News Heat Trend
Project Overview
Wallet is a user-friendly platform for efficiently managing crypto assets. By harnessing the power of The Open Network (TON) Blockchain and massive distribution through Telegram Messenger, Wallet has created a streamlined and accessible gateway to crypto for the messenger's 800M+ user base. Wallet's users can effortlessly store, send, and receive digital assets, all on a single autonomous platform within the familiar interface of Telegram.
Binance Wallet Launches SpaceX Tokenized Stock Subscription Campaign, Users with 200 Alpha Points Can Get 500,000 Staking Quota
that, according to an official announcement, Binance Wallet will launch the SPCXx IPO Campaign, offering eligible users the opportunity to subscribe to tokenized SpaceX shares through xStocks. The subscription window is from 16:30 to 12:00 (UTC+8) on June 11 to June 12.The announcement indicates that the subscription target is the SpaceX tokenized stock SPCXx, with an indicative price of 135 USDC per share, corresponding to an implied valuation of approximately $1.75 trillion. Subscriptions are supported in USDC, with a minimum subscription amount of 100 USDC, and a 5% underwriting service fee will be charged.This event employs a Binance Wallet Alpha Points interval quota mechanism, where users with Alpha Points greater than 0, 40, 100, and 200 can obtain corresponding staking quotas of 20,000, 100,000, 200,000, and 500,000, respectively. Users with successful subscriptions will receive the SPCXx token after the issuance is completed.Binance stated that SPCXx does not represent direct ownership of SpaceX shares. Holders do not have shareholder rights such as voting rights or dividend rights, and a subscription application does not guarantee final allocation.
Bitget Wallet Opens SpaceX Tokenized IPO Subscription—$10 Minimum Investment, No Threshold
Bitget Wallet has opened the first subscription for SpaceX’s tokenized IPO stock, SPCXx, with a total quota of $3 million. The minimum subscription amount is $10 per user, and the maximum per user is $5,000—on a first-come, first-served basis. SPCXx is issued by xStocks, a tokenized stock trading platform. The subscription price is $135, and underwriters will charge an additional 5% fee. Subscriptions open at 4:00 PM Beijing Time on June 9 and close at 4:00 PM Beijing Time on June 11. Upon completion of the subscription period, SPCXx tokens will be automatically sent to users’ wallets, with distribution expected to be finalized by 8:30 PM Beijing Time on June 12. This subscription requires no overseas brokerage or exchange accounts, VIP tier, or holding prerequisites. Users may pay directly using stablecoins—including USDT and USDC—on Base, Ethereum, BNB Chain, Solana, and TRON. The SpaceX tokenized IPO operates via xStocks—a collaboration between Bitget Wallet and Backed. The tokenized stocks issued are fully backed 1:1 by underlying assets held by Backed. Note that the $135 subscription price is not the final fixed issuance price; the final IPO price will be determined by the issuer and underwriters based on a comprehensive assessment of order book demand, market conditions, and valuation factors. During the subscription period, users typically see only a reference price.
X Layer and xStocks Forge Strategic Partnership, OKX Wallet to Integrate Tokenized Stock Assets
Odaily reports, according to official sources, X Layer has entered into a strategic partnership with xStocks, a regulated tokenized stock issuance platform. Together, they will promote the integration of tokenized stock assets into the X Layer ecosystem and make related trading services accessible to OKX Wallet users. In the future, users will be able to trade xStocks-related assets 24/7 within the OKX Wallet, benefiting from the settlement, liquidity, and distribution capabilities provided by X Layer. The two parties will also launch a fast-listing mechanism to accelerate the tokenization and trading circulation of popular stocks and thematic ETFs within a compliant framework.It is reported that X Layer is committed to building on-chain infrastructure for financial assets, covering key areas such as settlement, liquidity, and distribution. xStocks has previously facilitated over $31 billion in cumulative tokenized stock trading volume and has become the first major issuer to commit to providing asset depth on X Layer, driving the expansion of tokenized stock scale.
