Cryptoccino — Wednesday 14 October 2026
☕ 9 min read
Today's Roast
Decaf morning · top move 0.5% (DOGE)
The Pour. Greed on the index, spy chips in the hardware drawer, and South Korea blocking half the exchange list — a productive Tuesday.
Today. Ledger confirms LTE implant in reseller units, $86M suspected drain Security Desk · Bitcoin pushes toward $84K after Fed’s Williams rules out 2027 rate hikes Markets · BNY and Citadel test tokenised Treasuries for Wall Street financing Projects & Money.
Prices
- BTC$83,729+0.5%
- ETH$2,512+0.0%
- BNB$744+0.1%
- SOL$108−0.1%
- XRP$1.37+0.5%
- DOGE$0.0848+0.5%
SECURITY DESK
Spy chip inside counterfeit Ledger units drained recovery phrases over LTE, with $86 million suspected lost.
decrypt theblock coindesk decrypt
What happened. Ledger confirmed that devices sold by the CryptoBilis reseller contained a rogue LTE-capable chip soldered into the hardware. During initial setup, the implant read the 24-word recovery phrase off the display and transmitted it externally, leaving Ledger’s Secure Element and firmware entirely untouched and offering no on-device signal of compromise. Suspected losses are around $86 million. MediaMarkt has suspended Ledger sales across Europe pending further investigation.
Why it matters. This is a supply-chain attack on the physical layer, bypassing every software security assumption the hardware wallet industry is built on. Self-custody’s core value proposition is intact only if the device itself is trustworthy, and this incident proves that reseller channels are now a credible attack surface at scale. Trezor has responded by announcing it will terminate all third-party reseller authorisations from 1 January 2027.
The catch. Devices purchased directly from Ledger’s own store are not implicated, but the CryptoBilis units were indistinguishable from genuine hardware to the naked eye. Operators and fund custodians sourcing hardware wallets through secondary or grey-market channels should treat any device not ordered directly from the manufacturer as potentially compromised and rotate seeds accordingly. The broader question of how this passed undetected across MediaMarkt’s European shelf stock for long enough to accumulate $86 million in losses is unanswered.

Bitcoin recovers toward $84,000 on Fed rate-hike reprieve. Fed Governor Williams told markets he sees no case for rate hikes in 2027, giving risk assets a tailwind after Bitcoin had whipsawed between $81,000 and $84,000 during the Asian session. The move came on the heels of a brief dip triggered by South Korean equities selling off on AI-related concerns, from which BTC decoupled relatively cleanly. Fidelity’s spot ETF absorbed $103 million in a single day mid-week, underlining that institutional bid remains present.
coindeskcryptobriefing
Tokenised SanDisk positions took heavier liquidations than XRP during Asia’s chip rout. As South Korean semiconductor stocks fell sharply on AI-demand concerns, tokenised equity exposure to SanDisk saw liquidations that exceeded those on XRP perps, highlighting how tokenised stock products now carry equity-market beta directly into crypto venues. Total liquidations across the chip-adjacent basket hit roughly $800 million. The episode illustrates both the maturation of tokenised equities and the new cross-market contagion channels they open.
coindesk
STX up 50% in four weeks as Bitcoin layer-2 narrative resurfaces. Stacks’ native token has staged a quiet 50% run over the past month, outpacing most large-cap alts during a period when the broader market has been choppy. The move tracks renewed developer activity on Stacks ahead of planned protocol upgrades, though on-chain volumes remain modest relative to the price action. The Fear and Greed Index sits at 62 with a seven-day delta of minus nine, a greed reading that is quietly fading — a caution flag for chasing momentum names at these levels.
coindesk
A 2020-vintage Bitcoin whale moved $378 million after holding through every major drawdown. A wallet that received 4,581 BTC in March 2020, when the position was worth roughly $40 million, moved the entire holding this week at a valuation near $378 million. On-chain analysts flagged the movement but destination addresses are not yet linked to known exchange hot wallets. Whether this is a custody migration or a staged distribution will become clearer once the coins move again.
coindeskdecrypt

BNY and Citadel Securities pilot tokenised US Treasuries as repo collateral. The two firms are testing whether tokenised Treasury positions can be used to settle and collateralise Wall Street financing transactions faster than current T+1 infrastructure allows. It is an incremental but structurally significant trial: if it clears compliance review and scales, it could compress intraday margin calls and reduce the overnight cash buffers desks are required to hold. Federated Hermes separately announced plans to launch its first onchain fund share class, adding another institutional name to the tokenisation queue.
coindeskcoindesk
Strive raises $500 million via preferred shares to stack more Bitcoin. The Nasdaq-listed asset manager is offering a new preferred share class to fund further BTC purchases, having already acquired 3,311 BTC for $280 million between 5 and 9 October at an average of roughly $84,500. That brings its total holding to 32,773 BTC, closing the gap with MARA. The raise structure mirrors MicroStrategy’s playbook of using equity instruments to lever up a Bitcoin treasury.
coindesktheblockdecrypt
Solana sets 21 October for Alpenglow, targeting 150-millisecond finality. The Alpenglow upgrade is Solana’s most significant consensus-layer change in recent memory, aiming to cut finality from its current multi-second window to 150 milliseconds. The date is confirmed for mainnet activation. If it ships cleanly, it materially strengthens Solana’s case for payment and high-frequency DeFi applications where latency is a genuine product constraint.
coindeskcryptobriefing
Binance shuts its mining pool and cloud mining services by 10 November. Binance Pool, Cloud Mining, and Pool Savings will all go dark in under a month as the exchange continues pruning non-core business lines. The mining pool launched six years ago and at its peak was a meaningful share of Bitcoin hashrate; its quiet wind-down marks the end of Binance’s ambitions as an integrated mining infrastructure provider. Hashrate is unlikely to disappear, but operators using Binance Pool will need to migrate before the deadline.
theblockdecrypt

