News linked to this event type.
According to on-chain analyst PeckShield (@PeckShieldAlert), Gnosis’s X platform account appears to have been compromised. Users are advised not to interact with this account or click any links posted by it to avoid phishing attacks or asset loss.
SlowMist released threat intelligence stating that new npm malware variants—Shai-Hulud, Miasma, and Hades—linked to the compromised npm developer account “czirker” are impacting the npm ecosystem. This campaign triggers during `npm install` execution via a preconfigured `binding.gyp` file. It has been confirmed to affect 23 packages, including `leo-logger`, which sees approximately 3,140 weekly downloads. As of the report’s publication, 408 GitHub repositories have been found infected due to stolen credentials.
According to an official social media announcement by HTX DAO, the HTX Genesis Hackathon—organized by HTX DAO and B.AI, and co-organized by OpenCSG, TinTinLand, and OpenCity—has attracted over 90 teams to register. The total prize pool for this event amounts to 20,000 USDT, with over $100,000 in computing power support provided. The hackathon aims to encourage developers to explore use cases centered around $HTX applications, B.AI ecosystem applications and computing services, AI Agent finance, on-chain asset management, trading infrastructure, DAO tools, and intelligent financial operating systems. Winning teams will receive cash prizes, computing resources, ecosystem support, introductions to investment firms, community exposure, and follow-up grant funding. Registration for HTX Genesis closes on July 5, and the final competition will be held offline during the World Artificial Intelligence Conference (WAIC) in Shanghai on July 17–18.
Cybersecurity firm Novee, in its latest research, revealed a CI/CD supply chain vulnerability pattern dubbed “Cordyceps,” primarily involving command injection, authentication logic flaws, artifact poisoning, and privilege escalation within GitHub Actions workflows. According to the report, unauthenticated users can exploit these vulnerabilities under specific conditions to hijack workflows, steal credentials, or gain control of code repositories.
Queenie, founder of CoinUp, will host an X Space on June 25 at 20:00 (UTC+8) to publicly address recent rumors about the platform “running away,” its operational status, user asset security, CPX price volatility, and related personnel matters.
According to Odaily, since 2019, wallets with clear ties to Iran have transferred over $3.84 billion in transaction funds through the cryptocurrency exchange CoinEx. Among these, wallets hosted by CoinEx received hacked crypto assets acquired by the Central Bank of Iran and conducted direct transactions with accounts previously identified by U.S. officials as belonging to Iran's Islamic Revolutionary Guard Corps.Blockchain data shows that in 2024, CoinEx replaced Binance as the largest foreign counterparty for Iran's biggest domestic crypto exchange, Nobitex. Last year, the flow of funds between Nobitex and CoinEx exceeded $763 million. Additionally, between 2022 and 2025, wallets hosted by CoinEx also processed transactions for Alireza Derakhshan, an Iranian individual allegedly involved in a network selling sanctioned oil. (WSJ)
According to The Wall Street Journal, blockchain public-chain data analysis shows that Iranian entities have conducted over $3.84 billion in transactions via the cryptocurrency exchange CoinEx to circumvent U.S. economic sanctions. Investigators traced funds linked to two digital wallets controlled by the Central Bank of Iran and found connections to the $1.5 billion stolen by North Korean hackers from the Bybit exchange. After flowing through complex, multi-layered transaction paths, these funds ultimately entered CoinEx—making it one of the central channels through which Iran uses cryptocurrencies to bypass sanctions.
according to PeckShieldAlert monitoring, the address labeled as the KyberSwap attacker has again transferred 2,000 ETH to Tornado Cash. Over the past two years, the attacker has laundered a total of 16,100 ETH (approximately $40 million) through this mixer, accounting for over 80% of the $48.8 million stolen in the November 2023 attack.
According to Crypto in America, the National District Attorneys Association, the National Association of Assistant U.S. Attorneys, the International Association of Chiefs of Police, and the National Sheriffs’ Association jointly sent a letter to Acting Attorney General Todd Blanche and Patrick Witt, Executive Director of the White House Crypto Council, expressing strong opposition to Section 604 of the “Clarity Act”—the Blockchain Regulatory Certainty Act (BRCA). Law enforcement groups argue that this provision could create regulatory loopholes exploitable by criminals for illicit activities including drug trafficking, fraud, child exploitation, sanctions evasion, and terrorist financing. Meanwhile, cryptocurrency-backed candidates achieved sweeping victories in primary elections across Maryland, New York, and Utah. Fairshake—a pro-crypto super PAC—has collectively spent over $7.6 million supporting these candidates, including $5.5 million backing Adrian Boafo, the candidate for Maryland’s 5th congressional district. Miller Whitehouse-Levine, founder of the Solana Policy Institute, warned that August 7, 2026, may be the final window for Congress to pass cryptocurrency market structure legislation. He stated that the industry is willing to make limited revisions to the BRCA provisions to address law enforcement concerns—but firmly opposes any fundamental changes that would weaken the core protections enshrined in the provision. Additionally, the House Financial Services Committee held a hearing on “The Future of Payments” the same day.
