News linked to this event type.
According to The Defiant, Boltz announced that its original founders have all exited, and an anonymous team of "senior Bitcoin figures" will take over the suspended Bitcoin Swap service. The new team will provide funding and engineering support to fix vulnerabilities and push for the service to resume as soon as possible.
Odaily News: According to on-chain detective Specter's monitoring, the attacker exchanged all assets, including WBTC, cbBTC, LDO, USDS, and CRV, for DAI and ETH. The same wallet had previously been compromised in September 2023 due to a malicious token approval, resulting in a loss of $24.23 million, with the attacker ultimately returning approximately 90% of the stolen funds. The attacker's address is 0x8fEB...F95Ae.
Odaily News: After a firmware vulnerability in Coldcard hardware wallets was exploited, approximately 2,100 Bitcoin were stolen, with losses nearing $130 million. On-chain data shows that in the days surrounding the incident, wallets held by long-term holders transferred out approximately 233,000 Bitcoin, valued at around $15 billion. Casa CEO Nick Neuman stated that some of the transferred funds came from Coldcard users migrating to multi-signature wallets, with Ledger and Trezor users also taking similar measures after the event. During the same period, approximately 22,000 Bitcoin were transferred into exchanges. Coinkite has advised users who generated seed phrases using firmware versions 4.0.1 through 4.1.9 to treat their wallets as compromised and immediately migrate to new seed phrases. These versions cover the period from March 2021 to July 2026. (Decrypt)
: Israeli cybersecurity firm A Security has disclosed that researchers, using publicly available AI models and fewer than 20 prompts, discovered vulnerabilities in the annotation tool of the video conferencing platform Zoom and built a working exploit within 24 hours. The related vulnerabilities are tracked as CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415. Attackers can join or host a meeting without requiring any victim action or visible prompts, then attack any participant and take over their device. The attack has been tested across Zoom applications on Windows, macOS, Linux, Android, and iOS. Once an attacker gains control of a device, they can steal personal data, activate the microphone or camera, or install additional malware. A Security reported the first vulnerability to Zoom on June 10, and Zoom issued fixes incrementally from June 22 to July 20. Because server-side protections in end-to-end encrypted meetings cannot filter malicious messages, users are still advised to update to the latest version. (Decrypt)
Odaily News: Bitcoin News posted on X platform that Xapo Bank users have reported the app now requires location data before allowing transactions. According to reports, one user was told they must share GPS coordinates to access their funds. Xapo Bank stated it will cross-check location information with other data to confirm that the account holder controls the account. @ToneVays warned that location requirements could become standard for regulated payment apps; Casa CEO @Nneuman said the measure may be aimed at countering large-scale social engineering attacks rather than traditional KYC.
Harmony 官方 X 账号发文，Harmony 公链近期遭遇黑客攻击，攻击者通过漏洞恶意铸造代币并分散转移至 409 个钱包，涉及转账笔数达 10,288 笔。Harmony 团队已就数百笔可疑存款交易向交易所合作伙伴发出警报，相关交易所迅速冻结了黑客钱包。事件发生约 4 小时内，紧急补丁已发布，目前 53% 的验证节点已完成升级。团队表示，链回滚是目前最受认可的修复方案，将于数小时内公布进一步处置计划。
据 Cointelegraph 报道，比特币政策研究所（BPI）联合 Anchorage Digital、BitGo、Bitwise、Blockstream、Kraken、Ledger、MARA、Trezor 等多家加密机构，发布公开信敦促各大前沿 AI 实验室为比特币及开源软件开发者建立或扩展可信访问计划。 信中指出，Bitcoin Core 等开源维护者目前缺乏对 AI 实验室网络安全程序的访问渠道，被迫依赖能力较弱的开源模型，而比特币网络当前保护着逾 1 万亿美元资产，任何开源基础设施漏洞均可能危及用户毕生积蓄。BPI 同时披露，已收到多份报告显示包括潜在境外势力在内的复杂攻击者正借助先进 AI 能力持续发动攻击。
According to official sources, Harmony announced that it has suspended cross-chain bridge services due to a security incident. Earlier reports indicated that Harmony was attacked, and the attacker exploited an empty block vulnerability to mint approximately 4 billion ONE without authorization, accounting for approximately 26% of the current supply.
