Scammers can copy a name, a logo and a job title in a minute. A few checks you can run yourself show whether a “support agent”, recruiter or business partner is real.

A message lands on Telegram: “Hi, I’m Daniel from the security team at your exchange. We saw a login from a new device. Please confirm your wallet so we can protect your funds.” The profile photo shows the company logo. The English is good. Daniel is patient, and he knows your username.

Daniel does not work at the exchange. He works for a scam crew, and the “confirm your wallet” link empties your wallet.

People reported losing $3.5 billion to imposter scams in 2025, and nearly $1 billion of that went to people pretending to be a business, according to the FTC’s June 2026 report. The FBI’s figure for crypto is bigger. Victims told its Internet Crime Complaint Center they lost $11.4 billion to crypto-related crime in 2025, more than half of all the losses it counted that year (IC3 2025 report).

A lot of those losses started the same way. Someone claimed to work for a company, and the victim took their word for it. Some victims did not know how to check. Others saw a familiar name, a logo and a confident tone, and felt no need.

The checks run from a 30-second test to reading the hidden part of an email. If you only have time for two, use the first and the tenth: both are free, and both are very hard for a scammer to fake.

The one rule behind every check

Never use the contact details a stranger gives you to check that stranger.

If “Daniel” sends you a phone number, a website or an email address and says “contact us here to confirm”, all three belong to Daniel. Calling the number he gave you only proves that Daniel answers his own phone.

Every check in this list works the same way. You find the company’s official channel yourself, from a source the stranger did not hand you. Then you ask that channel whether the person is real.

Why people skip the check

It looks official, so we assume it is. A logo, a job title and a company name take a minute to copy. Real staff photos sit on LinkedIn and on company “Team” pages for anyone to download.

They already know something about us. Your username, your last order or the exchange you use is often public, or leaked in a data breach. Knowing those details says nothing about who the sender is.

There is a clock. “Your account will be frozen in 30 minutes.” The deadline is there to stop you checking. A real company will still exist after you spend ten minutes confirming.

The more urgent the message, the slower you should move.

13 ways to check that someone works for a company

1. Contact the company yourself, through its official website

Type the company’s address into your browser by hand, or use a bookmark you saved earlier. Skip links in the message and skip search ads, because scammers buy ads for fake support pages. Find the support page or contact form and ask: “Someone called Daniel, Telegram @daniel_sec_team, says he works on your security team and contacted me today. Is that real?”

Example. A “recruiter” emails about a job at a well-known firm. You open the firm’s careers page from a bookmark. The role is not listed, and the HR address on the page is another one. The recruiter does not work for the firm.

The catch is speed. If support takes two days to reply, wait two days, and do nothing the stranger asks in the meantime.

2. Use the company’s own checking tool

Many crypto exchanges now run a page where you paste a username, email, phone number or link, and it tells you whether the contact is official. Three examples:

• Binance Verify at binance.com/en/official-verification checks domains, email addresses, phone numbers and social handles, Telegram included. Binance says anyone who claims to work with Binance and cannot be confirmed there should be treated as untrusted.
• OKX has a channel verification page in its Help Center. OKX says to type the “@” before a username, or the result can be wrong.
• KuCoin runs an Official Verification Center at kucoin.com/cert. It checks emails, Telegram IDs, X accounts, websites and official wallet addresses.

Example. “Binance support” adds you on Telegram as @BinanceSupportDesk. You paste the handle into Binance Verify, and it comes back as not official. Block the account and report it.

Reach these tools by typing the exchange’s main address yourself and looking in its Help Center for “verify” or “official channel”. If the stranger sends you a link to a “checking tool”, that link is the trap.

A tool can confirm that an address belongs to the company. It cannot confirm that an email really came from that address, because the From line can be forged. Bybit’s own help page warns about this. For email, add check 5.

3. Ask them to message you from the company’s official X account

Ask the person to prove it on a channel only the company controls. Better still, contact that channel yourself. Here is a message you can send:

“Before I continue, please send me a DM from @ExampleExchange, the official account, confirming you work there and what this is about. Or I can DM that account and ask.”

A real employee will say “sure” or send you to the official support channel. A scammer will make excuses: “That account is for marketing only”, “our team can’t access it”, “this is confidential.” Each of those excuses means the person cannot prove it.

Make sure you have the right official account. Open it from a link on the company’s own website, since search results can show copycat accounts. It should have years of posts and the follower count you would expect.

Then look for X’s affiliate badge. Companies that pay X to verify their brand can link their staff accounts. An affiliated employee shows a small copy of the company’s profile picture next to their name, and tapping it opens the company’s account. A plain blue tick on a personal account says nothing about employment, because anyone can buy one.

Official accounts do get hacked. If the official account suddenly DMs you first with a link, treat that as suspicious too. Most companies never start private conversations about your account.

4. Ask for an email from the company domain, then read that domain letter by letter

A real employee can email you from a work address in a minute. Ask for it. A recruiter or “partner” who only uses Gmail, Outlook.com, Telegram or WhatsApp fails this test.

