security

Bitcoin News posted on the X platform stating that Trezor claims its customer data was exposed due to a security breach at the logistics provider ShipMonk. Customers who placed orders in the past 90 days in the United States, United Kingdom, Sweden, Colombia, Brazil, Italy, or Portugal may be affected. The exposed data includes full names, shipping addresses, phone numbers, email addresses, and order numbers.Trezor stated that its systems were not compromised, and the devices remain secure, but it warns affected customers to be vigilant against carefully designed phishing attacks that exploit the leaked information.

AI security startup Mindgard announced the completion of a $30 million Series A funding round, led by Album VC, with participation from Karma Ventures, .406 Ventures, Atlantic Bridge, IQ Capital, and Lakestar.Mindgard was founded by Dr. Peter Garraghan in 2022 and incubated at Lancaster University in the UK, with headquarters in Boston and London. The company's platform offers Shadow AI discovery, AI red team testing, and runtime AI protection capabilities, having helped disclose over 150 high-impact AI security vulnerabilities, including issues such as the Cursor IDE zero-day code execution vulnerability, Google Antigravity trusted workspace defects, and ChatGPT image generation protection failures.

The Bitcoin wallet Electrum has released version 4.8.1, with the official statement claiming that this update includes "important security fixes" and urging users to upgrade as soon as possible.Developers involved in reproducible builds have provided independent signatures for the binary packages on the download page to verify the consistency between the release package and the source code.

According to a report by Fortune, the cybersecurity startup Corma, established in 2025, announced the completion of a $60 million seed round financing, with investors including Sequoia Capital, Khosla Ventures, and Coatue.Corma is headquartered in Tel Aviv and San Francisco, and six weeks ago, it deployed its first AI model to several Fortune 100 and 500 companies across various industries (covering healthcare, financial services, energy, critical infrastructure, and retail).Unlike current cybersecurity models primarily trained by OpenAI, Anthropic, Google, etc., for "offensive" purposes, Corma's trained model focuses on "defensive" strategies, concentrating on log and audit data analysis, identifying threats among massive events, and maintaining consistent strategies across thousands of operations. According to the company, its model has helped clients reduce threat response times by 94%.

OpenAI announced the expansion of its cybersecurity defense program Daybreak and launched the GPT-5.6-Cyber model specifically for the cybersecurity field, aimed at helping authorized security researchers and defense teams enhance their vulnerability discovery, threat analysis, and security testing capabilities. As attackers increasingly leverage AI to launch faster and larger-scale cyberattacks, defenders need to gain advanced AI capabilities in advance.This Daybreak offers two types of access: Daybreak Blue is aimed at most defense teams, providing general models such as GPT-5.6 Sol for vulnerability discovery, secure code review, malware analysis, incident response, and patch validation; Daybreak Red is aimed at advanced security research, providing GPT-5.6-Cyber for authorized vulnerability research, vulnerability validation, and security testing. GPT-5.6-Cyber is trained on GPT-5.6 Sol and optimized for cybersecurity tasks, including discovering zero-day vulnerabilities and analyzing exploit chains. It has been used in actual vulnerability research and has identified high-risk vulnerabilities in software, including the Chrome V8 JavaScript engine. Additionally, OpenAI stated that GPT-5.6-Cyber has also helped discover high-risk vulnerabilities in various domains, including privilege escalation vulnerabilities in mobile operating systems, remote code execution vulnerabilities in databases, and hundreds of privilege escalation vulnerabilities in operating system kernels.OpenAI also emphasized that Daybreak Red will only be accessible to approved individuals and organizations, controlling access through measures such as authentication, account security, monitoring, usage restrictions, and legal disclaimers. The company stated that it will continue to strengthen security monitoring, access management, and model security testing to reduce the risk of advanced cybersecurity models being abused.

Coinsbuy confirmed a security incident, with unauthorized withdrawals from the platform wallet. The company stated that it has covered customer losses with its own reserves and is offering a reward of $100,000.

Bitcoin News posted on the X platform that the Bitcoin Policy Institute, along with a coalition of over 40 organizations, is calling on leading AI labs to provide trusted access to their state-of-the-art AI models for qualified open-source defenders.The open letter states that Bitcoin and digital asset developers are facing increasingly complex AI-driven cyber threats, while legitimate security research is often hampered by cutting-edge model security mechanisms. Signatories including Block, Coinbase, Strategy, MARA, Galaxy, BitGo, Brink, OpenSats, Chaincode Labs, Spiral, Trezor, and Unchained are requesting early access to cutting-edge cybersecurity models, sufficient computing power, secure research environments, and the establishment of direct communication channels with AI lab security teams. The open letter states: "Defenders need cutting-edge technology; please give them a fair head start."

