chai

According to CoinDesk, blockchain data analysis company Arkham Intelligence has monitored that the wallet holdings of Bhutan's sovereign wealth fund Druk Holding and Investments (DHI) have significantly decreased from about 13,000 BTC in October 2024 to approximately 3,100 BTC currently. Since mid-2025, over $1 billion worth of Bitcoin has flowed out, with funds directed to multiple exchanges and trading companies, including wallets interacting with Galaxy Digital and OKX.In response, DHI CEO Ujjwal Deep Dahal stated, "I don't remember when the last time we sold Bitcoin was." The official denied any selling activity but did not provide details on the specific wallet movements and did not confirm the current holdings.

Chainalysis posted on the X platform that before the theft of THORChain, wallets suspected to be associated with the attacker had been transferring funds through Monero, Hyperliquid, and THORChain for several weeks. The attacker-associated wallets had already deposited into Hyperliquid positions via the Hyperliquid and Monero privacy bridge as early as the end of April. The funds were then exchanged for USDC and transferred to Arbitrum, and later bridged to Ethereum, with some ETH subsequently transferred to THORChain to become staked RUNE for newly added nodes, which are believed to be the source of the attack.Afterward, the attacker bridged some RUNE back to Ethereum and split it into four pathways, one of which went directly to the attacker. After being transferred through intermediate wallets, 8 ETH was sent to the final wallet receiving the stolen funds 43 minutes before the attack. The funds from the other three pathways flowed in the opposite direction. These wallets bridged ETH back to Arbitrum, deposited it into Hyperliquid, and transferred it into Monero through the same privacy bridge, with the last transaction occurring less than 5 hours before the attack began.As of Friday afternoon, the stolen funds have not yet been used, but the attacker has demonstrated their skilled cross-chain money laundering capabilities, and the Hyperliquid to Monero path may become the next move.

Hyperliquid co-founder Jeff posted on the X platform, stating that he recently met with several policymakers in Washington, D.C. to discuss the ongoing "Clarity Act" and the cryptocurrency regulatory framework, focusing on promoting the compliance of on-chain derivatives trading markets in the United States.He mentioned that the discussions were divided into two levels: one part was more technical, involving Hyperliquid's on-chain trading architecture, global user demand, and its positioning as a financial innovation infrastructure; the other part was an introduction to the "first principles" of DeFi and on-chain markets, aimed at helping policymakers understand the relevant mechanisms and potential impacts.Jeff expressed that during these discussions, he sensed a "cautious but open" regulatory attitude towards the cryptocurrency industry from both parties in the U.S. and believes that the market is forming a policy window to promote the entry of on-chain derivatives into the U.S. system. He also emphasized that he will continue to advance relevant communications in Washington to strive for U.S. users to access Hyperliquid's on-chain trading market.

According to CoinDesk, on-chain analysis firm Arkham Data shows that over the past year, wallets associated with Bhutan have seen outflows of approximately $1 billion in Bitcoin, with funds flowing to multiple trading platforms and trading institutions, reducing their holdings from about 13,000 BTC to around 3,100 BTC.Arkham speculates that there may be ongoing selling behavior, and if the trend continues, the relevant addresses may be cleared of holdings before October 2026. However, Bhutan's sovereign fund Druk Holding and Investments (DHI) stated that "they do not recall any recent Bitcoin sales," did not respond to specific changes in on-chain addresses, and did not confirm the current holding size, only emphasizing that there are no additional comments.The report points out that some of the fund inflow paths are related to institutions such as Galaxy Digital and OKX, leading the market to interpret this as selling or over-the-counter trading behavior, but there are also possibilities of transfers into custody, collateralization, or structured trading that do not involve selling. Additionally, some trading institution personnel stated that there has been no clear selling recently.Furthermore, Bhutan's previous commitment to a reserve of 10,000 BTC for the "Gelephu Mindfulness City" project has also been questioned due to potential sell-offs. Currently, there is still significant disagreement regarding its actual holdings and mining operations.

Aptos Labs announced that the world's first stablecoin pegged to the Korean won, KRW1, will be launched on the Aptos network. This stablecoin was chosen by BDACS Korea to be issued on Aptos, aiming to promote on-chain payments and digital business applications in Korea and the broader market.Aptos stated that the choice of its infrastructure for issuance is based on its full-stack blockchain capabilities oriented towards "market and machine," designed to support cross-border and local on-chain business scenarios.

