Morning digest: October 21, 2026
Solana switches to its new Alpenglow consensus today, aiming to finalize payments in about 150 milliseconds instead of roughly six seconds, and Zcash has a November date for an upgrade that makes blocks three times faster. Malaysia had a big tokenization day: a licensed bank launched a dollar stablecoin and the central bank opened a platform for tokenized bonds and sukuk. A web certificate authority turned out to have private keys as small as the number 4. Health leads with trained lifters and sprinters: heavy squat “primers” before jumping, Olympic lifts for jump height, and why the best sprint day comes about 72 hours after plyometrics. Locally, Manassas Park pulled its 321-unit Euclid Avenue apartment hearing, Fairfax supervisors debated the county’s Flock cameras, and Dulles said goodbye to the plane with basement bathrooms.
Blockchain: Solana’s big switch, a faster Zcash, Malaysia’s bank stablecoin
Solana switches to Alpenglow today. Alpenglow replaces TowerBFT, the voting system Solana has used since 2020. Validators stop posting their votes as on-chain transactions; votes are collected off-chain and bundled into certificates that can make a block final in one or two rounds. The target is about 150 milliseconds to irreversible settlement, versus roughly six seconds now. Vote fees (about 2 SOL a day per validator) are replaced by a flat “validator admission ticket” of 0.8 SOL per epoch (about a day), roughly 60% cheaper. The switch is set for epoch 1064, with the handover at slot 459,653,000 after a 5,000-slot transition. Testing was rocky: the test network was restarted from scratch six times, and one migration failed and was rolled back before a later one succeeded. Expect Solana’s reported transaction count to drop sharply, because most of what it counted were validator votes. If it works, payments and trades on Solana settle in about the time a card authorization takes (CoinDesk; Anza).
Zcash picks a November date for NU7. The privacy chain’s next upgrade cuts the time between blocks from 75 to 25 seconds, so an exchange waiting for three confirmations would credit a deposit in about 75 seconds instead of nearly four minutes. It also holds back 60% of each block’s fees in a reserve paid to miners from about 2031, and it fully shuts down Sprout, Zcash’s original shielded pool: any coins still there at activation become unspendable. The ZIP editors agreed on activation block 3,543,405, around Nov. 5; that still has to be merged into the spec and shipped in node software. ZEC rose about 11% on the news (CoinDesk; ZIP 259).
Malaysia: a bank-issued dollar stablecoin and a central-bank tokenization platform. Monfi Digital Bank, a licensed digital bank in Malaysia, launched MUSD, an ERC-20 dollar token on Ethereum that is a direct liability of the bank. Mint and redemption at par are open only to institutions and qualified private clients that pass the bank’s checks; exchange listings come later. Reserves are USD cash and equivalents in a segregated account, never lent or rehypothecated, reconciled daily, published quarterly and verified annually. It runs on Tether’s Hadron tokenization platform, with Fireblocks for custody and Chainalysis for screening. It’s a rare stablecoin backed by a supervised bank rather than a non-bank reserve manager (GlobeNewswire). Separately, Bank Negara Malaysia launched SSDS+, a distributed-ledger platform for issuing, holding and recording tokenized bonds and sukuk, connected to its RENTAS+ system for around-the-clock settlement in central-bank money. No issuances or volumes have been announced yet (Bank Negara Malaysia; Cointelegraph).
A certificate authority’s keys were tiny numbers, one of them literally 4. eMudhra is an Indian certificate authority whose roots browsers trust. The private keys for eight of its intermediate certificates, the ones that sign website and code-signing certificates, were whole numbers below 256, and one was the number 4, so anyone could compute them from the public certificates in under a second. eMudhra blames a key-wrap step in its April 2025 key ceremony that produced a weak second set of keys, which were the ones published. The keys hadn’t issued any certificates. Chrome and Firefox blocked them within hours of the Oct. 17 report; Mozilla has dropped the root and Chrome drops it Oct. 27, and Go, Python’s certifi and Rust’s webpki-roots shipped fixes Oct. 20. Wallets, node tooling and services that don’t check revocation keep trusting these keys until they update their root bundles (The Hacker News; Mozilla bug).
Hardware-wallet users were phished through the vendor’s own app alerts. Attackers took over a third-party push-notification service used by NGRAVE’s LIQUID companion app and sent fake “your portfolio was synced to a Pixel 9 in Moscow” alerts linking to a site that asked for recovery phrases. Bitquery traced about $2.65M taken from 84 wallets on Oct. 17. The devices were never breached, and it’s the second wallet maker in two days, after SecuX, whose own notification channel was abused this way. No real wallet company ever needs your seed phrase, whatever the alert says (CryptoSlate).
