research

Grayscale Research Director Zach Pandl stated that the two major blockchain networks, Ethereum (ETH) and Solana (SOL), are considering adjusting their token economic models to enhance asset scarcity by reducing future token supply growth through lowering annual inflation rates. As important native assets supporting stablecoins and tokenized asset ecosystems, the prices of ETH and SOL are primarily determined by supply and demand dynamics. If the relevant code upgrade proposals are approved, under unchanged conditions, lower supply growth may provide support for token prices.According to Grayscale's analysis, if the relevant adjustments are implemented, the supply inflation rates of BTC, ETH, and SOL will continue to decline over the next five years. By the end of 2031, the annual inflation rates for Bitcoin and Ethereum are expected to be around 0.4%, and Solana around 1.1%, which is lower than gold's annual supply growth rate of about 1.8% and the U.S. CPI inflation level of about 3.3%. Currently, these token economic adjustments are still in the community discussion phase. Among them, the Solana-related proposal has gained broader support and has a higher likelihood of implementation; the Ethereum proposal still requires further discussion.If the adjustments are implemented, staking users may face reduced token rewards, as part of the staking income comes from the issuance of new tokens. However, due to the decline in the growth rate of circulating supply, the scarcity value of the tokens may increase, potentially providing price support. For ETH and SOL holders who do not participate in staking, they may benefit directly; the final returns for stakers will depend on the balance between the decrease in rewards and the increase in prices. Zach Pandl concluded that ETH and SOL are becoming important digital commodities supporting stablecoins and the tokenization of real assets, and the economic model adjustments aimed at reducing inflation may further strengthen their scarcity attributes.

According to monitoring by Bitcoin News, new research published by @PraveenPerera shows that Coldcard attackers seem to first identify addresses with vulnerabilities, then sort them by the amount of Bitcoin held, starting to transfer in batches from the addresses with the highest holdings. The transfer software used was relatively crude.One address had 225 spendable UTXOs, and the attackers extracted exactly the latest 200, leaving the earliest 25, which included a UTXO worth 0.16 BTC. This aligns perfectly with the limitation of a blockchain API investigated by researchers, which defaults to returning 200 records, indicating that the attackers may have failed to load the next page of data. The software even spent a UTXO of 294 satoshis, reportedly increasing the transaction fee by about 2040 satoshis, with the spent amount significantly higher than the value of the UTXO itself.The authors of the study believe that the builders of this tool may have a better understanding of the account balance system than of the Bitcoin UTXO model. Although the attackers seem to have obtained the complete seed of the victims, at least 75 BTC still remain in other addresses derived from the same seed. The biggest suspicion currently is that among the 153 stolen addresses, there are still 132.95 BTC, and researchers have been unable to reproduce the seed behind these addresses, so it cannot be ruled out that the attackers obtained undisclosed private device data or candidate data.

According to a report by Decrypt, Israeli cybersecurity company ASecurity released a report stating that a researcher used publicly available AI models to discover multiple vulnerabilities in the Zoom annotation tool in less than 24 hours with fewer than 20 prompts, and constructed an exploitable attack chain. The vulnerabilities are numbered CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415, allowing attackers to remotely execute code in meetings without any action from the victim, control their devices, steal data, and activate the microphone or camera.The attack was tested successfully on Windows, macOS, Linux, Android, and iOS versions of Zoom. ASecurity claimed it reached a "national-level" standard, whereas previously constructing such exploitation tools required months of work and a substantial budget from professional teams. ASecurity reported the first vulnerability to Zoom on June 10, and Zoom released fixes between June 22 and July 20, but the server-side protections in end-to-end encrypted meetings could not filter malicious messages, requiring users to update manually. A Zoom spokesperson confirmed that the issue has been resolved and advised users to keep their versions up to date.

According to Arkham monitoring, Alameda Research associated addresses transferred a total of 8.25 million USD in SOL to BitGo custody wallets through 24 transactions, presumably for distribution of compensation to FTX creditors.Arkham data shows that Alameda currently still holds over 200 million USD in SOL.

