News linked to both this project and an event.
Odaily News: Numa Lunah, co-founder of the crypto project Refi Hub, stated that he was hacked after using a download link provided in a Claude chat window to install a transcription application. The link pointed to a fake website bundled with malware, which attempted to steal all information from his device upon execution.Numa Lunah said he wiped and reinstalled the affected laptop and found no signs of sensitive data leakage. Subsequently, he discovered a contaminated Claude Code skill file named SKILL.md in his backups. The file was disguised as a style guide written by himself and contained instructions to re-download malware and steal credentials every time it was loaded.Microsoft Defender Experts previously warned that attackers have shifted from search engine optimization poisoning to large language model response poisoning. These tactics include recommending attacker-controlled download links, AI-branded fake installers, and contaminated code repositories and agent skills. Individuals working in the crypto industry may hold irrevocable credentials such as mnemonic phrases, private key files, hot wallet JSONs, exchange API keys with withdrawal permissions, and deployer keys. (Bitcoin.com News)
: Blockchain technology company Starkware stated that on August 26, a transaction using researcher Avihu Levy's Quantum-Safe Bitcoin (QSB) scheme was mined on the Bitcoin mainnet, without requiring a soft fork, hard fork, or modification of consensus rules.The transaction consumed 10,000 sats and was processed through MARA Foundation's Slipstream service, as the non-standard format typically cannot propagate through Bitcoin's public mempool. The test consumed several hours of GPU computation, costing approximately $150 to $200.QSB employs hash-based quantum-resistant spending conditions and reduces quantum attack risks through signature trial mining, but still requires users to proactively migrate funds and cannot protect assets whose public keys have already been exposed. Starkware CEO Eli Ben-Sasson still supports introducing a protocol-level solution via a soft fork. (Bitcoin.com News)
Odaily News - Hardware wallet maker BitBox reports that credit card sales in August grew roughly 10x compared to the baseline of previous weeks, with the increase primarily driven by North America. Trezor and OneKey also confirmed rising sales during the same period, though neither disclosed specific figures.Trezor, BitBox, and OneKey have all re-reviewed their seed phrase generation, random number generator, entropy, and firmware verification processes. Trezor plans to conduct penetration testing on core firmware functions and publish related security audit reports. OneKey will strengthen reviews of security-critical code paths and transaction signing processes.Ledger CTO Charles Guillemet stated that AI-assisted attacks mean patch releases, vulnerability disclosures, and user education need to accelerate. Blockstream Jade has released a firmware update containing multiple fixes and recommends users simultaneously update their apps, operating systems, devices, routers, and home appliances. (Bitcoin.com News)
Odaily News: Ethereum client Besu has fixed 5 security vulnerabilities discovered by blockchain security firm CertiK in version 26.7.1 released on July 27, and published 4 detailed security advisories on August 14. Vulnerability details were disclosed after a delay to allow node operators to complete upgrade deployments.Jialiang Chang, Director of Security Engineering and Senior Audit Partner at CertiK, stated that the arrangement of releasing patches first and details later provided an 18-day buffer period, allowing node operators to identify affected deployments, test new versions, and coordinate with validators or consortium participants to complete upgrades.The vulnerabilities involve block broadcast handling, caching of future-height consensus proposals, WebSocket subscription limits, and JSON-RPC filter creation. If left unpatched, attackers could exhaust node memory or thread resources, impacting node availability and consensus processing.Using the Chain Scan methodology, CertiK conducted adversarial testing on peer-to-peer, HTTP RPC, WebSocket RPC, and consensus interfaces in a private multi-node test network, and provided reproducible testing tools to the Besu team. CertiK is updating Chain Scan to expand round-the-clock multi-node testing on public chain networks. (Bitcoin.com News)
Odaily News: Metaverse gaming platform The Sandbox has confirmed a vulnerability in its cross-chain bridge, allowing attackers to mint unbacked SAND on Base and BNB Smart Chain. Blockchain security firm PeckShield detected on August 21 that two addresses had collectively minted approximately 14.9 billion SAND. The Sandbox subsequently shut down bridging functionality on both networks.The Sandbox stated that the affected assets are bridged assets on Base and BNB Smart Chain, while SAND on Ethereum and Polygon, user wallet assets, and the Ethereum-locked assets backing the token remain unaffected. The proportion of genuinely collateralized assets involved in this incident is less than 0.01% of the total SAND supply.The Sandbox is developing a compensation plan for affected liquidity providers and advises users not to trade SAND on Base or BNB Smart Chain until bridging is restored. Coinbase plans to delist 10 perpetual futures contracts, including SAND, on August 26, with open positions to be automatically settled at that time. (Bitcoin.com News)
