News linked to this event type.
Odaily News: Bitcoin News posted on X platform that a long-term Bitcoin holder had all assets withdrawn from their account within less than 12 hours of transferring BTC to a major Australian exchange. According to a friend of the holder, hackers had compromised their Google account for approximately 3 months, obtaining their email and Google Authenticator credentials backed up to the cloud, and then waited for them to deposit BTC into the exchange. The exchange identified the hacker as the account owner and approved the withdrawal, with the holder receiving a withdrawal approval notification at 3 AM. The post recommends disabling cloud backup for Google Authenticator and using hardware security keys such as YubiKey; setting up two keys can serve as a backup in case one is lost.
Odaily News: DeFiLlama founder 0xngmi has raised questions about Apple's App Store review mechanism in a post on the X platform. He stated that his team had spent months trying to get Apple to remove a fake DeFiLlama app, but multiple previous complaints regarding trademark infringement and impersonation of the official app were not effectively addressed.In the end, the DeFiLlama team had to download and use the fake app, subsequently depositing a small amount of funds into it. As expected, the wallet assets were stolen, confirming the app's malicious behavior. After submitting another report to Apple with this evidence, the fake app was finally removed within a few days.
Odaily News: The French Finance Minister has confirmed that hackers breached the systems of the French Public Finance Directorate in late June and stole taxpayer data belonging to individuals and businesses. According to FrenchBreaches, a platform that tracks cyberattacks in France, this incident affects approximately 678,437 people, roughly 1% of France's population, though the exact number is still under investigation and has not been finalised.The compromised data reportedly includes sensitive information such as names, dates of birth, home addresses, phone numbers, email addresses, tax identification details, and income data. Among those affected, nearly 27,000 individuals had taxable income of at least €100,000, 386 exceeded €1 million, and another 8 surpassed €10 million.Reports indicate that the database has been listed for sale on dark web marketplaces for several thousand euros. The attacker, going by the name ZeroBytes, claims to have extracted the records using an internal search tool before being detected and having access cut off.The incident has raised concerns within the crypto industry, as France has seen a noticeable increase in "wrench attacks" targeting crypto holders in recent years. If high-income individuals' addresses and contact details are exposed, it could provide criminals with a more precise list of targets.
Odaily News, Galaxy Research Head Alex Thorn stated on the X platform that attacks exploiting the Coldcard hardware wallet vulnerability have noticeably declined, but cumulative losses continue to rise as more victims come forward. The impact of this incident on the Bitcoin community is significant, as the victims are primarily long-term BTC holders who adhered to self-custody cold storage principles, rather than those who lost assets due to high-risk trading or DeFi activities.At a scale of $112 million, this incident ranks among the top 20 largest hacks in crypto history and is one of the most severe security breaches in the hardware wallet self-custody sector to date. Bitcoin culture may be entering a new phase—the era of relying solely on ideological advocacy and extreme self-custody promotion is coming to an end. The community needs to place greater emphasis on technical security, lower the barrier to entry for users, and avoid simply shifting the burden of security responsibility onto ordinary users. This crisis may ultimately drive the Bitcoin ecosystem to establish a more mature security framework.Galaxy Research has directly contacted 190 victims and has confirmed with high confidence that the exploit has led to the theft of 1,778.84 BTC (approximately $112.7 million) from over 8,600 addresses. This tally does not yet include certain moderately credible suspicious attack records, such as the unconfirmed "Wave 4." If these potential attack scopes are incorporated, total losses could expand to 2,417.35 BTC (approximately $153 million).Meanwhile, the incident is reshaping market perceptions of self-custody security. Galaxy noted that multisig wallets have emerged as the "winners" of this event, with no stolen transactions traced to multisig wallets so far. Multisig service providers including Casa, Unchained, Nunchuk, and Anchorwatch have all observed a notable increase in user registrations and BTC inflows.
Odaily News: According to monitoring by Galaxy's Head of Research, since July 31, they have communicated with over 190 victims of the Coldcard vulnerability attack, and have asked victims who have not yet been in touch to reach out via direct message so they can provide tracking information and assist in reporting losses to relevant authorities. Since August 6, no new attacks have been confirmed, but this does not mean that new attacks cannot occur, and vigilance should be maintained.