TownSquare Announces $10 Million Monad-Based Yield Vault in Collaboration with Native
TownSquare, an infrastructure provider for institutional yields and cross-chain lending brokerage services, has partnered with Native, a non-custodial automated trading infrastructure, to launch a $10 million yield-generating vault on the Monad L1. This vault will support assets including USD1, USDC, cbBTC, and MON, offering higher yields than conventional lending through trading-based yield generation. This marks TownSquare’s first collaboration with a trading-based yield manager. The partnership aims to bring real-world asset (RWA) and stablecoin institutional yields to a broader user base. Native is a close partner of Binance Wallet and Buidlpad, having previously launched vaults for BNB and wETH on BNB Chain and Ethereum—demonstrating its stability, scalability, and ability to generate yields for liquidity providers (LPs) managing tens of millions of dollars. This initiative also represents the first trading-yield vault on the Monad chain. Native already operates credit pools across multiple EVM chains with over $35 million in liquidity, achieving daily trading volumes of $50–100 million and cumulative trading volume exceeding $25 billion. Its Proactive Market Making (PMM) structure enables retail users to access institutional-grade trading yields. TownSquare previously launched a $100 million USD1 liquidity program and has raised over $16 million to date—including funding from this collaboration.
Non-custodial crypto wallet Sorted Wallet raises $4.4M in seed funding, co-led by Tether and Gnosis
non-custodial crypto wallet Sorted Wallet has completed a $4.4 million seed funding round, co-led by Tether and Gnosis with a $3.4 million equity investment. Vox Solutions provided an additional $1 million in strategic support, with angel investors including Movement, Angel Invest Group, and the founder of RWA.io also participating. (The Block)
Sorted Wallet, a non-custodial crypto wallet, has closed a $4.4 million seed funding round co-led by Tether and Gnosis.
According to The Block, non-custodial crypto wallet Sorted Wallet has raised $4.4 million in seed funding. Tether and Gnosis co-led a $3.4 million equity financing round, while Vox Solutions provided $1 million in strategic support. Angel investors—including Movement, Angel Invest Group, and the founder of RWA.io—also participated in the round.
Figure Co-founder to Launch The Wallet Co, Integrating RWA, Prediction Markets, and AI Agents
Odaily News Figure Co-founder and Executive Chairman Mike Cagney announced that the company will launch a mobile application called The Wallet Co, designed to combine the ease of modern fintech with self-custody and blockchain-native products.The Wallet Co will offer features such as instantly spendable interest-bearing cash, RWA yields, and securities prediction markets, with an AI Agent built into every wallet.Additionally, The Wallet Co is publicly hiring for operations and compliance lead roles, requiring relevant experience in KYC/AML, payments, and fund flows.
Bitcoin.com Wallet Integrates UAE's First CBUAE-Registered USD Stablecoin USDU
Odaily News: Cryptocurrency platform Bitcoin.com has announced the integration of USDU into its self-custody Bitcoin.com Wallet, serving millions of wallet users. USDU, issued by Universal Digital Intl Limited (Universal), is the first USD stablecoin registered as a foreign payment token by the Central Bank of the UAE (CBUAE). USDU is an Ethereum ERC-20 token, with each token backed 1:1 by liquid USD reserves held by regulated banks in the UAE. The reserves are independently attested monthly by a third-party accounting firm, with reports published on Universal's official website. Bitcoin.com Wallet's web and mobile versions will support self-custody holding, sending, and receiving of USDU. Bitcoin.com will accept USDU as payment for designated services and plans to enable its use for payments between users and merchants within its products. The wallet will also offer stablecoin education and Learn-to-Earn content. Exchange and buy/sell functionalities will be launched after support from third-party service providers, with availability varying by jurisdiction. (Bitcoin.com News)
Ledger: Coldcard Vulnerability Losses Reach Approximately $130 Million, Hardware Wallet Security Needs to Adapt to AI
Odaily News: Hardware wallet manufacturer Ledger has stated that the recent Coldcard vulnerability indicates the hardware Bitcoin wallet industry needs to reassess its security model. Ledger CTO Charles Guillemet stated that Ledger devices were not affected, as their recovery phrases are generated by a hardware random number generator built into a certified secure element. Coldcard manufacturer Coinkite disclosed last week that its air-gapped Coldcard Bitcoin hardware wallet contains a vulnerability traceable to firmware versions from March 2021. The vulnerability uses a software fallback mechanism to generate wallet recovery seeds, allowing certain private keys to be guessed, with related losses reaching approximately $130 million. Coinkite released a fixed firmware on Sunday and urged affected users to transfer funds to newly generated wallets. Charles Guillemet stated that open source is different from being audited — the flaw had existed in public code for over five years, and AI is enabling attackers to scan code and identify vulnerabilities at machine speed. Charles Guillemet also said that over the past two years, Ledger has combined AI with security engineers and cryptography experts to review code and identify vulnerabilities. He believes that when evaluating hardware wallets, users should understand how randomness is generated and whether that process has received independent certification.