Odaily News: BIP-110 supporters are discussing a hard fork to change the stalled minority chain's mining algorithm from SHA-256d to BLAKE2b. Transaction history before the fork remains shared by both chains. If transaction and signature rules remain consistent, the same transaction could be replayed on the other chain, creating a replay attack.BIP-110's peak miner support was approximately 2.53%. After the consensus rules took effect on August 8, the minority chain produced only two consecutive blocks before stalling, while the Bitcoin main chain continued operating and widening the block height gap. The BIP-110 proposal was subsequently marked as closed, and supporters shifted focus to discussing the BLAKE2b proof-of-work scheme.Bitcoin Knots plans to add a new signature hash option, but RDTS will still maintain compatibility with Bitcoin Core's existing signature hash types. Regular transactions may continue to be valid on both chains. Users will need to use the new option and rely on wallets or hardware signing firmware that support it to achieve asset separation.Luke Dashjr stated on August 18 that Bitcoin should bear the responsibility for replay protection, calling it "Spamcoin." If the BLAKE2b fork proceeds around September 1, exchanges, wallets, and holders will need to distinguish between cross-chain transactions and chain-specific transactions. (Bitcoin.com News)
Odaily News: A bitcoin wallet created in 2012 has moved 212 BTC after remaining dormant for 14 years, valued at $13.72 million based on the price at the time of transfer. The wallet address was created on August 10, 2012. These bitcoins were originally worth $2,346, with a per-coin price of $11.07; at the article's quoted price of $64,761, if sold in full, the holder would realize a gain of 584,725%. The wallet owner's identity remains unknown. The 212 BTC has been transferred from a legacy P2PKH wallet to an unlabeled Bech32 wallet, arriving in multiple batches before being consolidated. A Coldcard vulnerability led to the theft of nearly 2,000 BTC, which may have prompted some long-term holders to move their assets, but this address has not been linked to any known entity. (Bitcoin.com News)
Odaily News: Cryptocurrency exchange BitMEX has announced that it will fully shut down its platform at 4:00 (UTC) on September 23, 2026. BitMEX CEO Peter Wilkinson stated that the exchange has been operating for over 11 years and has never lost customer funds due to hacker attacks during that period. Peter Wilkinson noted that BitMEX failed to keep pace with its competitors, having long focused on derivatives business while failing to offer spot trading, yield products, custody, and stablecoin trading services in a timely manner. The exchange also entered the USDT market relatively late, in 2021. He stated that BitMEX once supported its founding team in pioneering perpetual swaps, a product that has since become one of the highest-trading-volume financial instruments in the crypto industry and is now widely used for leveraged cryptocurrency trading. (Bitcoin.com News)
Odaily News: Kostas Chalkias, co-founder and chief cryptographer of Mysten Labs, the development company behind the Sui blockchain, stated that he has leased a dedicated factory at a secret location and plans to scale up production of quantum-safe hardware wallet cards for Sui. The project aims to keep the cost of a single quantum card key under $10, with NFC quantum signing expected to take 1 to 2 seconds. Chalkias noted that the project is being advanced in his personal time outside of work and may include funding to provide cards for users who cannot afford them. The initiative is partly driven by a recent incident involving Coldcard hardware wallets, though the vulnerability was not a quantum attack. Coldcard manufacturer Coinkite disclosed that a firmware vulnerability in Coldcard, traceable to a 2021 update, bypassed the hardware random number chip and generated keys using a predictable software process linked to device serial numbers. Attackers have been moving funds since July 30, with losses climbing to approximately 2,055 BTC, affecting over 7,700 addresses and nearing a value of $130 million. At the protocol level, Sui plans to integrate two quantum-resistant signature schemes approved by the U.S. National Institute of Standards and Technology (NIST), designed for everyday accounts and high-value Move vaults, respectively. Existing accounts can be rotated to quantum-safe keys based on their original recovery phrases, without needing to migrate to new wallets. (Bitcoin.com News)
According to Bitcoin.com, cybersecurity company Genians Security Center released an analysis report stating that the North Korean Reconnaissance General Bureau-affiliated hacker group Kimsuky is building and testing an AI-centric cyberattack tool suite. Researchers discovered traces of the deployment of three local AI platforms, Ollama, GPT4All, and Msty, in their infrastructure, as well as AI development framework components such as Microsoft Semantic Kernel and LLaMaSharp, indicating that the organization is systematically developing dedicated AI attack tools rather than just making temporary attempts. Since early 2026, Kimsuky has used high-quality documents created by generative AI for spear-phishing attacks targeting the virtual assets, financial investment, and game development sectors; AI-generated professional documents have significantly reduced the effectiveness of traditional phishing email identification. The attack vector consists of ZIP archives disguised as legitimate documents, containing malicious LNK files that can silently execute PowerShell commands in the background after being triggered.
