Invest ideasNews
20 May 2026, 10:32
Binance founder warns developers to rotate API keys after GitHub internal repository exposure
Changpeng Zhao has asked developers to examine and rotate any API keys in code immediately after GitHub revealed on May 20 that hackers had gained unauthorized access to its internal repositories. The incident resulted from a malicious Visual Studio Code extension placed on a compromised employee’s device. GitHub detected unauthorized access to GitHub’s internal repositories on May 19. In response, the platform immediately removed the malicious extension version and isolated the endpoint. The Microsoft-owned platform stated that it is investigating unauthorized access to internal repositories and has not yet found any evidence that user repositories, enterprise accounts, or other customer data stored outside those internal systems were impacted. The code hosting platform also stated that while the inquiry is still ongoing, it is keeping a careful eye on the situation. GitHub went on X to announce that the activity only involved exfiltration of GitHub-internal repositories after the assessment. It added that its findings were consistent with the attacker’s claims of accessing roughly 3,800 repositories. The code hosting platform stated that it reduced the risk by rotating important secrets overnight and within the same day, prioritizing the most sensitive credentials. It added that more steps will be taken as the investigation progresses and that it is still analyzing logs, confirming the efficacy of the secret rotation procedure, and monitoring for any possible follow-on activity. The platform also stated that after the investigation is finished, a more comprehensive report would be released. GitHub breach attributed to UNC6780 supply chain attack 1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories. Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version,… — GitHub (@github) May 20, 2026 The breach of GitHub’s internal systems has been attributed to a threat actor using the pseudonym TeamPCP. The group claims to have stolen source code and proprietary organizational data, and is now selling the dataset on dark web cybercrime forums. The reported asking prices exceed $50,000. According to the attackers, almost 4,000 private repositories connected to GitHub’s core infrastructure are among the stolen content. They have allegedly distributed a file index and screenshots displaying many repository archive names to support the assertion. They also claim that samples can be given to serious purchasers as evidence of genuineness. The Google Threat Intelligence Group has identified TeamPCP as UNC6780, a financially motivated actor with a track record of supply chain breaches. The Intelligence Group noted that TeamPCP’s purported focus has consistently been on CI/CD setups and developer tools, where deeper system access can be obtained through privileged tokens and automation credentials. The group was connected to the Trivy Vulnerability Scanner exploitation through CVE-2026-33634 in early 2026. The exploitation affected over 1,000 firms, including Cisco. They were also linked to campaigns targeting LiteLLM and Checkmarx, focusing on credential harvesting in software delivery pipelines. Crypto APIs face rising supply chain exposure Following the GitHub hack and Changpeng Zhao’s warning , the crypto API ecosystem, which largely relies on developer tooling and third-party integrations, has come under closer scrutiny. The GitHub hack highlights how vulnerable contemporary crypto infrastructure can become when core development environments are compromised, especially when code repositories contain or process API keys, automation tokens, and CI/CD credentials. Multiple trading, custody, and data services that rely on these connections may be affected by a single supply chain incursion in such configurations. Cryptopolitan reported on March 26, 2026, that a correct API is crucial for any cryptocurrency project, whether you’re developing a trading bot, a DeFi analytics dashboard, or a portfolio tracker. The report also noted that delivering thorough, accurate, and low-latency information promotes rather than impedes development. API infrastructure providers that facilitate trading, analytics, and blockchain connectivity are attracting increasing industry attention. Cryptopolitan reported that platforms such as CoinStats API, CoinGecko API, CoinMarketCap API, CCData (CryptoCompare), CoinAPI, Kaiko, Glassnode, Covalent, Alchemy, Infura, QuickNode, and Bitquery demonstrate how exchanges, fintech apps, and blockchain services rely on standardized APIs to support growth and enable real-time data flows. The smartest crypto minds already read our newsletter. Want in? Join them .
