News linked to both this project and an event.
Odaily Planet Daily reported that Bitcoin News stated on the X platform that Coinkite said the vulnerability existed at the boundary between two unrelated firmware submodules, rather than in its Bitcoin or encryption code, which allowed it to evade both manual and AI-assisted code reviews for years. Coinkite stated that after the incident, the company tested cutting-edge AI models including Kimi K3, Claude Fable, and Codex 5.6, none of which identified the flaw. Coinkite is now urging security-critical projects to specifically audit build systems and submodule boundaries, and warned that AI-assisted development could leave similar blind spots in the Bitcoin ecosystem.
Odaily Planet Daily reported that Bitcoin News posted on X platform, stating that new evidence suggests the anonymous account "switck," who wrote the LibNgU code, may actually be Peter Gray, Co-founder and CTO of Coinkite. This code is at the center of the COLDCARD entropy failure incident. Researchers claim that Gray's GPG key signed dozens of commits by switck, and other identifiers appear to link the two identities together. Bitcoin developer James O'Beirne stated that he had warned Coinkite in May 2025 that the RNG implementation of LibNgU looked suspicious and recommended removing it, but he said the other party responded that if there were issues, they would have already been discovered. Screenshots also show that as early as April 2021, users had already raised questions about the LibNgU rewrite. If these findings are accurate, it means that the engineer who introduced the code was later linked to the theft of over 1,800 BTC, and had received direct warnings about the RNG implementation more than a year before the vulnerability was publicly disclosed.
Odaily Planet Daily Report: Bitcoin hardware wallet manufacturer Coinkite disclosed in late July 2026 that a firmware build error introduced in March 2021 caused some Coldcard wallets to generate mnemonics from a smaller range, reducing the randomness of user private keys. Galaxy Research analysts stated that the Coldcard exploit occurred in multiple rounds, with observed Bitcoin losses rising from approximately $88 million to nearly $114 million within days. Researchers warned that other vulnerable addresses could still become targets, prompting many Coldcard users to move their Bitcoin. Coldcard is a Bitcoin-only wallet that supports offline signing via microSD card and optional QR codes. Launched in 2017, it has long been regarded as one of the security-focused Bitcoin hardware wallets.
Odaily Planet Daily reported that Onchain Lens stated on the X platform that Robinhood CEO Vlad Tenev's X account was hacked.
Odaily Planet Daily reported that the algorithmic stablecoin Balance Coin dropped from $0.9954 to $0.001358, a decline of over 99%. The stablecoin is the native algorithmic stablecoin of the Balance Protocol, designed to maintain a peg to the US dollar. Blockchain security firm PeckShield stated that the depegging occurred following an exploit of the decentralized autonomous organization 42DAO, which governs the Balance Protocol and its BLC token, resulting in a $915,000 loss. TenArmor reported detecting suspicious attacks involving GemJoin and 42DAO on the BNB Chain.
According to Odaily Planet Daily, Ethereum ZK Layer2 Starknet has officially launched the compliant privacy framework STRK20, providing native privacy transaction capabilities for various digital assets on-chain. The framework operates based on a privacy pool mechanism. Once user assets are deposited into the privacy pool, all transactions are encrypted, with details such as transfer addresses and amounts being invisible to the outside. Developers can quickly integrate this privacy system using the accompanying SDK and wallet API, catering to the private transfer needs of various ERC-20 assets. STRK20 incorporates a complete compliance process: users must undergo pre-screening before entering the privacy pool; only upon receiving a legally effective formal query request and after an independent assessment, will the platform selectively disclose specific users, corresponding time periods, or designated transfer records, without revealing the private data of unrelated users.
Odaily Planet Daily reported that Humanity Protocol founder Terence Kwok stated that after suffering a hacker attack of approximately $36 million, which caused the H token to plummet, the project is realigning its strategic direction, gradually shifting from a "decentralized identity + blockchain project" to enterprise-grade AI products and services. It is reported that Humanity Protocol will place less emphasis on the blockchain identity narrative in the future, instead focusing on developing enterprise AI-related products and services. (The Block)
Odaily Planet Daily reported that 23pds, Chief Information Security Officer of SlowMist, posted on X, stating that Curl has fixed 18 security vulnerabilities involving authentication bypass, memory safety, and host verification issues. One of the libcurl vulnerabilities has existed for approximately 25 years. The risks affect a wide range of applications, SDKs, containers, firmware, gateways, and CI/CD environments that rely on libcurl. It is recommended to upgrade curl/libcurl as soon as possible and check for the use of outdated libcurl versions, with particular attention to mTLS, proxy authentication, and connection reuse scenarios.
OpenAI announced an upgrade to its Daybreak network defense toolchain, officially launching the full version of the GPT-5.5-Cyber model tailored for cybersecurity defense scenarios.In the CyberGym benchmark test, which evaluates the ability of AI agents to reproduce known vulnerabilities, GPT-5.5-Cyber achieved a single-model score of 85.6%, surpassing GPT-5.5’s 81.8% and Anthropic Mythos 5’s 83.8%.OpenAI stated that as AI significantly enhances the efficiency of vulnerability discovery, the core bottleneck in cybersecurity is shifting from "finding vulnerabilities" to "automatically fixing them." To this end, the company has simultaneously upgraded the Codex Security plugin, enabling developers to automatically analyze vulnerabilities and generate fix patches within the Codex environment. Since the preview release in March this year, Codex Security has scanned over 30 million code commits and autonomously confirmed fixes for 500,000 security defects. The new version also supports CodeQL query integration and SARIF standard file export.Additionally, OpenAI has partnered with organizations such as Trail of Bits and HackerOne to launch the "Patch the Planet" open-source security project. This initiative provides ChatGPT Pro subscriptions and API credits to over 30 major open-source projects, including cURL and Go, with security expert teams manually verifying patch quality. Regarding the Daybreak partner program, security vendors such as Palo Alto Networks and Wiz have already integrated the relevant capabilities.
Odaily Planet Daily reports that "on-chain detective" ZachXBT released a case analysis stating that in a crypto asset case involving an Indian fraud gang, the individuals involved reported themselves to law enforcement after their assets were frozen, drawing attention.The incident began when a user sought help from ZachXBT, claiming that approximately 5.73 BTC (about $475,000) was frozen on Changelly in March 2025. Subsequent on-chain analysis revealed that these funds could be traced back to multiple social engineering attacks targeting US users and Bitcoin ATM-related thefts, with cumulative losses exceeding $1 million and involving several elderly victims.Investigations showed that the individual provided multiple different explanations for the source of the funds, including "loans," "transfers from the boss," and "investments from 2014–2015," with clear contradictions in the chain of evidence.More notably, the user filed a police report in India in December 2025 attempting to recover the frozen funds (case number 3207-P/2025). Subsequent on-chain forensics and email data analysis indicated that the individual may have acted as a money "mule," with some bank documents inconsistent with their identity information.ZachXBT stated that such cases demonstrate that social engineering attacks and cross-border fund transfers continue to occur, reminding users to avoid interacting with funds from suspicious sources to prevent triggering compliance freezes or legal risks.