Ledger CryptoBilis supply-chain implant — full write-up in the lead. See the lead story for the complete breakdown on the LTE chip implant, the $86 million suspected drain, and the reseller response from Trezor and MediaMarkt.
coindesk
Microsoft patches over 1,400 security vulnerabilities in a single update cycle. This month’s Patch Tuesday dwarfs September’s then-record of nearly 1,000 fixes and is roughly ten times the normal monthly load from Redmond. The volume alone signals either a significant backlog being cleared or a substantially expanded attack surface across Windows and related software. Operators running Windows infrastructure in Web3 contexts — RPC nodes, indexers, internal tooling — should prioritise patching this cycle.
krebsonsecurity
SEAL handled 81 incidents in the week of 6 to 13 October. The Security Alliance’s weekly radar published loss breakdowns by threat category and a fresh set of IOCs from last week’s incident set. No single dominant attack vector was flagged publicly, but the volume is consistent with the elevated pace seen since August.
seal_radar
UK trader reports ~$800,000 lost in a knife-point crypto extortion. The incident is part of a documented rise in physical attacks targeting self-custody holders, with France separately debating a proposal to require reporting of crypto holdings above €100,000. Critics of the French measure argue that mandatory disclosure creates precisely the wealth-targeting conditions that make these attacks possible. The tension between regulatory transparency and personal safety for large holders is sharpening.
coindeskdecrypt

South Korea blocks 27 unregistered crypto exchanges including KuCoin and BitMart. Seoul’s financial regulator moved to block access to 27 overseas platforms that had been operating without local registration, a sweep that includes some of the larger global venues. South Korean retail participation is historically significant for altcoin liquidity, so reduced access to offshore venues could suppress some price discovery in smaller tokens. The action follows months of regulatory tightening and arrives on the same day Korean equities fell on AI concerns.
coindesk
UK High Court rules Chinese law governs victims’ claims on 61,000 seized BTC. The ruling narrows the path for fraud victims to reclaim a share of the approximately $5 billion in Bitcoin seized from Zhimin Qian, applying Chinese rather than English law to their claims. The court did not decide ownership outright, but the legal framework it chose materially advantages the Crown’s position. The UK government is now closer to retaining the coins for public use.
theblockcoindeskdecrypt
Philippines central bank moves toward regulatory action against Coins.ph. The country’s largest crypto exchange faces potential licence action over alleged links to offshore gambling operations. A licence loss or suspension would leave millions of Filipino users without their primary onramp and remove a significant remittance corridor. No final decision has been issued, but the exchange is said to be in active dialogue with the Bangko Sentral.
coindeskcryptobriefing
Russia’s Sberbank cleared for crypto trading, targeting a December launch. Russia’s largest bank has received authorisation to trade Bitcoin, Ether, and Tether USDt, framing the move as a step toward sanctioned-economy financial infrastructure. Sberbank’s scale means the approval is not symbolic: it becomes one of the largest institutional participants in Russian crypto markets from day one. The December timeline gives regulators and counterparties a narrow window to establish settlement and compliance rails.
coindeskcointelegraph_regulation
What else is grinding?
- Blur, once the dominant Ethereum NFT marketplace, is shutting its website and halting new Blend loans next month after trading volumes fell 99% from their peak.
coindeskdecrypt - Coinbase published a detailed position paper on Bitcoin’s post-quantum migration, urging flexible signature upgrade designs and early preparation for fund migration before quantum timelines become urgent.
theblock - Polymarket is reported to be weighing a token launch against an equity path, with the community vocally favouring the former after a string of equity pivots by other crypto-native platforms.
bloomberg_cryptocryptobriefing - Starknet launched Shadow Accounts, a privacy feature designed to keep DeFi wallet activity unlinkable while remaining theoretically compatible with compliance requirements.
cryptobriefing - OpenAI is in talks to acquire Trail of Bits, the security firm that has audited Uniswap, Aave, and a significant portion of the DeFi stack.
cryptobriefingcryptobriefing - Interactive Brokers added ETH staking via Zerohash for eligible clients, a quiet but telling signal of how mainstream brokerages are expanding their crypto yield surface.
theblock
Last sip. The CryptoBilis implant compromised the hardware layer without touching the software, and nobody in the supply chain caught it until the losses were counted.