News linked to this event type.
Odaily News CME Group Chairman Terry Duffy, the operator of the world's largest futures exchange, and Luana Lopes Lara, co-founder of prediction market platform Kalshi, clashed verbally during a U.S. Commodity Futures Trading Commission (CFTC) roundtable in Washington. Duffy questioned whether prediction markets face the same regulatory scrutiny as established exchanges and noted that certain contracts could be subject to manipulation.Terry Duffy stated that CME Group is not a "barker at the circus" and mocked some contracts offered by Kalshi, including the Nathan's Hot Dog Eating Contest contract. Luana Lopes Lara responded that traditional markets and exchanges carry risks as well and that regulators are responsible for identifying and addressing such issues. DraftKings CEO Jason Robins subsequently called on both sides to stop attacking each other's business models.The dispute comes amid ongoing disagreements between federal regulators and states over the regulatory authority of prediction markets, with the central question being whether contracts involving sports, elections, and other real-world events are federally regulated derivatives or gambling products subject to state law. Last week, a Washington state judge ordered Kalshi to stop offering certain contracts. Two days ago, the CFTC instructed Kalshi to continue trading, pushing back against New York state's efforts to block its contracts. (Decrypt)
Odaily News: Cybersecurity firm Check Point Research has discovered that the StopAndProtect ransomware operation has been using nearly 2,000 compromised WordPress websites to spread malware, steal data, monitor victims, and deploy ransomware. The operation was first identified in mid-May.As of July 24, the operation had compromised more than 6,000 unique IP addresses, with 1,852 in the United States, and 630 each in Russia and India. The compromised websites were also used to host malware, relay commands, and store stolen files, screenshots, and activity logs.Attackers lured Windows users into running PowerShell commands through fake CAPTCHA prompts, enabling them to steal credentials and cryptocurrency wallet seed phrases, and spread further across networks and USB devices. Researchers collected more than 31,000 screenshots and over 700 compressed data archives, and believe the attackers may have accidentally infected themselves at some point. (Decrypt)
Coldcard has released the latest firmware 5.6.1 (Mk4/Mk5) and 1.5.1Q (Q). This update is based on a three-week security review following the emergency fix on July 31, addressing security risks brought by the previous mnemonic generation attack. Each newly generated mnemonic must now include at least one source of user entropy, including at least 65 irregular keystrokes, 50 physical dice throws, or 128 physical coin flips, combined with fresh entropy provided by STM32 TRNG, SE1, and SE2. The new firmware also adds instant staged PSBT verification before signing, strengthens USB connection and firmware update boundaries, improves Delta Mode isolation mechanisms, fixes active wallet backup issues, enhances random number generator initialization and fault checking, adjusts SIGHASH default settings, and includes multiple security and correctness improvements. Coldcard stated that this update aims to further reduce the risk of device attacks. The official reminder notes that updating the firmware cannot fix existing mnemonics generated by previously affected firmware. If users' mnemonics fall within the scope of this security advisory, they should first update the device, then generate and verify a completely new mnemonic, and migrate funds to the new wallet. Coldcard recommends that all Mk4, Mk5, and Q users update their devices promptly and verify the signature of the downloaded firmware.
Odaily News: According to on-chain detective Specter's monitoring, the victim claimed that due to a Coldcard hack, funds were transferred from Bitcoin to Ethereum. However, on-chain data shows that the 73 BTC ($4.6 million) originally came from the Whirlpool coin mixer two weeks ago, with some of it bridged to Ethereum and subsequently deposited through a phishing Tornado Cash interface. Two coin mixers were used during the fund transfer process. The individual was also found to have appeared in Telegram groups involving private key searches and brute-force attacks. On-chain detective Specter stated that the victim may be a threat actor, and their funds may have been stolen by another threat actor.
