update

The Ethereum Layer2 project Taiko has released the latest developments on the security incident, stating that this incident will not result in any loss of user funds. Currently, the bridged assets are in a state of insufficient collateral, and all additional collateral will be completed before the bridge reopens, ensuring that each user's balance receives 1:1 support, consistent with the situation before the incident occurred.Since the occurrence of this security incident, cautious measures have been taken, including controlling the scope of impact, determining the cause of the incident, and collaborating with the board to develop a plan to protect user assets. In addition, the CEO of Taiko has submitted a formal report to the relevant authorities in Singapore, and the team will fully cooperate in tracing the responsible parties. Users currently do not need to take any action; at this stage, the completed repair plan is being tested, and the chain and bridging services will be reopened as soon as safety is ensured. Users are also reminded to be vigilant against scams; the Taiko team will not proactively message users, and there are no websites for claiming or refunds. Any links provided for such purposes are scams.

Taiko officially stated on X: "We have identified the root cause of this attack and are currently developing a fix to restore the blockchain's online operation as soon as possible. At the same time, we are working closely with major exchanges and security partners to track and freeze the hacker's assets. The remaining funds in the cross-chain bridge are currently safe, and we will announce the next steps in our upcoming updates. To focus on fixing the vulnerabilities and protecting user assets, we will pause updates for a few hours."Previously, it was reported that the Taiko cross-chain bridge was attacked, with losses potentially reaching up to $1.7 million.

Coinbase has released the latest System Update, announcing a series of product upgrades that cover AI investment advisory, global liquidity unification, options trading, and the expansion of multi-asset financial services, further transforming into a comprehensive financial platform. The core features of this update include the SEC-registered AI investment advisor Coinbase Advisor, which can provide personalized multi-asset trading and hedging strategies based on user holdings and market data, but does not execute trades directly. At the same time, the platform will introduce a globally unified liquidity pool, connecting the spot and derivatives trading systems of the U.S. and international markets.In terms of product expansion, Coinbase will support stock and crypto options trading and strengthen its derivatives capabilities through the acquisition of Deribit. Additionally, the company has launched pre-IPO perpetual contracts covering popular targets like SpaceX and plans to expand to future IPO projects such as Anthropic and OpenAI. Coinbase has also introduced the Coinbase One Card upgrade program, where users can stake $500 to $5000 USDC to qualify for a credit card and receive 5% Bitcoin cashback when booking through the Booking.com travel portal. The platform will also gradually support the migration of stock assets to Coinbase trading.On the trading infrastructure level, Coinbase has introduced the Transfer Protection mechanism, which prevents security risks such as wrench attacks through delayed withdrawals, and has expanded its prediction market products, launching crypto price binary options and combination prediction trading with a 15-minute cycle. Coinbase stated that its goal is to build an Everything Exchange covering trading, payments, lending, and investment, making it the primary financial account for users.

The Coinbase developer platform has released an update on the progress of the payment ecosystem development. With the official launch of Coinbase for Agents, users can now create independent accounts for AI Agents, executing automated operations such as transactions and asset management under set permissions and risk control rules. The new Coinbase CLI and MCP have simplified the login process and have been demonstrated for identity and operation integration via Claude. The developer wallet is now available through the Swift SDK, supporting the integration of self-hosted wallet functionality in iOS native applications.In the coming weeks, the x402 protocol will support users within Coinbase for Agents to make direct payments using their USDC balance, allowing Agents to not only operate accounts but also complete real payments directly through the stablecoins held by users. Additionally, Coinbase will release a system update on June 16 to further enhance payment and Agent-related capabilities.

Binance releases an update on proof of reserves, stating that asset reserves are always above 1:1 to guarantee user funds, with the BNB reserve ratio at 100.58%, the Bitcoin reserve ratio at 100.2%, and the ETH reserve ratio at 100%. The USDT reserve ratio is at 103.17%.

The Zcash Foundation announced the release of the Zebra 4.5.1 version update to fix a consensus-level security vulnerability and strongly recommends that all node operators upgrade immediately.The vulnerability, identified as GHSA-2prc-cj5x-4443, involves a sigop (signature operation count) statistical error in P2SH transactions, which could lead to potential consensus fork risks. This fix corrects the incomplete patch issue from the previous 4.5.0 version, which was just released yesterday.The Zcash development team stated that the problem originated from discrepancies in sigop counting logic across different implementations, which could cause nodes to produce different results when validating transactions, thereby affecting on-chain consensus consistency. The fix was implemented by reverting and adjusting the Rust implementation logic to ensure alignment with the expected behavior of the protocol.The Zcash Foundation emphasizes that there is currently no workaround for this issue, and upgrading to 4.5.1 is the only way to ensure that nodes remain on the correct chain and avoid potential fork risks.