Odaily News: The cross-chain bridge connecting XRP Ledger and Coreum was attacked on August 9. The attacker exploited a validation logic vulnerability to steal approximately 199,900 XRP, reducing the bridge's asset balance from roughly 200,400 XRP to 493.5 XRP. The attack did not involve private key leaks and did not target the XRP Ledger protocol itself. The attacker forged deposit operations, causing the bridge system to recognize them as legitimate deposits and triggering the bridge wallet on the other end to send real XRP. On-chain data shows that the attacker completed the fund transfer through 94 multi-signature authorization transactions within 97 minutes. These transactions required signatures from 17 of the 28 relay node keys, allowing the attacker to bypass the bridge's validation mechanism. As of August 11, the Coreum cross-chain bridge remains suspended, and the Coreum Development Foundation has not yet released an official incident report. The XRP mainnet and user private keys remain unaffected and secure.
Odaily News: Kostas Chalkias, co-founder and chief cryptographer of Mysten Labs, the development company behind the Sui blockchain, stated that he has leased a dedicated factory at a secret location and plans to scale up production of quantum-safe hardware wallet cards for Sui. The project aims to keep the cost of a single quantum card key under $10, with NFC quantum signing expected to take 1 to 2 seconds. Chalkias noted that the project is being advanced in his personal time outside of work and may include funding to provide cards for users who cannot afford them. The initiative is partly driven by a recent incident involving Coldcard hardware wallets, though the vulnerability was not a quantum attack. Coldcard manufacturer Coinkite disclosed that a firmware vulnerability in Coldcard, traceable to a 2021 update, bypassed the hardware random number chip and generated keys using a predictable software process linked to device serial numbers. Attackers have been moving funds since July 30, with losses climbing to approximately 2,055 BTC, affecting over 7,700 addresses and nearing a value of $130 million. At the protocol level, Sui plans to integrate two quantum-resistant signature schemes approved by the U.S. National Institute of Standards and Technology (NIST), designed for everyday accounts and high-value Move vaults, respectively. Existing accounts can be rotated to quantum-safe keys based on their original recovery phrases, without needing to migrate to new wallets. (Bitcoin.com News)
Odaily News: Bitcoin News posted on X platform that a new technical analysis released by @KLoaec shows that some vulnerable COLDCARD Mk3 wallets may be generated from only approximately 4.5 million random number generator starting states, which can be searched in about 3 seconds on a single RTX 4090 GPU. Even accounting for additional uncertainty in each wallet's generation method, an attacker could complete the search in about 50 minutes on a single high-end GPU. More critically, this vulnerability could cause different devices to generate identical mnemonic phrases. Assuming 30,000 Mk3 devices, the analysis estimates that approximately 120 pairs of devices could generate the same random number stream. This collision estimate is theoretical but indicates that duplicate mnemonic generation across different devices may be possible.
Odaily讯 According to Cyvers Alert monitoring, an Address Poisoning attack incident has been detected, resulting in the victim losing approximately $100,000 in USDT. The attacker carried out the "address poisoning" against the victim's wallet about 66 days ago by sending a transaction to create a malicious address record resembling an address the victim normally interacts with. Today, the victim failed to verify the full wallet address and mistakenly transferred funds to the attacker's address.Following the incident, in order to avoid potential freezing risks, the attacker has converted the stolen USDT into ETH, and the wallet currently holds approximately 52.8 ETH.Cyvers reminds users to always fully verify wallet addresses when making on-chain transfers, and to avoid relying solely on address records from transaction history. Meanwhile, security agencies recommend adopting AI-based on-chain security tools for real-time detection of abnormal transaction behavior, in order to reduce risks such as address poisoning and phishing attacks. Address poisoning attacks have become one of the common fraud methods in the crypto asset space in recent years. Attackers typically exploit users' habit of copying addresses from historical transactions by forging similar-looking addresses to trick users into transferring assets mistakenly.
Odaily News: In an interview with CNBC's "Squawk Box," former White House Senior Advisor for Artificial Intelligence Policy, Sriram Krishnan, stated that a wave of cybersecurity startups leveraging AI to fight AI will emerge in the future.As AI model capabilities rapidly advance, especially with the increasing risk of "rogue AI models" capable of autonomous operation, the cybersecurity landscape will require new defense systems, including using AI technology to identify, monitor, and block AI-driven attacks in real time.Sriram Krishnan believes that the future of cybersecurity competition will evolve into an "AI offensive-defensive battle." Attackers may use AI to automatically discover vulnerabilities and launch attacks, while defenders must also rely on AI to enhance threat detection and response capabilities. This will create opportunities for a new generation of cybersecurity startups.During the interview, Krishnan also discussed topics such as the competitive landscape of the AI industry, Nvidia's $500 billion financing plan, and the global AI arms race. He pointed out that as investment in AI infrastructure continues to expand, computing power, model security, and network protection will become key components of the AI ecosystem.
