Morning digest: October 23, 2026
Ethereum’s next big upgrade just lost its Oct. 26 test date after security researchers flagged a gas-accounting risk to existing contracts. HSBC rolled out a Hong Kong dollar stablecoin to 3.3 million PayMe users, and Swell froze its staked-ether tokens over a suspected admin-key compromise. Health leads with a 147,000-person study on how much lifting is enough, plus a step count that protected premenopausal bones and a sleep window tied to sharper thinking. Locally, a vandal took a sledgehammer to the Iwo Jima statue in Quantico, and a cow took a tour of the Baltimore Beltway.
Blockchain: Glamsterdam slips, HSBC’s retail stablecoin, a frozen staking protocol
Ethereum pulls the Oct. 26 Glamsterdam test on Hoodi. Glamsterdam is Ethereum’s next major upgrade, and Hoodi is the last public testnet before mainnet. At Thursday’s developer call, the team postponed the activation, and a planned jump in Hoodi’s gas limit to 200M, with no new date. The trigger is a pair of gas-pricing changes (EIP-8037 and EIP-8038). Security firm ChainSecurity showed that, combined, refunds when a sub-call fails could let a contract finish a failure-handling path that used to revert the whole transaction, and that creating a storage slot could cost 110,020 gas instead of 22,100 for contracts with hardcoded gas budgets. No production protocol has been shown to be exploitable, and mainnet users need do nothing. Why it matters: the mainnet timeline moves back (EF blog; CoinDesk).
HSBC launches RedCoin, a retail Hong Kong dollar stablecoin. HSBC, one of the first two firms licensed under Hong Kong’s Stablecoins Ordinance, is rolling out RedCoin (RCHKD) in phases from today inside its PayMe app (3.3 million users) and its mobile banking app. At first it covers peer-to-peer transfers and payments to more than 100,000 PayMe merchants, with no minimum balance; wholesale uses come later. Reports don’t name the underlying blockchain. It’s the first licensed HKD stablecoin aimed at everyday customers (The Block; SCMP).
Swell freezes swETH and rswETH over a suspected admin-key compromise. Swell is a liquid-staking protocol. A researcher reported that someone with admin access was raising the tokens’ exchange rate to ETH by up to 1% an hour with no backing, and had deployed four malicious upgrade contracts that could take about 2,500 ETH; they hadn’t been queued through the multisig. Swell paused deposits and withdrawals and says no ETH has left the contracts. The root cause isn’t confirmed, and lending markets that price swETH by that rate are exposed until it’s fixed (0xCERT; The Defiant).
SoFi launches a 4.40% tokenized deposit. SoFi Earn (SOFIE) is $1 on deposit at SoFi Bank, pays a variable 4.40% APY and is FDIC-insured up to the usual limits. To go on-chain, a customer converts it 1:1 into SoFiUSD, the bank’s stablecoin, which pays no interest and isn’t insured. It’s a way to pay yield without breaking the GENIUS Act’s ban on stablecoin interest (SoFi; The Defiant).
Starknet’s post-quantum vote passes. The non-binding poll closed with 93.52% of voting power backing a working group to study becoming an independent, quantum-resistant Layer 1. Nothing changes yet: Starknet stays an Ethereum rollup, and any move needs a separate binding vote (Starknet forum; The Block).
Briefly:
- Uniswap v4 routes through rivals: “aggregator hooks” wrap outside liquidity from Curve, PancakeSwap and others into v4 pools, live on Ethereum, Base and Robinhood Chain (The Block).
- Swift’s tokenized-deposit pilot: Swift’s Sibos recap says 17 banks are now piloting live cross-border payments with tokenized deposits; it’s a pilot, not a broad rollout (Swift).
- Two accounting-bug exploits: the WAX bridge lost roughly $75K–$90K because its withdraw function accepted a negative fee, and BNB Chain’s NemTokenV2 lost about $822K in USDT when transfers into its pool were counted as sales (Crypto Times; TokenPost).
