News linked to both this project and an event.
The U.S. Department of Justice announced an indictment charging 17 members of Iran's Mabna Institute with long-running cyber intrusion campaigns targeting 144 U.S. universities, 178 foreign universities, at least 42 U.S. companies, 11 foreign companies, and multiple government and non-governmental agencies, resulting in the theft of more than 31 TB of academic data, intellectual property, and sensitive information. The indictment alleges that the group has conducted hacking operations under contract from the Islamic Revolutionary Guard Corps (IRGC) and other Iranian government and university entities since 2013, profiting by compromising accounts, stealing research materials and proprietary data, and selling portions of the illicitly acquired resources. Some individuals involved also participated in the HBO hacking incident, where internal data was exfiltrated and attempts were made to extort approximately $6 million in Bitcoin.
Odaily News: According to on-chain detective Specter's monitoring, the victim claimed that due to a Coldcard hack, funds were transferred from Bitcoin to Ethereum. However, on-chain data shows that the 73 BTC ($4.6 million) originally came from the Whirlpool coin mixer two weeks ago, with some of it bridged to Ethereum and subsequently deposited through a phishing Tornado Cash interface. Two coin mixers were used during the fund transfer process. The individual was also found to have appeared in Telegram groups involving private key searches and brute-force attacks. On-chain detective Specter stated that the victim may be a threat actor, and their funds may have been stolen by another threat actor.
Odaily News: BIP-110 supporters are discussing a hard fork to change the stalled minority chain's mining algorithm from SHA-256d to BLAKE2b. Transaction history before the fork remains shared by both chains. If transaction and signature rules remain consistent, the same transaction could be replayed on the other chain, creating a replay attack.BIP-110's peak miner support was approximately 2.53%. After the consensus rules took effect on August 8, the minority chain produced only two consecutive blocks before stalling, while the Bitcoin main chain continued operating and widening the block height gap. The BIP-110 proposal was subsequently marked as closed, and supporters shifted focus to discussing the BLAKE2b proof-of-work scheme.Bitcoin Knots plans to add a new signature hash option, but RDTS will still maintain compatibility with Bitcoin Core's existing signature hash types. Regular transactions may continue to be valid on both chains. Users will need to use the new option and rely on wallets or hardware signing firmware that support it to achieve asset separation.Luke Dashjr stated on August 18 that Bitcoin should bear the responsibility for replay protection, calling it "Spamcoin." If the BLAKE2b fork proceeds around September 1, exchanges, wallets, and holders will need to distinguish between cross-chain transactions and chain-specific transactions. (Bitcoin.com News)
Maya Protocol founder AaluxxMyth disclosed that the protocol was attacked, with approximately 20 BTC (around $1.4 million) and other assets (around $300,000) stolen. The team has suspended global operations to contain losses and is fixing vulnerabilities to restore trading. Most of the losses resulted from arbitrage and pool fees caused by extreme slippage. The team is communicating with relevant parties and plans to recoup the funds through methods such as investments in Aztec Chain. If the 20 BTC are returned to the pool, the CACAO token price will recover to $0.115. The team also hopes the attacker will accept the bug bounty and return the funds.
Odaily News: A bitcoin wallet created in 2012 has moved 212 BTC after remaining dormant for 14 years, valued at $13.72 million based on the price at the time of transfer. The wallet address was created on August 10, 2012. These bitcoins were originally worth $2,346, with a per-coin price of $11.07; at the article's quoted price of $64,761, if sold in full, the holder would realize a gain of 584,725%. The wallet owner's identity remains unknown. The 212 BTC has been transferred from a legacy P2PKH wallet to an unlabeled Bech32 wallet, arriving in multiple batches before being consolidated. A Coldcard vulnerability led to the theft of nearly 2,000 BTC, which may have prompted some long-term holders to move their assets, but this address has not been linked to any known entity. (Bitcoin.com News)
Odaily News: Peer-to-peer cryptocurrency trading platform NoOnes announced that it will begin gradually winding down operations after running for over three years. The company stated that it had been continuously seeking to resolve and lift the sanctions imposed on NoOnes, but ultimately failed. The sanctions caused the platform to lose key partners, and blockchain monitoring firms also flagged transactions associated with NoOnes as high-risk, making it increasingly difficult for the platform to continue normal operations. According to the plan, the business contraction began on August 17, and the P2P marketplace will close at 23:59 UTC on August 21. Services such as Swap, NoOnes Visa, fiat withdrawals, the gift card store, and the Bitcoin Lightning Network will also be discontinued progressively. After that, the platform will only support withdrawals, and users will still be able to log in, view balances, and withdraw remaining assets. The company advises users to complete asset withdrawals as soon as possible, no later than August 23. Previously, on January 26, 2025, NoOnes revealed that the platform had suffered a major security breach earlier that month, resulting in losses of approximately $8 million in crypto assets. CEO Ray Youssef confirmed the news after on-chain detective ZachXBT disclosed the hacking incident on his Telegram channel.
