Odaily reports: According to monitoring by on-chain analyst Ai Yi, a whale that has been repeatedly building long ETH positions since late September has added another 9,000 ETH, lowering the average long entry price to $2,553.31. The whale deposited 18,500.54 WETH worth $45.53 million into Aave and borrowed $25.01 million in stablecoins, with a health rate of 1.51. Since September 29, the whale has withdrawn 12,549.9 ETH worth $32.04 million from Binance through this method, adding to the position all the way from $2,736.47 down to $2,460.

Odaily reports that California Attorney General Rob Bonta announced on October 16 that his office has reached a $500,000 settlement with Fidelity Digital Assets, National Association (the successor entity to Fidelity Digital Asset Services), regarding the company's prior practice of restricting California retail customers from transferring cryptocurrency to external wallets. Regulators determined that this practice may have violated the California Commodity Law of 1990, which restricts certain speculative commodity contracts unless the buyer receives physical delivery within a specified timeframe. The California government views the ability to withdraw cryptocurrency as a functional equivalent of delivery.

From November 2022 to April 2025, California customers could buy and sell cryptocurrency on the Fidelity platform but were unable to send assets directly to external wallets. Fidelity stated that the restriction stemmed from the New York State Department of Financial Services (NYDFS) not having approved the relevant functionality at the time; approval was granted in April 2025, and the transfer feature was extended to all California retail customers in June 2025.

Odaily reports that the GMLabs-003 proposal plans to use all remaining protocol revenue on Solana, after deducting GT buybacks, for GMX buybacks, with the purchased tokens added to the staking rewards pool and the GT buyback mechanism remaining unchanged. The proposal also plans to introduce a 180-day unstaking wait period for existing and new GMX and esGMX staking positions on Arbitrum and Avalanche, calculated from the time the unstaking request is submitted, with previously staked time not counted; pending requests can be canceled, and existing positions do not need to be migrated. The above adjustments are planned to be implemented on October 28, subject to implementation readiness.

According to SoSoValue data, yesterday (October 21, US Eastern Time), US spot ZEC and NEAR ETFs recorded single-day total net inflows of $15.1766 million and $830,700 respectively, for a combined net inflow of $16.0073 million.

On the ZEC side, only the Zcash ETF (ZCSH) recorded a net inflow on the day, amounting to $15.1766 million, with cumulative historical net inflows of $169 million. As of press time, the total net asset value of spot ZEC ETFs stands at $745 million, with a net asset ratio of 3.26% and cumulative historical net inflows of $169 million.

On the NEAR side, only the Bitwise NEAR ETF (NRR) recorded a net inflow on the day, amounting to $830,700, with cumulative historical net inflows of $86.7571 million. As of press time, the total net asset value of spot NEAR ETFs stands at $91.3767 million, with a net asset ratio of 1.32% and cumulative historical net inflows of $86.7571 million.

According to SoSoValue data, yesterday (October 21, US Eastern Time), US spot SOL and XRP ETFs recorded single-day total net inflows of $585,300 and $708,500, respectively, for a combined net inflow of $1.2938 million.

On the SOL side, only Morgan Stanley Solana Trust (MSOL) recorded a net inflow that day, amounting to $585,300, bringing the fund's cumulative historical net inflow to $43.0646 million. As of press time, the total net asset value of spot SOL ETFs stands at $1.687 billion, with a net asset ratio of 0.00% and cumulative historical net inflows of $1.549 billion.

On the XRP side, Franklin XRP ETF (XRPZ) recorded a single-day net inflow of $2.2547 million, with cumulative historical net inflows of $515 million; Bitwise XRP ETF (XRP) recorded a single-day net outflow of $1.5462 million, with cumulative historical net inflows of $683 million. As of press time, the total net asset value of spot XRP ETFs stands at $1.574 billion, with a net asset ratio of 0.00% and cumulative historical net inflows of $1.801 billion.

