TL;DR: The Hong Kong Monetary Authority and the Hong Kong University of Science and Technology announced a post-quantum cryptography assessment toolkit on November 2. Post-quantum migration is not the same thing as making every blockchain or bank system instantly quantum-secure. Good security planning is often unglamorous. Discovering where keys are issued, which partners rely on…
TL;DR: The New York Stock Exchange said on November 2 that Broadridge, Computershare, Equiniti and Superstate had joined the network supporting its proposed tokenized securities venue. There is a major distinction between an issuer-sponsored tokenized security and a synthetic token that tracks a stock price without representing an actual company share. Broadridge separately described plans…
TL;DR: BTCPay Server’s 2.4.7 release published in late October includes security fixes following a broad review of reported issues. Disclosure of a serious issue is not proof that it has been exploited in the wild. The appeal of self-hosting is genuine control over funds and infrastructure. The hidden cost is that responsibility cannot be outsourced…
TL;DR: The FBI said on October 31 that North Korean actors associated with the TraderTraitor operation were responsible for the theft of more than $6 billion from Binance. Attribution remains the FBI’s stated finding, and the full investigative record is not public. This is a reminder that incident response extends well beyond technical containment. Security…
TL;DR: Binance said on November 2 that it had completed a zero-knowledge proof-of-reserves procedure for a snapshot taken October 31, following the exchange’s late-October security incident. Proof of reserves should not be described as a full financial audit, a guarantee against losses or evidence that all stolen assets have been returned. In the aftermath of…
TL;DR: Binance’s November 3 security-recovery notice set out a wider withdrawal restart for additional tokens and networks beginning around 04:00 UTC. Binance’s announcement is a company statement, not an independent certification that all systems are secure. The subtle point is that a route reopening is a narrow, testable milestone. It is stronger than a vague…
A final stablecoin rule has not ended the argument over rewards. The Bank Policy Institute used its October 24 newsletter to renew criticism of how the Office of the Comptroller of the Currency will judge arrangements that pay stablecoin holders through third parties. TL;DR BPI says case-by-case decisions leave stablecoin reward arrangements unclear. The dispute…
TL;DR: The FCA is consulting on updated financial crime guidance for crypto businesses, including customer checks, blockchain analytics and the Travel Rule. Responses are due December 24, and the guide itself would not create new rules. Crypto businesses preparing for the UK’s expanded regulatory regime have a more detailed picture of the controls the Financial…
TL;DR: New York’s attorney general is seeking $1.3 billion in monetary relief in the NovaTech case and has announced nearly $6 million in promoter settlements. The larger sum is a request to the court, not money recovered for investors. New York’s effort to recover losses from the NovaTech cryptocurrency scheme has reached a new stage,…
TL;DR: The SEC has named tokenization among its fiscal 2027 examination priorities, bringing the systems behind blockchain securities into closer supervisory focus. The staff document sets inspection priorities and creates no new legal obligations. The SEC’s tokenization agenda now includes a practical question for financial firms: can the infrastructure work reliably when something goes wrong?…