Kraken Chief Security Officer: Coldcard Vulnerability Leads to Over $90 Million in Bitcoin Stolen, Hardware Wallet Industry Testing Mechanisms Require Urgent Overhaul
According to Cointelegraph, Coinkite, the manufacturer of Coldcard hardware wallets, disclosed that its devices have contained a random number generator (RNG) vulnerability persisting for up to five years since March 2021. The vulnerability stemmed from a firmware upgrade that mistakenly routed wallet seed generation to a less secure MicroPython pseudo-random number generator (PRNG), rather than the originally designed true random number generator (TRNG). Since code reviews only verified the existence of TRNG code without confirming whether it was actually invoked, the vulnerability remained undetected for a long period. To date, over 4,500 addresses have been compromised, with nearly $90 million worth of Bitcoin stolen. Kraken Chief Security Officer Nick Percoco stated that this incident should serve as a "wake-up call" for the hardware wallet industry, calling for the introduction of independent third-party testing mechanisms to mandate verification of whether the entropy sources actually invoked by production firmware are certified. Coinkite has suspended all device shipments and destroyed affected inventory after confirming the vulnerability, and stated it will cooperate with law enforcement agencies across multiple countries to trace the responsible parties.
Bloomberg ETF Analyst Questions Coldcard Team Size: Approximately 5-Person Team Undertaking Critical Wallet Security Responsibilities Poses Risk
Bloomberg Senior ETF Analyst Eric Balchunas commented on the Coldcard wallet security incident, questioning whether a company with only about 5 employees is suitable to undertake such critical Bitcoin storage responsibilities. He stated that the number of employees behind Coldcard "seems unbelievably low," asking whether people would be willing to store their life savings in a bank with only 5 employees headquartered in Canada. In the crypto industry, this might be viewed as a feature, but from a traditional finance perspective, it becomes a clear risk signal. Balchunas further stated that, in comparison, institutions with larger teams such as Coinbase and Ledger may hold advantages in security investment and operational capabilities, even if users need to bear higher transaction costs. Bitcoin ETFs offer another option: investors can obtain the security guarantees provided by large, professional, regulated financial institutions while also enjoying lower management fees.
IRS Issues Fraud Alert: Fake Crypto Tax Letters Target Wallet and Exchange Credentials
Odaily News: The U.S. Internal Revenue Service (IRS) issued a fraud alert on July 30, warning that scammers are mailing counterfeit IRS notices requiring cryptocurrency holders to register through a non-existent "Digital Asset Compliance Portal" before an urgent deadline. Each fraudulent letter contains a QR code that directs recipients to a website impersonating IRS.gov. The fake portal may request personal information, cryptocurrency wallet details, exchange login credentials, recovery phrases, private keys, or other data that could be used for theft. Cryptocurrency exchange Coinbase and cybersecurity firm Darktower traced the related infrastructure to a domain registered through a Hong Kong-based registrar shortly before the letters were distributed. Investigators found that the website is hosted in Romania, on a network previously associated with phishing pages impersonating financial institutions.
Cash App Expands Crypto Support via MoonPay, 50 Million Users Can Buy ETH, SOL, XRP, and USDT
Odaily News: Payment app Cash App is expanding its cryptocurrency services through crypto payment platform MoonPay, allowing 50 million users to purchase tokens such as ETH, SOL, XRP, and USDT. Additionally, users can top up major wallets like Ledger, BitPay, Trust Wallet, MetaMask, and Uniswap through Cash App. Previously, Cash App's crypto services only supported Bitcoin, with USDC support added earlier this year. (CoinDesk)
B.AI Announces DeepSeek-V4-Flash Fully Free for Limited Time, Stacking Multiple Benefits to Incentivize Ecosystem
The B.AI platform officially announced that the DeepSeek-V4-Flash model has simultaneously launched a limited-time free, unlimited usage service on both Web Chat and API endpoints, allowing developers and ordinary users to access top-tier computing power at zero cost. Meanwhile, the platform is introducing multiple benefits: New users logging in via Binance Wallet, BitgetWallet, or imToken can claim 1 million Credits, and receive an additional 300,000 by entering an invitation code, cumulatively enjoying up to 1.3 million in free quota; recharging also yields up to $100 in points rebates, and inviting friends to register grants long-term rebate benefits. B.AI will continue to release preferential benefits in the future, lowering the threshold for AI application innovation.
