Mastercard has obtained two cryptocurrency patents, which enable money laundering risk assessment prior to transaction processing.

According to Lookonchain's monitoring, a whale address has sold 1 million UNI tokens, worth $7.32 million, over the past two days. The whale received 20.32 million UNI tokens from Uniswap's UNI Timelock wallet more than a year ago, at which point the holding was valued at $139.4 million.

According to The Straits Times, Singaporean police announced that their fifth joint crackdown with multiple digital payment token service providers and foreign law enforcement agencies, carried out between September 1 and October 31, helped more than 383 victims avoid losses exceeding SGD 17.4 million in crypto-related fraud funds. The operation was led by the Police’s Cyber Security Command, with partners including Coinbase, Coinhako, DTCPay, Gemini, Independent Reserve, OKX, StraitsX, and Upbit. It leveraged on-chain analysis tools from Chainalysis and TRM Labs, plus customer data from trading platforms, to conduct phone and on-site interventions against scams such as official impersonation, investment fraud, and job fraud. For cross-border efforts, the Cyber Security Command shared intelligence with the U.S. Federal Bureau of Investigation, Australia’s New South Wales Police Force, and the Canadian Anti-Fraud Centre, identifying 32 overseas victims and intervening before they suffered further losses. Police noted they will continue to expand public-private partnerships and cross-border intelligence sharing. The fourth round of operations announced in September had previously helped over 355 people avoid losses of approximately SGD 8.94 million.

A whale dumped 1M $UNI ($7.32M) over the past 2 days. The whale received 20.32M $UNI ($139.4M) from the Uniswap UNI Timelock wallet over a year ago.

Beating AI Express News: Following a sell-off in tech stocks, Anthropic’s initial public offering (IPO) is facing valuation pressure. The Wall Street Journal reports that three large institutional investors planning to participate in the IPO view the previously expected $1.5 trillion valuation as still too high, with one suggesting it should be cut to roughly $1 trillion. Anthropic’s revenue continues to grow rapidly. Insiders reveal that as of the end of October, the company’s annualized revenue run rate exceeded $80 billion, up from just over $65 billion at the end of July—an increase of $15 billion in three months. Investors hold differing views on the IPO plan: Some want to wait to review October’s financial results before deciding whether to accept a valuation reduction; one investor proposed trimming the fundraising size from the previously anticipated $100 billion to around $80 billion; another suggested delaying the IPO if market weakness persists, waiting for conditions to improve before going public. These views are only feedback from potential buyers to the company, with final decision-making power lying with Anthropic and its underwriters. However, if large institutions are unwilling to subscribe at the original valuation, Anthropic will have to reconsider its offering price, fundraising scale, and even the timing of its IPO.

According to Alpine Linux’s official security advisory, its openssh-server package has a password authentication bypass vulnerability in builds where PAM is not enabled. Attackers who can connect to the SSH port can log in in a single attempt without a correct password under specific conditions. The required conditions include: PasswordAuthentication is enabled, an account with a password field set to *, and at least one account on the local machine with a $5$ or $6$ hash. Attackers can submit an extremely long passphrase to a passwordless account to successfully authenticate. Affected versions cover Alpine 3.21–3.24 and edge (verified by the official), as well as end-of-life versions 3.16–3.20. Systems using openssh-server-pam with UsePAM set to yes, or those that have disabled password login, are not impacted. No CVE has been assigned as of press time. The official states the root cause is tied to two factors: borrowing salt values from other accounts when PAM is disabled, and musl’s crypt() function returning * for extremely long passphrases. OpenSSH 10.6p2 and patch packages for all stable branches have fixed the issue. Advisories recommend running `apk upgrade` immediately and restarting the sshd daemon, as upgrading only the package will not replace the running active daemon. If an upgrade is not immediately feasible, disable password authentication. Notably, the alpine user in the official tiny-cloud image has a password field set to * and allows passwordless doas access, which could be exploited to gain root privileges if a $6$ hash exists on the local machine.

CZ responded to Elon Musk's "CZ meme" on social media with another meme "Arrow in the knee", hinting at "didn't expect it to drop so sharply" or "didn't anticipate the meme being used here". BlockBeats Note: The "Arrow in the knee" meme originates from an NPC line in the game *The Elder Scrolls V: Skyrim*: "I used to be an adventurer like you, until I took an arrow in the knee." After the game became a massive hit, the meme spread widely and evolved into a versatile "turning point template" used to lament an unexpected event that creates a gap between prior expectations and current reality. Musk is a fan of *The Elder Scrolls V: Skyrim* and has publicly expressed his love for the game on multiple occasions.