leak

According to Lookonchain, the whale address "TLBL" has once again experienced a significant asset security incident, with total losses exceeding $50 million.Previously, this address lost approximately $24 million due to a phishing attack two years ago; in the latest incident, it is suspected that over $26 million in assets from three wallets were completely transferred out due to a private key leak. This incident has once again raised market concerns about the security management risks of high-net-worth on-chain addresses.

According to Forbes, the Federal Communications Commission (FCC) officially announced on July 27, 2026, a ban on the import of foreign-made AI humanoid robots, citing national security threats. The FCC classified these devices as "Trojan horses"—their high-precision sensors can continuously collect sensitive data from users' homes and businesses and transmit it to foreign entities, posing a risk of being used for mass surveillance or intelligence activities, and the related devices may also be remotely controlled.Although the ban targets all foreign manufacturers, it actually has the most significant impact on China, as China currently holds a large share of the global AI humanoid robot market. Promoting the development of domestic manufacturing is also an important secondary objective of this ban.

Binance co-founder CZ retweeted user Rager's experience about hardware wallet failures on the X platform. CZ stated that protecting the wallet backup seed phrase is a highly challenging task.The seed phrase cannot be seen by others, or it may be copied or exploited, and it must not be accidentally damaged by fire, flood, or other incidents, while also preventing hackers from gaining access. More importantly, users themselves must not lose the seed phrase.

The decentralized asset management protocol Swan Treasury on BNBChain suffered a loss of approximately $625,000 due to a private key leak. The attacker forged a valid signature using their own address to purchase STY at a 100x discount and bought approximately 687,000 STY with about 19,700 USDT through a PancakeSwap flash loan.Subsequently, they forged claim() and transfer signatures on a brother contract, dumping STY into the STY/USDT pool and profiting approximately 625,000 USDT. Each ecrecover in the transaction was resolved to an exact hardcoded signer, confirming that the key itself had been leaked, rather than a flaw in the signature logic.

According to X platform blogger @MaxForAI, a screenshot of the DeepSeek Harness internal testing recruitment is circulating on social media. The screenshot shows that the DeepSeek Harness plans to start internal testing later this week, with the first batch of users being selected from small group chats. Selected individuals must submit personal information and sign a "Confidentiality Commitment Letter." The screenshot also specifically reminds that any leaks will result in disqualification and affect future opportunities for selection in the DeepSeek model and product internal testing. If the news is true, the official version of DeepSeek V4 and the Harness product are expected to be launched soon.

According to Bloomberg, DeepSeek announced the suspension of its second round of financing and verbally notified some potential investors that it would not sign investment agreements as expected. This suspension partly stems from founder Liang Wenfeng's dissatisfaction with the leak of a 4-hour internal transcript during its first financing deal, where he made 52 statements in an investor meeting regarding DeepSeek's organizational culture, open-source logic, technology roadmap, and views on the competitive landscape of the industry. The nearly 4-hour meeting record recently went viral on social media, including statements such as "The biggest gap between China and the U.S. in AI is computing power resources." Both DeepSeek and Liang Wenfeng have not confirmed the authenticity of the leaked record.DeepSeek stated that it may still choose to resume the transaction process in the future and has begun preparations for an initial public offering, with the IPO potentially being filed as early as this year.DeepSeek completed its first round of external financing in June 2026, raising over 50 billion yuan, approximately 7.4 billion dollars, with a post-investment valuation of about 50-59 billion dollars. It adopted a special structure, with most funds entering a limited partnership managed by Liang Wenfeng, where investors have no voting rights and are locked in for 5 years. Liang Wenfeng himself contributed about 20 billion yuan as the largest contributor, with participation from Tencent, CATL, JD.com, NetEase, and the Chinese National AI Fund. DeepSeek subsequently initiated discussions for its second round of financing in mid-July, targeting a valuation of about 71 billion dollars.

