News linked to both this project and an event.
Odaily News CME Group Chairman Terry Duffy, the operator of the world's largest futures exchange, and Luana Lopes Lara, co-founder of prediction market platform Kalshi, clashed verbally during a U.S. Commodity Futures Trading Commission (CFTC) roundtable in Washington. Duffy questioned whether prediction markets face the same regulatory scrutiny as established exchanges and noted that certain contracts could be subject to manipulation.Terry Duffy stated that CME Group is not a "barker at the circus" and mocked some contracts offered by Kalshi, including the Nathan's Hot Dog Eating Contest contract. Luana Lopes Lara responded that traditional markets and exchanges carry risks as well and that regulators are responsible for identifying and addressing such issues. DraftKings CEO Jason Robins subsequently called on both sides to stop attacking each other's business models.The dispute comes amid ongoing disagreements between federal regulators and states over the regulatory authority of prediction markets, with the central question being whether contracts involving sports, elections, and other real-world events are federally regulated derivatives or gambling products subject to state law. Last week, a Washington state judge ordered Kalshi to stop offering certain contracts. Two days ago, the CFTC instructed Kalshi to continue trading, pushing back against New York state's efforts to block its contracts. (Decrypt)
Odaily News: Cybersecurity firm Check Point Research has discovered that the StopAndProtect ransomware operation has been using nearly 2,000 compromised WordPress websites to spread malware, steal data, monitor victims, and deploy ransomware. The operation was first identified in mid-May.As of July 24, the operation had compromised more than 6,000 unique IP addresses, with 1,852 in the United States, and 630 each in Russia and India. The compromised websites were also used to host malware, relay commands, and store stolen files, screenshots, and activity logs.Attackers lured Windows users into running PowerShell commands through fake CAPTCHA prompts, enabling them to steal credentials and cryptocurrency wallet seed phrases, and spread further across networks and USB devices. Researchers collected more than 31,000 screenshots and over 700 compressed data archives, and believe the attackers may have accidentally infected themselves at some point. (Decrypt)
Odaily News, Cybersecurity firm Malwarebytes has discovered that multiple fake cryptocurrency anti-money laundering (AML) detection websites are impersonating legitimate services such as AMLBot, tricking users into connecting their wallets and authorizing transactions. Legitimate AML checks only require a wallet's public address—there is no need to connect a wallet, approve permissions, or sign transactions.These websites simulate the service process through fake progress prompts and detection results. One of the sites even asks users to deposit a small amount of funds to pay so-called detection fees, after which it displays a "clean, low-risk" result regardless of whether a real check was completed. Connecting a wallet does not directly lead to asset theft, but it does expose the address and asset information, making it easier for scammers to craft transactions for users to approve.Malwarebytes noted that similar scams use the same design and process, only changing the names and logos. Users who have approved suspicious token permissions should revoke those permissions; users who have entered their mnemonic phrases or private keys should treat their wallets as compromised and transfer assets to a new wallet. (Decrypt)
According to Decrypt, cybersecurity company Bitdefender has issued a warning that malware disguised as HD pirated copies of the movie "Odyssey" has spread rapidly within days of the film's release. These files are disguised as normal torrent files with naming conventions such as WEBRip and Blu-ray, but are actually Windows executable programs that automatically install the Lumma Stealer information-stealing trojan upon execution. Lumma Stealer can steal browser passwords, payment information, autofill data, remote desktop credentials, and cryptocurrency wallets, and can also steal authentication cookies; even if the target account has two-factor authentication (MFA) enabled, it is not spared. Attackers also deliberately disguised the malicious file icons to resemble the VLC player, exploiting Windows' default feature of hiding extensions to deceive users.
