code

AI code verification startup Blacksmith announced the completion of a $45 million Series B financing, led by Peak XV Partners, with follow-on investments from GV and Y Combinator, bringing the company's valuation to $550 million.

According to Bloomberg, the AI code review platform CodeRabbit announced the completion of a $143 million financing round, with a valuation of $1.5 billion. This round of financing was co-led by Atomico and Smash Capital, with participation from institutions such as BMW i Ventures and Datadog. So far, CodeRabbit has raised over $200 million in total financing.CodeRabbit primarily utilizes artificial intelligence to automatically review software code, helping developers identify code defects, security risks, and potential issues. Its product can automatically review both AI-generated and manually written code during the development process, providing developers with feedback on problems and suggestions for improvement.

Bitcoin Red Team member @Rob1Ham stated that OpenAI has prevented him from continuing security analysis on the Bitcoin codebase, despite his responsible disclosure of real vulnerabilities present in it.Rob1Ham mentioned that he had previously completed the authentication and onboarding process related to OpenAI's cybersecurity capabilities, but is currently unable to continue investigating whether the remediation measures are sufficient or if other vulnerabilities still exist. He stated that he will resume Bitcoin security research using Chinese open-source AI models in the future. Rob1Ham said, "Black hat hackers will not attack these issues, white hat hackers will." He also stated, "For those who do not comply with the rules and engage in harmful behavior, intelligence is unrestricted, while those committed to reducing harm are excluded."

According to Decrypt, a volunteer security team stated that it scanned 150 Bitcoin code repositories using cutting-edge artificial intelligence models and discovered a dozen vulnerabilities. The team has built multiple AI-based review systems, targeting wallets, cryptographic libraries, infrastructure, and other Bitcoin projects. Team members claim that, on average, each person can find about one serious vulnerability per hour, and in the past 12 hours, they have submitted security reports to multiple projects, but specific affected projects have not yet been made public.

The Bitcoin Red Team's volunteer security initiative has scanned approximately 150 Bitcoin code repositories and disclosed more than a dozen vulnerabilities. The team is developing an open-source AI platform for auditing Bitcoin software, covering wallets, cryptographic libraries, infrastructure, and other projects.AnchorWatch CEO Rob Hamilton stated that the team has currently spent about $20,000 on various AI services and is using Kimi K3, OpenAI's GPT Sol, Anthropic's Claude Fable and Opus, as well as Z.ai's GLM 5.2 to identify vulnerabilities and generate related documentation. A pseudonymous Bitcoin developer, Calle, mentioned that the team has reported critical vulnerabilities to multiple projects in the past 12 hours, averaging about one critical vulnerability discovered per person per hour, with daily expenditures of approximately $10,000. The team did not disclose the affected projects or details of the vulnerabilities.

According to Jinshi reports, the Chief Artificial Intelligence Officer of Meta Platforms announced that the Muse Code beta version has been launched. This is the first programming agent from the Meta Superintelligence Lab (MSL), built on Muse Spark 1.2.

AMD officially launched the on-premises AI programming platform AMD Instinct Coder for enterprises, integrating AMD EPYC processors, AMD Instinct GPUs, Supermicro AI servers, Spectro Cloud PaletteAI inference launch platform software, and the GLM-5.2 model optimized by AMD inference microservices, forming a comprehensive solution that is pre-integrated from hardware to software and can be quickly deployed.AMD stated that the total cost of ownership of this platform can reduce costs by up to 70% compared to using cloud-based cutting-edge models, with a capital recovery period as short as 6 months, directly addressing the two core pain points that enterprises commonly encounter in AI programming assistant pilots: the cost impact of cloud models and the data security risks of third-party services.Spectro Cloud's PaletteAI platform provides intelligent routing capabilities, allowing for strategic automatic switching between on-premises inference and cloud-based cutting-edge models from Anthropic, OpenAI, Google, and xAI, and is equipped with token quotas, audit tracking, and Grafana dashboards to visualize cost comparisons between on-premises and cloud environments, fully compatible with standard operating systems and Kubernetes. Each node can support up to 50 users and is compatible with mainstream development tools such as Claude Code, OpenAI Codex, Visual Studio Code, and Cursor.IDC executives commented that this platform "directly addresses the core needs of enterprises wanting AI programming productivity without the unpredictable cloud costs or risks of exposing source code." AMD's move shifts the AI programming assistant from a pure service model billed by usage to an infrastructure investment model with pre-planned costs.

