France’s National Agency for Security of Information Systems has issued an urgent warning about sophisticated spyware attacks targeting high-profile iPhone users. The agency specifically named surveillance tools like “Pegasus, Predator, Graphite, and Triangulation” as threats aimed at journalists, lawyers, activists, and politicians, describing them as “particularly sophisticated and difficult to detect.”

On September 3, Apple sent threat notifications to affected iPhone users, though the company did not disclose how many individuals received these alerts. In its statement, Apple emphasized the severity of these threats, saying, “The extreme cost, sophistication, and worldwide nature of mercenary spyware attacks makes them some of the most advanced digital threats in existence today.”

Apple explained that these attacks represent highly funded operations that continually evolve, making detection challenging. The company noted that their threat notifications are “high-confidence alerts that a user has been individually targeted” and should be taken seriously. Apple also warned users about verification, stating that legitimate notifications will never request clicking links, installing apps, or providing passwords, and can be verified by signing into account.apple.com.

Previously:
• FTC settles with Lenovo over selling laptops deliberately infected with Superfish spyware
• Israeli spyware firm NSO Group ‘re-acquired’ by founders
• Investigators into mass murder of Mexican student teachers were attacked with NSO’s government spyware

A new cyberattack is silently targeting crypto from users during transactions amid an incident that security researchers describe as the largest supply chain attack in history.

BleepingComputer reported that hackers compromised NPM package maintainer accounts through phishing emails and injected malware that steals crypto.

The attack targeted JavaScript developers with fraudulent emails appearing to originate from “[email protected],” an impersonated domain mimicking the legitimate NPM registry.

The phishing messages warned maintainers that their accounts would be locked on Sept. 10, unless they updated their two-factor authentication credentials through a malicious link.

Attackers successfully compromised 18 widely-used JavaScript packages with collective weekly downloads exceeding 2.6 billion.

The compromised libraries include fundamental development tools such as “chalk” (300 million weekly downloads), “debug” (358 million), and “ansi-styles” (371 million), affecting virtually the entire JavaScript ecosystem.

Targeting crypto

The malicious code operates as a browser-based interceptor, monitoring network traffic for crypto transactions across Ethereum, Bitcoin, Solana, Tron, Litecoin, and Bitcoin Cash networks.

When users initiate crypto transfers, the malware silently replaces destination wallet addresses with attacker-controlled accounts before transaction signing.

Aikido Security researcher Charlie Eriksen explained:

The Crypto Investor Blueprint: A 5-Day Course On Bagholding, Insider Front-Runs, and Missing Alpha

Nice Your first lesson is on the way.

Please add [email protected] to your email whitelist.

“What makes it dangerous is that it operates at multiple layers: altering content shown on websites, tampering with API calls, and manipulating what users’ apps believe they are signing.”

Ledger CTO Charles Guillemet warned crypto users about the ongoing threat, noting the JavaScript ecosystem may be compromised given the massive download figures.

Hardware wallet users retain protection if they verify transaction details before signing, while software wallet users face a higher risk. Guillemet advised:

“If you don’t use a hardware wallet, refrain from making any on-chain transactions for now.”

He also noted uncertainty about whether attackers can directly extract seed phrases from software wallets.

Sophisticated targeting

The attack represents a sophisticated supply chain targeting where criminals compromise trusted development infrastructure to reach end users.

By infiltrating packages downloaded billions of times weekly, attackers gained unprecedented access to cryptocurrency applications and wallet interfaces.

BleepingComputer identified the phishing infrastructure exfiltrating credentials to “websocket-api2.publicvm.com,” demonstrating the coordinated nature of the operation.

This incident follows similar JavaScript library compromises throughout 2025, including the July attack on “eslint-config-prettier,” which had 30 million weekly downloads, and March compromises affecting ten popular NPM libraries.

Mentioned in this article

Grayscale has introduced a new exchange-traded fund that aims to turn Ethereum’s price swings into regular income for investors.

The product, called the Grayscale Ethereum Covered Call ETF (ETCO), launched on Sept. 4 and distributes dividends every two weeks. The firm said ETCO uses a covered call strategy instead of holding ETH directly.

The firm stated that the fund tracks existing Ethereum exchange-traded products, including the Grayscale Ethereum Trust (ETHE) and the Ethereum Mini Trust (ETH), and writes call options on them to capture additional yield.

This structure allows investors to benefit from Ethereum’s volatility while adding an income stream to their portfolios.

Grayscale added:

“By writing call options near spot prices, ETCO prioritizes income generation, making it an income-first strategy that may appeal to investors seeking consistent cash flow and high-yield opportunities. The premiums collected through this approach can also help mitigate the impact of market declines, potentially reducing volatility during downturns.”

