The U.S. Department of Justice is reviewing whether Binance breached the 2023 settlement that resolved federal charges against the exchange, as part of an investigation into potential Iran sanctions violations, Bloomberg reported. Federal prosecutors sought to seize $61 million allegedly linked to Iranian oil sales and laundered through Binance.

The review could, if a violation is found, expose Binance to renewed criminal prosecution and billions of dollars in additional penalties, according to the report.

No wrongdoing has been alleged against Binance or its employees in the current probe, which remains an investigation rather than a filed action or decision. Binance said it continues to strengthen compliance controls and cooperate with law enforcement.

Coinbase is reportedly set to delist several stablecoins, including Tether's USDT and MakerDAO's DAI, for users in the European Union, with an October 30 deadline cited for the change.

If carried out, EU-based Coinbase users would no longer be able to trade or hold those stablecoins on the exchange, narrowing the set of stable assets available in the region and pushing users toward alternatives that meet EU requirements.

The reported removals cover USDT and DAI; USDT is the largest stablecoin, with over $187 billion in circulation and roughly 64% of the global stablecoin market, according to CoinDesk.

Evernorth Holdings announced on October 10 that it has completed its business combination with special purpose acquisition company Armada Acquisition Corp. II, and its common stock is expected to begin trading on Nasdaq under the ticker XRPN on October 12. At closing, Evernorth holds roughly 473 million XRP and has raised about $300 million in gross cash proceeds, before transaction fees.

The deal creates a Nasdaq-listed, actively managed XRP treasury vehicle backed by Ripple, SBI Group, Pantera Capital, Kraken and GSR, giving public-market investors a listed equity route to XRP exposure that differs from an ETF structure.

Evernorth is backed by Arrington XRP Capital and other investors, with SBI Group, Ripple, Pantera Capital, Kraken and GSR also among its investors. The company positions itself as an actively managed XRP treasury and plans to deploy capital into the XRP ecosystem — institutional-grade onchain finance, tokenized assets, onchain credit and settlement infrastructure — aiming to raise XRP held per share over the long term through institutional and DeFi yield strategies, ecosystem building and capital markets activity.

Solana activated 200-millisecond slots on mainnet, halving its original 400-millisecond block-production target and raising block-production opportunities to five per second instead of 2.5. Anza, the developer behind the Agave validator client, confirmed the SIMD-0525 upgrade, which also shortens a network epoch to about 24 hours from 48 hours.

Shorter intervals could improve transaction responsiveness for applications on Solana, particularly decentralized trading platforms and market makers that depend on rapid price and order updates. The upgrade does not automatically double transactional capacity, because the computational budget available within each slot was proportionally reduced.

Under SIMD-0525, each validator's nominal four-slot block-production window fell to 800 milliseconds from 1.6 seconds, and transaction blockhashes now expire in roughly 30 seconds instead of 60. CryptoSlate's sampling of Solana's public mainnet RPC showed an average of about 222 milliseconds across 1,413 slots after activation, compared with roughly 268 milliseconds under the previous 250ms target.

Coinbase has secured registration with the U.S. Commodity Futures Trading Commission (CFTC) as a derivatives clearing organization, allowing it to clear U.S. derivatives trades. The registration was issued under Section 5b of the Commodity Exchange Act, following review of the company's application.

The registration lets Coinbase clear its own derivatives trades rather than relying on a third-party clearinghouse, adding a clearing layer to its U.S.-regulated derivatives business. According to reporting on the approval, the CFTC limited the registration to fully collateralized futures, options on futures and swaps, so leveraged products are not covered.

Coinbase Derivatives describes itself as a crypto-centric futures exchange offering products across a range of asset classes and contract sizes. The CFTC registration covers derivatives clearing under Section 5b of the Commodity Exchange Act.

A security researcher published a write-up detailing a Telegram Desktop vulnerability that chains an arbitrary file read into a one-click account takeover, by exfiltrating local files such as SSH private keys, browser credential stores, and cloud/API tokens. The primitive stays the same throughout — arbitrary file read — while the target of the read changes.

