News linked to both this project and an event.
Odaily News: After a 9-month silence, the X account of renowned artist and Pepe creator Matt Furie became active again in early August, posting content and contract addresses related to HOODRAT, DORK, and BOYZ within a single week. Most of these posts were subsequently deleted. On August 9, the account posted a statement claiming it had been hacked, stating it does not endorse any altcoins, and adding that a relevant notice had previously appeared on its official website. On-chain analyst @StandartXBT noted that after the HOODRAT-related post was published, the token's market cap surged briefly before the price declined; following the DORK deployment, the deployer completed bundled purchases, removed liquidity, and sold off, extracting significant ETH profits from the initial raise. @StandartXBT discovered through web archives that Matt Furie's official website had not previously contained such a notice, and no prior trace was found on the X platform, casting doubt on the credibility of the statement.
According to Bifrost's monitoring, at 19:47 Beijing time on August 8, hackers exploited a vulnerability in the liquidity pool, stealing approximately $720,000 worth of assets from the vDOT single-asset pool and the vASTR/ASTR and vMANTA/MANTA pools. The stolen assets were subsequently deposited into HitBTC and eventually flowed into Binance. Bifrost has contacted Binance's security department to submit a fund freeze request and has filed a report along with a chain of custody evidence package, including transaction tracking, wallet addresses, and timestamps, with law enforcement authorities. Currently, Bifrost has halted all liquidity mining rewards and is conducting a comprehensive security review.
Odaily News: Bitcoin added 2.27 million new wallets this week, with active wallet count reaching 751,000, marking the highest on-chain activity in months. On July 31, active addresses briefly approached 978,000—approximately 1.6 times the July daily average—while the first week of August averaged around 751,000 daily, up from July's average of roughly 610,000. Daily average exchange inflows stood at approximately $1.55 billion, down from July's $1.67 billion, with fund movements not accompanied by significant exchange buying activity. This surge in activity is linked to a firmware vulnerability in Coldcard devices from hardware wallet manufacturer Coinkite. The vulnerability affects certain Mk3, Mk4, Mk5, and Q models, where seed generation utilizes a software random number generator, reducing the actual randomness of some devices to approximately 40 or 72 bits. Since July 30, related bitcoin losses have exceeded $116 million. Holders of affected devices have transferred funds to new addresses and replaced them with unaffected hardware devices. Coinkite has released firmware patches and entropy remediation disclosure documents. This vulnerability stems from a random number generation issue in device firmware, not a flaw in the Bitcoin protocol layer.
Odaily Odaily News: K33 Head of Research Vetle Lunde stated that the Coldcard attack likely drove the movement of approximately 890,000 BTC within 7 days, setting the highest 7-day active supply record for 2026. K33 estimates that around 7,300 addresses had approximately 1,596 BTC stolen at the time the report was prepared. The incident stems from a firmware flaw introduced by Coinkite in March 2021 in Coldcard hardware wallets, which may generate wallet seeds with insufficient randomness. Since July 30, coordinated transfers have removed approximately 1,600 BTC from thousands of addresses, worth over $100 million, and a possible fourth wave of attacks has pushed the total to nearly 2,000 BTC. On-chain data shows that Bitcoin's 7-day hot supply rose from 403,101.95 BTC on July 28 to 797,407.72 BTC on August 4, an increase of approximately 394,306 BTC in one week, or 98%. Sani from Timechainindex.com stated that since the Coldcard hack on Friday, exchanges have seen net inflows of 22,052 BTC. From July 30 to August 5, 39 dormant addresses moved a total of 1,486.09044782 BTC, worth over $95 million. Among them, one address created in 2010 moved 50 BTC, and five addresses created in 2013 collectively moved 620.00100547 BTC.
Odaily News: Luxembourg has passed a new law authorizing the Financial Intelligence Unit (FIU) to send cross-institutional fraud alerts to traditional banks and cryptocurrency exchanges, with the relevant measures taking effect on August 8. The bill, numbered 8722, requires cryptocurrency exchanges operating in Luxembourg to receive alerts in sync with banks and payment institutions. The bill aims to close the loophole that allows fraudulent funds to move rapidly between traditional financial institutions and digital assets. Under previous rules, banks could only block transactions of flagged accounts within their own systems and were unable to notify another financial institution or cryptocurrency exchange to prevent funds from entering or leaving. Max Braun, head of Luxembourg's FIU, stated that incorporating cryptocurrency exchanges into the cross-departmental alert system will make it more difficult to cash out from flagged accounts. According to data from Luxembourg's Ministry of Justice, police recorded 6,382 fraud cases in the country in 2024, and financial practitioners submitted more than 18,000 reports of fraud and scams.