Then read the address slowly. Say the real company is Example Exchange at example.com. Each of these addresses is fake:

• support@examp1e.com (the digit 1 in place of the letter l)
• hr@exarnple.com ("rn" looks like "m" in many fonts)
• security@example-support.com (an extra word added to the name)
• team@example.co (the wrong ending)
• alerts@example.com.account-check.net (the real domain is account-check.net, read from the right)
• help@exаmple.com (the "а" is a Cyrillic letter that looks the same as the Latin one)

Two more things to check in the same email:

• The display name can say anything. “Example Exchange Security” might sit on top of x7k2@mail-ru.biz. Click or tap the name to see the real address.
• The Reply-To can differ. An email can arrive from an address that looks right and still send your reply to a stranger. Hit reply and look at the “To” field before you type.

A correct domain is a good start. On its own it can still be forged, which is why check 5 comes next.

5. Check the email’s sign-in results (SPF, DKIM and DMARC)

Every email carries test results that show whether it really came from the domain in the From line. Your inbox runs these tests already. You just have to look.

In Gmail, open the email, click the three dots and choose “Show original”. In Outlook, open the message, then More actions, View, “View message source”. In Apple Mail, choose View, Message, Raw Source.

Find the line that starts with Authentication-Results. A real email from example.com looks like this:

dkim=pass header.d=example.com; spf=pass smtp.mailfrom=example.com; dmarc=pass header.from=example.com

In plain words:

• SPF pass means the server that sent the email is on the domain’s approved list.
• DKIM pass means the email carries the domain’s digital signature, and nobody changed the message on the way.
• DMARC pass means at least one of those two tests passed for the same domain you see in the From line. This is the result to read first.

Warning signs: dmarc=fail, spf=fail, dkim=none, or a pass for some other domain, such as dkim=pass header.d=bulk-mailer-7.net on an email that claims to be from example.com.

Example. An email from “security@example.com” asks you to reset your password. Gmail’s “Show original” says dmarc=fail header.from=example.com. The From line is forged. Delete the email.

A DMARC pass means the email left a mail system the company approved. A hacked staff mailbox passes too, and forwarded emails sometimes fail SPF while being genuine. Treat the result as strong evidence and combine it with the other checks.

6. Paste the raw email into an AI chatbot and ask it to find the tricks

Raw email source is hard to read. A chatbot such as ChatGPT, Claude or Gemini can read it for you and point at the parts that look wrong.

1. Open “Show original” (or “View message source”) as in check 5 and copy everything.
2. Remove your own details first: your email address, name, phone number, account numbers and any codes. Replace each with “[removed]”.
3. Paste the text into the chatbot with a prompt like this one.

“Below is the raw source of an email, including headers and HTML. I think it may be a phishing email pretending to be from example.com. Please check: (1) Do SPF, DKIM and DMARC pass, and for which domain? (2) Does the From address match the Return-Path and Reply-To? (3) List every link in the HTML and show where it really points, compared with the text shown to me. (4) Are any domains lookalikes of example.com? (5) Anything else suspicious? Quote the exact lines you rely on.”

AI is good at this job. It will catch a link whose visible text says https://example.com/login while the code behind it points to https://example-com.login-verify.app, and it spots lookalike domains and hidden text far faster than most people do.

Example. You paste a “your withdrawal is on hold” email. The chatbot lists four links. Three go to example.com. The “Release funds” button goes to a domain nobody at the company owns, and that button is the scam.

Chatbots also make mistakes in both directions. An email that “looks fine” to a chatbot can still come from a hacked real account. Make it quote the lines it relies on, then check those lines yourself. Never paste passwords, seed phrases or one-time codes into any chatbot.

7. Hover over links and check when the domain was registered

Before you click anything, hover over the link on a computer, or press and hold it on a phone, to see the real address. Read the domain from the right, as in check 4.

Then look up when the domain was created. Paste it into the ICANN lookup and check the “Created” date. A company that has existed for ten years does not send security alerts from a domain registered last Tuesday.

Example. A “partnership manager” from a known crypto project emails from bd@exampleprotocol-team.com. ICANN lookup shows the domain was created nine days ago. The project's real site has used a different domain since 2021.

A brand-new domain is a strong warning sign. An old domain proves less, because some scam domains sit unused for months before they are used.

8. Check their LinkedIn the right way

A LinkedIn profile is easy to fake. A good fake still leaves gaps you can spot.

• Look for LinkedIn’s workplace check. LinkedIn lets members confirm their current employer, most often with a code sent to their work email, and the result shows on the profile. It confirms the company only. The job title is unchecked, and only some companies support it so far.
• Start from the company page. Open the company’s official LinkedIn page, go to its People tab and search for the name. Searching from the company side is harder to fool than clicking a profile someone sent you.
• Read the history. Real profiles usually have years of posts, a work history that makes sense, and connections who also work at the company. Fake ones are often new, with a few hundred random connections and a headshot that looks too perfect.
• Message the profile directly. Ask the LinkedIn account to confirm the chat you are having on Telegram or WhatsApp. Scammers often copy a real employee’s profile, and the real employee will reply confused.

