News linked to this event type.
According to Dark Web Informer, the decentralized prediction market platform Polymarket is suspected of having been hacked. The threat actor “xorcat” posted over 300,000 data records and a corresponding exploit toolkit on a well-known cybercrime forum. The data extraction occurred on April 27, 2026. Reportedly, the attacker extracted data via an undisclosed API endpoint, pagination bypasses, and misconfigured CORS settings in Polymarket Gamma and the CLOB API. The leaked data includes: - Full personal information for 10,000 users (including names, proxy wallets, and base addresses); - 4,111 comments; - 1,000 moderation reports (including 58 ETH addresses and administrator authentication address identifiers); - Metadata for 48,536 Gamma markets; - Constant-product market maker addresses for over 250,000 active CLOB markets; and - Social graph data for 9,000 followers. The toolkit contains proof-of-concept code for multiple vulnerabilities, including CVE-2025-62718 (Axios NO_PROXY bypass, CVSS 9.9, enabling server-side request forgery), CVE-2024-51479 (Next.js middleware authentication bypass, CVSS 7.5), and the aforementioned CORS misconfigurations. Additionally, the toolkit includes automated continuous data-extraction scripts and a comprehensive red-team report (including M
Binance Alpha 2.0 will support AITECH’s (AITECH) rebranding initiative to AITECH Cloud Network (ACN). Starting at 10:00 on April 29, 2026, Binance Alpha 2.0 will temporarily suspend trading of AITECH to facilitate a token swap, which will be executed on a 1:1 basis. Trading of AITECH Cloud Network (ACN) on Binance Alpha 2.0 is expected to resume at 16:00 on April 29, 2026.
According to an official announcement by Puffer Finance, the liquid staking protocol Puffer Finance has allocated treasury funds to Aave’s DeFi United program to demonstrate its support for infrastructure development. Puffer Finance stated that, as a liquid staking protocol centered on security, it believes robust infrastructure and consistent incentive mechanisms are fundamental to ensuring DeFi’s resilience during critical moments. The protocol also emphasized that DeFi is a vital component of the modern financial system, and industry participants should compete constructively, continuously build infrastructure, and maintain coordination during critical times.
According to an official announcement by Tropykus, the decentralized lending protocol Tropykus has initiated a phased shutdown of its current protocol version. Deposit and lending functionalities will be permanently discontinued. Users may withdraw funds and repay loans via tropykus.com until the deadline of July 27, 2026; thereafter, such operations will only be supported through direct interaction with smart contracts. The team stated that this shutdown decision stems from long-term strategic evolution—not from the security report previously received by Money on Chain, a partner of Tropykus. That report had prompted the protocol to proactively suspend deposits and new lending activities. However, the team emphasized that internal discussions regarding the shutdown predated the security incident, and the incident merely accelerated the decision. Technically, the team noted that the original architecture was designed for an earlier technological environment and is no longer capable of meeting long-term development needs in the face of emerging security challenges posed by technologies such as artificial intelligence. The team advises all users to complete withdrawals and settle their lending positions via tropykus.com before July 27, 2026. After this date, users will need technical proficiency to interact directly with smart contracts to perform these operations.
According to on-chain analyst PeckShield (@PeckShieldAlert), a user’s Alchemix Yearn yvVault position (token $yvWETH) was attacked, resulting in an estimated loss of approximately $1 million. The root cause of the attack lies in the user’s prior approval grant to an unverified contract (contract address: 0x143a), deployed 10 days ago. Reverse-engineering analysis revealed that this contract contains a vulnerability enabling arbitrary call execution. Exploiting this vulnerability, the attacker successfully transferred the victim’s yvVault position. PeckShield has now publicly disclosed the specific logic of this vulnerability. Users are advised to review and revoke token approvals granted to unknown or unverified contracts to mitigate asset risks.
