down 24.9%, Aerodrome Finance (AERO) down 12.5% and Sei (SEI) down 12.5%.</p><img src="https://s3-images.ctmedia.io/media/content/2026/10/01M5TNH9C5N12SA60VHAVV311R/btc-price-1.jpg" alt="" width="663" height="430">
<p style="text-align: center;"><em>Bitcoin weekly chart. Source: CoinMarketCap</em></p>
<h2 id="span-style-text-decoration-underline-prediction-of-the-week-span"><span style="text-decoration: underline;">Prediction of the Week</span></h2>
<h2 style="text-align: left;" id="jpmorgan-projects-bitcoin-to-outperform-us-stocks-and-gold-over-next-decade">JPMorgan projects Bitcoin to outperform US stocks and gold over next decade</h2>
<p style="text-align: left;">JPMorgan Asset Management projects Bitcoin (BTC) will outperform stocks and gold over the next decade, but cautions that its volatility makes it unsuitable for diversifying portfolios for now.</p>
<p style="text-align: left;">On Monday, JPMorgan <a href="https://am.jpmorgan.com/us/en/asset-management/institutional/insights/portfolio-insights/ltcma/" rel="noopener noreferrer nofollow">published</a> its <a href="https://ct.com/markets/jpmorgan-bitcoin-outperform-stocks-gold-annual-returns" rel="noopener noreferrer nofollow">2027 Long-Term Capital Market Assumptions report</a>, projecting a 10% annualized return for Bitcoin, compared with 7.5% for large-cap US stocks and 5.5% for gold.</p>
<p>“At the moment, we do not make a case for Bitcoin as a diversifier in portfolios due to its unstable market correlations,” the report said. “We see Bitcoin as a speculative asset and a hedge against monetary easing.”</p>
<h2 id="span-style-text-decoration-underline-top-fud-of-the-week-span"><span style="text-decoration: underline;">Top FUD of the Week</span></h2>
<h2 style="text-align: left;" id="new-york-ag-seeks-1-37b-from-novatech-founders-over-ponzi-scheme">New York AG seeks $1.37B from NovaTech founders over Ponzi scheme</h2>
<p style="text-align: left;">New York Attorney General Letitia James has asked a court to order defunct crypto and forex trading platform NovaTech’s founders, Cynthia and Eddy Petion, and related companies <a href="https://ct.com/news/new-york-ag-novatech-founders-companies-crypto-ponzi" rel="noopener noreferrer nofollow">to pay $1.37 billion over its Ponzi scheme.</a></p>
<p style="text-align: left;">More than 11,000 New Yorkers lost tens of millions of dollars through NovaTech and an earlier crypto mining scheme, AWS Mining, the AG’s office said. The complaint alleged that promoters targeted Haitian and other immigrant communities through prayer groups, social media and WhatsApp, promising high returns and recruitment bonuses.</p>
<p style="text-align: left;"><br></p>
<h2 id="bitcoin-core-changes-security-policy-as-ai-makes-bugs-easier-to-find">Bitcoin Core changes security policy as AI makes bugs easier to find</h2>
<p>Bitcoin Core is changing how it handles security vulnerabilities, due to how fast large language models can uncover software flaws.&nbsp;</p>
<p>Bitcoin Core developer Antoine Poinsot <a href="https://groups.google.com/g/bitcoindev/c/70VSp_ARD5Q" rel="noopener noreferrer nofollow"><span style="text-decoration: underline;">said</span></a> that in the past, vulnerabilities were generally kept under lengthy disclosure embargoes to give users time to upgrade before details became public.</p>
<p>However, Poinsot said <a href="https://ct.com/news/bitcoin-core-changes-security-policy-as-ai-makes-bugs-easier-to-find" rel="noopener noreferrer nofollow">LLMs have made some flaws so easy to rediscover that delaying fixes offers little protection.</a></p>
<p>“The embargo period achieves little but it delays the availability of a fixed release,” said Poinsot. “We are therefore updating our policy disclosure to accommodate those.”</p>
<h2 id="pentagon-bans-us-forces-from-using-military-info-to-bet-in-prediction-markets">Pentagon bans US forces from using military info to bet in prediction markets</h2>
<p>US Defense Secretary Pete Hegseth has <a href="https://ct.com/news/pentagon-bans-us-forces-from-using-military-info-to-bet-in-prediction-markets" rel="noopener noreferrer nofollow">barred all Pentagon staff from using undisclosed information to place wagers on upcoming military action</a>, including on prediction market platforms like Kalshi and Polymarket.&nbsp;</p>
<p>In a memo <a href="https://assets1.cbsnewsstatic.com/hub/cms/prod_cms_alt/file/2026/10/22/58a4e0e3-ea5f-49e2-b7fe-3bb3381c5987/hegseth_memo__1_.jpg.pdf" rel="noopener noreferrer nofollow"><span style="text-decoration: underline;">sent</span></a> to senior Pentagon and defense agencies on Tuesday, Hegseth said all Department of War personnel are prohibited from engaging in financial transactions using nonpublic information. This involves both classified and unclassified information.&nbsp;</p>
<h2 id="span-style-text-decoration-underline-top-magazine-features-of-the-week-span"><span style="text-decoration: underline;">Top Magazine Features of the Week</span></h2>
<h2 style="text-align: left;" id="a-href-https-ct-com-magazine-5-alternatives-to-ledger-to-store-your-bitcoin-rel-noopener-noreferrer-nofollow-5-alternatives-to-ledger-to-store-your-bitcoin-a"><a href="https://ct.com/magazine/5-alternatives-to-ledger-to-store-your-bitcoin" rel="noopener noreferrer nofollow">5 alternatives to Ledger to store your Bitcoin</a></h2>
<p>Hardware wallets aren’t the only way to protect your crypto, but from ETFs and passkeys to multisig accounts, each alternative has its own risks and trade-offs.</p><img src="https://s3-images.ctmedia.io/media/content/2026/10/01M5TJMEQYT9H5G9202RRR3DV2/yat-siu-story.jpg" alt="" width="761" height="507">
<h2 style="text-align: left;" id="a-href-https-ct-com-magazine-ai-trade-sleep-yat-siu-warns-losing-agent-rel-noopener-noreferrer-nofollow-agents-can-trade-24-7-but-yat-siu-warns-you-could-lose-access-at-any-time-a"><a href="https://ct.com/magazine/ai-trade-sleep-yat-siu-warns-losing-agent" rel="noopener noreferrer nofollow">Agents can trade 24/7 — but Yat Siu warns you could lose access at any time</a></h2>
<p>The Animoca Brands chairman explains that AI agents can make trades while you sleep, but users need to plan for the day they lose access to the bots.</p>

AI agents help rescue ETH’s Glamsterdam fork, ‘Steal My Bitcoin’ site: Hodler’s Digest

Table of Contents

Cointelegraph

Other articles published on Oct 25, 2026

Join our free newsletter for daily crypto updates!