nera

According to the monitoring by the head of Galaxy Research, it has communicated with over 190 victims of Coldcard vulnerability attacks and has asked victims who have not yet contacted them to reach out via private message so that they can provide tracking information and assist in reporting losses to the relevant authorities.Since August 6, no new attack incidents have been confirmed, but this does not mean that new attacks will not occur, and vigilance is required.

Bitcoin News posted on the X platform that after two weeks of using cutting-edge AI to scan almost the entire Bitcoin open-source ecosystem for vulnerabilities, Bitcoin Red Team member @callebtc stated, "The easily discoverable vulnerabilities have been addressed," and maintainers are verifying "a large number" of serious and high-risk vulnerabilities.@callebtc indicated that the main findings include: decades of accumulated open-source technical debt are being exposed alongside AI capabilities that can discover vulnerabilities at speeds and scales unattainable by human researchers; Lightning seems particularly vulnerable, with its complexity meaning its security status is "worse than average"; unmaintained Bitcoin projects should be considered vulnerable until their security is confirmed.Projects that began building AI security and auditing processes months ago are now in a completely different position compared to those that have been waiting until now. The Bitcoin Red Team has now completed a foundational scan of almost the entire Bitcoin open-source ecosystem. Easily discoverable vulnerabilities have mostly been addressed, but as AI capabilities improve, external red team testing may need to continue indefinitely. Despite discovering and reporting "a large number" of real serious and high-risk vulnerabilities, @callebtc believes this process will ultimately make Bitcoin stronger. The same AI security review will soon expand to areas far beyond Bitcoin.

Bitcoin News posted on the X platform stating that Trezor claims its customer data was exposed due to a security breach at the logistics provider ShipMonk. Customers who placed orders in the past 90 days in the United States, United Kingdom, Sweden, Colombia, Brazil, Italy, or Portugal may be affected. The exposed data includes full names, shipping addresses, phone numbers, email addresses, and order numbers.Trezor stated that its systems were not compromised, and the devices remain secure, but it warns affected customers to be vigilant against carefully designed phishing attacks that exploit the leaked information.

According to Harmony monitoring, Harmony stated that it is advancing the rollback plan and has reached an agreement with validators and exchanges on the specific path. The minting vulnerability fix has been activated, and a complete list of attacker wallets will be announced soon.Previously, the number of ONE tokens abnormally minted on the Harmony network had exceeded 30 trillion, involving 6 abnormal blocks.

According to a report by Decrypt, Israeli cybersecurity company ASecurity released a report stating that a researcher used publicly available AI models to discover multiple vulnerabilities in the Zoom annotation tool in less than 24 hours with fewer than 20 prompts, and constructed an exploitable attack chain. The vulnerabilities are numbered CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415, allowing attackers to remotely execute code in meetings without any action from the victim, control their devices, steal data, and activate the microphone or camera.The attack was tested successfully on Windows, macOS, Linux, Android, and iOS versions of Zoom. ASecurity claimed it reached a "national-level" standard, whereas previously constructing such exploitation tools required months of work and a substantial budget from professional teams. ASecurity reported the first vulnerability to Zoom on June 10, and Zoom released fixes between June 22 and July 20, but the server-side protections in end-to-end encrypted meetings could not filter malicious messages, requiring users to update manually. A Zoom spokesperson confirmed that the issue has been resolved and advised users to keep their versions up to date.

According to Fortune, Bank of America announced a $250 billion infrastructure investment plan on Wednesday, committing to invest in key infrastructure areas in the United States over the next year. The investment scope covers multiple fields including data centers and computing power, renewable energy generation, energy storage, natural gas, transmission networks, and critical minerals and mining, with the goal of supporting energy security, job growth, and economic competitiveness.

The Bitcoin wallet Electrum has released version 4.8.1, with the official statement claiming that this update includes "important security fixes" and urging users to upgrade as soon as possible.Developers involved in reproducible builds have provided independent signatures for the binary packages on the download page to verify the consistency between the release package and the source code.

According to Cointelegraph, Ravencoin was attacked due to a consensus vulnerability, causing the price to drop to a historical low of $0.002754, down about 22% from the 24-hour high. The vulnerability allowed weak nodes to accept invalid blocks, with the first known exploit occurring at block height 4,487,776.Mining pools 2Miners and RavenMiner, which control the majority of the network's hash power, are building a competing chain that excludes the affected branch. If this chain becomes dominant, the network may undergo a chain reorganization of about three days, and transactions confirmed after block 4,487,775 may be reversed. Ravencoin has advised exchanges to suspend deposits and withdrawals until the chain stabilizes, and Upbit and Bitget have already suspended RVN transfers.

