Flash News

TREE NEWS update: Eoptolink Technology said on July 22 that its production and operations remain normal and orderly, with order deliveries proceeding as planned, after its shares fell sharply amid a broader pullback in the optical communications sector. The company said 800G and 1.6T products are its main delivery items this year, with order fulfillment and capacity expansion advancing in line with business demand.

TREE NEWS update: China’s Ministry of Industry and Information Technology cybersecurity platform NVDB issued a risk warning over two critical remote code execution vulnerabilities in PHP, an open-source server-side scripting language widely used in web development. Unauthenticated attackers could exploit the flaws to execute arbitrary code remotely, leading to server takeover, sensitive data leaks and business disruption. Affected versions include PHP 8.5 below 8.5.12, 8.4 below 8.4.27, 8.3 below 8.3.36, 8.2 below 8.2.35, and 8.1 and earlier.

TREE NEWS reports: Illuvium co-founder Kieran Warwick said crypto “meme games” are coming, warning that many will be ponzis, get exploited or die instantly. In comments published alongside a report on the trend, Warwick said there will be ridiculous gains and people will get “absolutely f***ing rinsed.” The remarks point to a new wave of speculative crypto gaming that carries the same risks as memecoins.

TREE NEWS update: Hangzhou police in Gongshu district have opened a criminal investigation into Zhejiang PanShi Information Technology and its affiliates on suspicion of contract fraud, and have taken criminal coercive measures against founder Tian Ning, 49, and other personnel, the district public security bureau said on October 22. Authorities said they are pursuing case investigation and asset recovery. The company’s headquarters has been emptied.

TREE NEWS update: Matter Labs introduced Prividium Commander, a tool that lets institutions add application permissions to existing blockchains without migrating to Prividium Ledger. The product allows users to retain their current custody and signing providers. The launch targets institutions seeking permissioned applications while keeping existing infrastructure.

TREE NEWS reports: A developer has linked a $370,000 theft to exposed Railway secrets, with Railway restoring Enterprise builds late Wednesday while customers on other plans were still waiting to redeploy with replacement credentials. The incident centers on the exposure of credentials used in Railway builds, and remediation has so far been limited to Enterprise-tier customers.

TREE NEWS update: Cloudflare’s CEO reported millions of attempts to exploit PHP2Shell, a set of flaws that let attackers run code on vulnerable web servers without logging in. PHP has shipped fixes for four supported branches. The vulnerabilities allow unauthenticated remote code execution on unpatched servers.

TREE NEWS reports: A deliberately insecure elliptic curve makes the arithmetic behind ECDSA small enough to follow, illustrating how signing and verification work. The verifier needs the message and the public key, but neither the signing secret. The example is intended as an educational demonstration, not a secure implementation.

TREE NEWS reports: Mastercard Crypto Credential, KYC checks, Travel Rule transfer-party data and blockchain risk screening each serve distinct purposes in crypto compliance, and providers remain responsible for deciding whether a payment can proceed. Identity verification, transfer-party information and blockchain risk alerts are separate functions rather than substitutes, the analysis said. Compliance teams must weigh all three before approving a transaction.

TREE NEWS reports: A wallet tied to Kanye West (0xdeA…a1d5c) has supplied 18,500 WETH to Aave and borrowed $25.01 million in stablecoins, leaving the position at a health score of 1.51, on-chain analyst Ai Yi reported. Since Sept. 29 the address has withdrawn 12,500 ETH worth $32.04 million from Binance and averaged down from $2,736.47 to $2,460, cutting its long ETH entry to $2,553.31. Seven hours ago it moved 5 million USDC to 0x4BA…82cE2, an address with frequent fund links to the Kanye wallet.

TREE NEWS update: Bitget has listed a USDT-margined AXIS perpetual contract, offering up to 20x leverage, with contract trading bots opening at the same time. The listing adds a new leveraged derivatives market for the AXIS token on the exchange.

TREE NEWS reports: A whale that has been looping long ETH since late September added another 9,000 ETH, lowering its average long entry price to $2,553.31. The address has deposited 18,500.54 WETH worth $45.53 million into Aave and borrowed $25.01 million in stablecoins, leaving a health score of 1.51. Since Sept. 29 it has withdrawn 12,549.9 ETH worth $32.04 million from Binance via the strategy, adding to the position from $2,736.47 down to $2,460.

TREE NEWS update: California Attorney General Rob Bonta announced a $500,000 settlement with Fidelity Digital Assets, National Association on Oct. 16 over the firm’s prior restriction on transferring crypto to external wallets for California retail clients. Regulators said the practice may have violated the California Commodity Law of 1990, which requires physical delivery of certain speculative commodity contracts. Fidelity attributed the restriction to NYDFS not approving the function at the time; approval came in April 2025 and transfers expanded to all California retail clients in June 2025.

TREE NEWS update: GMLabs-003, a new GMX governance proposal, would direct all remaining Solana-side protocol revenue after GT buybacks toward repurchasing GMX tokens for the staking reward pool, while keeping the GT buyback mechanism unchanged. It would also impose a 180-day unstaking waiting period on existing and new GMX and esGMX staking positions on Arbitrum and Avalanche, counted from the unstaking request, with pending requests cancellable and no migration required. Implementation is planned for Oct. 28, subject to readiness.

TREE NEWS reports: US spot Zcash (ZEC) and NEAR ETFs together pulled in $16.07 million in net inflows on Oct. 21 (US Eastern time), with the Zcash ETF (ZCSH) accounting for $15.18 million and the Bitwise NEAR ETF (NRR) taking in $830,700. ZEC ETF total net assets stood at $745 million with a 3.26% net asset ratio, while NEAR ETF net assets reached $91.38 million at a 1.32% ratio.

TREE NEWS reports: US spot SOL and XRP ETFs together pulled in $1.29 million in net inflows on October 21, with SOL ETFs adding $585,300 and XRP ETFs $708,500, SoSoValue data show. Morgan Stanley’s Solana Trust (MSOL) accounted for all of the SOL inflow. Among XRP funds, the Franklin XRP ETF (XRPZ) took in $2.25 million while the Bitwise XRP ETF (XRP) saw $1.55 million in outflows.

TREE NEWS reports: Collector Crypt reported a record $24.3 million in gross receipts for a single day, with users opening 123,425 packs. The reported gross receipts equaled roughly 13% of DefiLlama’s trailing 30-day pack-sales total. The figures were disclosed by the platform without specifying the date of the record day.

TREE NEWS update: Ethereum co-founder Vitalik Buterin said on X that he has not predicted and will not predict that cyber defense will automatically outpace attack capabilities. He expects defenders may eventually gain the upper hand, but the transition will be difficult, requiring deeper methodological shifts such as formal verification and proactively minimizing the trusted computing base (TCB), work that remains at an early stage. He cited this as a key reason for supporting slowing or pausing related technological development and argued more than 1% of GDP should go to cybersecurity, biosecurity and physical-world safety.

TREE NEWS reports: Bitcoin dropped below 84,000 USDT, trading at 83,988.8 USDT, with its 24-hour gain narrowing to 1.31%. The move marks a pullback for the largest cryptocurrency after its recent advance.

TREE NEWS update: The U.S. Office of the Comptroller of the Currency published final rules implementing the GENIUS Act, becoming the first regulator to finalize stablecoin implementation rules under the law. The rules take effect January 18, 2027, setting an access path for banks and non-bank firms to issue payment stablecoins and establishing standards for foreign issuers and asset custody. The final version removes a draft provision presuming certain issuer-third-party reward arrangements unlawful, while the statutory ban on issuers paying interest directly to holders remains.