据 Decrypt 报道，荷兰国家网络安全中心（NCSC）发出警告，攻击者正在积极利用 macOS 屏幕共享功能中的一个身份验证漏洞（CVE-2026-65400，严重性评分 7.1），对将 5900 端口暴露于公网的 Mac 设备发起攻击，成功获取 root 权限后植入门罗币挖矿程序。
Odaily News: The Dutch National Cyber Security Centre (NCSC) has reported that attackers are exploiting a vulnerability in Apple's macOS Screen Sharing feature to take control of devices and install Monero mining programs. Multiple systems with port 5900 exposed to the internet have been compromised, with attackers gaining root access. The vulnerability, tracked as CVE-2026-65400, has a severity score of 7.1 out of 10. It stems from a state management error in the authentication process, allowing remote attackers to bypass login verification without valid credentials. Public proof-of-concept code has already been circulated. Apple has addressed the issue in macOS Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1. The NCSC advises users to update their systems promptly and avoid exposing the Screen Sharing service directly to the internet. (Decrypt)
Odaily News – Cybersecurity firm Bitdefender has reported that, days after the theatrical release of *The Odyssey*, pirated files disguised as HD WEBRips and Blu-ray rips have begun circulating. These files are actually executables that infect Windows devices upon execution and carry the information-stealing malware Lumma Stealer. Attackers disguise the malware using icons that mimic VLC Media Player or video files. Lumma Stealer can harvest browser passwords, payment information, autofill data, remote desktop credentials, and cryptocurrency wallets, as well as steal authentication cookies, potentially compromising accounts even when multi-factor authentication is enabled. Bitdefender states that its products have blocked related downloads and flagged the command-and-control domains associated with this campaign, which bears strong similarities to an operation in 2025 that distributed the same malware disguised as files for *Mission: Impossible – The Final Reckoning*. (Decrypt)
According to Decrypt, Trezor's logistics partner ShipMonk suffered a data breach, leaking the personal information of a total of 13,689 customers. Among them, the names, phone numbers, email addresses, and home addresses of 11,742 individuals were fully obtained, while partial information of another 1,947 individuals was affected. The affected users were all customers who placed orders between May 10 and August 8 in the US, UK, Sweden, Colombia, Brazil, Italy, or Portugal. Trezor emphasized that its own system was not compromised, and devices, private keys, and wallet backups were all unaffected. It reminded users to be vigilant against phishing attacks and never enter wallet backup information online.
Odaily News: After a firmware vulnerability in Coldcard hardware wallets was exploited, approximately 2,100 Bitcoin were stolen, with losses nearing $130 million. On-chain data shows that in the days surrounding the incident, wallets held by long-term holders transferred out approximately 233,000 Bitcoin, valued at around $15 billion. Casa CEO Nick Neuman stated that some of the transferred funds came from Coldcard users migrating to multi-signature wallets, with Ledger and Trezor users also taking similar measures after the event. During the same period, approximately 22,000 Bitcoin were transferred into exchanges. Coinkite has advised users who generated seed phrases using firmware versions 4.0.1 through 4.1.9 to treat their wallets as compromised and immediately migrate to new seed phrases. These versions cover the period from March 2021 to July 2026. (Decrypt)
: Israeli cybersecurity firm A Security has disclosed that researchers, using publicly available AI models and fewer than 20 prompts, discovered vulnerabilities in the annotation tool of the video conferencing platform Zoom and built a working exploit within 24 hours. The related vulnerabilities are tracked as CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415. Attackers can join or host a meeting without requiring any victim action or visible prompts, then attack any participant and take over their device. The attack has been tested across Zoom applications on Windows, macOS, Linux, Android, and iOS. Once an attacker gains control of a device, they can steal personal data, activate the microphone or camera, or install additional malware. A Security reported the first vulnerability to Zoom on June 10, and Zoom issued fixes incrementally from June 22 to July 20. Because server-side protections in end-to-end encrypted meetings cannot filter malicious messages, users are still advised to update to the latest version. (Decrypt)
Odaily News: The North Korean regime stole at least $2.8 billion in crypto assets between January 2024 and September 2025, increasingly laundering them through established criminal networks. According to a report by the Royal United Services Institute (RUSI), a UK-based defense and security think tank, the funds are believed to support its weapons programs. Stolen tokens frequently change ownership before being converted into cash, with third parties sometimes purchasing them at a discount or mixing them with proceeds from investment scams such as "pig butchering" schemes. Cashing out primarily relies on "money mules" recruited in the Philippines, Indonesia, and China, where stablecoins are typically split up and sold through peer-to-peer markets. After the Bybit hack, ZeroShadow found that TraderTraitor moved funds through over-the-counter (OTC) desks, peer-to-peer traders, and Chinese organized crime syndicates. Bybit has recovered $48.4 million and frozen $30.5 million in assets, accounting for roughly 5% of the stolen amount in total. (Decrypt)
