Odaily reports: According to SoSoValue data, yesterday (October 21, US Eastern Time), Ethereum spot ETFs recorded total net inflows of $14.955 million.

Yesterday, the Ethereum spot ETF with the highest single-day net inflow was Grayscale Ethereum Mini Trust ETF ETH, with a single-day net inflow of $28.0693 million. ETH's historical total net inflow now stands at $2.039 billion.

Next was Fidelity ETF FETH, with a single-day net inflow of $13.0333 million. FETH's historical total net inflow now stands at $2.355 billion.

Yesterday, the Ethereum spot ETF with the highest single-day net outflow was Blackrock ETF ETHA, with a single-day net outflow of $29.3239 million. ETHA's historical total net inflow now stands at $12.336 billion.

As of press time, the total net asset value of Ethereum spot ETFs is $15.358 billion, the ETF net asset ratio (market value as a percentage of Ethereum's total market value) has reached 5.05%, and cumulative historical net inflows have reached $12.825 billion.

Odaily reports: According to SoSoValue data, yesterday (October 21, US Eastern Time), Bitcoin spot ETFs recorded a total net inflow of $528 million.

The Bitcoin spot ETF with the largest single-day net inflow yesterday was BlackRock's ETF IBIT, with a single-day net inflow of $235 million. IBIT's total historical net inflow has now reached $66.498 billion.

Next was Fidelity's ETF FBTC, with a single-day net inflow of $213 million. FBTC's total historical net inflow has now reached $10.588 billion.

As of press time, the total net asset value of Bitcoin spot ETFs stands at $109.309 billion, with the ETF net asset ratio (market cap as a percentage of Bitcoin's total market cap) at 6.42%, and cumulative historical net inflows have reached $57.956 billion.

According to Onchain Lens monitoring, following the Railway security breach, a suspected attacker wallet has transferred at least $369,300 to HitBTC and other addresses. The wallet had also previously received funds from an address associated with CryptoBillis Ledger Drainer, though its connection to the Railway security breach has not yet been confirmed.

Odaily reports that WordPress has issued an official security alert. Due to the severity of the PHP vulnerability, website owners are advised to update PHP immediately and contact their hosting providers to confirm patch deployment and the implementation of Web Application Firewall (WAF) mitigation rules. Users can check the current PHP version running on their site via the WordPress admin panel. Versions prior to PHP 8.2 no longer receive official security updates. For websites still running older versions and managing their own servers, if remediation cannot be completed immediately, the official recommendation is to consider temporarily taking the server offline until the vulnerability is effectively mitigated.

Odaily News: A serious security vulnerability has been exposed in PHP, the programming language used to run websites, affecting financial institutions, enterprises, local governments, and government agencies in Japan. Japan's Chief Cabinet Secretary Minoru Kihara said at a press conference on the morning of the 22nd: "As of now, no reports of related damage have been received." At the same time, he advised companies and other organizations to install fix patches, and said the government will closely monitor the situation and take corresponding measures. According to Minoru Kihara, government departments including the Ministry of Health, Labour and Welfare and the Ministry of Finance have temporarily suspended public access to some website content as a precaution. Affected by the incident, Japan's cybersecurity-related stocks rose, while the foreign exchange market and the yen bond market have not yet seen obvious fluctuations. (Jinshi)

Odaily report: Circle CEO Jeremy Allaire said in an interview that he is not particularly focused on Bitcoin's short-term price performance and is more optimistic about digital dollars used for payments and the AI agent economy. Allaire stated that digital dollars can be used for payments, trading, lending, and investment. AI agents will participate in more economic activities in the future, potentially further driving demand for digital dollars and related blockchain infrastructure, but he did not provide specific data on the growth of such demand.

On the regulatory front, the U.S. Office of the Comptroller of the Currency is drafting rules related to the GENIUS Act. The proposal requires stablecoin issuers to hold reserve assets no less than the total amount of stablecoins in circulation, and to redeem at par value within two business days, while prohibiting issuers from paying interest to holders. Allaire believes that the bill has bipartisan support and can provide policy safeguards for the stablecoin industry, but broader U.S. crypto market structure legislation has still not made progress.

Odaily reports that according to Gate data, gold (XAUUSD) has fallen to $4,100/oz, currently at $4,097.45/oz, a 24-hour decline of 0.5%.

