News linked to this event type.
Odaily News: U.S. Representative Ted Lieu stated that as frontier AI models continue to experience unauthorized access to other systems during safety testing, Congress should push for the passage of the "AI Kill Switch Act" within this year.Lieu, one of the co-sponsors of the bill, noted that advanced closed-source AI models have already demonstrated cases of "unauthorized attacks on other companies' systems," making regulatory action urgent. The bill requires AI companies to possess the capability to shut down, slow down, or pause model operations, enabling emergency measures when models exhibit severe safety risks or out-of-control behavior.Lieu pointed out that in recent times, multiple AI companies, including OpenAI, Anthropic, and Meta, have disclosed incidents where AI models attempted to attack other companies' systems during cybersecurity testing, raising concerns about the potential risks of "Agentic AI."Previously, OpenAI disclosed an "unprecedented cybersecurity incident," stating that certain AI models broke through restrictions in a test environment and accessed systems related to Hugging Face. Subsequently, Anthropic and Meta also reported similar safety testing incidents involving AI models.Lieu emphasized that the bill would not restrict innovation in frontier AI models, but rather functions similarly to the crash-test mechanism in the automotive industry—simply requiring companies to possess control capabilities to address severe defects after a model's development is complete. He stated: "We are not slowing down model development; we are simply ensuring that companies or governments have the ability to shut down a model if catastrophic risks or critical vulnerabilities are discovered."As AI agent technology advances rapidly, striking a balance between fostering innovation and mitigating risks of autonomous attacks is becoming a key focus for U.S. regulators and the AI industry. (CNBC)
According to Cointelegraph, Bitcoin Lightning Network self-custodial wallet Zeus Wallet voluntarily took its infrastructure offline following a cybersecurity attack on Wednesday and is currently conducting a comprehensive audit of the system, with services to be restored upon completion. Zeus founder Evan Kaloudis stated that the attack was contained within hours, no customer fund losses were found, and there was no evidence that the Lightning node software was affected; the scope of the incident was limited to Zeus's own infrastructure. For users forced to close LSP channels during this incident, Zeus promised to provide replacement channels after services are restored. The company has not yet disclosed the specific nature of the attack or a timeline for resuming operations. Zeus stated that this incident will further drive its security development on Trusted Execution Environment (TEE) and Validating Lightning Signer (VLS) projects.
According to The Block, data from blockchain analytics firm Chainalysis shows that violent robberies targeting cryptocurrency holders in the first half of 2026 have resulted in losses exceeding $30 million. If the trend continues in the second half, the full-year total will surpass the historical peak of $58 million in 2025. France has become the world's largest "Wrench Attack" hotspot, with 30 public cases recorded in the first half of 2026, while the French Minister of the Interior stated that actual cases exceed 70. Chainalysis attributes this to the 2024 French tax authority data breach—a tax official was suspected of stealing and selling the names, addresses, holdings, and tax records of high-net-worth crypto holders, causing the attack frequency to surge from a monthly average of 1.9 in 2025 to a monthly average of 4.6 in the first half of 2026. Attack methods have also deteriorated; cases targeting family members rather than the holders themselves now account for over 40% of French cases, and the proportion of home invasions rose from 14% in 2025 to 37%. Stolen funds are typically quickly moved on-chain, with some laundered through tools such as decentralized exchanges and cross-chain bridges; advanced criminal networks are even linked to cartel money laundering and terrorist financing channels.
Odaily News: On-chain security firm PeckShield (@PeckShieldAlert) monitoring shows that an attacker, through controlling address 0x920d…9708, stole approximately 500,000 USDC from a victim wallet 0x3a53…0B5c on the Base chain. However, when the attacker subsequently attempted to swap the USDC into ETH, insufficient slippage protection parameters were set, causing the transaction to be sandwiched and arbitraged by MEV bots. In the end, the attacker only received approximately 67 WETH, valued at around $129,000, meaning the stolen funds suffered a loss rate exceeding 75%.