A long history plus a workplace check is good evidence that the person exists and works there. It does not show that the person messaging you on another app is the same person, so always confirm on the profile itself.

9. Check the company’s team page, docs, GitHub and community admin lists

Many companies publish who speaks for them:

• The Team or About page on the official website.
• The docs or Help Center, which often list official support channels and say “we will never DM you first.”
• The GitHub organization. Open github.com/the-company and look at public members. A developer who says they work there can usually be found in that list.
• Telegram and Discord admin lists. Check the admin’s username, the part with the @, and ignore the display name. Anyone can set a display name to “Example Support | Admin”. OKX advises copying the username from the profile screen. If the “username” appears only in the bio, the account is probably fake.

Example. You post a question in a project’s Discord, and “Mod Alex” sends you a private message offering help. You check the server’s member list. The real Alex has a staff role and a different username. The account in your DMs joined the server yesterday.

Lists go stale when people leave, so when the stakes are high, confirm with check 1 as well.

10. Call back through the switchboard

If someone phones you from “the company”, hang up and call the number on the company’s website or on the back of your card. Ask to be put through to that person or department.

Example. “Your bank’s fraud team” calls and asks you to move savings to a “safe account”. You hang up and dial the number printed on your bank card. The bank has no record of the call. The FTC says bank impersonators caused the largest reported losses among business imposters in 2025, and these scams often end with victims persuaded to move money to “protect” it.

This check is hard to beat. Use another phone if you can, because some scams keep the line open after you hang up.

11. For crypto: ask for a signed message from a known wallet

Crypto has a check that nobody can fake without the private key. If a project or team member claims to control a wallet the project lists publicly, ask them to sign a message with it.

1. Find the wallet address yourself, in the project’s official docs, website or official X account.
2. Ask them to sign a message with today’s date and your name in it, such as: “I am Daniel from Example Protocol. Signed for Priya on 29 October 2026.” The date and your name stop them from reusing an old signature.
3. Check the signature on Etherscan’s Verified Signatures page. BaseScan, Arbiscan and other Ethereum-style explorers have the same tool. Enter the address, the message and the signature, and see whether it is valid.

A valid signature proves the signer controls that wallet. Whether the wallet belongs to the project depends on where you found the address, which is why step 1 matters.

12. Don’t treat a video call as proof

Plenty of people still treat a video call as the final word. Since 2024 that has been a costly habit. In January 2024, a finance employee at the Hong Kong office of engineering firm Arup joined a video call with what looked like the company’s CFO and other colleagues. Every other face on the call was a deepfake. The employee made 15 transfers worth HK$200 million, about $25.6 million, before checking with the head office, Hong Kong police said. Arup later confirmed to CNN that fake voices and images were used.

If a video call is part of the story, confirm through a second channel you found yourself: the company switchboard, the official X account or a work email you already confirmed with checks 4 and 5. Ask for a calendar invite sent from the company domain, and run check 5 on it.

13. Search their name, handle and domain with “scam”

Spend a minute on a web search:

• "@daniel_sec_team" scam
• "example-support.com"
• "Example Exchange" recruiter scam

Also look for the company’s own warnings. Many companies publish lists of fake domains and copycat tricks on their blog or Help Center.

If others have reported the same handle or domain, you know it is a scam within a minute. An empty search proves nothing, because a new scam has no reports yet.

Requests that end the conversation, whoever is asking

Some requests are scams however well the person passes these 13 checks, because a hacked real account can pass every test. Nothing makes these requests safe:

• Your seed phrase, recovery phrase or private key. No company ever needs it. Anyone who asks is stealing.
• Your password or a one-time code from SMS, email or an authenticator app.
• Remote access or screen sharing through AnyDesk, TeamViewer or a “support tool”.
• Moving money to a “safe” or “secure” wallet or account to protect it.
• Paying to receive money, such as a fee to unlock a withdrawal, a deposit to start a job, or “gas” to claim a prize.
• Installing software for a job interview. Fake crypto recruiters ask candidates to install a “video call app” or run a coding test that carries malware.
• Connecting your wallet to “verify” it, or signing a transaction you do not understand.

When you see one of these, stop. You don’t owe anyone a polite goodbye.

Three common scams, checked step by step

Scam 1: Fake exchange support on Telegram

The message. “@ExampleEx_Support” writes: “Your withdrawal is stuck. Connect your wallet at example-unlock.com to release it.”

The checks.

1. Check 2: the exchange’s checking tool says the handle is not official.
2. Check 7: ICANN lookup shows example-unlock.com was created this month.
3. The requests list: “connect your wallet to release funds” is on it.

Verdict. Scam. Block the account and report it to the exchange and to Telegram.

Scam 2: A recruiter from a crypto firm

The message. A LinkedIn profile titled “Senior Talent Partner at Example Labs” offers $180,000 for a remote developer role. The next step is a “technical test”: download a code repository and run it on your laptop.

The checks.

