1. Trust Wallet browser extension attacked, resulting in approximately $7 million in losses.
A security incident occurred in Trust Wallet's browser extension version 2.68. The vulnerability resulted in the theft of approximately $7 million in assets from hundreds of users' wallets, with some funds flowing into platforms such as ChangeNOW, FixedFloat, and KuCoin. SlowMist analysis suggests that attackers likely implanted PostHog JS into the extension to steal user information; furthermore, the vulnerability had been exploited for several days before being publicly disclosed. Trust Wallet has released a patched version 2.69 and promised full compensation to affected users.
2. TASS: Sberbank is considering launching crypto-asset-backed ruble loans.
Sberbank, Russia's largest bank, is considering launching a cryptocurrency-backed lending business, offering ruble loans secured by digital assets. Anatoly Popov, the bank's deputy chairman, stated that the bank is prepared to cooperate with regulators to advance the necessary infrastructure, adding that "we hope to formally discuss the transaction soon."
3. Russian media: Putin says he is discussing the management of the Zaporizhia nuclear power plant with the US; the US mentioned electricity used for Bitcoin mining.
During a closed-door meeting with Russian business leaders, Russian President Vladimir Putin stated that Russia is discussing the management of the Zaporizhia nuclear power plant with the United States (not Ukraine). Reports indicate that the US has expressed interest in using electricity from the plant for Bitcoin mining, and discussions have touched upon power supply and cooperation arrangements. The Zaporizhia plant is the largest nuclear power plant in Europe and the ninth largest in the world in terms of installed capacity. Russian troops entered the area in March 2022, and the reactors ceased operation in September of the same year. It is currently managed by Rosatom, the Russian state-owned nuclear energy company.
4. Japan's tax reform outline proposes to introduce separate taxation of crypto assets; the scope and details of application are still to be clarified.
Japan's 2026 fiscal year tax reform outline clearly states that crypto assets will be gradually positioned as "financial products that contribute to the formation of national assets," and explores the application of separate taxation to gains from spot, derivatives, and ETF transactions, while introducing a loss carry-forward mechanism for up to three years. However, not all crypto transactions will be included in the new system; staking, lending gains, and NFT transactions may still be subject to comprehensive taxation. The specific scope and implementation details still need to be clarified by subsequent legislation and regulation.
5. Central Bank of Lithuania: Crypto service providers that fail to obtain licenses by the end of the year will be considered to be operating illegally.
The Central Bank of Lithuania has warned that domestic crypto asset service providers must obtain licenses by December 31st or face penalties as they will be considered operating illegally. The transition period for compliance preparation by crypto exchage and wallet platforms expires at the end of 2025. The Central Bank stated that from January 1st, continuing to recruit new users, receive crypto assets, or provide services without MiCA authorization will be considered illegal financial activity, potentially facing fines, website bans, and up to four years imprisonment. To date, only about 30 institutions have submitted license applications, while there are over 370 registered local crypto service providers, of which approximately 120 are still actively operating.
