News linked to both this project and an event.
Odaily News, according to Bitcoin News monitoring, new research released by @PraveenPerera shows that the Coldcard attacker appears to have first identified vulnerable addresses, then sorted them by BTC balance, and began transferring funds in batches starting from the addresses with the highest holdings. The actual transfer software used was relatively crude. One address had 225 spendable UTXOs, and the attacker happened to extract the most recent 200, leaving the earliest 25, including one UTXO worth 0.16 BTC. This is fully consistent with the 200-record limit that a blockchain API investigated by the researchers returns by default, suggesting the attacker may have failed to load the next page of data. The software even spent a 294-satoshi UTXO, reportedly increasing transaction fees by approximately 2,040 satoshis, with the spending amount clearly exceeding the UTXO's own value. Based on this, the study's author believes the tool's builder may have a stronger understanding of account balance systems than of Bitcoin's UTXO model. Although the attacker appears to have obtained victims' full seeds, at least 75 BTC remain in other addresses derived from the same seeds. The biggest mystery at present is that 132.95 BTC still remain across the 153 compromised addresses, and researchers have been unable to reproduce the seeds behind these addresses, so they cannot rule out the possibility that the attacker obtained undisclosed private device data or candidate data.
Odaily News – According to monitoring by Galaxy's Head of Research, the median dormancy period for stolen coins is 3.5 years, with 88% of stolen coins being over one year old. By address, the median loss is 0.014 BTC and the average loss is 0.212 BTC; over 250 victim reports have been received. Based on victim reports, the median loss is 1.022 BTC and the average loss is 4.04 BTC, with reported losses ranging from 624 satoshis to 58.97 BTC.
Odaily News: Bitcoin News stated on the X platform that ZEUS has temporarily taken its infrastructure offline following a cybersecurity incident over the past few hours. ZEUS said the attack has been mitigated and services will remain offline until it completes a full security audit and resumes operations. ZEUS stated that no customer funds have been lost, and no customer funds are currently at risk. Customers whose Lightning Service Provider channels were closed will receive replacement channels once services are restored. Based on the current investigation, ZEUS said the incident appears to be limited to its own infrastructure, with no evidence yet suggesting it was caused by a vulnerability in Lightning node software. ZEUS added that it has been strengthening its infrastructure using trusted execution environments and the Validating Lightning Signer project, noting that the project is designed to mitigate such attacks in its upcoming architecture. ZEUS said it will continue to provide updates as the investigation progresses.
Monitoring from the PPP Prediction Market Tool shows that the probability of "Next round of US-Iran peace talks before August 31" on Polymarket has risen to 51%, up 17% in 24 hours; the probability of talks occurring before August 15 has risen to 27%, up 13% in 24 hours.Trump posted on social media today stating that he received a request from Iran to delay the attack and agreed to cancel the strike on Iran in exchange for an agreement. He noted that the U.S. is prepared to confront Iran with a level of military deterrence, strength, and capability unseen since World War II, as a framework for an agreement has already been reached. This framework includes the immediate, complete, and full reopening of the Strait of Hormuz, as well as ending Iran's nuclear threat. Based on this request, he agreed to cancel the attack for the future interests of the world and the survival of a successful and prosperous Iran, provided that an agreement can be reached promptly.Join the PPP Signal Push Community to stay ahead and seize the initiative.
Humanity has announced the $H incident recovery plan: The legacy version of H on Ethereum, BNB Smart Chain, and Humanity Mainnet has been deprecated. A new Ethereum ERC-20 version of H will be airdropped 1:1 to eligible holders based on a pre-attack snapshot. Attackers and associated addresses have been excluded.
OpenAI has released the Frontier Governance Framework, systematically elaborating on how its AI safety and governance practices align with emerging regulatory requirements such as the California Frontier AI Transparency Act and the EU's General-Purpose AI Code of Conduct. Based on OpenAI's existing Preparedness Framework, this framework focuses on areas including cyberattacks, CBRN risks, harmful manipulation, loss of control risks, model reporting, security incident response, and external expert review. It also states that it will be continuously updated as model capabilities and the regulatory environment evolve.
According to Decrypt, OpenAI CEO Sam Altman stated that Anthropic is promoting its AI model Claude Mythos through “fear-based marketing,” using narratives about security risks to justify its limited-open strategy. Claude Mythos has recently drawn attention for its ability to autonomously discover software vulnerabilities and perform complex cybersecurity operations. The report notes that Mozilla previously disclosed that the model identified 271 vulnerabilities in the Firefox browser during testing. Meanwhile, discussions surrounding the model’s potential offensive cybersecurity risks continue to intensify. Altman also emphasized that OpenAI will not scale back its infrastructure investments and will continue expanding its computational capabilities.
Ledger Chief Technology Officer Charles Guillemet pointed out that the development of post-quantum cryptography has entered a critical stage. Although the timeline for a practical quantum computer remains unclear, a full-scale migration of the encryption systems across the industry is an inevitable trend. Led by NIST, the traditional sector plans to phase out high-risk algorithms by 2030 and completely ban them by 2035, with government and enterprise institutions expected to complete their migration layouts by 2029. Encryption and key exchange will adopt ML-KEM to defend against quantum decryption attacks on harvested data, with digital signatures becoming the core of blockchain transformation. The traditional industry prefers ML-DSA hybrid schemes, while the blockchain sector favors the more secure and robust SLH-DSA hash-based signature. Both schemes have their respective advantages and disadvantages. The compatibility challenges of post-quantum algorithms with MPC and threshold signatures remain a key risk that the industry urgently needs to address.