Brazilian crypto exchange Mercado Bitcoin has begun phased restoration of website login services starting today, stating it will use its own funds to replenish customer balances.

Yu Xian, founder of SlowMist, said in a post that Ledger’s Clear Signing mechanism by default collects users’ signing-related information, including network or chain ID, target address (contract or recipient), device model, firmware version, app version, as well as whether blind signing is adopted and its reason. Yu Xian added that this data collection mechanism is located in Ledger SDK’s `context-module` version 1.16 and above, rather than in Ledger device firmware. The relevant toggle is provided by wallet applications that support connecting to Ledger.

Beating AI Insight Breaking News: Google has officially made Gemini 4 Carbon available to general users. For the past two weeks, only a small number of cybersecurity teams had access to the tool; now all paid developers can call it via API. Google AI Ultra users can also use it in Gemini, Search AI mode, and Antigravity, while Pro and free users are not supported at this time. Google also shared a real-world use case: its subsidiary cybersecurity firm Wiz used Carbon to audit two large software service providers, identifying a brand-new zero-day vulnerability in under two hours and helping the companies patch it. Google noted that such vulnerability research typically takes weeks in the past. However, Wiz used the cybersecurity-specific version Carbon for Cyber, which still requires an application to the Fairwind program for access. The version now open to general users is the general-purpose edition. The API’s launch price is $2 per million input tokens and $10 per million output tokens, matching Argon’s pricing. The discount is only valid until November 30, after which prices will double. Google said Carbon is suited for complex programming, in-depth debugging, and scientific research tasks, as it requires more tokens for repeated reasoning and verification. Argon remains the recommended option for most daily work.

According to monitoring by Onchain Lens, this wallet has accumulated approximately $4.955 million in rewards via 81,741 referrals, including roughly $4.94 million in USDC and a combined $14,150 in USDe, USDT0, and USDH.

Ethereum treasury firm BitMine (BMNR) disclosed in its 10-K annual report filed with the U.S. Securities and Exchange Commission (SEC) that for the fiscal year ending August 31, 2026, it posted a net loss of approximately $6.313 billion, compared to a net profit of $349 million in the prior fiscal year. The loss was mainly driven by changes in the fair value of digital assets, with the company recording an unrealized loss of around $6.229 billion on digital assets for the full year, primarily due to a decline in Ethereum (ETH) fair value. BitMine’s full-year revenue stood at roughly $125 million, of which staking and validation operations contributed about $121 million, accounting for approximately 97% of total revenue. As of the end of the fiscal year, the company held 5,901,837 ETH and 211 Bitcoin (BTC), with an ETH holding cost of approximately $19.948 billion and an end-of-period fair value of about $14.559 billion. Additionally, per BitMine’s holdings update released on November 9, as of November 8, the company’s ETH holdings had increased to 6,070,092 tokens, accounting for roughly 4.97% of the total ETH supply, of which 5,227,037 ETH were staked.

According to Bitget data, SoftBank Group’s stock price once dropped 11%. The Japanese tech investment giant earlier reported its first net loss in nearly two years, driven by a $3.7 billion write-down on its U.S. data center projects and a slump in valuations of its artificial intelligence (AI)-related assets. On Wednesday, the stock dipped to 3,465 yen on the Tokyo Stock Exchange. For the fiscal quarter ending the second quarter of the current fiscal year, SoftBank swung from profit to loss, logging a net loss of 1.12 trillion yen (about $7.1 billion). The loss stemmed from the company writing down certain advance payments originally earmarked for purchasing power equipment to support its 8 gigawatt (GW) project in Ohio and other U.S. data center projects; due to project adjustments, these advance payments are no longer recoverable.

According to cross-chain protocol Across, at approximately 02:45 AM Beijing time, attackers gained control of Across’s official domain name via a social engineering attack targeting domain registrar Namecheap. Across received an alert within 15 minutes of the incident and immediately took its website offline. SEAL911 helped major wallets flag the domain as a phishing site, and Cloudflare subsequently removed its DNS records. As of the announcement, the phishing page is no longer accessible. Across noted that some users who accessed the official website before the phishing page was fully blocked may have been affected. Users who accessed the site prior to the attack, as well as those who used the protocol via API or third-party integrations, were not impacted. Across pledged full compensation for affected users, and will use the wallets they were connected with at the time to revoke relevant permissions granted that day on Revoke.cash. The protocol added that it has not yet received a response from Namecheap, and its frontend and API will remain suspended until the domain is confirmed secure. The team will investigate the cause of the domain takeover and release a post-incident analysis once more information is available.