CZ transferred approximately $965,000 in crypto assets to Giggle Academy and announced the deactivation of public wallet addresses.
According to monitoring by on-chain analyst Onchain Lens (@OnchainLens), Changpeng Zhao (CZ) transferred 1,440 BNB (approximately $872,000) and 182,600 Binance Life tokens (approximately $93,000) to Giggle Academy's Gnosis multisig wallet early this morning Beijing time, totaling approximately $965,000. CZ stated that the aforementioned assets were all stored in the public wallet address he used when testing Trust Wallet, and he will stop using this address after the donation is completed.
1 Day Countdown! B.AI Announces DeepSeek-V4-Flash Will Be Fully Open for Free on August 17
Only 1 day remains until DeepSeek-V4-Flash is fully available for free on the B.AI platform on August 17. At that time, the web interface and API will go live simultaneously, allowing users to freely enjoy full-scenario experiences such as code execution, complex Agent tasks, and long text processing. To empower developers to use DeepSeek without worrying about costs, B.AI is simultaneously launching three benefits: New users logging in via Binance Wallet, Bitget Wallet, or imToken wallet can claim 1 million free Credits; entering an invitation code adds another 300,000, bringing the cumulative total to up to 1.3 million; both new and existing users who recharge can enjoy extra Bonus Credits of up to 100 USD. Please note that accounts must retain a small amount of Credits for identity verification; please prepare in advance. The specific launch time will be announced soon; please stay tuned to B.AI official updates.
DeepSeek-V4 Price Increase Imminent! B.AI Major Benefits Coming Soon
Recently, DeepSeek-V4 announced impending price increases and the introduction of peak-valley pricing. On August 15, the B.AI platform announced a major benefits plan to help developers use DeepSeek without fear of costs. New users logging in via Binance Wallet, Bitget Wallet, or imToken wallet can claim 1 million free Credits; entering an invitation code adds another 300,000, totaling up to 1.3 million. Both new and existing users can also enjoy extra Bonus Credits of up to $100 upon recharge. Users can prepare their B.AI accounts in advance to unlock benefits early.
Alameda Research Transfers $8.25 Million Worth of SOL to BitGo Custody Wallet, Possibly for FTX Creditor Repayment
According to Arkham monitoring, Alameda Research-associated addresses transferred a total of $8.25 million worth of SOL to BitGo custody wallets via 24 transactions, speculated to be for distribution to FTX creditors. Arkham data shows that Alameda currently still holds SOL worth over $200 million.
Rabby Wallet Fixes Silent Signature Extraction Vulnerability, Users Need to Update Plugin Promptly
As disclosed by security researcher V12 (@v12sec), the Rabby Wallet browser extension contains a silent signature extraction vulnerability that allows attackers to extract wallet signatures via malicious websites without user awareness, thereby draining wallet assets. The conditions required to trigger this vulnerability are extremely limited: users must simultaneously meet two conditions—connecting to a malicious website and manually setting the auto-lock timer to 10 minutes. Other timer settings are unaffected, and the mobile app is also unaffected. Rabby Wallet officially stated that a fix update was released on August 11 following the vulnerability's discovery. No actual exploitation cases have been detected so far. Users are advised to confirm as soon as possible that the extension has been updated to the latest version.
