UpGate

Category: Uncategorized

  • Russell 2000 Reaches Record High; Historical Data Suggests Potential for Ethereum Rallies Amidst Uncertainty

    Russell 2000 Reaches Record High; Historical Data Suggests Potential for Ethereum Rallies Amidst Uncertainty

    The Russell 2000 index, a benchmark for smaller U.S. companies often considered sensitive to market risk, has recently surpassed its previous all-time high, reaching over 3,050 in the past few weeks. Historically, instances where the Russell 2000 achieved new highs, such as in 2016 and 2020, have been followed by significant upward price movements in Ethereum within the subsequent 6 to 12 months. However, it remains uncertain whether this pattern will repeat, and the exact timing and magnitude of any potential future Ethereum rally are subjects of speculation.

    The Russell 2000’s surge is interpreted by some as a sign that investors are becoming more comfortable allocating capital to smaller companies, indicating an improvement in risk appetite and liquidity conditions. Ethereum, with its ecosystem heavily involved in speculative activities, decentralized finance (DeFi), and tokenization, tends to expand during such ‘risk-on’ periods, aligning with the broader market sentiment reflected in the Russell 2000’s performance.

    Currently, Ethereum is trading above its local low of $1,520, having seen a gain of over 20%. However, the cryptocurrency has faced resistance below the $1,900 mark, experiencing a decrease of approximately $100 from its July peak near $2,000.

    Analysts at Milk Road previously described the correlation between the Russell 2000 and Ethereum as notable, suggesting that both tend to benefit when monetary policy turns easier. Ash Crypto also recently spoke about the potential for a similar surge for Ethereum, echoing sentiments from Crypto Rover. Michaël van de Poppe commented recently that while the perfect moment to buy an asset like ETH never comes, the ideal time to accumulate it is now. These perspectives should be viewed within the context of the uncertainties surrounding the market.

    Previous breakouts in the market have resulted in significant returns for Ethereum, known for its volatile movements. In 2023, a notable breakout saw ETH gain 60% in less than a week. The current situation presents a signal based on historical observation rather than a definitive prediction. The Russell 2000’s performance is a factor that may influence Ethereum’s trajectory, but it does not suggest future outcomes.

    Why This Matters

    The materials describe a narrow update: The Russell 2000 index, a benchmark for smaller US companies and considered risk-sensitive, has surpassed its previous record high. Whether the pattern of the Russell 2000’s breakout preceding an ETH rally will repeat again.

    Broader Context

    Source materials place the factual news in this context: The Russell 2000 is generally viewed as one of Wall Street’s more risk-sensitive equity benchmarks.

  • Morgan Stanley Reports XRP ETF Exposure Amidst Price Declines and Market Signals

    Morgan Stanley Reports XRP ETF Exposure Amidst Price Declines and Market Signals

    Morgan Stanley’s filings for the second quarter of 2026 reveal the financial institution holds exposure to XRP through several exchange-traded funds (ETFs). This disclosure occurs as XRP faces significant price depreciation and exhibits indicators in the derivatives market.

    According to the filings, Morgan Stanley’s XRP-linked ETF positions include holdings in the Franklin, REX-Osprey, and Bitwise ETFs. The largest of these positions was in the Franklin fund, with 6,715 shares. The filing also reported 255 shares of the REX-Osprey ETF and 67 shares of the Bitwise ETF. Additionally, the filing noted a position in Armada Acquisition Corp II, the SPAC partner of Ripple-backed Evernorth Holdings.

    Institutional participation, even through indirect means like ETFs, suggests a continued, albeit cautious, interest in XRP from certain financial entities. However, the broader market picture for XRP appears less encouraging.

    Market Performance and Derivatives Data

    XRP has shed more than 10% of its value over the past week, contributing to yearly losses that are approaching 70%. This downward pressure highlights the challenges the cryptocurrency has faced. Analysis of XRP’s derivatives market reveals further signs of sentiment. The Taker Buy/Sell Ratio is currently around 0.86, its lowest level since May of the previous year. As reported by CryptoPotato, this ratio remaining below 1 indicates that sellers have generally been more aggressive than buyers in the derivatives market, suggesting a lack of strong buying momentum.

