News linked to this event type.
on-chain security analyst Specter has stated that a suspected phishing attack targeting Polymarket users is underway, with cumulative losses currently estimated at approximately $2.94 million. According to their monitoring, the attacker has transferred funds from over 11 victim wallets holding PUSD, swapping the stolen assets for ETH. Specter also reminds users to be vigilant against phishing risks and notes that the incident is still being actively tracked.
Ethereum Layer 2 project Taiko has released the latest update on a security incident, stating that this incident will not result in any user fund losses. Currently, bridged assets are under-collateralized, and the team will complete supplementary collateral for all assets before reopening the bridge, ensuring that each user's balance is supported on a 1:1 basis, identical to the state before the incident. Since the security incident occurred, cautious measures have been taken, including controlling the scope of impact, determining the root cause, and collaborating with the board to develop a plan to protect user assets.Furthermore, the CEO of Taiko has submitted a formal report to relevant authorities in Singapore, and the team will fully cooperate in tracing the responsible parties. Users are currently not required to take any action. The completed fix is now being tested, and Taiko will reopen the chain and bridge services as soon as it is deemed safe. Meanwhile, users are reminded to be vigilant against scams. The Taiko team will not proactively message users, and there are no claim or refund websites. Any links offering such services are fraudulent.
Odaily Odaily News According to “on-chain detective” ZachXBT, who posted in his personal channel, Polish social engineering attacker Wojtek Kulisz (online alias “Merry”) was recently suspected of being raided and investigated by Polish law enforcement, and three other individuals were also taken away. Although the official press release did not disclose his name or photo, multiple designer clothes and jewelry displayed on his public Instagram account “wojtekk” are highly consistent with the items seized during the police operation. The case is led by the Polish Central Cybercrime Combat Division (CBZC), with assistance from agencies such as the FBI and HSI.
According to on-chain analyst PeckShield (@PeckShieldAlert), Gnosis’s X platform account appears to have been compromised. Users are advised not to interact with this account or click any links posted by it to avoid phishing attacks or asset loss.
SlowMist released threat intelligence stating that new npm malware variants—Shai-Hulud, Miasma, and Hades—linked to the compromised npm developer account “czirker” are impacting the npm ecosystem. This campaign triggers during `npm install` execution via a preconfigured `binding.gyp` file. It has been confirmed to affect 23 packages, including `leo-logger`, which sees approximately 3,140 weekly downloads. As of the report’s publication, 408 GitHub repositories have been found infected due to stolen credentials.
According to an official social media announcement by HTX DAO, the HTX Genesis Hackathon—organized by HTX DAO and B.AI, and co-organized by OpenCSG, TinTinLand, and OpenCity—has attracted over 90 teams to register. The total prize pool for this event amounts to 20,000 USDT, with over $100,000 in computing power support provided. The hackathon aims to encourage developers to explore use cases centered around $HTX applications, B.AI ecosystem applications and computing services, AI Agent finance, on-chain asset management, trading infrastructure, DAO tools, and intelligent financial operating systems. Winning teams will receive cash prizes, computing resources, ecosystem support, introductions to investment firms, community exposure, and follow-up grant funding. Registration for HTX Genesis closes on July 5, and the final competition will be held offline during the World Artificial Intelligence Conference (WAIC) in Shanghai on July 17–18.
Cybersecurity firm Novee, in its latest research, revealed a CI/CD supply chain vulnerability pattern dubbed “Cordyceps,” primarily involving command injection, authentication logic flaws, artifact poisoning, and privilege escalation within GitHub Actions workflows. According to the report, unauthenticated users can exploit these vulnerabilities under specific conditions to hijack workflows, steal credentials, or gain control of code repositories.
Queenie, founder of CoinUp, will host an X Space on June 25 at 20:00 (UTC+8) to publicly address recent rumors about the platform “running away,” its operational status, user asset security, CPX price volatility, and related personnel matters.
According to Odaily, since 2019, wallets with clear ties to Iran have transferred over $3.84 billion in transaction funds through the cryptocurrency exchange CoinEx. Among these, wallets hosted by CoinEx received hacked crypto assets acquired by the Central Bank of Iran and conducted direct transactions with accounts previously identified by U.S. officials as belonging to Iran's Islamic Revolutionary Guard Corps.Blockchain data shows that in 2024, CoinEx replaced Binance as the largest foreign counterparty for Iran's biggest domestic crypto exchange, Nobitex. Last year, the flow of funds between Nobitex and CoinEx exceeded $763 million. Additionally, between 2022 and 2025, wallets hosted by CoinEx also processed transactions for Alireza Derakhshan, an Iranian individual allegedly involved in a network selling sanctioned oil. (WSJ)
According to The Wall Street Journal, blockchain public-chain data analysis shows that Iranian entities have conducted over $3.84 billion in transactions via the cryptocurrency exchange CoinEx to circumvent U.S. economic sanctions. Investigators traced funds linked to two digital wallets controlled by the Central Bank of Iran and found connections to the $1.5 billion stolen by North Korean hackers from the Bybit exchange. After flowing through complex, multi-layered transaction paths, these funds ultimately entered CoinEx—making it one of the central channels through which Iran uses cryptocurrencies to bypass sanctions.
according to PeckShieldAlert monitoring, the address labeled as the KyberSwap attacker has again transferred 2,000 ETH to Tornado Cash. Over the past two years, the attacker has laundered a total of 16,100 ETH (approximately $40 million) through this mixer, accounting for over 80% of the $48.8 million stolen in the November 2023 attack.