BitBox Discloses Two Severe Hardware Wallet Vulnerabilities, Fixed in Firmware v9.26.5
Odaily News - Bitcoin News announced on the X platform that BitBox has disclosed two severe hardware wallet vulnerabilities, stating there is currently no evidence that these vulnerabilities have been exploited or led to user fund theft. All disclosed issues have been fixed in firmware v9.26.5, and BitBox urges all users to update immediately. An internal security audit uncovered two severe vulnerabilities, along with new details regarding a previously fixed bootloader vulnerability. One vulnerability affecting BitBox Multi devices could allow a malicious host to execute arbitrary code and install malicious firmware on devices that have not yet completed setup. Another vulnerability in Silent Payments could allow an attacker to exploit a malicious host device to redirect funds to unintended addresses, resulting in Bitcoin being locked and potentially enabling extortion attacks. BitBox also disclosed that the previously fixed bootloader vulnerability could allow attackers to trick users into installing malicious firmware capable of stealing funds.
SafePal Discloses Order Plugin Security Incident: Information of Approximately 39,800 Users Exposed; Wallet Private Keys and Seed Phrases Unaffected
Odaily News: Crypto wallet service provider SafePal recently issued a security announcement stating that the company discovered a vulnerability in its order tracking plugin, which led to unauthorized access to certain customer information.SafePal stated that the incident affects approximately 39,798 users, involving customers who placed orders between March 2, 2025, and April 11, 2026. The leaked information includes names, email addresses, shipping addresses, phone numbers, and order-related data such as purchase records.The company emphasized that the incident did not involve users' wallet security data, including seed phrases, private keys, wallet passwords, other wallet credentials, bank account information, payment card numbers, and government-issued identification documents, all of which remain unaffected.SafePal stated that the relevant vulnerability has now been fixed, and additional security measures have been implemented to strengthen the order system's protection. Affected users have received individual notifications via email. Users can also check whether they have been affected through the official page by entering their order number and shipping country.SafePal reminds users to remain vigilant, not to disclose seed phrases, private keys, or passwords to anyone, and to be cautious of phishing emails or fraudulent activities such as impersonated customer service that may arise in connection with this incident.
DefiLlama delays mobile app launch due to phishing impersonators on Apple's App Store
Odaily News, DefiLlama founder 0xngmi, of the crypto data analytics platform, stated that the team spent months asking Apple to remove phishing apps impersonating DefiLlama from the App Store, which delayed the mobile app's launch until all such counterfeit apps had been removed. 0xngmi noted that after the team downloaded one of the malicious apps and documented a small crypto wallet being stolen, Apple removed it within days. In 2024, the App Store also saw counterfeit apps impersonating Rabby Wallet and Curve Finance; in November 2023, a fake Ledger Live app on the Microsoft Store siphoned off $588,000 across 38 transactions. (Cointelegraph)
Operations Ceased, SecondFi Wallet Migration Tool Launches August 13, Affected Asset Recovery Portal Expected by September 10
: Cardano ecosystem wallet project SecondFi has announced the launch of a wallet migration tool and revealed a recovery plan for assets affected by the June 2026 security incident. As the project will cease operations, users are required to migrate remaining assets still held in SecondFi wallets. The migration tool is expected to go live on August 13, supporting the transfer of eligible ADA, Cardano native tokens, and NFTs to new Cardano wallets created with service providers of the users' choosing. Currently, the tool only supports Cardano network assets; non-Cardano assets must be transferred separately through corresponding network and wallet processes. SecondFi stated that the migration tool has passed an independent security assessment by security firm Bitdefender. For affected assets, SecondFi plans to launch a recovery portal before September 10, where users can verify wallet ownership via zero-knowledge proofs (ZK Proof) and submit asset claims. SecondFi reminds users to only rely on information published through official channels, including @secondfiapp, @secondfi_jp, and the official support website, to guard against phishing sites and impersonating accounts.
