encrypted

Slow Fog's Yuxian posted on platform X, stating that systems prior to iOS version 27 are being exploited by certain black and gray market groups to steal encrypted wallets from iPhone users.It reminds users to promptly update their iPhone, iPad, Mac, and other devices to the latest version, to be cautious when installing apps from unknown sources, and to be careful when opening unknown links through Safari and in-app browsers.

According to Cointelegraph, blockchain security company SlowMist stated that its investigation has not linked the recent security warning caused by the iPhone Safari attack to confirmed cryptocurrency theft incidents.SlowMist told Cointelegraph that it has not independently confirmed any victims affected by the specific Safari attack samples it analyzed, and the strongest technical evidence it possesses covers iOS versions 18.4 to 18.6.2. The company stated that the reported impact range of "iOS 13 to 26.5" should be regarded as a preliminary assessment, and it tends to avoid claiming that iOS 26.5 is affected until reproducible technical evidence is obtained.SlowMist pointed out that the Safari attack reused the previously disclosed DarkSword exploit chain technology, which is independent of another investigation involving malicious components embedded in App Store applications called FomoPeek. The Google Threat Intelligence Group (GTIG) disclosed DarkSword in March, describing it as an iOS exploit chain used by multiple threat actors since November 2025.

Binance will gradually migrate the cryptocurrency assets in users' Funding Accounts to Spot Accounts starting from September 29, 2026. The migration is expected to continue until January 2027, with specific dates to be announced later.After the migration period ends, the Funding Account will be renamed to Stocks Account, which will only be used for trading and settlement of stocks and stock options.

The French Council of State rejected the urgent application filed by the cryptocurrency companies Bull Bitcoin and Paymium, refusing to immediately suspend the implementation of the French decree enforcing the EU Directive on Administrative Cooperation No. 8 (DAC8).The applicants argued that the centralized collection of personal and financial data from digital asset users could lead to data breaches, extortion, and personal safety risks. The court found that the applicants failed to demonstrate an urgent situation sufficient to support an emergency suspension. The lawsuit seeking to fully revoke the decree by Bull Bitcoin is still under review. DAC8 will take effect in the EU on January 1, 2026, and registered service providers must complete their first declaration for the year 2026 by September 30, 2027.

Crypto KOL Ansem stated that he judged two weeks ago that the current market is still in a very early stage, and he maintains this view. Even if investors have not yet allocated relevant tokens, starting to pay attention to the market, formulating trading plans, and setting staggered buying prices now may still yield high returns.For tokens that have already entered the price discovery phase, Ansem believes that the current price is still close to the starting point of this breakout, and subsequent positions may not provide significantly better entry points than the current stage. Therefore, investors who have not yet taken positions should formulate plans in advance, rather than waiting to make decisions after market attention fully heats up.

According to CryptoSlate, the Pakistan Virtual Assets Regulatory Authority (PVARA) has required cryptocurrency exchanges and related service providers operating locally to enter a new licensing process by September 5, or they must cease relevant operations. PVARA opened the licensing application portal for virtual asset service providers on August 22 and released regulatory rules for virtual asset services.According to the regulations, service providers that have been conducting cryptocurrency business in Pakistan must submit a "No Objection Certificate" (NOC) application. During the application review period, as long as a complete application is submitted on time, they may continue to provide existing services. Businesses that do not submit applications by September 5 must stop relevant services within the regulatory scope, and continuing operations will be considered a violation. PVARA added that this policy does not constitute a comprehensive ban on cryptocurrency but establishes a "compliance or exit" regulatory mechanism applicable to exchanges, custodians, and other businesses providing virtual asset services to users in Pakistan.

The UK’s HM Revenue and Customs (HMRC) has sent out 81,000 warning letters to cryptocurrency investors suspected of unpaid taxes over the past 12 months, an increase of 25% from approximately 65,000 letters in the previous year. These letters aim to prompt recipients to disclose unpaid taxes, after which HMRC will initiate a formal investigation.Cryptocurrency exchanges, using tokens to purchase goods or services, and gifting tokens to others may all constitute taxable disposals. Income generated from activities such as lending and staking may be subject to income tax rules, and UK residents are generally required to pay tax on relevant income and gains worldwide.Rules set to be implemented in April 2027 will apply a no gain, no loss treatment to eligible crypto lending and automated market-making arrangements until an economic disposal occurs, expected to affect around 700,000 individuals. The crypto asset reporting framework requires service providers to submit transaction data for 2026, covering the reporting period from January 1, 2027, to May 31, 2027. It is anticipated that 52 jurisdictions will exchange relevant data in 2027, with an additional 15 jurisdictions joining in 2028.

