News linked to both this project and an event.
Odaily News Figure Co-founder and Executive Chairman Mike Cagney announced that the company will launch a mobile application called The Wallet Co, designed to combine the ease of modern fintech with self-custody and blockchain-native products.The Wallet Co will offer features such as instantly spendable interest-bearing cash, RWA yields, and securities prediction markets, with an AI Agent built into every wallet.Additionally, The Wallet Co is publicly hiring for operations and compliance lead roles, requiring relevant experience in KYC/AML, payments, and fund flows.
Odaily News: Cryptocurrency platform Bitcoin.com has announced the integration of USDU into its self-custody Bitcoin.com Wallet, serving millions of wallet users. USDU, issued by Universal Digital Intl Limited (Universal), is the first USD stablecoin registered as a foreign payment token by the Central Bank of the UAE (CBUAE). USDU is an Ethereum ERC-20 token, with each token backed 1:1 by liquid USD reserves held by regulated banks in the UAE. The reserves are independently attested monthly by a third-party accounting firm, with reports published on Universal's official website. Bitcoin.com Wallet's web and mobile versions will support self-custody holding, sending, and receiving of USDU. Bitcoin.com will accept USDU as payment for designated services and plans to enable its use for payments between users and merchants within its products. The wallet will also offer stablecoin education and Learn-to-Earn content. Exchange and buy/sell functionalities will be launched after support from third-party service providers, with availability varying by jurisdiction. (Bitcoin.com News)
Odaily News: Hardware wallet manufacturer Ledger has stated that the recent Coldcard vulnerability indicates the hardware Bitcoin wallet industry needs to reassess its security model. Ledger CTO Charles Guillemet stated that Ledger devices were not affected, as their recovery phrases are generated by a hardware random number generator built into a certified secure element. Coldcard manufacturer Coinkite disclosed last week that its air-gapped Coldcard Bitcoin hardware wallet contains a vulnerability traceable to firmware versions from March 2021. The vulnerability uses a software fallback mechanism to generate wallet recovery seeds, allowing certain private keys to be guessed, with related losses reaching approximately $130 million. Coinkite released a fixed firmware on Sunday and urged affected users to transfer funds to newly generated wallets. Charles Guillemet stated that open source is different from being audited — the flaw had existed in public code for over five years, and AI is enabling attackers to scan code and identify vulnerabilities at machine speed. Charles Guillemet also said that over the past two years, Ledger has combined AI with security engineers and cryptography experts to review code and identify vulnerabilities. He believes that when evaluating hardware wallets, users should understand how randomness is generated and whether that process has received independent certification.
According to Cointelegraph, Coinkite, the manufacturer of Coldcard hardware wallets, disclosed that its devices have contained a random number generator (RNG) vulnerability persisting for up to five years since March 2021. The vulnerability stemmed from a firmware upgrade that mistakenly routed wallet seed generation to a less secure MicroPython pseudo-random number generator (PRNG), rather than the originally designed true random number generator (TRNG). Since code reviews only verified the existence of TRNG code without confirming whether it was actually invoked, the vulnerability remained undetected for a long period. To date, over 4,500 addresses have been compromised, with nearly $90 million worth of Bitcoin stolen. Kraken Chief Security Officer Nick Percoco stated that this incident should serve as a "wake-up call" for the hardware wallet industry, calling for the introduction of independent third-party testing mechanisms to mandate verification of whether the entropy sources actually invoked by production firmware are certified. Coinkite has suspended all device shipments and destroyed affected inventory after confirming the vulnerability, and stated it will cooperate with law enforcement agencies across multiple countries to trace the responsible parties.
Bloomberg Senior ETF Analyst Eric Balchunas commented on the Coldcard wallet security incident, questioning whether a company with only about 5 employees is suitable to undertake such critical Bitcoin storage responsibilities. He stated that the number of employees behind Coldcard "seems unbelievably low," asking whether people would be willing to store their life savings in a bank with only 5 employees headquartered in Canada. In the crypto industry, this might be viewed as a feature, but from a traditional finance perspective, it becomes a clear risk signal. Balchunas further stated that, in comparison, institutions with larger teams such as Coinbase and Ledger may hold advantages in security investment and operational capabilities, even if users need to bear higher transaction costs. Bitcoin ETFs offer another option: investors can obtain the security guarantees provided by large, professional, regulated financial institutions while also enjoying lower management fees.
Odaily News: The U.S. Internal Revenue Service (IRS) issued a fraud alert on July 30, warning that scammers are mailing counterfeit IRS notices requiring cryptocurrency holders to register through a non-existent "Digital Asset Compliance Portal" before an urgent deadline. Each fraudulent letter contains a QR code that directs recipients to a website impersonating IRS.gov. The fake portal may request personal information, cryptocurrency wallet details, exchange login credentials, recovery phrases, private keys, or other data that could be used for theft. Cryptocurrency exchange Coinbase and cybersecurity firm Darktower traced the related infrastructure to a domain registered through a Hong Kong-based registrar shortly before the letters were distributed. Investigators found that the website is hosted in Romania, on a network previously associated with phishing pages impersonating financial institutions.