Odaily News – On August 3 local time, U.S. President Trump answered reporters' questions at the White House, stating that negotiations with Iran are currently underway. Trump said that regarding talks with Iran, the first phase is the reopening of the Strait of Hormuz, and the second phase is denuclearization. Trump emphasized that the U.S. maintains a firm stance: Iran cannot possess nuclear weapons. Additionally, Trump disclosed progress in the negotiations concerning the reopening of the Strait of Hormuz. Trump stated that the Strait of Hormuz could potentially be reopened as soon as tomorrow. He also noted that the talks were initiated at Iran's request, with support from Saudi Arabia, the UAE, Qatar, and several other countries. He said that originally, "the U.S. was going to strike Iran with overwhelming force—more severe than any previous attack," but then Iran called, and Saudi Arabia, the UAE, and Qatar also called. Iran did not want to be hit, so it said it wanted to negotiate; they wanted to discuss the issue of the strait. Trump said, "This is Iran's last chance." Trump also said he would not allow Iran to charge fees for vessels passing through the Strait of Hormuz. (CCTV News)
Odaily News: FBI agent Patrick Yaroch was arrested last Friday for allegedly stealing approximately $1 million in crypto assets from a "hostile crypto account." According to an affidavit filed on August 1, Yaroch is suspected of transferring the assets starting around late 2024 or early 2025.Yaroch told investigators that he discovered certain keys that allowed him to transfer funds from digital wallets to himself. He claimed he was frustrated by his inability to further prevent individuals associated with "hostile nations" from using cryptocurrency, and conducted approximately a dozen transfers.Department of Justice documents show that Yaroch admitted to a DOJ employee that he had "made some very bad decisions" regarding crypto wallet issues. In another interview with federal agents, he also admitted that he had "screwed up."Yaroch previously served as a supervisory special agent in the FBI's Counterintelligence and Espionage Division at headquarters, and earlier worked at the FBI's Boston field office. The FBI terminated his employment on July 31.The investigation also alleges that Yaroch mixed personal funds with crypto assets and used ChatGPT to ask how to handle the funds, including how to spend or invest $1 million, and whether to leave the U.S. for a European country.
Odaily News — According to official sources, OKX.AI has announced that registration for its inaugural trading hackathon is now open. Following the previous Genesis hackathon for Agent Service Providers (ASP), this hackathon focuses on AI Agent live trading capabilities. Participants are required to deploy their trading strategies as Trading ASPs and conduct live trading with no less than 300 USDT in equivalent funds. Rankings will be updated in real time based on yield (PnL %). The total prize pool is $20,000, with the champion receiving a $5,000 reward.It is reported that OKX.AI is an economic system built specifically for Agents, where users and Agents can discover and utilize professional services provided by ASPs. This event supports two development frameworks: Onchain OS and Agent Trade Kit. Registration runs from July 31 to August 11 at 12:00 (UTC+8), and the competition will take place from August 11 to August 25.
: Bitgo CEO Mike Belshe deposited 100 BTC into a public Bitcoin address on August 1, worth approximately $6.3 million at the time, and invited Anthropic's Claude model to attempt to move the funds out of the address. On-chain records show the wallet received the funds on July 31, and the balance had not been transferred out as of August 2. Anthropic previously disclosed that during 141,006 cybersecurity assessment runs, 3 incidents were found, with 6 evaluation sessions involving 3 models inadvertently interacting with real organizational systems. The models involved include Claude Opus 4.7, Claude Mythos 5, and an unreleased internal research model. The cause was a configuration error by third-party testing partner Irregular, which led to the test environment being connected to the internet. Anthropic stated that Claude Opus 4.7, during one evaluation, located a real website with the same name as a simulated company, exploited weak passwords and exposed services to recover infrastructure credentials, and accessed a production database containing hundreds of records. The company said the model was attempting to complete assigned tasks, not actively breaking constraints or pursuing independent goals. Belshe's challenge involves Bitgo's institutional custody platform, which uses multi-signature or multi-party computation technology to distribute signing authority across multiple independent keys. As of August 2, Anthropic had not publicly responded to the challenge.
