The SOON Foundation has suspended its cross-chain bridge service and is investigating unusual withdrawal activities.

[Intersect Warns of Critical Linux Kernel Vulnerability, Recommends Staking Pool Operators Update Nodes] A weekly report released by Intersect, the Cardano ecosystem governance organization, reveals that the Linux kernel vulnerability CVE-2026-98432 has a CVSS score of 9.8, affecting multiple Linux distributions, including Ubuntu. Intersect recommends that Cardano staking pool operators check the Linux kernel version used by their nodes and update and restart their servers after the distribution releases security patches. Intersect will release security guidance through its official X account and the staking pool operator community.

[Marcus: Balancer Team Ends Routine Work, Protocol Enters Final Stage] On November 1st, Marcus, a member of the Balancer team, stated that the team had completed its final routine workday, and the protocol's operations were entering the final stage. Balancer previously offered products such as weighted liquidity pools, liquidity bootstrapping pools, V2 Vaults, Boosted Pools, and V3. After suffering a security attack over the past year, the team decided to cease operations following asset recovery and organizational restructuring. The Balancer liquidation process will continue in accordance with Proposal BIP-928; users should pay attention to official announcements for asset withdrawal information.

In response to the FBI's call for THORNode operators, RPC node operators, and DeFi platforms to intercept Binance attackers' transactions, THORChain co-founder Chad Barraford stated that THORNode node operators do not possess non-public information, and all relevant data is publicly available in real time, allowing investigators to obtain it without subpoenas.

Troves' xWBTC/WBTC vault was attacked on October 31st, resulting in the loss of approximately 8.6 BTC. Troves has revoked the relevant contract permissions and suspended the affected vault. They are currently tracing the stolen funds and assessing the losses.

On-chain analyst Specter detected that Binance attackers transferred approximately $38 million through the Relay cross-chain bridge within 7 hours, and the transfers are still ongoing. Although Relay claims to have deployed a KYT monitoring system, it failed to stop the transactions, leading Specter to question Relay's compliance and risk management capabilities.