Odaily News, Cybersecurity firm Malwarebytes has discovered that multiple fake cryptocurrency anti-money laundering (AML) detection websites are impersonating legitimate services such as AMLBot, tricking users into connecting their wallets and authorizing transactions. Legitimate AML checks only require a wallet's public address—there is no need to connect a wallet, approve permissions, or sign transactions.These websites simulate the service process through fake progress prompts and detection results. One of the sites even asks users to deposit a small amount of funds to pay so-called detection fees, after which it displays a "clean, low-risk" result regardless of whether a real check was completed. Connecting a wallet does not directly lead to asset theft, but it does expose the address and asset information, making it easier for scammers to craft transactions for users to approve.Malwarebytes noted that similar scams use the same design and process, only changing the names and logos. Users who have approved suspicious token permissions should revoke those permissions; users who have entered their mnemonic phrases or private keys should treat their wallets as compromised and transfer assets to a new wallet. (Decrypt)
According to Cointelegraph, cybersecurity company Rapid7 has disclosed a cryptocurrency phishing campaign named "Operation Asterix" targeting approximately 885,000 phone numbers, aimed at luring users into visiting fraudulent Ledger, Trezor, and Exodus wallet apps or websites to steal mnemonic phrases and crypto assets.
Odaily News Rapid7, a cybersecurity firm, has disclosed a crypto phishing campaign named Operation Asterix that targets approximately 885,000 phone numbers across multiple countries, redirecting victims to fraudulent wallet service websites. A total of 5,576 phone numbers have been matched with Binance user accounts and placed on the attack queue.The attackers steal seed phrases through fake apps impersonating Ledger, Trezor, and Exodus, while also contacting victims via fraudulent customer support emails and phone calls. Rapid7 also found that among over 316,000 phone numbers in Germany, 43,066 were matched with crypto trading accounts, representing a hit rate of approximately 13.6%.The related attacks also include a bulk phone number verification tool targeting Kraken accounts, and the investigation revealed that AI tools are being widely used in phishing operations. According to data from blockchain security firm Hacken, phishing attacks and social engineering scams caused $306 million in losses in the first quarter of this year, accounting for the majority of the $482 million total losses in the crypto industry. (Cointelegraph)
As disclosed by security researcher V12 (@v12sec), the Rabby Wallet browser extension contains a silent signature extraction vulnerability that allows attackers to extract wallet signatures via malicious websites without user awareness, thereby draining wallet assets. The conditions required to trigger this vulnerability are extremely limited: users must simultaneously meet two conditions—connecting to a malicious website and manually setting the auto-lock timer to 10 minutes. Other timer settings are unaffected, and the mobile app is also unaffected. Rabby Wallet officially stated that a fix update was released on August 11 following the vulnerability's discovery. No actual exploitation cases have been detected so far. Users are advised to confirm as soon as possible that the extension has been updated to the latest version.
According to monitoring by on-chain analyst Ember (@EmberCN), a hacker address associated with Tornado Cash bought 18,273 ETH at an average price of $2,109, spending 38.535 million DAI/USDS over the past 5 hours during today's strong ETH rebound. It is reported that the aforementioned stablecoins originated from 17,124 ETH the hacker received from Tornado Cash 9 months ago, which were all sold at an average price of approximately $3,308 at that time to be held as stablecoins, and were bought back to rebuild positions today taking advantage of the significant ETH rebound.
Odaily News According to on-chain analyst Yu Jian's monitoring, a hacker spent 38.535 million DAI/USDS to buy 18,273 ETH over the past 5 hours, at a purchase price of $2,109. The aforementioned stablecoins came from 17,124 ETH received from Tornado Cash 9 months ago. The hacker subsequently sold the ETH at an average price of approximately $3,308 and converted it into DAI and USDS for holding. Today, during the ETH rebound, the hacker repurchased ETH.