Last month, comments from Liang Wenfeng during the DeepSeek investor meeting have recently circulated. Liang Wenfeng clearly stated that DeepSeek's goal is AGI, rather than becoming the next super app. They will not engage in 3D, video generation, or world modeling, nor will they close source code, stating, "Restraint is a strategy used to increase the probability of achieving AGI." He believes that products are merely "by-products" on the path to AGI, with the current focus on Coding Agent and continuous learning capabilities. The next phase aims to achieve autonomous model iteration, with the endpoint pointing towards embodied intelligence.In terms of commercialization, Liang Wenfeng stated that they only seek to earn "reasonable profits" and do not set profit maximization as their pricing goal. DeepSeek is "still far from a complete shift to commercialization." He assesses that the gap between AI in China and the U.S. mainly lies in resources rather than talent, stating, "Using a fraction of the computing power can narrow the gap to 6 months, 3 months." Regarding industry competition, he believes that open source is "the sweet point for companies of this scale," while also predicting that domestic large models will ultimately converge to "two large companies and two small companies." Liang Wenfeng also mentioned that maintaining team stability is the only non-negotiable core principle, and the company is driven by vision, with "a group of ordinary people achieving extraordinary things."

Zilliqa stated that there is a serious random number generation vulnerability in the Zilliqa Ledger application, affecting the Schnorr signatures of native non-EVM Zilliqa transactions. Attackers can recover the signer's private key from the biased temporary random numbers using only publicly available on-chain data.Any account that has signed and broadcasted about 5 or more native transactions through the Zilliqa Ledger application should be considered compromised. Since the related signatures are permanently recorded on the chain, subsequent updates to the application cannot eliminate the risk, and the affected private keys must be deactivated. EVM transactions and development tools such as zilliqa-js, gozilliqa-sdk, and pyzil are not affected.The vulnerability arises from the application selecting the wrong 32 bytes when copying the random number, retaining 8 bytes of zero padding and losing 8 bytes of entropy, resulting in each random number having a maximum of 64 bits fixed to zero. Attackers can use 5 or more affected signatures to recover the private key within seconds using ordinary hardware. Zilliqa observed suspected active exploitation on July 19 and confirmed the root cause on July 21.Zilliqa has suspended native transactions to prevent further loss of funds and is preparing a revised application with Ledger. However, the revised version cannot protect the exposed keys, and affected users should not transfer assets on their own but wait for the official announcement of a coordinated disposal plan.

Solv Protocol announced on platform X that on July 13, the BTC+ contract on the BNB Smart Chain suffered a security incident. After investigation, it was found that the attacker compromised the deployer's private key and upgraded the BTC+ minting proxy contract on BSC, minting unauthorized BTC+ tokens. The team completed the emergency response within three hours, isolating the malicious contract and freezing, destroying, or isolating all unauthorized BTC+. All underlying BTC assets are safe.As a precaution, the subscription and redemption of BTC+ have been suspended, with a recovery expected within two weeks. BTC+ has never established an official liquidity pool on any DEX, and users should only obtain and hold BTC+ through official Solv channels. The team has upgraded the deployer's security measures, rotated all affected access credentials and signing keys, and initiated a comprehensive external re-audit, with a detailed post-incident analysis report to be released subsequently.

OneKey founder Wang Yishi (@ohyishi) posted on the X platform to remind that, in addition to screenshots possibly being recorded, third-party input methods may also continuously read the user's clipboard content. These actions could lead to the leakage of sensitive information such as mnemonic phrases.Several netizens subsequently commented that after opening Pinduoduo without saving images or only copying relevant content, the platform's recommendation page displayed product information highly related to the previous screen content or clipboard content, raising doubts about the app's behavior of reading the screen or clipboard.However, the related claims currently mainly come from user tests and feedback on social platforms, and there has not yet been an official public response from Pinduoduo.

