Robinhood reported Q3 2026 revenue of $1.424 billion, up 12% year-over-year and roughly in line with the $1.42 billion estimate, while diluted EPS of $0.51 missed the $0.56 estimate. Prediction-market event contract revenue rose more than sixfold to $173 million, while crypto transaction revenue fell 55% to $120 million.

Event contract revenue of $173 million exceeded crypto transaction revenue of $120 million in the quarter, a shift in the company's revenue mix away from spot crypto trading. Robinhood also lowered the upper end of its 2026 adjusted operating expense and stock-based compensation outlook to $2.75 billion from $2.775 billion, keeping the low end at $2.675 billion.

Crypto notional trading volume fell 38% to $50 billion, while event contracts traded rose more than sevenfold to 16.4 billion. Robinhood Chain recorded over $80 billion in DEX trading volume and more than $50 million in network fees in its first quarter on mainnet; net income fell 14% to $476 million and adjusted EBITDA rose 9% to $808 million, with EPS including $0.07 per share of unrealized losses primarily tied to Robinhood Ventures Fund I.

Keystone said Monday it will destroy 18,835 unsold hardware wallets and has suspended shipping of all unshipped website orders after an attacker obtained the permanent factory WebAuth key its devices use to prove they are genuine. The breach, detected October 20, also exposed 25,964 buyer records from Keystone's Shopify store covering 2024 to 2026, including names, contact details, shipping addresses and order information.

Because the stolen key is what Keystone's own verification page relies on, counterfeit devices could pass the authenticity check and be sold to users who load real savings onto them; Keystone said such devices could be used unknowingly as genuine products, "potentially resulting in asset theft." The company says recovery phrases and private keys were not involved and that devices delivered before October 20 are unaffected.

Keystone says 51,083 buyer records were involved in total, but 25,119 had already had personal information erased, leaving 25,964 records that still held data — a retention failure the company attributed to automated bulk-deletion tasks that failed without being detected in time against its 180-day erasure policy. Purchases through Amazon and other channels were not affected; website sales will switch to preorders until devices with a new key are produced, and Keystone says it has filed reports with authorities in the EU, UK and other jurisdictions while warning that anyone claiming to run a "recall" and asking users to ship back devices is a scammer.

Ransomware group Whitearmor claims to hold a database of 15,420,003 Gamdom customer accounts and is demanding $15 million in bitcoin to keep it from being published, according to a BlockBeats report on October 27. The group posted Gamdom's information on its leak site and released a roughly 437 KB JSON sample containing about 100 records as evidence, claiming it can access 146 data fields for each account.

If the claim is accurate, the exposure would cover a user base of more than 15 million accounts tied to a crypto gambling platform, according to the group's own assertion. The demand comes as Gamdom says it has not fully recovered from an earlier theft of millions of dollars from its hot wallet.

According to the report, the attackers allegedly gained access through an old internal machine account whose credentials were never rotated, leaving it with administrator privileges despite having been created long ago. The 15.4 million figure and the data sample come from Whitearmor's own claims and have not been independently verified.

Binance blocked multiple cyberattack attempts linked to North Korea targeting its platform, with no asset losses reported, according to Hokanews.

Major exchanges remain a primary target for North Korea-linked intrusion campaigns, and the reported outcome here was disruption of the attempts rather than loss of customer funds.

The report attributes the attempts to North Korea-linked actors and states that no assets were lost.

Ripple has expanded its strategic partnership with the Bank of New York Mellon (BNY) to broaden institutional digital asset custody capabilities and to explore new institutional use cases for blockchain technology, including tokenized trade finance. The collaboration combines Ripple's digital asset solutions and the public XRP Ledger with BNY's scale, service model and digital capabilities.

The arrangement pairs a major custodian bank with a public blockchain network, extending institutional digital asset custody and moving tokenized trade finance toward commercial testing. BNY's own commentary describes tokenized trade finance as edging closer to commercial reality as legal frameworks and blockchain innovation develop.

Ripple and BNY said they intend to advance tokenized trade finance on the XRPL, subject to client requirements. Tokenized trade finance digitally represents existing trade finance assets such as receivables, which can broaden investor access and simplify how those assets are managed and distributed.

Janus Henderson announced it will launch JQQQ, billed as the first licensed tokenized fund tracking the Nasdaq 100, built with Centrifuge's tokenization infrastructure and deployed on the Stellar blockchain, according to a Wall Street Journal report. The fund will initially be open to eligible professional investors outside the United States, with a minimum investment of $100,000.

