att

According to the monitoring by the head of Galaxy Research, it has communicated with over 190 victims of Coldcard vulnerability attacks and has asked victims who have not yet contacted them to reach out via private message so that they can provide tracking information and assist in reporting losses to the relevant authorities.Since August 6, no new attack incidents have been confirmed, but this does not mean that new attacks will not occur, and vigilance is required.

According to Bitcoin News, Boltzhq has shut down due to its five-person team being overwhelmed by increasingly complex AI-assisted attacks. A group of experienced Bitcoin users will take over the service with additional capital and engineering resources.The founder has stepped down. The service is currently still offline, and the new team is working to restart it.

According to monitoring by Bitcoin News, new research published by @PraveenPerera shows that Coldcard attackers seem to first identify addresses with vulnerabilities, then sort them by the amount of Bitcoin held, starting to transfer in batches from the addresses with the highest holdings. The transfer software used was relatively crude.One address had 225 spendable UTXOs, and the attackers extracted exactly the latest 200, leaving the earliest 25, which included a UTXO worth 0.16 BTC. This aligns perfectly with the limitation of a blockchain API investigated by researchers, which defaults to returning 200 records, indicating that the attackers may have failed to load the next page of data. The software even spent a UTXO of 294 satoshis, reportedly increasing the transaction fee by about 2040 satoshis, with the spent amount significantly higher than the value of the UTXO itself.The authors of the study believe that the builders of this tool may have a better understanding of the account balance system than of the Bitcoin UTXO model. Although the attackers seem to have obtained the complete seed of the victims, at least 75 BTC still remain in other addresses derived from the same seed. The biggest suspicion currently is that among the 153 stolen addresses, there are still 132.95 BTC, and researchers have been unable to reproduce the seed behind these addresses, so it cannot be ruled out that the attackers obtained undisclosed private device data or candidate data.

According to monitoring by Catcher Predict, in the market prediction on Polymarket for the "Seattle Mariners vs. New York Yankees" event, the option "New York Yankees" in the sub-market "First 5 Innings Spread -1.5" experienced significant fluctuations in winning probability, soaring from 34% an hour ago to the current 49.5% (a fluctuation of 15.5%). Please note the impact of related breaking news.

The Bitcoin Treasury Company Strategy officially announced that it will hold a live investor Q&A on August 17 at 12:00 PM Eastern Time. The company's founder and executive chairman Michael Saylor and CEO Phong Le will be present.It is reported that this investor Q&A is expected to focus on market topics of interest, including the company's Bitcoin strategy, capital operations, financing plans, and future business directions.

According to Lookonchain monitoring, a user lost $100,000 after sending funds without verifying the address copied from the transaction history.Address poisoning attacks are common, so it is essential to carefully verify the wallet address before transferring funds.

According to a report by Decrypt, Israeli cybersecurity company ASecurity released a report stating that a researcher used publicly available AI models to discover multiple vulnerabilities in the Zoom annotation tool in less than 24 hours with fewer than 20 prompts, and constructed an exploitable attack chain. The vulnerabilities are numbered CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415, allowing attackers to remotely execute code in meetings without any action from the victim, control their devices, steal data, and activate the microphone or camera.The attack was tested successfully on Windows, macOS, Linux, Android, and iOS versions of Zoom. ASecurity claimed it reached a "national-level" standard, whereas previously constructing such exploitation tools required months of work and a substantial budget from professional teams. ASecurity reported the first vulnerability to Zoom on June 10, and Zoom released fixes between June 22 and July 20, but the server-side protections in end-to-end encrypted meetings could not filter malicious messages, requiring users to update manually. A Zoom spokesperson confirmed that the issue has been resolved and advised users to keep their versions up to date.

According to Catcher Predict monitoring, in the prediction market Polymarket for the event "Seattle Mariners vs. New York Yankees," the option "Seattle Mariners" in the sub-market "Seattle Mariners vs. New York Yankees" has experienced a dramatic fluctuation in winning probability, soaring from 44.5% an hour ago to the current 76.5% (a fluctuation of 32%). Please note the impact of relevant breaking news.

According to on-chain detective Specter, the attacker exchanged all assets including WBTC, cbBTC, LDO, USDS, and CRV for DAI and ETH. The same wallet was previously hacked in September 2023 due to malicious token authorization, resulting in a theft of 24.23 million USD, with the attacker ultimately returning about 90% of the stolen funds. The attacker's address is 0x8fEB...F95Ae.

After the Coldcard hardware wallet firmware vulnerability was exploited, approximately 2,100 bitcoins were stolen, resulting in a loss of nearly $130 million. On-chain data shows that long-term holders transferred about 233,000 bitcoins from their wallets in the days before and after the incident, worth approximately $15 billion.Casa CEO Nick Neuman stated that some of the transferred funds came from Coldcard users migrating to multi-signature wallets, and Ledger and Trezor users also took similar measures after the incident. During the same period, about 22,000 bitcoins were transferred to exchanges. Coinkite has requested that users who generated recovery phrases using firmware versions 4.1 to 4.1.9 consider the related wallets compromised and immediately migrate to new recovery phrases. The aforementioned versions cover from March 2021 to July 2026.

Russia's oil production in July was nearly 1 million barrels per day below its OPEC+ quota, with an average daily output of 8.887 million barrels, significantly lower than the monthly target of 9.824 million barrels.Ukraine has been attacking Russian oil infrastructure almost daily, threatening crude oil processing and export volumes, while the global energy market is also under pressure due to the conflict in the Middle East.

