Cryptoccino An espresso cup on a saucer with a folded newspaper, beside the Cryptoccino wordmark and tagline. Cryptoccino YOUR DAILY SHOT OF CRYPTO NEWS
Theme

Cryptoccino — Saturday 10 October 2026

☕ 8 min read

Today's Roast

Decaf morning · top move 1.5% (DOGE)

The Pour. Supply-chain hardware, a decade-old ledger bug, and a $1 billion Iran seizure: a quiet Friday this is not.

Today. Ledger investigates $86M+ in user funds drained via tampered hardware from reseller CryptoBilis Security Desk · XRP Ledger silently patched a decade-old bug that could have conjured billions in XRP from nothing Security Desk · Bitcoin steadies near $82,500 as Uptober turns sour and traders price in more downside Markets.

Prices

  • BTC$82,607+0.3%
  • ETH$2,492+0.0%
  • BNB$745+0.5%
  • SOL$110−0.6%
  • XRP$1.40+0.7%
  • DOGE$0.0862+1.5%

SECURITY DESK

Ledger’s Hardware Supply Chain Burns $86 Million as Tampered Reseller Devices Hit Southeast Asia

coindesk theblock decrypt bloomberg_crypto cryptobriefing

Fear & Greed64/100Greed −3 / 7d

What happened. Ledger is investigating reports that users who purchased its hardware wallets through Southeast Asian reseller CryptoBilis have lost funds totalling more than $86 million. Ledger has asked CryptoBilis to halt sales and warned recent buyers not to initialise their devices. An onchain investigator corroborated the scale of suspected thefts, and stolen funds are already moving from USDT to USDD to sidestep Tether freeze mechanisms.

Why it matters. Hardware wallet supply-chain attacks are rare but catastrophic when they occur, because victims have reasonable grounds to believe their keys never touched an internet-connected device. If devices were pre-seeded with compromised seed phrases or backdoored firmware at the reseller level, it undermines the foundational security promise of cold storage. The incident lands as broader sentiment sits at a 64 Greed reading, masking real structural risk accumulating at the custody layer.

The catch. Ledger has not yet confirmed the attack vector: tampered firmware, pre-generated seed phrases included in packaging, or something else entirely. Until the investigation concludes, affected users face a difficult position, as moving funds to software wallets generated on potentially compromised devices may compound rather than fix the exposure. Anyone who bought a Ledger product through a third-party reseller in the region should treat the device as untrusted and generate fresh keys on independently verified hardware.

Markets

Bitcoin steadies near $82,500 as Uptober narrative fractures. BTC bounced after briefly touching $80,000 earlier in the week, supported in part by Trump’s public statement ruling out an Iran strike before the midterms, which cooled geopolitical risk premium. Derivatives positioning tells a different story: traders are paying up for downside protection and marking growing odds of a further leg lower before month-end. coindesk decrypt

STRK surges 20% on Starknet’s L1 pivot proposal. Starknet announced it is actively considering detaching from Ethereum to operate as an independent L1, positioning the move as a path to becoming the first fully quantum-resistant network by 2027. The token printed a sharp 20% rally on the news, though the proposal remains at the consideration stage with no timeline confirmed. decrypt cryptobriefing

Hyperliquid crosses $1 billion in cumulative revenue with equal buyback spend. The perps DEX has now returned $1 billion to HYPE holders through buybacks, matching its total revenue figure, an unusually direct pass-through for a DeFi protocol. The milestone arrives while broader altcoin markets are under pressure, making it a relative standout on fundamentals. cryptobriefing

MARA shifts $81 million in bitcoin to Galaxy Digital as it pivots toward AI infrastructure. The miner transferred roughly 981 BTC to Galaxy Digital, a move framed as part of a broader strategy reorientation away from pure-play bitcoin accumulation toward AI compute. It is an early data point in what may become a wider trend of miners redeploying treasury assets as hashprice compresses. coindesk

Projects & Money

New bitcoin lending protocol launches with $500 million in day-one commitments. A new technical stack purpose-built for bitcoin-native lending is set to go live with half a billion dollars in committed capital, aiming to unlock yield on BTC without wrapping or bridging. Details on the counterparty structure and collateral mechanics are expected at launch. coindesk

Meanwhile raises $37.5 million for bitcoin life insurance, total funding passes $180 million. Bain Capital Crypto led the round for the Sam Altman-backed insurer, which underwrites life policies denominated and paid out in bitcoin. The raise continues a quiet trend of bitcoin-native financial products targeting wealth-preservation use cases outside traditional fiat rails. coindesk theblock

