Singapore Police’s fifth joint operation recovers over SGD 17.4 million in crypto scam losses.

According to Lookonchain's monitoring, a whale address has sold 1 million UNI tokens, worth $7.32 million, over the past two days. The whale received 20.32 million UNI tokens from Uniswap's UNI Timelock wallet more than a year ago, at which point the holding was valued at $139.4 million.

A whale dumped 1M $UNI ($7.32M) over the past 2 days. The whale received 20.32M $UNI ($139.4M) from the Uniswap UNI Timelock wallet over a year ago.

According to South Korean media outlet Digital Asset, filings with the U.S. Patent and Trademark Office (USPTO) show Mastercard secured two U.S. patents on local time November 3, covering "digital asset transaction pre-processing" and "private transaction processing method and system" respectively. The first patent analyzes the on-chain historical behavior of payers and payees before actual transfers, and calculates changes to the sender’s own risk score post-hypothetical transaction, letting users decide whether to proceed. The second handles transactions within a private group of approved participants, with a central approval system verifying balances and authorizations, preventing double-spending and unauthorized transfers without public disclosure of transaction details. The report cites Mastercard’s view that on-chain counterparty identities and reputations are difficult to verify, and accidental dealings with wallets linked to money laundering or terrorist financing could trigger regulatory scrutiny, asset freezes and other risks. The two technologies share a focus on pre-transaction risk control and constraints on information disclosure and approval authority. Mastercard launched its Stablecoin Security service for stablecoin payments on October 19; it remains unclear if these patents will be directly integrated into the product.

Beating AI Express News: Following a sell-off in tech stocks, Anthropic’s initial public offering (IPO) is facing valuation pressure. The Wall Street Journal reports that three large institutional investors planning to participate in the IPO view the previously expected $1.5 trillion valuation as still too high, with one suggesting it should be cut to roughly $1 trillion. Anthropic’s revenue continues to grow rapidly. Insiders reveal that as of the end of October, the company’s annualized revenue run rate exceeded $80 billion, up from just over $65 billion at the end of July—an increase of $15 billion in three months. Investors hold differing views on the IPO plan: Some want to wait to review October’s financial results before deciding whether to accept a valuation reduction; one investor proposed trimming the fundraising size from the previously anticipated $100 billion to around $80 billion; another suggested delaying the IPO if market weakness persists, waiting for conditions to improve before going public. These views are only feedback from potential buyers to the company, with final decision-making power lying with Anthropic and its underwriters. However, if large institutions are unwilling to subscribe at the original valuation, Anthropic will have to reconsider its offering price, fundraising scale, and even the timing of its IPO.

According to Alpine Linux’s official security advisory, its openssh-server package has a password authentication bypass vulnerability in builds where PAM is not enabled. Attackers who can connect to the SSH port can log in in a single attempt without a correct password under specific conditions. The required conditions include: PasswordAuthentication is enabled, an account with a password field set to *, and at least one account on the local machine with a $5$ or $6$ hash. Attackers can submit an extremely long passphrase to a passwordless account to successfully authenticate. Affected versions cover Alpine 3.21–3.24 and edge (verified by the official), as well as end-of-life versions 3.16–3.20. Systems using openssh-server-pam with UsePAM set to yes, or those that have disabled password login, are not impacted. No CVE has been assigned as of press time. The official states the root cause is tied to two factors: borrowing salt values from other accounts when PAM is disabled, and musl’s crypt() function returning * for extremely long passphrases. OpenSSH 10.6p2 and patch packages for all stable branches have fixed the issue. Advisories recommend running `apk upgrade` immediately and restarting the sshd daemon, as upgrading only the package will not replace the running active daemon. If an upgrade is not immediately feasible, disable password authentication. Notably, the alpine user in the official tiny-cloud image has a password field set to * and allows passwordless doas access, which could be exploited to gain root privileges if a $6$ hash exists on the local machine.

CZ responded to Elon Musk's "CZ meme" on social media with another meme "Arrow in the knee", hinting at "didn't expect it to drop so sharply" or "didn't anticipate the meme being used here". BlockBeats Note: The "Arrow in the knee" meme originates from an NPC line in the game *The Elder Scrolls V: Skyrim*: "I used to be an adventurer like you, until I took an arrow in the knee." After the game became a massive hit, the meme spread widely and evolved into a versatile "turning point template" used to lament an unexpected event that creates a gap between prior expectations and current reality. Musk is a fan of *The Elder Scrolls V: Skyrim* and has publicly expressed his love for the game on multiple occasions.