Token Pocket's Chief Business Officer Michael stated that the mnemonic phrase of the Robinhood founder was leaked during a live broadcast. After hackers gained control of the address, they used that address and associated addresses to buy a large amount of the Meme coin at $1, prompting thousands of investors to follow suit, rapidly increasing the market value of the token from about $500,000 to $14 million in a short period.Subsequently, the price of the $1 token fell sharply, with a trading volume of about $20 million within just two hours. After the related addresses were frozen, the hackers quickly moved to the BNB Chain (BSC), using that address and its associated addresses to issue new tokens, and created trading hype through self-buying and selling, ultimately executing a sell-off to cash out. Robinhood's RPC has frozen that address, and nodes do not allow transactions sent from that address to be packaged, so transfers and trades cannot be conducted.

The password management tool LastPass announced that its third-party market intelligence platform Klue experienced a security incident, where hackers stole multiple OAuth tokens held by Klue for various clients (including LastPass) and used these tokens to access LastPass's Salesforce CRM system, potentially leading to the leakage of business contact information and CRM data, including some customers' names, phone numbers, email addresses, home addresses, and support cases.The official reminder: LastPass's products, services, infrastructure, and customer vaults have not been affected, and Gong system data has not been accessed. LastPass has immediately taken measures, including stopping employee access to Klue, rotating exposed API tokens, conducting a detailed investigation, and collaborating with Klue, Salesforce, and law enforcement, while also sharing threat intelligence with the security community through the TIME team and strengthening future protections. Users should remain vigilant against potential phishing emails, calls, or social engineering attacks that may exploit the leaked information, and remember that LastPass will never ask for the master password; all official communications are sent through trusted channels.

According to financial audit documents disclosed by technology critic Ed Zitron and verified by the Financial Times, OpenAI achieved revenue of $13.07 billion in 2025, but total costs and expenses reached $34 billion, resulting in an operating loss of $20.92 billion for the year. Due to OpenAI's structural shift to a for-profit entity that year, it incurred a loss of up to $41.55 billion from the fair value change of convertible equity and warrants. After accounting for interest and other factors and excluding non-controlling interest gains and losses, the final net loss attributable to OpenAI for 2025 amounted to $38.53 billion.Comparative data in the documents indicate that OpenAI's losses are showing a dramatic year-on-year increase. Its revenue in 2024 was $3.7 billion, total costs were $12.48 billion, operating loss was $8.78 billion, and the final net loss attributable to the company was $5.09 billion. By 2025, its core expenses saw R&D costs surge to $19.18 billion, revenue costs were $7.5 billion, and sales and marketing expenses were $5.73 billion. By the end of 2025, OpenAI had slightly over $50 billion in assets, nearly half of which was cash reserves.Additionally, the document disclosed for the first time the financial transactions between OpenAI and its major strategic partners in detail. During 2025, SoftBank paid OpenAI $867 million, while Microsoft paid $303 million. Meanwhile, OpenAI paid Microsoft service fees of up to $17.2 billion in the 2025 calendar year, of which $10.59 billion was accounted for as R&D expenses (widely believed to be for model training costs), and $6.047 billion was related to revenue costs. By the end of 2025, OpenAI still had approximately $3.64 billion in liabilities to Microsoft.

According to monitoring by Blockaid, a key leakage incident occurred on the cross-chain bridge of MILC Media Metaverse on BNB and Ethereum. The attacker exploited a historical bridge administrator wallet to grant administrator privileges to an EOA address they controlled, subsequently extracting MLT tokens from the bridge contract and transferring the administrator control of the cross-chain bridge to the attacker's wallet.Currently, the attacker has obtained approximately 97,003 USDT on BSC and transferred about 39.21 ETH on Ethereum through Rhino.fi, with total losses amounting to approximately $161,000.