DWF Labs subsidiaries file $141 million suit against BitGo in London’s High Court. The claim alleges BitGo sold discounted Falcon Finance and ESPORTS tokens roughly two months before their contractual lock-up expired, collapsing the market value of the remaining holdings. The case puts custodian conduct around token lock-up agreements under judicial scrutiny for the first time at this scale. coindesk decrypt

Solana’s 200-millisecond block time upgrade is imminent. The final phase of Solana’s block-time reduction is approaching, which will halve current latency and push the network closer to real-time settlement. For high-frequency DeFi and order-book DEXs built on Solana, the throughput implications are material. coindesk

Security Desk

XRP Ledger quietly patched a decade-old inflation bug. A vulnerability sitting in XRP Ledger code for roughly ten years could have allowed an attacker to mint arbitrary quantities of XRP, potentially worth billions at current prices. The patch was applied without public fanfare, a disclosure approach that will itself draw scrutiny. No exploitation appears to have occurred. coindesk

FBI arrests co-founder of ransomware negotiation firm. Canadian authorities, working with the FBI, arrested a co-founder of a cybersecurity firm linked to the ShinyHunters group, which had previously exfiltrated sensitive FBI agent data. The firm operated nominally as a ransomware negotiation service, raising questions about the line between intermediary and enabler. krebsonsecurity

THORChain exec alleges Tether froze and unfroze USDT vaults without explanation. Technical co-founder Chad Barraford said Tether briefly froze USDT addresses on THORChain before lifting the action with no public statement. The episode, coming alongside the Ledger theft funds routing through USDD to avoid Tether blacklists, puts Tether’s freeze authority under renewed operational scrutiny. cointelegraph_defi

IRS self-custody fork-tax case reaches the US Tax Court. In a little-noticed filing, the IRS is arguing that a bitcoin holder owes income tax on assets created by forks he never accessed and was unaware of until an audit. The Tax Court’s ruling will set precedent on whether passive receipt of forked assets constitutes taxable income for self-custody holders. coincenter

On the Hill

Treasury targets $1 billion in Iran-linked crypto seizures this week. Secretary Bessent said the US government knows the location of roughly $1 billion in digital assets tied to Iranian sanctions evasion and expects to seize them imminently. The move follows months of incremental freezes and signals an escalation in crypto-specific sanctions enforcement. cointelegraph_regulation theblock

CFTC proposes folding prediction market event contracts into the swaps framework. The rulemaking would bring platforms like Kalshi and Polymarket’s US operations under CFTC swaps oversight rather than the lighter-touch DCM regime they currently operate under, a significant jurisdictional expansion. Blockchain.com filed separately for DCM and FCM licences, betting the opposite direction, that regulated event contracts can still be a workable business. coindesk cointelegraph_regulation decrypt

New York AG locks in up to $35 million and a lifetime industry ban from Alex Mashinsky. The settlement requires the former Celsius CEO to pay $25 million if he fails to separately forfeit $10 million, with an additional $10 million owed if he does not serve his full criminal sentence. The lifetime ban from securities and crypto industries is the most consequential structural element for anyone tracking post-collapse accountability. coindesk theblock decrypt

What else is grinding?

  • Thailand’s SEC finalised bitcoin and ether ETF rules taking effect 16 October, limiting initial products to those two assets with new custody and exposure requirements. theblock coindesk
  • French lawmakers backed a stablecoin swap tax in the 2027 budget bill, alongside an exit levy on unrealised crypto gains for households with assets above €800,000 that move abroad. cointelegraph_regulation
  • Zcash developers set a January target for quantum-resistant payment capability after an internal ‘bunker mode’ scare prompted an accelerated roadmap. coindesk
  • Robinhood Chain is exploring priority ordering for paying traders, a design choice that would formally encode MEV-style queue access into the protocol. coindesk
  • A dormant Ethereum address holding 12,746 ETH moved for the first time in over ten years, reviving the usual speculation about whether long-term holders are rotating out. cryptobriefing
  • DOJ is actively reviewing whether Binance is honouring the compliance obligations from its 2023 guilty plea and settlement, with no enforcement action announced yet. cryptobriefing

Last sip. Ledger still does not know how the devices were compromised, and neither do the buyers who may be sitting on them right now.