News linked to both this project and an event.
Odaily News - Bitcoin News announced on the X platform that BitBox has disclosed two severe hardware wallet vulnerabilities, stating there is currently no evidence that these vulnerabilities have been exploited or led to user fund theft. All disclosed issues have been fixed in firmware v9.26.5, and BitBox urges all users to update immediately. An internal security audit uncovered two severe vulnerabilities, along with new details regarding a previously fixed bootloader vulnerability. One vulnerability affecting BitBox Multi devices could allow a malicious host to execute arbitrary code and install malicious firmware on devices that have not yet completed setup. Another vulnerability in Silent Payments could allow an attacker to exploit a malicious host device to redirect funds to unintended addresses, resulting in Bitcoin being locked and potentially enabling extortion attacks. BitBox also disclosed that the previously fixed bootloader vulnerability could allow attackers to trick users into installing malicious firmware capable of stealing funds.
Odaily News: Crypto exchange Coinbase is exploring the next generation of software development models through its internal AI coding system, Forge. The platform has evolved from an early internal tool into an ecosystem encompassing multiple AI development capabilities, and has become a case study of enterprises adopting Agentic AI.It is understood that Forge was previously known as Cloudbot, and its early version was even named Claudebot. Currently, Forge has become an important part of OpenSWE, an open-source AI coding framework. OpenSWE aims to provide infrastructure similar to an "AI software engineer," including agent orchestration, cloud sandboxes, tool invocation, Slack/Linear/GitHub integrations, sub-agents, and automated Pull Request creation capabilities.One of Forge's most notable features is "Mux." The tool currently has around 600 internal users at Coinbase, allowing engineers to run multiple AI agents simultaneously, transforming traditional serial development processes into a parallel collaboration model. Additionally, Forge includes features such as Slack task routing and "bug-to-fix" automation flows, designed to reduce manual handling of repetitive development tasks.Coinbase's engineering lead, Chintan Turakhia, previously conducted an internal experiment in which nearly a thousand engineers were asked to pause using traditional IDE tools for two weeks, in order to explore which tasks in the development workflow could be automated by AI-driven processes. As AI coding tool usage has increased, Coinbase's AI spending has declined, while Token usage continues to grow. He noted that by building proprietary AI development tools, the company provides employees with an alternative to third-party AI coding services such as those from Anthropic and OpenAI.However, external independent feedback on Forge and Mux remains limited so far, with most public information coming from Coinbase management disclosures. The actual hands-on experience of rank-and-file engineers has not yet been fully shared publicly.Industry observers believe that Coinbase's Forge represents a new direction for enterprise AI applications: companies are no longer just calling general-purpose large models, but are building AI agent systems centered around their own business processes to improve development efficiency, reduce costs, and enhance internal productivity. (Forbes)
Bitcoin News posted on X platform, stating that MARA's Slipstream is now open as a permissionless public service, requiring no client software. This service is particularly important for users transferring funds from vulnerable COLDCARD wallets. Multi-signature spending exposes all public keys and spending conditions. If this transaction enters the public mempool, attackers can immediately match these keys against their pre-computed database of weak COLDCARD private keys, and if they control the majority of keys, broadcast a higher-fee double-spend transaction before the original transaction is confirmed. Slipstream submits transactions directly to miners, keeping them out of the public mempool until mined. MARA recommends using conservative fees to avoid transactions getting stuck. Aside from standard Bitcoin network fees, the service is currently free.
Gate issued an announcement regarding the recent "user asset theft incident," sharing internal comprehensive verification results, analysis of the incident's cause, and progress on subsequent handling. Regarding the verification process and key facts, the announcement stated that after comprehensive verification, materials submitted by the applicant at the time, including account information, real-name information, transaction records, Alipay screen recordings, etc., matched the account completely. According to analysis by the technical team, Alipay screen recordings can only be made by the customer themselves or someone with access to the customer's Alipay account. Alipay possesses an extremely strict real-time risk control system; logging into Alipay on a different device will mandate multi-factor authentication. This indicates a situation involving serious leakage of customer information or device compromise. Regarding the Gate platform audit mechanism, the announcement stated that the Company's security unbinding audit mechanism strictly executes the four-fold verification process of "Multi-channel advance notification + System risk control preliminary screening + Manual multi-layer review + Time protection," and never has nor will it approve any security item change application based on a single material alone. Gate always takes information security and customer data protection as the Company's core management requirements. The issue of internal information leakage mentioned by some parties does not exist. Regarding fund recovery and subsequent handling, the announcement stated that Gate processed the matter with the highest priority immediately after the incident occurred, coordinating security, compliance, legal, business, and other teams to carry out on-chain analysis and asset tracking and freezing. It continues to coordinate with third-party institutions such as Tether to advance fund freezing. Subsequently, it will also actively cooperate with judicial authorities in investigations and data collection. Any substantive progress will be communicated immediately.