Odaily reports: Ethereum co-founder Vitalik Buterin posted on X platform, stating that he did not predict, nor will he predict, that cybersecurity defense capabilities will automatically outpace attack capabilities. Although he expects cybersecurity will eventually form a situation where defenders hold the advantage, the transition process to achieve this goal will be very difficult.

Vitalik pointed out that defenders discovering vulnerabilities in released software earlier than attackers does not mean defense naturally holds the advantage. Truly establishing a defensive advantage requires deeper methodological shifts, including formal verification, proactive minimization of the trusted computing base (TCB), and other measures, while such work is still in its early stages.

He emphasized that this is also one of the important reasons why he continues to support slowing or pausing the development of related technologies, and believes that more than 1% of GDP should be invested in cybersecurity, biosecurity, and physical world security protection.

1. PHP exposes critical security vulnerability, government websites across multiple countries taken offline on a large scale;

2. UK FCA launches consultation on DeFi compliance guidance and crypto asset regulatory exemptions;

3. Lighter plans to apply for US derivatives trading and clearing licenses next month, LIT briefly surged 15% within 24 hours;

4. Trump says he will not attack Iran before the midterm elections, but US-Iran negotiations still see no real breakthrough;

5. Railway discloses security incident, some users' environment variables and API keys may have been leaked, all deployments suspended;

6. OpenAI says its AI model was the first to discover the major PHP security vulnerability, pledges $1 billion to support cybersecurity defense;

7. SkyAI's liquidation of SOL draws accountability from major shareholders, who demand a new buyback plan;

8. ARK Invest Q3 DeFi report: tokenized equity trading heats up, perpetual DEX open interest up 76%;

9. Bitcoin's 28-day volatility drops to 1.2%, nearing 2026 lows, as the market awaits the Fed's decision;

10. US SEC token safe harbor proposal criticized for lacking regulatory certainty, exchanges fear future liability;

11. Dogecoin Labs officially established to drive DOGE expansion into payments and DeFi applications;

12. Robinhood's venture fund RVI invests $30 million in Erebor Bank.

Odaily reports: Binance founder CZ posted a warning on X that PHP recently disclosed two security vulnerabilities (CVE-2026-109618, CVE-2026-109619), which may affect servers running applications such as WordPress and Magento.

CZ stated that details of the vulnerabilities were leaked before the patch was released, and the patch was released on October 21. Shortly after the vulnerability information leaked, confirmed cases of exploitation emerged. Attackers can exploit affected websites without authentication to steal visitors' credentials or launch attacks against their devices.

Currently, relevant IT teams are deploying Web Application Firewall (WAF) protection and installing patches. CZ reminds users to be extra cautious when visiting any website in the coming days.

Odaily: Arc has launched its ecosystem portal Arc Portal, where users can perform asset swaps, transfers, and yield operations, as well as browse applications built on Arc. Arc Portal also supports enabling AI agents, allowing users to set their own agent limits and permissions.

Odaily: Sui Foundation and DATA Foundation announced on October 12 that Sui Foundation will invest $30 million in DATA Network (formerly Story) and become the largest institutional holder of the network. DATA Network will upgrade to a protocol natively running on Sui, and the existing independent chain will be retired after the upgrade is completed; DATA tokens will be migrated at a 1:1 ratio, with holders' economic rights and governance rights maintained at least at current levels, and the arrangements for locked and vesting tokens remaining unchanged. Walrus will become the default storage layer for applications under DATA Foundation, and the Trace registry system will be integrated into the Sui ecosystem. Before the upgrade is completed, DATA Network will continue to operate, and the detailed timeline and holder transition plan will be announced prior to the upgrade.

Odaily reports: According to on-chain analyst Yu Jin's monitoring, the whale/institution that sold BTC to buy ETH sold another 246.2 BTC in the past day, worth $20.36 million, and bought 10,636 ETH. Since the 11th, this whale/institution has sold a cumulative 1,847.3 BTC over 11 days, converting to 153 million USDC, and then buying 63,731 ETH at an average purchase price of approximately $2,400.

