-sign

Bitgo CEO Mike Belshe deposited 100 BTC into a public Bitcoin address, valued at approximately $6.3 million at the time, and invited the Claude model under Anthropic to attempt to transfer the funds from that address. On-chain records show that the wallet received the funds on July 31, and the balance has not been transferred out.Anthropic previously disclosed that during 141,006 cybersecurity assessment runs, 3 incidents were found, with 6 assessment sessions involving 3 models unexpectedly interacting with real organizational systems. The relevant models include Claude Opus 4.7, Claude Mythos 5, and an unpublished internal research model, due to configuration errors by third-party testing partner Irregular that caused the testing environment to connect to the internet.Anthropic stated that Claude Opus 4.7 identified a real website sharing the same name as a simulated company during one assessment, exploited weak passwords and exposed services to recover infrastructure credentials, and accessed a production database containing hundreds of records. The company claimed that the model was attempting to complete assigned tasks and was not actively breaking restrictions or pursuing independent goals. Belshe's challenge involved the Bitgo institutional custody platform, which uses multi-signature or multi-party computation technology to distribute signing authority across multiple independent keys. Anthropic has not publicly responded to this challenge.

According to Onchain Lens monitoring, a certain whale has accumulated 266,400 LINK from Binance over the past month, worth approximately 2.15 million USD, and then transferred the entire balance to a Gnosis Safe multi-signature wallet.

According to Bitcoin News monitoring, approximately 594 BTC were transferred from 500 addresses within 25 minutes on Thursday, valued at around 38 million USD, and the funds were subsequently consolidated into another wallet. The affected holdings all used single-signature addresses, with balances ranging from about 0.15 to 0.26 BTC, and many UTXOs had been dormant for years.Early speculation focused on Coldcard, as at least one victim used the device. Coldcard CEO NVK denied the existence of a device-wide vulnerability, stating that the user may have imported a seed that had previously been leaked or compromised, and pointed out that the transfer involved keys from different wallets. Jameson Lopp noted that another victim only lost part of their UTXOs, not the entire wallet balance, which may indicate exposure of individual private keys rather than a complete seed leak.Currently, the coordinated transfer event is confirmed, but the source remains unknown, and there is no evidence to prove the existence of a Coldcard RNG flaw, supply chain vulnerability, or Bitcoin cryptographic failure.

According to monitoring by PeckShield, the attacker’s marked address has returned 331.8 ETH, approximately 623,900 USD, to the Across Protocol Hub Pool Owner multi-signature address.

According to Jinshi News, Changxin Technology will officially land on the Sci-Tech Innovation Board, with an issue price of 8.66 yuan per share. Based on an average increase of 278.01% for all new shares, the profit from a single subscription for Changxin Technology is approximately 12,000 yuan; based on an average increase of 466.67% for new shares on the Sci-Tech Innovation Board, the profit from a single subscription for Changxin Technology is approximately 20,200 yuan. Institutions have pointed out that there has been a temporary rebound in the new share sector recently, and panic sentiment has somewhat eased. Reviewing the current changes in new share cycle indicators, the cycle pricing indicators and sentiment indicators have basically returned to a neutral or slightly below neutral position for the year, and the sharp release of high-level risks may come to an end. The new share sector may be expected to initiate a relatively balanced oscillation game between bulls and bears; however, it should be noted that a return to strength for the new share sector may require more time. On one hand, it needs to wait for the cycle indicators to continue to converge and stabilize, and on the other hand, it may need to wait for the gradual reconciliation of bullish and bearish divergences.

According to on-chain analyst @ai_9684xtpa, the Worldcoin multi-signature address transferred a value of $13.84 million in WLD to two new addresses 9 hours ago.The upstream address actually received 60 million WLD, and this time only transferred out 36.94 million WLD; the receiving addresses have not yet transferred or sold.

According to Onchain Lens monitoring, a certain Chainlink whale transferred 431,000 LINK to a Gnosis Safe multi-signature wallet, valued at approximately 3.76 million dollars.This whale had previously accumulated and withdrawn these tokens from Binance into two wallets through multiple transactions over the past three weeks, with the final two transfers being 176,029 LINK, valued at approximately 1.53 million dollars, and 255,468 LINK, valued at approximately 2.23 million dollars.

According to official news, the ENS DAO has approved the proposal to activate a new security committee, with a term of two years. The committee consists of eight members and has veto power, allowing it to cancel proposals during the waiting period after malicious proposals are passed but before execution. The committee's authority is limited to canceling transactions within the time lock and cannot access treasury funds, submit proposals, or rewrite approved proposals.The committee can only exercise its power under emergency conditions specified in its charter. ENS points out that governance itself may become an attack surface—voting rights can be borrowed to initiate attacks, proposal codes can hide malicious behavior, and credential leaks can be used to push harmful transactions. The new committee adopts a 5-of-8 multi-signature, requiring at least five members' agreement to cancel a proposal, and must seek DAO voting for extension after the two-year term.

According to on-chain analysts, the Ondo team’s multi-signature wallet transferred 150 million ONDO to address 0xEA5...675e1 8 hours ago, worth 49.56 million USD.Since April 22, this address has received a total of 425 million ONDO (147 million USD), and the previous two batches of received tokens were deposited into Coinbase in parts, with the purpose unknown.

Layer 1 blockchain Tempo proposed TIP-1061, a native multi-signature account proposal, aiming to introduce multi-signature as a native account type at the protocol layer, allowing multi-signature control without the need to deploy smart contract wallets like Safe.This solution supports M/N multi-signature, weighted multi-signature, as well as Secp256k1, P256, and WebAuthn signatures, and allows for subsequent adjustments of members and permissions while keeping the account address unchanged. This proposal is primarily aimed at scenarios involving DAOs, institutions, and validators, and is currently still in the draft stage.