1. Check 4: you ask for an email from @examplelabs.com. The reply comes from a Gmail account, “because of internal policy”.
2. Check 8: nobody with that name appears on Example Labs’ LinkedIn People tab, and the profile is four months old.
3. Check 1: Example Labs’ careers page lists no such role.
4. The requests list: running unknown code from a stranger is on it.

Verdict. Scam. If you already ran the code, treat the laptop as compromised. Move any crypto to a new wallet created on a clean device, and change your passwords from that device.

Scam 3: A “partnership” email to a small project

The message. “Hi, I lead business development at Example Exchange. We’d like to list your token. Please sign the attached agreement and pay the $15,000 listing deposit.”

The checks.

1. Check 5: “Show original” says dmarc=pass header.from=example-exchange-listing.com. The email really came from that domain, and that domain belongs to someone else.
2. Check 3: you DM the exchange’s official X account. The exchange replies that it never asks for listing deposits by email and does not know this person.
3. Check 2: the exchange’s checking tool does not recognize the address.

Verdict. Scam. The email passed DMARC for its own lookalike domain, which is why reading the domain letter by letter (check 4) comes before the header check.

A checklist you can save

Before you share anything, pay anything or click anything:

• I found the company’s contact details myself. This person did not give them to me.
• I asked the company, through that channel, whether this person is real.
• I checked the handle or email in the company’s checking tool, if it has one.
• I read the email domain letter by letter, from the right.
• “Show original” shows dmarc=pass for the company's real domain.
• I checked where every link really goes, by hovering or with AI.
• The domain is more than a few months old.
• Their LinkedIn, team page or GitHub matches, and I searched from the company’s side.
• Nobody asked for a seed phrase, code, password, remote access, a fee or a software install.
• I am not rushing because someone told me to.

If any line fails, stop and confirm through a channel you found yourself.

If you already replied or paid

Act in this order:

1. Stop all contact. Do not send “one last” payment to unlock the first one. Fake “recovery” offers usually follow, often from the same crew.
2. Secure your accounts from a device you trust. Change passwords, reset two-factor authentication and log out of other sessions.
3. Move your crypto to a new wallet with a new seed phrase if you shared the old phrase or connected your wallet to a site. Revoke token approvals you do not recognize.
4. Tell the real company through its official support. The company can freeze accounts and warn other users.
5. Report it. In the US, use reportfraud.ftc.gov and the FBI’s ic3.gov. In the UK, use Report Fraud. Elsewhere, contact your national police cyber-crime unit.

FAQ

How can I verify if someone works for a company?

Contact the company through a channel you found yourself, such as its official website or official X account, and ask whether the person works there. Back that up with the company’s checking tool if it has one, a work email from the real domain that passes DMARC, and LinkedIn’s workplace check.

Can a verified X account be fake?

Yes. Anyone can buy a blue checkmark, and it says nothing about employment. On X, staff linked to a verified company show an affiliate badge, a small copy of the company’s logo next to their name. Official accounts can still be hacked, so pair the badge with a second check.

Is an email from the company’s domain always safe?

No. The From address can be forged, which is why you check for dmarc=pass in the raw headers. A real staff mailbox can also be hacked, and a hacked mailbox passes every check. If the email asks for anything on the requests list, treat it as a scam even when the headers pass.

Can AI tell me if an email is a scam?

AI is very good at reading raw email source and finding fake links, lookalike domains and failed SPF, DKIM or DMARC results. It still makes mistakes. Use it to point at the suspicious lines, check those lines yourself, and remove your personal details before you paste.

Will a real company ever message me first on Telegram or WhatsApp?

Most large crypto exchanges say their staff will not start private chats about your account and will never ask for funds, passwords or codes. Check the company’s Help Center for its own policy, and treat any unprompted private message as unconfirmed until you check it.

What is the safest way to check a recruiter?

Ask for an email from the company domain, find the role on the company’s own careers page, and search the recruiter’s name on the company’s LinkedIn People tab. Never pay a fee, buy equipment through the recruiter, or install software as part of an interview.

What should I do if someone fails these checks?

Stop replying, block the account, and report it to the real company and to the platform where you met. If you shared anything or sent money, follow the steps under “If you already replied or paid”.

Gaurav Agarwal writes about crypto security and on-chain investigations. If a scam message reached you that these checks did not cover, describe it in the comments, without personal details, and I will add a check for it.

---

How to Verify Someone Really Works for a Company: 13 Checks was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.

South Korean prosecutors have raided cryptocurrency exchange Bithumb’s headquarters as part of an ongoing investigation into allegations that former and current executives misused company funds allocated for luxury housing. According to an October 29 report by local media outlet News1…

London Metal Exchange explores tokenizing Hong Kong metal inventories for financing as HKEX prepares a warehouse-receipt blockchain pilot for 2027.

BNB Chain has activated the Jenner hardfork on its BNB Smart Chain testnet, introducing a new payment processing mechanism that reserves 5% of block gas capacity for eligible transactions during periods of network congestion. According to BNB Chain’s October 29…

Utah files 14 criminal charges against Kalshi and its founders over alleged illegal sports gambling as the CFTC challenges state enforcement powers.