    Futures open interest for XRP remains elevated at 435.1 million units, above the 30-day average of 403.6 million units. This is further underscored by a Z-score of +1.20 sigma, a metric that suggests leverage is still significantly present in the market. Elevated leverage, combined with a downward price trend, can increase the risk of a liquidation cascade if the price experiences further declines, according to the article.

    Analyst Outlook and Potential Scenarios

    Analyst commentary offers potential scenarios for XRP’s future price action, though these are presented with inherent uncertainty. ChartNerd highlighted $1.24 as a key level for XRP to reclaim. If this level is not regained, the analyst identified a potential accumulation zone between $0.90 and $0.70. Additionally, the analyst anticipates a retest of the 3-month 40 Exponential Moving Average (EMA) as a factor that could help XRP form a stronger base, noting that similar market setups have occurred in 2023 and 2024.

    Conclusion

    Despite the signals from derivatives data and the ongoing price struggles, the disclosure of institutional exposure through ETFs by a firm like Morgan Stanley provides a point of interest. However, the prevailing market conditions and analyst commentary suggest a period of uncertainty for XRP, with potential for both further downside and eventual recovery, depending on market dynamics and the asset’s ability to reclaim key price levels.

    Why This Matters

    Morgan Stanley’s Q2 2026 filing indicates indirect institutional interest in XRP through ETFs, occurring alongside significant price declines and bearish derivatives signals. This highlights the ongoing tension between institutional participation and market sentiment for XRP, underscoring the uncertainty surrounding its future price trajectory.

    Broader Context

    Morgan Stanley’s disclosure of XRP exposure through exchange-traded funds in its Q2 2026 filing places the event within the context of XRP’s price struggles and the broader market’s reaction to such institutional involvement.

  • Bitcoin Market Bottom Predictions: Historical Cycles vs. Evolving Market Realities

    Bitcoin Market Bottom Predictions: Historical Cycles vs. Evolving Market Realities

    Predicting Bitcoin’s next market bottom is a complex task, heavily reliant on historical cycle data but significantly complicated by the evolving nature of the cryptocurrency market. While past patterns offer a framework for analysis, current macroeconomic conditions and market structures introduce substantial uncertainty, tempering the reliability of precise date predictions.

    Historical Cycle Patterns: A Foundation for Prediction
    Historically, Bitcoin’s market cycles have exhibited a degree of consistency. According to analysis of past performance, bull markets have tended to last approximately 1,064 days, followed by bear markets that require around 364 days to find their bottom. This pattern has been observed across several cycles:

    • The period from the 2015 bottom to the 2017 peak lasted 1,064 days.
    • The subsequent bear market bottomed in December 2018 after 364 days.
    • The cycle from the 2018 bottom to the November 2021 peak spanned 1,064 days.
    • The bear market following the 2021 peak culminated in the 2022 low after approximately 364 days.
    • The most recent bull cycle, projected to have begun in late 2022, is estimated to last around 1,064 days, potentially concluding in October 2025.

    Analyst Predictions: Applying the Pattern
    Applying these historical durations to the current cycle suggests a potential bottoming window. If the 364-day bear market pattern holds, and considering Bitcoin’s projected cycle end in October 2025, the next market bottom could occur between October 4 and October 17, 2026. This aligns with predictions made by analysts such as Rekt Fencer, who, based on this historical data, tweeted on August 13, 2026, that there were 53 days remaining until the market slumber ends, implying a bottoming date around October 5, 2026. Ali Martinez has also outlined a similar possibility, suggesting a window between October 6 and October 16, 2026.

    Divergent Market Conditions: The Case for Uncertainty
    However, the current cryptocurrency landscape presents significant deviations from the conditions under which previous cycles developed. Factors such as the introduction of spot Bitcoin ETFs, a substantial increase in institutional holdings and corporate treasuries, a different regulatory environment, and greater integration with traditional finance (TradFi) introduce variables not present in earlier cycles. These evolving dynamics mean that historical patterns may not be as predictive as they once were.