According to Cointelegraph, Mauro Eldritch, the founder of cybersecurity company BCA LTD, and Heiner García, a network threat intelligence analyst at Telefónica Tech, jointly established a fake cryptocurrency startup "Ballena Azul," successfully luring suspected North Korean IT workers to work in a controlled virtual desktop environment for up to five weeks while monitoring their behavior throughout.Investigations show that the external servers used by the workers are linked to North Korean cyber operations that previously distributed malware such as InvisibleFerret, BeaverTail, and OtterCookie; the workers also heavily relied on ChatGPT for programming assistance and Google Gemini to forge identity documents. Researchers pointed out that North Korean IT workers obtained remote jobs by faking U.S. identities, with their earnings ultimately flowing into Pyongyang's weapons of mass destruction programs. According to the U.S. Treasury Department, such programs are expected to generate nearly $800 million for North Korea in 2024.

During the US stock market, Circle (CRCL) stock price rose over 6%, reaching a high of $73.35 during the session, with a market capitalization of approximately $18 billion.Recently, Bitwise Research Director Ryan Rasmussen stated that as the stablecoin market expands to trillions of dollars, Circle's value is underestimated by the market, and it will not only become a stablecoin giant but also a payment giant.

According to ChainCatcher news, analysis from 10x Research suggests that Bitcoin may be decoupling from its correlation with the S&P 500. If the Federal Reserve lowers interest rates in September due to weak summer employment, Bitcoin is expected to become a major beneficiary alongside gold. The analysis states that after the FOMC meeting at the end of July 2026, bond traders were once convinced that the Federal Reserve would raise interest rates in September, with the market pricing in two rate hikes before the end of the year. However, the institution believes that four voters who leaned towards maintaining interest rates in July suddenly shifted to a higher threshold for rate hikes within six weeks.More importantly, seasonal factors play a role; historically, the labor market has performed poorly in the summer, which has previously driven rate cuts in September 2024 and September 2025. With the World Cup ending, similar employment weakness may force bond market traders to reassess their rate hike expectations, at which point gold and Bitcoin are expected to benefit.

According to Onchain Lens monitoring, Alameda Research's bankruptcy wallet has unstaked 201,740 SOL after staking for 5 years, worth approximately $15.27 million.This position initially held 164,380 SOL, earning approximately 37,360 SOL in staking rewards, currently valued at about $2.83 million; the value of this staked asset has increased from around $352,000 at that time to the current approximately $15.27 million.

According to CoinDesk, Bitwise Research Director Ryan Rasmussen stated that as the stablecoin market expands to a scale of trillions of dollars, Circle's value is underestimated by the market. Rasmussen expects the stablecoin market to grow from about $300 billion to $3 to $5 trillion, with Circle having a first-mover advantage due to its existing market share as U.S. stablecoin regulations take shape.He believes that Circle will not only become a stablecoin giant but also a payment giant—its payment infrastructure under construction will play a key role in a stablecoin-driven financial system, yet investors are still too focused on its reserve business. Rasmussen compared Circle's potential development trajectory to that of Visa and Mastercard, arguing that the entry of banks and other giants is not a major threat, as the pace of market expansion is sufficient for Circle to maintain growth. He mentioned that Circle's Arc blockchain will test whether it can expand from stablecoin issuance to the payment infrastructure sector, with the key in the coming year being how its economic model changes with the adoption of stablecoins and the development of infrastructure.

OpenAI announced the expansion of its cybersecurity defense program Daybreak and launched the GPT-5.6-Cyber model specifically for the cybersecurity field, aimed at helping authorized security researchers and defense teams enhance their vulnerability discovery, threat analysis, and security testing capabilities. As attackers increasingly leverage AI to launch faster and larger-scale cyberattacks, defenders need to gain advanced AI capabilities in advance.This Daybreak offers two types of access: Daybreak Blue is aimed at most defense teams, providing general models such as GPT-5.6 Sol for vulnerability discovery, secure code review, malware analysis, incident response, and patch validation; Daybreak Red is aimed at advanced security research, providing GPT-5.6-Cyber for authorized vulnerability research, vulnerability validation, and security testing. GPT-5.6-Cyber is trained on GPT-5.6 Sol and optimized for cybersecurity tasks, including discovering zero-day vulnerabilities and analyzing exploit chains. It has been used in actual vulnerability research and has identified high-risk vulnerabilities in software, including the Chrome V8 JavaScript engine. Additionally, OpenAI stated that GPT-5.6-Cyber has also helped discover high-risk vulnerabilities in various domains, including privilege escalation vulnerabilities in mobile operating systems, remote code execution vulnerabilities in databases, and hundreds of privilege escalation vulnerabilities in operating system kernels.OpenAI also emphasized that Daybreak Red will only be accessible to approved individuals and organizations, controlling access through measures such as authentication, account security, monitoring, usage restrictions, and legal disclaimers. The company stated that it will continue to strengthen security monitoring, access management, and model security testing to reduce the risk of advanced cybersecurity models being abused.

