nvo

Bitcoin News posted on the X platform stating that Trezor claims its customer data was exposed due to a security breach at the logistics provider ShipMonk. Customers who placed orders in the past 90 days in the United States, United Kingdom, Sweden, Colombia, Brazil, Italy, or Portugal may be affected. The exposed data includes full names, shipping addresses, phone numbers, email addresses, and order numbers.Trezor stated that its systems were not compromised, and the devices remain secure, but it warns affected customers to be vigilant against carefully designed phishing attacks that exploit the leaked information.

After the Coldcard hardware wallet firmware vulnerability was exploited, approximately 2,100 bitcoins were stolen, resulting in a loss of nearly $130 million. On-chain data shows that long-term holders transferred about 233,000 bitcoins from their wallets in the days before and after the incident, worth approximately $15 billion.Casa CEO Nick Neuman stated that some of the transferred funds came from Coldcard users migrating to multi-signature wallets, and Ledger and Trezor users also took similar measures after the incident. During the same period, about 22,000 bitcoins were transferred to exchanges. Coinkite has requested that users who generated recovery phrases using firmware versions 4.1 to 4.1.9 consider the related wallets compromised and immediately migrate to new recovery phrases. The aforementioned versions cover from March 2021 to July 2026.

The perpetual contract DEX Extended, developed by the former Revolut team, has announced the results of its points program update, excluding 5,038,989 points generated through non-natural or manipulative activities. This adjustment covers 4,017 affected accounts and 35 identified Sybil operations and other prohibited behaviors.After the update, the total amount of the points program is 64,673,031 points (as of August 10, 2026). The excluded points have been returned to the program budget, available for genuine participants to continue earning. The total allocation cap for the points program remains no more than 70 million.The review scope includes cross-account wash trading, self-referral, Sybil wallet groups, and coordinated multi-account activities, with adjustments made based on the quantitative rules under the points program terms.

According to Onchain Lens monitoring, a certain whale transferred 500 bitcoins to FalconX, worth approximately 32 million dollars; transferred 274 bitcoins to the Cumberland over-the-counter trading desk, worth approximately 17.5 million dollars.Additionally, 500 bitcoins were transferred to a new address, possibly to be transferred next to Galaxy Digital. The total value of the above transfers is 81.5 million dollars.

A wallet security incident involving approximately $130 million in Bitcoin losses is reigniting discussions in the crypto industry about asset custody models: should Bitcoin holders rely on personal self-custody or turn to institutional custody? Hardware wallet manufacturer Coldcard had a vulnerability in its firmware in 2021 that led to some mnemonic phrases generated by the device being predictably risky. This vulnerability was discovered years later, and approximately 5,200 addresses and about 2,000 BTC have been stolen, with losses amounting to around $130 million.After the incident, some investors began to turn to Wall Street custody products. Data shows that the U.S. spot Bitcoin ETF saw a net inflow of about $626 million within days of the incident. Bloomberg ETF analyst Eric Balchunas stated that such security incidents could further drive funds into ETFs. However, the Bitcoin core community still insists on the self-custody concept. Casa co-founder Jameson Lopp stated that recent events should not undermine users' confidence in self-custody and pointed out that third-party custody also carries risks. Bitcoin Core early developer Peter Todd also believes that self-custody has a better long-term safety record than centralized institutions.Onramp co-founder Michael Tanguma believes that both options have flaws. He stated that concentrating a large amount of assets in a single institution creates a "honey pot," while hardware wallets face risks related to supply chains, firmware, and random number generation. Tanguma proposed a "multi-institution custody" solution, where multiple regulated institutions hold keys through a multi-signature mechanism, requiring multiple institutions to jointly sign any transaction to reduce single points of failure. However, this model has also sparked controversy. Critics argue that while multi-institution custody enhances security, it also introduces permissioned management, conflicting with the decentralized ideals originally pursued by Bitcoin. As Bitcoin gradually enters the fields of pensions, trusts, and institutional asset allocation, the industry is seeking new custody solutions suitable for long-term wealth management. The Coldcard vulnerability incident once again highlights that achieving a balance between security, decentralization, and usability remains a core challenge facing the Bitcoin ecosystem.