According to The Block, due to the wallet migration triggered by the Coldcard vulnerability, the number of new Bitcoin addresses surged from about 260,000 to over 330,000 last week, reversing the downward trend that persisted for most of 2026.Since July 30, Coinkite hardware wallet users have lost at least 1,816 BTC (approximately $116 million) in four waves of attacks. The vulnerability originated from a firmware defect in 2021—using a less secure software random number generator when generating mnemonic phrases instead of the device's built-in hardware entropy source, allowing attackers to brute-force wallets generated offline. Coinkite has advised users who generated wallets between March 2021 and the release of the security patch to migrate to new wallets.This incident highlights the risks associated with self-custody, as users are reassessing the pros and cons of self-custody versus custodial solutions like centralized exchanges or ETFs.

The PoW blockchain Ravencoin tweeted that its network has a critical consensus vulnerability that has been exploited, causing weak nodes to accept invalid blocks. The first known invalid block appeared at height 4,487,776. Currently, the majority hash power holders 2Miners and RavenMiner have stated that they are mining a chain that excludes the exploited branch starting from height 4,487,776.If this chain becomes the dominant chain, it may lead to approximately three days of deep chain reorganization. The official recommendation is for CEX to temporarily suspend RVN deposits and withdrawals until the network stabilizes; transactions confirmed after height 4,487,775 should be considered at risk. The official also emphasizes that this notice aims to increase transparency and risk awareness and does not represent an endorsement of any rollback or recovery plan.

Oraichain stated that yesterday's incident originated from a vulnerability in the EVM cross-chain transfer path, which led to the unauthorized minting of ORAI. Since August 9 at 04:00 UTC, the network has been suspended, and the bridging contracts, cross-chain paths, and public interfaces have also been restricted.The related vulnerability path has been identified and addressed, and the associated fund transfer paths have been restricted. The team is working with partners and centralized exchanges to limit further fund movement and protect affected assets. Investigations and account reconciliations are still ongoing, and the team is preparing to restore the standard supply of ORAI, including the destruction of unauthorized minted balances and reconciling and fixing the affected protocol states.

OpenAI announced the expansion of its cybersecurity defense program Daybreak and launched the GPT-5.6-Cyber model specifically for the cybersecurity field, aimed at helping authorized security researchers and defense teams enhance their vulnerability discovery, threat analysis, and security testing capabilities. As attackers increasingly leverage AI to launch faster and larger-scale cyberattacks, defenders need to gain advanced AI capabilities in advance.This Daybreak offers two types of access: Daybreak Blue is aimed at most defense teams, providing general models such as GPT-5.6 Sol for vulnerability discovery, secure code review, malware analysis, incident response, and patch validation; Daybreak Red is aimed at advanced security research, providing GPT-5.6-Cyber for authorized vulnerability research, vulnerability validation, and security testing. GPT-5.6-Cyber is trained on GPT-5.6 Sol and optimized for cybersecurity tasks, including discovering zero-day vulnerabilities and analyzing exploit chains. It has been used in actual vulnerability research and has identified high-risk vulnerabilities in software, including the Chrome V8 JavaScript engine. Additionally, OpenAI stated that GPT-5.6-Cyber has also helped discover high-risk vulnerabilities in various domains, including privilege escalation vulnerabilities in mobile operating systems, remote code execution vulnerabilities in databases, and hundreds of privilege escalation vulnerabilities in operating system kernels.OpenAI also emphasized that Daybreak Red will only be accessible to approved individuals and organizations, controlling access through measures such as authentication, account security, monitoring, usage restrictions, and legal disclaimers. The company stated that it will continue to strengthen security monitoring, access management, and model security testing to reduce the risk of advanced cybersecurity models being abused.

Coinsbuy confirmed a security incident, with unauthorized withdrawals from the platform wallet. The company stated that it has covered customer losses with its own reserves and is offering a reward of $100,000.

Bitcoin News posted on the X platform that Bitcoin developers have launched a new visualization tool to explain how entropy works and how to generate randomness for Bitcoin private keys.The tool covers true random number generators (TRNG), pseudo-random number generators (PRNG), rolling dice, and flipping coins.