Odaily News: BIP-110 supporters are discussing a hard fork to change the stalled minority chain's mining algorithm from SHA-256d to BLAKE2b. Transaction history before the fork remains shared by both chains. If transaction and signature rules remain consistent, the same transaction could be replayed on the other chain, creating a replay attack.BIP-110's peak miner support was approximately 2.53%. After the consensus rules took effect on August 8, the minority chain produced only two consecutive blocks before stalling, while the Bitcoin main chain continued operating and widening the block height gap. The BIP-110 proposal was subsequently marked as closed, and supporters shifted focus to discussing the BLAKE2b proof-of-work scheme.Bitcoin Knots plans to add a new signature hash option, but RDTS will still maintain compatibility with Bitcoin Core's existing signature hash types. Regular transactions may continue to be valid on both chains. Users will need to use the new option and rely on wallets or hardware signing firmware that support it to achieve asset separation.Luke Dashjr stated on August 18 that Bitcoin should bear the responsibility for replay protection, calling it "Spamcoin." If the BLAKE2b fork proceeds around September 1, exchanges, wallets, and holders will need to distinguish between cross-chain transactions and chain-specific transactions. (Bitcoin.com News)
According to Odaily, as AI competition between OpenAI and Anthropic intensifies, OpenAI is attempting to close the gap with rival Anthropic by enhancing safety standards and adjusting product strategies. OpenAI recently announced it would "temporarily slow down model scaling" and invest more resources in strengthening AI safety protections. Earlier, OpenAI discovered abnormal behavior in its AI systems during testing, raising further concerns within the company about model safety, cybersecurity risks, and control over autonomous capabilities.This adjustment in safety strategy is also seen as part of OpenAI's response to Anthropic's rapid rise. In the past, Anthropic has achieved rapid growth with its Claude series of models, particularly in enterprise applications and AI coding, with revenue growth surpassing OpenAI. Market data shows that Anthropic's recent annualized revenue has grown quickly and now leads OpenAI on certain metrics. (The Information)
Odaily News: The KITE Foundation has provided an update on the handling of a token security incident. A new KITE ERC-20 contract has been deployed on the Ethereum mainnet, with the total token supply remaining unchanged. Old KITE tokens will be migrated to the new contract at a 1:1 ratio. Addresses confirmed to be controlled by the attacker will be excluded and will not receive new tokens.The migration snapshot is based on Ethereum mainnet block height 25,692,498. Regular self-custody wallet users will receive the new tokens directly without needing to redeem or authorize anything. Exchange users will have their migration coordinated between the exchange and the KITE team. Cross-chain channels will remain paused until migration and verification are complete.Previously, KITE detected abnormal transfers on August 6 and confirmed it had been attacked by hackers. The team stated that this incident did not result in any asset losses for users or the project, and the impact is currently under control.
Odaily News Bybit today released its H1 2026 Risk and Security Report. Following the security incident in February 2025, Bybit has comprehensively upgraded its security architecture, transitioning toward a new defense model characterized by earlier detection, faster response, and continuous adaptation. Key highlights from the report are as follows:User Fund Protection: In H1, over 30,000 suspicious withdrawals were intercepted, protecting nearly 20,000 users from potential losses exceeding $700 million. The average initial review time was just 4.7 minutes (with 95% completed within 10 minutes).100% On-Chain Monitoring: Monitoring covers all business-related on-chain activities (including listed tokens, ecosystem contracts, and hot/cold wallets). In H1, 10 security incidents involving listed token projects were handled with zero platform losses; of these, responses to 8 incidents were faster than other major exchanges, and 2 attacks were detected before the project teams themselves. Additionally, approximately $212 million in potentially fraudulent on-chain funds was identified, and over 10,000 malicious addresses were blacklisted.AI-Driven Security Operations: More than 100,000 security alerts were processed. AI-assisted audits identified critical vulnerabilities at an efficiency 3-5 times that of manual efforts; the automated red team platform reduced the time from asset discovery to initial testing to within 24 hours (compared to weeks with traditional manual methods), and the cycle from security assessment to testing was shortened from two weeks to two hours.Accountability and Asset Recovery: In collaboration with law enforcement agencies and blockchain intelligence firms, stolen assets are being traced, and legal action has been taken against North Korea and the Lazarus Group to hold them accountable and recover funds.David Zong, Head of Risk Control and Security at Bybit Group, stated: "The cybersecurity arms race has entered the era of 'minute-level' response. Leveraging AI to strengthen risk control capabilities and ensuring the security of AI systems themselves is our top priority, but critical security decisions remain centered on human judgment."
