Reports of a Coinbase hack circulated before the exchange clarified the incident: the breach originated at Amplitude, a third-party analytics provider, and not on Coinbase infrastructure.

The exposed data covers contact information for a "small subset" of Coinbase customers, alongside data belonging to other Amplitude clients. Coinbase says its systems detected no unauthorized access and customer funds remain safe. Affected users are being notified by email, as required by law.

Coinbase has not disclosed how many customers were affected or which contact fields were involved.

The incident highlights supply-chain risk for exchanges. Even without passwords, keys or funds being compromised, leaked emails and phone numbers can be used for phishing and social-engineering attacks against crypto holders.

A security incident at one of Solflare's staking providers compromised the private keys behind its Solana validator, the wallet disclosed in its October 27 notice. The provider was not named, and the validator can no longer earn or distribute rewards to delegators.

Delegated SOL is not affected: stakes remain in users' own stake accounts, which the validator never controlled.

Solflare is preparing an app update that will guide users through migrating their stake to a new validator, and plans to compensate those who complete the move. No figure or formula for the compensation has been shared yet.

Principal is safe, but stakers lose yield for as long as their SOL sits on the non-earning validator. Rewards are expected to resume once a stake is pointed at the new validator.

South Korean crypto exchange Bithumb found that an unauthorized outside party had accessed its internal mobile groupware system and leaked personal information. The breach was identified on October 27 and reported the same day to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission.

The attack targeted an outsourced messenger used only by employees. Bithumb says the system is separated from the exchange's trading network and is still checking the exact timing of the attack and whether member data was included in the leak.

Bithumb was one of three South Korean financial firms to report data breaches on October 28.

The incident follows a disclosure by fellow Korean exchange Gopax in early October, which confirmed unauthorized access to some customer accounts since September, with nicknames and login history viewed but no asset losses found.

The US-Mexico remittance corridor moves tens of billions of dollars a year, and about 15% of it already runs through Bitso. Anchorage Digital now wants to sit under both sides of that flow, after expanding its custody and listing partnership with Bitso.

The federally chartered crypto bank now custodies MXNB, Bitso's Mexican peso stablecoin, across Arbitrum, Base, Ethereum, Polygon, Avalanche and Arc. In return, Bitso listed USDPT and USAT, the dollar stablecoins from Western Union and Tether that Anchorage issues and custodies. Financial terms were not disclosed.

Bitso clients can now move along the full dollar-peso corridor onchain, with a regulated US bank holding both legs.

The deal adds to a wider race to plug stablecoins into Latin American payments, following Circle's recent USDC settlement pilot in Colombia. Much of the corridor still relies on wires, correspondent banks and cash-pickup networks.

Everything that moved crypto today, in one card.

Today's headliners: Ripple, BlackRock, Robinhood, Janus Henderson, SoFi, Galaxy, Binance, Crypto.com, Polymarket, Ethereum

Robinhood Stock Tokens keep trading onchain over weekends, but their minting and redemption window closes, which can push prices away from the underlying shares. Ondo Stocks are now live on Robinhood Chain to offer a second route for liquidity during that gap.

Of the 15 tokens launched, 11 have Uniswap v4 StablePair pools that swap them directly against Robinhood Stock Tokens on the same stocks, including NVIDIA, SpaceX, Tesla, Strategy, Circle and the SPY and QQQ ETFs. The other four (HOOD, FXI, BitMine and a copper fund) have no Robinhood counterpart yet.

Ondo Stocks can be bridged to Ethereum or BNB Chain and minted or redeemed 24/7, so traders can buy discounted Robinhood tokens, swap them into Ondo Stocks and redeem even on weekends. StablePair uses dynamic LP fees so liquidity providers capture more of that arbitrage.

Ondo Stocks has grown to $1.3B in TVL and over 450,000 holders since launching in September 2025.

Latin American banks are getting a new way to test stablecoins without replacing the rails they already run. Circle and payments-technology firm ACI Worldwide announced a collaboration to fold USDC settlement into existing banking infrastructure across the region.

The first pilot targets Colombia, where ACI built the central infrastructure behind Bre-B, the country's interoperable instant-payments network. The setup pairs Circle's USDC with ACI Connetic, a cloud-based payments orchestration platform, so that USDC can settle alongside traditional account-to-account transfers.

The pilot is designed as technology-agnostic: it starts with USDC, but ACI's platform is built to support other payment networks and digital-asset providers over time.

The deal extends Circle's push into emerging markets after an earlier Latin American foothold through Mercado Pago. Colombia combines high cross-border remittance volumes with a population used to dollar-denominated savings as an inflation hedge.

Non-expiring perpetual contracts have long been an offshore product, but US traders now get a CFTC-regulated version: OG.com and Crypto.com rolled out Crypto Perpetuals for eligible users in the Crypto.com App and on Crypto.com Exchange.

Leverage is capped at 5x, with long and short positions, isolated margin, and take-profit and stop-loss orders.

OG.com runs the CFTC-registered exchange, clearinghouse and futures commission merchant, while Crypto.com recently registered with the National Futures Association as an Introducing Broker to distribute the product to retail and institutional users.

The launch puts perpetuals next to spot, prediction markets and rewards inside one app, and adds to the growing list of US venues offering onshore perps.

The STABLE-USD spot order book is now live on Coinbase in cancel-only launch mode, the first phase of a new listing before matching begins.

STABLE is the native token of Stable, a Layer 1 blockchain built around USDT payments. On Stable, users pay network fees in USDT instead of a separate gas token.

In cancel-only mode, traders can place and cancel orders, but nothing is matched until Coinbase moves the book to full trading.

The listing gives the payments-focused chain access to one of the largest US-regulated spot venues, as stablecoin infrastructure projects compete for distribution.

The attack did not touch exchange servers at all. SlowMist traced malicious code injected into Udesk customer support scripts, a third-party chat widget that sites embed on their pages, which quietly loads a second payload from the lookalike domain udeskqlobal.com.

Once on a page, the script collects cookies, localStorage, sessionStorage and data submitted through login and other forms, which could let attackers hijack sessions or take over accounts.

On deposit pages of three exchanges (mgbx.com, bikingex and bitxex.io), the script swaps displayed deposit addresses for BTC, EVM, TRON, Solana, LTC and DOGE and rewrites the clipboard, sending deposits to attacker wallets.

SlowMist advises affected sites to stop serving the compromised script, revoke exposed sessions and rotate credentials. Users are urged to verify deposit addresses through a trusted channel before sending funds.