According to CoinDesk, after KelpDAO was attacked resulting in a loss of $292 million, the industry's scrutiny of the security of cross-chain infrastructure continues to heat up, with approximately $4 billion in assets having completed or currently migrating from LayerZero to Chainlink's Cross-Chain Interoperability Protocol (CCIP).The DeFi protocol Lombard is the latest project to join this migration trend. The protocol announced it would abandon LayerZero and migrate over $1 billion in Bitcoin-backed assets to Chainlink CCIP, stating that this decision stemmed from a comprehensive internal security review following the April attack incident.Lombard issues two types of Bitcoin-backed tokens—LBTC and BTC.b—and will prioritize the migration of assets on chains such as Solana, Etherlink, Berachain, Corn, and TAC, while terminating the use of LayerZero on Morph and Swell. Lombard stated that the reason for choosing CCIP is its independent node operators, built-in rate limiting mechanisms, and audited infrastructure. Additionally, the protocol will adopt Chainlink's cross-chain token standard to achieve asset cross-chain circulation through a burn-and-mint model.Previously, Kelp DAO, Solv Protocol, Re, and the cryptocurrency exchange Kraken have all completed similar migrations, with these projects collectively transferring approximately $4 billion in assets. Chainlink Labs Chief Business Officer Johann Eid stated, "We are witnessing a continued wave of risk-averse migration within the industry."

In response to Bloomberg's report on CME and ICE pressuring the CFTC regarding Hyperliquid, the Hyperliquid Policy Center, a lobbying organization led by prominent crypto lawyer Jake Chervinsky and funded by the Hyper Foundation, tweeted that the concerns lack basis.The organization stated that Hyperliquid publishes complete on-chain transaction records in real-time, with transparency far exceeding that of traditional exchanges, which serves as a strong deterrent against insider trading and price manipulation, and is beneficial for regulatory agencies and law enforcement to conduct monitoring and investigations.Additionally, Hyperliquid offers 24/7 uninterrupted trading, effectively eliminating price gaps between the opening and closing of traditional markets. The organization acknowledged that current U.S. laws have not yet made specific provisions for on-chain derivatives markets and will continue to work with Washington policymakers to promote the implementation of relevant regulatory frameworks.Previously, the Hyperliquid Policy Center was established on February 18 of this year in Washington, with former Blockchain Association and Variant Chief Legal Officer Jake Chervinsky serving as CEO, receiving a donation of 1 million HYPE from the Hyper Foundation, focusing on promoting a compliant regulatory path for DeFi in the United States.

THORChain has announced that one Asgard vault has been attacked, and trading has been suspended. Initial signs indicate that user funds are safe, and only the protocol's own funds are affected. THORChain stated that the network automatically detected abnormal behavior and suspended signing activities to prevent further fund transfers. The estimated loss is currently around $10.7 million.The announcement mentioned that one of the six Asgard vaults is suspected to have been breached, and related nodes have triggered the RUNE staking penalty mechanism due to unauthorized transfers. The current network has suspended Churn activities, and new connections and related operations will also be postponed until the investigation and repairs are completed.THORChain stated that preliminary investigations show that users' personal exchange transactions have not been affected, and all node operators have been asked to immediately check their infrastructure, key management systems, and operating environments for any anomalies.

According to on-chain analyst PeckShield (@PeckShieldAlert), THORChain was hacked, resulting in a loss of approximately $10 million in crypto assets, including 36.75 BTC (about $3 million) and assets worth about $7 million from BNBChain, Ethereum, and Base chains.

According to on-chain detective ZachXBT, THORChain has suffered attacks on multiple chains, resulting in losses exceeding $7.4 million.

According to WIRED, Michael Selig, chairman of the Commodity Futures Trading Commission (CFTC), stated that the agency is using artificial intelligence technology to investigate insider trading in prediction markets such as Polymarket.In the past year, several traders on Polymarket have been suspected of using insider information to bet on geopolitical events such as the Venezuela raid and the Iran war, resulting in significant profits and drawing widespread attention.Previously, a U.S. Special Forces soldier was arrested for allegedly profiting from betting on the Maduro arrest using classified intelligence on Polymarket, becoming the first criminal case of insider trading in a prediction market in the United States.

According to on-chain analyst Ai Yi's monitoring, the address 0xB4d...B186a has sold 250 WBTC on-chain in the past 5 hours, worth 20.275 million dollars. This address has frequent interactions with the block builder Titan builder, and currently holds 80.95 million dollars in ETH and 2.088 million dollars in WBTC on-chain.

JPMorgan analysts stated that despite the overall recovery of the cryptocurrency market after the Iran conflict, Ethereum and other altcoins continue to underperform Bitcoin. This trend, which has formed since 2023, may be difficult to reverse in the short term unless there is a significant improvement in network activity, DeFi, and real-world applications.The report pointed out that, based on spot ETF fund flows and institutional futures positions, the recovery of Bitcoin is stronger than that of Ethereum. The spot Bitcoin ETF has recovered about two-thirds of the previous outflows, while the spot Ethereum ETF has only recovered about one-third. At the same time, CME futures data shows that institutional investors are more actively rebuilding their exposure to Bitcoin, with Bitcoin futures positions nearly fully restored, while Ethereum futures positions remain below previous levels.JPMorgan believes that the relative weakness of ETH and altcoins against Bitcoin may continue due to the lack of stronger on-chain fundamentals and real-world application support.

