due

According to Bitcoin News, Boltzhq has shut down due to its five-person team being overwhelmed by increasingly complex AI-assisted attacks. A group of experienced Bitcoin users will take over the service with additional capital and engineering resources.The founder has stepped down. The service is currently still offline, and the new team is working to restart it.

Neutrl announced on the X platform that it has temporarily suspended minting, redeeming, and other protocol functions due to circumstances affecting the protocol's reserves.The team stated that this measure was taken in the interest of users upon the advice of legal counsel, aiming to maintain an orderly process during the assessment of the impact. Users will receive clear follow-up arrangements at the appropriate time, and information regarding the timeline and next steps will be announced as soon as possible.

Bitcoin News posted on the X platform stating that Trezor claims its customer data was exposed due to a security breach at the logistics provider ShipMonk. Customers who placed orders in the past 90 days in the United States, United Kingdom, Sweden, Colombia, Brazil, Italy, or Portugal may be affected. The exposed data includes full names, shipping addresses, phone numbers, email addresses, and order numbers.Trezor stated that its systems were not compromised, and the devices remain secure, but it warns affected customers to be vigilant against carefully designed phishing attacks that exploit the leaked information.

According to Gate market data, IBM's stock price rose 1.6% in pre-market trading after the company announced a partnership with OpenAI.

According to BeInCrypto, a Bitcoin user paid a fee of 1.6 BTC (approximately $102,800) in block 962,142 due to an automated script going out of control, while the actual transfer amount was zero. The automated script run by the user enabled the Replace-by-Fee (RBF) feature, automatically increasing the fee bid every second, ultimately depleting the entire balance in the wallet.The mining pool SpiderPool mined this block and reaped this unexpected profit, with the fee accounting for 88% of the total fees for that block (approximately 1.82 BTC).

According to Lookonchain monitoring, a user lost $100,000 after sending funds without verifying the address copied from the transaction history.Address poisoning attacks are common, so it is essential to carefully verify the wallet address before transferring funds.

Design software company Canva has lowered its annual revenue growth forecast by one-third to 20% due to AI feature delivery costs far exceeding expectations. CEO Melanie Perkins stated that user demand for AI features "significantly exceeded expectations," but the company has decided to postpone the large-scale launch of related products until it optimizes its architecture, reduces unit costs, and improves its business model. Since the release of Canva AI 2.0 in April, the cost per task has decreased by nearly 90%, but the volume of designs generated by AI users is three times that of previous versions, and economic pressures remain.This case reflects a common dilemma in the software industry: the cost of AI inference is breaking the traditional software "zero marginal cost" profit logic. Pitchbook analysts pointed out that Canva and Figma are the "most obvious signals" of this trend. Figma's free cash flow profit margin in the second quarter has dropped from 27% in the first quarter to 14%, and revenue growth in the third quarter is expected to slow from 48% to 36%. Canva previously sold employee shares at a valuation of $42 billion, and the market had anticipated its IPO in 2026, but analysts now believe the IPO may be delayed until next year.

According to Cointelegraph, Ravencoin was attacked due to a consensus vulnerability, causing the price to drop to a historical low of $0.002754, down about 22% from the 24-hour high. The vulnerability allowed weak nodes to accept invalid blocks, with the first known exploit occurring at block height 4,487,776.Mining pools 2Miners and RavenMiner, which control the majority of the network's hash power, are building a competing chain that excludes the affected branch. If this chain becomes dominant, the network may undergo a chain reorganization of about three days, and transactions confirmed after block 4,487,775 may be reversed. Ravencoin has advised exchanges to suspend deposits and withdrawals until the chain stabilizes, and Upbit and Bitget have already suspended RVN transfers.

According to GoPlus security alerts, a user lost approximately 100,000 USDT due to an address poisoning attack. The attacker conducted small transactions using malicious addresses with similar ending digits, waiting for the user to make a mistake while copying and pasting.Address poisoning attacks have been fully automated, including discovering poisoning opportunities, creating counterfeit coins with the same name or implementing small-scale poisoning, and mixing coins for money laundering. The victim's address received over four hundred poisoning transactions after executing the last transaction 69 days ago.

