verifi

The founder of DefiLlama, 0xngmi, announced the launch of a new off-chain proof/verification service, which will be used to verify and audit off-chain data, including information such as bank account balances, to help projects achieve reliable verification of real-world assets and other off-chain data.

Taiko posted on platform X stating that all Proposers (nodes responsible for producing new blocks) have suspended block production. Taiko mentioned that the team is currently investigating the breach of the chain state validation mechanism and is continuously assessing the scope of the incident's impact and subsequent response measures. Previously, Taiko confirmed that its chain state validation mechanism had been compromised and advised users to immediately withdraw funds from cross-chain bridges deployed on Taiko.

Taiko posted on platform X that it has confirmed the chain state verification mechanism of Taiko has been compromised, and the security assumptions of all cross-chain bridges deployed on Taiko are no longer reliable.Taiko is coordinating with the security committee and ecosystem partners to control the situation, suspend affected systems, and take technical and legal action. Taiko strongly advises all users to immediately withdraw funds from all cross-chain bridges deployed on Taiko.Taiko urgently requests all centralized exchanges to suspend TAIKO token deposits until further notice. The attacker's address has been disclosed. Previously, it was reported that the Taiko ERC20 Vault was attacked, resulting in losses exceeding $1 million.

The Zodiac team released a security incident analysis report regarding the impact on the Zodiac Roles Modifier, disclosing that the root cause of the vulnerability lies in a flaw in the ERC-1271 transaction signature verification logic: the system only determines the validity of the signature based on the returned "magic value" without verifying whether the call itself was successful, which may disguise a failed verification as a valid signature, bypassing the module authentication mechanism.

As India's tax enforcement intensifies, cryptocurrency investors face stricter reporting and compliance requirements in the 2026 tax season, with incorrect declarations potentially triggering fines and audits. Reports indicate that under current rules, cryptocurrency gains are still subject to a 30% uniform capital gains tax, and a 1% Tax Deducted at Source (TDS) is levied on transactions exceeding a certain amount, while losses cannot be offset across assets. The new Income Tax Act (2025) came into effect on April 1, 2026, but the core tax framework remains largely unchanged.In terms of reporting, investors must fill out a dedicated Schedule VDA section in the ITR-2 or ITR-3 forms and are required to record each transaction individually, including all operations such as trading, exchanging, transferring, and clearing, rather than just summarizing gains. The report emphasizes that regulatory focus has clearly escalated. The Indian tax authorities will directly obtain user-level transaction data through trading platforms, custodians, and wallet service providers, and will automatically cross-check this with reported information; discrepancies will trigger system flags and audits.Data shows that the Indian tax authorities have issued over 44,000 notices and discovered approximately 88.8 billion rupees (about 930 million USD) in unreported virtual asset income. Meanwhile, the tax department is enhancing its tracking capabilities by combining on-chain analysis tools with international data-sharing mechanisms. Additionally, starting in 2027, India will align with the OECD cryptocurrency reporting framework to achieve automatic exchange of cross-border transaction data, and overseas exchange holdings will gradually come under regulatory scrutiny.Analysis points out that common errors include misuse of reporting forms, omission of airdrop and staking income, and failure to correctly match 1% TDS records, among others. The report emphasizes that cryptocurrency tax compliance is shifting from "post-reporting" to "real-time traceability," and investors need to strengthen year-round record management.

According to research by CointelegraphMT, traditional financial markets are absorbing institutional capital at a pace that cryptocurrencies find hard to match by 2026. The main reason is that AI has clear and measurable returns, while cryptocurrencies currently lack a similar narrative.Data shows that the S&P 500 index rose only 3.5% after excluding AI stocks in 2026, while AI-related indices saw an increase of nearly 50%. The five major tech companies in the U.S. are expected to reach $72.5 billion in capital expenditures for AI infrastructure this year, with Nvidia's quarterly revenue reaching $81.6 billion.The research points out that AI spending can be directly validated through revenue, capital expenditures, and profit margins, while the value proposition of cryptocurrencies is difficult to quantify for traditional allocators. Currently, while the supply of stablecoins is at a historical high, more funds are flowing into tokenized government bonds rather than risk assets.Additionally, in May, the net outflow from U.S. spot Bitcoin ETFs was $2.3 billion, marking the worst single month of the year. However, long-term holders continue to buy in the over-the-counter market, with market makers like Wintermute reporting stable buying around $72,000. The research concludes that unless cryptocurrencies can provide a measurable and repeatable institutional-level return story similar to AI, they will be at a significant disadvantage in competing for the same institutional funds.

According to a report by Chainalysis, over the past six months, at least $36.7 million has been stolen from protocols with unverified source code, involving protocols such as Truebit, Trusted Volumes, Aperture Finance, and Ekubo. Attackers are searching for vulnerabilities by decompiling the original bytecode. AI-assisted vulnerability exploitation development is accelerating this trend, as large language models can scale the identification of vulnerability patterns.Chainalysis points out that unverified contracts lack community review and are often excluded from bug bounty programs. The barrier to AI decompilation and vulnerability analysis is rapidly decreasing, allowing attackers to systematically scan thousands of unverified contracts. Protocols should verify all contract code, audit the contracts actually deployed, expand the coverage of bug bounties, and implement real-time on-chain monitoring. Each unverified contract is a potential target for automated scanning, and relying solely on obfuscation as a security measure is no longer effective.