Bitcoin Red Team member @Rob1Ham stated that OpenAI has prevented him from continuing security analysis on the Bitcoin codebase, despite his responsible disclosure of real vulnerabilities present in it.Rob1Ham mentioned that he had previously completed the authentication and onboarding process related to OpenAI's cybersecurity capabilities, but is currently unable to continue investigating whether the remediation measures are sufficient or if other vulnerabilities still exist. He stated that he will resume Bitcoin security research using Chinese open-source AI models in the future. Rob1Ham said, "Black hat hackers will not attack these issues, white hat hackers will." He also stated, "For those who do not comply with the rules and engage in harmful behavior, intelligence is unrestricted, while those committed to reducing harm are excluded."

Strategy founder Michael Saylor posted that Bitcoin's operation fully aligns with its design. BIP-110 can fork freely, and the Bitcoin network can also choose not to follow. As a result, about 99.85% of Bitcoin's hash power remains on the original network, while the BIP-110 branch has only mined 2 blocks and is currently over 80 blocks behind.He pointed out that BIP-110 has only gained about 0.15% of Bitcoin's hash power and needs to mine 2015 blocks before the first difficulty adjustment. Based on the current block generation speed, this process will take about 25 years.Saylor stated: "Anyone can fork Bitcoin, but if there is a lack of security, practicality, capital, and users, the fork is meaningless. Consensus needs to be earned, not declared."

According to Decrypt, a volunteer security team stated that it scanned 150 Bitcoin code repositories using cutting-edge artificial intelligence models and discovered a dozen vulnerabilities. The team has built multiple AI-based review systems, targeting wallets, cryptographic libraries, infrastructure, and other Bitcoin projects. Team members claim that, on average, each person can find about one serious vulnerability per hour, and in the past 12 hours, they have submitted security reports to multiple projects, but specific affected projects have not yet been made public.

The cryptocurrency hardware wallet manufacturer Coldcard has released an update on its customer data retention policy. Due to legal compliance requirements arising from the security incident disclosed on July 30, the company has temporarily suspended its original automatic customer data deletion mechanism.Previously, Coldcard's standard practice was to automatically clear customer records after 120 days, retaining only the user's email address and country information, while allowing customers to request early deletion of data at any time after product delivery. Coldcard stated that due to the security incident involving ongoing and potential legal proceedings, the company is obligated to retain records that may be relevant to litigation. Therefore, customer data that was originally scheduled for deletion will be temporarily retained until the law permits the resumption of normal processes.However, users can still request Coldcard to handle their personal information according to the original data retention policy. If users wish for their data not to be included in this legal retention scope, they can contact official customer service to make a request. Coldcard emphasizes that the retained data will be strictly protected, accessible only to authorized personnel, and will not be used for any purposes other than fulfilling legal obligations. The company will restore the previous automatic data deletion mechanism once legally permissible.

According to CoinPost, the Financial Services Agency of Japan has announced a partial revision of the "Comprehensive Supervision Guidelines for Major Banks and Others," which will unify the reporting format for cybersecurity incidents across 17 regulatory areas, including cryptocurrency exchange operators.A new "Common Format for Other Cyber Attacks and Related Incidents" has been added, which, along with the existing formats for DDoS attacks and ransomware, constitutes a three-category reporting distinction system. As a transitional measure, non-specific social infrastructure operators may continue to use the old reporting format until the end of March 2027, with the deadline for public comments set for September 7, 2026.

According to the expected plan compiled by the Korea Digital Convergence Industry Association, the secondary regulations for Security Token Offerings (STO) in South Korea may include: allowing "pooling" issuance of similar types of underlying assets, setting over-the-counter trading limits for general investors, clarifying the licensing conditions and business scope for non-standard securities over-the-counter exchanges, and developing a phased roadmap for the tokenization of standard securities. In addition, the technical and financial requirements for issuer account management institutions are also expected to be included in the regulations.This expected plan is based on publicly available policy directions and industry discussions and is not an official version. Specific standards still need to be determined through legislative announcements, regulatory reviews, and other procedures. Previously, the STO market was primarily focused on single assets; if pooling is allowed, it could promote the issuance of multi-asset composite products such as music copyrights and real estate. The over-the-counter trading limits for general investors are expected to be higher than existing sandbox cases, but the final limits still need to balance investor protection and market liquidity. The status of non-standard securities over-the-counter trading platforms and existing operators, as well as the future path for the tokenization of standard securities (stocks, bonds), will be key focuses moving forward. The industry warns that after the regulations are implemented, the preparation time for related companies' systems and internal controls may be quite urgent.