According to monitoring by PPP prediction market tool, in the Polymarket prediction event "NBA Regular Season: Pacers vs. Pelicans," a smart money address with over $560,000 in profits (address: 0xe9b710551dd82a44e79203c2394a2b10163ace7b) purchased $130,000 on the Pacers defeating the Pelicans, with an average entry price of 43.8¢ and unrealized gains of $13,000.

The NBA regular season game between the Pacers and Pelicans tipped off at 8 AM Beijing time today. The second quarter is nearing its end, with the score at 50:51 and the Pelicans currently leading.

Join the PPP signal push community to stay one step ahead and seize the initiative.

Odaily reports: According to MSX.COM data, at the U.S. stock market close, the Dow rose 0.69%, the S&P 500 rose 0.58%, the Nasdaq rose 1.05%, and the VIX fear index fell 3.64%. AI concept stocks rose broadly, with Super Micro Computer up 9.55%, Dell up 5.27%, CrowdStrike up 5.26%, Symbotic up 5.14%, and Palantir up 4.74%.

It is reported that MSX is a leading RWA trading platform and has cumulatively listed hundreds of RWA tokens, covering popular U.S. stocks and ETF token assets such as Nvidia, GOOGL, MSFT, AMZN, META, TSM, and AMD.

According to the latest data from Gate, the price of gold has fallen to $4,113.01/oz, down 0.7% intraday. The price of silver has dropped to $57.243/oz, down 0.09% intraday.

In forex, USD/CNH fell 0.03% intraday, with the current exchange rate at 6.67252. USD/JPY rose 0.02% intraday, with the current exchange rate at 158.17.

In global stock indices, the Euro Stoxx 50 (EUSTX50) rose 0.83% intraday to 6,195.06 points; the UK FTSE 100 (UK100) rose 0.47% intraday to 10,704.7 points; the Germany DAX 40 (GER40) rose 0.02% intraday to 25,558.6 points.

In commodities, WTI crude oil rose 0.48% intraday to $99.27/barrel. Brent crude oil rose 0.19% intraday to $111.44/barrel.

Gate supports users in directly trading traditional financial market products within the platform, offering one-stop coverage of multiple asset classes including precious metals, forex, global stock contracts for difference (CFDs), major indices, and commodities, achieving deep integration of crypto assets and traditional financial assets. Gate TradFi-related features have been fully integrated into the Gate App and Web端, allowing users to conveniently participate in global asset price trading without switching platforms, unlocking more strategies and opportunities beyond the crypto market and continuously enhancing the multi-asset allocation experience.

Odaily reports: The PHP Foundation has stated that due to hesitant decision-making and insufficient resources, remediation work for a critical security vulnerability first discovered in 2024 stalled and restarted multiple times, and it characterized the delay as a "structural failure." PHP is a programming language widely used for websites and web applications.

PHP has released emergency patches for two related critical vulnerabilities. Unauthenticated attackers could exploit the flaws to execute code on affected servers without logging in. Some government websites or online services in the Netherlands, Finland, France, Germany, and Australia were temporarily taken offline to prepare for patch installation.

Security firm Calif and OpenAI separately reported the same underlying issue on August 11, and Calif also demonstrated unconditional remote code execution. Blockchain security firm SlowMist investigated PHP usage in the crypto industry and found direct PHP fingerprints on 793 of the 1,488 domains it assessed.

Intersect has temporarily closed its Members Area, Coinbase said it has not found any affected PHP instances, and digital asset infrastructure company BitGo said its platform was not affected. Binance co-founder Changpeng Zhao reminded users to exercise heightened caution when visiting websites recently, and OpenAI has released a Codex skill for checking for vulnerable PHP versions. (Cointelegraph)