Today's Highlights
🌐 Ledger investigates possible tampering with wallets after reports that US$86 million in crypto assets were stolen
🧊 United States targets US$1 billion in Iran-linked crypto asset seizures; Bessent says "we know where it is"
🚨 United Kingdom targets Cryptomus and TokenSpot in new round of Russia sanctions
🌐 ESMA seeks views on whether tokenized collateral can be liquidated in a crisis
🔎 SIM-swap fraudster who stole cryptocurrency to buy gold grills and Dubai trips sentenced to prison
Ledger investigates possible tampering with wallets after reports that US$86 million in crypto assets were stolen
Ledger is investigating reports of asset losses by users who purchased devices through Southeast Asian reseller CryptoBilis and has asked the reseller to suspend sales and shipments. On-chain researchers have put forward an estimate of suspected losses exceeding US$86 million, but the amount, whether the devices were tampered with and their connection to the asset losses have not been independently confirmed. The investigation is ongoing, and the researchers' estimate cannot be treated as a loss confirmed by Ledger or as a determination of liability.
Business impact
Purchasers of hardware wallets should retain records of the procurement channel, device delivery and initialization, and should monitor risk notices issued by the manufacturer for the affected batches. Institutions that custody or provide devices should also review reseller agreements, disclosure and emergency-response arrangements; allocation of liability must still be based on the investigation results and the contracts, and should not be presumed in advance to be a device defect or manufacturer liability.
In practical business terms, the following can be checked in sequence:
• Retain records of the procurement channel, device delivery and initialization.
• Monitor risk notices issued by manufacturers regarding the affected batches.
• Review distribution agreements, customer notifications and emergency response arrangements.
Source: CoinDesk · 2026/10/9 22:47
US targets seizure of USD 1 billion in Iran-related crypto assets; Bessent says "we know where it is"
US Treasury Secretary Bessent announced that the United States plans to seize approximately USD 1 billion in Iran-related crypto assets and stated that their location is known. The statement follows months of US sanctions and freezes targeting Iranian assets. The report did not disclose the specific cryptocurrencies of the assets to be seized, the exchanges or wallets where they are held, the sanctions lists or judicial procedures relied upon, or whether the action is at the stage of investigation, administrative freeze or judicial seizure. It remains unclear which entities will be designated and how the plan will be implemented.
Business impact
If the seizure plan is implemented, exchanges and wallet service providers that have trading, custody or fund-transfer relationships with Iran-related entities may face direct constraints under US sanctions and asset freezes, rather than reputational consequences alone. Because the report does not specify the sanctions authority relied upon, the scope of assets or the enforcement procedures, companies currently find it difficult to assess whether their customers or transactions fall within scope; the actual impact will depend on the lists and enforcement documents subsequently published.
In practical business terms, the following can be checked in sequence:
• Confirm whether their own customers or counterparties are connected to Iran-related sanctions lists.
• Check whether the assets they hold fall within the seizure scope announced by the United States.
• Track whether the action is an administrative freeze or a judicial seizure procedure.
Source: The Block · 2026/10/9 22:41
UK Targets Cryptomus and TokenSpot in New Round of Russia Sanctions
The UK has imposed sanctions on three crypto exchanges, two payment platforms and one individual, targeting Cryptomus owner Xeltox Enterprises, TokenSpot, Tsunami Payments and VexPay operator Processing KG. The UK stated that two of the targets processed and facilitated transactions linked to the Russian A7 network. The relevant entities are subject to asset freezes; in addition, four of the companies also face internet services sanctions, under which social media platforms, internet service providers and app stores must take reasonable measures to prevent UK users from accessing their websites and apps. The action forms part of the UK's new round of Russia sanctions covering 38 targets.
Business impact
Asset freezes mean that persons within UK jurisdiction must not deal with the funds or economic resources of the sanctioned entities; internet services sanctions also extend compliance obligations to social media platforms, network service providers and app stores, requiring them to take reasonable measures to restrict UK users' access to the relevant websites and apps. Businesses that have account-opening, settlement, custody, promotional or technical service relationships with these platforms should immediately check the sanctions lists and ownership or control relationships, suspend restricted transactions, and review fund flows and service chains linked to the A7 network.
In practical business terms, the following checks can be carried out in sequence:
• Check the sanctioned entities and their ownership or control relationships.
• Confirm the specific obligations that asset freezes and internet services sanctions impose on your own business.
• Review Russia-related transaction chains for the presence of counterparties linked to the A7 network.
Source: Decrypt · 2026/10/9 20:04
ESMA Consults on Whether Tokenised Collateral Can Be Realised in a Crisis
On 9 October, ESMA launched a call for evidence on the use of tokenised collateral by central counterparties, with a deadline of 15 January 2027 and an assessment of feedback planned for the first quarter of 2027. The document focuses on legal certainty, liquidity and operational risk, including arrangements such as tokenised representations of traditional assets and natively tokenised instruments. The purpose of this call for evidence is not to expand the categories of eligible collateral, but to assess how tokenisation affects the transfer, management, protection and realisation of existing eligible assets, and whether the existing regulatory framework is adequate.
Business impact
Institutions intending to provide tokenized collateral to EU central counterparties should focus on verifying enforceability of rights, custody and segregation, default handling, liquidation timing, and system failure arrangements. The call for evidence itself does not constitute a new license, nor does it automatically change existing asset eligibility; clearing members, clients, custodians, and technical service providers may submit evidence concerning actual operational obstacles.
In operational implementation, the following may be checked in sequence:
• Confirm whether comments are to be submitted before 15 January 2027.
• Verify whether the assets used already qualify as CCP collateral.
• Test custody, segregation, default handling, and liquidation processes.
Source: Cointelegraph · 2026/10/9 18:49
SIM-swap fraudster who stole cryptocurrency to buy gold grills and Dubai trips sentenced to imprisonment
London police reported that Ajay Shinjin was sentenced to two and a half years' imprisonment at Inner London Crown Court on 8 October for his involvement in a SIM-swap fraud. He had previously pleaded guilty to conspiracy to defraud by false representation and transferring criminal property. The case involved the theft of nearly GBP 200,000 in crypto assets in November 2021 by hijacking a BT customer's phone number; Shinjin obtained more than GBP 44,000 of that amount, which was spent on travel, housing, gold grills, and other expenses.
Business impact
This case shows that, after a mobile phone number is hijacked, SMS verification codes may become an entry point for takeover of asset accounts. Crypto platforms, custodians, and users should assess SMS verification, number-change, and account-recovery processes, put appropriate additional verification in place, and retain records of anomalous logins and fund transfers. The sentencing facts themselves do not prove that the United Kingdom has imposed new telecommunications obligations, nor are they sufficient to characterize the case as establishing a new precedent.
In operational implementation, the following may be checked in sequence:
• Check SMS verification, number-change, and account-recovery processes.
• Implement appropriate additional identity verification.
• Retain records of anomalous logins and fund transfers.
Source: Decrypt · 2026/10/9 16:59
This daily report was compiled with AI assistance based on publicly available information and is provided for reference only. It does not constitute legal advice or recommendations.
