According to BlockBeats, on September 11, Farside Investors reported a net outflow of $282.7 million from Bitcoin ETFs yesterday. Specifically, ARKB saw a net outflow of $164.3 million, GBTC a net outflow of $36.4 million, and FBTC a net outflow of $33.6 million.

Ethereum ETFs saw a net outflow of $29.9 million, with FETH and ETHA experiencing net outflows of $25.2 million and $18.6 million respectively, while ETHB and ETH saw net inflows of $13.9 million and $7.7 million respectively.

According to BlockBeats, on September 11th, TradingBeats monitoring showed that "Maji's" total long positions had increased to $107 million, with a current unrealized profit of approximately $80,000, but a loss of $5.6 million in the past week. Specifically:

• Long 40,650 ETH with 25x leverage, position valued at approximately $99.971 million;

• Using 40x leverage to go long on 50 BTC, worth approximately $3.856 million;

• A long position of 42,950 HYPE contracts was opened with 10x leverage, worth approximately $3.406 million.

According to BlockBeats, on September 11, email marketing platform Brevo disclosed that attackers exploited an authorization boundary vulnerability in its login system to access 138 customer accounts. Of these, 6 accounts were used to send phishing emails, contact information for 43 accounts was exported, and 93 accounts showed no active activity. Brevo did not specify whether there was any overlap in these categories.

Affected customers include crypto hardware wallet manufacturers Trezor and BitBox, as well as crypto portfolio and tax reporting platform CoinTracking. Attackers used Trezor's Brevo account to send a phishing email titled "Critical Security Alert: STM32 Entropy Vulnerability" to approximately 347,000 newsletter subscribers, tricking them into accessing the application and submitting wallet backup information. Trezor blocked the relevant domain at the DNS level within 20 minutes, but approximately 2,500 people had already accessed the link prior to the attack.

Trezor stated that its Brevo account only stores subscribers' email addresses and does not contain other customer data, but at this stage, it considers all approximately 347,000 email addresses to be compromised by attackers and potentially used for subsequent phishing campaigns. BitBox has not yet found evidence of funds or mnemonic phrase leaks; CoinTracking users received fake emails requesting them to refresh their API keys.