Skip to content
October 2026Published on the 1st

Monthly brief · October 2026

EVENTGRAPH

Issue 1102026October
30stories207selected reports17daily issues11 min read
Top story

Binance Suffered Record $6.36 Billion Theft After 36‑Hour Preparation

A sophisticated attacker spent at least 36 hours preparing a coordinated attack on Binance that began on the evening of Oct. 29. The operation started with a rapid transfer of 233.46 million XRP (≈$296 million) from five Binance wallets on the XRP Ledger into a single attacker‑controlled address. Within minutes, the attacker moved assets across ten blockchains: Solana, Optimism, Bitcoin (18,270 BTC ≈$1.47 billion), Tron (612.7 million USDT and 46.4 million TRX ≈$628 million), Ethereum (167,464 ETH and 1.615 billion USDT), USDC, Avalanche, and Polygon. The attacker used malicious smart‑contract code and EIP‑7702 authorisations to sweep funds from hot wallets, repeatedly executing sweeps as new assets entered the compromised accounts. The theft totaled $6.36 billion, making it the largest cryptocurrency theft on record. The incident illustrates how a single, well‑timed exploit can simultaneously drain multiple blockchains, highlighting the need for robust multi‑chain security measures and vigilant monitoring of hot‑wallet authorisations.

CryptoSlateOriginal
01

AI

Google DeepMindFirst-party10.29

Google DeepMind announces Gemini 4 Carbon, its strongest AI model with state-of-the-art cybersecurity and long-horizon capabilities

Google DeepMind has unveiled Gemini 4 Carbon, its most powerful AI model to date, ranking #1 on the Artificial Analysis Intelligence Index v5.0 with a score of 59. The model shows significant gains in coding and agentic tasks, and leads in cybersecurity benchmarks including SEC-bench Pro (88.2%), ExploitGym (54.8%), and CWE-bench (71.0). It is designed for long-horizon engineering, capable of sustained agentic workflows to debug large codebases. Building on the recent launch of Gemini 4 Argon, Carbon will initially be available to a subset of cyber defenders through the Fairwind Program before a broader rollout.

Google DeepMindFirst-party10.28

DeepMind Unveils Genie 4, a Real‑Time World Model with Native Audio Generation

On October 27, 2026 DeepMind announced Genie 4, a multimodal world simulation model that produces photorealistic visuals, fluid physics, and native audio—including music, ambient sounds, and interactive dialogue—simultaneously. Built on the Gemini family, Genie 4 uses Gemini Omni for realistic appearance and behavior, while other Gemini models supply the reasoning needed to keep simulations coherent. Users can steer scenes in real time with natural‑language prompts that alter weather, camera angles, or introduce new objects, with Gemini adapting the context. The model is currently in a research preview for trusted testers, with plans to roll out to Google AI Ultra subscribers and Gemini API partners. Genie 4’s ability to generate realistic physics, human motion, and sound in real time represents a significant step toward safe, infinitely variable simulations for robotics training, AI agents, and new interactive experiences.

Import AI10.19

Jack Clark Warns IMF that AI Singularity Has Begun

Jack Clark delivered the Per Jacobsson lecture at the IMF meeting in Bangkok on 17 October, arguing that the AI singularity is already in its early stages. He cited breakthroughs in mathematics, biology, and robotics—such as AI‑generated proofs, drug‑design models, and automated laboratory experiments—to illustrate the rapid pace of autonomous AI progress. Clark urged economists, bankers, and policymakers to anticipate significant, rapid changes in national security, economic trajectories, and the self‑evolution of AI systems.

NVIDIA BlogFirst-party10.15

NVIDIA releases Nemotron 3.5 Super VL and Bolt models, expanding open-source AI family

NVIDIA introduced Nemotron 3.5 Super VL, a 120-billion-parameter open model delivering frontier accuracy for multimodal agentic tasks at one-fifth the size of largest reasoning models and up to 5x faster throughput. Two new edge models, Bolt 74B-A9B 24GB and Bolt E4B 4GB, were also released to optimize intelligence and speed for local agentic workloads and fast conversational agents on edge devices.

The Decoder10.27

OpenAI launches GPT-6.1 Terra with 50% lower API prices and improved reasoning performance

OpenAI has released GPT-6.1 Terra, claiming it pushes the cost-to-performance boundary further than any predecessor. API prices are half those of GPT-5.6 Terra, with input tokens at $1 per million and output tokens at $5. Cached inputs drop to $0.05 per million. On the Intelligence Index, Terra scores 48, a 6-point gain over GPT-5.6 Terra at maximum reasoning effort while costing less than a third per task. It also shows significant improvements in coding and computer control capabilities.