Odaily News - Bitcoin News announced on the X platform that BitBox has disclosed two severe hardware wallet vulnerabilities, stating there is currently no evidence that these vulnerabilities have been exploited or led to user fund theft. All disclosed issues have been fixed in firmware v9.26.5, and BitBox urges all users to update immediately. An internal security audit uncovered two severe vulnerabilities, along with new details regarding a previously fixed bootloader vulnerability. One vulnerability affecting BitBox Multi devices could allow a malicious host to execute arbitrary code and install malicious firmware on devices that have not yet completed setup. Another vulnerability in Silent Payments could allow an attacker to exploit a malicious host device to redirect funds to unintended addresses, resulting in Bitcoin being locked and potentially enabling extortion attacks. BitBox also disclosed that the previously fixed bootloader vulnerability could allow attackers to trick users into installing malicious firmware capable of stealing funds.
Glassnode pointed out in its latest market report that although Bitcoin has rebounded slightly after retreating from the $65,000 zone last week, it remains clearly range-bound overall. Spot trading volume and on-chain transaction throughput continue to shrink, with market liquidity and participation willingness at low levels. The derivatives market also shows caution, with leverage expanding moderately, but aggressive taker activity in perpetual contracts continues to lean toward the sell side, reflecting more aggressive distribution behavior. Funding rates remain positive, indicating lingering long-side inclination, while the options market continues to price downside protection at a premium above actual volatility levels.Institutional demand has simultaneously weakened, with declining spot ETF volumes compounded by net outflows. Institutional positions are near their cost basis, limiting unrealized profit potential for regulated investors and causing a temporary pause in accumulation momentum. On-chain profitability is under pressure, with a large portion of supply in loss and realized losses consistently exceeding profit-taking.The report also noted that the broader pace of capital outflows has begun to slow, which could be an early signal that selling pressure is stabilizing. The overall market remains caught between short-term selling pressure and relatively resilient long-term holdings. Weak spot liquidity, deteriorating institutional flows, and elevated loss realization collectively point to a continuation of the consolidation pattern, while the slowing outflow pace suggests the market may be approaching a more balanced state before its next directional move.
according to Bitcoin News monitoring, analysis by Galaxy Research (@glxyresearch) has identified distinct characteristics among various groups that exploited weakly secured COLDCARD seeds in their attacks. The 10 largest groups alone transferred approximately 1,700 BTC, with the biggest group moving over 1,080 BTC. Researchers differentiated the attackers based on patterns such as fee strategies, transaction timing, fund consolidation methods, and the destinations of the stolen BTC. Several of the largest groups are still suspected to hold nearly all of the stolen BTC. Victims of COLDCARD attacks can contact @intangiblecoins to assist in gathering evidence and reaching out to relevant authorities.
Odaily News, Tornado Cash founder Roman Storm stated that if the logic behind the U.S. Department of Justice's (DOJ) case against him holds, tech companies Google and OpenAI should also be held liable for North Korean hackers abusing their products. Those involved reportedly used ChatGPT to write code and Google Gemini for forgery and image manipulation. Storm was convicted in August 2025 of conspiracy to operate an unlicensed money-transmitting business. He pointed out that the Tornado Cash case could set a legal precedent where software developers are penalized for criminal acts committed by users, emphasizing that criminals should be held accountable rather than the developers of tools. The CLARITY Act for digital asset markets is intended to provide protections for software developers by distinguishing developer liability from the potential misuse of protocols for illegal activities. However, although a final motion for consideration of the bill has been scheduled for a vote, its current chances of passage remain low. (Bitcoin News)
Bitcoin News posted on X platform saying that Prince Filip learned about the COLDCARD hack while on vacation. As an Mk3 user, he faced the risk of his entire Bitcoin holdings being stolen at any moment.
Odaily News: Bitcoin News posted on X platform that a long-term Bitcoin holder had all assets withdrawn from their account within less than 12 hours of transferring BTC to a major Australian exchange. According to a friend of the holder, hackers had compromised their Google account for approximately 3 months, obtaining their email and Google Authenticator credentials backed up to the cloud, and then waited for them to deposit BTC into the exchange. The exchange identified the hacker as the account owner and approved the withdrawal, with the holder receiving a withdrawal approval notification at 3 AM. The post recommends disabling cloud backup for Google Authenticator and using hardware security keys such as YubiKey; setting up two keys can serve as a backup in case one is lost.