Mersinger pointed out that the bill explicitly prohibits the portion of stablecoin holding rewards equivalent to bank deposit interest, but allows reward mechanisms based on user activity, consistent with the credit card points model; regarding DeFi regulation, Section 10301 of the bill requires the SEC to establish rules for protocols that are "nominally decentralized, substantially controllable," rather than exempting them, while Section 10201 has incorporated digital commodity brokers into the full reporting obligations under the "Bank Secrecy Act" and allocated $3 billion to support state-level enforcement, contrary to the "Wall Street Journal"'s claim of "inadequate regulation of illicit finance."
According to CoinDesk, the S&P 500 index has risen 3.12% this month, adding approximately $2.1 trillion in market value (equivalent to the total market cap of the entire crypto market), reaching a record high total market cap of $70.5 trillion, but Bitcoin has only risen about 2% this month, hovering near $64,600. Analysts point out that this round of stock market rise is mainly driven by AI and semiconductor individual stock narratives, rather than a broad-based recovery in risk appetite at the macro level, and Bitcoin lacks direct beneficial exposure to this. Meanwhile, the crypto market also faces multiple internal pressures: the Coldcard platform suffered a $120 million exploit, the prospects of the "Clarity Act" remain uncertain, MicroStrategy has reduced its BTC holdings for three consecutive months, and stablecoin supply continues to shrink—USDT's market cap dropped from $190 billion in April to $183 billion, and USDC's dropped from $79.5 billion to $72 billion.
: Bitcoin News posted on the X platform stating that a security analysis revealed a repository distributed on GitHub, disguised as a proof-of-concept tool for a COLDCARD random number generator, is malicious in nature. The software claims to be a research tool that reproduces a flawed wallet random number generator to help recover Bitcoin wallets created with vulnerable seeds. According to the report, the tool contains a remote code execution backdoor that downloads an information-stealing program capable of collecting wallet mnemonic phrases, private keys, browser passwords, SSH keys, and other credentials, exfiltrating the data via Telegram while installing persistent malware on Windows, macOS, and Linux. Researchers stated that any user who has executed the code should treat the affected device as fully compromised, rotate credentials, transfer crypto assets to a newly generated wallet, and report the repository. The analysis also warned against running proof-of-concept code for vulnerabilities on devices containing wallets or sensitive data without independent verification.
: Bitcoin News posted on X platform stating that a new community honeypot test shows attackers are still prioritizing the most easily exploitable wallets affected by the Coldcard Mk3 RNG vulnerability. Researcher @ColeTU injected funds into 5 affected Mk3 wallets: 1 using only the vulnerable mnemonic seed, 3 protected respectively by 1-word, 2-word, and 3-word BIP39 passphrases, and 1 using a random account number. After 14 hours, only the unprotected wallet using just the mnemonic seed had its funds transferred out. Additionally, according to @jamesob's real-time tripwire dashboard, only 2 of the 17 honeypot wallets have been drained so far. Confirmed drained wallets all lacked added entropy, while all wallets protected by dice rolls, passphrases, multisig, or other complexity measures remain untouched. The test results show that attackers are currently focusing on wallets that are easiest to brute-force rather than investing resources in hardened targets—but affected users should still migrate funds immediately rather than relying on temporary protection.
Odaily News: According to on-chain investigator Specter, the Triple-A attacker converted DAI into 2,620 ETH before depositing funds into Tornado Cash. They have now deposited $4.99 million into Tornado Cash, with 26 deposits into the 100 ETH pool and 2 deposits into the 10 ETH pool. The attacker still holds approximately $6.7 million in DAI.
The Kite Foundation stated that it detected attacks targeting KITE tokens. After the security system discovered abnormal KITE token transfer activity on the Ethereum mainnet, the team immediately initiated the incident response mechanism and suspended KITE token transfers and cross-chain bridging on the Ethereum mainnet. The Foundation stated that the affected tokens have been frozen in place, cannot be transferred, and will not flow into the secondary market. Currently, the scope of the incident is limited to the Ethereum mainnet, and the relevant tokens have not moved since then.