According to official news, the Ethereum Foundation's "Trillion Dollar Security" (1TS) has announced a special grant to the Freedom of the Press Foundation (FPF) to support the ongoing development of the open-source tool WEBCAT, aimed at addressing the long-standing front-end code verification security gap in Ethereum wallets and decentralized applications (DApps).WEBCAT (Web-based Code Assurance and Transparency) is an open-source tool designed to help browsers verify whether the code loaded by a website matches the version publicly released by the developer.This funding will promote the expansion of WEBCAT to Ethereum wallets and application scenarios, enabling users to verify whether the front-end pages they access have been tampered with.The Ethereum Foundation stated that while HTTPS can verify the website a user is connected to and encrypt communication, it cannot prove that the front-end code actually running on the website is the same version released by the developer. If an attacker controls the website's front-end code, they may modify the transaction receiving address without the user's knowledge or induce the user to sign transactions that do not match the content displayed on the page.The Ethereum Foundation noted that front-end attacks have become a significant security risk for blockchain infrastructure, with malicious modifications to web interfaces potentially leading to supply chain attacks, DNS hijacking subsequent attacks, and user interface deception.WEBCAT was initially developed by the Freedom of the Press Foundation to enhance the code credibility of secure communication systems like SecureDrop.With this expansion into the Ethereum ecosystem, it will complement security measures such as "Clear Signing" in the 1TS program: the former helps wallets confirm that the application front-end has not been tampered with, while the latter helps users understand the transaction content they are approving.

trade.xyz purchased UNITREE (Yushutech) code at 565.54 HYPE on HIP -3. It is likely to launch perpetual contract trading for Yushutech in the coming days.Previously, the decentralized trading platform Paragon on HIP -3 acquired UNITREE (Yushutech) code at 577.66 HYPE and has launched the perpetual contract before the IPO of Yushutech.Yushutech is a leading civilian robotics company in China, set to go public for the first time and list on the Shanghai Stock Exchange's Sci-Tech Innovation Board. This issuance will be conducted through a combination of strategic placement, offline issuance, and online issuance. The proposed public offering will issue 40.446434 million shares, accounting for 10% of the total share capital after issuance, which will be 404.46434 million shares. The preliminary inquiry date is August 5, 2026, and the offline subscription date is August 10, 2026. The company has a special voting rights mechanism arrangement, with the actual controller Wang Xingxing controlling a total of 68.78% of the voting rights under the voting rights differential arrangement.

ChianCatcher news, the blockchain game studio and on-chain technology company Proof of Play announced on August 4 that it will cease operations. The company stated that it initially believed that games utilizing blockchain technology had the potential to open up a new decentralized internet, but ultimately failed to create scalable products and a sustainable business to validate this concept.Proof of Play will open source its code and art assets as much as possible for future builders to use, including applications related to Pirate Nation, smart contracts, founder NFTs, and IP (under CC0 license), etc. The Pirate Nation Foundation, independent of Proof of Play, will continue to support the $PIRATE token, and the foundation's website will remain operational; Proof of Play points are non-redeemable. Additionally, Shiba Story Go! has been acquired by a third party and is operating independently.

Bitcoin News posted on the X platform that the volunteer organization Bitcoin Red Team has scanned 150 code repositories, privately disclosed more than a dozen vulnerabilities, and identified key issues during the process of strengthening wallets, cryptographic libraries, and infrastructure following the COLDCARD vulnerability incident. This work has consumed approximately $20,000 in AI computing costs, covered by OpenSats.Researchers are using multiple AI tools, with many stating that open-source models like Kimi K3 have become primary tools for security research, while cutting-edge closed-source models like OpenAI and Anthropic are considered to impose more limitations in such analyses. The team plans to open-source its AI security tools to enable projects to continuously audit their own codebases. Researchers warn that Bitcoin may just be the first industry facing a wave of AI-assisted vulnerability discovery, with similar efforts likely to expand to all open-source software.