    Furthermore, external macroeconomic forces continue to play a crucial role. Interest rates, liquidity levels, ETF flows, geopolitical developments, and Federal Reserve policy can all influence Bitcoin’s recent price action, potentially disrupting any adherence to historical cycle lengths. The article acknowledges that while October 2026 has become a focal point for many investors, this date should not be treated as a guaranteed notable period.

    Conclusion: Navigating Uncertainty
    In conclusion, while historical cycle analysis provides a valuable reference point for understanding potential Bitcoin market bottoms, it is essential to acknowledge the significant uncertainties introduced by the current market’s unique characteristics and broader economic factors. The predicted dates serve as a guide rather than a certainty, underscoring the need for a cautious and context-aware approach to market analysis.

    Why This Matters

    The materials describe a narrow update: Rekt Fencer analyzed historical Bitcoin bull and bear market cycle lengths, noting a consistent pattern of approximately 1,064 days for bull markets and 364 days for subsequent bear markets to find their bottom. The exact date of Bitcoin’s market bottom.

    Broader Context

    Source materials place the market analysis in this context: Bitcoin has been losing value rapidly and consistently since Q4 of the previous year.

  • France Tax Data Leak Risks Bitcoin Holder Scams

    France Tax Data Leak Risks Bitcoin Holder Scams

    Hacker Offers French Tax Records for Sale, Exposing Hundreds of Thousands to Risk

    A hacker is reportedly selling a vast trove of French tax records, potentially exposing over 678,000 individuals and businesses to phishing scams, identity theft, and targeted attacks. The compromised data allegedly originates from France’s tax authority, the DGFiP, and was stolen during a breach in June.

    According to a report by French cybersecurity outlet FrenchBreaches, the hacker is seeking several thousand euros for the database. Jameson Loop, Chief Security Officer at Bitcoin security platform Casa, highlighted the severity of the breach on X, noting, “The French tax authority has been hacked, and 678K records leaked.”

    FrenchBreaches detailed that the compromised database contains records for 392,867 individuals and 285,570 professionals. Among these are 26,805 individuals with reported tax incomes of at least $116,000, 386 individuals earning over $1.16 million, and eight individuals with incomes exceeding $11.6 million. The hacker is said to be offering the complete file for several thousand dollars.

    A sample of the leaked data, as described by FrenchBreaches, includes names, birth dates, home and email addresses, phone numbers, income figures, withholding tax rates, family status, dependent information, and tax-sharing details.

    In an update, FrenchBreaches stated, “The DGFiP officially confirms the intrusion in its information system.” The firm added that stolen credentials were used in late June to access and extract taxpayer data, and the full extent of affected individuals is still under investigation.

    The attacker reportedly exploited stolen VPN credentials and an internal search tool to extract names, contact details, tax identification numbers, income figures, withholding rates, and family information before authorities could revoke access.

    FrenchBreaches warned that the availability of such sensitive tax information could enable scammers to craft highly credible fraudulent messages, far more convincing than generic phishing emails.

    This data leak occurs amidst a concerning rise in “wrench attacks,” a form of crime where perpetrators use violence or threats to extort cryptocurrency. In July, cybersecurity firm CertiK reported 52 such attacks globally in the first half of 2026, with 33 occurring in France. Earlier this month, Chainalysis reported 46 attacks through June, including 30 in France, resulting in over $30 million in stolen funds.

    Chainalysis noted that “criminals have recognized that crypto holders are high-value targets because they possess wealth in an instantly and irreversibly transferable form.”

  • XAO DAO Plans XRP Ledger Governance Upgrades to Boost Community Participation Amid Ecosystem Concerns

    XAO DAO Plans XRP Ledger Governance Upgrades to Boost Community Participation Amid Ecosystem Concerns

    XAO DAO is preparing to implement significant governance upgrades on the XRP Ledger within the next two to three months, aiming to foster greater community participation. The proposed changes include the introduction of wallet delegation, adjustments to quorum rules, and the establishment of community mini-grants.

    These planned enhancements emerge as the XRP Ledger ecosystem faces scrutiny regarding developer support and the sustainability of projects. The recent shutdown of Gen3’s retail platforms, aigent.run and AxiomProtocol, on August 12, highlights these challenges. Gen3 cited weak user demand and rising infrastructure costs for the closure, although the company indicated it would continue to support its core XRPL infrastructure and participate in the ledger’s amendment process. Users will have until September 13 to withdraw funds from the affected platforms.

