News Heat Trend
AI code review missed a critical vulnerability that COLDCARD was exploited for last week
Odaily Planet Daily reported that Bitcoin News stated on the X platform that Coinkite said the vulnerability existed at the boundary between two unrelated firmware submodules, rather than in its Bitcoin or encryption code, which allowed it to evade both manual and AI-assisted code reviews for years. Coinkite stated that after the incident, the company tested cutting-edge AI models including Kimi K3, Claude Fable, and Codex 5.6, none of which identified the flaw. Coinkite is now urging security-critical projects to specifically audit build systems and submodule boundaries, and warned that AI-assisted development could leave similar blind spots in the Bitcoin ecosystem.
Coldcard vulnerability investigation escalates: At least 15 attackers identified, a single victim's findings reveal 12 BTC stolen
Galaxy Digital Head of Research Alex Thorn stated that based on new victim reports received following the incident, the number of attackers exploiting the Coldcard vulnerability has reached at least 15.Thorn noted that information provided by victims helped the research team uncover previously unidentified attack activity. Unlike thefts from centralized exchanges, correlations between the attackers in this vulnerability exploit require confirmation through on-chain analysis and victim feedback.He added that a single victim reporting less than 1 BTC stolen helped the team discover a previously unknown attack, which siphoned approximately 12 BTC from 126 addresses.According to Galaxy Research's earlier estimates, the Coldcard vulnerability has led to at least three rounds of attacks, with losses amounting to approximately $100 million in BTC. Additionally, Galaxy has identified a suspected fourth round of attacks, which could bring total losses to approximately $130 million.Meanwhile, the incident has also sparked discussions regarding the security of Bitcoin self-custody. Dragonfly Managing Partner Haseeb Qureshi stated that "AI security hardening costing around $2" could potentially have prevented this vulnerability, and noted that some AI models were able to rediscover related vulnerabilities within a relatively short timeframe. However, industry insiders pointed out that current claims about the speed of AI discovering vulnerabilities lack rigorous blind testing and verification.Researchers believe that as AI model capabilities improve, the costs of vulnerability discovery and attacks in the crypto industry may continue to decline, requiring wallet developers to further strengthen code audits and security protections. (Cointelegraph)
Trump’s 2025 crypto revenue totals approximately $1.4 billion; CLARITY Act faces objections from Senate Democrats
Odaily News – On July 30, the minority staff of the U.S. Senate Committee on Banking, Housing, and Urban Affairs released a new analysis raising Democratic objections to the amended draft of the CLARITY Act. The analysis states that Donald Trump’s 2025 crypto revenue amounts to approximately $1.4 billion, and that current ethics provisions still allow him to retain related business arrangements. The analysis reviews World Liberty Financial, the TRUMP meme coin, cryptocurrency investments, staking income, and other business activities, concluding that provisions restricting officials from issuing or sponsoring digital assets would not materially affect the aforementioned financial arrangements. Staff estimated approximately $799 million in revenue related to World Liberty Financial and approximately $635 million from the TRUMP meme coin. Trump’s annual financial disclosure report lists $635.1 million in royalties from a licensing agreement with CIC Digital LLC related to Celebration Coins, along with Bitcoin and Ethereum wallets each valued at over $50 million, and validator rewards obtained through staking agreements on Coinbase. The Senate draft of the CLARITY Act seeks to prohibit covered officials and their spouses from issuing or sponsoring digital assets for compensation during specified periods, while also establishing exceptions for qualified blind trusts, unauthorized third-party activities, continued use of an official’s likeness, and holding digital asset investments.