The ZEC treasury company Cypherpunk posted on platform X in response to the market fluctuations of the ZEC token, stating that all software has vulnerabilities. Historically, Bitcoin has "over-minted" 18.4 billion BTC due to errors. However, this does not mean that blockchain technology should be abandoned; rather, security should be enhanced through formal verification and provable correctness.Cypherpunk emphasized that with the development of AI technology, vulnerability detection will become faster and broader, but the key lies in who can identify problems before malicious actors do. Zcash demonstrates its capability in this regard through an upcoming update.Previously, it was reported that the privacy coin ZEC faced market sell-offs due to the revelation of a security vulnerability that could potentially lead to unlimited issuance, causing the coin's price to drop over 50% in a single day.

On May 29, 2026, Taylor Hornby discovered a critical forgery vulnerability in the Zcash Orchard funding pool. Taylor Hornby reported the vulnerability to the Zcash Open Development Lab, and all parties collaborated to complete the fix on June 2. This vulnerability could be exploited to secretly create an unlimited number of forged ZEC within Zcash Orchard. Due to the privacy features of Orchard, it is impossible to cryptographically prove whether the vulnerability was exploited before the fix was deployed. The vulnerability had existed since the activation of Orchard in May 2022, until an emergency fix was deployed on June 1, 2026.With the assistance of AI tools, Taylor Hornby wrote a complete exploit and generated unlimited and undetectable forged ZEC in a local testing environment. Currently, Shielded Labs is collaborating with other Zcash developers to explore network upgrade proposals that would allow anyone to verify the integrity of Zcash's supply.

According to The Block, the Bank for International Settlements (BIS) announced that its "Project Agorá" tokenization prototype has successfully verified the feasibility of atomic settlement for cross-border wholesale transactions. The prototype employs a layered architecture, utilizing tokenized central bank reserves and commercial bank deposits to achieve "all or nothing" transaction chain execution across multiple currencies and jurisdictions, while allowing central banks to retain operational autonomy.Legal analysis shows that finality of settlement can be achieved in all seven participating jurisdictions, and privacy protection can also be ensured within a compliant framework. The project is jointly initiated by the BIS and the International Financial Association, with participation from seven central banks including the Federal Reserve Bank of New York, the Bank of England, the Bank of France, the Bank of Japan, the Bank of Korea, the Bank of Mexico, and the Swiss National Bank, as well as over 40 private financial institutions. In the next phase, the Bank of Canada will officially join as the eighth central bank member, and the project will advance to the real value testing stage, further expanding private sector participation.

According to a report by the Financial Associated Press, in response to the issue of "some banks in the Hong Kong region requiring a declaration to open investment accounts," the Hong Kong Monetary Authority (HKMA) responded today that the relevant regulatory requirements were issued to all recognized institutions on May 22.Materials provided by the HKMA indicate that registered institutions must take three additional measures when opening and managing investment accounts for mainland investors, including:Closing investment accounts opened using suspicious or forged documents, identifying customer investment accounts that have used suspicious or forged documents since January 2023 or during any other period specified by the HKMA; relevant documents include identification documents.Closing investment accounts with zero balance that have been inactive, specifically referring to investment accounts held by mainland investors that have had no asset balance as of May 22, 2026 (reference date), and have had no activity initiated by the customer in the 12 months prior to the reference date.When opening new investment accounts, obtaining a written declaration from the mainland investor confirming that all funds used to support investment activities and related settlements come from legal sources outside mainland China.Relevant documents show that the newly added additional regulatory measures apply only to investment accounts, including investment accounts within comprehensive bank accounts; non-investment functions (such as regular savings, time deposits, payments, loans, and credit cards) are not within the scope of these measures. Additionally, the applicable subjects of these additional measures are individual customers and do not apply to corporate or institutional clients.

Lighter officially stated on X that it has completed the escape mechanism verification conducted by the third party L2BEAT, which means that even if the sequencer at the L2 level fails, users can withdraw funds from Lighter's L2 back to Ethereum in a permissionless manner. It is the first L2 Perp DEX in the industry to achieve this functionality.

According to Bits.media, the Russian government's bill on cryptocurrency regulation will be revised during its second reading, aiming to grant the central bank the authority to set requirements for anti-money laundering verification services for cryptocurrency transactions. Alexey Yakovlev, head of the Financial Policy Department of the Ministry of Finance, stated that he hopes to authorize the central bank to impose requirements on AML services, enabling them to verify whether transactions comply with current Russian laws and regulations.A representative from the Ministry of Finance stated that the authorities plan to mandate AML services to consider an "external perspective," analyzing the performance of Russian cryptocurrency wallets in international services and the "image of the Russian system formed abroad." At the same time, such services must "maintain the confidentiality of Russian financial infrastructure," not disclosing their operational principles and internal process details to outsiders. AML services are platforms that help users verify the risks of cryptocurrency wallets concerning international sanctions, anti-money laundering, and counter-terrorism financing. Currently, the main regulatory body for such platforms in Russia is the Federal Financial Monitoring Service of the Russian Federation.