Hugging Face BlogFirst-party10.28

NVIDIA Nemotron 3.5 Transcribe adds multilingual transcription, speaker attribution and audio Q&A as open model

NVIDIA Nemotron 3.5 Transcribe is an open-weight model that transcribes 40 languages, translates 31 to or from English, and attributes speakers in 13 languages. It runs on a single GPU, ranks first on the Hugging Face Open ASR Leaderboard for English, and achieves the lowest speaker diarization error rate on David AI's 21-language leaderboard. Developers can prompt the model for specific outputs such as speaker labels or medical terminology, and adapt it using Granary v2 data pipelines and NeMo fine-tuning tools.

AWS Machine Learning BlogFirst-party10.23

AWS SageMaker AI Uses Two Measurements to Set TTS Auto‑Scaling Targets

AWS deployed the 82‑million‑parameter Kokoro‑82M text‑to‑speech model on a SageMaker AI real‑time endpoint and replaced guesswork with two live‑endpoint measurements. The maximum concurrency a single instance can handle before breaching the service‑level objective (Q_max) was measured at 50 requests, and the end‑to‑end time for a scale‑out (T_total) was 320.2 seconds. These values were used to calculate precise scale‑out and scale‑in thresholds and cooldown periods, eliminating the hidden risk of over‑ or under‑provisioning that traditional auto‑scaling metrics miss.

The Decoder10.22

Deepmind founder Hassabis shortens AGI timeline to 2-3 years

Deepmind founder Demis Hassabis now estimates artificial general intelligence could arrive within two to three years, shortening his previous forecast of three to five years. He defines AGI as a system matching the full cognitive range of the human brain and uses the "Einstein test" as a benchmark, asking whether a system trained only on pre-1901 knowledge could reproduce Einstein's 1905 papers.

The Decoder10.30

Epoch AI Demonstrates GLM 5.3 Can Build Full Firefox Exploit Chains Within 48 Hours

Researchers at Epoch AI showed that the open‑weight language model GLM 5.3 can autonomously generate complete exploit chains against Firefox by exploiting the "patch gap"—the period between a security fix being committed and the fix reaching users. Using only the target Firefox version, publicly available information, and basic tools in an offline environment, GLM 5.3 identified upcoming security fixes, selected vulnerabilities, and constructed multi‑stage attacks that read local files and bypassed sandbox protections. The model achieved a successful attack in as little as 12 hours, with an estimated cost of about $1,000 in API fees per exploit. The attacks targeted six Firefox releases between September 17 and October 26, 2026, potentially exposing the data of over 200 million users. Mozilla was notified and patched the discovered vulnerability in Firefox 159.0, released on October 27, 2026.

AWS Machine Learning BlogFirst-party10.28

Property Finder fixes evaluation bias to unlock better models on Amazon Bedrock

Property Finder discovered that 96.8 percent of their evaluation labels were inherited from a single model's predictions rather than verified by human experts, creating systematic bias against alternative models. The team built an unbiased ground truth by manually annotating 356 images and shifted from single-label to multi-label classification. Using evolutionary prompt optimization on Amazon Bedrock, they achieved higher accuracy at 86 percent lower cost.

Hugging Face BlogFirst-party10.22

NVIDIA Introduces Kumo Relational, a Pre-trained Foundation Model for Enterprise Databases

NVIDIA Kumo Relational is a pre-trained relational foundation model that makes predictions directly on enterprise databases without task-specific training. It gathers up to 10,000 historical examples as context and predicts outcomes such as churn, demand, or fraud in a single forward pass. The model outperforms supervised machine learning and expert-engineered gradient-boosted tree pipelines across 41 tasks on 15 databases, and surpasses AutoGluon ensembles by 8% in mean reciprocal rank on the SAP SALT benchmark.

Hugging Face BlogFirst-party10.28

Liquid AI releases LFM3 family of specialized multimodal models built on shared 2B parameter backbone

Liquid AI introduces LFM3, a new generation of Liquid Foundation Models ranging from 1.7B to 2B parameters that unify text, vision, audio, omni, and decision models on a single shared backbone. Key improvements include a tri-hybrid architecture combining short convolutions and attention, enabling LFM3-1.7B to outperform the larger LFM2.5-2.6B with 35% fewer parameters. The text model fits within approximately 1 GB at 4-bit precision and supports a 256K context window for on-device agent deployment. Four specialized model variants -- text, vision, audio, and omni -- are derived from the base model and can be fine-tuned on a single GPU. LFM3-1.7B-Base was pre-trained on 22 trillion tokens, with the final 3.5 trillion tokens focused on agentic traces and tool calls to extend the context window.