The Ethereum Foundation has released a job posting for a Protocol Security Researcher, part of the protocol security team, responsible for identifying security vulnerabilities in various aspects such as the execution layer, consensus layer, network layer, specifications, and client implementations. The work includes AI-assisted security research and automated vulnerability discovery, hard fork reviews, fuzz testing tool development, manual audits of protocol changes, and coordinating vulnerability disclosures.The team requires candidates to have deep experience with the Ethereum protocol, with a preference for engineers who have actively participated in protocol development and are familiar with the specifications of the execution layer or consensus layer. Common programming languages include Go, Rust, Java, C#, Nim, and Python. Remote work is available, and the position is open to candidates in Europe and globally.

Sam Blackshear, co-founder and Chief Technology Officer of Sui blockchain parent company Mysten Labs, announced his departure on August 6 to join Anthropic for defensive security research. He stated that this new position would allow him to continue to delve into frontline technology research and explore new fields at a time when the balance of power in cyber offense and defense is undergoing profound changes.Blackshear reflected that he has spent over 8 years developing the Move language and will continue to participate in the upcoming Move Foundation, while maintaining his role as an advisor to Mysten Labs and Sui ecosystem builders after his departure. Meanwhile, Evan (@EvanWeb3), who previously led technology teams at Apple and Meta, will take over the overall technical vision and research direction of Mysten Labs.

Bitcoin News posted on the X platform that ZEUS stated it has temporarily taken its infrastructure offline following a cybersecurity incident that occurred in the past few hours. ZEUS indicated that the attack has been mitigated, and services will remain offline until a comprehensive security audit is completed and operations are restored. ZEUS claimed that there has been no loss of customer funds, and currently, there is no risk to customer funds.Customers with closed Lightning Service Provider channels will receive alternative channels once services are restored. According to the current investigation, ZEUS stated that the incident appears to be limited to its own infrastructure, and there is no evidence suggesting that the incident was caused by a vulnerability in the Lightning node software. ZEUS added that it has been strengthening its infrastructure using Trusted Execution Environments and the Validating Lightning Signer project, and stated that the project aims to mitigate such attacks in its upcoming architecture. ZEUS indicated that it will continue to provide updates as the investigation progresses.

According to official news, the Ethereum Foundation's "Trillion Dollar Security" (1TS) has announced a special grant to the Freedom of the Press Foundation (FPF) to support the ongoing development of the open-source tool WEBCAT, aimed at addressing the long-standing front-end code verification security gap in Ethereum wallets and decentralized applications (DApps).WEBCAT (Web-based Code Assurance and Transparency) is an open-source tool designed to help browsers verify whether the code loaded by a website matches the version publicly released by the developer.This funding will promote the expansion of WEBCAT to Ethereum wallets and application scenarios, enabling users to verify whether the front-end pages they access have been tampered with.The Ethereum Foundation stated that while HTTPS can verify the website a user is connected to and encrypt communication, it cannot prove that the front-end code actually running on the website is the same version released by the developer. If an attacker controls the website's front-end code, they may modify the transaction receiving address without the user's knowledge or induce the user to sign transactions that do not match the content displayed on the page.The Ethereum Foundation noted that front-end attacks have become a significant security risk for blockchain infrastructure, with malicious modifications to web interfaces potentially leading to supply chain attacks, DNS hijacking subsequent attacks, and user interface deception.WEBCAT was initially developed by the Freedom of the Press Foundation to enhance the code credibility of secure communication systems like SecureDrop.With this expansion into the Ethereum ecosystem, it will complement security measures such as "Clear Signing" in the 1TS program: the former helps wallets confirm that the application front-end has not been tampered with, while the latter helps users understand the transaction content they are approving.

Chainalysis posted on platform X that the Coldcard hack is particularly devastating for Canadian Bitcoin holders. Our analysis of the attackers and victims found that Canadian BTC holders accounted for 25% of the attributable losses.According to estimates compiled by Galaxy Research, the losses could be as high as $110 million, and we analyzed the geographical distribution of this ongoing hacking attack. Users in Australia, the United States, and Thailand also experienced significant losses.

According to Reuters, citing two informed sources, the Trump administration informed leading AI companies on Tuesday that it will not conduct security testing on open-weight AI models. This decision marks a new direction for the U.S. government in its approach to AI regulation. Open-weight models allow developers and users to freely download, modify, and deploy model parameters without relying on closed API access. Previously, organizations such as the American Institute for AI Safety (AISI) had conducted security assessments on cutting-edge models. The White House and relevant departments have not publicly commented on this matter yet.