According to Livecoins, Brazil's Superior Court of Justice (STJ) rejected the release request of the suspect Luccas, maintaining his detention in São Paulo state. The case involves a large-scale fraud against the technology company C&M Software, with the suspect accused of illegally accessing the company's clearing system to steal approximately 813 million reais (about 160 million USD).The criminals dispersed the funds into nearly 300 fake bank accounts to increase tracking difficulty, and then exchanged the reais for BTC and USDT through multiple blockchains, attempting to cover up the illegal source of funds, constituting money laundering. The main attack occurred in June 2025, with the criminal organization having clearly defined roles (including transfer operators and cryptocurrency fund managers) and bribing internal company employees to assist in cracking the server passwords. The first-instance judge has ordered the arrest of the suspect and about 20 other individuals involved in the case, with the arrest warrant executed at the end of October.

The Federal Security Service of the Russian Federation (FSB) conducted raids on 9 unregistered cryptocurrency trading service providers in Moscow, claiming they were suspected of transferring funds obtained from fraud abroad through cryptocurrency assets, and detained more than 20 employees at the Moscow International Business Center.The FSB stated that these exchanges converted stolen funds from Russian telephone scam victims into cryptocurrency and transferred them to accounts they referred to as Ukrainian processing parties. The operation was carried out jointly by the FSB and the Russian Ministry of Internal Affairs. The Russian Ministry of Internal Affairs has initiated a criminal investigation into large-scale fraud, which under Russian law can carry a maximum sentence of 10 years in prison. The FSB stated that it is continuing to identify victims and assess potential compensation.

According to OnchainDataNerd monitoring, Amber Group (@ambergroup_io) related addresses withdrew approximately $9.97 million in assets from Binance 10 hours ago, involving five types of tokens.This withdrawal includes 38.89 million ENA (approximately $3.58 million), 28,262 AAVE (approximately $2.52 million), 1,140 ETH (approximately $218,000), 2,017 BNB (approximately $120,000), and 59,202 LINK (approximately $490,000).

U.S. Senator Elizabeth Warren has requested the U.S. Department of Commerce to explain its policy towards the UAE, which involves granting the UAE-related entities more access to AI chip exports after the UAE invested in the Trump family-supported cryptocurrency project World Liberty Financial.In a letter to Commerce Secretary Howard Lutnick, it was mentioned that an entity in Abu Dhabi invested $500 million in World Liberty Financial in January; another UAE-related company used World Liberty's USD 1 stablecoin to complete a $2 billion investment in the cryptocurrency exchange Binance. The U.S. Department of Commerce previously reclassified the UAE to Country Group A:5, allowing it to receive more license-free exports, including advanced chips. The department also stated that it would "actively review" license applications for exporting chips and servers to the UAE entity MGX involved in the $2 billion investment in Binance.Warren stated that the actions of the Department of Commerce raise significant questions about how the President's cryptocurrency business interests may affect institutional operations and national security. In June, several senators, including Warren, requested a hearing on the $500 million transaction involving World Liberty Financial.

According to The Block, former Los Angeles police officer Eric Halem was sentenced to life in prison plus 15 years for his involvement in a cryptocurrency-related robbery case.

According to the Hong Kong Wen Wei Po, the Hong Kong Police Commercial Crime Bureau, together with the Macao Judiciary Police, launched a cross-border joint law enforcement operation codenamed "Junli" from August 1 to 3, successfully cracking down on a fraud criminal group that claimed to be involved in virtual currency investment.The Hong Kong police arrested 1 man and 5 women (aged 51 to 64) on charges of "conspiracy to commit fraud," with those involved including company directors, shareholders, company secretaries, and key promotional members; the Macao Judiciary Police also arrested 2 women involved in the case on charges of "aggravated fraud." As of August 3, the Hong Kong police had received a total of 225 reports, with losses amounting to approximately 94 million Hong Kong dollars; the Macao police received 9 reports, involving losses of about 3.6 million Macao patacas, totaling over 97 million.

Bitcoin News posted on the X platform that new evidence shows the anonymous switck account that wrote the LibNgU code may actually be Peter Gray, co-founder and CTO of Coinkite, as the code is at the core of the COLDCARD entropy failure incident.Researchers claim that Gray's GPG key signed dozens of switck submissions, and other identifiers seem to link the two identities. Bitcoin developer James O'Beirne stated that he warned Coinkite in May 2025 that the RNG implementation of LibNgU looked suspicious and suggested removing it, but he said the response was that any issues should have already been discovered. Screenshots also show that as early as April 2021, users had already questioned the rewrite of LibNgU.If these findings are accurate, it means that the engineer who introduced the code was later associated with the theft of over 1,800 BTC and had received direct warnings about the RNG implementation more than a year before the vulnerability was publicly disclosed.

