India’s cybersecurity agency, CERT-In, designated an AI-assisted threat actor “CRAFTY FALCON” and warned that it was attacking cryptocurrency exchanges and other financial businesses, stealing wallet keys and siphoning funds. CERT-In said the threat was ongoing and that successful attacks had been reported even by firms that received earlier advisories and took remedial steps.
South Korea’s financial regulator urged exchanges to hold more assets in offline cold wallets, although the law already requires them to keep at least 80% of users’ crypto assets there. In Hong Kong, Crypto.com said it would end its consumer app service on Feb. 1, 2027, while continuing to seek approval for its institutional exchange; its current licensing status is transitional, not full approval. Thailand’s securities regulator filed a complaint alleging that Bitget’s operator offered trading without a license and said it would block the site and app from December 5.