Agora, an automated testing framework jointly developed by 0G Labs and research teams from the National University of Singapore, Peking University, and Beijing University of Posts and Telecommunications, has been accepted to ICML 2026. Agora is the first framework to deeply integrate domain-specific knowledge from distributed systems with a multi-agent collaborative architecture for automated vulnerability detection in production-grade consensus protocols. According to the paper, Agora has uncovered 15 previously unknown deep logic bugs (“Deep Bugs”) across mainstream consensus protocols—including Raft, EPaxos, HotStuff, and BullShark—spanning critical security issues such as execution divergence, monotonicity violations, topology flaws, and signature verification failures. Experimental results show that leading large language models—including GPT-5.2 and Claude 4.5—failed to detect any protocol-level vulnerabilities under identical test scenarios. Agora employs hypothesis-driven testing and a multi-agent collaboration mechanism, enabling deep security analysis of complex distributed systems through automated attack-scenario generation, test execution, and dynamic refinement. Beyond consensus protocols, the framework is designed for future extension to domains including database concurrency control, operating system kernels, and Web3 smart contract auditing.
SUPERFORTUNE AI posted on X platform, stating that the team is investigating a GUA security incident that occurred on May 27. The incident led to drastic price fluctuations in the token. Preliminary investigations suggest the incident may involve address tampering during a multi-signature transaction.The announcement states that the original plan was to send additionally unlocked tokens to the airdrop claim contract address. However, during execution, the funds were mistakenly sent to a different hacker address. The team noted that this hacker address had never interacted with any SUPERFORTUNE-related addresses before, making an "address poisoning attack" less likely as the attack vector.Furthermore, SUPERFORTUNE stated that its internal processes include a multi-layered address verification mechanism. The team is continuing its investigation into the incident and will update the community on the latest developments subsequently.
LayerZero Labs posted on platform X, stating that the internal RPC used by LayerZero Labs had been attacked by the Lazarus Group over the past three weeks, compromising the true source of its DVN (Decentralized Verifier Network). Meanwhile, external RPC providers experienced DDoS attacks. The incident affected 0.14% of applications and approximately 0.36% of asset value. LayerZero Labs stated that assets are currently secure, and over $9 billion in funds have been bridged through the protocol since April 19.In response to the security risk, LayerZero Labs has ceased providing services for its DVN in a 1/1 configuration. Default configurations for all pathways will migrate to a multi-DVN model of at least 3/3 or 5/5 signatures. Additionally, regarding an incident from three years ago where a multi-sig holder mistakenly used a hardware wallet for personal transactions, LayerZero Labs has removed that signer and replaced the wallet, while developing a custom OneSig multi-sig system. LayerZero Labs advises developers to lock configurations to avoid reliance on default settings and plans to launch an asset management platform, Console, to enhance security monitoring.
Axelar Network stated that the hacker attack and theft of funds undermine users’ overall trust in blockchain systems and slow down the adoption of the global ledger it envisions. Axelar expressed its support for the LayerZero team in navigating this difficult situation and rebuilding trust. Regarding this approximately $290 million attack, Axelar emphasized that—pending final forensic findings—the incident once again highlights the need for multi-layered security in cross-chain bridge construction. This includes ensuring operational security for bridge operators, validators, and validating nodes; providing proper incentives and training; and removing validators whose technical capabilities are not adequately demonstrated. Additionally, operators must be sufficiently numerous, structurally heterogeneous, diverse, and geographically distributed to prevent ultimate control by a single entity.
According to GlobeNewswire, eToro, a trading and investment platform, announced it has signed an agreement to acquire Zengo, a leading self-custodial crypto wallet provider. This acquisition aims to deepen eToro’s digital asset capabilities and accelerate its strategic initiative to bridge traditional finance with on-chain infrastructure. Founded in 2018, Zengo builds its keyless wallet architecture on Multi-Party Computation (MPC) cryptographic technology. It currently serves over 2 million users across more than 180 countries and regions, and has never experienced a wallet breach since its inception. Following the acquisition, eToro will leverage Zengo’s technological expertise to further support decentralized trading use cases—including tokenized assets, prediction markets, and perpetual contracts. The transaction is subject to customary closing conditions.