News linked to this event type.
Odaily Odaily News: Bitcoin Red Team member @Rob1Ham stated that OpenAI has blocked him from continuing security analysis of the Bitcoin codebase, after he had responsibly disclosed real vulnerabilities found within it. Rob1Ham said he had previously completed identity verification and onboarding processes related to OpenAI's cybersecurity capabilities, but is currently unable to continue investigating whether the fixes are sufficient or whether other vulnerabilities still exist. He stated that he will now resume Bitcoin security research using an open-source Chinese AI model. Rob1Ham commented: "Black hat hackers won't attack these issues, white hat hackers will." He also added: "For those who don't follow the rules and engage in harmful behavior, intelligence is unrestricted, while those committed to reducing harm are being excluded." (Bitcoin News)
According to Bifrost's monitoring, at 19:47 Beijing time on August 8, hackers exploited a vulnerability in the liquidity pool, stealing approximately $720,000 worth of assets from the vDOT single-asset pool and the vASTR/ASTR and vMANTA/MANTA pools. The stolen assets were subsequently deposited into HitBTC and eventually flowed into Binance. Bifrost has contacted Binance's security department to submit a fund freeze request and has filed a report along with a chain of custody evidence package, including transaction tracking, wallet addresses, and timestamps, with law enforcement authorities. Currently, Bifrost has halted all liquidity mining rewards and is conducting a comprehensive security review.
According to Cointelegraph, BTCPay Server has temporarily restricted public remote connections to Lightning Network nodes due to attackers exploiting a critical vulnerability in LND (Lightning Network Daemon) to steal node credentials and transfer funds. Version 2.4.2 has upgraded to LND 0.21.1 and automatically rotates macaroon credentials in standard installations. The project team reminds operators to check for abnormal payments, channel closures, and balance changes as soon as possible; if nodes are exposed via self-built reverse proxies, Tor services, or port forwarding, relevant credentials must also be manually replaced. Currently, Foundation and Citadel21 have reported node fund losses, but the specific scale of losses has not yet been disclosed.
Bitcoin payment processing service BTCPay Server has temporarily restricted public remote connections to Lightning Network nodes running Lightning Network Daemon (LND) software. Attackers exploited a severe vulnerability to obtain credentials and transfer funds. The number of affected operators and the total amount stolen have not yet been disclosed. This restriction affects external wallets such as Zeus that connect via BTCPay Server domains or Tor onion addresses in Docker deployments, but Lightning Network payments can still continue. BTCPay Server stated that remote access functionality will be restored once security is confirmed. BTCPay Server 2.4.2 will install LND 0.21.1 and automatically regenerate macaroon credentials during standard installation. Foundation and Citadel21 have respectively disclosed that funds from their Lightning Network nodes were swept. Foundation stated that hot wallets were not affected, and the specific amounts of losses have not been disclosed.
美国康涅狄格州联邦检方起诉三名来自圣路易斯的男子，指控其参与一起围绕被盗比特币展开的入室抢劫与强制转账阴谋。检方称，相关受害者系一名曾参与窃取数亿美元比特币人士的父母。三人曾赴当地进行踩点、租车并准备气枪和对讲机，但因担心暴露而暂时放弃行动。随后，另一伙来自佛罗里达州的人员继续实施同类计划，并引发劫车和绑架案件。该案反映出美国针对加密货币持有者的暴力犯罪风险正在上升。
Odaily News: The Bitcoin minority fork chain created by BIP-110 supporters has produced only 2 blocks in approximately 8 hours and has essentially stalled; during the same period, the Bitcoin main chain has advanced 48 blocks. The proposal aims to temporarily prohibit the storage of non-financial data such as images and text in Bitcoin transactions. Supporters believe this move can reduce congestion and costs, while critics argue it restricts users' freedom to utilize block space they have already paid for. The fork chain has recently received only 2.53% mining support, and its block production speed is extremely slow, making it difficult to meet the threshold before the signaling deadline. Additionally, if users sell the fork coins while spending their main chain Bitcoin, they may face risks similar to replay attacks.