CLARITY Act's probability of passage in 2026 drops to 30%, US Senator Jon Husted expresses support
on July 28 that U.S. Senator Jon Husted publicly supported the Digital Asset Market Clarity Act, stating that if the United States wants to maintain its leading position in the digital asset field, it needs a clear, enforceable regulatory framework that supports innovation and employment.The CLARITY Act aims to establish the first comprehensive federal framework for crypto regulation in the U.S., dividing jurisdiction between the U.S. Securities and Exchange Commission (SEC) and the U.S. Commodity Futures Trading Commission (CFTC). The bill classifies tokens into three categories, granting the CFTC exclusive regulatory authority over the spot market for digital commodities, while the SEC continues to oversee assets that still resemble securities.Galaxy Research has lowered the probability of the CLARITY Act becoming law by 2026 from 50% to 30%. Alex Thorn, the firm's Head of Research, stated that the 60-vote threshold in the Senate is the main obstacle, and supporters may not yet hold a simple majority.The revised version of the bill proposes to prohibit the President, Vice President, members of Congress, federal judges, and their spouses from receiving compensation through the issuance or sponsorship of digital assets during their term in office until January 2029. It also requires relevant officials to sell their cryptocurrency holdings or place them in a blind trust.
US Senator Cynthia Lummis: Will Continue to Push for Bipartisan Agreement on the CLARITY Act in the Coming Days
Odaily Odaily News: US Senator Cynthia Lummis stated that she thanks Democratic colleagues for their significant contributions to the new draft of the CLARITY Act and pledged to continue pushing for an agreement in the coming days to ensure the bill can ultimately become law. Consumer protection and supporting innovation are not contradictory, and this draft bill proves that both can be achieved simultaneously. Previously, after holding a briefing call with industry stakeholders, US Senate Republicans released a new version of the CLARITY Act. The new text proposes prohibiting the President, Vice President, members of Congress, federal judges, and other officials, as well as their spouses, from receiving compensation through the issuance or sponsorship of digital assets while in office, with the relevant provisions valid until January 20, 2029. Officials subject to these restrictions must also sell their crypto assets and investments in crypto enterprises, or place them in a blind trust over which they have no control; the sale of crypto assets exceeding $1,000 must be disclosed.
The National Financial Regulatory Administration: Eliminating Regulatory Gaps and Blind Spots to Ensure Full Coverage with No Exceptions
at today's 2026 Lujiazui Forum, Ding Xiangqun, Director of the National Financial Regulatory Administration, stated that efforts must be made to strengthen supervision, eliminate regulatory gaps and blind spots, and ensure full coverage with no exceptions. Ding Xiangqun said that efforts should be concentrated on preventing and resolving risks to firmly uphold the bottom line of preventing systemic financial risks. Focus should be placed on "reducing existing risks and controlling new risks." Risks in small and medium-sized financial institutions should be addressed in a forceful and orderly manner, with support and coordination to resolve risks related to real estate and local government debt. Adhere to the principles of treating diseases before they occur and addressing problems at the source, improve early correction mechanisms for financial risks with hard constraints, and achieve early identification, early warning, early exposure, and early disposal.Focus on "managing legal activities while also managing illegal ones." Strengthen central-local coordination and departmental collaboration, and make every effort to eliminate regulatory gaps and blind spots to ensure full coverage with no exceptions. Take the overall battle of preventing and combating illegal financial activities as a starting point, maintain a high-pressure crackdown stance, strengthen whole-chain systemic governance, and strive to protect the people's "money bags." (CCTV News)
Coldcard vulnerability investigation escalates: At least 15 attackers identified, a single victim's findings reveal 12 BTC stolen
Galaxy Digital Head of Research Alex Thorn stated that based on new victim reports received following the incident, the number of attackers exploiting the Coldcard vulnerability has reached at least 15.Thorn noted that information provided by victims helped the research team uncover previously unidentified attack activity. Unlike thefts from centralized exchanges, correlations between the attackers in this vulnerability exploit require confirmation through on-chain analysis and victim feedback.He added that a single victim reporting less than 1 BTC stolen helped the team discover a previously unknown attack, which siphoned approximately 12 BTC from 126 addresses.According to Galaxy Research's earlier estimates, the Coldcard vulnerability has led to at least three rounds of attacks, with losses amounting to approximately $100 million in BTC. Additionally, Galaxy has identified a suspected fourth round of attacks, which could bring total losses to approximately $130 million.Meanwhile, the incident has also sparked discussions regarding the security of Bitcoin self-custody. Dragonfly Managing Partner Haseeb Qureshi stated that "AI security hardening costing around $2" could potentially have prevented this vulnerability, and noted that some AI models were able to rediscover related vulnerabilities within a relatively short timeframe. However, industry insiders pointed out that current claims about the speed of AI discovering vulnerabilities lack rigorous blind testing and verification.Researchers believe that as AI model capabilities improve, the costs of vulnerability discovery and attacks in the crypto industry may continue to decline, requiring wallet developers to further strengthen code audits and security protections. (Cointelegraph)