20 May 2026, 10:26
Key XRP Metrics Signal Bullish Shift After Weeks of Heavy Sell-Offs
XRP exchange-flow activity is beginning to show a different pattern after several weeks of steady deposit pressure centered on Bybit, according to new analysis from CryptoQuant. Data from the XRP Multi-Exchange Daily Depositing/Withdrawing Transactions Delta shows that Bybit’s transaction delta moved back close to neutral around May 16 and ended a stretch of strong positive readings that had continued from mid-April through mid-May. XRP Exchange Behavior Flips Persistent deposit-side activity is often viewed as a sign of possible selling pressure because assets transferred onto exchanges are generally more accessible for trading or liquidation. This indicates that the pressure has now eased, at least based on transaction count data. While Bybit’s earlier deposit imbalance appears to have faded, Binance and Coinbase are now showing the opposite trend, as withdrawal transactions overtook deposits on both exchanges. This is a major change from the earlier exchange-flow structure dominated by Bybit deposits. The setup for XRP has therefore changed, as the market is no longer displaying the same broader exchange-deposit activity seen over the past month. Instead, exchange behavior now points to a rotation in flows, as Bybit cools off while Binance and Coinbase experience stronger withdrawal-side activity. CryptoQuant stated that the metric tracks transaction delta rather than the total amount of XRP being transferred, meaning it does not reveal the exact volume of tokens entering or leaving exchanges. Even so, the directional change remains important because it highlights a clear shift in transaction behavior across several major trading platforms. Tightening Price Range and Strong Inflows Alongside the changing exchange activity, technical indicators are starting to point toward a possible increase in XRP volatility. Recently, crypto analyst Ali Martinez found that XRP’s Bollinger Bands on the 3-day chart have tightened to their narrowest level in over a year, in what appears to be a potential major price move ahead. The crypto asset has traded between $1.29 and $1.50 for months. Martinez said a close above $1.50 could push XRP toward $1.80, while a drop below $1.29 may end up triggering deeper downside pressure. On the institutional side of things, XRP appears to have defied market panic. As reported by CryptoPotato , even as both investment products dedicated to Bitcoin and Ethereum faced significant sell pressure, XRP managed to rake in inflows of over $67 million last week. The post Key XRP Metrics Signal Bullish Shift After Weeks of Heavy Sell-Offs appeared first on CryptoPotato .
20 May 2026, 10:20
Trading expert issues Bitcoin price targets
Crypto analyst Ali Martinez says Bitcoin ( BTC ) could rally to $94,849 if BTC holds a critical support level at $72,962, according to Glassnode MVRV data. Notably, the $94,849 BTC price target coincides with the all-time historical average MVRV Ratio (Market Value / Realized Value), while the support level around $72,962 aligns with the 0.5 standard deviation below the mean. BTC MVRV pricing bands. Source: Glassnode However, if Bitcoin price fails to rebound from the support level around $72,962 in the near future, Martinez argued that a drop toward the realized price around $54,270 could be inevitable. The analyst cautioned traders that a breach of the support level around $72,962 could confirm a further free fall for BTC, potentially hitting a new lower low before a possible rebound towards new highs later in 2026. Key factors that could determine Bitcoin price outlook With Bitcoin’s price hovering at a crucial crossroads, as indicated by the MVRV ratio, its near-term outlook could hinge on potential fundamental catalysts. For instance, the flagship coin has closely mirrored the performance of United States spot BTC exchange-traded funds (ETFs), especially BlackRock’s iShares Bitcoin Trust ( IBIT ), as Finbold noted . As such, if the institutional spot demand for BTC wanes, amid heightened short bets in the leveraged market, further capitulation towards $54,270 could be imminent. However, if the institutional demand for Bitcoin, especially in the United States, gets renewed, potentially catalyzed by the anticipated passage of the Clarity Act – a proposed federal regulation aimed at legalizing crypto assets – a rally beyond $82,000 could be bolstered. BTC inflow to all exchanges. Source: CryptoQuant Already, the total Bitcoin inflows to all crypto exchanges have surged by more than 72,000 BTC over the past two days, according to metrics from CryptoQuant . Historically, an increase in exchange inflow has been a signal of bearish sentiment and vice versa. The post Trading expert issues Bitcoin price targets appeared first on Finbold .