According to monitoring by Olaoluwa Osuntokun, the CTO of Lightning Labs stated that due to the CVE-2026-111943 vulnerability, all lnd, btcd, tapd, and litd users are strongly advised to update their binaries or rebuild using Go 1.27.3. The vulnerability involves the compromise of a certificate authority and may affect the security of related software.

Odaily: Lee Eok-won, Chairman of South Korea's Financial Services Commission (FSC), stated at the comprehensive audit of the National Assembly's Legislation and Judiciary Committee that various circumstances need to be fully considered regarding the virtual asset taxation scheduled to take effect next year. People Power Party lawmaker Song Eon-seok questioned whether the tax should be abolished or postponed, and stated that before the nature of digital assets and policy direction are determined, priority should be given to enacting the "Basic Act on Digital Assets." Lee Eok-won responded that the digital asset-related bill has entered the final negotiation stage and discussions will be pushed forward as soon as possible; regarding taxation, opinions vary among all parties, and relevant feedback is still being collected.

South Korea's virtual asset taxation was introduced in 2020 through an amendment to the Income Tax Act and has been postponed three times. The government is advancing related administrative procedures according to the schedule for implementation in January next year, but some in the industry and within the ruling party believe that current standards remain unclear, infrastructure is insufficient, and the timing for implementation is not yet mature.

According to Gate market data, the Hong Kong stock market continues to decline, with the Hang Seng Index falling 2.7% intraday, losing the 23,000-point mark; the Hang Seng Tech Index is down 4.38%.

The AI sector has seen notable declines, with Iluvatar CoreX (09903.HK) and Zhipu (02513.HK) both dropping over 9%.

Odaily report: According to Spreek monitoring, the admin keys of Swell DAO's swETH and rswETH are suspected to have been compromised. The attacker raised the token net asset value (NAV) by up to 1% per hour without asset backing. The attacker also deployed 4 malicious upgrade contracts, which, if executed, could steal approximately 2,500 ETH. Currently, these contracts have not entered the execution queue through multisig. Spreek speculates that this incident may be related to the cloud deployment platform Railway, but states that this judgment is based only on timing coincidence and there is no conclusive evidence yet.

Odaily reports that 4 newly created wallets received a total of 1,127 BTC from crypto market maker Wintermute, worth approximately $93.45 million. Based on the transfer amount, the average BTC price was about $82,900.

Odaily reports: Bankless founder David Hoffman reposted Lighter's regulatory update on X and wrote: "Lighter season back on btw."

During Lighter's Q3 investor call held last night via webcast, David Hoffman, speaking as an investor, asked: "Given that Lighter has already had extensive prior communication with the CFTC (U.S. Commodity Futures Trading Commission), do you expect the approval of the DCM (Designated Contract Market) and DCO (Derivatives Clearing Organization) licenses to come earlier than the CFTC's stipulated 180-day review period?"

Lighter founder and CEO Vladimir Novakovski responded: "We believe that the extensive prior communication will make the whole process much smoother... The CFTC currently has a lot on its plate, so we can't give an exact timeline yet... However, the CFTC is a fast-moving team internally, so we expect the overall approval process to go relatively smoothly."

Previously, David Hoffman reportedly sold all his ETH and rotated into tokens such as LIT, ZEC, and NEAR, with the rotated tokens subsequently significantly outperforming ETH.

Odaily reports: According to monitoring by Haseeb Qureshi, the cybersecurity space is experiencing a wave of attacks, with the crypto industry bearing the brunt. He stated that on-chain hacking incidents are the "canary" of the cybersecurity space, because the chain is the place where cyberattacks are easiest to monetize. Citing data, he noted that the number of on-chain hacking incidents is rising, but the annualized scale of stolen funds is roughly on par with 2025, with losses per incident declining. He said that most small protocols have already been compromised, while large protocols are leveraging AI tools to strengthen their defenses. He expects similar developments to emerge across the broader internet landscape.

Odaily reports that according to on-chain analyst Ai Yi, an address withdrew 4,500 ETH from Binance 9 hours ago at a withdrawal price of $2,509.24, worth $11.29 million. This address last accumulated ETH nine months ago, when the ETH price was above $3,000.