U.S. spot Bitcoin ETFs recorded net outflows of $643.2 million yesterday.

Liquid staking protocol Kintsu, built on the Monad blockchain, announced that its official website kintsu.xyz has been restored to normal and is now pointing to the project’s official infrastructure. However, as DNS caches have not fully refreshed, some networks may still access a malicious site within the next hour. The team reminded users to avoid accessing kintsu.xyz and connecting their wallets until the project issues an official security confirmation notice. Earlier, security firm Blockaid warned that its system had detected an ongoing front-end attack linked to the StepDrainer toolset, targeting three websites: kintsu, flap, and stonkbrokers. Blockaid noted that the affected sites had been injected with malicious scripts; users who clicked "Connect Wallet" could be redirected to a malicious asset theft page. The firm advised users to temporarily avoid using the decentralized applications in question, adding that it is investigating the attack, gathering additional information, and will release further updates.

According to Lookonchain monitoring, a newly created wallet address (0x1c75) withdrew 1.15 million LIT (valued at ~$3.31 million), 7.995 million ENA (~$1.51 million), and 7.31 million ARB (~$1.18 million) from OKX.

A newly created wallet (0x1c75) withdrew 1.15M $LIT($3.31M), 7.995M $ENA($1.51M) and 7.31M $ARB($1.18M) from #OKX.

Crypto trader Ansem has published a post sharing risk management insights for short-term trading, noting that traders should not only focus on price and stop-loss levels—time is also a critical factor in judging whether a trade is valid. Ansem said that when he enters a position, he expects the market to quickly show clear volatility; if Bitcoin stays near his entry price for a long time and does not move in the expected direction, he will start re-evaluating his trading logic. Sometimes even if his stop-loss level hasn’t been triggered, he will exit early because the market has failed to move as expected. He believes one of the advantages of short-cycle trading is the ability to identify earlier whether a trading strategy is working. To decide whether a trade is worth holding, one must consider not only price movements but also the time it takes for the market to deliver on expectations.

According to monitoring by AI Aunt, the address 0xaea…c2416 previously shorted 9,700 ETH using 25x leverage, with a position value of roughly $22.46 million and an average entry price of $2,311.92. The address opened the short position on October 27, and closed it during ETH’s rebound following a pullback at 18:33 yesterday, with an average exit price of $2,239.5, netting around $692,000 in profit over five days. While holding the position, the short once saw an unrealized profit of $1.337 million. The account’s cumulative profit has now risen to $7.57 million, partially recouping the $916,000 it lost when shorting BTC in mid-October.

Privacy blockchain project Iron Fish announced it will formally end all remaining support for the Iron Fish network later today, and archive its code repository after fixing the underlying vulnerability. The team said it previously detected abnormal activity involving the wIRON token and ChainPort cross-chain bridge. After collaborating with ChainPort to review logs, the issue was confirmed to stem from an inflation vulnerability in the Iron Fish blockchain itself, with its root cause traced to a code commit in the Merkle Tree implementation from early 2019. A flaw in the nullifier calculation mechanism for transaction notes allowed attackers to double-spend the same asset, then aggregate the related assets and transfer funds out via the ChainPort cross-chain bridge. The team added that this code path had been subject to both internal and external audits, yet the vulnerability remained undetected. Iron Fish has now submitted a vulnerability fix patch and attached a detailed post-mortem analysis report in the relevant pull request (PR), and will subsequently close and archive its code repository. The project also warned that most crypto networks cannot upgrade their code immediately, and are facing growing security risks. As the ability to discover and exploit complex code vulnerabilities becomes more widespread, the security protection pressure on blockchain projects is rising.