Russia has developed a common testing standard for cryptocurrency investors, with brokerage firms expected to become the first regulated intermediaries to assess customers before allowing them to buy and sell digital assets. According to Russian news outlet RBC, National Association…

The late discovery of FTX's liquidity crisis highlights the need for transparency and robust risk management in crypto exchanges.

The post Former FTX COO Constance Wang says she learned of the liquidity hole only hours before the public appeared first on Crypto Briefing.

Samsung's increased chip investment highlights the critical role of AI in driving semiconductor demand, potentially reshaping global tech dynamics.

The post Samsung raises 2026 chip capex to ₩76.8 trillion as AI memory demand surges appeared first on Crypto Briefing.

The competition between Morpho Blue and Aave V3 could reshape DeFi lending dynamics, influencing borrower behavior and market stability.

The post Morpho Blue closes in on Aave V3 in stablecoin supply appeared first on Crypto Briefing.

The rapid growth of tokenized stocks highlights a shift towards blockchain-based equity access, but market concentration poses significant risks.

The post Tokenized stocks hit $4.63 billion, matching stablecoins’ March 2020 size appeared first on Crypto Briefing.

The potential collaboration could signal a shift in US-Russia relations, impacting global energy markets and AI infrastructure development.

The post Rosatom explores US partnership for small nuclear plants to power AI data centers appeared first on Crypto Briefing.

The potential collaboration highlights AI's growing energy demands as a geopolitical factor, but sanctions and uncertainties pose significant hurdles.

The post Rosatom discusses small nuclear plants for US AI data centers appeared first on Crypto Briefing.

Bitcoin Core developers have released security updates after an AI-powered code scan uncovered three vulnerabilities, including one that could allow attackers to crash Bitcoin nodes running on Windows and macOS.

The findings were made public on October 28, after developers verified the issues and distributed fixes across supported software versions.

The timing is particularly interesting. Bitcoin Core recently changed its security disclosure policy because artificial intelligence is making certain software weaknesses much easier to discover.

For people operating Bitcoin nodes, the message is straightforward: keeping software updated is becoming more important as vulnerability research accelerates.

TL;DR

• Bitcoin Core disclosed three vulnerabilities discovered through AI-assisted code scanning, including a flaw that could crash nodes running on Windows, macOS, and BSD.
• Security fixes are available in Bitcoin Core versions 29.5, 30.4, 31.2, and 32.1.
• Developers are speeding up vulnerability disclosures as AI tools make previously hidden software weaknesses easier to find.

AI Discovers A Bug That Can Crash Bitcoin Nodes

The most serious concern involves how Bitcoin Core handles certain network connections on operating systems other than Linux.

An attacker connected to a vulnerable node could send specially handled TCP data that causes the software to consume increasing amounts of memory.

Eventually, the affected node could run out of memory and crash.

The vulnerability was discovered on October 23 through Project Loupe, an automated code-scanning initiative developed by Elias Rohrer at Spiral.

Bitcoin Core contributor Gregory Sanders verified the finding before it reached the project’s security team.

According to Bitcoin Core’s official security advisory, the issue affects Windows, macOS, and BSD systems. Linux nodes are not vulnerable to this particular flaw because they use a different mechanism for monitoring network connections.

Importantly, this is a denial-of-service vulnerability. The advisory does not describe an attack that allows someone to steal Bitcoin from a wallet.

Two More Vulnerabilities Raise Questions

The same investigation uncovered two additional weaknesses.

One involved outdated peer connections that could remain open while messages accumulated in memory.

Under certain conditions, this could gradually exhaust a node’s resources and interfere with normal operation.

The third issue concerned the files Bitcoin Core uses to reverse blockchain changes during reorganizations.

An attacker with substantial mining capabilities could theoretically create conditions that corrupt these records and force affected nodes to shut down.

However, developers classified that vulnerability as low severity because exploiting it would require highly impractical circumstances.

The distinction matters. Not every security flaw presents the same level of danger, even when the technical description sounds alarming.

For anyone following Bitcoin developments, these disclosures offer a useful reminder that maintaining the network involves continuous software improvements.

Bitcoin Core Changes How It Reports Security Problems

Perhaps the biggest development isn’t the vulnerabilities themselves, but how quickly they were disclosed.

Previously, Bitcoin Core could keep certain security issues confidential for extended periods, giving node operators time to install fixes before details became public.

That approach becomes less effective when automated tools can independently rediscover the same weaknesses.

Under the updated policy, vulnerabilities considered easy to discover can receive faster patches and public advisories.

We can understand the reasoning. Keeping a flaw secret provides limited protection if someone else can find it with a relatively simple AI-assisted scan.

The challenge is balancing faster disclosures with sufficient testing.

Developers must ensure urgent security updates don’t introduce additional problems.

What Bitcoin Node Operators Should Know

Bitcoin Core has released patched versions 29.5, 30.4, 31.2, and 32.1.

Operators running affected versions should review the official release information and update their software.

