U.S. CFTC Acting Chairman: Enforcement Division Restructured, Refocused on Combating Fraud

Andreessen Horowitz (a16z) has removed "Crypto" from the name of its flagship blockchain fund, renaming it "a16z Frontier", alongside news that long-time general partner Ali Yahya is stepping down. The move is not a retreat from crypto investment, but rather an effort to broaden its investment scope. The fund has raised nearly $10 billion in total capital, including its Fund 5 which secured $4.5 billion in 2022 and $2.2 billion this year, making it one of the largest institutional funds in the industry. During the Fund 5 fundraising round this year, a16z emphasized that the sector is shifting from a "price cycle" to a "usage cycle", with a focus on infrastructure such as stablecoins, on-chain finance, prediction markets, and asset tokenization, rather than merely chasing market trends. The removal of "Crypto" from the fund's name is a signal of expanding investment scope, not an abandonment of crypto. Chris Dixon, founder and managing partner of a16z Crypto, remains in his role. Crypto asset and blockchain-related investments remain a core focus, but the fund's branding and strategic priorities have clearly adjusted to cover a wider range of frontier technology areas, allowing the fund to retain its original advantages while gaining greater flexibility.

According to Bloomberg, the Central Bank of Ireland has fined and reprimanded Coinbase Ireland Limited 3.252618 million euros, for violating customer fund safeguarding and outsourcing obligations under the 2011 Electronic Money Regulations between November 1, 2020 and August 19, 2025. The penalty was settled on October 21, with the original fine of approximately 4.6466 million euros reduced to the aforementioned amount via a 30% settlement discount, pending confirmation from the High Court to take effect. The Irish central bank stated that Coinbase’s Irish subsidiary relied excessively on its U.S. headquarters to implement safeguarding processes and compliance controls, lacked sufficient local capacity to continuously oversee customer fund management, had long-term underfunded safeguarding accounts, and had inadequate internal reporting and governance. A Coinbase spokesperson said the issues were voluntarily disclosed to the central bank by the company, and no customer funds were lost or inaccessible. This marks the second penalty for the company’s Irish entity; in November 2025, it was fined 21.5 million euros for anti-money laundering and transaction monitoring violations.

According to market reports, Meta’s future expenditure commitments have surged to $825 billion. The figure mainly stems from irrevocable contractual commitments and long-term lease obligations not yet initiated, as disclosed in the company’s regulatory filings, covering long-term investments including AI data centers, third-party cloud computing, servers, and network infrastructure. Zuckerberg previously stated in a podcast that the company was prepared to allocate $100 billion to $200 billion for AI infrastructure as early as last year, admitting uncertainty about the final returns at that time. In its latest financial report, Meta further raised its full-year expenditure floor and announced the creation of non-voting Class C shares to enhance financing flexibility and support ongoing AI investments. According to market data from BIT (bit.com), Meta’s U.S. pre-market shares fell 2.66%.

Beating AI Express News: Amazon Threat Intelligence reported that its honeypot system MadPot detected exploitation attempts targeting the PHP2Shell vulnerability on October 17, roughly four days before the vulnerability details were publicly disclosed. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, allow unauthenticated remote code execution and affect PHP versions 7.x and 8.x. The exploitation attempts originated from IP addresses linked to commercial anonymous networks. Amazon stated it remains unclear how attackers obtained exploitation details during the embargo period, and has not confirmed that real-world systems have been compromised. After patches and public information were released, multiple proof-of-concepts emerged within hours, with several attackers launching probes using different anonymous infrastructures. PHP2Shell is now widely exploited in the wild, Amazon added. Its Chief Information Security Officer CJ Moses noted that AI-assisted analysis is reducing the cost of generating usable exploits from patch differences or announcements, shortening the time window from disclosure to functional exploits.

According to market data from BIT (bit.com), Google (GOOGL) is down roughly 2% in pre-market trading. On the news front, OpenAI announced on October 21 that it is expanding ChatGPT Ads to 26 additional countries, bringing its total global coverage to 89 nations. The company also disclosed that over 100,000 advertisers have run ads on its platform, and its ad business hit an annualized run rate of $1 billion as of August. The market views OpenAI’s growing ad business as a direct competitive threat to Google. Separately, Google is grappling with a computing power crunch as it reallocates resources for AI research and development, making it difficult to lock in computing capacity for 2027. Google CEO Sundar Pichai recently stated that the company is reallocating computing power, diverting some capacity originally intended for external cloud services to cutting-edge AI technology development, willing to forgo some short-term cloud business revenue to focus on AI innovation. Currently, customers face major challenges in securing computing resources for 2027.

Indian crypto exchange CoinDCX has released a new statement addressing on-chain disputes over deposit address TQKJQ, noting that following the July 2025 security incident, previously generated related addresses were hacked and deprecated. The platform had previously alerted users not to send funds to these addresses and to only use the latest addresses on its app or official website. Despite this, some users continued transferring funds to the deprecated addresses. CoinDCX had a standard fund-scanning process to collect and secure such deposits, but the process failed during a certain period; the issue was identified this morning, and the resulting operational losses will be fully covered by CoinDCX. The exchange added that even if deposits were sent to deprecated addresses, users’ crypto funds have all been credited, and user assets remain held in isolated cold wallets. Neither the platform’s current centralized addresses nor user addresses were compromised, and platform funds in active wallets were not stolen, with trading and platform operations continuing as normal. Earlier, on-chain investigator ZachXBT had alleged that deposit address TQKJQ remained in use for roughly 10 months after the security incident, leaving around $15.8 million in user funds unaccounted for.