Sui Co-Founder Leases Factory to Mass-Produce Quantum-Safe Hardware Wallet Cards, Targeting Key Cost Below $10 Per Card
Odaily News: Kostas Chalkias, co-founder and chief cryptographer of Mysten Labs, the development company behind the Sui blockchain, stated that he has leased a dedicated factory at a secret location and plans to scale up production of quantum-safe hardware wallet cards for Sui. The project aims to keep the cost of a single quantum card key under $10, with NFC quantum signing expected to take 1 to 2 seconds. Chalkias noted that the project is being advanced in his personal time outside of work and may include funding to provide cards for users who cannot afford them. The initiative is partly driven by a recent incident involving Coldcard hardware wallets, though the vulnerability was not a quantum attack. Coldcard manufacturer Coinkite disclosed that a firmware vulnerability in Coldcard, traceable to a 2021 update, bypassed the hardware random number chip and generated keys using a predictable software process linked to device serial numbers. Attackers have been moving funds since July 30, with losses climbing to approximately 2,055 BTC, affecting over 7,700 addresses and nearing a value of $130 million. At the protocol level, Sui plans to integrate two quantum-resistant signature schemes approved by the U.S. National Institute of Standards and Technology (NIST), designed for everyday accounts and high-value Move vaults, respectively. Existing accounts can be rotated to quantum-safe keys based on their original recovery phrases, without needing to migrate to new wallets. (Bitcoin.com News)
Binance Launches Agent OS, Connecting AI Applications with Trading, Wallet, and Payment Infrastructure
Binance has launched the Agent OS developer platform, designed to connect AI applications to its trading, market data, wallet, payment, and on-chain features. The platform integrates the Binance API, Binance Wallet Agent Center, the programmable payment tool Binance x402, and Skill Hub, while supporting the Model Context Protocol. Users can authorize agents to access market data, view account information, and execute restricted transactions through compatible tools.
Figure Co-founder to Launch The Wallet Co, Integrating RWA, Prediction Markets, and AI Agents
Odaily News Figure Co-founder and Executive Chairman Mike Cagney announced that the company will launch a mobile application called The Wallet Co, designed to combine the ease of modern fintech with self-custody and blockchain-native products.The Wallet Co will offer features such as instantly spendable interest-bearing cash, RWA yields, and securities prediction markets, with an AI Agent built into every wallet.Additionally, The Wallet Co is publicly hiring for operations and compliance lead roles, requiring relevant experience in KYC/AML, payments, and fund flows.
Rabby Wallet Fixes Silent Signature Extraction Vulnerability, Users Need to Update Plugin Promptly
As disclosed by security researcher V12 (@v12sec), the Rabby Wallet browser extension contains a silent signature extraction vulnerability that allows attackers to extract wallet signatures via malicious websites without user awareness, thereby draining wallet assets. The conditions required to trigger this vulnerability are extremely limited: users must simultaneously meet two conditions—connecting to a malicious website and manually setting the auto-lock timer to 10 minutes. Other timer settings are unaffected, and the mobile app is also unaffected. Rabby Wallet officially stated that a fix update was released on August 11 following the vulnerability's discovery. No actual exploitation cases have been detected so far. Users are advised to confirm as soon as possible that the extension has been updated to the latest version.
Bitcoin.com Wallet Integrates UAE's First CBUAE-Registered USD Stablecoin USDU
Odaily News: Cryptocurrency platform Bitcoin.com has announced the integration of USDU into its self-custody Bitcoin.com Wallet, serving millions of wallet users. USDU, issued by Universal Digital Intl Limited (Universal), is the first USD stablecoin registered as a foreign payment token by the Central Bank of the UAE (CBUAE). USDU is an Ethereum ERC-20 token, with each token backed 1:1 by liquid USD reserves held by regulated banks in the UAE. The reserves are independently attested monthly by a third-party accounting firm, with reports published on Universal's official website. Bitcoin.com Wallet's web and mobile versions will support self-custody holding, sending, and receiving of USDU. Bitcoin.com will accept USDU as payment for designated services and plans to enable its use for payments between users and merchants within its products. The wallet will also offer stablecoin education and Learn-to-Earn content. Exchange and buy/sell functionalities will be launched after support from third-party service providers, with availability varying by jurisdiction. (Bitcoin.com News)
Cash App Expands Crypto Support via MoonPay, 50 Million Users Can Buy ETH, SOL, XRP, and USDT
Odaily News: Payment app Cash App is expanding its cryptocurrency services through crypto payment platform MoonPay, allowing 50 million users to purchase tokens such as ETH, SOL, XRP, and USDT. Additionally, users can top up major wallets like Ledger, BitPay, Trust Wallet, MetaMask, and Uniswap through Cash App. Previously, Cash App's crypto services only supported Bitcoin, with USDC support added earlier this year. (CoinDesk)
BitBox Discloses Two Severe Hardware Wallet Vulnerabilities, Fixed in Firmware v9.26.5
Odaily News - Bitcoin News announced on the X platform that BitBox has disclosed two severe hardware wallet vulnerabilities, stating there is currently no evidence that these vulnerabilities have been exploited or led to user fund theft. All disclosed issues have been fixed in firmware v9.26.5, and BitBox urges all users to update immediately. An internal security audit uncovered two severe vulnerabilities, along with new details regarding a previously fixed bootloader vulnerability. One vulnerability affecting BitBox Multi devices could allow a malicious host to execute arbitrary code and install malicious firmware on devices that have not yet completed setup. Another vulnerability in Silent Payments could allow an attacker to exploit a malicious host device to redirect funds to unintended addresses, resulting in Bitcoin being locked and potentially enabling extortion attacks. BitBox also disclosed that the previously fixed bootloader vulnerability could allow attackers to trick users into installing malicious firmware capable of stealing funds.