There is one important limitation: the fix for the undo-file vulnerability does not fully protect 32-bit systems or nodes storing blockchain data on FAT32 drives.

Those configurations remain exposed to that particular issue.

For exchanges, miners, and businesses relying on Bitcoin infrastructure, software maintenance is an operational priority.

A node that crashes may temporarily stop validating and relaying transactions, potentially disrupting services that depend on it.

The broader blockchain industry faces similar challenges as software systems become more complex.

AI Is Changing The Future Of Crypto Security

AI-assisted security research presents both an opportunity and a challenge.

Developers can examine large codebases more efficiently, identify overlooked problems, and address vulnerabilities before they cause serious damage.

Unfortunately, attackers may benefit from those same capabilities.

That’s why Bitcoin Core’s decision to accelerate disclosures deserves attention.

Rather than assuming that keeping vulnerabilities confidential will always protect users, developers are adapting to a world where finding bugs may become considerably easier.

We’ll be watching how this approach affects future security updates, particularly as more AI-generated reports reach cryptocurrency development teams.

For now, the latest fixes demonstrate that Bitcoin’s security depends not only on its underlying cryptography but also on the people maintaining the software.

As we continue covering cryptocurrency security and industry news, that distinction will remain important.

Bitcoin ETFs drew $424 million over three days, lifting October net inflows to $111 million despite a hawkish Federal Reserve decision and weaker crypto sentiment.

Bitcoin could reach $1.6 million by 2036, according to Bitwise latest forecast. The asset manager raised its target from $1.3 million despite Bitcoin’s difficult year. Chief Investment Officer Matt Hougan said the updated model points to stronger long-term growth. The new Bitcoin price prediction reflects expanding institutional demand and a larger market for store-of-value assets.

Bitcoin is better positioned today than at any point in its past. We're boosting our 10-year bitcoin target from $1.3m to $1.6m. https://t.co/oQG2kKXbvo

— Matt Hougan (@Matt_Hougan) October 28, 2026

Bitwise published its 2027 Bitcoin Long-Term Capital Market Assumptions on October 28. The report projects a 34.3% compound annual growth rate over the next decade. Last year’s model projected annualized returns of 28.3%.

The revised Bitcoin price prediction comes after Bitcoin fell more than 50% between October 2025 and June 2026. It subsequently recovered from lows below $59,000. Bitwise believes the latest downturn supports its argument that Bitcoin’s market structure is maturing.

Discover: The Crypto Presales This Q4 2026

Why Bitwise Sees Bitcoin Reaching $1.6 Million?

Bitwise builds its Bitcoin price prediction around the market Bitcoin could capture over the next decade. Its model estimates that the global store-of-value market could reach $110 trillion by 2036. That compares with the previous estimate of $91 trillion.

The firm also expects the institutional investment market to expand from $216 trillion to $303 trillion. Its model assumes Bitcoin captures 25% of the store-of-value market. It also assumes institutions allocate between 1% and 5% of their portfolios to Bitcoin.

Those allocations could generate between $1.5 trillion and $7.4 trillion in institutional demand. Bitwise estimates that new Bitcoin issuance will contribute only around $14 billion annually. The growing gap between potential demand and new supply underpins its bullish outlook.

Still bullish, Bitwise bear-case scenario puts Bitcoin at $130,686 by 2036. Its bull case reaches nearly $3.67 million, illustrating the enormous range of possible outcomes.

Discover: The Best Token Presales

Bitcoin’s Next Growth Phase Could Depend on Utility

Institutional adoption is only one part of Bitcoin’s long-term story. The network’s limited supply makes it attractive to investors seeking alternatives to traditional stores of value. However, expanding Bitcoin’s practical uses could also strengthen demand beyond simply holding BTC.

That has created opportunities for projects developing additional functionality around Bitcoin. Layer-2 networks aim to support faster transactions, lower costs, and applications that would otherwise be difficult to run directly on Bitcoin’s base layer.

When your golf swing is Hyper Powered. https://t.co/VNG0P4FWNQ pic.twitter.com/FelpOqk99g

— Bitcoin Hyper (@BTC_Hyper2) October 29, 2026

Bitcoin Hyper is one project pursuing that direction. Its proposed Layer-2 network combines Bitcoin-focused functionality with Solana Virtual Machine architecture. The goal is to support faster BTC transactions alongside decentralized finance applications and other on-chain activity.

The project has also raised more than $33 million through its token presale. It offers staking rewards of up to 35% APY, while its wallet has entered testnet testing. The team has announced November 26, 2026, as the planned token launch date, so just less than a month to make the most of it.

If Bitcoin reaches Bitwise’s $1.6 million target by 2036, Bitcoin Hyper could ride one of the biggest waves of capital inflows in crypto history. As BTC becomes an increasingly valuable institutional asset, demand for faster transactions, low-cost transfers, and Bitcoin-powered DeFi could accelerate.

Gain Access to New Bitcoin Layer 2 Early Before the Presale Window Ends

The post Bitwise Raises Bitcoin Price Target to $1.6 Million as Institutional Demand Grows appeared first on Cryptonews.