    Fabio Marzella, co-founder of XAO DAO, views the Gen3 situation as indicative of a broader issue. According to Marzella, solely funding developers is insufficient if there isn’t a viable path for projects to become sustainable businesses. He noted that some within the community are assessing how long they can self-fund their work, describing it as a potential “last roll of the dice.”

    On-chain data from Santiment presents a mixed outlook for the XRP Ledger. While daily active addresses averaged 35,700 in August, an increase from July’s 26,400, the number of new XRP wallets has remained largely unchanged. This suggests that increased activity among existing users has not translated into significant user base expansion. Concurrently, XRP closed the week near a 21-month low.

    XAO DAO’s overarching objective with these upgrades is to empower the community with the “ability to act,” moving beyond mere voting capabilities. The proposed changes aim to make participation more accessible and representative by allowing members to delegate voting power, adjust quorum rules, and access community mini-grants. The stated goal is to prevent inactive participation from obstructing decisions while ensuring governance remains connected to the active community.

    Despite these plans, significant uncertainties persist regarding the implementation of the upgrades. XAO DAO has not yet provided a definitive timeline for the changes, nor have the detailed voting mechanics for wallet delegation, quorum adjustments, and mini-grants been specified. The practical execution of these governance elements remains to be seen.

    Why This Matters

    The materials describe a narrow update: XAO DAO is preparing to implement governance changes over the next two to three months, including wallet delegation, adjustments to quorum rules, and the introduction of community mini-grants, to foster greater community involvement in the XRP Ledger. The final timetable for the proposed changes has not been provided.

    Broader Context

    Source materials place the factual news in this context: several XRPL projects have already scaled back or shut down.

  • Kalshi, Polymarket Face Broader Legal Scrutiny

    Kalshi, Polymarket Face Broader Legal Scrutiny

    Baltimore Sues Prediction Market Operators Over Alleged Illegal Sports Betting

    Baltimore has initiated legal action against prediction market operators Kalshi and Polymarket, accusing both companies of offering illegal sports betting within the city.

    Mayor Brandon M. Scott and the Baltimore City Council filed separate lawsuits on August 13 in the Circuit Court. The complaints allege violations of Baltimore’s Consumer Protection Ordinance and accuse the companies of misleading consumers regarding the legality and regulation of their products.

    The lawsuits claim that Kalshi and Polymarket permit Baltimore residents to wager on game outcomes, point spreads, total scores, individual player statistics, and other events typically found in licensed sportsbooks. While the companies categorize these offerings as “event contracts” or prediction market trades, city officials contend that the nomenclature does not alter the fundamental nature of the products.

    According to the filings, neither platform possesses the necessary licenses to offer sports betting in Maryland. The city argues that this allows the companies to compete with regulated sportsbooks while circumventing the oversight, taxation, responsible gambling mandates, and consumer protections applied to licensed operators.

    Concerns have also been raised about the promotional strategies employed by these companies. Baltimore alleges that Kalshi and Polymarket market their platforms in a manner that creates a false or misleading impression of legality and proper regulation. The city further asserts that this practice can increase gambling accessibility and expose vulnerable consumers, including young adults and individuals with gambling addictions, to potential financial harm.

    Baltimore is seeking civil penalties, injunctive relief, restitution for affected consumers, disgorgement of alleged illicit profits, and other remedies permitted by law.

    Both Kalshi and Polymarket are currently involved in other legal and regulatory disputes. Kalshi, for instance, recently faced a lawsuit from New York State Attorney General Letitia James, who sought to halt its operations in the state. Subsequently, the U.S. Commodity Futures Trading Commission invoked its emergency authority to mandate Kalshi’s continued operation in New York after the company requested federal intervention. The CFTC stated that this order followed the platform’s plea for assistance after the state lawsuit was filed in late July.

    Kalshi also faced a lawsuit from flight-tracking company FlightAware concerning prediction markets related to flights. FlightAware accused Kalshi of unauthorized use of its data and name to host markets on flight cancellations. However, this case was withdrawn just one day later, with Kalshi’s legal representatives stating the lawsuit was voluntarily dismissed without prejudice against all defendants.