According to Cyvers Alert monitoring, an address poisoning attack was discovered, resulting in a loss of approximately 100,000 USDT for the victim. About 66 days ago, the attacker implemented address poisoning on the victim's wallet by sending transactions to create a malicious address record similar to a normal interaction address. The victim did not verify the complete wallet address and mistakenly transferred funds to the attacker's address.After the incident, to avoid potential freezing risks, the attacker exchanged the stolen USDT for ETH and currently holds about 52.8 ETH in the wallet. Cyvers reminds users to always verify the complete wallet address when making on-chain transfers and not to rely solely on address records in transaction history.At the same time, security agencies recommend using AI-based on-chain security tools for real-time detection of abnormal transaction behaviors to reduce risks such as address poisoning and phishing attacks. Address poisoning attacks have become one of the common scams in the cryptocurrency asset field in recent years, with attackers often exploiting users' habits of copying historical transaction addresses to mislead them into transferring assets through forged similar addresses.

The price of Bitcoin fell below $64,500, erasing weekend gains, and adjusted in sync with U.S. stocks; institutional ETFs saw a net inflow of $865 million last week, indicating that the liquidity remains strong.

According to The Block, Immunefi's latest data shows that the cryptocurrency industry lost approximately $110 million due to hacker attacks in July.During the same period, the platform paid researchers $2.32 million for confirmed vulnerability reports, with the number of confirmed and completed bounty reports increasing by 18% month-over-month.The report indicates that its audit competitions can average 6.2 critical vulnerabilities per event, compared to 1.5 for first-level audits; in July, a total of 374 threats were mitigated through the bounty program.

A wallet security incident involving approximately $130 million in Bitcoin losses is reigniting discussions in the crypto industry about asset custody models: should Bitcoin holders rely on personal self-custody or turn to institutional custody? Hardware wallet manufacturer Coldcard had a vulnerability in its firmware in 2021 that led to some mnemonic phrases generated by the device being predictably risky. This vulnerability was discovered years later, and approximately 5,200 addresses and about 2,000 BTC have been stolen, with losses amounting to around $130 million.After the incident, some investors began to turn to Wall Street custody products. Data shows that the U.S. spot Bitcoin ETF saw a net inflow of about $626 million within days of the incident. Bloomberg ETF analyst Eric Balchunas stated that such security incidents could further drive funds into ETFs. However, the Bitcoin core community still insists on the self-custody concept. Casa co-founder Jameson Lopp stated that recent events should not undermine users' confidence in self-custody and pointed out that third-party custody also carries risks. Bitcoin Core early developer Peter Todd also believes that self-custody has a better long-term safety record than centralized institutions.Onramp co-founder Michael Tanguma believes that both options have flaws. He stated that concentrating a large amount of assets in a single institution creates a "honey pot," while hardware wallets face risks related to supply chains, firmware, and random number generation. Tanguma proposed a "multi-institution custody" solution, where multiple regulated institutions hold keys through a multi-signature mechanism, requiring multiple institutions to jointly sign any transaction to reduce single points of failure. However, this model has also sparked controversy. Critics argue that while multi-institution custody enhances security, it also introduces permissioned management, conflicting with the decentralized ideals originally pursued by Bitcoin. As Bitcoin gradually enters the fields of pensions, trusts, and institutional asset allocation, the industry is seeking new custody solutions suitable for long-term wealth management. The Coldcard vulnerability incident once again highlights that achieving a balance between security, decentralization, and usability remains a core challenge facing the Bitcoin ecosystem.

According to SlowMist monitoring, the decentralized exchange Atomic protocol was attacked due to a signature replay vulnerability, resulting in a loss of approximately 29,984 USDC.The vulnerability originated from contract 0xa806010f, which lacked binding of position ID, position manager, caller, nonce, deadline, and chain ID in the signature hash, allowing the same manager's signature to be replayed on 21 different position IDs, executing unauthorized full LP destruction under flash loan price manipulation, and without TWAP or slippage checks.