According to Crypto in America, the National District Attorneys Association, the National Association of Assistant U.S. Attorneys, the International Association of Chiefs of Police, and the National Sheriffs’ Association jointly sent a letter to Acting Attorney General Todd Blanche and Patrick Witt, Executive Director of the White House Crypto Council, expressing strong opposition to Section 604 of the “Clarity Act”—the Blockchain Regulatory Certainty Act (BRCA). Law enforcement groups argue that this provision could create regulatory loopholes exploitable by criminals for illicit activities including drug trafficking, fraud, child exploitation, sanctions evasion, and terrorist financing. Meanwhile, cryptocurrency-backed candidates achieved sweeping victories in primary elections across Maryland, New York, and Utah. Fairshake—a pro-crypto super PAC—has collectively spent over $7.6 million supporting these candidates, including $5.5 million backing Adrian Boafo, the candidate for Maryland’s 5th congressional district. Miller Whitehouse-Levine, founder of the Solana Policy Institute, warned that August 7, 2026, may be the final window for Congress to pass cryptocurrency market structure legislation. He stated that the industry is willing to make limited revisions to the BRCA provisions to address law enforcement concerns—but firmly opposes any fundamental changes that would weaken the core protections enshrined in the provision. Additionally, the House Financial Services Committee held a hearing on “The Future of Payments” the same day.
According to CoinDesk, Geoff Kendrick, Head of Digital Asset Research at Standard Chartered Bank, released a report initiating coverage of the decentralized lending protocol Aave, with a target price of $3,500 by end-2030—approximately 50 times its current price of around $70—and expects Aave to outperform both Bitcoin and Ethereum. Kendrick stated that Aave has recovered from the April 2026 KelpDAO rsETH bridge vulnerability incident, during which attackers used approximately $290 million worth of stolen tokens as collateral to borrow real assets on Aave, exposing the protocol to up to $230 million in potential losses. Assets have now begun flowing back onto the platform, and Aave’s dominant position in on-chain lending remains solid. Looking ahead, Standard Chartered forecasts that the value of tokenized assets actively used in DeFi applications will grow 37-fold by 2030. Aave—whose revenue model is directly tied to lending activity—is poised to benefit directly. Additionally, Aave’s Horizon initiative (enabling tokenized real-world asset lending in permissioned environments) and the potential relaunch of its token buyback program are viewed as key catalysts.
According to The Block, four major U.S. law enforcement organizations—the National District Attorneys Association, the National Association of Assistant U.S. Attorneys, the International Association of Chiefs of Police, and the National Sheriffs’ Association—jointly wrote to the Department of Justice and the White House, warning that Section 604 of the “Clarity Act” (i.e., the “Blockchain Regulatory Certainty Act”) contains regulatory loopholes. This provision offers a “safe harbor” exemption for non-custodial developers; law enforcement agencies contend that it could shield individuals or entities assisting in the transfer of crypto assets, hinder investigations and prosecutions of crypto-related crimes, and weaken the existing anti-money laundering framework.
HashKey Chain will host the “HashKey Chain Horizon” hackathon in Japan from June 18 to July 14. Built upon the foundation of building a compliant and secure Web3 ecosystem, this hackathon is open to developers, innovators, and Web3 enthusiasts worldwide. It features two challenge tracks focused on key areas within the HashKey Chain ecosystem.
According to the Chosun Ilbo, 22 bitcoins previously held by Seoul’s Gangnam Police Station during its investigation into a financial hacking case have gone missing—valued at approximately 2.2 billion Korean won at current market prices. The investigation revealed that the涉案 bitcoins were stored in an offline wallet held by the complainant, and individuals who knew the wallet’s mnemonic phrase subsequently restored it externally and cashed out the funds.
Altura released a community update stating that redemptions remain suspended to ensure equal treatment for all AVLT holders, and will only be reopened collectively once treasury assets have been fully recovered, credited, reconciled, and independently verified. The team confirmed that no security incident has occurred and no assets have been lost.
According to Blockaid’s monitoring, the Yield Yak website has suffered a front-end attack. The website’s subdomain currently contains code from eleven drainers. This attack method is similar to the one previously used against Gitcoin.
SecondFi, a Cardano ecosystem project, stated that the root cause of the recent security incident has been identified as an issue with its in-house Cardano wallet generation software. The team said it has completed on-chain analysis to assess the scope of impact and is currently collaborating with a blockchain security firm for an independent technical assessment. A preliminary estimate of the total impact is approximately 16 million ADA.
: In response to the recent security incident involving Cardano ecosystem project SecondFi, SlowMist founder Cos said on social media that after continuously monitoring the relevant on-chain data, he believes that if the two addresses starting with "addr1q" are both controlled by the attacker, the actual losses for SecondFi users may have exceeded $20 million.Cos stated that based on on-chain behavior analysis, the aforementioned addresses are highly likely related to the attacker, involving stolen assets potentially exceeding 129 million ADA and other tokens.Previously, SecondFi disclosed that this security incident affected approximately 16 million ADA, stating that the issue originated from the web wallet generation software.