Odaily News: Netflix has announced that "The Altruists," a series inspired by the rise and fall of FTX founder SBF and former Alameda Research CEO Caroline Ellison, will premiere on November 19, with the first stills released.The series consists of 8 episodes, with Anthony Boyle portraying SBF and Julia Garner playing Caroline Ellison. The plot follows two young idealists who attempt to rapidly reshape the global financial system, only to be accused of stealing $8 billion and ultimately fall from the pinnacle of financial power.The series is created by Graham Moore, inspired by articles from New York Magazine journalists Kevin T. Dugan and Jen Wieczner. Barack Obama and Michelle Obama serve as executive producers of the series. (Variety.com)
Odaily News: BNB Smart Chain (BSC) has announced that the Pasteur hard fork will officially go live on the mainnet at 10:30 AM Beijing time on August 25 (02:30 UTC on August 25). Node operators are required to upgrade their clients to v1.7.7 in advance.This upgrade includes three improvements—BEP-682, BEP-695, and BEP-675—focusing on enhancing cross-chain security, validator governance mechanisms, and network throughput. Among them, BEP-682 will strengthen the BNB Chain cross-chain bridge verification mechanism, preventing permission bypass risks caused by duplicate signature counting by validators, thereby improving the security of cross-chain asset transfers. BEP-695 optimizes the validator key rotation mechanism, ensuring that old keys no longer retain management privileges after exit, while also fixing potential vulnerabilities related to slashing and governance voting.In terms of performance, BEP-675 reduces the time consumption caused by validators repeatedly executing transactions by optimizing the block construction process. In BNB Chain's internal QANet test environment, this solution increased throughput from 1,237 TPS to 2,324 TPS. While maintaining the 450-millisecond block time and the 100 million Gas block limit unchanged, the average Gas usage per block rose from 46.35 million to 84.15 million.BNB Chain stated that this upgrade is primarily aimed at validators and block builders, designed to provide greater capacity during network peak periods and advance the throughput expansion goals outlined in BNB Chain's roadmap for the second half of 2026.
Z.ai releases GLM-5.3, based on the same foundation model as GLM-5.2, achieving capability improvements through expanded post-training. According to the official announcement, GLM-5.3 improves by 50% over GLM-5.2 on the internal Z.ai Code Bench coding benchmark, and reaches a leading level among open models in public benchmarks such as Terminal Bench 3.0 and Agents' Last Exam. In terms of cybersecurity, GLM-5.3 achieved a score of 84.5% in the CyberGym vulnerability discovery test, and significantly improved compared to the previous generation in exploit chain-related tests such as ExploitBench and ExploitGym.
: Cardano ecosystem wallet project SecondFi has announced the launch of a wallet migration tool and revealed a recovery plan for assets affected by the June 2026 security incident. As the project will cease operations, users are required to migrate remaining assets still held in SecondFi wallets. The migration tool is expected to go live on August 13, supporting the transfer of eligible ADA, Cardano native tokens, and NFTs to new Cardano wallets created with service providers of the users' choosing. Currently, the tool only supports Cardano network assets; non-Cardano assets must be transferred separately through corresponding network and wallet processes. SecondFi stated that the migration tool has passed an independent security assessment by security firm Bitdefender. For affected assets, SecondFi plans to launch a recovery portal before September 10, where users can verify wallet ownership via zero-knowledge proofs (ZK Proof) and submit asset claims. SecondFi reminds users to only rely on information published through official channels, including @secondfiapp, @secondfi_jp, and the official support website, to guard against phishing sites and impersonating accounts.
Harmony released an incident update stating that on August 12, 2026, Beijing time, an unauthorized issuance event of the native token ONE occurred on the Harmony mainnet. Officials confirmed that the initial abnormal issuance volume was 4 billion ONE, completed through two empty block entries; additionally, on-chain reconstruction results show that the total forged cross-shard issuance volume could reach 3.0100001 trillion ONE, involving 6 forged cross-shard transactions and 4 attacker wallets, and the team is still further verifying the two sets of data.
Odaily News, according to Bitcoin News monitoring, new research released by @PraveenPerera shows that the Coldcard attacker appears to have first identified vulnerable addresses, then sorted them by BTC balance, and began transferring funds in batches starting from the addresses with the highest holdings. The actual transfer software used was relatively crude. One address had 225 spendable UTXOs, and the attacker happened to extract the most recent 200, leaving the earliest 25, including one UTXO worth 0.16 BTC. This is fully consistent with the 200-record limit that a blockchain API investigated by the researchers returns by default, suggesting the attacker may have failed to load the next page of data. The software even spent a 294-satoshi UTXO, reportedly increasing transaction fees by approximately 2,040 satoshis, with the spending amount clearly exceeding the UTXO's own value. Based on this, the study's author believes the tool's builder may have a stronger understanding of account balance systems than of Bitcoin's UTXO model. Although the attacker appears to have obtained victims' full seeds, at least 75 BTC remain in other addresses derived from the same seeds. The biggest mystery at present is that 132.95 BTC still remain across the 153 compromised addresses, and researchers have been unable to reproduce the seeds behind these addresses, so they cannot rule out the possibility that the attacker obtained undisclosed private device data or candidate data.