The flaw affects the desktop client of a messenger used by roughly a billion people, and a client-side chain requiring a single click can turn locally stored credentials into account takeover. No confirmed large-scale theft tied to this disclosure has been reported.

Coverage of the disclosure notes that Telegram Desktop can already be running when a user clicks a Telegram link, with the chain involving inter-process communication and the tg:// URL scheme. A provided proof of concept demonstrates file theft through Telegram itself, and stolen session files could let an attacker reuse the victim's logged-in account.

According to a CoinMarketCap explainer, Raydium's RAY token saw sharp price swings that the report attributes to a new Coinbase listing combined with fresh SEC guidance affecting the token's market access and trading backdrop. The item is presented as a volatility explainer rather than as a primary exchange or regulatory announcement.

The report links RAY's price swings to a listing on a top-tier US exchange, which would widen the venues through which the token can be traded, alongside SEC guidance that the article says shapes its market access.

The piece is framed as an explainer of volatility rather than a first-party announcement of the listing or the guidance. CoinGecko data cited in search results put Raydium's market capitalization near $540 million, ranked around 111th among tokens.

Security researcher Cyber Scrilla uncovered a fraudulent Ledger phishing website and application that ranked at the top of Google Search, according to Bitcoin News, with Google showing more than 1 million visits to the site over the past 30 days. The page is designed to trick users into submitting their 24-word recovery phrase.

Ledger warns that attackers are able to closely imitate its website, content and applications to lure users into entering their 24-word recovery phrase, which controls a self-custody wallet. The campaign surfaces alongside a separate ongoing investigation into an estimated $86 million in wallet thefts tied to a Southeast Asian reseller.

The alert follows a September investigation by cybersecurity firm Zscaler that uncovered malicious Google ads impersonating Ledger and redirecting users to fake wallet-verification pages. No confirmed losses from this specific phishing campaign were reported in the source.

On-chain data shows SkyAI, a holder of more than 2 million SOL (about $220 million), transferred 568,000 SOL (~$63.87 million) to exchanges over the past three days. With an average purchase price of roughly $194, the transfers imply an unrealized loss of about $46 million if the tokens were sold.

The size of the flow places a large single-holder supply overhang in view of SOL traders, although the selling itself is inferred from exchange inflows rather than confirmed by the entity.

The observation covers three days of transfers totaling 568,000 SOL, against a stated average entry of about $194; the loss figure is an estimate based on that cost basis and would only be realized if the tokens are sold.

DistroKid has confirmed to The Verge that it is removing artists' songs in direct response to claims made by Universal Music Group, which sued the distributor in September. Affected musicians say their tracks were taken down without notice.

The removals show a pending copyright lawsuit translating directly into catalog takedowns for independent artists, before any court ruling. Artists whose releases have already been distributed are the ones absorbing the immediate impact.

UMG's September suit accuses DistroKid of running an "AI-slop pipeline" and of allowing unlicensed remixes of UMG tracks onto streaming services; DistroKid has denied the claims and said it would defend itself. The takedowns, per the company, are a response to those claims rather than the result of a court order.

AMI Labs, founded by Yann LeCun, together with several universities released H-JEPA, a hierarchical world model in which higher levels predict longer-horizon goals and lower levels refine them into concrete actions, with each level learning its own environment features. The paper, code and pretrained weights have all been made public; on the Visual AntMaze simulated maze, a three-level H-JEPA reached 73.3% success versus 18.0% for the single-layer LeWorldModel baseline, while requiring less planning compute.

The release turns a blueprint LeCun proposed in 2022 into an end-to-end trainable implementation, and the reported Visual AntMaze result is substantially higher than the single-layer baseline at lower planning compute. Unlike the earlier HWM approach that kept all levels in a shared latent space, H-JEPA lets each level learn its own features.

More planning levels is not always better: in the simulated Push-T object-pushing task, the three-level model underperformed a two-level model. The team also ran offline tests on DROID, a real-robot video dataset, where predicted action trajectories were closer to expert demonstrations than those of the single-layer model.