Odaily News: According to Onchain Lens monitoring, addresses associated with the Solana OG attacker (0xd229...9D15, 0x501...f051) have transferred 2,290 ETH, worth $4.39 million, to Tornado Cash. This operation occurred nearly a month after the $14.2 million attack incident; the same cluster of addresses also used Tornado Cash two weeks ago.
Odaily News: According to on-chain investigator Specter, the same attacker is running similar phishing campaigns targeting Ledger. The relevant screenshots were taken two days ago, and the sponsored ads have now been removed. To date, these campaigns have stolen over $3 million.
Odaily News: The Bitcoin Red Team volunteer security initiative has scanned approximately 150 Bitcoin-related code repositories and disclosed more than a dozen vulnerabilities. The team is developing an open-source AI platform to audit Bitcoin software, covering wallets, cryptographic libraries, infrastructure, and other projects. AnchorWatch CEO Rob Hamilton stated that the team has so far spent approximately $20,000 on various AI services, using Kimi K3, OpenAI's GPT Sol, Anthropic's Claude Fable and Opus, as well as Z.ai's GLM 5.2 to identify vulnerabilities and generate related documentation. Pseudonymous Bitcoin developer Calle said that over the past 12 hours, the team has reported critical vulnerabilities to multiple projects, discovering on average roughly one critical vulnerability per person per hour, with daily spending of around $10,000. The team has not disclosed the affected projects or details of the vulnerabilities.
US spot Bitcoin ETFs recorded approximately $1 billion in net inflows this week, marking the best weekly performance since April; meanwhile, Coldcard hardware wallets were hacked, resulting in $116 million worth of BTC stolen.
Odaily News: Bitcoin added 2.27 million new wallets this week, with active wallet count reaching 751,000, marking the highest on-chain activity in months. On July 31, active addresses briefly approached 978,000—approximately 1.6 times the July daily average—while the first week of August averaged around 751,000 daily, up from July's average of roughly 610,000. Daily average exchange inflows stood at approximately $1.55 billion, down from July's $1.67 billion, with fund movements not accompanied by significant exchange buying activity. This surge in activity is linked to a firmware vulnerability in Coldcard devices from hardware wallet manufacturer Coinkite. The vulnerability affects certain Mk3, Mk4, Mk5, and Q models, where seed generation utilizes a software random number generator, reducing the actual randomness of some devices to approximately 40 or 72 bits. Since July 30, related bitcoin losses have exceeded $116 million. Holders of affected devices have transferred funds to new addresses and replaced them with unaffected hardware devices. Coinkite has released firmware patches and entropy remediation disclosure documents. This vulnerability stems from a random number generation issue in device firmware, not a flaw in the Bitcoin protocol layer.
BitMart Exchange Founder Sheldon posted a statement addressing recent user withdrawal difficulties and unpaid employee salary issues, stating that the core team is still conducting asset inventory, asset consolidation, and system maintenance, and denied any misappropriation of assets, front-running, or exit actions.
Odaily News: Bloomberg ETF analyst Eric Balchunas said on X platform that Bitcoin ETF inflows reached approximately $1 billion this week, marking the best weekly performance since April and the third-best week since the Silent IPO disrupted market performance in October last year.Since the Coldcard hack, IBIT, FBTC and a few other Bitcoin ETFs have seen consecutive daily inflows, and the correlation makes it hard to ignore the causal relationship. He noted that if the seemingly worst-case scenario of a cold storage Bitcoin hack marks the start of the next rally, it would be ironic but also in line with its usual characteristics.
On-chain data shows that the address labeled as the Aztec attacker has deposited another 300 ETH into Tornado Cash, worth approximately $572,000. To date, the address has transferred a total of 500 ETH to Tornado Cash.