According to Cointelegraph, cybersecurity company Rapid7 has disclosed a phishing operation named Operation Asterix, targeting approximately 885,000 phone numbers across multiple countries and directing victims to fake wallet service websites. A total of 5,576 phone numbers have been matched with Binance user accounts and are included in the attack queue.The attackers steal mnemonic phrases by impersonating fake applications of Ledger, Trezor, and Exodus, while also using forged customer service emails and phone calls to contact victims. Rapid7 also found that out of over 316,000 phone numbers in Germany, 43,066 matched with cryptocurrency trading accounts, resulting in a hit rate of approximately 13.6%. Related attacks also include a bulk phone number verification tool targeting Kraken accounts, with investigations revealing that AI tools have been heavily used in the phishing operations.Data from blockchain security company Hacken shows that phishing attacks and social engineering scams caused losses of $306 million in the first quarter of this year, accounting for the majority of the total losses of $482 million in the cryptocurrency industry.

According to Decrypt, security company Bitdefender has warned that the newly released Hollywood blockbuster "The Odyssey" has been embedded with Lumma Stealer information-stealing malware by attackers, who are attempting to steal users' cryptocurrency wallets, passwords, and browser data through fake movie files.Bitdefender revealed that the malicious files began spreading within days of the film's release, with attackers disguising them as high-definition WEBRip or Blu-ray version resources and using names similar to legitimate torrent files to entice users to download. In reality, these files are not videos but Windows executable programs that, when run, will infect the device. Attackers often replace the file icons to make them look like VLC player or video files, while also taking advantage of Windows' default setting to hide file extensions, reducing users' ability to recognize the risk.Once executed, Lumma Stealer will collect saved passwords, payment information, autofill data, remote desktop credentials, and sensitive information including cryptocurrency wallets. Additionally, the malware will steal authentication cookies, allowing attackers to potentially bypass some account protections even if the user has enabled multi-factor authentication (MFA).

According to Tech Funding News, the crypto travel platform Entravel has completed a $7.5 million financing round, led by Ethereal Ventures and Finality Capital, with participation from GSR, Varrock, G1 Ventures, Seier Capital, Veris Ventures, Funfair Ventures, and WTG Ventures.Entravel provides travel booking systems for over 40 brands, including Kraken and MetaMask, covering 300 million users, with an average booking conversion rate exceeding 10%. Founded in 2026, Entravel operates three interconnected businesses: MocatravelX directly collaborates with hotels to obtain inventory and pricing; RateStellar integrates supply from other channels, using AI to match hotels and room types from different suppliers, covering over 2.2 million hotels; on this basis, Entravel offers a white-label booking layer for partners, allowing them to provide hotel booking services to users without needing to build their own supplier network.

Bitcoin.com published an article stating that the model of Web3 startups conducting corporate pilots by paying traditional financial institutions "is a dead end," with 95% of pilot projects failing to reach production environments. Web2 companies only want the idle venture capital and revenue sharing from startups, rather than their open-source innovations. The article argues that true defensiveness comes from a "structural moat"—compliance licenses, deep network liquidity, or distribution lock-ins that Web2 engineering teams cannot replicate.The article cites recent cases: Stripe was acquired for $1.1 billion after proving an annual cross-border transaction volume of $5 billion with Bridge, and Robinhood acquired Bitstamp for $200 million to gain 50 global regulatory licenses and institutional liquidity, rather than maintaining long-term vendor relationships. The article predicts that the next round of B2C expansion will present an 80/20 pattern: 80% of retail liquidity will be controlled by 3 to 5 Web2/fintech giants such as Visa, Stripe, Robinhood, PayPal, and BlackRock, providing compliance and fiat entry; 20% will be an unlicensed DeFi sandbox for validating initial product-market fit. The growth path for startups should be to first validate PMF in the DeFi sandbox, then integrate or sell to the few Web2 gateways controlling the 80% distribution layer. The article believes that the current protocol cancellations and wave of startup closures are part of a "necessary market cleanup."

The Financial Supervisory Service (FSS) of South Korea has launched a three-month project to rebuild the fraud refund system with a budget of approximately 119 million won. This upgrade aims to align with the revised Telecommunications Fraud Damage Compensation Act, which will officially take effect on October 1, and formally includes virtual assets in the categories of "damaged property" and "refundable property."The new system will support the calculation of compensation amounts based on token types and quantities, using the value of the won at the time the funds were frozen as a reference benchmark, and will also have the capability to dismantle mixed fraud funds across multiple accounts. Major exchanges such as Upbit, Bithumb, Coinone, Korbit, and GOPAX will be required to undertake anti-fraud and victim relief obligations equivalent to those of banks, including verifying transaction purposes, monitoring suspicious funds, and freezing suspected accounts.