WEEX Launches Physical AI Bot Concept Coin Trading Campaign, Offering $100,000 Prize Pool
WEEX Exchange Announcement: A Coin-Stock Ecosystem Trading Zone event for Physical AI Bot is now launched. Users trading any event tokens (MSFTON, NVDAON, AMDON, QCOMON, TXNON, ADION, SYMON, ISRGON, TSLAON) can participate in sharing a $100,000 reward. Event Time: 7/2 20:00 - 7/12 20:00 (UTC+8). During the event, new users who sequentially complete a net deposit ≥ $100 and make their first spot trade in an event token with trading volume ≥ $10 can receive a blind box worth up to $28; cumulative spot trading volume of event tokens ≥ 200 USDT allows participation in sharing 10,000 USDT bonus based on trading volume ratio. For new and old users, daily event token spot trading volume ≥ $50 is considered a successful check-in; cumulative check-ins of 2 days or more allow participation in sharing a $20,000 prize pool; net buy of event tokens ≥ 100 USDT allows participation in the Net Buy Challenge to share $30,000; cumulative spot trading volume of event tokens ≥ 2,000 USDT allows sharing 20,000 USDT bonus based on trading volume ratio.
Bitget Launches U.S. Stocks New User Campaign: Win Up to $2,000 USDT Trading Vouchers and an iPhone 17 Pro Max
Bitget has launched its “U.S. Stock New User Bonus” campaign, running from May 28 to June 5. During the campaign period, users who complete tasks—including net deposits and U.S. stock perpetual contract trading—can earn up to a $2,000 USDT position experience voucher. Additionally, completing tasks unlocks chances to participate in blind box draws, with prizes including multiple tiers of position experience vouchers and an iPhone 17 Pro Max. Eligible users must click “Join Now” to register; for more details, please visit the official Bitget platform.
AI code review missed a critical vulnerability that COLDCARD was exploited for last week
Odaily Planet Daily reported that Bitcoin News stated on the X platform that Coinkite said the vulnerability existed at the boundary between two unrelated firmware submodules, rather than in its Bitcoin or encryption code, which allowed it to evade both manual and AI-assisted code reviews for years. Coinkite stated that after the incident, the company tested cutting-edge AI models including Kimi K3, Claude Fable, and Codex 5.6, none of which identified the flaw. Coinkite is now urging security-critical projects to specifically audit build systems and submodule boundaries, and warned that AI-assisted development could leave similar blind spots in the Bitcoin ecosystem.
Coldcard vulnerability investigation escalates: At least 15 attackers identified, a single victim's findings reveal 12 BTC stolen
Galaxy Digital Head of Research Alex Thorn stated that based on new victim reports received following the incident, the number of attackers exploiting the Coldcard vulnerability has reached at least 15.Thorn noted that information provided by victims helped the research team uncover previously unidentified attack activity. Unlike thefts from centralized exchanges, correlations between the attackers in this vulnerability exploit require confirmation through on-chain analysis and victim feedback.He added that a single victim reporting less than 1 BTC stolen helped the team discover a previously unknown attack, which siphoned approximately 12 BTC from 126 addresses.According to Galaxy Research's earlier estimates, the Coldcard vulnerability has led to at least three rounds of attacks, with losses amounting to approximately $100 million in BTC. Additionally, Galaxy has identified a suspected fourth round of attacks, which could bring total losses to approximately $130 million.Meanwhile, the incident has also sparked discussions regarding the security of Bitcoin self-custody. Dragonfly Managing Partner Haseeb Qureshi stated that "AI security hardening costing around $2" could potentially have prevented this vulnerability, and noted that some AI models were able to rediscover related vulnerabilities within a relatively short timeframe. However, industry insiders pointed out that current claims about the speed of AI discovering vulnerabilities lack rigorous blind testing and verification.Researchers believe that as AI model capabilities improve, the costs of vulnerability discovery and attacks in the crypto industry may continue to decline, requiring wallet developers to further strengthen code audits and security protections. (Cointelegraph)
Bitget Launches AEHR Stock Spot Trading Event, Total Prize Pool 40,000 USDT
Bitget launches the AEHR stock spot trading event with a total prize pool worth 40,000 USDT. The event runs from 19:00 on August 19 to 18:59 on August 26 (UTC+8). During the event, users can earn blind box draw chances by completing rAEHR trading tasks.