Briefly:
- Qubic update: after the wallet-seed flaw that drained 1,404 wallets, the chain restarted Oct. 19 under a validator-approved recovery plan, with 87% of the stolen QU frozen on-chain and the rest frozen at MEXC. Claims are open until May 1, 2027, and any wallet made with web-wallet versions before 4.26.4 should be treated as compromised (CoinDesk).
- USTX: tokenized-stock platform tx launched a native dollar stablecoin issued by Brale, minted from USDC on eight chains and backed by a separate 1:1 reserve of cash, deposits, government money-market funds and T-bills (Cointelegraph).
- Korea: Bank of England deputy governor Sarah Breeden visited the Bank of Korea to compare notes on Project Agora and Korea’s Project Hangang tokenized-deposit pilot (Korea Times). Upbit owner Dunamu signed an exploratory deal with MoonPay on stablecoin cross-border payments and access to its GIWA chain; no products or dates yet (The Block).
- Deals: Bitget, weeks after a roughly $388M hot-wallet hack, is buying Thai exchange GMO-Z.com Cryptonomics, targeting an Oct. 31 close (Cointelegraph). Tether led a $15M Series A for Mural, which offers accounts, payments and spending controls for AI agents across bank and blockchain rails (CoinDesk). Bitcoin-treasury firm Strive raised $630M in perpetual preferred shares paying a 15% dividend (Coin Edition).
- Markets: bitcoin is near $83,000 and ether near $2,450, helped by strong SpaceX and Super Micro earnings; Hashdex says bitcoin needs to reclaim $84,000 before the Fed meets Oct. 27–28. Musk also called a Tesla–SpaceX merger “a good idea”; the combined company would hold more than 30,000 BTC (CoinDesk).
Health: squat primers, Olympic lifts and the 72-hour sprint window
The first three studies are in trained people; the creatine trial is in lifting novices, and the last two are clinical groups, labeled as such.
Heavy squat “primers” taken close to failure were more likely to boost jumping minutes later, in men and women alike. Sixteen resistance-trained men and 15 resistance-trained women did, in randomized order across four sessions, two back-squat sets of 1, 3 or 5 reps, or rest, then countermovement jumps at 3, 6 and 9 minutes. Sex differences were mostly negligible, and the authors conclude that “heavier back squats performed closer to failure were more likely” to enhance jumping. Women showed higher probabilities of a gain in two conditions (single reps at minute 9, triples at minute 3). How to use it: before jumps or sprints, try two heavy low-rep squat sets near failure, then go 3–9 minutes later. Limits: small, one session per condition, jump height only, and the abstract gives probabilities rather than centimetres or loads (Journal of Strength and Conditioning Research).
Olympic lifts beat plyometrics and standard lifting for jump height. A network meta-analysis of 8 randomized trials (233 recreationally trained adults, almost all men) found 6–10 weeks of Olympic lifts or their derivatives improved countermovement-jump height by about 2.2–2.5 cm more than control, plyometrics or traditional strength training, and squat-jump height by about 2.8–4.5 cm. Olympic-lift training ranked first for both. The lever: for explosive power, swap some plyometric or standard lifting work for cleans, snatches, pulls or jump shrugs for a 6–10-week block. Limits: few small trials, nearly all men, a single author (Applied Bionics and Biomechanics).
Sprinters were slightly slower the day after plyometrics and slightly faster three days later. Twenty-six collegiate sprinters did plyometrics every Monday for 12 weeks and were tested at 0, 24, 48, 72 and 96 hours after each session. Compared with right after the session, 30 m sprint time was about 0.01 s slower at 24 hours and about 0.006 s faster at 72 hours, with the same pattern for jump height. How to use it: put quality sprint or jump work about 72 hours after a plyometric day, not the next day. Limits: no control group, tiny differences, one squad (European Journal of Sport Science).
A creatine-based stack added lean mass and recovery, but not strength, in the first month of lifting. Forty-six male novices (40 finished) took a creatine-based multi-ingredient supplement or placebo for 4 weeks alongside the same training. Leg-press strength rose equally in both groups; the supplement group gained more muscle mass and thigh girth and reported better recovery, with kidney markers normal. Limits: novices, men only, 4 weeks, ingredients and doses not in the abstract, industry-funded, and the stack can’t isolate creatine (BMC Sports Science, Medicine and Rehabilitation).
Clinical group, cognition: moderate exercise doses gave the most reliable executive-function gains in older adults with mild cognitive impairment. A dose–response network meta-analysis of 38 randomized trials in adults 60+ with MCI found the most reliable gains in working memory, flexibility and inhibitory control at about 300–1,000 MET-minutes a week, roughly 75–250 minutes of brisk walking, with higher doses plateauing. Exercise combined with cognitive training helped working memory most. Limits: low-to-moderate certainty, and these are MCI patients, not healthy or fit adults (PeerJ).