Related news
Binance Launches Agent OS, Connecting AI Applications with Trading, Wallet, and Payment Infrastructure
Binance has launched the Agent OS developer platform, designed to connect AI applications to its trading, market data, wallet, payment, and on-chain features. The platform integrates the Binance API, Binance Wallet Agent Center, the programmable payment tool Binance x402, and Skill Hub, while supporting the Model Context Protocol. Users can authorize agents to access market data, view account information, and execute restricted transactions through compatible tools.
Figure Co-founder to Launch The Wallet Co, Integrating RWA, Prediction Markets, and AI Agents
Odaily News Figure Co-founder and Executive Chairman Mike Cagney announced that the company will launch a mobile application called The Wallet Co, designed to combine the ease of modern fintech with self-custody and blockchain-native products.The Wallet Co will offer features such as instantly spendable interest-bearing cash, RWA yields, and securities prediction markets, with an AI Agent built into every wallet.Additionally, The Wallet Co is publicly hiring for operations and compliance lead roles, requiring relevant experience in KYC/AML, payments, and fund flows.
Bitwise to Launch New Wallet for the Tokenized World
Odaily News: Bitwise CEO stated on the X platform that a new wallet for the tokenized world is about to be launched.
Rabby Wallet Fixes Silent Signature Extraction Vulnerability, Users Need to Update Plugin Promptly
As disclosed by security researcher V12 (@v12sec), the Rabby Wallet browser extension contains a silent signature extraction vulnerability that allows attackers to extract wallet signatures via malicious websites without user awareness, thereby draining wallet assets. The conditions required to trigger this vulnerability are extremely limited: users must simultaneously meet two conditions—connecting to a malicious website and manually setting the auto-lock timer to 10 minutes. Other timer settings are unaffected, and the mobile app is also unaffected. Rabby Wallet officially stated that a fix update was released on August 11 following the vulnerability's discovery. No actual exploitation cases have been detected so far. Users are advised to confirm as soon as possible that the extension has been updated to the latest version.
Binance Alpha Launches Third Wave of Stable Airdrop, Claim Requires at Least 243 Alpha Points
Binance Wallet announced that the third wave of the Binance Alpha Stable (STABLE) airdrop has launched. Users holding at least 243 Binance Alpha points can claim 1,053 STABLE tokens on the Alpha event page; claiming will cost 15 Alpha points. If the rewards are not fully distributed, the points threshold will decrease by 5 points every 5 minutes. Users must confirm the claim within 24 hours, otherwise it will be considered forfeited.
Bitcoin.com Wallet Integrates UAE's First CBUAE-Registered USD Stablecoin USDU
Odaily News: Cryptocurrency platform Bitcoin.com has announced the integration of USDU into its self-custody Bitcoin.com Wallet, serving millions of wallet users. USDU, issued by Universal Digital Intl Limited (Universal), is the first USD stablecoin registered as a foreign payment token by the Central Bank of the UAE (CBUAE). USDU is an Ethereum ERC-20 token, with each token backed 1:1 by liquid USD reserves held by regulated banks in the UAE. The reserves are independently attested monthly by a third-party accounting firm, with reports published on Universal's official website. Bitcoin.com Wallet's web and mobile versions will support self-custody holding, sending, and receiving of USDU. Bitcoin.com will accept USDU as payment for designated services and plans to enable its use for payments between users and merchants within its products. The wallet will also offer stablecoin education and Learn-to-Earn content. Exchange and buy/sell functionalities will be launched after support from third-party service providers, with availability varying by jurisdiction. (Bitcoin.com News)