Coldcard vulnerability investigation escalates: At least 15 attackers identified, a single victim's findings reveal 12 BTC stolen
Galaxy Digital Head of Research Alex Thorn stated that based on new victim reports received following the incident, the number of attackers exploiting the Coldcard vulnerability has reached at least 15.Thorn noted that information provided by victims helped the research team uncover previously unidentified attack activity. Unlike thefts from centralized exchanges, correlations between the attackers in this vulnerability exploit require confirmation through on-chain analysis and victim feedback.He added that a single victim reporting less than 1 BTC stolen helped the team discover a previously unknown attack, which siphoned approximately 12 BTC from 126 addresses.According to Galaxy Research's earlier estimates, the Coldcard vulnerability has led to at least three rounds of attacks, with losses amounting to approximately $100 million in BTC. Additionally, Galaxy has identified a suspected fourth round of attacks, which could bring total losses to approximately $130 million.Meanwhile, the incident has also sparked discussions regarding the security of Bitcoin self-custody. Dragonfly Managing Partner Haseeb Qureshi stated that "AI security hardening costing around $2" could potentially have prevented this vulnerability, and noted that some AI models were able to rediscover related vulnerabilities within a relatively short timeframe. However, industry insiders pointed out that current claims about the speed of AI discovering vulnerabilities lack rigorous blind testing and verification.Researchers believe that as AI model capabilities improve, the costs of vulnerability discovery and attacks in the crypto industry may continue to decline, requiring wallet developers to further strengthen code audits and security protections. (Cointelegraph)
Bitget Launches 9th CFD King Championship, Total Prize Pool Reaches 75,000 USDT
Bitget launches the 9th CFD King Championship, with a total prize pool of 75,000 USDT. The event runs from August 3 to August 17. During the event, completing specified CFD trading tasks grants blind box draw opportunities, ensuring a 100% chance to win USDT cash vouchers. Additionally, inviting new users to complete trading tasks allows both new and existing users to receive USDT rewards; users ranked in the top 470 by cumulative CFD trading volume can also jointly unlock a 47,400 USDT ranking prize pool, with the champion receiving 4,000 USDT. For more details, please refer to the Bitget official platform.
Trump’s 2025 crypto revenue totals approximately $1.4 billion; CLARITY Act faces objections from Senate Democrats
Odaily News – On July 30, the minority staff of the U.S. Senate Committee on Banking, Housing, and Urban Affairs released a new analysis raising Democratic objections to the amended draft of the CLARITY Act. The analysis states that Donald Trump’s 2025 crypto revenue amounts to approximately $1.4 billion, and that current ethics provisions still allow him to retain related business arrangements. The analysis reviews World Liberty Financial, the TRUMP meme coin, cryptocurrency investments, staking income, and other business activities, concluding that provisions restricting officials from issuing or sponsoring digital assets would not materially affect the aforementioned financial arrangements. Staff estimated approximately $799 million in revenue related to World Liberty Financial and approximately $635 million from the TRUMP meme coin. Trump’s annual financial disclosure report lists $635.1 million in royalties from a licensing agreement with CIC Digital LLC related to Celebration Coins, along with Bitcoin and Ethereum wallets each valued at over $50 million, and validator rewards obtained through staking agreements on Coinbase. The Senate draft of the CLARITY Act seeks to prohibit covered officials and their spouses from issuing or sponsoring digital assets for compensation during specified periods, while also establishing exceptions for qualified blind trusts, unauthorized third-party activities, continued use of an official’s likeness, and holding digital asset investments.
