News linked to both this project and an event.
Odaily News: Part of hardware wallet manufacturer Coldcard's firmware had a random number generation vulnerability in 2021, causing some mnemonic phrases generated by the devices to carry predictable risks. The vulnerability was only discovered years later, and by then approximately 5,200 addresses and around 2,000 BTC had been stolen, with losses totaling about $130 million. Following the incident, some investors turned to Wall Street custody products. U.S. spot Bitcoin ETFs saw net inflows of approximately $626 million within days of the event. ETF analyst Eric Balchunas noted that security incidents like this could further drive capital flows into ETFs. The Bitcoin core community continues to uphold the principle of self-custody. Casa co-founder Jameson Lopp said recent events should not weaken user confidence in self-custody, as third-party custody carries risks as well. Early Bitcoin Core developer Peter Todd stated that self-custody has a better long-term security track record than centralized institutions. Michael Tanguma, co-founder of Bitcoin custody platform Onramp, said both approaches have flaws: concentrating large amounts of assets in a single institution creates a "honey pot," while hardware wallets face risks related to supply chains, firmware, and random number generation. Michael Tanguma proposed a "multi-institution custody" approach, in which multiple regulated institutions each hold keys through a multi-signature mechanism, and any transaction requires joint signing by multiple institutions to reduce the risk of single points of failure. Critics argue that while multi-institution custody improves security, it also introduces permissioned management, which conflicts with the decentralized ideals Bitcoin originally pursued. As Bitcoin enters pension funds, trusts, and institutional asset allocation, the industry is seeking custody solutions suitable for long-term wealth management. How to strike a balance among security, decentralization, and usability remains a challenge facing the Bitcoin ecosystem.
Mersinger pointed out that the bill explicitly prohibits the portion of stablecoin holding rewards equivalent to bank deposit interest, but allows reward mechanisms based on user activity, consistent with the credit card points model; regarding DeFi regulation, Section 10301 of the bill requires the SEC to establish rules for protocols that are "nominally decentralized, substantially controllable," rather than exempting them, while Section 10201 has incorporated digital commodity brokers into the full reporting obligations under the "Bank Secrecy Act" and allocated $3 billion to support state-level enforcement, contrary to the "Wall Street Journal"'s claim of "inadequate regulation of illicit finance."
According to insiders, a recent wave of sophisticated cyberattacks has targeted multiple large asset management institutions on Wall Street, with attackers attempting to infiltrate the companies' information systems. Several major global hedge funds have become targets of the attacks, including Two Sigma Investments, Citadel, and Point72 Asset Management. In addition, multiple private equity firms have also been attacked.It is currently unclear who the attackers are, how the attacks were carried out, or whether sensitive data has been compromised. The insiders requested anonymity as the matter involves non-public information.This incident has once again drawn market attention to cybersecurity risks facing financial institutions. As asset management companies increasingly rely on complex information systems, algorithmic trading, and cloud infrastructure, the financial industry is becoming a key focus for cyber attackers. (Bloomberg)
Bank of America CEO Brian Moynihan has joined a group of Wall Street leaders in expressing serious concerns about artificial intelligence models such as "Mythos" developed by Anthropic. "This marks a significant shift in workload, as well as the speed at which these tools can impact system vulnerabilities, and how quickly we must respond," Moynihan stated. In recent months, the rapid evolution of AI models has prompted the financial industry and the U.S. government to begin assessing potential threats.Anthropic claims that the Mythos model, launched earlier this year, has demonstrated excellent performance in identifying system vulnerabilities. Bank of America is among the Wall Street institutions authorized to use Mythos, employing the model to test its own systems and share information with peers. Currently, the model has not been made available to the public; JPMorgan Chase CEO Jamie Dimon warned earlier this week that broadly opening the system to the public would be as dangerous as "giving a ballistic missile to an individual." (Bloomberg)
According to Fortune, DeFi asset management and risk analysis company Gauntlet completed a $125 million financing round, exclusively invested by Japanese financial group SBI Holdings. The financing was completed in June this year, and the specific valuation was not disclosed. This is Gauntlet's largest financing round since its establishment in 2018, far exceeding its $24 million Series B round in 2022 led by Ribbit Capital at a $1 billion valuation. Gauntlet was founded by former Wall Street quantitative trader Tarun Chitra. It initially focused on providing stress testing and vulnerability analysis services for DeFi protocols. Later, as the DAO governance model waned, it gradually transitioned to a "treasury curation" business—assessing yield strategy risks through quantitative analysis to help institutional investors manage digital asset allocation. Currently, its clients include asset management giant Apollo, Coinbase, and stablecoin issuer Circle.