On July 17, French Foreign Minister Jean-Noël Barrot submitted Bill No. 921 to the Senate, proposing to incorporate the Crypto Asset Reporting Framework (CARF) established by the Organisation for Economic Co-operation and Development (OECD) into French law and to automatically exchange encrypted data with 48 countries that have signed related agreements.The exchanged information includes specific transactions, user names, addresses, tax identification numbers, places of residence, and the cumulative transaction value during the reporting period. EU member states have prepared to conduct relevant data exchanges based on the DAC-8 directive, which will take effect on September 30, 2027. After the bill is approved, the French government will accelerate the collection of encrypted data. A Chainalysis report indicates that by 2026, France had recorded 30 publicly known violent robberies of crypto assets; the report states that a tax official in the Paris region is suspected of selling data on high-net-worth crypto holders.

According to a16z crypto, the monthly spending on crypto payment cards has grown from a niche scale to $759 million. These cards allow users to pay with cryptocurrency in all scenarios that support traditional card organizations, with stablecoins converted to local currency at the point of sale, making it no different for merchants than regular card transactions.As of July 31, looking at the spending composition from various card programs, RedotPay has long held the majority share, while EtherFi, KAST, Karta, and others have gradually increased their share since the end of 2025. a16z crypto states that crypto cardholders do not need traditional bank accounts and can deposit stablecoins with the issuer or hold them directly through self-custody. These cards have expanded global users' access to dollar accounts and provided a convenient spending method for stablecoin holders.

According to The Kobeissi Letter analysis, cryptocurrency trading activity continues to decline. Data from 44 spot exchanges tracked by Kaiko shows that last week, the average daily trading volume for cryptocurrency spot trading dropped to about $15 billion, the lowest level of the year, down approximately 70% from the peak in January. In comparison, there were two trading days in February where the trading volume exceeded $100 billion.It states that since December 2025, the trend of average daily trading volume has decreased by about 50% to $20 billion, also the lowest level of the year. Meanwhile, trading volume remains highly concentrated, with the largest 6 exchanges accounting for over 60% of total trading activity, and liquidity in the cryptocurrency market is drying up.

According to CoinDesk, cryptocurrency trading platforms are expanding into traditional finance by offering perpetual futures linked to stocks, indices, and commodities, with related trading volume reaching $1.32 trillion in the first five months of 2026.Stock-linked perpetual futures allow traders to gain around-the-clock price exposure to assets like the S&P 500 without holding the underlying stocks and without shareholder protections. This product is aimed at institutions seeking low-friction trading and retail investors looking for access channels.Major platforms like Coinbase and Binance are building an "everything exchange" model, integrating crypto assets, stocks, and derivatives into a single account, including using tokenized stock positions as collateral. Large funds remain cautious about decentralized trading venues.

According to Coin Bureau, the consumption amount of cryptocurrency payment cards reached $705.5 million in July, an increase of 12.2% compared to June, setting a new historical high and achieving growth for the fifth consecutive month.

According to TechCrunch, Apple has been sued over App Store security issues. Three plaintiffs claim they were induced to download a fraudulent cryptocurrency wallet app, Sparrow Wallet, which is not officially available for iOS. The plaintiffs have incurred losses totaling over $1.8 million—James Ramirez lost approximately $875,000, Christopher Ellis lost about $840,000, and Jalen Delgado lost around $120,000.The lawsuit accuses Apple of knowingly allowing fraudulent apps to remain in the App Store while using its security promises as a marketing tool to resist third-party app stores and sideloading. The plaintiffs are seeking a jury trial, damages, and public disclosure of App Store risks. Apple has not commented on the lawsuit but stated that counterfeit apps violate its guidelines and will be swiftly removed. Currently, there are no counterfeit versions of Sparrow Wallet in the App Store, and over 371,000 submissions of plagiarized or misleading apps have been rejected in 2025.

According to tracking data from the Web3 asset data platform RootData, in the past 7 days, the crypto media platform BSC News has been the project that X (Twitter) top figures have unfollowed the most. The new influential figures on X who have unfollowed this project include well-known cryptocurrency trader Ansem (@blknoiz06) and cryptocurrency trader Ash Crypto (@AshCrypto). In addition, the project that X top figures have unfollowed the most also includes Ostium.

According to CoinDesk, hardware wallet company Ledger has launched an open-source toolkit called Ledger Agent Stack, which supports AI agents to interact with crypto wallets by reading balances, preparing transactions, and suggesting actions, with all transactions requiring user approval on Ledger hardware devices.Ledger stated that this release is the first step in its AI roadmap, aiming to integrate hardware-based security mechanisms into AI-driven crypto applications and to prevent autonomous agents from transferring funds or accessing sensitive credentials without human approval.