CLARITY Act's probability of passage in 2026 drops to 30%, US Senator Jon Husted expresses support
on July 28 that U.S. Senator Jon Husted publicly supported the Digital Asset Market Clarity Act, stating that if the United States wants to maintain its leading position in the digital asset field, it needs a clear, enforceable regulatory framework that supports innovation and employment.The CLARITY Act aims to establish the first comprehensive federal framework for crypto regulation in the U.S., dividing jurisdiction between the U.S. Securities and Exchange Commission (SEC) and the U.S. Commodity Futures Trading Commission (CFTC). The bill classifies tokens into three categories, granting the CFTC exclusive regulatory authority over the spot market for digital commodities, while the SEC continues to oversee assets that still resemble securities.Galaxy Research has lowered the probability of the CLARITY Act becoming law by 2026 from 50% to 30%. Alex Thorn, the firm's Head of Research, stated that the 60-vote threshold in the Senate is the main obstacle, and supporters may not yet hold a simple majority.The revised version of the bill proposes to prohibit the President, Vice President, members of Congress, federal judges, and their spouses from receiving compensation through the issuance or sponsorship of digital assets during their term in office until January 2029. It also requires relevant officials to sell their cryptocurrency holdings or place them in a blind trust.
US Senator Cynthia Lummis: Will Continue to Push for Bipartisan Agreement on the CLARITY Act in the Coming Days
Odaily Odaily News: US Senator Cynthia Lummis stated that she thanks Democratic colleagues for their significant contributions to the new draft of the CLARITY Act and pledged to continue pushing for an agreement in the coming days to ensure the bill can ultimately become law. Consumer protection and supporting innovation are not contradictory, and this draft bill proves that both can be achieved simultaneously. Previously, after holding a briefing call with industry stakeholders, US Senate Republicans released a new version of the CLARITY Act. The new text proposes prohibiting the President, Vice President, members of Congress, federal judges, and other officials, as well as their spouses, from receiving compensation through the issuance or sponsorship of digital assets while in office, with the relevant provisions valid until January 20, 2029. Officials subject to these restrictions must also sell their crypto assets and investments in crypto enterprises, or place them in a blind trust over which they have no control; the sale of crypto assets exceeding $1,000 must be disclosed.
Related news
Bitget Launches AEHR Stock Spot Trading Event, Total Prize Pool 40,000 USDT
Bitget launches the AEHR stock spot trading event with a total prize pool worth 40,000 USDT. The event runs from 19:00 on August 19 to 18:59 on August 26 (UTC+8). During the event, users can earn blind box draw chances by completing rAEHR trading tasks.
AI code review missed a critical vulnerability that COLDCARD was exploited for last week
Odaily Planet Daily reported that Bitcoin News stated on the X platform that Coinkite said the vulnerability existed at the boundary between two unrelated firmware submodules, rather than in its Bitcoin or encryption code, which allowed it to evade both manual and AI-assisted code reviews for years. Coinkite stated that after the incident, the company tested cutting-edge AI models including Kimi K3, Claude Fable, and Codex 5.6, none of which identified the flaw. Coinkite is now urging security-critical projects to specifically audit build systems and submodule boundaries, and warned that AI-assisted development could leave similar blind spots in the Bitcoin ecosystem.