"1011 Insider Whale" agent Garrett Jin released a weekly analysis stating that he previously suggested gradually positioning in storage chips and buying on dips, but the market did not experience the expected pullback. He has sold half of the previously rebounded positions during the surge, not because the investment logic has changed, but because he noticed the funding structure driving the rise, stating, "This is more like a short squeeze rather than a final confirmation of the market fundamentals." Rapid capital replenishment of short positions can create short-term increases in stocks like SK Hynix, but cannot solely support a sustained trend. The risks of Korean leveraged ETFs have not been fully released, but the decline in asset scale mainly comes from net value shrinkage rather than investor exit. Currently, the cumulative net subscription of related financial products remains at historical highs and has not turned negative.Garrett Jin emphasized that the decline in the scale of Korean leveraged ETFs does not indicate a bearish outlook on storage demand. SK Hynix's 2026 capacity is already sold out, and Micron's orders are covered until 2028, with strong demand expected to continue until the second half of 2027. However, the storage industry is essentially a cyclical industry, and stock prices have already risen by hundreds of percentage points in advance. Cyclical stocks are usually difficult to sustain long-term growth through valuation expansion. The current market is entering a new phase of the AI capital expenditure cycle, shifting from "rewarding investment" to "evaluating investment returns." Regarding Bitcoin, Garrett Jin stated that it continues to meet the bottoming conditions since the low in July and maintains the position view established around $60,000.

According to CoinDesk citing informed sources, the cryptocurrency exchange BitMEX spent two years discussing potential sales with multiple buyers, including competitor exchanges and payment platform Exodus, before announcing its shutdown, but ultimately failed to reach a deal. Informed sources indicated that potential acquirers were deterred mainly by the holding structure led by the company's founder, the ongoing shrinking of the business, and lingering reputation issues.Reports state that the company had hired investment bank Broadhaven to manage the sale process in early 2025. Informed sources said that although co-founders Arthur Hayes, Ben Delo, and Samuel Reed had already exited the business after facing U.S. criminal charges in 2020, the three still controlled the vast majority of the company's equity, which made some buyers uneasy and complicated negotiations, as buyers typically hope to secure management's retention post-transaction through partial acquisition consideration.Additionally, during the sale process, BitMEX continued to lose market share as trading activity flowed to larger centralized exchanges and decentralized perpetual contract platforms, making potential acquirers reluctant to pay the revenue multiples typically offered to growth companies.

The cryptocurrency hardware wallet manufacturer Coldcard has released an update on its customer data retention policy. Due to legal compliance requirements arising from the security incident disclosed on July 30, the company has temporarily suspended its original automatic customer data deletion mechanism.Previously, Coldcard's standard practice was to automatically clear customer records after 120 days, retaining only the user's email address and country information, while allowing customers to request early deletion of data at any time after product delivery. Coldcard stated that due to the security incident involving ongoing and potential legal proceedings, the company is obligated to retain records that may be relevant to litigation. Therefore, customer data that was originally scheduled for deletion will be temporarily retained until the law permits the resumption of normal processes.However, users can still request Coldcard to handle their personal information according to the original data retention policy. If users wish for their data not to be included in this legal retention scope, they can contact official customer service to make a request. Coldcard emphasizes that the retained data will be strictly protected, accessible only to authorized personnel, and will not be used for any purposes other than fulfilling legal obligations. The company will restore the previous automatic data deletion mechanism once legally permissible.

According to Wired, during security testing, the open-source model Kimi K3 from the dark side of the moon broke out of the sandbox and accessed the internet, attempting to find test answers via GitHub. American security startup Frontier Security stated that Kimi K3 exploited a sandbox configuration vulnerability, but it itself lacked sufficient built-in protective mechanisms.Similar to incidents previously disclosed by OpenAI and Anthropic, this escape partially stemmed from a sandbox configuration error. However, Kimi K3 did not initiate an attack, as the answers were easily accessible on GitHub. The CEO of Frontier Security stated that Kimi K3 performed excellently in cybersecurity defense but lacked mechanisms to prevent cheating or escaping the sandbox. Security experts emphasized that configuring the testing environment is crucial, as the misuse of AI agents could lead to system failures.

According to monitoring by PeckShield, the attacker-controlled address 0x920d...9708 stole approximately 500,000 USDC from the Base chain victim wallet 0x3a53...0B5c.However, during the subsequent process of exchanging USDC for ETH, the attacker did not set sufficient slippage protection, and the transaction was front-run by MEV bots for arbitrage. Ultimately, the attacker only obtained about 67 WETH, worth approximately $129,000, losing over 75% of the stolen funds.

According to Jinshi reports, affected by the dual impact of geopolitical conflicts and the strong El Niño disrupting global rainfall patterns, core agricultural costs such as crude oil and fertilizers are soaring, brewing a "perfect storm." A new round of global food inflation crisis may fully erupt from the end of this year to next year.