On-chain detective ZachXBT released an update on the Humanity $31 million security incident. After further analysis of the flow of funds, ZachXBT believes that the team is likely not involved in "self-theft" or "self-directed performance." The official announcement regarding the private key leak is true, but before the unlocking, the price of H tokens was artificially pumped, resulting in hackers taking advantage of the situation. The private key leak and the previous abnormal price pump should be considered independent events.ZachXBT also questioned whether the team artificially inflated the price of H tokens through suspicious market-making agreements and large over-the-counter transactions before the token unlocking, in order to smoothly offload or alleviate selling pressure ahead of the upcoming unlocking for investors/early contributors (around June 25).

Humanity Protocol founder Terence Kwok posted on the X platform confirming a security incident, stating that this incident involves the private key leak of a Humanity Foundation member. For safety reasons, users are advised not to interact with cross-chain bridges or any liquidity pools until safety is confirmed. The team is working with security experts and exchange partners to resolve the issue.According to previous reports, associated addresses of Humanity Protocol have been stolen for over 31 million dollars.

GoPlus posted on platform X that the Meta account recovery feature has been exposed to a high-risk design flaw, which could directly leak users' phone numbers, email addresses, and PII (Personally Identifiable Information). Attackers only need to input the META username without any login or verification to directly obtain the complete PII linked to the user, such as email addresses and phone numbers. This could pose significant risks to users, including: large-scale phishing attacks, SIM card swapping attacks, account takeover and identity theft, and targeted social engineering attacks.Recommendations: Remove or change the leaked email/phone number as a recovery method; modify related account passwords and enable 2FA; do not click on any emails or messages related to "account anomalies," "verification," or "password reset"; set up multi-channel verification, which can be verified through official documents or other official social media channels.

According to Marketscreener, Swedish Economic Crime Authority prosecutor Jonas Myrdal stated that the early leak of news on social platform X regarding Sivers Semiconductors (SIVE) considering a dual listing in the U.S., which was officially confirmed by the company about 48 hours later, is not a coincidence and is highly likely to involve information leakage.Jonas Myrdal pointed out that the relevant information was published and continuously promoted on the X platform by an anonymous account with about 200,000 followers before the official disclosure, which subsequently led to a significant increase in the company's stock price within a short period. This pattern of behavior is similar to a previous case involving "pump-and-dump" manipulation, in which three individuals were convicted of serious market manipulation. He further suggested that the Nasdaq exchange should investigate this incident and assess whether there are violations of the EU Market Abuse Regulation (MAR). Currently, the source of the information leak is still under investigation.Previously, the "new stock god" Serenity posted on the X platform, seemingly "calling" Sivers, and expressed an optimistic outlook after further reviewing the latest earnings call content of Sivers Semiconductors. The company's management stated that "viewing ecological partners as competitors is not the correct mindset in a super cycle where demand far exceeds supply," reflecting the current strong demand in the photonics industry. Additionally, the photonics business pipeline has rapidly grown over the past five months, driving an overall revenue pipeline increase of 77%.

Superfortune, incubated by Manta, recently released an update on the X platform regarding a security incident, stating that the attack was not carried out by internal personnel and that no team members were involved. The claim about the team secretly selling tokens is incorrect. The team has also not had any contact with Web3Port.The investigation confirmed that the attack was not due to address poisoning, but rather a leak of the signer's private key. The attacker independently held the private key and submitted a transaction with a forged address 43 minutes after the correct transaction. The forged address shares the first and last four characters with the correct address (starting with 0x70AE and ending with 5C15) to disguise itself in the Safe interface preview. The stolen funds are fully traceable and are currently stored in three cold wallets on Ethereum, containing approximately 2784 ETH, along with about 170,000 USDT that were cross-chain transferred out.The attacker also created a large number of counterfeit addresses and sent false transfer events to these addresses using Unicode-forged token symbols in an attempt to confuse tracking. This counterfeit address construction technique is the same as the method used when attacking this project. The attacker had pre-built a large-scale infrastructure, indicating that this was an industrialized operation rather than an opportunistic attack.

According to on-chain data, the private key of the StakeDAO deployer was leaked on Arbitrum, and the attacker minted approximately 54.5 trillion vsdCRV, partially exchanging it for 43.7 ETH.