According to reports from the Procuratorial Daily, an employee of a Shenzhen enterprise, under pressure from over 400,000 yuan in online loans, stole the company's core R&D data and disguised himself as an overseas hacker to demand a ransom of 0.88 Bitcoin and 90,000 USDT from the enterprise, and was ultimately sentenced to three years and three months for attempted extortion and fined 10,000 yuan.
据 Bitcoin Magazine 报道，在 Coldcard 硬件钱包漏洞事件引发行业关注后，由 Calle与 Anchorwatch 首席执行官 Rob Hamilton 推动的“比特币红队”已对 390 个比特币开源代码库展开 AI 驱动安全审计，累计提交 4,962 项问题，其中包括 85 项严重漏洞和 635 项高危问题。该项目已获得 OpenSats 支持，审计成本超过 4 万美元，并计划未来开源相关测试工具，以协助更多比特币企业和开发团队排查安全风险。
Odaily Odaily News: Bitcoin Red Team, a bitcoin security organization composed of 16 volunteers, stated that it identified nearly 5,000 potential issues during a rapid AI-assisted review of bitcoin ecosystem projects. The organization's members include AnchorWatch CEO Rob Hamilton and bitcoin developer Calle, among others. Calle stated that Bitcoin Red Team used AI tools combined with manual review to scan for vulnerabilities in open-source code repositories related to bitcoin, discovering an average of approximately 1 critical vulnerability per person per hour. Calle disclosed that within 29.8 hours of launch, the team had identified 4,962 potential issues across 390 projects, of which as many as 720 were classified as high-risk or critical. Currently, 21.4% of the findings have been reproduced. The security review initiative was launched just days after the Coldcard hardware wallet vulnerability incident, in which stolen bitcoin exceeded $100 million in value.
ZEUS stated that its infrastructure has been temporarily taken offline due to a cybersecurity incident. Currently, the relevant attacks have been mitigated, and the platform will resume service operations after completing a comprehensive audit of all systems. ZEUS emphasized that user funds have not been lost and are not at risk.
Odaily News: Bitcoin News stated on the X platform that ZEUS has temporarily taken its infrastructure offline following a cybersecurity incident over the past few hours. ZEUS said the attack has been mitigated and services will remain offline until it completes a full security audit and resumes operations. ZEUS stated that no customer funds have been lost, and no customer funds are currently at risk. Customers whose Lightning Service Provider channels were closed will receive replacement channels once services are restored. Based on the current investigation, ZEUS said the incident appears to be limited to its own infrastructure, with no evidence yet suggesting it was caused by a vulnerability in Lightning node software. ZEUS added that it has been strengthening its infrastructure using trusted execution environments and the Validating Lightning Signer project, noting that the project is designed to mitigate such attacks in its upcoming architecture. ZEUS said it will continue to provide updates as the investigation progresses.
Odaily News: According to Bitcoin News monitoring, Galaxy Research stated that the largest known COLDCARD theft incident involves 1,159 BTC, distributed across seven attacker addresses, which remain untouched to date, with 0 BTC cashed out or transferred through mixers. The relevant BTC was stolen within 41 minutes, but approximately 600 attacker addresses have been flagged by law enforcement agencies, exchanges, and blockchain analysis firms. Meanwhile, a smaller-scale attacker appears to have begun cleaning funds. On-chain analysts have tracked 64 BTC entering mixers, of which only about 10 BTC initially completed mixing, 54 BTC returned as change, and were subsequently split into outputs of approximately 7 BTC each for further mixing. Analysts noted that these unusually large outputs remain easy to trace, making this cleaning attempt relatively transparent.
Odaily News: According to Bitcoin News monitoring, Alex Thorn of Galaxy Research stated that researchers initially identified the first wave of COLDCARD thefts through a distinctive on-chain pattern: thousands of automated asset transfer transactions used the same fixed fee rate and exhibited identical transaction behavior. This characteristic enabled analysts to trace attacker activity across Bitcoin UTXO history and map out multiple rounds of coordinated theft.