Krista Lynch, the company’s senior vice president for ETF capital markets, said the ETF is meant to complement existing ETH exposure rather than replace it. She emphasized that the product reflects Grayscale’s strategy of meeting different investor goals with tailored solutions.

At launch, ETCO reported a net asset value of $35.01 per share, with 40,000 shares outstanding and more than $1.4 million under management.

The Crypto Investor Blueprint: A 5-Day Course On Bagholding, Insider Front-Runs, and Missing Alpha

Nice Your first lesson is on the way.

Please add [email protected] to your email whitelist.

Ethereum ETF outflows

Grayscale’s new fund comes during a period of weakness for Ethereum-focused ETFs after strong inflows.

According to SoSo Value data, investors pulled $338.25 million from these products over three consecutive sessions, reversing momentum from August when funds saw $3.87 billion in inflows.

Notably, August ranked as the second-strongest of the year, following July’s record $5.43 billion.

Ethereum ETFs remain firmly positive this year despite the latest outflows, with nearly $30 billion in cumulative net inflows since they launched in 2024.

This resilience suggests that institutional demand for ETH exposure continues to grow, even as short-term sentiment shifts.

Mentioned in this article

American Bitcoin (ABTC), a newly public bitcoin mining and treasury firm backed by Donald Trump Jr. and Eric Trump, opened for trade Wednesday morning after completing its merger with Gryphon Digital Mining (GRYP).

Wasting little time, the company filed for an at-the-market equity raise of up to $2.1 billion with which to continue building its bitcoin (BTC) holdings (which footed to 2,443 coins at the time of the merger).

Shares have rocketed 60% to $11 versus the $6.90 price at the time of the merger Tuesday evening.

Its the latest chapter in American Bitcoin’s rapid formation, which began in March through a combination of the Trump brothers’ American Data Centers and Canadian mining firm Hut 8 (HUT). Hut 8 now holds an 80% ownership stake in the newly listed entity.

American Bitcoin’s business combines bitcoin mining with a corporate treasury approach centered on accumulating the asset. Since its inception earlier this year, the company has amassed 2,443 bitcoin, worth approximately $160 million at current prices. This hybrid model — mining bitcoin while holding it as a balance sheet asset — mirrors strategies used by other high-profile mining firms such as Marathon Digital.

Journalist

Hassan Shittu

Journalist

Hassan Shittu

About Author

Hassan, a Cryptonews.com journalist with 6+ years of experience in Web3 journalism, brings deep knowledge across Crypto, Web3 Gaming, NFTs, and Play-to-Earn sectors. His work has appeared in…

Share

Last updated: 

September 2, 2025

Blockchain-based lender Figure Technology Solutions Inc. is preparing to go public this month in one of the most closely watched listings in the crypto-fintech sector.

The company and its backers are seeking to raise up to $526 million through an initial public offering, according to a filing with the U.S. Securities and Exchange Commission.

According to a Bloomberg report, Figure plans to sell 21.5 million shares priced between $18 and $20 each, while existing shareholders are offering an additional 4.9 million shares. At the top of that range, the firm would command a market capitalization of $4.13 billion, surpassing its $3.2 billion valuation from a 2021 venture round.

The company is expected to price its shares on September 10, with trading set to begin on Nasdaq under the ticker symbol FIGR. Goldman Sachs, Jefferies, and Bank of America are leading the offering.

Figure IPO Follows Strong Revenue Growth and Blockchain Expansion

Founded in 2018 by Mike Cagney, the former chief executive of SoFi Technologies, Figure has positioned itself as a developer of blockchain-based solutions to streamline consumer lending.

The firm began with home equity line of credit (HELOC) products and has since expanded into crypto-backed loans and a digital asset exchange.

To date, it has originated or purchased more than $16 billion in loans on-chain. In August, the company increased its HELOC borrowing limit from $400,000 to $750,000 to capture a larger share of equity-rich homeowners.

Figure has also moved into artificial intelligence, using OpenAI’s technology to evaluate loan applications and Google’s Gemini chatbot to improve customer interactions.

According to its filing, customers for partner-branded HELOC loans in the first half of 2025 had a weighted average FICO score of 756, slightly higher than the 749 average for its own-branded loans.

The company’s growth trajectory has accelerated in 2025. For the six months ending June 30, Figure reported a net income of $29.1 million on revenue of $190.6 million, compared with a net loss of $15.6 million on $156 million in revenue during the same period last year.

Investors include Apollo Global Management, 10T Holdings, and Ribbit Capital. Despite the IPO, Cagney will continue to control a majority of the voting power, the filing shows.

Michael Tannenbaum, formerly with Brex and SoFi, was appointed CEO in 2024, tasked with guiding the company’s public market debut and scaling its blockchain-based lending products.