Odaily News On-chain security firm PeckShield (@PeckShieldAlert) monitoring shows that the Aztec private Rollup bridge attacker address has deposited 300 ETH, worth approximately $572,100, into Tornado Cash. As of now, the attacker has cumulatively deposited 500 ETH into Tornado Cash.Aztec suffered an attack in June 2026, with total crypto asset losses amounting to $2.165 million.
Bitcoin payment processing project BTCPay Server warns that a critical vulnerability on its servers is being actively exploited, potentially allowing attackers to gain unauthorized access and cause loss of funds. Users are urged to upgrade to version 2.4.2 and change relevant credentials.
Odaily News, Bybit announced today that it has officially filed a civil lawsuit in the U.S. District Court for the District of Columbia against North Korea (DPRK), its Reconnaissance General Bureau (RGB), and the Lazarus Group, holding the organization legally accountable for the大规模 cyberattack launched against Bybit in February 2025.It is reported that Bybit has successfully obtained a preliminary injunction from the court, freezing identified stolen digital assets held or transferred by unidentified individuals and entities (i.e., "John Doe" defendants). In approving the preliminary temporary restraining order, the court described the incident as "one of the largest cryptocurrency thefts in history" and determined that Bybit has a "likelihood of success on the merits" of the case. This civil lawsuit is independent of criminal investigations by U.S. law enforcement and aims to provide an additional legal avenue for asset recovery.In terms of asset recovery and global collaboration, Bybit has achieved notable results in partnership with blockchain analytics firms, multiple exchanges, custodial institutions, and international law enforcement agencies. To date:Approximately $48.4 million in stolen assets have been successfully recovered;Approximately $30.5 million in involved assets have been successfully frozen (distributed across more than 28 exchanges and custodial institutions).These efforts have also supported broader law enforcement actions targeting key infrastructure allegedly used to launder stolen funds: German authorities have dismantled cryptocurrency exchange eXch; German and Swiss authorities subsequently jointly shut down mixing platform Cryptomixer.io, cutting off critical channels for transferring illicit proceeds. These actions collectively demonstrate the effectiveness of collaboration between the private sector and law enforcement agencies in combating transnational cybercrime.Ben Zhou, co-founder and CEO of Bybit, stated: "Our core goal has never changed: prioritizing user protection, making every effort to recover assets, and ensuring those behind this are held accountable under the law. The Lazarus attack was not only directed at Bybit, but also a challenge to the trust foundation of the entire crypto industry. We will continue to deepen cooperation with law enforcement agencies, regulatory authorities, and courts to make the crypto world a place where criminals find it difficult to hide."Bybit emphasized that it will continue to invest in advanced blockchain tracking technology, utilize all available legal means to combat state-sponsored hacker groups, and drive the establishment of a more resilient digital asset ecosystem. The civil lawsuit is currently ongoing.
比特币开发者 Kevin Loaec 警告，若 BIP-110 相关分叉发生，在缺少重放保护的情况下，用户出售分叉链资产可能导致真实 BTC 被同步转移。
Odaily News: The proposed Bitcoin fork is associated with the controversial BIP-110 proposal and could generate duplicate balances on both chains, potentially prompting holders to attempt selling seemingly free fork coins. Since both chains initially accept the same transactions, selling fork coins could trigger a replay attack and simultaneously spend the seller's real Bitcoin on the main chain. Developers have stated that built-in replay protection will be lacking at least until early September, and non-professional users should avoid transferring Bitcoin during the potential fork period.
Odaily News: Cryptocurrency exchange Bybit has filed a civil lawsuit against the Democratic People's Republic of Korea, its intelligence agency Reconnaissance General Bureau (RGB), and the state-sanctioned hacker group Lazarus Group over a $1.5 billion hacking incident. A U.S. federal court has issued a preliminary injunction prohibiting the transfer or dissipation of identified assets related to the case during the litigation.