According to Cointelegraph, Ravencoin was attacked due to a consensus vulnerability, causing the price to drop to a historical low of $0.002754, down about 22% from the 24-hour high. The vulnerability allowed weak nodes to accept invalid blocks, with the first known exploit occurring at block height 4,487,776.Mining pools 2Miners and RavenMiner, which control the majority of the network's hash power, are building a competing chain that excludes the affected branch. If this chain becomes dominant, the network may undergo a chain reorganization of about three days, and transactions confirmed after block 4,487,775 may be reversed. Ravencoin has advised exchanges to suspend deposits and withdrawals until the chain stabilizes, and Upbit and Bitget have already suspended RVN transfers.

According to GoPlus security alerts, a user lost approximately 100,000 USDT due to an address poisoning attack. The attacker conducted small transactions using malicious addresses with similar ending digits, waiting for the user to make a mistake while copying and pasting.Address poisoning attacks have been fully automated, including discovering poisoning opportunities, creating counterfeit coins with the same name or implementing small-scale poisoning, and mixing coins for money laundering. The victim's address received over four hundred poisoning transactions after executing the last transaction 69 days ago.

AI security startup Attestable has officially announced its establishment and completed a $20 million seed round financing. This round of financing was led by Jamin Ball of Altimeter Capital and Yonatan Mandelbaum of TLV Partners, with participation from institutions such as Halcyon Futures, Cerca Partners, and several investors.Attestable founder Yogi stated that as AI gradually enters critical infrastructure, national security, and large enterprise systems, how to verify the credibility of AI operations has become an important issue faced globally. The company aims to build a universal verification layer for cutting-edge AI laboratories, critical infrastructure, and national-level applications.According to reports, Attestable uses Zero-Knowledge Proof technology to shift trust in AI systems from data centers to mathematical verification mechanisms. This technology can prove that a certain approved model, model weights, input data, and operational strategies indeed generated specific outputs, while not disclosing model parameters or user privacy data, and without needing to rerun the model for verification.Attestable stated that its technology has currently achieved verification inference of the Meta Muse Glimmer 30B model on a single NVIDIA H100 GPU, reaching a speed of 85 tokens per second. The generated proof documents are small and possess quantum-resistant characteristics, allowing for rapid verification.In response, Ethereum co-founder Vitalik Buterin commented, stating that this achievement means the performance loss of Zero-Knowledge Proofs for large language models is approaching single-digit levels. He noted that the next challenge is to further reduce the performance overhead of technologies such as Fully Homomorphic Encryption (FHE).

On August 9, the cross-chain bridge connecting the XRP Ledger and Coreum was attacked, with the attacker stealing approximately 199,900 XRP through a validation logic vulnerability, causing the bridged asset balance to drop from about 200,400 XRP to 493.5 XRP. This attack did not involve private key leakage and did not target the XRP Ledger protocol itself.The attacker forged deposit operations, causing the bridging system to recognize them as real deposits and triggering the other end of the bridging wallet to send real XRP to them. On-chain data shows that the attacker completed the fund transfer through 94 multi-signature authorization transactions within 97 minutes. These transactions required 17 signatures from 28 relay node keys, allowing the attacker to bypass the validation mechanism of the bridging system. As of August 11, the Coreum cross-chain bridge remains in a suspended state, and the Coreum Development Foundation has not yet released an official incident report. The security of the XRP mainnet and user private keys has not been affected.

According to Catcher Predict monitoring, in the Polymarket event "Seattle Mariners vs. New York Yankees," the sub-market "O/U 8.5" for the "Over" option has experienced a dramatic fluctuation in win probability, dropping from 40.5% an hour ago to the current 15.5% (a fluctuation of 25%). Please note the impact of related breaking news.

According to Cyvers Alert monitoring, an address poisoning attack was discovered, resulting in a loss of approximately 100,000 USDT for the victim. About 66 days ago, the attacker implemented address poisoning on the victim's wallet by sending transactions to create a malicious address record similar to a normal interaction address. The victim did not verify the complete wallet address and mistakenly transferred funds to the attacker's address.After the incident, to avoid potential freezing risks, the attacker exchanged the stolen USDT for ETH and currently holds about 52.8 ETH in the wallet. Cyvers reminds users to always verify the complete wallet address when making on-chain transfers and not to rely solely on address records in transaction history.At the same time, security agencies recommend using AI-based on-chain security tools for real-time detection of abnormal transaction behaviors to reduce risks such as address poisoning and phishing attacks. Address poisoning attacks have become one of the common scams in the cryptocurrency asset field in recent years, with attackers often exploiting users' habits of copying historical transaction addresses to mislead them into transferring assets through forged similar addresses.

According to CoinDesk, the Pokémon trading card market is currently estimated to be between $10 billion and $15 billion, leading to queues at retailers like Costco. A Pikachu Illustrator card owned by Logan Paul once sold for $16.5 million.Sales at large chain stores like Target and Walmart, along with eBay's projected card sales of $26.2 billion in 2025, indicate that trading cards have become an important alternative asset class, recently outperforming the S&P 500 index and Bitcoin.The blockchain startup Deadstock, launched by ATH Labs, is attempting to tokenize high-grade cards and store them in a vault to address issues of market fragmentation and slow transaction speeds. The project still faces liquidity challenges and the network effect advantages created by existing platforms like eBay.