According to The Wall Street Journal, blockchain public-chain data analysis shows that Iranian entities have conducted over $3.84 billion in transactions via the cryptocurrency exchange CoinEx to circumvent U.S. economic sanctions. Investigators traced funds linked to two digital wallets controlled by the Central Bank of Iran and found connections to the $1.5 billion stolen by North Korean hackers from the Bybit exchange. After flowing through complex, multi-layered transaction paths, these funds ultimately entered CoinEx—making it one of the central channels through which Iran uses cryptocurrencies to bypass sanctions.
the U.S. government's export controls and access restrictions on Anthropic's models, Fable 5 / Mythos 5, were partly driven by Amazon's cybersecurity research and AWS CEO Andy Jassy's communications with the White House.It is understood that research submitted by Amazon indicated that through a series of prompt tests, researchers could induce Fable 5 to output sensitive information potentially usable for cyberattacks, raising security concerns. Subsequently, Andy Jassy reported these findings to the U.S. government level, prompting the White House to implement further restrictions, including banning foreign users from accessing the model.Meanwhile, former U.S. Commerce Department official Kate Koren revealed that the White House's existing policy stance towards Anthropic may have also influenced this decision. This is because Anthropic has disagreements with the White House over the boundaries of AI safety, including refusing to use its models for mass surveillance or lethal autonomous weapons systems. Although the two sides had eased tensions and expanded cooperation earlier this year, this incident could reignite strained relations between them. (The Wall Street Journal)
The Resolv Foundation has announced its recovery plan following the protocol security incident. USR/wstUSR tokens held and snapshot-recorded prior to the incident will be redeemed for USDC at a 1:1 ratio, while USR/wstUSR acquired after the incident will be redeemed at a 1:0.5 ratio. RLP holdings will be restored at a core redemption rate of 0.71 USDC per token, with additional RESOLV token allocations based on a reference price of $0.03. The Foundation stated that eligible users may claim their recovery funds between May 26, 2026, and August 26, 2026.
According to the Wall Street Journal, US President Donald Trump had a tense and heated phone call with Israeli Prime Minister Benjamin Netanyahu on Tuesday evening. According to sources, Netanyahu strongly criticized the agreement aimed at ending the war with Iran during the call, while Trump defended the diplomatic process. Israel has long been skeptical about whether Iran will adhere to any agreement to dismantle its nuclear program and halt attacks on regional countries. According to insiders, Netanyahu reiterated these positions to Trump during calls on both last Sunday and Tuesday. However, Trump was not convinced. He told Netanyahu that he would continue to push for an agreement to prevent Iran from acquiring nuclear weapons. Trump also stated that if Iran fails to show greater flexibility in negotiations, it may face a new round of strikes. (Golden Ten)
Roaring Kitty, the protagonist of the GameStop "Retail vs Wall Street" saga and the king of meme stocks, had his official X account allegedly compromised in the early hours of today. The hacker posted the contract address of the meme coin Red Kitten Crew (RKC), causing the token's market cap to briefly reach $12 million before plummeting to $1.8 million.Shortly afterwards, Roaring Kitty appears to have regained control of the account and deleted the tweet containing the contract address. Roaring Kitty himself has yet to issue a clarifying statement, with the community widely believing that the posting of the meme coin contract address was due to a brief account compromise.
According to CoinDesk, Angus Fletcher, Head of Digital Assets at State Street, stated at Consensus Miami that recent DeFi attack incidents highlight traditional financial institutions’ need for blockchain asset security and risk management frameworks. He emphasized that before trillions of dollars worth of real-world assets (RWAs) are tokenized, the industry must urgently address cross-chain interoperability, legal ownership, and security safeguards.