Odaily News, Galaxy Research Head Alex Thorn stated on the X platform that attacks exploiting the Coldcard hardware wallet vulnerability have noticeably declined, but cumulative losses continue to rise as more victims come forward. The impact of this incident on the Bitcoin community is significant, as the victims are primarily long-term BTC holders who adhered to self-custody cold storage principles, rather than those who lost assets due to high-risk trading or DeFi activities.At a scale of $112 million, this incident ranks among the top 20 largest hacks in crypto history and is one of the most severe security breaches in the hardware wallet self-custody sector to date. Bitcoin culture may be entering a new phase—the era of relying solely on ideological advocacy and extreme self-custody promotion is coming to an end. The community needs to place greater emphasis on technical security, lower the barrier to entry for users, and avoid simply shifting the burden of security responsibility onto ordinary users. This crisis may ultimately drive the Bitcoin ecosystem to establish a more mature security framework.Galaxy Research has directly contacted 190 victims and has confirmed with high confidence that the exploit has led to the theft of 1,778.84 BTC (approximately $112.7 million) from over 8,600 addresses. This tally does not yet include certain moderately credible suspicious attack records, such as the unconfirmed "Wave 4." If these potential attack scopes are incorporated, total losses could expand to 2,417.35 BTC (approximately $153 million).Meanwhile, the incident is reshaping market perceptions of self-custody security. Galaxy noted that multisig wallets have emerged as the "winners" of this event, with no stolen transactions traced to multisig wallets so far. Multisig service providers including Casa, Unchained, Nunchuk, and Anchorwatch have all observed a notable increase in user registrations and BTC inflows.
Odaily News, according to Bitcoin News monitoring, new research released by @PraveenPerera shows that the Coldcard attacker appears to have first identified vulnerable addresses, then sorted them by BTC balance, and began transferring funds in batches starting from the addresses with the highest holdings. The actual transfer software used was relatively crude. One address had 225 spendable UTXOs, and the attacker happened to extract the most recent 200, leaving the earliest 25, including one UTXO worth 0.16 BTC. This is fully consistent with the 200-record limit that a blockchain API investigated by the researchers returns by default, suggesting the attacker may have failed to load the next page of data. The software even spent a 294-satoshi UTXO, reportedly increasing transaction fees by approximately 2,040 satoshis, with the spending amount clearly exceeding the UTXO's own value. Based on this, the study's author believes the tool's builder may have a stronger understanding of account balance systems than of Bitcoin's UTXO model. Although the attacker appears to have obtained victims' full seeds, at least 75 BTC remain in other addresses derived from the same seeds. The biggest mystery at present is that 132.95 BTC still remain across the 153 compromised addresses, and researchers have been unable to reproduce the seeds behind these addresses, so they cannot rule out the possibility that the attacker obtained undisclosed private device data or candidate data.
Odaily News: Cryptocurrency exchange BitMEX has announced that it will fully shut down its platform at 4:00 (UTC) on September 23, 2026. BitMEX CEO Peter Wilkinson stated that the exchange has been operating for over 11 years and has never lost customer funds due to hacker attacks during that period. Peter Wilkinson noted that BitMEX failed to keep pace with its competitors, having long focused on derivatives business while failing to offer spot trading, yield products, custody, and stablecoin trading services in a timely manner. The exchange also entered the USDT market relatively late, in 2021. He stated that BitMEX once supported its founding team in pioneering perpetual swaps, a product that has since become one of the highest-trading-volume financial instruments in the crypto industry and is now widely used for leveraged cryptocurrency trading. (Bitcoin.com News)
Odaily News: Bitcoin News posted on X platform that Trezor stated its customer data was exposed due to a security breach at logistics provider ShipMonk. Customers who received orders within 90 days before August 8 in the United States, United Kingdom, Sweden, Colombia, Brazil, Italy, or Portugal may be affected. The exposed data includes full names, shipping addresses, phone numbers, email addresses, and order numbers. Trezor stated that its systems were not compromised and devices remain secure, but reminded affected customers to beware of sophisticated phishing attacks leveraging the leaked information.
据 Ai 姨 监测，Lazarus Group 于约 2 小时前将 262.2 枚比特币（BTC） 转移至新地址，价值约 1664 万美元，相关转移或用于后续资金清洗。当前该组织在链上仍持有超过 7306 万美元 的资产，主要包括 比特币（BTC）、泰达币（USDT） 和 以太坊（ETH）。
Bitwise Chief Investment Officer Matt Hougan stated in an interview with Bloomberg that the Bitcoin price has not reacted significantly to negative news recently, such as the Coldcard security incident, Strategy sell-off, and the CLARITY Act's progress falling short of expectations, which may indicate that Bitcoin has approached or reached the bottom of this bear market.
According to The Defiant, Boltz announced that its original founders have all exited, and an anonymous team of "senior Bitcoin figures" will take over the suspended Bitcoin Swap service. The new team will provide funding and engineering support to fix vulnerabilities and push for the service to resume as soon as possible.
Odaily News: After a firmware vulnerability in Coldcard hardware wallets was exploited, approximately 2,100 Bitcoin were stolen, with losses nearing $130 million. On-chain data shows that in the days surrounding the incident, wallets held by long-term holders transferred out approximately 233,000 Bitcoin, valued at around $15 billion. Casa CEO Nick Neuman stated that some of the transferred funds came from Coldcard users migrating to multi-signature wallets, with Ledger and Trezor users also taking similar measures after the event. During the same period, approximately 22,000 Bitcoin were transferred into exchanges. Coinkite has advised users who generated seed phrases using firmware versions 4.0.1 through 4.1.9 to treat their wallets as compromised and immediately migrate to new seed phrases. These versions cover the period from March 2021 to July 2026. (Decrypt)