The Zcash Foundation has released the node client Zebra version 4.5.0 update, which includes multiple security fixes, including a critical consensus vulnerability and several high-risk denial of service (DoS) issues. All node operators are strongly advised to upgrade immediately.It is reported that this core fix includes a sigop counting error caused by P2SH script parsing (which may lead to a consensus fork with zcashd), a defect in the NU5 block validation cache logic, a risk of transparent address balance overflow crashes, as well as multiple crashes and resource exhaustion vulnerabilities in RPC interfaces and memory pool handling. Additionally, some vulnerabilities can be exploited by malicious nodes, leading to node freezes, reboot loops, or even permanent shutdowns.

Vitalik Buterin updated on several CROPS AI related developments and pointed out that there is a clear intersection between the "CROPS Ethereum access layer" and "CROPS AI." He stated that if remote large language models could be called for payment through zero-knowledge proofs, it could also be used to solve the Ethereum private RPC reading issue.Meanwhile, Deepseek v4 has been released, and the 2-bit quantization version can run within 90 GB, but currently runs faster on Apple hardware; the messaging app messa has supported Telegram Alpha features; the model running tool luceb has shown higher efficiency when running intensive models; the local AI recording tool VoxTerm is still under continuous development. Vitalik Buterin also mentioned that large language models fine-tuned for specific applications will help improve secure code writing capabilities, and corresponding fine-tuned models should be available for Ethereum-related scenarios.

According to the official announcement, Bitget will support the splitting of preSPAX tokens and adopt preSPCX as the new token code. The splitting ratio is 1:5, meaning that each preSPAX token can be split into 5 preSPCX tokens.According to the schedule, Bitget will temporarily remove the preSPAX/USDT spot trading pair on May 28 at 14:00 (UTC+8), and simultaneously suspend related unified account spot trading, spot strategy bots, and instant exchange functions. After the token split is completed, the preSPCX/USDT trading pair and instant exchange function will be opened on the same day at 17:00 (UTC+8). For more details, please refer to the Bitget official platform.

Binance updated the funding rate for the SPCXUSDT U-based Pre-IPO perpetual contract to 0% on May 21, 2026, at 16:00. If the funding rate for this contract remains at 0% on May 22, 2026, at 00:00, Binance will notify separately. Users holding open positions are advised to reassess their hedging strategies.

GitHub has updated the details of the investigation into the unauthorized access incident of its internal repositories: GitHub detected and contained an incident yesterday involving an employee's device being compromised, which involved a maliciously implanted VS Code extension. GitHub removed the malicious extension, isolated the affected terminals, and immediately initiated an incident response. Current assessments show that only GitHub's internal repositories experienced data exfiltration, and the approximately 3,800 repositories claimed by the attackers are roughly consistent with the investigation results. GitHub has prioritized rotating critical credentials, is analyzing logs, verifying credential rotations, and monitoring subsequent activities, with a complete report to be released after the investigation is concluded.Additionally, Slow Mist's Chief Information Security Officer 23pds commented on this incident, stating: "By analyzing leaks from cybercrime forums, hackers may have used Anthropic's Mythos security AI to precisely breach GitHub's defenses and steal information from about 4,000 core internal repositories: including the source code for Copilot, the algorithms for CodeQL, the Actions runtime, and the entire billing system. Further analysis of this code could lead to subsequent attacks, having a profound security impact on the integration of the open-source community."

Ethereum co-founder Vitalik Buterin commented on the issue of Ethereum state storage, stating that even if users store data themselves, the blockchain only stores hashes, and transactions only include proofs, it still requires storage and updating of the data used to verify the proofs, and this data ultimately becomes almost as large as the state itself; Vitalik mentioned that there are solutions to the relevant issues, but they involve a large number of components and require trade-offs compared to the current Ethereum.Previously, DeFi content writer marilyn100x.eth stated that Ethereum has a state storage problem, where developers pay a one-time fee to write data, while nodes bear the long-term storage costs. However, EIP-8037 does not involve time-weighted rent or ongoing fees, but significantly increases the upfront gas costs for new contracts, accounts, and storage slots to control state growth during the scaling process.