- Coinbase Ireland fined €3.25M by the Central Bank of Ireland for safeguarding and outsourcing failures; it needs High Court confirmation (Central Bank of Ireland).
- Fireblocks denies a Visa takeover report: it called an Axios report of a roughly $2.5B deal “not true at present time”; Visa declined to comment (The Block).
- Markets: bitcoin slipped to about $81,300–81,700 as the tech selloff spread to Asia; ether is near $2,400 and Solana near $104 (The Block).
Health: lifting time, steps for bones, the sleep window for thinking
Everything below is a general-population or professional cohort unless labeled clinical. None is an elite-athlete group, and all but the last two are observational, so they show association, not proof.
About 90–119 minutes of lifting a week went with 13% lower mortality, and no extra benefit past two hours. Three US cohorts of health professionals and nurses (147,374 people, up to 30 years, 35,798 deaths) tracked self-reported resistance training. Compared with none, 90–119 min/week went with 13% lower all-cause mortality, 19% lower cardiovascular and 27% lower neurological-disease mortality, adjusted for aerobic activity. Benefit leveled off above 120 min/week. Mortality was lowest with high aerobic activity plus lifting, though people doing 45+ MET-hours a week of aerobic activity (about 11 hours of brisk walking or 6 of running) did about as well regardless of lifting. How to use it: aim for roughly 1.5–2 hours of resistance work a week on top of your cardio; past that, more lifting time isn’t the lever. Limits: self-reported, mostly women, health professionals, and it doesn’t say which exercises or loads matter (British Journal of Sports Medicine).
Hitting 7,000 steps on 3+ days a week halved bone-decline risk before menopause, but not after. In 3,529 Japanese women followed 3.5 years with pedometers, premenopausal women who reached 7,000 steps on three or more days a week had about half the risk of a decline in heel-bone measures (4.2% vs. 10.7% for the inactive). One or two days didn’t clearly help, and in postmenopausal women walking alone showed no clear protection; the authors suggest adding resistance or impact work, which this study didn’t test. Limits: only 70 premenopausal events, a less precise bone measure, and the result weakened in one sensitivity check (Osteoporosis International).
Sleeping 6–8 hours predicted slightly better cognition nine years later, peaking near 6.7 hours. In Chinese adults 45 and older (2,341 matched pairs), a steady 6–8 hour night, compared with under 6 or over 8, was linked to higher cognitive scores at nine years, with an inverted-U curve. How to use it: protect a regular 6–8 hour night rather than chasing 9+. Limits: self-reported sleep, small effects, and very short or long sleep can be a sign of early illness (Nature and Science of Sleep).
Tea drinkers had 11% lower vascular-disease risk, but “burning hot” tea went the other way. Among 485,934 Chinese adults followed about 9 years, habitual tea drinking went with lower vascular disease, black tea more consistently than green, and risk was lowest at about 6–8 cups a day. Very hot tea went with 16% higher risk. Tea added less for people who already exercised and didn’t smoke. How to use it: if you drink tea, let it cool to warm; this isn’t a reason to start drinking six cups. Limits: observational, in a tea-drinking culture, self-reported intake (Journal of Internal Medicine).
Clinical group: isometric holds gave the biggest modeled blood-pressure drop. A network meta-analysis of 284 trials (18,750 adults with prehypertension or hypertension) found isometric training, at about 750 MET-minutes a week, tied to the largest modeled systolic drop (about 13.5 mmHg), with aquatic exercise (about 10 mmHg) and mind-body work also standing out. Treat it as a direction, not a prescription: wall sits and handgrip are time-cheap options. Limits: the credible interval for the isometric estimate is very wide (4 to 23 mmHg), and most trials were small and short (Maturitas).
Clinical group: two years of high-dose fish oil didn’t help older adults’ brains. In a double-blind trial of 365 adults aged 55–80 with low fish intake, 2,000 mg a day of DHA raised brain-fluid DHA but didn’t improve cognition or protect the hippocampus over 24 months. For brain protection, exercise, sleep and blood pressure have better support than capsules. Limits: a phase IIa trial that tested a high-dose capsule, not eating fish (eBioMedicine).