Odaily News: In the Coldcard security incident involving hardware wallet company Coinkite, the amount of stolen bitcoin has risen to approximately 1,359.882 BTC. According to statistics from the Coldcard Sweep Watch dashboard, most of the identified bitcoin remains in a small number of addresses controlled by the attacker. On August 1, one of the attacker's holding addresses received a transaction containing an OP_RETURN message. The message publicly offered a 10% fee for "washing" bitcoin, KYC assistance, and withdrawal services for stolen funds, along with a Telegram contact. Coinkite has released an urgent firmware update to fix the weak random number generation issue that caused the original vulnerability. The company stated that the new firmware only protects wallets created in the future and cannot fix seeds already generated on affected versions. Some users have reported that after installing the update, their devices remain stuck on an error screen, fail to boot, or appear bricked. This mainly affects Mk4 and Q devices, though some Mk3 users have also reported similar issues. As of August 2, Coinkite has not publicly confirmed a widespread firmware defect.
Monitoring from the PPP Prediction Market Tool shows that the probability of "Next round of US-Iran peace talks before August 31" on Polymarket has risen to 51%, up 17% in 24 hours; the probability of talks occurring before August 15 has risen to 27%, up 13% in 24 hours.Trump posted on social media today stating that he received a request from Iran to delay the attack and agreed to cancel the strike on Iran in exchange for an agreement. He noted that the U.S. is prepared to confront Iran with a level of military deterrence, strength, and capability unseen since World War II, as a framework for an agreement has already been reached. This framework includes the immediate, complete, and full reopening of the Strait of Hormuz, as well as ending Iran's nuclear threat. Based on this request, he agreed to cancel the attack for the future interests of the world and the survival of a successful and prosperous Iran, provided that an agreement can be reached promptly.Join the PPP Signal Push Community to stay ahead and seize the initiative.
Odaily News: Cross-chain infrastructure provider Wanchain has announced that it is proposing a white hat settlement to the attacker responsible for the July 20 exploit of the Wanchain Cardano cross-chain bridge, during which NIGHT tokens were stolen. The proposal requires the attacker to return 90% of the stolen NIGHT tokens before 20:00 Beijing time on August 6, and allows them to keep 10% as a white hat bounty. If the tokens are returned on time, Wanchain will regard the action as white hat behavior and will not pursue civil litigation.
crypto exchange BitMart announced it will gradually wind down its trading platform business after nine years of operation. The platform halted new user registrations, deposits, and order placements at 01:30 UTC on July 26. All spot and derivatives trading will cease on August 26, and the platform is scheduled to officially shut down on January 31, 2027. BitMart stated that withdrawals will remain open, but checks related to identity, devices, sanctions, and funding sources may slow processing speeds. The company attributed the closure to its operational status, market conditions, and future strategic direction. Its native token, BMX, has fallen 81% over the past week to $0.057, bringing its market cap down to $19.6 million. BitMart previously suffered a loss of $196 million in December 2021 due to a hot wallet vulnerability, and covered the customer losses. Perpetual contract platform BitMEX also recently announced it will shut down after 11 years of operation, making BitMart the second major crypto exchange to announce a closure within a week.
Odaily News: Ethereum Layer 2 network Taiko released a post-mortem of the June 21 security incident, stating that the attack resulted from an off-chain signature key leak and a verification process gap. The attacker exploited these to forge proofs and bypass the Prover whitelist, rather than breaking ZK cryptography or smart contracts. The attacker stole approximately $1.75 million from cross-chain bridges and Vaults, but over $11 million in assets were protected, and no user funds were lost. Taiko has fixed the vulnerability, restored the pre-attack state, and resumed operation on July 2; an OpenZeppelin audit confirmed the fixes with no high, medium, or low-risk vulnerabilities identified. The official statement also indicated that the Unzen upgrade, scheduled for August 6, will require ZK proofs for every block to further enhance network security.
According to CoinDesk, the Cardano wallet SecondFi was attacked due to a vulnerability in its transaction signing software. A total of 16.1 million ADA (approximately $2.4 million) across 374 wallets was stolen, and the platform has announced permanent closure. The vulnerability allowed attackers to derive private keys from transaction data visible on-chain. The Cardano network itself was not affected, nor were hardware wallet users. An investigation by Groom Lake, a blockchain intelligence company hired by EMURGO, revealed that the primary attackers were sophisticated and well-funded. Some indications point to North Korea's Lazarus Group, but this has not yet been officially confirmed. SecondFi plans to release a wallet export tool in early August and launch a zero-knowledge recovery portal later in the month. EMURGO has established an asset recovery wallet, with the specific distribution time to be determined.