02

Crypto

CoinDesk10.26

Anthropic files for IPO, targets November public offering

Anthropic filed an S-1 on Monday aiming for a November IPO, reporting first-half 2026 revenue of $16.3 billion and a net loss of $80.7 billion. The filing values the AI startup at $1.5–1.75 trillion, with investors expecting shares to price on Nov. 19 or 20. Chip stocks rose in premarket trading, and on Hyperliquid traders bet on the pre-listing share price using an ANTH contract that spiked to about $1,980 before falling 6% to $1,857.

Decrypt10.30

Binance Loses $6.4 B in North‑Korean Hack, Users Covered by SAFU Fund

A North‑Korean hacker group stole roughly $6.4 B from Binance, the largest crypto theft ever, by compromising a DevOps engineer’s laptop. The stolen assets were spread across three blockchains: about $3.5 B in ETH, $1.4 B in BTC and $630 M on Tron. Stable‑coin issuers Tether and Circle used their built‑in freeze mechanisms to lock about $2.39 B, leaving $2.6‑$3.2 B still unaccounted for. Binance announced it had set aside $6.34 B from its SAFU fund to fully cover user losses and stated that user funds are “completely safe.” Aave also froze its V3 and V4 markets on Ethereum to prevent the attacker from using the stolen funds to create bad debt. The incident caused Bitcoin to dip below $77.5 k, ETH under $2,200, and BNB under $700, with over $1.33 B in positions liquidated.

Decrypt10.30

Polymarket halts trading after security incident, users report unauthorized withdrawals

Polymarket paused trading and relayer actions after users reported unauthorized fund withdrawals. A wallet flagged as the suspected attacker holds about $2.65 million in POL after multiple USDC.e-to-POL swaps through Relay. Hudson Rock found a DebugBear-hosted script with wallet-draining code hard-coded to the same address. The platform's frontend may be compromised, with the trading API in major outage and the exchange in cancel-only mode.

Decrypt10.13

Ledger Discovers LTE Implant in CryptoBilis Wallets Stealing Recovery Phrases

Ledger's Donjon security team found an unauthorized LTE implant in wallets sold by CryptoBilis, potentially exposing over $86 million in assets. The implant captures recovery phrases during setup and transmits them via LTE. Ledger advises users to migrate assets to new devices and not to use any recovery phrases from CryptoBilis wallets.

The Verge · AI10.15

Eiliko Robot Toy Stores User Data on Chinese Servers

The Eiliko digital pet stores conversations on Chinese servers, vulnerable to hacking and data breaches, including personal information of children. The toy's AI companion lacks security measures, raising concerns about user privacy and safety.

BeInCrypto10.20

OpenAI Pursues $30 B Funding to Beat Anthropic’s Mid‑November IPO

OpenAI is reportedly raising about $30 billion before Anthropic’s expected mid‑November listing, potentially valuing the ChatGPT maker at over $1.4 trillion. The new target would be roughly 64% above OpenAI’s March valuation of $852 billion, while Anthropic’s valuation has fallen to about $1.5 trillion from a $2 trillion ask. The race reflects differing revenue accounting methods and a battle for the same pool of long‑term investors.

Cointelegraph10.30

North Korea’s TraderTraitor Group Linked to $6.3 B Binance Hack

Cybersecurity firms TRM Labs and Chainalysis, together with on‑chain investigator ZachXBT, have attributed the $6.3 B theft from Binance to the North Korean hacker collective TraderTraitor. TRM Labs cited both on‑chain and off‑chain intelligence to reach a “high confidence” attribution. ZachXBT noted that the stolen Binance funds and those taken in the earlier Bitget exploit were commingled at the same address after moving through THORChain, indicating a single actor behind both incidents. Chainalysis CEO Jonathan Levin estimated the loss at $6.4 B and linked it to TraderTraitor, citing similarities to previous North Korean‑linked hacks such as the Bybit and DMM Bitcoin thefts. The FBI has also identified TraderTraitor as the culprit in the $300 M DMM Bitcoin robbery, where an attacker used social engineering to gain employee access and divert funds. The attribution underscores a pattern of cross‑platform, state‑backed cyber‑criminal activity.