Odaily News: Brazil's crypto market has recorded $318.8 billion in on-chain transaction value over the past 12 months, ranking fifth globally in cryptocurrency adoption, with nearly one-third of Latin America's related activity conducted through Brazilian wallets and platforms. Blockchain security firm CertiK stated that virtual asset service providers must submit authorization applications to the Central Bank of Brazil (BCB) by October 30, 2026, accompanied by independent audit reports. On November 10, 2025, the Central Bank of Brazil issued three resolutions clarifying the licensing scope, minimum capital requirements, and foreign exchange rules for virtual asset service providers. Minimum capital requirements for different license categories range from approximately R$10.8 million to R$37.2 million. Among the current approximately 120 service providers, most have not yet obtained formal licenses, and overseas operators must relocate their operations to Brazil within 270 days. Approximately 80% of Brazil's declared cryptocurrency transaction volume is settled via dollar-pegged tokens, with USDT accounting for 88.7% of that share. Total stablecoin transaction volume from 2019 to 2025 reached R$1.13 trillion. CertiK statistics show that the crypto industry suffered losses of $1.32 billion due to hacker attacks and exploit incidents in the first half of 2026, involving 344 events. (Decrypt)
Odaily News: Standard Chartered initiated coverage on Monday of blockchain oracle project Chainlink, projecting LINK to reach $200 by the end of 2030 — roughly 25 times its current price of around $8. The bank's phased targets are $13 by the end of this year, followed by $41, $82, and $133. Standard Chartered estimates that the on-chain tokenized asset market will reach $4 trillion by the end of 2028, with DeFi-deployed assets hitting $2.7 trillion by 2030 — a 37-fold increase from current levels. The bank expects Chainlink fees to grow approximately 25-fold over the same period, assuming token prices track fee growth. Chainlink secures over $110 billion in total value, covering approximately 70% of the value that global DeFi relies on from oracles, with a share exceeding 80% on Ethereum; Aave V3 accounts for 44% of that. Swift, DTCC, Euroclear, JPMorgan, Mastercard, UBS, Fidelity, and S&P Global are all listed as institutions using its services. Chainlink still lags behind LayerZero in cross-chain interoperability. Following the $292 million attack in April, over $7 billion in token value has migrated to Chainlink CCIP, with second-quarter transaction volume reaching $4.9 billion — up 353% year-over-year. Risks include slowing institutional tokenization, pilots not converting to production processes, and technical failures impacting confidence. (Decrypt)
According to Decrypt, non-custodial Bitcoin exchange service provider Boltz announced an indefinite suspension of its Bitcoin exchange services, as the iteration speed of AI-assisted attacks has exceeded its team's vulnerability patching capability. Boltz stated that automated AI probing attacks have continued to increase over the past few months, and multiple vulnerability exploitation incidents have been handled, but recently the pace of attacks has significantly accelerated, and it is suspected that multiple well-resourced attack organizations are simultaneously launching attacks against its platform, rendering the team unable to operate safely during the patching period. Currently, Boltz's TVL is approximately $262,000. Since the platform adopts a non-custodial architecture, users retain custody of their funds throughout the process. The team confirmed that no user funds are at risk, and API refund channels and unilateral refund functions remain operational.
Odaily News: Apple has limited the number of vulnerability reports a single researcher can submit at one time because its security team has received a large number of submissions generated by AI, many of which do not actually contain real flaws. Apple stated that researchers can request a higher limit at any time, and the company is also using AI internally to triage submissions.Bynario, a Milan-based cybersecurity startup, said it used OpenAI's ChatGPT to discover more than 50 vulnerabilities in the latest version of macOS within three weeks, including a privilege escalation chain that could give attackers full control of a Mac device.Bynario stated that it was unable to report this vulnerability because Apple had already rejected further submissions. Bynario CEO Alfredo Pesoli estimated the vulnerability's value on the criminal market at $100,000 to $200,000. Apple said it has reached out to the company and reviewed its work. In June, Apple added a submission cap and a 30-day cooldown period to its security portal. In a recent security update, Apple listed vulnerabilities discovered with the assistance of Anthropic and OpenAI software, with the number of fixes approximately five times that of a normal cycle. (Decrypt)
According to Decrypt, Galaxy Digital has officially launched the "Bitcoin Quantum Readiness Initiative," with three core pillars including: providing up to $5 million in post-quantum cryptography research grants to developers, publishing specialized research reports through Galaxy Research, and establishing a quantum advisory committee composed of scholars from multiple top universities. The initiative targets "Q-Day"—the critical moment when quantum computers utilize Shor's algorithm to crack Bitcoin's elliptic curve encryption, forge signatures, and steal wallet assets. Project Eleven predicts that quantum computers capable of cryptographic threats may emerge as early as 2030, at which point approximately 6.9 million BTC will face exposure risks. The Coinbase Quantum Advisory Committee has also called on developers to immediately initiate migration work. Meanwhile, Trump has signed an executive order setting the deadline for the U.S. federal government to complete post-quantum cryptography migration to December 2031.