The launch extends Janus Henderson's onchain products beyond US Treasurys and structured credit into equity-index exposure; the asset manager said its institutional onchain strategies now exceed $1 billion.

JQQQ is structured as a segregated portfolio of a British Virgin Islands investment company and provides indirect exposure to the Nasdaq 100 rather than ownership of the underlying stocks. The fund operates under a licensing agreement with Nasdaq.

Anthropic published a detailed account of how its Claude models were used to discover and exploit vulnerabilities in critical, widely deployed real-world software. The write-up presents the results as evidence of both the defensive potential of AI security tooling and the dual-use risk it carries.

A leading AI lab publicly documenting concrete offensive-capability results with its own model gives security teams and policymakers a reference point for how AI is compressing the interval between vulnerability discovery and exploitation — a shift Google's threat intelligence group has also flagged.

The disclosure covers critical, widely deployed software rather than isolated test targets, and Anthropic frames the work explicitly around dual-use risk. The material is a research and safety write-up, not a product release.

The crypto industry has spent roughly $176 million across more than 100 US midterm races this cycle to back friendly candidates, Reuters reported, with the Fairshake super PAC — supported by Coinbase, Ripple and a16z — leading the effort. Of the 58 primary or special election candidates Fairshake backed, 53 advanced, according to the report.

The spending is described as part of a multi-year plan to build a bipartisan bloc of congressional allies so the industry can keep advancing its priorities in Washington after Trump leaves office.

The strategy focuses on candidates judged to have strong odds of winning, with affiliated PACs running advertisements that often do not mention crypto directly. Reuters framed the effort as preparation for a post-Trump policy environment rather than a single-election push.

The US Commodity Futures Trading Commission filed suit in the US District Court for the District of Utah against the State of Utah and Attorney General Derek Brown, seeking to block state enforcement against prediction-market operators. The Monday filing came a week after Utah announced legal action against Kalshi and its affiliates to recover up to $60 million in profits it alleges were obtained illegally.

The suit directly contests whether a state may apply its gambling laws to platforms the CFTC has authorized, and a Kalshi spokesperson, Jacki McGavick, said no single state should have a veto over a national derivatives market overseen by the CFTC. The CFTC argues that Utah's action intrudes on what it calls Congress's exclusive federal scheme for commodity derivatives.

The CFTC's complaint states that the event contracts targeted by Utah are "swaps" under the Commodity Exchange Act and that the exchanges offering them are CFTC-regulated Designated Contract Markets. It argues Utah's efforts to stop a CFTC-regulated DCM from offering CFTC-approved products bypass congressional intent to federally preempt state law.

Anchorage Digital expanded its custody-and-listing arrangement with Bitso, announced Tuesday, so that Anchorage Digital Bank now custodies MXNB — Bitso's Mexican peso stablecoin — across six blockchains: Arbitrum, Base, Ethereum, Polygon, Avalanche and Arc. Bitso, in turn, has listed USDPT and USAT, the U.S. dollar stablecoins from Western Union and Tether that Anchorage issues and custodies. Financial terms were not disclosed.

The arrangement places a federally chartered crypto bank beneath both ends of a remittance route that moves tens of billions of dollars a year, with roughly 15% already running through Bitso's infrastructure. Anchorage CEO Nathan McCauley said the corridor is "where stablecoins stop being a thesis and start moving real money at scale."

Bitso's head of stablecoin Ben Reid said clients can now access the full dollar-peso corridor fully onchain, backed by a federally chartered bank. Much of the corridor's volume still moves through correspondent banking, wire transfers and cash-pickup networks.

Lightning developers tightened BOLT11, the Lightning Network's invoice standard, on Oct. 19, requiring software to reject invoices with ambiguous, missing or repeated payment-hash and payment-secret fields. The change follows a developer's account of an attack that made completed Bitcoin withdrawals appear unpaid.

Invoices with ambiguous payment-hash or payment-secret fields could let a completed payment be presented as unpaid, so requiring implementations to reject them removes that ambiguity at the protocol-standard level.

The change was merged into BOLT11, the invoice specification that Lightning wallets and nodes use to encode payment requests including the destination, amount, payment hash and expiry. The reported incident was described in a developer's account and has not been confirmed as a large-scale exploit.