According to CBC News, the Canadian federal government has announced plans to implement a nationwide ban on cryptocurrency ATMs to protect the public from fraudsters. This measure was formally proposed in the government’s spring economic update, which characterizes cryptocurrency ATMs as “a primary tool used by fraudsters to deceive victims and by criminals to launder money.” Cryptocurrency ATMs allow users to deposit cash and exchange it for cryptocurrencies such as Bitcoin, which are then transferred to any digital wallet worldwide. CBC News’ prior investigative report, “Feeding Fraud,” revealed that these machines have become the main channel through which fraudsters in Canada obtain victims’ funds. Canada’s financial intelligence agency, FINTRAC, reached the same conclusion in its February 2023 analytical report. Canada currently has the highest number of cryptocurrency ATMs per capita globally—nearly 4,000 units nationwide—yet still lacks industry-specific regulatory legislation. The government stated that, following implementation of the ban, the public will still be able to purchase virtual currencies through physical money service businesses.
According to an official announcement, Binance will update the collateral ratios for assets including STX and APT under Portfolio Margin (PM), as well as the tiered collateral ratios for PMPro, starting at 06:00 UTC on May 1, 2026 (14:00 Beijing time). The adjustment is expected to take approximately 30 minutes. Simultaneously, Binance Futures will adjust the leverage and margin tiers for multiple USDⓈ-M perpetual contracts, including ZENUSDT and EIGENUSDT, at 06:30 UTC on the same day (14:30 Beijing time). This adjustment is expected to take approximately 1 hour.
US Treasury Secretary Scott Bessent posted on X platform, stating that through economic sanctions, the Treasury has taken action against Iran's international shadow banking infrastructure, cryptocurrency access channels, shadow fleet, weapons procurement network, regional terrorist proxies' funding, and Chinese independent refineries supporting Iran's oil trade. These actions have disrupted hundreds of billions of dollars in revenues that could have been used to finance terrorism. Under the US President's maximum pressure campaign, Tehran's inflation rate has doubled, and its currency has depreciated rapidly. Iran's main oil export terminal, Kharg Island, is nearing its storage capacity limits, which will force the regime to cut oil production, resulting in an additional daily loss of approximately $170 million in revenue and causing permanent damage to Iran's oil infrastructure. The Treasury will continue to apply maximum pressure, and any individuals, vessels, or entities assisting Tehran's illicit flows face the risk of US sanctions.
the Canadian federal government announced in its spring economic update released on Tuesday a plan to ban cryptocurrency ATMs to protect citizens from fraud. The government defined cryptocurrency ATMs as a primary tool used by scammers to defraud victims and by criminals to transfer illicit funds.Previous analysis by FINTRAC showed that cryptocurrency ATMs have become a major channel for scammers to obtain funds from victims in Canada. Since these machines do not require a bank account and lack manual review, funds can be transferred quickly and are difficult to trace. Canada currently has nearly 4,000 cryptocurrency ATMs, ranking first globally in per capita ownership. The Canadian government stated that the measure aims to better protect citizens from illegal activities when purchasing virtual currencies through physical money service businesses. Previously, countries such as the UK, New Zealand, and Australia have implemented restrictions or bans on cryptocurrency ATMs.
According to Bitcoin Magazine, David Marcus, former PayPal president and CEO of Lightspark, announced the launch of a new Bitcoin wallet that supports AI agents for purchasing BTC and sending/receiving funds.
LayerZero Labs announced on platform X that it has committed over 10,000 ETH in support to DeFi United, led by Aave. Specific actions include donating 5,000 ETH to DeFi United, depositing 5,000 ETH into the Aave market to enhance liquidity, and deepening GHO liquidity.
According to The Block, decentralized exchange Ostium has completed a major backend architecture upgrade, officially positioning itself as a “decentralized execution layer” for the global market and providing on-chain traders with access to off-chain liquidity. The core of this upgrade is the introduction of a Translation Layer that bridges communication between smart contracts and institutional liquidity provider networks—including partners such as Jump, which hold traditional market access licenses. This mechanism enables on-chain users to indirectly tap into liquidity resources from traditional financial markets.