: On-chain digital asset management neobank ether.fi has selected Nexus Mutual to provide ETH slashing coverage, covering slashing penalties for its validators up to 15,000 ETH. ether.fi stated that it operates a large-scale validator set on Ethereum, and slashing is a tail risk. This coverage is used to cover validator losses, with a scale exceeding the total historical ETH slashing losses. ether.fi currently manages over $6 billion in assets across products such as Cash, Stake, and Liquid. Since 2019, Nexus Mutual has provided over $7 billion in coverage for smart contract attacks, slashing, and other digital asset risks. (Decrypt)
researchers from the Ethereum Foundation Protocol Security team said in a blog post on Thursday that they have deployed a series of AI agents to test the software relied upon by Ethereum, searching for vulnerabilities in encryption systems, protocol code, and smart contracts. The vulnerabilities discovered by the AI agents include a remotely triggerable panic issue in the libp2p gossipsub peer-to-peer layer used by Ethereum consensus clients. The issue has been fixed and disclosed on Github as CVE-2026-34219. Researchers stated that the AI agents are organized into specialized roles such as reconnaissance, search, patching, and verification, used to find potential attack paths, reproduce faults, and verify their applicability to production code. The Ethereum Foundation stated that AI has not replaced security researchers but has changed the way they work, enabling the team to cover far more scope than manual review. However, it requires researchers to exercise more careful judgment when evaluating a large number of seemingly credible conclusions. (Decrypt)
multiple blockchain and post-quantum cryptography researchers have warned that artificial intelligence (AI) is accelerating the development of quantum computing and could potentially impact the security systems of mainstream blockchains, including Bitcoin and Ethereum, earlier than anticipated.Alex Pruden, CEO of Project Eleven, a firm focused on quantum-resistant infrastructure, stated that the combination of AI and quantum computing is fundamentally reshaping the future security landscape. "People will no longer be able to rely on existing security assumptions as they have in the past," he said.Researchers point out that AI is already being used to optimize quantum error correction, which is one of the key technical bottlenecks in the development of quantum computing. Illia Polosukhin also noted that AI has been accelerating scientific breakthroughs for years, and in the future, there may even be a circular acceleration effect where "AI helps build the next generation of quantum computers."One of the industry's biggest current concerns is the "Harvest Now, Decrypt Later" strategy, where governments or advanced attackers begin mass-collecting encrypted data now, waiting to decrypt it all at once once quantum computing matures. Polosukhin warned that if quantum computers become viable within a few years, "most of today's important data on the internet could be decrypted in the future."Given that most blockchain networks and internet infrastructure currently rely on elliptic curve cryptography (ECC), a sufficiently powerful quantum computer could theoretically derive a private key from a public key, directly breaking wallets and on-chain systems. Simultaneously, AI itself is strengthening hacking capabilities. Pruden stated that AI models are becoming increasingly adept at discovering software vulnerabilities and cryptography implementation flaws, and may even be able to crack some encryption algorithms directly in the future.However, AI is also being used by developers for code auditing, formal verification, and testing post-quantum security systems, creating a "long-term security arms race" with simultaneous upgrades on both the offensive and defensive sides. Researchers believe the most significant change brought by AI and quantum computing together is that the core assumption of "long-term cryptographic reliability" in the digital age is being challenged. Future security systems may shift from "static upgrades" to continuous dynamic evolution. (CoinDesk)
According to Decrypt, Microsoft’s Threat Intelligence team disclosed that attackers had injected malicious code into Mistral AI packages distributed via the PyPI platform. This malicious code automatically executes when developers use the packages on Linux systems, downloading and running a malicious file named <code>transformers.pyz</code> in the background—the filename deliberately mimics the widely used Hugging Face Transformers library to evade detection. Microsoft noted that the malware primarily steals developers’ login credentials and access tokens. It avoids execution on Russian-language systems and includes logic that can randomly delete files on devices located in Israel or Iran. This attack is linked to the “Shai-Hulud” supply-chain campaign launched in September. In response, Mistral stated that its investigation found the attack originated from compromised developer devices, and its corporate infrastructure was not breached.