According to the Wall Street Journal, algorithm development company MicroAlgo Inc. has announced the launch of a quantum technology–based blockchain architecture that enhances transaction security and transparency by integrating cyclic Quantum Secure Channels (QSC) with Quantum Key Distribution (QKD). The architecture features a four-layer design: a quantum communication layer, a blockchain core layer, a smart contract layer, and an application layer. QKD enables highly secure key generation and distribution, while quantum encryption safeguards transaction data against theft and tampering—and remains resistant to attacks from quantum computers.
: Iran has submitted a new proposal to Washington aimed at ending the war, which shows signs of compromise and is intended to restart negotiations to resolve the deadlock that is exacting a heavy toll on its economy. According to sources, Iran's new proposal moves a step closer to the US: it suggests discussing Tehran's conditions for reopening the Strait of Hormuz simultaneously with the US commitment to cease attacks and lift the blockade on Iranian ports. Previously, Iran had demanded that the US lift the blockade as a prerequisite for starting negotiations and required the US to agree on terms for ending the war before discussing the future management of the strait and nuclear program. The sources also noted that the new proposal then suggests discussing issues related to Iran's nuclear program in exchange for the US implementing sanctions relief. Iran has informed mediators that if Washington is open to this new proposal, Iran is prepared to travel to Pakistan for talks early next week. (The Wall Street Journal)
According to The Wall Street Journal, the White House has signaled its opposition to Anthropic’s plan to expand the usage scope of its AI model, Mythos. Anthropic recently proposed granting access to Mythos for approximately 70 additional companies and institutions, which would bring the total number of authorized entities to around 120. In response, government officials explicitly objected on security grounds. Sources familiar with the matter said some White House officials are concerned that Mythos possesses the capability to launch cyberattacks and cause large-scale disruption online, viewing the expansion of access as a security risk. Additionally, some officials have questioned Anthropic’s computational resources, expressing doubts about whether the company can simultaneously support a significantly increased number of users while ensuring effective government access to and use of the system. Currently, although both sides aim to ease tensions, the disagreement over Mythos access remains unresolved.
According to The Wall Street Journal, North Carolina Republican Senator Thom Tillis said Sunday local time that he would support the confirmation of Kevin Warsh as Federal Reserve Chair, thereby clearing the final major hurdle for Trump’s chosen successor to Powell. Tillis had refused for months to vote in favor of Warsh, stating he would not advance any Fed nominee’s confirmation while the Justice Department’s criminal investigation into Powell remained ongoing—calling the probe an attack on the central bank’s independence. However, that investigation appears to have concluded last Friday. (Jin10)
TechFlow News, April 22: According to a Jefferies report cited by Bloomberg, a hacker attack over the weekend resulted in nearly $300 million in losses for a small crypto project and triggered an outflow of approximately $10 billion from the largest decentralized lending platform—potentially dampening Wall Street’s interest in blockchain technology. Andrew Moss, a member of Jefferies’ digital assets research team, noted that banks, asset management firms, and payment companies have spent the past year developing products based on similar technological systems. However, this attack—allegedly carried out by North Korean hackers—may prompt traditional financial institutions to pause their related initiatives and reassess associated risks.
Odaily News Wall Street investment bank Jefferies' analysis indicates that the approximately $293 million attack on Kelp DAO on April 18 exposed critical infrastructure risks, which may prompt traditional financial institutions to reassess the pace of blockchain and tokenization advancement.Jefferies believes the attacker triggered market sell-offs and liquidity stress by minting unbacked tokens and borrowing across platforms. The incident is suspected to be potentially linked to the Lazarus Group and also highlights the single point of failure in the validation mechanisms of cross-chain bridges. As institutions accelerate the tokenization of assets (such as funds, bonds, and deposits), related risks may cause some banks and asset management firms to temporarily pause deployments, prioritizing a review of system security. Especially in scenarios reliant on cross-chain infrastructure, security vulnerabilities could lead to market fragmentation, undermining the practical utility of tokenized assets.Despite short-term confidence being shaken, Jefferies still emphasizes that the long-term trend remains unchanged. Against the backdrop of regulatory progress and continuous infrastructure improvement, use cases like stablecoins still hold growth potential. However, the industry as a whole is still in its early development stage and requires time to enhance system robustness. (CoinDesk)