Beyond lending, Figure is pursuing regulatory approval for what it says could be the first U.S.-approved interest-bearing stablecoin structured as a security.

Figure’s offering follows a series of confidential filings earlier this year, with the company formally submitting its registration in mid-August.

Marketing presentations to investors emphasize its ability to pair blockchain efficiency with traditional financial rigor, noting cost reductions in loan origination and securitization.

In addition to loan products, Figure recently rolled out its Intellidebt solution, which has already helped customers pay off $133 million in debt by consolidating credit cards, auto loans, and personal loans into single payment structures.

Crypto IPO Rush Accelerates as Gemini and Circle Join Wall Street Frenzy

Crypto-linked companies are racing to public markets this fall, capitalizing on renewed investor appetite and favorable conditions in the U.S.

According to recent filings, Gemini Space Station, the parent of crypto exchange Gemini, founded by Cameron and Tyler Winklevoss, is seeking up to a $2.22 billion valuation in its Nasdaq debut.

The New York-based firm plans to sell 16.67 million Class A shares at $17 to $19 each, potentially raising $317 million. Shares will trade under the ticker GEMI, with underwriters granted an option to buy an additional 2.5 million shares.

Ripple has backed Gemini’s listing with a $75 million credit facility, expandable to $150 million.

The surge in activity comes after Circle Internet Group’s successful market debut earlier this year, which more than doubled its value. It now boasts a $30 billion market cap.

The strong performance has fueled optimism that 2025 could mark a turning point for digital asset firms after years of regulatory and market headwinds.

Wall Street banks are fielding heightened demand from technology and crypto issuers. Goldman Sachs’ co-head of equity capital markets, Will Connolly, said firms are accelerating timelines, with some originally targeting 2026, now asking to move forward this year.

JPMorgan’s Keith Canton projects that dozens of IPOs could close before year-end, raising more than $15 billion.

Beyond traditional listings, crypto-focused special purpose acquisition companies (SPACs) are also entering the fray. Bitcoin Infrastructure Acquisition Corp., a Cayman Islands-based blank-check firm, filed to raise $200 million to target Web3, DeFi, and blockchain finance companies, listing on Nasdaq under the ticker BIXIU.

Other listings include Bullish, a Peter Thiel-backed exchange that raised $1.15 billion in its NYSE debut, entirely in stablecoins. Bullish joined Coinbase and Circle among the best-performing crypto IPOs of 2025, with Circle and CoreWeave delivering 336% and 132% returns, respectively.

With supportive policy shifts under the Trump administration and a buoyant risk environment, crypto IPOs are gaining momentum as firms rush to secure market share before year-end.

News Background

• Dogecoin fell 5% in the 24-hour period from Aug. 28 at 09:00 to Aug. 29 at 08:00, tracking broader risk-asset weakness.
• Between Aug. 24–25, an unknown whale shifted 900 million DOGE (~$200 million) to Binance wallets, fueling concerns of distribution and triggering market volatility.
• Open interest in DOGE futures slipped 8% after the inflows, reflecting lighter speculative positioning.
• On-chain data shows whales continue to build exposure, with 680 million DOGE accumulated in August, signaling institutional demand despite retail selling.
• Dogecoin’s network fundamentals remain firm, with hashrate climbing above 2.9 petahashes per second, underscoring mining security at record levels.

Price Action Summary

• DOGE dropped from $0.22 to $0.21 in the 24-hour trading window, a 5% decline across a $0.011 (≈3%) range between $0.23 and $0.21.
• The sharpest move occurred at 07:24–08:23 GMT on Aug. 29, when DOGE fell 0.57% from $0.22 to $0.21 on a 27.36 million volume spike at 08:20.
• Mid-session flows of 626.3 million tokens coincided with the $0.22 breakdown, cementing $0.21 as immediate support.
• Despite pressure, the token consolidated near $0.21 into session close, suggesting stabilization after heavy liquidation.

Technical Analysis

• Support: $0.21 holds as the primary floor; breach risks extension to $0.20.
• Resistance: $0.23 remains the short-term ceiling after repeated rejections.
• Momentum: RSI hovers near mid-40s, reflecting neutral-to-bearish bias.
• MACD: Bearish divergence persists, with no confirmed crossover yet.
• Patterns: Tight $0.21–$0.23 consolidation suggests compression phase; direction will hinge on resolution of whale flows.
• Volume: Elevated 626.3 million during the $0.22 breakdown signals continued institutional distribution.

What Traders Are Watching

• Whether $0.21 support can hold under ongoing whale selling.
• Breakout above $0.23 could open path toward $0.25–$0.30.
• Signs of renewed institutional accumulation as whales move supply onto exchanges.
• Futures open interest trends after the 8% drop, a key signal for leveraged demand.