Coldcard vulnerability investigation escalates: At least 15 attackers identified, a single victim's findings reveal 12 BTC stolen
Galaxy Digital Head of Research Alex Thorn stated that based on new victim reports received following the incident, the number of attackers exploiting the Coldcard vulnerability has reached at least 15.Thorn noted that information provided by victims helped the research team uncover previously unidentified attack activity. Unlike thefts from centralized exchanges, correlations between the attackers in this vulnerability exploit require confirmation through on-chain analysis and victim feedback.He added that a single victim reporting less than 1 BTC stolen helped the team discover a previously unknown attack, which siphoned approximately 12 BTC from 126 addresses.According to Galaxy Research's earlier estimates, the Coldcard vulnerability has led to at least three rounds of attacks, with losses amounting to approximately $100 million in BTC. Additionally, Galaxy has identified a suspected fourth round of attacks, which could bring total losses to approximately $130 million.Meanwhile, the incident has also sparked discussions regarding the security of Bitcoin self-custody. Dragonfly Managing Partner Haseeb Qureshi stated that "AI security hardening costing around $2" could potentially have prevented this vulnerability, and noted that some AI models were able to rediscover related vulnerabilities within a relatively short timeframe. However, industry insiders pointed out that current claims about the speed of AI discovering vulnerabilities lack rigorous blind testing and verification.Researchers believe that as AI model capabilities improve, the costs of vulnerability discovery and attacks in the crypto industry may continue to decline, requiring wallet developers to further strengthen code audits and security protections. (Cointelegraph)
Bitget Launches 9th CFD King Championship, Total Prize Pool Reaches 75,000 USDT
Bitget launches the 9th CFD King Championship, with a total prize pool of 75,000 USDT. The event runs from August 3 to August 17. During the event, completing specified CFD trading tasks grants blind box draw opportunities, ensuring a 100% chance to win USDT cash vouchers. Additionally, inviting new users to complete trading tasks allows both new and existing users to receive USDT rewards; users ranked in the top 470 by cumulative CFD trading volume can also jointly unlock a 47,400 USDT ranking prize pool, with the champion receiving 4,000 USDT. For more details, please refer to the Bitget official platform.
Trump’s 2025 crypto revenue totals approximately $1.4 billion; CLARITY Act faces objections from Senate Democrats
Odaily News – On July 30, the minority staff of the U.S. Senate Committee on Banking, Housing, and Urban Affairs released a new analysis raising Democratic objections to the amended draft of the CLARITY Act. The analysis states that Donald Trump’s 2025 crypto revenue amounts to approximately $1.4 billion, and that current ethics provisions still allow him to retain related business arrangements. The analysis reviews World Liberty Financial, the TRUMP meme coin, cryptocurrency investments, staking income, and other business activities, concluding that provisions restricting officials from issuing or sponsoring digital assets would not materially affect the aforementioned financial arrangements. Staff estimated approximately $799 million in revenue related to World Liberty Financial and approximately $635 million from the TRUMP meme coin. Trump’s annual financial disclosure report lists $635.1 million in royalties from a licensing agreement with CIC Digital LLC related to Celebration Coins, along with Bitcoin and Ethereum wallets each valued at over $50 million, and validator rewards obtained through staking agreements on Coinbase. The Senate draft of the CLARITY Act seeks to prohibit covered officials and their spouses from issuing or sponsoring digital assets for compensation during specified periods, while also establishing exceptions for qualified blind trusts, unauthorized third-party activities, continued use of an official’s likeness, and holding digital asset investments.
CLARITY Act's probability of passage in 2026 drops to 30%, US Senator Jon Husted expresses support
on July 28 that U.S. Senator Jon Husted publicly supported the Digital Asset Market Clarity Act, stating that if the United States wants to maintain its leading position in the digital asset field, it needs a clear, enforceable regulatory framework that supports innovation and employment.The CLARITY Act aims to establish the first comprehensive federal framework for crypto regulation in the U.S., dividing jurisdiction between the U.S. Securities and Exchange Commission (SEC) and the U.S. Commodity Futures Trading Commission (CFTC). The bill classifies tokens into three categories, granting the CFTC exclusive regulatory authority over the spot market for digital commodities, while the SEC continues to oversee assets that still resemble securities.Galaxy Research has lowered the probability of the CLARITY Act becoming law by 2026 from 50% to 30%. Alex Thorn, the firm's Head of Research, stated that the 60-vote threshold in the Senate is the main obstacle, and supporters may not yet hold a simple majority.The revised version of the bill proposes to prohibit the President, Vice President, members of Congress, federal judges, and their spouses from receiving compensation through the issuance or sponsorship of digital assets during their term in office until January 2029. It also requires relevant officials to sell their cryptocurrency holdings or place them in a blind trust.