Bitcoin price faces another major test on October 30, when $11 billion in options contracts expire. The FOMC has already delivered its latest interest-rate decision, leaving traders to assess whether Bitcoin can hold its ground as derivatives positioning resets. A relief rally could emerge if the market absorbs the Fed’s message without another selling pressure.

The Federal Reserve held interest rates at 3.75% to 4% on October 28, matching expectations. However, two officials dissented, preferring a quarter-point rate hike. The decision removed one immediate source of uncertainty, but the Fed’s stance on future policy remains important for risk assets.

Read Chairman Warsh's full opening statement from the #FOMC press conference (PDF):  https://t.co/TPqQ7MKO7m pic.twitter.com/1SUkOfaU0T

— Federal Reserve (@federalreserve) October 28, 2026

Bitcoin now has an opportunity to shift attention back toward market positioning and demand as the approaching option expiry could force another price swing.

Discover: The Crypto Presales This Q4 2026

Bitcoin Price Faces $11B Option Expiry as Calls Outnumber Puts

Around $11 billion in Bitcoin options are scheduled to expire on Friday, October 30. The contracts represent a substantial concentration of open interest, making the settlement an important event for short-term volatility.

Derivatives data reported ahead of expiry showed more call options than puts. One estimate placed the put-to-call ratio near 0.53, indicating that outstanding call contracts significantly outnumbered puts. Calls generally benefit from higher prices, while puts can provide protection against declines.

This positioning offers a potentially bullish talking point, and options open interest reflects existing contracts. Some calls may be part of hedged strategies, but puts can serve purposes beyond outright bearish bets.

The $78,000 area has also emerged as a key reference point in expiry estimates. Often described as the maximum-pain level, it represents the theoretical settlement price at which aggregate option-holder payouts would be minimized.

But Bitcoin can settle well above or below the $78K price level, depending on market demand, liquidity, and trading activity. For us, the more constructive scenario would be Bitcoin holding support as contracts approach settlement. If dealers adjust their hedges and expiring positions disappear without triggering substantial selling, the market could find room for a directional recovery.

FOMC Uncertainty Clears, but December Remains a Wildcard

The FOMC decision is behind the market, but its implications extend beyond October. The Fed kept rates unchanged while describing economic activity as strong and inflation as elevated.

The two dissents favoring a rate hike also complicate the bullish interpretation. They signal that policymakers remain concerned about inflation, even as the committee maintains its current target range.

For Bitcoin price, the immediate question is if the markets had already accounted for the expected rate hold. When an anticipated decision arrives without a major surprise, traders can redirect their attention toward positioning, liquidity, and incoming economic data.

This creates room for a relief rally if investors conclude the announcement was less damaging than feared. Conversely, concerns about tighter policy later in the year could continue to weigh on risk appetite.

The next FOMC meeting is scheduled for December 8–9. Until then, inflation reports, employment figures and comments from policymakers could reshape expectations for the next rate decision.

The FOMC has removed one immediate event risk, but monetary-policy uncertainty has not disappeared. The options settlement is the next test, and a stable reaction could help bulls build momentum.

A bullish breakout is possible. Bitcoin price needs confirmation from buyers before traders can confidently treat the expiry as a turning point.

Discover: The Best Token Presales

The post Bitcoin Price Faces $11B Options Expiry After FOMC Uncertainty Clears appeared first on Cryptonews.

Sony has launched a new Soneium incubation program targeting blockchain-powered entertainment, including PlayStation games, anime, and digital collectibles. The initiative could open new doors for onchain gaming and fan experiences, although Sony has not announced any specific PlayStation crypto integration.

The Sony Onchain Entertainment Incubation Program opened applications on October 29 and will accept submissions through December 2026. It invites startups and creators to develop entertainment products using Soneium, the Sony blockchain network.

1/ Sony Group is launching the Sony Onchain Entertainment Incubation Program: A global program for builders and creators bringing Entertainment and Tokenized IP to life on Soneium.

Selected projects will gain access to:

Get co-creation opportunities with Sony Group
… pic.twitter.com/SzMFhKFUE1

— Soneium (@soneium) October 29, 2026

Selected projects can receive technical infrastructure, marketing and business development support, community-building opportunities, and potential investment consideration. Sony said the program aims to move projects beyond technical experiments toward entertainment products that deliver tangible value to users.

Discover: The Crypto Presales This Q4 2026

Sony Soneium Targets Games, Anime and Digital Collectibles

Sony’s new program covers a wide range of entertainment products, extending beyond traditional blockchain gaming. Its target categories include console, PC and mobile games, anime, manga, music, films, esports, immersive experiences, and creator communities.

The company is also seeking projects that use blockchain to change how audiences interact with entertainment intellectual property. Potential applications include digital collectibles, fan communities, merchandise, and experiences that let users participate more directly in creator-led ecosystems.

Applicants must demonstrate a clear connection between entertainment, intellectual property, and onchain technology. Projects must also support Soneium, although multichain approaches are welcome if the network is properly integrated.