20 May 2026, 10:07
Bitfinex traders double down on bitcoin during five-day slide as longs hit 2.5-year high
Margin longs on Bitfinex have climbed to a two-and-a-half year high as bitcoin struggles below key technical resistance near $78,000.
20 May 2026, 10:00
XRP exchange behavior shifts as tokens move off exchanges: What now?
XRP reserves continued tightening across major exchanges while broader institutional capital flows showed growing hesitation.
20 May 2026, 09:30
Bithumb to Temporarily Halt Filecoin (FIL) Deposits and Withdrawals for Network Upgrade
BitcoinWorld Bithumb to Temporarily Halt Filecoin (FIL) Deposits and Withdrawals for Network Upgrade South Korean cryptocurrency exchange Bithumb has announced a temporary suspension of deposits and withdrawals for Filecoin (FIL), effective from 9:00 a.m. UTC today. The exchange cited an upcoming network upgrade as the reason for the halt, a routine but critical process to ensure the blockchain’s stability and functionality. Details of the Suspension The suspension applies to all FIL transactions on Bithumb, one of the largest crypto exchanges in South Korea by trading volume. According to the exchange’s official notice, the halt will remain in effect until the network upgrade is completed and the stability of the new protocol is verified. Bithumb has not specified an exact end time but stated that services will resume automatically once the upgrade is fully implemented and the network is deemed secure. Why Network Upgrades Matter for FIL Holders Filecoin, a decentralized storage network, periodically undergoes network upgrades to improve scalability, security, and efficiency. These upgrades often introduce new features or optimize existing protocols. For users, this means that during the upgrade window, transactions may be temporarily unavailable on exchanges that require network synchronization. Bithumb’s proactive suspension is a standard precaution to prevent transaction errors or asset loss during the transition. What This Means for Traders For FIL holders and traders on Bithumb, the suspension means that they cannot move their tokens in or out of the exchange during this period. However, trading pairs involving FIL on the platform may still be active, depending on the exchange’s internal policies. Users are advised to monitor Bithumb’s official announcements for the exact resumption time. Such suspensions are typically short-lived, often lasting a few hours to a day, but delays can occur if unexpected issues arise during the upgrade. Broader Context: Exchange Suspensions and Market Impact While temporary suspensions are routine in the crypto space, they can sometimes lead to short-term price volatility as traders react to perceived liquidity constraints. However, for a scheduled upgrade, the impact is usually minimal. Filecoin’s price has remained relatively stable in recent trading sessions, reflecting the market’s understanding of the event as a standard technical procedure rather than a cause for concern. Conclusion Bithumb’s decision to suspend FIL deposits and withdrawals is a standard operational measure tied to Filecoin’s network upgrade. Users should expect normal service to resume shortly after the upgrade completes. For now, the best course of action is to stay informed through official Bithumb channels and avoid making time-sensitive transactions involving FIL until the suspension is lifted. FAQs Q1: How long will the FIL suspension on Bithumb last? A1: The exact duration has not been specified, but it will last until the Filecoin network upgrade is complete and verified as stable. Typically, such suspensions last a few hours to a day. Q2: Can I still trade FIL on Bithumb during the suspension? A2: The suspension applies only to deposits and withdrawals. Internal trading on the exchange may still be available, but it is best to check Bithumb’s official announcements for any trading-related restrictions. Q3: What should I do if my FIL transaction is pending during the suspension? A3: Pending transactions may be delayed or cancelled. It is recommended to contact Bithumb customer support for specific guidance on your transaction status. This post Bithumb to Temporarily Halt Filecoin (FIL) Deposits and Withdrawals for Network Upgrade first appeared on BitcoinWorld .