As the provider of bank account and card services for crypto wallets and payment card products such as SafePal and Bitget Wallet, Fiat24 stated that due to the growth in user base and trading volume outpacing the expansion of its risk management, compliance, and customer service capabilities, it has suspended crypto asset deposits and temporarily halted new user registrations starting July 14 to upgrade its internal control systems. Its international wire transfers, foreign exchange conversions, and P2P payments remain operational, while the resumption time for crypto asset deposits has not yet been announced.
According to Cointelegraph, Singapore stablecoin payment company Triple-A confirmed its treasury wallet was accessed without authorization, with on-chain investigator Specter estimating losses at approximately $11.8 million. The company stated that customer funds are held in separate trust accounts and were not affected by this incident, and the relevant losses will be covered by the company's own financial reserves. Triple-A has currently restored all services and is collaborating with cybersecurity experts, blockchain forensic agencies, and the Singapore Police Force to investigate and track the stolen assets.
Cardano ecosystem wallet SecondFi announced that due to a cryptographic defect in its wallet software, approximately 16.1 million ADA (worth around $2.6 million) were stolen. The platform will gradually shut down the SecondFi and Yoroi wallet services. This incident has affected 374 wallets. SecondFi stated that an independent investigation by blockchain intelligence agency Groom Lake identified the attackers as a sophisticated external actor and found indicators potentially linked to North Korea's Lazarus Group, though attribution has not yet been confirmed. SecondFi is developing a recovery tool based on zero-knowledge proofs to help affected users recover assets while limiting the information that needs to be shared. The tool is still being tested and will undergo third-party audits before its planned release in August. SecondFi is also preparing a wallet export feature to allow users to migrate their assets to other services. The platform has not announced a direct compensation plan, nor has it indicated whether it will use its own funds to compensate users.
according to Zilliqa's monitoring, it has learned of a security incident involving a CEX partner, where some ZIL has been stolen from a cold wallet. The incident is currently under investigation, and the team is working with relevant parties to determine the root cause and the scope of the impact. As a precautionary measure, Zilliqa has notified all CEX partners to temporarily suspend ZIL deposits and withdrawals to prevent the stolen funds from being transferred or sold through centralized platforms. The official stated that further updates will be released after verifying the information and reminded the community to only follow information published through official channels.
some Phantom wallet users are currently experiencing performance degradation when using transfer and swap functions. The team is investigating the issue and will provide timely updates on progress.
Sberbank, Russia's largest bank, plans to launch a cryptocurrency wallet and digital custody services, with the earliest launch expected in December. The services will be integrated into the "Sberbank Online" and "SberInvestments" platforms, pending the official implementation of Russia's forthcoming "Digital Currency and Digital Rights Law" in September.The bill is expected to establish a licensing framework for transactions, custody, fiat exchange, and cross-border settlements involving crypto assets, while also allowing eligible investors to participate in trading within set limits.Sberbank stated that users will be able to access authorized crypto assets directly within the bank's application, and a digital asset custody system will also be launched for token storage and ledger management.Against the backdrop of advancing regulations, financial institutions including the Moscow Exchange and VTB are also accelerating their deployment in digital asset-related businesses, as Russia's financial system gradually opens up to the compliant crypto market. (CoinDesk)
Odaily, Cardano wallet service provider SecondFi has launched an asset recovery wallet check tool, allowing users to preliminarily check whether their relevant wallets have been affected by the previous security incident.SecondFi stated that the addresses currently displayed in the tool are based on the team's preliminary review data of the security incident and are not final. The list may not be complete and does not represent the final scope of recovery.