    Polymarket has encountered its own set of challenges. JPMorgan Chase ceased providing banking services to the company late last year. Polymarket has since secured services from a different lender, though the identity of this new financial institution has not been disclosed.

    Additionally, a separate consumer protection lawsuit has been filed against Polymarket in Washington, D.C. The National Association of Consumer Advocates alleges that the company, its CEO Shayne Coplan, and Chief Marketing Officer Matthew Modabber engaged in “flagrantly deceptive” social media advertising campaigns. These campaigns allegedly promoted Polymarket to American consumers and encouraged betting on a platform that was not technically available in the U.S.

    The D.C. complaint also references reports of political influencers endorsing Polymarket’s accuracy without disclosing paid partnerships. It cites a Wall Street Journal investigation that uncovered viral videos using simulated versions of the platform to suggest creators had won bets.

  • Trezor Data Breach at Shipping Partner Highlights Broader Hardware Wallet Security Risks

    Trezor Data Breach at Shipping Partner Highlights Broader Hardware Wallet Security Risks

    A data breach at Trezor’s shipping partner, ShipMonk, has exposed the personal information of approximately 13,700 customers, prompting a re-examination of the security considerations surrounding hardware cryptocurrency wallets. The incident underscores risks associated with the physical logistics and third-party vendor involvement in hardware wallet distribution, extending security concerns beyond the management of private keys.

    Breach Details and Exposed Information
    The breach, disclosed by Trezor on August 13, involved unauthorized access to ShipMonk systems that held customer order data. The exposed information includes names, phone numbers, and home addresses of recent Trezor customers. ShipMonk first notified Trezor about the unauthorized access on Monday, August 10. Importantly, Trezor has stated that its devices themselves were not compromised in this incident.

    Re-evaluating Hardware Wallet Risks
    In the wake of the breach, Binance founder Changpeng Zhao (CZ) highlighted what he described as a “real advantage” of software self-custody wallets. CZ argued that software wallets avoid the risks tied to shipping physical devices that link a user’s identity and address to their cryptocurrency holdings. He noted that while hardware wallets have specific advantages, this incident underscores a different risk profile compared to software alternatives like the Binance Web3 Wallet or Trust Wallet, which do not involve shipping physical products.

    Broader Security Landscape and Expert Warnings
    Security experts have warned that the exposed data could be used for sophisticated phishing attacks, social engineering, or even physical threats. Nick Neuman cautioned that the data could lead to targeted social engineering and potentially wrench attacks, while NaoX Protocol stated that exposed addresses could identify crypto holders for direct targeting. Trezor has advised its customers to be vigilant against potential phishing attempts via email, phone calls, or letters, and stressed the importance of never entering wallet backups online or sharing them.

    This incident is not the first time Trezor has faced security concerns related to third-party vendors. In January 2024, a separate breach involving a Trezor third-party support vendor exposed contact details for around 66,000 users. Furthermore, the broader hardware wallet ecosystem has seen recent scrutiny. In mid-July, pseudonymous crypto investigator ZachXBT criticized hardware wallets as “complete garbage” for serious use, suggesting that a spare phone used solely for signing transactions might be a more secure alternative. Additionally, Galaxy Research has linked over $100 million in stolen Bitcoin to a firmware issue in older Coldcard devices.

    Implications for Users
    The ShipMonk breach underscores that the security of hardware wallets extends to the supply chain and data handling practices of their partners. The incident prompts a re-evaluation of the overall security model for self-custody, considering risks beyond the digital realm. Users are reminded to remain cautious and follow best practices for securing their cryptocurrency assets, regardless of the wallet type they choose.

    Broader Context

    Source materials place the factual news in this context: The incident involves a data breach at Trezor’s shipping partner, ShipMonk.

  • Cronos Surges 5% on Major Ecosystem News

    Cronos Surges 5% on Major Ecosystem News

    Crypto Market Sees Broad Decline, Cronos Stands Out

    The cryptocurrency market experienced a widespread downturn on August 14, with major digital assets like Bitcoin (BTC), Ethereum (ETH), and Cardano (ADA) all registering losses.