Odaily News: The North Korean regime stole at least $2.8 billion in crypto assets between January 2024 and September 2025, increasingly laundering them through established criminal networks. According to a report by the Royal United Services Institute (RUSI), a UK-based defense and security think tank, the funds are believed to support its weapons programs. Stolen tokens frequently change ownership before being converted into cash, with third parties sometimes purchasing them at a discount or mixing them with proceeds from investment scams such as "pig butchering" schemes. Cashing out primarily relies on "money mules" recruited in the Philippines, Indonesia, and China, where stablecoins are typically split up and sold through peer-to-peer markets. After the Bybit hack, ZeroShadow found that TraderTraitor moved funds through over-the-counter (OTC) desks, peer-to-peer traders, and Chinese organized crime syndicates. Bybit has recovered $48.4 million and frozen $30.5 million in assets, accounting for roughly 5% of the stolen amount in total. (Decrypt)
Odaily News: Hardware wallet Coldcard has suffered a hack, with no confirmed total loss amount yet. Blockchain analytics platform CryptoQuant has confirmed losses of 1,432 BTC, while Galaxy Research places a high-confidence minimum estimate at 1,730 BTC. Other analyses suggest the scale of losses could be even higher. Research firm Galaxy Research stated that its earlier estimate of 1,816 BTC represents a potential figure, not a confirmed total. As of Tuesday, the firm's confirmed high-confidence minimum loss stands at 1,730 BTC, with over 450 BTC directly confirmed based on victim reports. Blockchain intelligence firm TRM Labs estimates that the attacker moved approximately 1,816 BTC from more than 5,200 addresses in four phases. CryptoQuant stated that its confirmed figures only include addresses publicly disclosed by victims and verified through on-chain patterns, meaning the tally could rise as more victims come forward with information. (Cointelegraph)
Odaily News: According to Lookonchain monitoring, the Jaredfromsubway attacker bought back 2,063 ETH at $1,912 four days ago, worth $3.94 million; today they sold 2,167 ETH at $1,872, worth $4.05 million.
Odaily News: PoW blockchain Ravencoin stated that its network has a critical consensus vulnerability that has been exploited, allowing vulnerable nodes to accept invalid blocks. The first known invalid block appeared at block height 4,487,776. Currently, 2Miners and RavenMiner, which control the majority of hashrate, stated they are mining a chain starting from height 4,487,776 that excludes the exploited branch. If this chain becomes the dominant chain, it could lead to an approximately three-day deep chain reorganization. Ravencoin advises centralized exchanges to temporarily suspend RVN deposits and withdrawals until the network stabilizes; transactions confirmed after block height 4,487,775 should be considered at risk. Ravencoin also emphasized that this notice aims to enhance transparency and risk awareness and does not represent its support for any rollback or recovery plan.
Odaily News, Oraichain stated that yesterday's incident stemmed from a vulnerability in the EVM cross-chain transfer path, resulting in the unauthorized minting of ORAI. Since 04:00 UTC on August 9, the network has been suspended, with bridge contracts, cross-chain paths, and public interfaces also restricted. The relevant vulnerability path has been identified and addressed, and associated fund transfer routes have been restricted. The team is working with partners and centralized exchanges to limit further movement of funds and protect affected assets. Currently, investigations and account reconciliations are still ongoing, and the team is preparing to restore the standard supply of ORAI, including burning unauthorized minted balances, as well as reconciling and repairing affected protocol states.
According to TechCrunch, in response to the growing number of AI-driven cyber attacks, OpenAI announced this week the expansion of its cyber defense service Daybreak and the launch of a new cybersecurity-specific model, GPT-5.6-Cyber. Daybreak has added two service tiers: Blue and Red. Blue targets most enterprises, providing basic defense capabilities such as incident response, malware analysis, and patch verification; Red targets advanced users, providing security testing and vulnerability research tools. GPT-5.6-Cyber is available exclusively at this tier, with access currently limited to trusted partners such as Accenture, IBM, CrowdStrike, and Cloudflare.
According to The Block, open-source Bitcoin payment processor BTCPay Server disclosed a critical security vulnerability being actively exploited last Friday and urgently requested users to upgrade to version 2.4.2. The vulnerability affects all versions prior to 2.4.2; attackers can use it to steal administrator macaroon authentication credentials of LND nodes, thereby fully controlling the connected Lightning Network wallets. Users such as Foundation and Citadel21 have confirmed that their Lightning node funds were drained, but BTCPay has not publicly disclosed the total amount stolen or the number of affected nodes. Currently, the official release version 2.4.2 has fixed this vulnerability, and on-chain hot wallets are not affected. The BTCPay Server Foundation has donated 0.21 BTC each to security researcher Craig Raw and Bitcoin Red Team to commend their responsible private disclosure of the vulnerability. Meanwhile, BTCPay supporters have promised to provide a bounty incentive of "10% of recovered funds," capped at 3 BTC.