U.S. CPI: +2.9% YEAR-OVER-YEAR (EST. +2.9%); U.S. CORE CPI: +3.2% YEAR-OVER-YEAR (EST. +3.3%)

According to Blockaid’s monitoring, Ankr’s Ethereum cross-chain bridge is under attack, with approximately $292,000 in losses incurred so far, and the attack is still ongoing. The attacker initiated 5 withdrawal calls to the cross-chain bridge on Ethereum, exploiting a small deposit on Optimism to unlock all assets locked in the bridge and transfer them to a newly created address.

During the recent Singapore TOKEN2049 conference, hackers targeted cryptocurrency traders and investors using fake public Wi-Fi hotspots, phishing pages, and social engineering tactics. Attackers set up malicious networks mimicking hotels, airports, and the conference venue, stealing device data and subsequently hot wallet assets via man-in-the-middle attacks, fake login pages, and malicious app updates. Separately, an off-site event titled "Don't Get Played" has been linked to fraud: organizers claiming to be Apex Accelerator and Stone Venture lured participants to install remote access malware on their laptops under the pretext of cybersecurity training, gaining control of devices to steal private keys. Related victims have filed reports with Singaporean police. Prominent crypto trader Frogman stated he was hacked during the event, losing 9 tokens from two major wallets, totaling over $4 million. The report reminds users who connected to suspicious networks or installed unknown software to promptly transfer assets to secure devices or cold wallets, revoke suspicious contract authorizations, and reset relevant passwords and two-factor authentication credentials. It is important to note that some attack groups and event details are reported or victim allegations and have not been officially confirmed.

Binance stated that a claim selling 335.9 million user data records is likely a scam, with no evidence found of breaches to its systems, customer identity verification data, account credentials, or wallet private keys, and the investigation remains ongoing. Security monitoring firm ThreatMon reported that the forum seller is demanding $900,000 and threatening to publicly release the data if Binance fails to pay. The seller claims the data covers users from approximately 170 countries, including identity information, passwords, and private keys, but these assertions and samples have not been verified, and the number of records does not equal the number of affected individuals. Binance pointed out that the platform does not store passwords in plaintext, does not hold private keys for users’ external wallets, and the information references regions where it no longer operates. This data breach rumor is distinct from the October 29 wallet attack incident.

UBS CEO said that the sharp pullback in the U.S. AI sector over recent weeks is a market correction of the sector’s previously overinflated expectations. He also acknowledged that the outcome of the U.S. midterm elections could slow investment in AI infrastructure, delaying the pace of the AI industry delivering tangible value. He advised clients not to overly focus on short-term political issues when conducting asset allocation. (Cailian Press)

According to an official announcement from XXYY, the team behind meme token trading tool XXYY has decided to shut down its website in an orderly manner, designating November as the trading transition period. From now until November 30, the platform will retain normal trading and rebate withdrawal functions; starting December 1, trading and rebate withdrawals will be halted, with only the private key export feature remaining on the site. The private key export function will be available until January 31, 2027, after which exports will no longer be possible. Pepe Boost subsequently released a farewell statement, reminding users to complete their transactions and withdrawals in a timely manner, and to export and securely store their private keys before the deadline. It also clarified that PEPE BOOST will continue operations, having been upgraded to a multi-chain bot; GigaX, as a mobile trading product, will remain operational, supporting multi-chain trading with a 0.5% fee. Pepe Boost and its new product GigaX are not affected by XXYY’s shutdown and will continue to serve users.

According to Yonhap News Agency, at the "NVIDIA AI Day Seoul 2026" held on November 9, NVIDIA stated that as agent AI accelerates robot development, training, and deployment, physical AI is entering a golden era of growth and will become a key direction for the next phase of the AI industry. Deepu Talla, vice president of NVIDIA’s Robotics and Edge AI Business, noted that robot development involves three core stages: model training, simulation, and real-world deployment. NVIDIA will deliver end-to-end technical support for robot development—covering training, testing, and implementation—via computing platforms including DGX, RTX, and Jetson, as well as Omniverse digital twin technology. In the South Korean market, NVIDIA is partnering with Samsung Electronics and SK Hynix to build digital twins of semiconductor factories using Omniverse for equipment and production process monitoring; with Hyundai Motor Group to train robots through digital twins, with simulation speeds reaching hundreds of thousands times real time; and with LG Electronics to leverage the GR00T platform to train its CLOiD robot to perform object grasping and handling tasks. Furthermore, NVIDIA announced a collaboration with Kakao Mobility to develop South Korea’s Level 4 autonomous driving system. The plan integrates NVIDIA’s Hyperion automotive sensor and computing platform, plus Halos safety verification technology, into Kakao Mobility’s autonomous driving software, with initial development based on Kia PBV purpose-built vehicles.