Rundown · Tuesday, October 20, 2026
Crypto news on October 20, 2026
On Tuesday, October 20, 2026 the Crypto desk recorded 4 news events. The earliest report came from Mitrade at 02:19 UTC. 2 more events were reported; they are listed at the end.
- news events4
- outlet reports10
- carried by 5+ outlets0
- first report (UTC)02:19
-
01
Decrypt reported alleged Drift exploit addresses sent $61.56M ETH to Tornado Cash Oct 20
Machine summary Decrypt reported that addresses alleged to be linked to the Drift exploit deposited 25,700 ETH, about $61.56 million, into Tornado Cash in 100 ETH and 10 ETH chunks on 20 October, following a 23,095 ETH round on 23–24 July. Arkham Intelligence data show 81,454 ETH, roughly $198.58 million, still sitting across 71 linked addresses after the latest deposits. The April 1 attack on Drift's Solana vaults produced $295.7 million in losses on Drift's own breakdown, led by $159.3 million in JLP and $71.4 million in USDC.
- Arkham Intelligence data cited by Decrypt shows that wallets linked to the alleged April Drift Protocol exploit sent 25,700 ETH, about $61.56 million, into Tornado Cash over roughly two hours on 20 October.
- Deposits went in batches of 100 ETH (about $237,800 each) plus 10 ETH chunks, matching Tornado Cash's fixed deposit pools, according to Decrypt
- Arkham's entity page for 71 linked addresses showed 81,454 ETH remaining after the deposits, worth about $198.58 million at prices Decrypt cited; Cointelegraph reported the holdings as $194 million
- According to Drift's breakdown of assets, losses on April 1 totaled $295.7 million, with JLP accounting for $159.3 million and USDC for $71.4 million; the majority of that was subsequently swapped and bridged onto Ethereum.
- In June, Drift stated that Mandiant had pinned the attack on UNC6862, a North Korean threat group; back in April, Drift characterized the intrusion as a six-month operation conducted by a group that posed as a quantitative trading firm.
Reported by Decrypt, cointelegraph.com and BigGo Finance.
-
02
Bitcoin miner Ionic Digital shifts to data center leasing, Sachem Head says
Machine summary Sachem Head Capital was part of a June 2026 $400 million placement alongside Oaktree and Attestor Capital.
- Ionic Digital had a market capitalization of $2.95 billion, according to GuruFocus
- A $400 million private placement in June 2026 involved Sachem Head, Oaktree Capital Management and Attestor Capital, leaving the three with nearly a 10% ownership stake, GuruFocus reported
- Ionic Digital is pivoting from bitcoin self-mining toward digital infrastructure leasing, GuruFocus reported
- Ionic's Price-to-Sales ratio stood at 29.49 versus a three-year historical median of about 22.7 and the industry median, per GuruFocus
- GuruFocus reported that Ionic Digital arose from the bankruptcy restructuring of Celsius Network, picking up big mining assets mainly located in North America.
Reported by GuruFocus, streetinsider.com and Seeking Alpha.
- Ionic Digital
- Oaktree Capital Management
- Sachem Head Capital
- Attestor Capital
- Celsius Network
-
03
USDC on-chain volume rose 151% to $14.8 trillion last quarter
Machine summary On-chain transaction volume for USDC rose 151% to $14.8 trillion last quarter and circulation reached $73.3 billion, up 19% year over year, according to a Mitrade insight piece. According to the report, more than 100 institutional and ecosystem participants are building on Circle's Arc blockchain infrastructure, while the company is preparing to move into roughly 40 further markets. The article named Bitcoin, Ethereum and crypto-linked stocks.
- USDC circulation reached $73.3 billion last quarter, up 19% from a year earlier, per the Mitrade report
- On-chain transaction volume for USDC rose 151% to $14.8 trillion, according to the report
- Visa has expanded stablecoin settlement across nine blockchains, the report states
- According to the report, Standard Chartered lets institutional clients mint and redeem USDC via its banking infrastructure.
- Circle is preparing to expand into around 40 additional markets across Asia, Latin America, Africa and the Middle East, the report says
Reported by Mitrade.
-
04
Eight CA certificates revoked after private keys proved recoverable
Machine summary The certificates form part of the TLS trust chain that validates HTTPS connections, and the Go project was among the maintainers that blocked them.
- Mozilla's incident report said all eight certificates used P-384 private keys created in April 2025 whose values were below 256, leaving at most 256 candidates to test for recovery.
- A researcher published a private key on GitHub showing the EM OV TLS CA - G3C certificate key had a value of 4; BleepingComputer stated it verified the key matched one of the revoked certificates.
- eMudhra told Mozilla a script error during certificate creation in April 2025 generated a second, weaker set of keys that was chosen for signing because its labels resembled those of the properly generated keys.
- eMudhra said most affected intermediate certificates were never used in production, that it found no evidence of them issuing certificates to end users, and no indication the weak keys were abused since April 2025.
- eMudhra revoked the eight certificates and stopped issuing new ones under its G3 root; Dark Reading reported Google, Mozilla, Apple and the Go project blocked the affected certificates.
Reported by Dark Reading and bleepingcomputer.com.
More events reported
No summary of ours and no outlet headline passed our automated checks for these, which says nothing about the events (how they work); the outlets and their reports are linked.
- · 2 outletscointelegraph.com, DecryptNamed in the reports: BlackRock
- · 1 outletCBC
Each summary and its key facts are a machine summary of the reports linked under it; the outlets, times and counts come from those reports' own records. How a rundown is built.
Who was in the news
The days around it
Sources: the outlets' reports linked on this page; counts and times from GetYourBrief's record of those reports (methodology).