Clinical group: neuromuscular training for knee osteoarthritis gave small gains in symptoms, function and quality of life, but not pain. A meta-analysis of 14 randomized trials (1,029 patients) found balance, alignment and movement-control drills improved knee symptoms, daily-living and quality-of-life scores by about 4–6 points on 100-point scales, with no clear change in pain and no extra adverse events. A reasonable add-on, with small effects (Frontiers in Physiology).
General and local
Markets lean toward a Fed hold next week. CME FedWatch puts the odds that the Fed holds at its Oct. 27–28 meeting at 82%. The 10-year Treasury yield slipped to about 5.12%, so mortgage rates stay high, and oil eased to about $102 for WTI (CNBC).
Manassas Park pulled the Euclid Avenue apartment hearing. On Oct. 20 the Governing Body removed the hearing on RST Development’s plan to replace the Maximum Auto site (8503–8505 Euclid Ave.) with up to 321 apartments, about 98% income-restricted, plus retail and about 5,400 sq. ft. of career-training space for Manassas Park High School. The hearing “will be re-noticed” for a future date, with no date set. Staff estimate about 86 new students and about 1,755 new weekday trips; the developer has revised the plan, but the new figures weren’t posted yet (Manassas Journal).
Fairfax weighs the future of its Flock license-plate cameras. At a Board of Supervisors public-safety committee meeting Tuesday, county police said they run 84 Flock cameras (another 120 belong to HOAs and businesses), that the data isn’t sold or shared with federal immigration officials, and that database access was cut from 821 users to 296. Police credit the system with recovering 573 stolen cars and finding 60 missing people since 2022, and offered three options: status quo, added data-protection technology, or closing the county’s network. Supervisors James Bierman and Andres Jimenez pressed on whether guardrails are enough, with Jimenez asking about dropping the technology entirely. No decision yet (WUSA9; NBC Washington).
Lighter note: Dulles waves goodbye to the plane with basement bathrooms. Lufthansa flew its last Airbus A340-600 service, LH419 from Dulles to Frankfurt, on Sunday evening. At 247 feet 5 inches, the A340-600 was the world’s longest passenger plane until the Boeing 747-8 arrived, and its quirks included four gas-guzzling engines and lavatories tucked below the main deck. It got a water-cannon salute at Dulles, Lufthansa says many of the 267 passengers “bought tickets specially to take part,” and one travel-blog commenter grumbled that “aviation geeks are really driving the fares insane.” Those on board gave “a long round of applause” on landing in Frankfurt, where spotters and influencers were waiting (FFXnow).
Photo: Metropolitan Washington Airports Authority, via FFXnow.
Science: a claimed proof of a coding-theory problem from 1955
Two mathematicians claim the MDS conjecture for all fields of characteristic two. MDS codes are the optimal erasure codes; Reed–Solomon codes, used in storage, QR codes, RAID and deep-space links, are the classic example. Since Segre in 1955, the question has been whether those classic constructions are already the longest possible. In a 34-page preprint, Bocong Chen (South China University of Technology) and Jing Huang (Guangzhou University) claim that for every field whose size is a power of 2, a linear MDS code has length at most q + 1, except dimensions 3 and q − 1, where it’s q + 2, which gives the exact maximum for every dimension. Ball’s 2012 proof settled prime fields, but the even case, which includes the binary fields used most in practice, had been the hardest. A separate AI-assisted Lean formalization of the same theorem by another author has also been flagged. Caveats: a fresh preprint with no peer review or expert reaction yet, and the conjecture has a history of failed attempts (arXiv; AIProofWatch).
Russia: Moscow airport restrictions
Moscow’s mayor said air defenses downed three drones headed for the city Tuesday evening, and Vnukovo then ran restricted operations for nearly six hours overnight, with Domodedovo briefly limited too; restrictions at both were lifted Wednesday morning. Voronezh had a 22-minute missile alert just after midnight (Moscow 24; RIA Novosti; Voronezh1).
Bottom line
Solana’s Alpenglow switch today is its biggest change since 2020 and aims at card-speed settlement, Zcash’s faster blocks are set for early November, and Malaysia pushed bank-backed stablecoins and tokenized bonds forward in the same week. Update your software’s root certificates and never type a seed phrase because an alert told you to. In Health, the levers are heavy squat primers 3–9 minutes before explosive work, Olympic lifts for jump height, and quality sprint sessions about 72 hours after plyometrics; for older adults with memory problems, moderate exercise looks like the sweet spot. Locally, the Euclid Avenue apartment vote is on hold, Fairfax’s Flock cameras face real questions, and the world’s former longest airliner has left Dulles for good, basement bathrooms and all.