Flash News

TREE NEWS update: S&P Global Ratings has introduced a Vault Risk Assessment (VRA) framework for onchain digital-asset lending vaults, scoring investor impairment risk across six dimensions: portfolio credit quality, liquidity mismatch, curator, blockchain, protocol, and vault security and governance. The scores use letter grades with a “v” suffix. S&P said the VRA is not a credit rating and that first assessment results will be published separately. Onchain lending vault deposits grew from $1.5 billion in September 2024 to $10 billion in September 2025.

TREE NEWS reports: Prediction market predict.fun put the probability of Polymarket launching an official token before March 31, 2027 at 16%. The market-implied odds leave roughly a one-in-six chance that the crypto prediction platform issues a token within that window.

TREE NEWS reports: A Gnosis Safe linked to Ethena withdrew 62.58 million ENA, worth $14.86 million, from Bybit 37 minutes ago, bringing its total withdrawals from the exchange to 117.58 million ENA, worth $27.96 million, over the past nine hours.

TREE NEWS reports: The project Revenue Family, which bills itself as X Money’s off-ramp bridge, has been tied to a malicious approval exploit in which an attacker lured users into signing permit authorizations, obtained unlimited USDG allowances and called transferFrom in the same transaction to move funds out. Stolen funds were split 80/20 into two hacker addresses. The project said on October 1 that its social media accounts had been taken over by an internal reviewer, paused redemptions and denied that REV was its official token.

TREE NEWS reports: Security firm Salus said the project Revenue Family, which presents itself as an X Money off-ramp, executed malicious approvals by submitting users’ permit signatures to obtain unlimited USDG allowances, then calling transferFrom in the same transaction to move funds to two hacker addresses split 80/20. Revenue Family said on October 1 that its social accounts had been taken over by an internal reviewer, paused redemptions and denied that REV was its official token.

TREE NEWS update: Victims of the Drift hack on Solana began filing claims on Oct. 1 against roughly $295.4 million in verified losses, with an initial recovery pool of about $3.11 million. Holders can redeem DFX tokens for USDT at roughly 1.04 cents per dollar of loss — about $10.40 on a $1,000 loss. DFX has a fixed supply of 299,500,810.998 tokens, each tied to one USDT of verified April losses, and unclaimed tokens expire when the claim window closes on Jan. 1, 2028.

TREE NEWS update: A crypto vault on Base was drained of about 1,783 wstETH on October 4, with losses exceeding $6 million. On-chain records show the vault was controlled by a 3-of-7 Safe whose seven signers have not been publicly identified. Security firms said the attacker borrowed aBaswstETH from the vault and swapped it for wstETH via Aave; neither the Base chain nor Aave’s core contracts were implicated, and the specific authorization flaw remains unconfirmed.

TREE NEWS update: Near Intents said the roughly $3.8 million drained in an exploit on Thursday was returned in full, a day after the team said it had identified the attacker and gave them 48 hours to return the funds. The protocol confirmed the full recovery of the stolen amount.

TREE NEWS reports: Hyperliquid will unlock about 3.75 million HYPE tokens at 8:00 a.m. Beijing time on October 6, roughly 1.69% of circulating supply and worth about $339 million. Ethena releases about 172 million ENA at 3:00 p.m. on October 5, about 1.88% of supply and worth roughly $41 million. Babylon unlocks about 136 million BABY on October 10 and Movement about 165 million MOVE on October 9.

TREE NEWS reports: An address that has booked $17 million in profits trading NEAR and INJ since mid-August has opened a 94,700-token CBRS long on Hyperliquid worth about $17.4 million since Friday’s market close. The position was funded by trimming existing long positions in MU, INTC and DRAM, with the reduction roughly matching the size of the new CBRS long.

TREE NEWS reports: A wallet opened a 94,700-token CBRS long on decentralized perpetuals exchange Hyperliquid worth about $17.4 million, pushing CBRS up nearly 11% over the weekend before a 3% pullback after the wallet stopped adding four hours ago. The position was funded by cutting long exposure to MU, INTC and DRAM in roughly equal size. The wallet now holds close to $50 million in longs across the four assets and has booked $17 million in profit from NEAR and INJ trades since mid-August.

TREE NEWS reports: Only 25 users have paid Hyperliquid read priority fees, with cumulative spending reaching $5.3 million. The two highest spenders paid a combined 63,200 HYPE, worth $4.4 million, accounting for 81.6% of the total. The top five users account for 99.8% of all read priority fees.

TREE NEWS reports: Losses from an exploit on a Base chain vault have grown to about $6 million, involving roughly 1,783 wstETH. The attacker added a new contract to the vault’s whitelist, borrowed aBaswstETH from the vault and moved the funds to an attacker-controlled contract.

TREE NEWS reports: Wallets suspected to be linked to the Ethena team withdrew a cumulative $68.26 million in ENA from centralized exchanges, including $13.1 million from Bybit and $55.16 million from Coinbase roughly two hours ago. Ethena also posted a string of transaction hashes on X eight hours earlier, the contents of which have not been disclosed.

TREE NEWS update: A vault on Base is being actively exploited, with roughly $2.02 million in assets stolen across about four transactions so far. The attacker added a newly created contract to the vault’s whitelist, then borrowed aBaswstETH and moved it to an attacker-controlled contract. The attack is ongoing.

TREE NEWS update: Ethereum Layer 2 network Blast announced it will wind down operations, citing operating fees that no longer cover node and state-sync costs. Withdrawals will run in two phases: the team first exits assets held in Lido, a process expected to take about a week, after which withdrawals reopen and the standard 7-day waiting period shortens to 24 hours. October 26 is the final deadline for routine interface withdrawals; BLAST fell from $0.0004 to $0.00025.

TREE NEWS reports: A wallet identified as 0xe6d…047F9 made its first ETH purchase, withdrawing 1,420 ETH worth $3.82 million from OKX over the past three hours at an average price of $2,692.47. The address has since deposited the full amount into Lido for staking.

TREE NEWS update: Amy Street, former growth lead at ROVE and former advisor to The Arena, publicly accused the company and founder Jason of withholding salary, expense reimbursements and her full token allocation, saying she resigned last year after repeated demands for payment. She said large debts and the token distribution remain unresolved, and that the Rove App has been inaccessible for about a year, locking user assets despite official promises to restore access “next week.”

TREE NEWS update: Gate has listed perpetual futures for HOOKED and HOOKR, offering up to 10x leverage alongside trading bots and copy trading, the exchange said on October 4. HOOKED is the token of Hooked, a MEME launchpad supporting programmable trading rules. HOOKR is the utility token of Hookr.fun, a programmable token-issuance market protocol on Robinhood Chain. Both contracts support 1–10x leverage.

TREE NEWS reports: Pump.fun’s 30-day revenue surpassed Hyperliquid’s, placing it third among protocols at roughly $55.5 million, Defillama data show. The figure covers the trailing 30-day period as of October 4.