According to an official announcement by Pump.fun, the platform has completed the burning of all previously repurchased $PUMP tokens, amounting to approximately $370 million—roughly 36% of the circulating supply. The burn was executed via two on-chain transactions at 20:52 UTC. Simultaneously, Pump.fun has launched a programmable buyback-and-burn mechanism, allocating 50% of its net revenue over the next year toward publicly purchasing $PUMP on the open market and immediately burning 100% of the acquired tokens. This mechanism is enforced via an immutable smart contract covering revenue streams from Pump.fun’s three core product lines: the bonding curve, PumpSwap, and Terminal. Its execution comprises four steps: fee collection, aggregation into an intermediate wallet, buyback, and burn—all of which can be tracked in real time at fees.pump.fun. The remaining 50% of revenue will fund operational expenses and ecosystem development, including team expansion, strategic investments, and marketing initiatives. Pump.fun stated that this move aims to address community concerns regarding the token’s long-term value and the transparency of the buyback mechanism, with the overarching goal of continuously reducing the circulating supply.
NVIDIA announced on X platform that it has launched the open-source multimodal model Nemotron 3 Nano Omni today. The model adopts a 30B-A3B mixture-of-experts (MoE) architecture, supports a 256K context window, and can uniformly process video, audio, image, and text inputs. Compared to open-source omnimodal models at a similar interaction level, this model achieves up to a 9x increase in throughput, significantly reducing inference costs and improving scalability. Nemotron 3 Nano Omni is now available on Hugging Face, OpenRouter, and NVIDIA NIM, and has been adopted by enterprises including Aible, Applied Scientific Intelligence, and H Company.
Odaily Odaily News: The Over Foundation announced on X platform that due to financial constraints, it has decided to cease operations of the Over Protocol. All infrastructure and services, including OverWallet, OverNode, OverFlex, RPC endpoints, block explorers, and APIs, have been shut down with no plans for restoration. While the Over Protocol was designed as a decentralized Layer 1 mainnet, it is highly likely to become inoperable in practice following the Foundation's cessation of services. The continued production of blocks will depend on independent validators running open-source client software.
Odaily reports, according to an official announcement, Coinbase will list Virtuals Protocol (VIRTUAL) for spot trading on April 29. If liquidity conditions are met and trading is supported, the VIRTUAL trading pair will open at or after 9:00 AM Pacific Time.
According to the official announcement, Coinbase will list Virtuals Protocol (VIRTUAL) spot trading on April 29. If liquidity conditions are met and trading is supported, the VIRTUAL-USD trading pair will open at or after 9 a.m. Pacific Time.
According to The Block, TON Tech—the infrastructure team under The Open Platform—has announced the launch of an AI-powered autonomous trading agent that supports independent on-chain actions on the TON blockchain, including transfers, token swaps, DeFi operations, automated trading, staking, and basic portfolio management—all without requiring users to surrender their private keys.
on the 28th, Iran's Tasnim News Agency, citing Iranian Army Spokesperson Mohammad Akraminia, stated that the military still considers the current situation a state of war, with ground forces deployed nationwide, fully prepared to counter threats. He noted that Iran has completed a comprehensive update of its target list and combat equipment, and all units are thoroughly prepared to respond to potential enemy military attacks. (Xinhua News Agency)
Odaily News, Web3 security company CertiK has released its "2026 State of Digital Asset Regulation" report, systematically reviewing global regulatory trends. The report indicates that as of April 2026, regulatory frameworks in major jurisdictions such as the United States, the European Union, Hong Kong SAR, and Singapore have been largely established, and the industry is entering a phase of comprehensive compliance.The report shows that anti-money laundering (AML) enforcement has replaced securities classification as the primary regulatory risk. In the first half of 2025, global AML-related fines exceeded $900 million, making transaction monitoring capabilities a core compliance requirement. Meanwhile, smart contract security audits are evolving from industry best practices into access conditions, becoming a prerequisite for license approval and token listings. Additionally, global stablecoin regulatory frameworks are converging, with principles such as full reserve backing and licensed issuance becoming widespread, though cross-jurisdictional regulatory differences still pose compliance challenges.The report states that with regulatory convergence and strengthened enforcement, the industry has entered an "era of strong compliance." CertiK indicated that the core challenge for enterprises is shifting from "whether to comply" to "how to quickly build and implement compliance capabilities." Multi-jurisdictional licensing, AML investment, and continuous security audits are becoming fundamental entry requirements for institutional development.