SUPERFORTUNE AI posted on platform X that the team is investigating the GUA security incident that occurred on May 27. This incident caused severe fluctuations in token prices, and preliminary investigations indicate that the incident may involve address tampering in a multi-signature transaction.The announcement stated that the plan was to send additional unlocked tokens to the airdrop claim contract address, but during the execution of the transaction, the funds were mistakenly sent to another hacker address. The team noted that this hacker address had never interacted with any addresses related to SUPERFORTUNE before, so the likelihood of an "address poisoning attack" as a method of attack is low. Additionally, SUPERFORTUNE stated that its internal processes already include a multi-address verification mechanism, and the team is still continuing to investigate the incident and will update the community on the latest developments.

According to GoPlus analysis, the stablecoin protocol StablR had security issues with its multi-signature contract settings on Ethereum (multi-signature threshold of 1), and the holder's private key was stolen, resulting in StablR $EURR and $USDR stablecoins being depegged by 20%. The attacker has profited approximately $2.8 million.

LayerZero Labs posted on the X platform that the internal RPC used by LayerZero Labs was attacked by the Lazarus Group in the past three weeks, resulting in the compromise of the true source of its DVN (Decentralized Verification Network), while external RPC providers faced DDOS attacks. This incident affected 0.14% of applications and approximately 0.36% of asset value.LayerZero Labs stated that asset security is currently intact, and since April 19, over $9 billion in funds have been completed across chains through the protocol. In response to security risks, LayerZero Labs has stopped providing services for its DVN in a 1/1 configuration, and all default configurations for channels will be migrated to at least a 3/3 or 5/5 multi-DVN mode.Additionally, in response to an incident three years ago where multi-signature holders mistakenly used hardware wallets for personal transactions, LayerZero Labs has removed that signer and changed wallets, while also developing a OneSig custom multi-signature system. LayerZero Labs recommends that developers lock configurations to avoid relying on default settings and plans to launch an asset management platform Console to enhance security monitoring.

A certain crypto KOL posted on platform X that the address ranked first on the Bitcoin billionaire list is a Binance-related address, which is a wallet address starting with "3" and holds over 200,000 BTC. He questioned the security of Binance storing such a large amount of Bitcoin in a single address and expressed concerns about the risk of private key collision cracking. In response, CZ stated, "The one starting with 3 should be a multi-signature, right? You would need to collide more than 3 private keys? Trust the math."Analysis suggests that this address is highly likely using a multi-signature mechanism. Even if there is a theoretical possibility of private key collision, the actual difficulty of cracking it is extremely high.

Purrlend announced that it encountered a security incident during the deployment of HyperEVM and MegaETH, resulting in a loss of approximately $1.52 million.The attacker breached the team's 2/3 multi-signature wallet, granting permissions such as BRIDGE_ROLE to a malicious EOA, and minted unbacked pUSDm and pUSDC through mintUnbacked, using them as collateral to borrow assets from the pool. Purrlend stated that it has suspended the protocol, revoked related permissions, and is working with security teams, law enforcement, and cross-chain bridge partners to track and attempt to recover the funds.

According to The Block, the Solana ecosystem multi-signature protocol Squads announced the completion of a $18 million strategic financing round, led by Solana Ventures, with participation from Coinbase Ventures, Haun Ventures, L1D, and others. This round of financing is an equity round, bringing its total financing amount to $42.9 million. Squads will use the funds from this round to expand its stablecoin enterprise financial platform, Altitude.It is reported that Altitude, the stablecoin payment platform under Squads, allows businesses to conduct 24/7 global payment settlements in stablecoins through self-custody wallets, and connects to the global payment network through compliance and risk control systems.

According to Arkham monitoring, the zkPass team's multi-signature address (0xEF1) transferred a total of 10,000,000 ZKP to Binance in the past 30 minutes, worth approximately $796,100.Currently, the circulating supply of ZKP is 268 million, and this distribution amount accounts for about 3.73% of its total circulating supply. ZKP is currently priced at $0.07964, with a 24-hour decline of 7.35%, and its circulating market capitalization is currently $21.37 million.

According to on-chain analyst Ai Yi's monitoring, an early Ethereum whale has once again transferred 10,000 ETH (approximately $23.21 million) to a multi-signature address, which may sell the received tokens soon. The address 0x26c...B9392 has accumulated a total of 12,001 ETH deposited to OKX over the past two months, with a total value of $24.62 million. Based on past experience, the ETH transferred to this address will typically flow to exchanges in batches later.

According to Arkham monitoring, the multi-signature address (0x946) has distributed a total of 2,499,000 EVAA to 10 addresses in the past 10 minutes.The specific operations include transferring 250,000 EVAA to each of 5 addresses 1 minute ago, and transferring a total of 1,249,000 EVAA to another 5 addresses 9 minutes ago. According to CMC data, the current circulating supply of EVAA is 6,610,000, and this distribution accounts for approximately 37.8% of its total circulating supply. Some of the receiving addresses have previously transferred the tokens to exchanges or sold them on DEX.

According to Arkham data, the suspected team multi-signature address (0x33E) distributed 50 million AIOT in the past 32 minutes. These tokens were transferred in 10 transactions to different addresses, each amounting to 5 million tokens, totaling approximately 1.858 million USD in value.CMC data shows that the current circulating supply of AIOT is 283 million tokens, the current price is 0.03678 USD, and the 24-hour decline is 11.28%.