CoinList announced the launch of Passage, positioned as the "access layer" for on-chain capital markets, aimed at providing compliant distribution, capital access, allocation, and infrastructure support for tokenized assets.CoinList stated that as tokenized stocks, funds, yield products, and Pre-IPO assets gradually migrate on-chain, the current market still faces fragmentation issues among issuers, chains, and compliance rules, and that "asset tokenization does not equal effective distribution." Passage will connect issuers, platforms, and investors, helping tokenized assets achieve large-scale on-chain circulation.According to reports, Passage is built on CoinList's existing infrastructure. CoinList claims that since 2017, its platform has covered over 160 countries and has completed more than $1.2 billion in asset distribution.

According to CoinDesk, Kraken announced that it will use Chainlink's cross-chain interoperability protocol CCIP, replacing LayerZero as the exclusive cross-chain infrastructure for its wrapped assets, covering kBTC and more wrapped assets in the future. This migration involves over $3 billion in TVL, following a $292 million LayerZero-related cross-chain attack incident that occurred in April. Kraken stated that the migration will cover networks such as Ink, Ethereum, Unichain, and Optimism. kBTC is set to launch in 2024, with a current market value of approximately $260 million. Coinbase had previously also chosen Chainlink CCIP as the sole cross-chain bridge solution for about $7 billion in wrapped tokens.

The Gate Research Institute recently released the "April 2026 Cryptocurrency Market Review" report, which pointed out that the cryptocurrency market in April showed an overall upward trend, with total market capitalization significantly rising compared to March. The trading volume of BTC and ETH ETFs remained high and volatile. The report indicates that the activity levels of major public chain ecosystems continue to diverge. Solana's daily trading volume remained in the range of approximately 90 million to 110 million transactions, continuing to lead.In terms of hot sectors, the report noted that Pokemon TCG RWA has become one of the fastest-growing sub-sectors of on-chain RWA and entered a secondary explosion phase in April. Major trading platforms saw monthly trading volumes exceed 220 million USD, with weekly revenue nearing 6 million USD at one point, setting a new historical high. Meanwhile, Aave experienced the most severe liquidity shock in its history in April, with TVL outflows reaching hundreds of billions of dollars within days, and net outflows for the month exceeding 9 billion USD.Regarding financing and security incidents, the Web3 industry completed a total of 51 financing rounds in April, with a total amount of approximately 834 million USD, with funds further concentrating in leading finance and infrastructure sectors. Among them, Payward topped the monthly financing with 200 million USD. On the security front, Web3 security incidents in April resulted in losses of approximately 306 million USD, a month-on-month increase of about 858%, primarily driven by a single cross-chain infrastructure attack incident involving Kelp DAO, which amounted to about 293 million USD. The report believes that against the backdrop of a market recovery, on-chain activity and capital liquidity are improving simultaneously, but the security risks of cross-chain infrastructure and high-leverage protocols still warrant ongoing attention.

The Gate Research Institute recently released the report "April 2026 Cryptocurrency Market Review," indicating that the cryptocurrency market in April showed an overall upward trend, with total market capitalization significantly higher than in March, and BTC and ETH ETF trading volumes maintaining high volatility. The report shows that the activity levels of major public chain ecosystems continue to diverge. Solana's daily trading volume remains in the range of approximately 90 million to 110 million transactions, continuing to lead.In terms of hot sectors, the report points out that Pokemon TCG RWA has become one of the fastest-growing sub-sectors of on-chain RWA and entered a secondary explosion phase in April. Major trading platforms saw monthly trading volumes exceed 220 million USD, with weekly revenue nearing 6 million USD at one point, setting a new historical high. Meanwhile, Aave experienced the most severe liquidity shock in its history in April, with TVL outflows reaching hundreds of billions of dollars within a few days, and net outflows for the entire month exceeding 9 billion USD.Regarding financing and security incidents, the Web3 industry completed a total of 51 financing rounds in April, with a total amount of approximately 834 million USD, with funds further concentrating in leading finance and infrastructure sectors. Among them, Payward ranked first for the month with 200 million USD in financing.On the security front, Web3 security incidents in April resulted in losses of approximately 306 million USD, a month-on-month increase of about 858%, primarily driven by a cross-chain infrastructure attack incident involving Kelp DAO, which amounted to about 293 million USD. The report believes that against the backdrop of market recovery, on-chain activity and capital liquidity have both increased, but the security risks of cross-chain infrastructure and high-leverage protocols still warrant ongoing attention.

According to a report by Cai Lian She, OpenAI released a statement regarding the recent "Mini Shai-Hulud" supply chain attack incident targeting the popular open-source library TanStack. After monitoring the malicious attacks on several commonly used npm packages, the security team quickly investigated the internal systems and found no evidence of user data being leaked or accessed illegally.OpenAI pointed out that although its core services were not directly compromised, to ensure the security of local environments, all macOS users using its official applications must complete software updates by June 12, 2026.