    However, Cronos (CRO) has bucked the trend, defying the broader market pullback. Some analysts suggest that its price could see further gains if it successfully breaks through key resistance levels.

    CRO has been a focal point of significant volatility in recent days. Earlier this month, Trump Media, the company behind Truth Social, rescinded its proposed exchange-traded fund (ETF) deal with Crypto.com and abandoned plans to acquire $6.4 billion in CRO.

    The token reacted sharply to this news, plummeting to approximately $0.046, its lowest point in three years. It subsequently traded below the $0.05 mark for several days before bulls managed a brief reclamation of that level earlier today. As of this report, CRO is trading around $0.048, according to CoinGecko, marking a 5% increase over the past 24 hours.

    The most probable driver behind this resurgence appears to be an announcement from Ryan Wyatt, CEO of Cronos App. Wyatt revealed that the platform will be expanding globally next month, becoming available to all users on both iOS and Android. He indicated that users will gain access to sports, stocks, crypto, and perpetual futures trading, emphasizing that this is “just the beginning.”

    “More to share in the future: plans for CRO, sharing future feature rollouts, a desktop version of Cronos, and more,” Wyatt added.

    Analyst Crypto With Gopal noted that the price has formed a double bottom pattern after retesting the $0.046 support zone on two occasions. He highlighted that buyers have defended this level, potentially establishing a reversal base.

    “The key confirmation is a breakout above $0.050 resistance. A confirmed breakout could open the way toward the chart’s $0.055 target. Market sentiment: Bullish setup – $0.050 breakout is the trigger,” he stated.

    While Wyatt’s announcement has clearly spurred a price increase for CRO, it may not be enough to sustain a long-term rally. The initial excitement could dissipate, allowing sellers to regain control, especially given the prevailing bear market conditions.

    Adding to potential headwinds, Cronos’ Relative Strength Index (RSI) has climbed to approximately 74. This suggests the asset has entered overbought territory, potentially signaling an upcoming short-term pullback. The RSI, which ranges from 0 to 100, typically indicates an asset is oversold below 30 and overbought above 70.

  • Bank Leumi Eyes Cryptocurrency Trading Relaunch in Israel, Partnership with Galaxy Digital Expected Early 2027

    Bank Leumi Eyes Cryptocurrency Trading Relaunch in Israel, Partnership with Galaxy Digital Expected Early 2027

    Bank Leumi, through its digital investment arm Pepper, is preparing to reintroduce cryptocurrency trading services in Israel, with an expected availability in early 2027. The bank has partnered with Galaxy Digital to provide the necessary trading and custody infrastructure, aiming to offer customers access to digital assets like Bitcoin, Ether, and Solana within its Leumi Trade application.

    This planned relaunch follows a previous attempt by Pepper Invest in March 2022, which was halted due to regulatory hurdles. The current initiative is underpinned by significant regulatory shifts in Israel that have created a more permissive environment for financial institutions engaging with digital assets. In mid-2026, the Bank of Israel removed previous restrictions on crypto-linked deposits and the refusal of funds from licensed providers. Concurrently, the Capital Market Authority established wallet security and capital standards, requiring 2 million New Israeli Shekels for non-custody firms and 2.5 million New Israeli Shekels for custody firms, with mandatory customer-asset segregation.

    Further regulatory clarity arrived with an August 1 circular, which expanded the scope of tradable digital assets. The circular permits trading in the top 50 cryptocurrencies by market capitalization, provided they exceed a $500 million threshold. This framework is seen as creating a regulated, lower-friction pathway for banks like Leumi to offer crypto services directly to their retail customers.

    The partnership with Galaxy Digital is central to Bank Leumi’s strategy. Galaxy Digital, which holds a New York DFS BitLicense and a money-transmission license obtained in May 2026, will supply the technological backbone for the service. Execution of trades will be managed through GalaxyOne Institutional, Galaxy Digital’s platform designed for banks and asset managers. Custody solutions will be provided by GK8, a provider of air-gapped wallet technology.