Maya Protocol founder AaluxxMyth disclosed that the protocol was attacked, with approximately 20 BTC (around $1.4 million) and other assets (around $300,000) stolen. The team has suspended global operations to contain losses and is fixing vulnerabilities to restore trading. Most of the losses resulted from arbitrage and pool fees caused by extreme slippage. The team is communicating with relevant parties and plans to recoup the funds through methods such as investments in Aztec Chain. If the 20 BTC are returned to the pool, the CACAO token price will recover to $0.115. The team also hopes the attacker will accept the bug bounty and return the funds.
Odaily News: A bitcoin wallet created in 2012 has moved 212 BTC after remaining dormant for 14 years, valued at $13.72 million based on the price at the time of transfer. The wallet address was created on August 10, 2012. These bitcoins were originally worth $2,346, with a per-coin price of $11.07; at the article's quoted price of $64,761, if sold in full, the holder would realize a gain of 584,725%. The wallet owner's identity remains unknown. The 212 BTC has been transferred from a legacy P2PKH wallet to an unlabeled Bech32 wallet, arriving in multiple batches before being consolidated. A Coldcard vulnerability led to the theft of nearly 2,000 BTC, which may have prompted some long-term holders to move their assets, but this address has not been linked to any known entity. (Bitcoin.com News)
Odaily News: Peer-to-peer cryptocurrency trading platform NoOnes announced that it will begin gradually winding down operations after running for over three years. The company stated that it had been continuously seeking to resolve and lift the sanctions imposed on NoOnes, but ultimately failed. The sanctions caused the platform to lose key partners, and blockchain monitoring firms also flagged transactions associated with NoOnes as high-risk, making it increasingly difficult for the platform to continue normal operations. According to the plan, the business contraction began on August 17, and the P2P marketplace will close at 23:59 UTC on August 21. Services such as Swap, NoOnes Visa, fiat withdrawals, the gift card store, and the Bitcoin Lightning Network will also be discontinued progressively. After that, the platform will only support withdrawals, and users will still be able to log in, view balances, and withdraw remaining assets. The company advises users to complete asset withdrawals as soon as possible, no later than August 23. Previously, on January 26, 2025, NoOnes revealed that the platform had suffered a major security breach earlier that month, resulting in losses of approximately $8 million in crypto assets. CEO Ray Youssef confirmed the news after on-chain detective ZachXBT disclosed the hacking incident on his Telegram channel.
The Binance Security Team recently independently discovered a malicious governance proposal targeting a project's Decentralized Autonomous Organization, which could put approximately $1.2 million worth of treasury tokens at risk. Binance notified the project team to vote against the proposal less than 48 hours before its execution and coordinated with relevant centralized exchanges to suspend deposits of the affected tokens to reduce the risk of potential fund transfers. Ultimately, the malicious proposal was rejected, the attack was not executed, and no funds were lost.
The official Decred X account (@decredproject) issued a security notice stating that a security vulnerability was discovered in the Decred (DCR) network. The patch will be released on the morning of August 18, Eastern Time. For security reasons, users are advised to pause voting and mining operations before completing the upgrade. An announcement will be posted on the official X account immediately after the patch is released.
According to Decrypt, cybersecurity company Bitdefender has issued a warning that malware disguised as HD pirated copies of the movie "Odyssey" has spread rapidly within days of the film's release. These files are disguised as normal torrent files with naming conventions such as WEBRip and Blu-ray, but are actually Windows executable programs that automatically install the Lumma Stealer information-stealing trojan upon execution. Lumma Stealer can steal browser passwords, payment information, autofill data, remote desktop credentials, and cryptocurrency wallets, and can also steal authentication cookies; even if the target account has two-factor authentication (MFA) enabled, it is not spared. Attackers also deliberately disguised the malicious file icons to resemble the VLC player, exploiting Windows' default feature of hiding extensions to deceive users.