The investigation found that personal information from historical WooCommerce orders remained in legacy database tables despite appearing redacted in the admin dashboard. Customer data from orders placed through Shopify since May may also have been exposed. Foundation said it has revoked affected email credentials and taken compromised legacy services offline. There is no evidence that Passport devices or their private keys were compromised. The phishing emails attempted to trick users into revealing their wallet recovery phrases.
Foundation Identifies Over 23,000 Phishing Email Attempts in Passport Wallet Security Incident
Passport hardware wallet maker Foundation said it has identified more than 23,000 phishing email attempts, including 19,057 messages delivered through Mailgun and 1,503 sent via Google Workspace. The number of affected users remains unknown.
Ethereum Delays Glamsterdam Hoodi Fork Over EIP-8037 and EIP-8038 Risks
Ethereum researcher Toni Wahrstätter said the planned Glamsterdam fork on the Hoodi testnet has been delayed after ChainSecurity identified compatibility risks in EIP-8037 and EIP-8038. The gas changes could break contracts that assume gas usage only decreases or cause failed sub-calls to behave unexpectedly. ChainSecurity has found 13 real-world cases, and developers are reviewing whether the upgrade specification needs changes.
Hyperliquid: Kraken Parent Payward Plans to Become First CFTC-Regulated HIP-3* Deployer
Hyperliquid announced that Kraken parent Payward plans to become the first CFTC-regulated HIP-3* deployer, using Hyperliquid infrastructure to offer perpetual futures markets to U.S. clients. Subject to regulatory approval, Payward's CFTC-regulated DCM and DCO, Bitnomial, would serve as the deployer, managing the markets and clearing and settling contracts, while its CFTC-registered FCM, NinjaTrader Clearing, would carry client accounts. HIP-3* will introduce optional onchain allowlists for permissioned markets without affecting existing HIP-3 markets. The initial version is available on testnet, with specifications subject to change.
Chris Dixon: Why Expand a16z Crypto into a16z Frontier?
On October 23, 2026, a16z Managing Partner Chris Dixon @cdixon said the expansion of a16z Crypto into a16z Frontier reflects the increasingly blurred boundaries between crypto, fintech, Wall Street, and mainstream technology. Stablecoins have become a standard tool for fintech companies, while asset tokenization is growing rapidly.
The team will explore frontier areas that remain underserved by existing investment efforts, continuing its approach of identifying investment opportunities in the second-order effects of technological advances.
Jack Dorsey's Bitcoin-Enabled Bitchat Tops France's App Store Social Chart
Jack Dorsey's decentralized messaging app Bitchat topped France's App Store Social Networking chart following nationwide protests and an Orange network outage on October 21. The app enables offline messaging via Bluetooth mesh networks, supports Nostr-based communication, and integrates Bitcoin-backed Cashu eCash payments.
Keystone said its latest investigation found that attackers obtained a WebAuth device-authentication key through the website breach, potentially allowing counterfeit hardware wallets to pass official authenticity checks. The company will destroy 18,835 unsold devices using the old key, pause unshipped orders and switch new production to a replacement key. The incident also affected 25,964 purchase records and 12,873 incomplete checkout records, while Keystone said seed phrases, private keys and transaction signing were not compromised.
Keystone Confirms Customer Data Exposure Following Unauthorized Website Access
Keystone Hardware Wallet confirmed that a third party obtained customer shipping and order information following unauthorized access to its official website. The incident was detected on October 20, with the data exposure confirmed on October 23 after reviewing API activity with Shopify. Exposed information included names, contact details, shipping addresses, purchased items, and prices. Payment card and bank details, recovery phrases, private keys, and wallet passwords were not exposed. Keystone said it has blocked the access, fixed the vulnerability, and is notifying affected customers. It also warned of impersonation scams involving fake refunds, replacement devices, or order fixes.
Galaxy: Bitcoin Bear Market Ended in June, Accumulation Phase Underway
Galaxy Research said Bitcoin’s bear market ended in June 2026 and the asset is now in an accumulation phase, with BTC closing above its 50-week moving average for five consecutive weeks. Monthly transfers from coins held for more than five years have fallen to about 34,000 BTC from 67,000 in 2024, suggesting reduced selling pressure from long-term holders. Galaxy said the bullish view would weaken if Bitcoin falls below its roughly $76,540 50-week moving average and fails to reclaim it within a month.
BitMine Buys 10,452 ETH and Repurchases 2.04M Shares in One Week
BitMine said it acquired 10,452 ETH over the past week, bringing total holdings to 6,051,933 ETH, or about 4.95% of Ethereum’s supply. The company also repurchased 2.04 million shares at an average price of $22.48; its 2026 buybacks now total 22.9 million shares, or about $399.6 million. BitMine has 5.23 million ETH staked and reported total crypto, cash, marketable securities and other investments of about $15 billion.