According to a report by CNBC, the latest research published in the academic journal "Review of Accounting Studies" shows that among U.S. taxpayers holding virtual currencies, the actual proportion of those reporting transactions to the federal government is only 32% to 56%.As the IRS will require intermediaries to submit virtual currency tax forms "Form 1099-DA" starting in 2025, discrepancies between reports from businesses and taxpayer filings will be more easily identified by authorities. In the first year, the form only needs to report total earnings, while the obligation to report cost basis will officially be included starting in 2026.

Bitcoin Red Team member @Rob1Ham stated that OpenAI has prevented him from continuing security analysis on the Bitcoin codebase, despite his responsible disclosure of real vulnerabilities present in it.Rob1Ham mentioned that he had previously completed the authentication and onboarding process related to OpenAI's cybersecurity capabilities, but is currently unable to continue investigating whether the remediation measures are sufficient or if other vulnerabilities still exist. He stated that he will resume Bitcoin security research using Chinese open-source AI models in the future. Rob1Ham said, "Black hat hackers will not attack these issues, white hat hackers will." He also stated, "For those who do not comply with the rules and engage in harmful behavior, intelligence is unrestricted, while those committed to reducing harm are excluded."

According to CNBC, a research report published in March by the academic journal "Accounting Research Review" estimates that only 32% to 56% of cryptocurrency holders in the United States have reported their transactions to the federal government. The IRS will require brokers to send investors Form 1099-DA, detailing their total gains from digital assets, starting from the 2025 tax year. Accountants say that determining the taxes involved in digital asset transactions has historically been an extremely complex task, often much more difficult than calculating taxes for traditional financial assets like stocks and bonds.

Galaxy Research stated that Ethereum and Solana are re-evaluating their token issuance mechanisms, with the core issue being how to balance the token budget required for network security with long-term supply pressure. Adjusting the inflation rate may have an impact.

According to a post by Galaxy Research, as of now, approximately 1719 BTC have been confirmed stolen in the Coldcard hardware wallet vulnerability attack, valued at around 111 million USD. Several other transactions are still under verification, and the total loss is expected to exceed 130 million USD. If the unverified portion is ultimately confirmed, the scale of theft could reach over 2300 BTC. In addition, collaborating researchers have received reports from more than 250 victims. Based on the loss situation from the first three waves, most victims are ordinary Bitcoin holders rather than whales.Galaxy Research stated that it is currently tracking over 25 independent attack patterns, including the previous first to third waves, indicating that multiple different threat actors are actively exploiting the vulnerability. All addresses corresponding to the stolen coins were created after the affected firmware was released on March 17, 2021. There is currently no evidence that the vulnerability affects other signing devices or wallets outside of the Coldcard Mk3, Mk4, Mk5, and Q series firmware released after that date.

Former OpenAI research engineer Justin Wang announced that he has joined the cryptocurrency venture capital firm Paradigm as a research partner. He will collaborate with the team under the leadership of Matt Huang and Alana Palmedo to continue cutting-edge research.Justin Wang previously participated in the EVMbench project at OpenAI and has used Paradigm's open-source tools. In the short term, he is focusing on areas related to AI model measurement and evaluation, recursive self-improvement, effective AI policy, as well as network and cryptographic capabilities.

The Ethereum Foundation has released a job posting for a Protocol Security Researcher, part of the protocol security team, responsible for identifying security vulnerabilities in various aspects such as the execution layer, consensus layer, network layer, specifications, and client implementations. The work includes AI-assisted security research and automated vulnerability discovery, hard fork reviews, fuzz testing tool development, manual audits of protocol changes, and coordinating vulnerability disclosures.The team requires candidates to have deep experience with the Ethereum protocol, with a preference for engineers who have actively participated in protocol development and are familiar with the specifications of the execution layer or consensus layer. Common programming languages include Go, Rust, Java, C#, Nim, and Python. Remote work is available, and the position is open to candidates in Europe and globally.