Odaily News: Cryptocurrency exchange BitMEX has announced that it will fully shut down its platform at 4:00 (UTC) on September 23, 2026. BitMEX CEO Peter Wilkinson stated that the exchange has been operating for over 11 years and has never lost customer funds due to hacker attacks during that period. Peter Wilkinson noted that BitMEX failed to keep pace with its competitors, having long focused on derivatives business while failing to offer spot trading, yield products, custody, and stablecoin trading services in a timely manner. The exchange also entered the USDT market relatively late, in 2021. He stated that BitMEX once supported its founding team in pioneering perpetual swaps, a product that has since become one of the highest-trading-volume financial instruments in the crypto industry and is now widely used for leveraged cryptocurrency trading. (Bitcoin.com News)
According to Decrypt, Trezor's logistics partner ShipMonk suffered a data breach, leaking the personal information of a total of 13,689 customers. Among them, the names, phone numbers, email addresses, and home addresses of 11,742 individuals were fully obtained, while partial information of another 1,947 individuals was affected. The affected users were all customers who placed orders between May 10 and August 8 in the US, UK, Sweden, Colombia, Brazil, Italy, or Portugal. Trezor emphasized that its own system was not compromised, and devices, private keys, and wallet backups were all unaffected. It reminded users to be vigilant against phishing attacks and never enter wallet backup information online.
Odaily News: Bitcoin News posted on X platform that Trezor stated its customer data was exposed due to a security breach at logistics provider ShipMonk. Customers who received orders within 90 days before August 8 in the United States, United Kingdom, Sweden, Colombia, Brazil, Italy, or Portugal may be affected. The exposed data includes full names, shipping addresses, phone numbers, email addresses, and order numbers. Trezor stated that its systems were not compromised and devices remain secure, but reminded affected customers to beware of sophisticated phishing attacks leveraging the leaked information.
Odaily News - A study published at USENIX Security '26 reveals that researchers identified 65,340 high-risk cryptocurrency addresses involved in abuse on Ethereum and BNB Chain, with associated native token losses reaching 126,982.94 ETH and 17,726.7 BNB. The study estimates that total losses linked to these addresses exceed $574.8 million, of which two newly described active attack vectors directly caused approximately $15.7 million in losses (2.7% of the total). The first category involves contract account misuse and exploitation of deterministic contract addresses; the second leverages EIP-7702 to delegate accounts with exposed keys to malicious code that directly transfers deposits. The research team extracted over 16.3 million unique private keys by mining 63,004 GitHub repositories from January 2015 to May 2025, achieving an overall accuracy rate of 99.11% in detection results. (Cryptoslate)
According to EU-Startups, AI security startup Mindgard announced the completion of a €26 million (approximately $30 million) Series A funding round, led by Album VC, with participation from Karma Ventures, .406 Ventures, Atlantic Bridge, IQ Capital, and Lakestar. Mindgard was founded by Dr. Peter Garraghan in 2022, incubated by Lancaster University in the UK, and is headquartered in Boston and London. The company's platform provides Shadow AI discovery, AI red teaming, and runtime AI protection capabilities, and has helped disclose over 150 high-impact AI security vulnerabilities, covering issues such as the Cursor IDE zero-day code execution vulnerability, Google Antigravity trusted workspace defects, and ChatGPT image generation protection failures.
据 Ai 姨 监测，Lazarus Group 于约 2 小时前将 262.2 枚比特币（BTC） 转移至新地址，价值约 1664 万美元，相关转移或用于后续资金清洗。当前该组织在链上仍持有超过 7306 万美元 的资产，主要包括 比特币（BTC）、泰达币（USDT） 和 以太坊（ETH）。
Odaily News: According to Harmony's monitoring, Harmony stated that it is advancing a rollback plan and has reached an agreement with validators and exchanges on the specific approach. The minting vulnerability fix has been activated, and the full list of attacker wallets will be released soon. Previously, the number of ONE tokens anomalously minted on the Harmony network exceeded 3 trillion, involving 6 abnormal blocks.
Bitwise Chief Investment Officer Matt Hougan stated in an interview with Bloomberg that the Bitcoin price has not reacted significantly to negative news recently, such as the Coldcard security incident, Strategy sell-off, and the CLARITY Act's progress falling short of expectations, which may indicate that Bitcoin has approached or reached the bottom of this bear market.
According to Lookonchain, the whale address "TLBL" has experienced another major asset security incident, with cumulative losses exceeding $50 million. Of this total, the address previously lost approximately $24 million due to a phishing attack two years ago; in the latest incident, it is suspected that over $26 million in assets across 3 wallets were completely transferred out due to a private key leak. This incident has once again sparked market concern regarding security management risks for high-net-worth on-chain addresses.