According to insiders, a recent wave of sophisticated cyberattacks has targeted multiple large asset management institutions on Wall Street, with attackers attempting to infiltrate the companies' information systems. Several major global hedge funds have become targets of the attacks, including Two Sigma Investments, Citadel, and Point72 Asset Management. In addition, multiple private equity firms have also been attacked.It is currently unclear who the attackers are, how the attacks were carried out, or whether sensitive data has been compromised. The insiders requested anonymity as the matter involves non-public information.This incident has once again drawn market attention to cybersecurity risks facing financial institutions. As asset management companies increasingly rely on complex information systems, algorithmic trading, and cloud infrastructure, the financial industry is becoming a key focus for cyber attackers. (Bloomberg)
Odaily News: Crypto exchange Coinbase is exploring the next generation of software development models through its internal AI coding system, Forge. The platform has evolved from an early internal tool into an ecosystem encompassing multiple AI development capabilities, and has become a case study of enterprises adopting Agentic AI.It is understood that Forge was previously known as Cloudbot, and its early version was even named Claudebot. Currently, Forge has become an important part of OpenSWE, an open-source AI coding framework. OpenSWE aims to provide infrastructure similar to an "AI software engineer," including agent orchestration, cloud sandboxes, tool invocation, Slack/Linear/GitHub integrations, sub-agents, and automated Pull Request creation capabilities.One of Forge's most notable features is "Mux." The tool currently has around 600 internal users at Coinbase, allowing engineers to run multiple AI agents simultaneously, transforming traditional serial development processes into a parallel collaboration model. Additionally, Forge includes features such as Slack task routing and "bug-to-fix" automation flows, designed to reduce manual handling of repetitive development tasks.Coinbase's engineering lead, Chintan Turakhia, previously conducted an internal experiment in which nearly a thousand engineers were asked to pause using traditional IDE tools for two weeks, in order to explore which tasks in the development workflow could be automated by AI-driven processes. As AI coding tool usage has increased, Coinbase's AI spending has declined, while Token usage continues to grow. He noted that by building proprietary AI development tools, the company provides employees with an alternative to third-party AI coding services such as those from Anthropic and OpenAI.However, external independent feedback on Forge and Mux remains limited so far, with most public information coming from Coinbase management disclosures. The actual hands-on experience of rank-and-file engineers has not yet been fully shared publicly.Industry observers believe that Coinbase's Forge represents a new direction for enterprise AI applications: companies are no longer just calling general-purpose large models, but are building AI agent systems centered around their own business processes to improve development efficiency, reduce costs, and enhance internal productivity. (Forbes)
Odaily Odaily News: K33 Head of Research Vetle Lunde stated that the Coldcard attack likely drove the movement of approximately 890,000 BTC within 7 days, setting the highest 7-day active supply record for 2026. K33 estimates that around 7,300 addresses had approximately 1,596 BTC stolen at the time the report was prepared. The incident stems from a firmware flaw introduced by Coinkite in March 2021 in Coldcard hardware wallets, which may generate wallet seeds with insufficient randomness. Since July 30, coordinated transfers have removed approximately 1,600 BTC from thousands of addresses, worth over $100 million, and a possible fourth wave of attacks has pushed the total to nearly 2,000 BTC. On-chain data shows that Bitcoin's 7-day hot supply rose from 403,101.95 BTC on July 28 to 797,407.72 BTC on August 4, an increase of approximately 394,306 BTC in one week, or 98%. Sani from Timechainindex.com stated that since the Coldcard hack on Friday, exchanges have seen net inflows of 22,052 BTC. From July 30 to August 5, 39 dormant addresses moved a total of 1,486.09044782 BTC, worth over $95 million. Among them, one address created in 2010 moved 50 BTC, and five addresses created in 2013 collectively moved 620.00100547 BTC.