Grayscale Research Director Zach Pandl stated that the global alternative asset market has grown nearly 7 times since the 2008 financial crisis, with the share of private equity, private credit, hedge funds, physical assets, and cryptocurrency in global portfolios continuing to rise. According to the data he cited, within alternative assets, private equity accounts for about 29%, hedge funds about 23%, and cryptocurrency about 13%.Zach Pandl mentioned that differences in intergenerational allocation preferences may further strengthen this trend. According to a Bank of America survey of high-net-worth individuals, investors aged 21 to 43 allocate about 53% of their assets outside of traditional stocks and bonds, while the proportion for those aged 44 and above is 26%. With over $100 trillion in wealth expected to transfer to younger generations in the coming years, their stronger preference for alternative assets may provide ongoing tailwinds for cryptocurrency.He added that the lowering of entry barriers to alternative assets is one of the reasons for this shift, with cryptocurrency developing along similar paths; regulated products like Bitcoin ETPs and institutional-grade market infrastructure provide more convenient access to exposure.

According to Forbes, the scale of the theft in the Coldcard hardware wallet vulnerability incident has risen to approximately $130 million, involving about 2,000 BTC and over 5,200 addresses, reigniting the industry's debate over who should hold private keys. Data from Bitcoin Magazine shows that in the days following the incident, the net inflow into U.S. spot Bitcoin ETFs was $626 million, with some opinions suggesting that the vulnerability may drive more funds towards ETFs.Reports indicate that supporters of self-custody remain undeterred. Casa co-founder Jameson Lopp stated that confidence in self-custody should not be lost due to recent events, as custodial institutions also rely on random number generators. Bitcoin core early developer Peter Todd noted that the historical record of self-custody is far better than that of third parties. Another viewpoint argues that both reflexive choices have flaws. Onramp co-founder Michael Tanguma stated that if the only answer is Coinbase or ETFs, it poses a serious problem, as centralizing what should be decentralized assets undermines their foundation, advocating for a multi-institutional custody solution where keys are held by multiple regulated entities.

Cryptocurrency exchange Bybit has filed a civil lawsuit in the United States District Court for the District of Columbia, suing North Korea, the North Korean Reconnaissance General Bureau, and the hacker group Lazarus Group, regarding a theft incident of approximately $1.5 billion in February 2025. Bybit stated that the judge has approved a preliminary injunction prohibiting the transfer or disposal of identified stolen assets during the case proceedings, and believes that Bybit has a high likelihood of success on the merits.The lawsuit also lists unknown individuals and entities holding or transferring the relevant funds as John Doe defendants. Bybit disclosed that approximately $48.4 million has been recovered, and about $30.5 million has been frozen across more than 28 exchanges and custodians, together accounting for approximately 5% of the stolen amount. The attackers transferred about 500,000 ETH from Bybit's cold wallet in February 2025, with most of the funds subsequently exchanged for Bitcoin via Thorchain and transferred through mixing services. Bybit stated that the case is progressing in parallel with a criminal investigation.

According to Bifrost monitoring, hackers exploited vulnerabilities in liquidity pools to steal assets worth approximately $720,000 from the vDOT single currency pool and the vASTR/ASTR and vMANTA/MANTA pools. The related assets were subsequently deposited into HitBTC and eventually flowed into Binance.Bifrost has contacted the Binance security department to submit a fund freeze application and has reported to law enforcement along with an on-chain evidence package, including transaction tracking, wallet addresses, and timestamps. Currently, Bifrost has halted all liquidity mining rewards and is conducting a comprehensive security review.

Bitcoin mining company MARA has completed two loans, obtaining $600 million in new debt after pledging 18,750 bitcoins to expand its power generation and AI infrastructure business. The collateral was valued at approximately $1.2 billion at the time of the transaction. The total principal of the two loans is $750 million, with Coinbase Credit providing $450 million, which includes refinancing of the existing $150 million credit line and an additional $300 million; Two Prime Lending provides another $300 million, and both loans have been fully drawn.The interest rate on the Coinbase loan is the midpoint of the Federal Reserve's target rate range plus 3.875 percentage points, maturing on August 4, 2028; the Two Prime loan has a fixed interest rate of 7.65%, maturing on August 3, 2028. If the principal remains unchanged, the annual interest expense for both loans is approximately $56.7 million. MARA stated that the loan funds will be used for general corporate purposes, including paying part of the cash consideration for the acquisition of Long Ridge Energy & Power LLC. The enterprise value of the transaction is approximately $1.5 billion, and Long Ridge owns a 505-megawatt gas power plant and over 1,600 acres of industrial land, which MARA plans to use for power generation, bitcoin mining, and potential AI and high-performance computing parks.

According to Decrypt, a volunteer security team stated that it scanned 150 Bitcoin code repositories using cutting-edge artificial intelligence models and discovered a dozen vulnerabilities. The team has built multiple AI-based review systems, targeting wallets, cryptographic libraries, infrastructure, and other Bitcoin projects. Team members claim that, on average, each person can find about one serious vulnerability per hour, and in the past 12 hours, they have submitted security reports to multiple projects, but specific affected projects have not yet been made public.