According to monitoring by the head of Galaxy Research, less than 1 BTC was stolen overnight through a victim's report, identifying a new attack where the attacker transferred 12 BTC from 126 addresses, with the attack footprint marked as "footprint O."

According to SemiAnalysis, AMD reached a performance-based warrant agreement with Meta and OpenAI from the end of last year to the beginning of this year. The warrants will vest in batches based on the two companies' procurement and deployment of up to 6GW of AMD Instinct GPUs, while AMD's stock price must exceed a tiered target (up to $600).As AMD's stock price has risen from around $200 in early 2026 to the current $500-600, SemiAnalysis estimates that the GPU capital costs for Meta and OpenAI have decreased from about $2.15/hour and $2.50/hour to approximately $1.60/hour and $1.75/hour, respectively. If AMD's stock price rises to $600-700, the capital cost of the GPUs themselves will approach zero; if it further exceeds $1000, the total capital cost of the entire cluster (including servers, networks, and CPUs) will effectively be zero for both companies. This analysis is based on the assumption of linear vesting and the premise that the entire 6GW capacity is deployed, and the specific terms of the warrants have not been disclosed.

According to The Block, the Hong Kong police stated that a local insurance practitioner fell victim to a fraudulent cryptocurrency investment romance scam, with total losses exceeding 26 million Hong Kong dollars, approximately 3.3 million US dollars.

The Thai Immigration Bureau recently issued a warning, pointing out that while the cross-border trade of amulets is thriving, it is being exploited by gray capital networks as a money laundering channel.From online gambling, telecom fraud to drug smuggling, some illegal proceeds are being disguised as legitimate business income through means such as amulet trading, fake auctions, temple rentals, and cryptocurrency peer-to-peer transfers.

According to Jinshi reports, former U.S. Vice President Harris stated that this war with Iran is a conflict that current President Trump chose to engage in actively, and he has joined forces with Israel to go to war, while there is no clear national security issue for the United States.

According to a report by Hong Kong 01, "Fun Coffee," which claims to be rooted in Vietnam, just entered Hong Kong at the end of 2025 and was warned by the Hong Kong Securities and Futures Commission in July 2026 for being a suspicious investment product. The company appears to be investing in the coffee business, but in reality, it is a virtual currency investment scam with annual interest rates as high as 222%, ultimately "collapsing" at the end of July.The victim group has over 370 people, with each person defrauded of hundreds of thousands of dollars. Multiple investment groups combined have a total of 4,000 people involved, with funds exceeding 1 billion Hong Kong dollars. A middle-aged woman in her 50s claims that she unknowingly became a shareholder and director of one of Fun Coffee's Hong Kong registered companies, and she has over a hundred "downlines." After being contacted by reporters, she has gone to the police to report the case. The police have received 115 reports, which have been handed over to the Commercial Crime Bureau's fraud investigation team for follow-up.The report states that Fun Coffee held a marathon event in Hong Kong at the end of last year, inviting artist Yuen Siu Cheung to host and distributing anti-fraud leaflets for promotion in various districts. The company's headquarters in Kowloon Bay and its storefront in Mong Kok are now empty, with notices of unpaid rent posted. The Securities and Futures Commission issued a warning on July 13, and the Vietnamese Ministry of Public Security also warned in May that it is suspected to be a Ponzi scheme.

The U.S. Attorney's Office announced that it has filed a civil forfeiture lawsuit to recover 47,461.73111 USDT, stating that this amount comes from a cyber fraud case. The fraudsters deceived victims into depositing funds into cryptocurrency ATMs and then stole the funds.Law enforcement tracked part of the funds to a cryptocurrency wallet and seized it in March 2026. The investigation also confirmed that the funds of four other similar fraud victims can be traced back to the same wallet.

According to on-chain analyst Onchain Lens, a trader who has accumulated approximately $6.46 million in profits on the Hyperliquid platform established a short position with a total scale of about $8.14 million after depositing 1.5 million USDC.Their main short positions include: SPCX approximately $2.37 million, DRAM approximately $1.3 million, MU approximately $1.11 million, with leverage of 2 times. In addition, the trader has allocated additional short positions across multiple assets.