Robinhood has announced the official launch of the public mainnet for its proprietary Layer 2 network, Robinhood Chain. Built on the Arbitrum technology stack, the chain is positioned as an institution-grade, permissionless, AI-native network specifically designed for Real World Assets (RWA).Robinhood Chain's launch partners include Uniswap, Pleiades, Alchemy, BitGo, and Chainlink. Among them, Uniswap will deploy a dedicated AMM on the chain as the primary public liquidity protocol, while Pleiades will deploy its own AMM as the primary proprietary trading venue. The chain will also offer basic DeFi functionalities such as lending.Eligible users can trade tokenized stocks 24/7 on Robinhood Chain. Simultaneously, Robinhood Earn will introduce USDG-based decentralized lending products within the main app. In certain jurisdictions, the new version of Robinhood Wallet will also support access to Lighter's perpetual contract trading.Robinhood also announced the expansion of its European perpetual contract product range, its official entry into the Canadian market, and the acquisition of a Singapore Capital Markets Services license. Furthermore, Agentic Accounts for crypto trading are planned to begin rolling out in the US soon, allowing AI agents to participate in trading and fund management.Robinhood stated that this update represents its most ambitious global expansion and product vision to date, with the goal of establishing a more direct connection between traditional finance and DeFi, integrating stocks, crypto, RWA, perpetual contracts, and AI trading into a unified financial experience. (The Block)
blockchain analytics platform Bubblemaps released an investigation report on the Solana Meme token LIBRA. On February 14, 2025, after Argentine President Javier Milei publicly supported the launch of LIBRA, the token's market cap briefly reached approximately $4 billion in less than two days before rapidly crashing, resulting in investor losses exceeding $250 million. The incident has been dubbed "Cryptogate."Bubblemaps stated that multiple abnormal signals emerged within the first hour of LIBRA's launch:82% of the token supply was concentrated in a single wallet cluster, a stark deviation from typical Meme token issuance patterns;No tokenomics information was provided, with no details on lock-ups, fund allocation, or roadmap disclosed;Abnormally high liquidity pool fees were generated, with over $25 million in fees accumulating within the first hour of trading, far exceeding normal retail trading levels.The investigation revealed that the deployer did not directly dump $LIBRA on the open market. Instead, they added a one-sided liquidity pool containing only $LIBRA on Meteora while simultaneously withdrawing USDC and SOL from the original pool, enabling low-slippage fund transfers. Bubblemaps noted that, by the time the public warning was issued, the team had already extracted approximately $87 million in assets through this mechanism. Subsequently, Bubblemaps discovered a financial link between LIBRA and another controversial token, $MELANIA. Through on-chain evidence such as cross-chain transfers and overlapping exchange deposit addresses, analytic firms suggest both projects may be operated by the same team, which has been traced back to Kelsier Ventures and its head, Hayden Davis.The report indicates that this team has subsequently been linked to multiple Meme token projects, including $HOOD, $TRUST, $KACY, and $VIBES. Their common pattern includes: holding a large concentration of tokens during the deployment phase, using multiple wallets to front-run purchases, rapidly inflating market cap, and then exiting to cash out.Bubblemaps stated that the uniqueness of the LIBRA incident lies not in its technical methods, but in securing the public endorsement of Javier Milei, which amplified a routine Meme token operation into a globally watched event. The firm believes that indicators such as wallet cluster analysis, supply concentration, and on-chain fund flows had already flashed risk signals early on, and it will continue to monitor related address activity in the future.
MetaMask has officially launched Agent Wallet, a self-custody wallet designed for AI agents. It enables automated trading, perpetual contracts, and liquidity provision on Ethereum, multiple EVM-compatible chains, and the Hyperliquid network. The product is equipped with multiple security mechanisms, including transaction simulation, spending limits, and address whitelisting. It integrates with Blockaid's risk scanning, requiring user secondary confirmation for high-risk transactions. The platform also introduces a transaction guarantee service, offering up to $10,000 in compensation for compliant and secure transactions. Currently, the product is only being tested by a small group of users via the command line, with plans for a full public release this summer. (The Block)
According to an X post, Star, founder and CEO of OKX, stated: “Tokenized stocks are one of the most important use cases for RWAs. We expect to see xStocks on X Layer soon—bringing global equities on-chain and expanding access to capital markets.” It is reported that X Layer has previously entered a strategic partnership with xStocks, a regulated tokenized stock issuance platform; xStocks-related assets will be gradually integrated into the X Layer ecosystem and OKX Wallet. Star believes that access to global markets should be as open as access to information.
Odaily reports, according to official sources, X Layer has entered into a strategic partnership with xStocks, a regulated tokenized stock issuance platform. Together, they will promote the integration of tokenized stock assets into the X Layer ecosystem and make related trading services accessible to OKX Wallet users. In the future, users will be able to trade xStocks-related assets 24/7 within the OKX Wallet, benefiting from the settlement, liquidity, and distribution capabilities provided by X Layer. The two parties will also launch a fast-listing mechanism to accelerate the tokenization and trading circulation of popular stocks and thematic ETFs within a compliant framework.It is reported that X Layer is committed to building on-chain infrastructure for financial assets, covering key areas such as settlement, liquidity, and distribution. xStocks has previously facilitated over $31 billion in cumulative tokenized stock trading volume and has become the first major issuer to commit to providing asset depth on X Layer, driving the expansion of tokenized stock scale.
Polymarket staff member Shantikiran Chanal posted on platform X, stating that they have taken note of the security reports related to reward distribution, and that user funds and market settlements remain safe. The investigation indicates that a private key leak occurred in a wallet used for internal operations, and the issue is not related to contracts or core infrastructure. Further updates will be provided.Previous report: ZachXBT stated that the Polymarket UMA CTF Adapter contract allegedly came under attack on Polygon, with over $520,000 having been drained.
According to PR Newswire, MoonPay has officially launched MoonPay Headless Onramps—the industry’s first native crypto checkout platform enabling one-click crypto purchases via Apple Pay, credit cards, and Google Pay across the U.S., the European Economic Area, and over 100 countries worldwide. In contrast, competing headless payment solutions currently support mobile payments only within the U.S. This product replaces MoonPay’s branded widget with a pure API integration, enabling partners to deliver a fully white-labeled and highly customizable checkout experience—while MoonPay handles payment processing, compliance, and identity verification in the background. Launch partners include Moonshot, Bitcoin.com, Bread, and Trust Wallet. Notably, Apple Pay is now fully embedded into partner apps for the first time: verified users can complete purchases with a single tap—no redirects or re-verification required.