General and local
An AI-spending selloff drives yields below 5%. The S&P 500 fell 1.21% to 7,663 Thursday, its worst day since July, and the Nasdaq dropped 2.6%; Meta fell about 7% and chip stocks sank. Tesla closed down 3.1% at $374.58 despite a third-quarter beat and a cut to its 2026 capital spending plans. The 10-year Treasury yield fell about 17 basis points to 4.97%, its biggest one-day drop since March 2023. Weekly jobless claims came in at 194,000, below the 200,000 expected, and the Fed decides on rates Oct. 28 (CNBC; CNA/Reuters).
Prince William banks a $95 million data-center surplus. The county ended fiscal 2026 with an unexpected $95 million surplus, almost all from data-center equipment taxes, which brought in about $550 million, nearly a third of general-fund revenue. The Board had already sent the whole surplus to reserves, so none goes to schools under the revenue-sharing agreement. Staff warned that energy and fuel costs could dampen the outlook, and no tax-rate decision has been reported (Prince William Times).
Iwo Jima statue in Quantico vandalized. Prince William police found a 27-year-old Stafford man hitting the monument with a sledgehammer late Tuesday night. The head of one of the Marines depicted was removed, with damage estimated in the hundreds of thousands of dollars. He faces felony destruction of property, trespass and felony injury to a monument, and is held without bond (WDBJ7/WUSA; Potomac Local).
Photo: WUSA via CNN Newsource, via WDBJ7.
Fairfax pushes back on merging four bus systems. At a state roundtable Wednesday, Fairfax and other Northern Virginia leaders were wary of a study on merging Fairfax Connector, Arlington Transit, Fairfax City’s CUE and Alexandria’s DASH. A consultant found a merger would take four to six years and might cost more than four separate systems. The state reports to the General Assembly in December, with no recommendation either way (FFXnow).
Briefly:
- New school name in Dumfries: the School Board chose Potomac Shores Elementary for the new school opening in 2027–28 with about 1,050 students (Potomac Local).
- Occoquan drydock comes down: demolition began Thursday at 411 Mill Street for the Mill at Occoquan redevelopment and will take several weeks of weekday daytime work (Potomac Local).
- Western road projects open house: Wednesday, Oct. 28, 6–8 p.m., at the Freedom Aquatic and Fitness Center in Manassas (Potomac Local).
Lighter note: a cow took the Beltway, and police took the cow. A cow got loose from a farm in Pikesville, Md., on Wednesday and wandered through a neighborhood, then onto Old Court Road and I-695, prompting multiple calls to Baltimore County police. Two officers joined the owner and used rope from a patrol car to wrangle it, and the cow “remained in police custody” until a farmhand arrived with a trailer. No injuries were reported (CBS Baltimore).
Russia: a heavy drone night over Moscow and Voronezh
Moscow’s mayor said 155 drones headed for the Moscow region overnight, with five downed on approach to the city and no reported injuries or ground damage. Sheremetyevo operated “by coordination” and airspace restrictions were lifted at 05:04 Moscow time. In Voronezh, 33 drones were downed over the city and region; nobody was hurt, but debris damaged an apartment building’s façade and a car (Kommersant; RIA Novosti; MK Voronezh).
Bottom line
Ethereum’s next upgrade is delayed on a testnet, not on mainnet, and nobody needs to act. HSBC’s RedCoin and SoFi’s yield-bearing deposit show banks pushing deeper into tokens, while Swell’s frozen staking tokens are the one to watch for fallout. In Health, the levers are about two hours of lifting a week on top of cardio, 7,000 steps on a few days a week for bones before menopause, a steady 6–8 hour night, and cooler tea. Locally, Prince William is flush with data-center money, and the Iwo Jima statue in Quantico is damaged after a vandal’s sledgehammer attack.