    Bank Leumi, which serves approximately 2.5 million retail customers, aims to integrate cryptocurrency trading into its existing Leumi Trade application, where customers already manage stocks and bonds. This integration is intended to offer a seamless experience for users.

    While the service is expected to become available in early 2027, the exact launch date remains contingent on final regulatory sign-off from the Bank of Israel. The previous attempt’s stall serves as a reminder of the critical role regulatory approval plays in the rollout of such services. The current regulatory framework, however, suggests a more streamlined path forward for institutions like Bank Leumi.

    Why This Matters

    Bank Leumi’s planned cryptocurrency trading service, expected in early 2027, signifies a potential shift in traditional banking’s approach to digital assets in Israel, following a period of regulatory uncertainty. The service will offer Bitcoin, Ether, and Solana within its Leumi Trade application, enabled by a partnership with Galaxy Digital and new regulations.

    Broader Context

    Up until mid-2026, Israeli banks faced restrictions on crypto-linked deposits and could refuse fiat from crypto sources. New regulations implemented by the Bank of Israel and the Capital Market Authority have since created a more permissive environment, establishing standards for crypto custody and allowing trading in the top 50 coins by market cap above a $500 million threshold. This has paved the way for institutions like Bank Leumi to offer crypto services.

  • Singapore: LinkedIn Crypto Scams Net $11.8 Million

    Singapore: LinkedIn Crypto Scams Net $11.8 Million

    Scammers Target Crypto Firms, Stealing $11.8 Million Through Fake Job Offers

    Scammers posing as recruiters for cryptocurrency companies have successfully defrauded victims of $11.8 million (S$15.1 million) by leveraging fake job offers to compromise their employers’ systems, according to a joint advisory issued by the Singapore Police Force and the Cyber Security Agency of Singapore.

    The agencies detailed the modus operandi of the scam in a statement released on Friday. The scheme typically begins with a victim being approached on LinkedIn by an individual claiming to be a recruiter for a cryptocurrency firm. Communications then shift to email, where the scammer uses a spoofed domain that closely mimics a legitimate company’s address. The process often involves several interviews conducted via Google Meet, during which the interviewer consistently keeps their camera off.

    Following the interviews, the victim is directed to a fake website to complete a technical coding assessment. Crucially, this assessment is performed on a company-issued device, leading the victim to unknowingly download malicious software.

    This malware is designed to capture a session token, a string that allows a service to keep a user logged in. By presenting this token, which signifies an already authenticated session, the attackers bypass multi-factor authentication and gain access to the victim’s Bitbucket account, a platform used for storing and managing source code.

    Once inside, the attackers can alter the employer’s software systems and access internal servers. The agencies stated that the compromised credentials are then used to circumvent transaction limits and approval checks, ultimately enabling the theft of funds. The advisory does not name any specific companies involved, disclose the destination of the stolen funds, or attribute the attacks to any particular group.

    This tactic is not new, with researchers having previously identified a long-running operation dubbed “Contagious Interview.” This operation involves fake recruiters directing Web3 developers toward malicious code, including over 300 booby-trapped packages uploaded to the npm registry. Another group, known as TraderTraitor, has employed similar fake job offers to infiltrate corporate cloud systems rather than targeting individual cryptocurrency wallets, a strategy one researcher suggested is due to the concentration of funds within these systems. Other attackers have impersonated recruiters from prominent companies like Coinbase and Uniswap to trick targets into executing commands.

    While some of these campaigns have been attributed to North Korean hackers, the underlying playbook is not exclusive to them. The Russian-speaking group Crazy Evil, for instance, established a fabricated Web3 company, ChainSeeker.io, and advertised blockchain analyst roles to lure applicants into downloading malware designed to drain their digital wallets.

    The Singapore agencies have provided advice for both individuals and companies. Individuals are urged to verify recruiters through official channels, treat interviewers who refuse to turn on their cameras as a red flag, and never execute code from unverified sources. For organizations, the recommendations include securing API keys and internal credentials, strengthening multi-factor authentication, and monitoring for unfamiliar devices and unusual network activity. In cases where a compromise is suspected, the agencies advise isolating affected systems, revoking active sessions, resetting credentials, and reviewing access logs.