Odaily News: Harry Yeh, founder and managing partner of Quantum Fintech Group, an investment firm focused on the Fanton ecosystem with over $2 billion in assets under management, was found dead on Friday local time in Paraguay. He fell from the 30th floor of the Jade Park tower in Asunción, a vertical drop of over 100 meters. When police arrived at the scene, they found Yeh completely naked and covered with a black bag; the door to his residence was open, and items inside were scattered. Police stated that the investigation is still in its preliminary stages, and the cause of the fall remains unclear. Building surveillance footage has been reviewed, and an autopsy and forensic examination have been scheduled. (Bitcoin.com News)
Odaily News: On August 5, the minority staff of the U.S. Senate Committee on Banking, Housing, and Urban Affairs stated that the July 22 version of the CLARITY Act fails to meet five minimum standards. The bill, numbered H.R. 3633, aims to divide digital asset regulatory authority between the U.S. Securities and Exchange Commission (SEC) and the U.S. Commodity Futures Trading Commission (CFTC). The analysis suggests that the bill's two-tier system could remove certain blockchain assets from SEC oversight, allowing issuing companies to self-certify exemptions from securities regulation. Healthy Markets and five labor organizations have raised concerns over pension protections and securities law loopholes, while minority staff also noted that investors' private right of action and state and tribal enforcement powers could be weakened. Minority staff stated that DeFi-related companies could be exempt from anti-illegal financing obligations even if they earn millions of dollars from platform transactions; some crypto mixers may circumvent U.S. sanctions by exploiting the "Tornado Cash loophole." The Independent Community Bankers of America (ICBA) and the Conference of State Bank Supervisors (CSBS) warned that stablecoin yields could drain deposits from community banks, and the Systemic Risk Council has flagged related banking activities as potential bailout risks. Minority staff noted that Donald Trump alone earned over $1.4 billion from crypto businesses in 2025, with related enforcement solely under the purview of his Attorney General, and that obligations would terminate upon his departure from office. Elizabeth Warren and Richard Blumenthal, citing $3.8 billion in investor losses, have separately called on the SEC to investigate Trump memecoin. The Senate is scheduled to hold a cloture vote on September 15 on the motion to proceed, with the bill needing 60 votes to advance. (Bitcoin.com News)
According to Bitcoin.com, U.S. Senator Cynthia Lummis is pushing hard for the CLARITY Act to complete Senate voting before Congress adjourns. Section 303 of the bill grants the Treasury Department the authority to impose targeted digital asset sanctions on foreign jurisdictions, while Section 305 allows exchanges to freeze suspicious transactions for up to 180 days. On-chain data shows that North Korea's Lazarus Group stole approximately $643 million in the first half of 2026, accounting for two-thirds of the total global crypto theft during the same period ($972 million), including a $285 million attack on Drift Protocol in April and a $292 million attack on the KelpDAO cross-chain bridge. The group's cumulative theft amount has reached $6.75 billion since 2019. Currently, Galaxy Research has lowered the probability of the CLARITY Act passing within 2026 to 30%. The bill still requires 60 votes to advance, meaning at least 7 Democratic senators need to vote across party lines in support.
According to Bitcoin.com, the Kenyan government is investigating the hacking incident of President William Ruto's official website. The attackers temporarily tampered with the homepage content and demanded a payment of 5 Bitcoins, threatening to leak undisclosed information otherwise.
Odaily reports: A court in the state of São Paulo, Brazil, has ordered Coinbase to refund nearly $100,000 to a user who claimed funds deposited in their Coinbase Wallet disappeared in an unauthorized transaction. Coinbase argued that the private keys to the wallet were entirely under the user's control. However, it failed to prove that the transaction was initiated by the wallet holder or that adequate security measures were in place to prevent the incident. The court ruled based on relevant provisions of the Consumer Protection Code and ordered Coinbase to return the full amount plus statutory interest. (Bitcoin.com News).