Project
Polygon is an Ethereum-compatible proof-of-stake blockchain supporting smart contracts, dapps, and token transfers with low fees.
An attacker with one share unit withdrew about 14,838 DAI from a Polygon Uniswap V4 vault on October 9, Panda Security found. The zero-liquidity fallback paid out the whole balance, so every fallback needs the main path's proportional-payout check.
Reality
Binance will close spot trading in EPIC and QUICK on October 28, 14 days after announcing the removal on October 14. QUICK fell 19.67% and EPIC 10.54% over 24 hours, crypto.news reported, and the sources disagree on withdrawal dates.
Reality
Polygon burned 100 million POL, about 1% of original supply, yet the token trades near $0.10 after sliding from about $0.12 in late September. Fees covered 76% of 30-day emissions, a shortfall too small to explain a 14% price fall.
Reality
Weekly NFT sales edged up 0.90% to $39.85m in the seven days to Oct. 10 as buyer addresses fell 85.33%, according to CryptoSlam data. With trades down only 6.92% and the largest collections keeping their buyers, the drop points to a change in how CryptoSlam counts addresses.
Reality
Abstract, the Igloo-backed Ethereum layer-2, is shutting down after its secured value fell more than 90% from a peak above $291 million. Its closure comes weeks after Blast's, and holders on smaller layer-2 chains now face fixed dates to move their funds before the bridges close.
Reality
Polymarket will retire Data API V1 on Oct. 24, nine days before new markets tentatively move off its 2019 Gnosis contracts onto Protocol V2 on Nov. 2. Old positions stay where they are, so integrations must run both contract systems until legacy markets close.
Perspective Coverage
4 publishersReality
Google Cloud will delete its remaining blockchain nodes and RPC endpoints on December 15, 2026, six months after it stopped creating new ones. Teams still on the service now have a migration to fund and test, with Quicknode as Google's recommended destination.
Reality
One attacker pushed more than twenty malicious GitHub repos from a hijacked account in February, several posing as Polymarket copy-trading bots. Garnet's maintainer published a fifteen-minute checklist for tracing what a bot does with the one signing key it needs.
Reality
Approvals Magic Eden users granted in 2024 let an attacker take 305 NFTs through Limit Break's Payment Processor V2 this September. Closing the marketplace left those permissions working, so NFT holders should revoke on a schedule.
Reality
HIFI raised a $37 million Series A led by Left Lane Capital for rails that settle the dollar side of tokenized trades around the clock. The settlement work is already running on those rails, but HIFI's own volume figures look more like payouts than settlement.
Perspective Coverage
4 publishersReality
CTM360 tracked more than 17,000 compromised URLs serving a fake Cloudflare check whose next hostname arrives from an on-chain lookup. Microsoft put 47 percent of its 2025 initial-access cases down to the technique.
Reality
Blackpoint says a fake Spotify MSI, launched through msiexec.exe, ends with a Node.js agent that reads its live C2 address off a Polygon contract. The same implant has also shipped as Zoom and Teams.
Reality
Sekoia's comparison found the two ClickFix services' injected scripts near identical, while the Exvicy subscription climbed from $1,200 to $2,000 a month and its panel count reached about 80 hosts by late August.
Reality
Cloudflare is now charging for web resources in stablecoins. The product director running that effort says machine payments will eventually need throughput beyond what any existing blockchain can supply.
Reality
Traders put 22 cents on the strait halting by December 31, but the contract resolves only if IMF PortWatch counts ten arrivals or fewer against the fifteen crossing now, while war-risk cover runs 0.7% to 2% of hull value.
Reality
TRM Labs put 198.9 million x402 settlements through a filter for self-payments and thin sellers. $25.62 million survived. Agents got 0.6% to 7.5% of that, on a model TRM says may understate them.
Reality
Elastic documented four programs that stay in the user profile after the stealer wipes itself. The credential rotation that closes the ticket does not restore the update services or clear the Defender exclusions.
Reality
Warren Jenson, who has been finance chief at Amazon, Delta Air Lines and Electronic Arts, takes over capital strategy at a company that has published no audited numbers and paid $112m for its way back into the United States.
Reality
Zscaler's ThreatLabz found SloppyRAT in June 2026 at the end of a ClickFix chain whose live hosts are all ordinary domains, with a Polygon JSON-RPC lookup held in reserve for when those domains stop answering.
Reality
A cross-chain firm that never earned enough to fund itself is closing on September 30, and the 303m tokens it will destroy return no cash to holders or to the $4.1mn of 2021 venture money behind it.
Reality
Security · September 1, 2026 · Confirmed2 publishers
Invest · August 26, 2026 · One report1 publisher