Starknet uses hash-based cryptography that is already quantum-resistant, but as an Ethereum Layer 2 it still relies on Ethereum for its bridge and data availability. That dependency is the core of a governance poll on leaving the L2 model, which closed on October 22 after a seven-day voting period.

93.5% of voting power, across more than 2,800 wallets, backed researching a move to an independent post-quantum Layer 1. StarkWare abstained.

StarkWare and the Starknet Foundation will lead the research, with a whitepaper draft expected in November and a quantum-safe target set for 2027. Ethereum itself aims for quantum safety in 2029. STRK stays the native token, no new token is planned, and existing Ethereum bridges remain operational.

The vote approves research only. Any actual transition will require further governance votes by STRK holders.

The hot wallet and several deposit addresses of Indian exchange CoinDCX sent about 15.99M USDT and 5,783 TRX to a single TRON address on October 21. The largest single transfer was 15,819,002 USDT.

The receiving address then split the funds across multiple wallets and, after several rounds, moved them to deposit addresses on Binance, OKX and Gate. CoinDCX has not confirmed a breach, so the incident remains a suspected theft for now.

If confirmed, it would be the exchange's second major loss in 15 months, after a $44.2M drain of a Solana operational wallet in July 2025.

From Jan 18, 2027, issuing a stablecoin in the US without approval is illegal. The OCC published the final rules for every issuer.

For holders: redemption within 2 business days from just 1 coin, monthly audited reserve reports, and only a regulator can freeze withdrawals. If reserves fall short for 15 business days, the issuer winds down and repays everyone, fee-free.

For issuers: 1:1 reserves in cash, short T-bills and government money funds, at least 5% in instant cash, max 40% with one counterparty, and $5M minimum capital plus 12 months of expenses.

The big change from the draft: third-party rewards are now judged case by case, so exchange yield programs survive. Offshore issuers need a comparable home regime, so Tether is launching USAT for the US.

Bybit moved its international headquarters to Dubai in 2022 and received in-principle approval from the emirate's regulator in 2024. Two years later, its local entity Bybit Fintech FZE has obtained a full Virtual Asset Service Provider license from the Dubai Virtual Assets Regulatory Authority (VARA).

The license covers spot crypto trading only. Derivatives are not included yet.

Chief Legal and Compliance Officer Peter Loo said the exchange plans to apply to expand the license scope to derivatives trading, which will require a separate approval from VARA. Until then, Bybit's Dubai entity can offer regulated spot services in the emirate.

Tianjin's Second Intermediate People's Court has accepted a prosecutors' request to confiscate the seized assets linked to Qian Zhimin, the alleged controller of Tianjin Lantian Gree Electronic Technology. The stash, held by UK authorities, includes more than 61,800 BTC plus BCH, BTG, BSV, XRP, DOGE, cash and jewelry.

Prosecutors say that from 2014 to 2017 the company sold unlicensed wealth-management products with guaranteed returns, raising over 40.378 billion yuan from more than 102,000 investors. Funds were allegedly used to repay earlier participants and buy bitcoin, property and cars.

Victims lost nearly 20 billion yuan, and the court has opened a six-month window for them and other interested parties to join the case.

The move comes days after a UK High Court ruled that Chinese law, not English law, should govern victims' claims to the coins seized in Britain. Further hearings are expected, and lawyers for some victims are seeking to appeal.

Validators on Solana no longer post their votes as on-chain transactions. Under the Alpenglow upgrade activated on October 22, they exchange votes directly and combine them into certificates, so a block can become final after one or two voting rounds instead of waiting on successive blocks.

Finality drops from several seconds to a targeted 150 milliseconds under normal network conditions, with about 900 milliseconds during the handover transition.

The switch went through after 446 of 654 participating validators certified the starting block. Wallets, fees and applications work as before, but network dashboards will show lower transaction totals because validator votes no longer appear as on-chain transactions.

The 150 ms figure is a target rather than a guarantee. Anza, the developer behind the Agave client, notes that machines not voting directly receive finality information later than validators.

A short dip in validator backing on Wednesday has pushed back the fixCleanup3_4_0 amendment on the XRP Ledger. The fix closes a loophole that could let an account allowed only to burn an issuer's tokens create new ones, and it also adjusts how the lending code determines loan defaults.

At the 12:54 UTC checkpoint, only 26 of 35 trusted validators voted yes, below the 29 required.

XRPL amendments need more than 80% validator support held for 14 consecutive days, and a single missed check resets the countdown. Activation moved from October 23 to November 4 at 14:46 UTC, with support now back at 31 of 35.

The broader lending system for banks and payment companies remains 10 votes short and has not started its own activation countdown.

Unbacked inflation has hit two of Swell DAO's liquid staking tokens: the admin keys for swETH and rswETH appear to be compromised, with an attacker pushing the tokens' NAV higher by up to 1% every hour.

The keys control proxy admin permissions, which lets the holder point the swETH and rswETH proxies at new implementation contracts. Four malicious upgrade contracts have already been deployed, although none has been queued through the multisig yet.

If executed, the malicious upgrades could drain roughly 2,500 ETH.

The root cause is unconfirmed. A possible link to the cloud deployment platform Railway was floated based on timing alone, with no conclusive evidence. Holders of swETH and rswETH face the risk of trading against an artificially inflated exchange rate until the keys are secured.

The SEC's innovation exemption for tokenized securities venues, introduced on Sept. 17, now has its first applicants on the regulator's public list. The framework temporarily exempts qualifying tokenized securities venues (TSVs) from the definition of an exchange under US securities law.

OKXICE TSV, the joint venture of OKX and Intercontinental Exchange, filed its notice of intent on Oct. 4. TSV LLC filed earlier, on Sept. 23, while Kepas Corporation, the operator of Perpetuals.com, was added on Oct. 14.

To launch, a venue must publish a notice on its website at least 30 days in advance and send its contact details and the notice address to the SEC within one business day.

The SEC stressed that a notice of intent is separate from approval. Being on the list does not mean a firm meets the TSV definition or satisfies the conditions of the exemption.

ZKsync developer Matter Labs unveiled Prividium Commander at Money20/20 USA, a control plane built for banks, asset managers, exchanges and clearing houses that want to run digital asset services under their own rules.

The platform covers token issuance and administration for tokenized deposits, stablecoins and securities. It plugs into existing staff login systems such as Okta, sets permissions for issuance and transfers, checks each transaction against institutional rules and keeps an audit trail of both completed and denied requests.

Commander works on public blockchains and private networks such as Hyperledger Besu, with an optional upgrade path to Prividium Ledger, Matter Labs' zero-knowledge chain.

No bank clients were named at launch. The product is Matter Labs' latest push to bring regulated institutions onchain without forcing them to rebuild their compliance stack.