Vitalik Buterin published an article discussing the application prospects of Formal Verification in the field of blockchain security.The article points out that a new paradigm is emerging in Ethereum's cutting-edge research and development, where code is directly written using EVM bytecode, assembly, or Lean, and its correctness is verified using automatically checkable mathematical proofs in Lean. Researcher Yoichi Hirai refers to this paradigm as "the ultimate form of software development."Vitalik believes that AI-assisted formal verification is expected to enhance both code efficiency and security, particularly suitable for security core modules such as STARK, ZK-EVM, quantum-resistant signatures, and consensus algorithms.The article also emphasizes that formal verification is not a panacea and may still fail due to issues such as incomplete proof coverage, specification errors, and hardware side channels; in the future, software may differentiate into "security cores" and "non-security edges," with Ethereum becoming one of the important security cores.

Ethereum co-founder Vitalik Buterin commented on the issue of Ethereum state storage, stating that even if users store data themselves, the blockchain only stores hashes, and transactions only include proofs, it still requires storage and updating of the data used to verify the proofs, and this data ultimately becomes almost as large as the state itself; Vitalik mentioned that there are solutions to the relevant issues, but they involve a large number of components and require trade-offs compared to the current Ethereum.Previously, DeFi content writer marilyn100x.eth stated that Ethereum has a state storage problem, where developers pay a one-time fee to write data, while nodes bear the long-term storage costs. However, EIP-8037 does not involve time-weighted rent or ongoing fees, but significantly increases the upfront gas costs for new contracts, accounts, and storage slots to control state growth during the scaling process.

KB Financial Group announced that it has completed the technical proof of concept for the Korean won stablecoin in scenarios such as payments, settlements, and international remittances. This verification was jointly completed by KB Financial Group, electronic payment company KG Inicis, public chain Kaia, and digital asset solution company OpenAsset, covering the entire financial service process including the issuance of the Korean won stablecoin, offline payments, merchant settlements, and cross-border remittances.According to reports, the solution migrates the internal settlement system to a blockchain architecture while maintaining users' original financial service habits. Among them, actual payment scenarios have been tested through the offline self-service terminals of the chain coffee brand Hollys, allowing users to make payments via QR codes without the need to install a digital wallet; the system automatically executes on-chain smart contracts during the settlement phase. In addition, in the cross-border remittance test, the system first exchanges the Korean won stablecoin for US dollar stablecoins through Kaia's on-chain liquidity, and then the local partner in Vietnam completes the fiat currency crediting. The entire remittance process takes only about 3 minutes, with fees reduced by approximately 87% compared to traditional SWIFT remittance models.

Aptos posted on platform X stating that Aptos is the first L1 to support dynamically scheduled formal verification, which can be mathematically proven to operate as designed. Aptos claims that AI writes specifications, mathematically proves their correctness, and Move Prover serves as the oracle, which is the trust layer between the market and machines.

According to market news, Boundary Labs, a stablecoin startup led by Galaxy Ventures under Galaxy Digital, announced that it is preparing to launch an institutional stablecoin USBD and has completed a $2 million seed pre-financing.It was introduced that this round of financing also attracted participation from institutions such as First Block Capital and BlackWood. Boundary Labs was founded by former Deutsche Bank and Digital Currency Group executive Matthew Mezger. USBD will be deployed on the Ethereum network, focusing on the concept of "verifiable stablecoins," attempting to reduce the reliance of traditional stablecoins on off-chain audits and trust mechanisms through continuous on-chain verification of reserves, net asset value (NAV), and protocol operational status.The project team stated that USBD is designed with over-collateralization and hedging strategies to reduce market volatility risks and shift the stablecoin infrastructure from a "trust-driven" model to a "verifiable financial system." Additionally, Boundary plans to launch a staking token sUSBD for distributing protocol earnings under a delta-neutral DeFi strategy, but USBD itself does not provide yield functionality.The team indicated that the protocol is primarily aimed at asset management institutions, hedge funds, and family offices, and plans to officially launch the mainnet in early summer 2026.

The Financial Security Institute of South Korea announced that it will promote three key tasks around digital asset services, including the development of smart contract verification tools, the establishment of a smart contract verification system, and the cultivation of professional talent in digital assets.It will develop dedicated security verification tools that can automatically detect major vulnerabilities such as reentrancy attacks, access control errors, and collateral verification omissions, targeting scenarios like token securities and stablecoins, and continuously update detection rules in conjunction with the South Korean financial regulatory environment. Meanwhile, the agency will also release the "Smart Contract Security Guidelines," covering the entire process of development, deployment, and operation, and enhance the digital asset security capabilities of financial institutions through seminars, collaborative networks, and other means.