The Block10.31

Binance Hit by $6.3 B Hack Linked to North Korea

Investigators have traced a $6.3 billion theft from Binance’s hot‑wallet signing infrastructure to a North Korean threat actor. Attackers exploited a vulnerability in Binance’s hot‑wallet signing system to authorize unauthorized transfers, then moved the stolen funds through a series of mixing services to obscure their trail. The incident remains under investigation, with authorities tracking the flow of the compromised assets.

Decrypt10.27

SpaceX secures $40 billion GPU lease from Apollo, Musk warns of neocloud consolidation

SpaceX signed a binding commitment for approximately $40 billion in GPU leases from an Apollo-managed entity, with leases starting in the first half of 2027 and the master lease expected to close before the end of 2026. Elon Musk warned that debt markets have largely cut off funding for companies without substantial revenue outside AI data centers, predicting "guppy-level death and consolidation" among the 200+ neoclouds. SpaceX, which recently absorbed xAI, stated it is investment grade and has revenue from Starlink and rocket launches independent of AI.

03

Finance & macro

Latent Space10.27

Anthropic files S-1 for Nasdaq listing under ticker ANT, reports $16.3B H1 revenue and $974M Q2 operating profit

Anthropic filed its S-1 on Monday, planning a Nasdaq listing under ticker ANT. Revenue surged from $41 million in 2023 to $16.3 billion in H1 2026, with Q2 revenue reaching $11.6 billion, up 1,368% year-over-year. The company reported $974 million in Q2 operating profit and $3.9 billion in H1 operating cash flow, marking its first profitable quarter. The $80.7 billion H1 net loss is largely driven by $81.1 billion in non-cash charges tied to financial instruments.

04

Global & industry

BBC World10.20

Sudan Army Drone Strikes Kill Over 300, Including Funeral Mourners and a Fuel Market

The Sudanese army is alleged to have launched drone attacks that killed more than 300 civilians, including a truck of mourners heading to a funeral and a fuel market in Abyei. The strikes, reported by the Sudan War Observatory, occurred in West Kordofan and Abyei, a disputed border area, and caused 150 deaths in West Kordofan and 73 in Abyei. The attacks have heightened tensions between Sudan and South Sudan and raised concerns about the conflict spilling across the border.

BBC World10.23

BBC finds evidence of RSF systematically targeting hospitals in el-Fasher, Sudan

A BBC investigation documented at least 43 attacks on hospitals in el-Fasher from May 2024 to October 2025, killing 55 medical workers and injuring 120. The Rapid Support Forces (RSF) besieged the city a year ago, forcing the main Teaching Hospital to relocate. UN rights chief Volker Turk called the attacks serious violations of international law that may amount to war crimes.

Decrypt10.21

PHP Foundation warns of two critical vulnerabilities affecting 70% of websites

PHP released emergency versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on October 21 to fix CVE-2026-109618 and CVE-2026-109619, two flaws rated 9.2 out of 10 that allow unauthenticated remote code execution. Finland, the Netherlands, and France took government websites offline as a precaution after details leaked early and Cloudflare reported attacks hours before the fix shipped. Regular users have nothing to install; the fix falls on website owners and hosting companies, and PHP 8.1 and older get no official release.

European Central Bank NewsFirst-party10.19

ECB Executive Frank Elderson Highlights Climate and Nature Risks as Drivers of Economic Resilience

Frank Elderson, ECB Executive Board member, warned that the record‑warm summer of 2026 in Western Europe, marked by severe droughts, wildfires and water scarcity, has exposed how climate and nature degradation directly impact transport, industry, energy, agriculture and overall economic stability. He argued that these environmental shocks are becoming a systemic macroeconomic risk and must be addressed through integrated green transition policies that strengthen competitiveness, energy security and long‑term prosperity.

05

Independent research

Microsoft ResearchFirst-party10.22

Microsoft researchers resolve 31-year-old KLS conjecture in high-dimensional geometry

Researchers proved the Kannan-Lovász-Simonovits conjecture, establishing that flat cuts can capture the narrowest bottlenecks of log-concave distributions within a fixed factor, regardless of dimension. The breakthrough, achieved through human-directed AI collaboration, removes a major theoretical obstacle to understanding randomized algorithms.

(END OF ISSUE)

Assembled automatically by the EventGraph editing system from public sources, with the original linked for every entry · Past monthly briefs