Bitcoin News posted on the X platform stating that Coinkite claims the vulnerability exists at the boundaries of two unrelated firmware submodules, rather than in its Bitcoin or crypto code, allowing it to evade manual and AI-assisted code reviews for years.Coinkite stated that after the incident, the company tested cutting-edge AI models including Kimi K3, Claude Fable, and Codex 5.6, none of which identified the flaw. Coinkite is currently urging security-critical projects to specifically audit build systems and submodule boundaries, warning that AI-assisted development may leave similar blind spots in the Bitcoin ecosystem.

Bitcoin News posted on the X platform that new evidence shows the anonymous switck account that wrote the LibNgU code may actually be Peter Gray, co-founder and CTO of Coinkite, as the code is at the core of the COLDCARD entropy failure incident.Researchers claim that Gray's GPG key signed dozens of switck submissions, and other identifiers seem to link the two identities. Bitcoin developer James O'Beirne stated that he warned Coinkite in May 2025 that the RNG implementation of LibNgU looked suspicious and suggested removing it, but he said the response was that any issues should have already been discovered. Screenshots also show that as early as April 2021, users had already questioned the rewrite of LibNgU.If these findings are accurate, it means that the engineer who introduced the code was later associated with the theft of over 1,800 BTC and had received direct warnings about the RNG implementation more than a year before the vulnerability was publicly disclosed.

Developers on Reddit used Claude Code to scan the Coldcard open-source firmware for vulnerabilities, identifying the core issue within 8 minutes:The firmware called a software pseudo-random number generator instead of a hardware true random number generator when generating private keys, and this vulnerability led to the theft of approximately $70 million in BTC from 1,196 wallets.At the same time, community users also reported that an independent scan using Zhizhu GLM 5.2 (trained on June 16, not connected to the internet) similarly discovered the same vulnerability.This bug has existed in the open-source wallet code for over five years.

On July 29, Tibo, the product lead for OpenAI Codex, announced on X that all usage limits for ChatGPT Work and Codex users have been reset, and released a statement regarding the issue of rapid consumption of GPT-5.6 Sol usage.In the previous weeks, a large number of users reported that the consumption speed of Codex limits exceeded expectations. OpenAI emphasized that it has not reduced the usage quotas of any subscription plans. After investigation, several reasons were found: Sol is more inclined to work for longer periods, execute more tool calls, and coordinate complex workflows than previous models; it consumes more tokens at the same reasoning level; programmatic tool calls (code mode) allow Sol to execute tool calls in parallel, resulting in more responses and higher usage per round; the distribution of impact is extremely uneven, with median user efficiency being acceptable, but heavy users handling complex tasks consuming far more than expected.OpenAI stated that multiple improvements have been completed, and it is expected that usage endurance will be extended by about 18% in typical usage scenarios. Tomorrow, the five-hour limit that was paused during the investigation will be restored. OpenAI acknowledged that "capabilities and efficiency do not always improve synchronously, and some issues only become apparent after large-scale real-world use; we should have realized this earlier."

According to The Block, Coinbase has appointed senior employee Rob Witoff (@RWitoff) as the new Chief Technology Officer (CTO), coinciding with ongoing executive adjustments at the largest cryptocurrency exchange in the United States.Witoff previously served as the head of the Coinbase platform and recently stated that 95% to 100% of the company's code is written with AI assistance, with the workload of AI agents equivalent to about 1,200 full-time developers.

According to the official status page of OpenAI, the widespread issues that ChatGPT and Codex experienced have been resolved, with the error rate remaining elevated for over 1 hour.

According to social media reports, OpenAI's ChatGPT and Codex are experiencing widespread outages.

Elon Musk posted on the X platform that X will open source all code related to the platform's systems in August and will submit it for third-party auditing.The auditing party will also verify whether the code running online is consistent with the open-source version.

OpenAI's programming agent Codex and office agent ChatGPT Work have a combined weekly active user count of 10 million. Just 9 days ago, it was 6 million. OpenAI subsequently reset the usage limits for paid users of both products.In March of this year, Codex had only 2 million weekly active users, and now the combined total for both products has expanded to 5 times.OpenAI had previously promised that for every additional 1 million users from 3 million to 10 million, the usage limits would be reset. This is the final milestone of this commitment.