Aave founder Stani Kulechov posted on the X platform that the next step of the rsETH technical recovery plan has been completed, and the loan-to-value (LTV) ratios of WETH loans across all affected networks have been restored to pre-event levels. Users can now again borrow on Aave using WETH as collateral, including through collateral and debt swaps.According to the Aave announcement, this recovery involves network deployments such as Aave V3 Ethereum Core, Ethereum Prime, Arbitrum, Base, Mantle, and Linea.

Aave announced that its bug bounty program has been updated to better align rewards with the risk status of each part of the ecosystem and to simplify the review process. The maximum reward for critical vulnerability fixes for Aave V4 and Core Aave V3 has now been increased fivefold.

The Compound Foundation stated that, after closely collaborating with the Aave and KelpDAO teams, the relevant positions of the rsETH exploiters in WETH and wstETH Comet have all been liquidated over the weekend, and all rsETH held by the attackers has been transferred to DeFi United. Compound noted that the swift action effectively mitigated market risks and protected the safety of the protocol's suppliers and reserve funds.Compound also updated that the transfer restrictions for Ethereum WETH and wstETH Comet have now been lifted, and all Comet markets have resumed normal operations. The protocol stated that the top priority remains ensuring the overall safety of the platform and thanked the Aave and KelpDAO teams for their collaboration during the incident handling process.

According to The Block, the U.S. Senate Banking Committee has released an updated 309-page text of the Clarity Act, which is set to be reviewed and voted on later this week. The new text includes language related to restrictions on stablecoin rewards, as well as provisions from the Blockchain Regulatory Certainty Act, clarifying that non-custodial developers do not fall under the category of money transmitters. Coinbase, which previously withdrew its support due to controversies over the stablecoin rewards provisions, has now shifted to support, but banking groups still believe the restrictions are insufficient.Meanwhile, the bill still does not include ethical constraints regarding profits from digital assets for the president and other federal officials. Democrats have stated that without relevant compromises, the bill will struggle to gain support.

According to official news, based on the update from the Arbitrum DAO proposal, a judgment creditor in an unrelated case served a restraining order to Arbitrum DAO regarding the ETH frozen after the rsETH incident. A few days later, Aave LLC filed an emergency motion to vacate. The court modified the restraining order, allowing for on-chain Arbitrum voting and transferring the frozen ETH to Aave LLC.After the transfer, the restraining order will attach to Aave LLC. The revised constitutional AIP retains the asset recovery intent approved by Arbitrum DAO, and ETH will still be used for the recovery of the rsETH incident. Aave LLC will comply with all court obligations during the litigation process.

Binance released the May reserve proof update. As of May 1, the user's net BTC balance is 606,742.388 coins, and the Binance wallet balance is 608,067.979 coins, with a BTC reserve ratio of 100.22%.In addition, the user's net ETH balance is 3,762,321.834 coins, and the Binance wallet balance is 3,762,328.82 coins, with an ETH reserve ratio of 100%. The USDT reserve ratio is 104.27%, and the BNB reserve ratio is 101.68%.

Polymarket announced the latest developments and feature updates, including the launch of measures to mitigate latency spam to ensure order placement and cancellation operations, fixing the "insufficient balance/authorization" error, and another core issue affecting limit buy orders is expected to be resolved in the coming days.In addition, Polymarket stated that it has identified and banned multiple clusters of ghost-fill accounts, which were all created before the deposit wallet system went live. Currently, any occurrence of ghost-fill behavior will be identified and banned, and the deposit wallet system will also prevent the continued bulk creation of new accounts. More updates will be released in the coming week to address previously outstanding issues.

Wasabi Protocol released a security incident update, stating that attackers exploited a configuration vulnerability in the Spring Boot Actuator within its AWS infrastructure to steal the private keys controlling EVM smart contracts, resulting in the theft of approximately $4.8 million in user funds and $900,000 in protocol treasury funds, with total losses amounting to about $5.7 million.The attack chain began with a public server used for analysis, whose Actuator heap dump was not properly password protected, allowing attackers to obtain credentials for another server and ultimately gain control of the smart contract private keys. This incident only affected EVM deployments, including certain treasuries on Ethereum, Base, Blast, and Berachain, while Solana deployments and Prop AMM were not affected.There has not yet been a final update on the user compensation plan, but "ensuring all affected users are compensated" remains the team's top priority, and updates on the investigation progress will be released in the Discord community in the future.