Sony has already built an incubation track record through two earlier initiatives. Soneium Spark selected 32 projects from more than 1,700 applications in 2024, while Soneium For All selected 11 projects from more than 250 applications in 2025.

The new program narrows that ecosystem-building effort toward entertainment experiences. Sony is looking for products that can connect content, communities, and digital assets in ways that encourage sustained user participation.

PlayStation Crypto Speculation Returns, but No Integration Is Confirmed

The announcement follows a fresh Soneium token announcement, and Sony’s wider gaming and blockchain ambitions. PlayStation games are explicitly included in the program’s target categories, and the program invites independent startups and creators to develop entertainment projects compatible with Soneium.

Anime is another notable area of interest, reflecting the overlap between entertainment franchises and highly engaged fan communities. Sony’s program explicitly includes anime and character intellectual property, creating room for developers to explore blockchain-based collectibles and other fan experiences.

Applications will undergo screening and selection from November 2026 through March 2027, with selected startups beginning to receive support on a rolling basis. Sony says participation does not guarantee investment, which remains subject to separate evaluation.

For now, the clearest takeaway is that Sony wants more entertainment businesses built around Soneium.

Discover: The Best Token Presales

The post Sony Sonenium Incubation Program Targets PlayStation Games and Anime appeared first on Cryptonews.

Perplexity AI predicts a significant development for Somnia crypto by January 1, 2027. Since September, SOMI has surged over 100%, making it one of the market’s hottest projects. Perplexity believes a major catalyst could propel it further in the fourth quarter.

The core idea is that a consortium of major gaming studios, social platforms, and AI infrastructure companies may select Somnia as the preferred high-performance Layer-1 solution for real-time, mass-consumer applications.

In this scenario, large-scale on-chain games, social experiences, and autonomous AI agent networks would primarily operate on Somnia. This shift could dramatically increase transaction volume and position SOMI as critical infrastructure for the next generation of interactive digital experiences.

(SOURCE: Perplexity AI Predicts Somnia Crypto Explosion)

SOMI Crypto Technical Analysis: What Breakout Levels Could Kickstart the Perplexity Prediction?

On the higher timeframes, SOMI has been consolidating in the $0.175 to $0.185 range after experiencing a broader pullback from higher levels earlier in its trading history. The price has continued to hold above recent lows while facing resistance in the $0.20 to $0.25 zone.

In a typical bull market, a sustained breakout above $0.30 to $0.40 would confirm intermediate strength and open the path toward higher recovery targets, potentially paving the way for a longer-term move toward previous peaks near $1.80.

If gaming, social media, and AI agents see widespread consumer adoption, breaking through key resistance levels is likely to trigger powerful measured-move extensions and multi-cycle Fibonacci projections based on a longer-term foundation.

Currently, momentum indicators are neutral, suggesting substantial potential for a move toward the extreme overbought conditions typically seen in high-beta Layer-1 advances.

Key near-term support levels are situated around $0.17–$0.175 and $0.15–$0.16. Maintaining these levels is crucial for preserving the broader market structure.

EXPLORE: The Crypto Presales This Q4 2026

Maxi Doge Targets Early-Mover Interest as SOMI Crypto Tests Key Support Levels

With SOMI yet to go parabolic, as Perplexity AI predicts, near-term upside depends on follow-through. Even a positive announcement may not erase overhead resistance; that is the awkward part of buying a rumor before the chart confirms it.

Some traders look beyond large-cap setups to early-stage projects, accepting much higher execution and liquidity risk, and Maxi Doge (MAXI) is getting a lot of attention.

It is an Ethereum ERC-20 meme token built around a 240-lb canine character and a 1000x-leverage trading-community identity, giving early DOGE and PEPE vibes to a market starved of a hero or zero play.

Its stated price is $0.0002860, and it has raised over $4.8M. It also offers staking at a high 60% APY, but only to presale buyers.

The project also has holder-only trading competitions with leaderboard rewards and a Maxi Fund treasury for liquidity and partnerships.

Get Ahead of Next Meme Coin Launch Here

Perplexity AI Predicts a Somnia Crypto Explosion: The Big Price Reveal

In this speculative scenario, if a full-blown crypto bull market returns alongside favorable external conditions, Somnia (SOMI) could reach prices between $6 and $10, with an ambitious target of $15 or more by January 1, 2027.

However, this projection is purely speculative and should be considered entertainment rather than a realistic base-case outlook. Achieving these price targets would require extraordinary coordination among major gaming, social media, and AI companies, which is currently quite unlikely.

DISCOVER: The Best Token Presales

The post Perplexity AI Predicts Somnia Crypto Is About to Explode appeared first on Cryptonews.

Ethereum client developers Teku and Besu have released security updates to address a certificate vulnerability that could allow attackers to impersonate services used by validators and potentially redirect their block rewards. According to security advisories accompanying the releases, the issue…

Visa's stablecoin settlement run rate surpasses $25 billion, up 10x annually, as its network reaches 10 blockchains and over 225 crypto-linked card programs.