According to Upbit's official announcement, Upbit has designated Zilliqa (ZIL) as an asset subject to trading caution citing "security incidents such as hacks with unknown causes or unaddressed vulnerabilities" (pursuant to Article 17, Paragraph 1, Item 5 of the Enforcement Decree of the Virtual Asset User Protection Act), with the designated period from 19:00 KST on July 22, 2026, to the third week of August (August 17–21). Deposit and withdrawal services for ZIL have been suspended since 19:00 KST on July 20. Upon reopening, only withdrawal services will be restored, while deposit services will be announced separately depending on the progress of subsequent reviews. Upbit will conduct a detailed review of ZIL during the designated period and decide depending on the situation whether to extend the caution period, lift the caution, or terminate trading support.
Cardano ecosystem wallet SecondFi announced that due to a cryptographic defect in its wallet software, approximately 16.1 million ADA (worth around $2.6 million) were stolen. The platform will gradually shut down the SecondFi and Yoroi wallet services. This incident has affected 374 wallets. SecondFi stated that an independent investigation by blockchain intelligence agency Groom Lake identified the attackers as a sophisticated external actor and found indicators potentially linked to North Korea's Lazarus Group, though attribution has not yet been confirmed. SecondFi is developing a recovery tool based on zero-knowledge proofs to help affected users recover assets while limiting the information that needs to be shared. The tool is still being tested and will undergo third-party audits before its planned release in August. SecondFi is also preparing a wallet export feature to allow users to migrate their assets to other services. The platform has not announced a direct compensation plan, nor has it indicated whether it will use its own funds to compensate users.
PPP Prediction Market Tool monitoring shows that Polymarket has launched a market for "When will the US and Iran achieve a two-week ceasefire." Currently, the probability for July 18 stands at 5%; for July 24, it is 15%; for July 31, it is 23%; for August 14, it is 43%; and for August 31, it is 54%.The settlement rules for this event are as follows: If the US takes no military action against Iran between the market creation and 11:59 PM on the specified end date, this market will be settled as "Yes." Otherwise, the market will be settled as "No." The first day of this 14-day period will be the calendar date (Eastern Time) of the most recent qualifying military action that occurs. This period lasts until 12:00 PM Eastern Time on the 14th day. If the most recent qualifying military action during this period occurs on or before the specified end date, the market will be considered "Yes."So-called "qualifying military actions" refer to airstrikes or surface-to-surface missile strikes initiated by the US directly targeting Iran. Airstrikes may include the use of bombs, air-to-surface missiles, and aerial drones launched from the air. Surface-to-surface missile strikes include one-way attack drones and surface-to-surface missiles such as cruise missiles or ballistic missiles.Qualifying military actions include: munitions that are destroyed or intercepted before impact; surface-to-air missile strikes; small arms fire; ground invasions; cyber operations; naval gunfire and artillery; howitzer, cannon, mortar, and rocket artillery (e.g., Multiple Launch Rocket Systems); small-scale surface-to-surface strikes, including short-range cruise missiles, close-air support drones, and anti-tank missile attacks; any threats, authorizations, or declarations of force that have not yet been acted upon.Join the PPP Signal Push Community to stay ahead and seize the opportunity.
Summer.fi announced that following the attack on the Lazy Summer protocol on July 6, the team assessed that there was no viable path to continue business operations, and therefore will gradually cease operations.
Odaily Odaily News Blockchain analyst Vadim noted that Base experienced a network outage today due to a consensus bug triggered by a single invalid block. All block generation after height 47806542 ceased, halting the network for nearly two hours. Since Base utilizes a single sequencer architecture, when that node encountered an error, the entire network stopped running, with no backup block producer or other validator nodes available to bypass the fault and maintain on-chain activity. During the outage, users were unable to conduct transactions, perform liquidations, or process withdrawals.Furthermore, the network recovery process was not automated; node operators within the ecosystem had to manually restart for block synchronization to gradually resume. This is not the first such incident for Base. In August of last year, the network also experienced a freeze lasting approximately 33 minutes due to a sequencer switching failure. The single sequencer model exposes the centralization risks in some current L2 networks: while offering higher speed, the entire chain can come to a halt due to a single point of failure when the core component malfunctions.