According to CoinDesk, Geoff Kendrick, Head of Digital Asset Research at Standard Chartered Bank, released a report initiating coverage of the decentralized lending protocol Aave, with a target price of $3,500 by end-2030—approximately 50 times its current price of around $70—and expects Aave to outperform both Bitcoin and Ethereum. Kendrick stated that Aave has recovered from the April 2026 KelpDAO rsETH bridge vulnerability incident, during which attackers used approximately $290 million worth of stolen tokens as collateral to borrow real assets on Aave, exposing the protocol to up to $230 million in potential losses. Assets have now begun flowing back onto the platform, and Aave’s dominant position in on-chain lending remains solid. Looking ahead, Standard Chartered forecasts that the value of tokenized assets actively used in DeFi applications will grow 37-fold by 2030. Aave—whose revenue model is directly tied to lending activity—is poised to benefit directly. Additionally, Aave’s Horizon initiative (enabling tokenized real-world asset lending in permissioned environments) and the potential relaunch of its token buyback program are viewed as key catalysts.
According to The Block, four major U.S. law enforcement organizations—the National District Attorneys Association, the National Association of Assistant U.S. Attorneys, the International Association of Chiefs of Police, and the National Sheriffs’ Association—jointly wrote to the Department of Justice and the White House, warning that Section 604 of the “Clarity Act” (i.e., the “Blockchain Regulatory Certainty Act”) contains regulatory loopholes. This provision offers a “safe harbor” exemption for non-custodial developers; law enforcement agencies contend that it could shield individuals or entities assisting in the transfer of crypto assets, hinder investigations and prosecutions of crypto-related crimes, and weaken the existing anti-money laundering framework.
HashKey Chain will host the “HashKey Chain Horizon” hackathon in Japan from June 18 to July 14. Built upon the foundation of building a compliant and secure Web3 ecosystem, this hackathon is open to developers, innovators, and Web3 enthusiasts worldwide. It features two challenge tracks focused on key areas within the HashKey Chain ecosystem.
According to the Chosun Ilbo, 22 bitcoins previously held by Seoul’s Gangnam Police Station during its investigation into a financial hacking case have gone missing—valued at approximately 2.2 billion Korean won at current market prices. The investigation revealed that the涉案 bitcoins were stored in an offline wallet held by the complainant, and individuals who knew the wallet’s mnemonic phrase subsequently restored it externally and cashed out the funds.
Altura released a community update stating that redemptions remain suspended to ensure equal treatment for all AVLT holders, and will only be reopened collectively once treasury assets have been fully recovered, credited, reconciled, and independently verified. The team confirmed that no security incident has occurred and no assets have been lost.
According to Blockaid’s monitoring, the Yield Yak website has suffered a front-end attack. The website’s subdomain currently contains code from eleven drainers. This attack method is similar to the one previously used against Gitcoin.
SecondFi, a Cardano ecosystem project, stated that the root cause of the recent security incident has been identified as an issue with its in-house Cardano wallet generation software. The team said it has completed on-chain analysis to assess the scope of impact and is currently collaborating with a blockchain security firm for an independent technical assessment. A preliminary estimate of the total impact is approximately 16 million ADA.
: In response to the recent security incident involving Cardano ecosystem project SecondFi, SlowMist founder Cos said on social media that after continuously monitoring the relevant on-chain data, he believes that if the two addresses starting with "addr1q" are both controlled by the attacker, the actual losses for SecondFi users may have exceeded $20 million.Cos stated that based on on-chain behavior analysis, the aforementioned addresses are highly likely related to the attacker, involving stolen assets potentially exceeding 129 million ADA and other tokens.Previously, SecondFi disclosed that this security incident affected approximately 16 million ADA, stating that the issue originated from the web wallet generation software.
According to the Associated Press, Anthropic’s Mythos model discovered vulnerabilities in the U.S. government’s classified systems.
US President Trump signed two executive orders on Monday aimed at accelerating the nation's quantum computing capabilities and advancing the migration of government systems to post-quantum cryptography. While the orders do not directly mention Bitcoin, industry insiders believe this could benefit blockchain post-quantum security research and development.The two executive orders focus on defending against advanced cryptographic attacks and driving the frontier of quantum innovation. This includes a clear timeline: advancing quantum sensor construction by September 2028, and requiring federal high-value assets and high-impact systems to complete their post-quantum cryptography migration by the end of 2031.Alex Pruden, CEO of Project Eleven, stated that this means the US government will allocate funds and time to achieve post-quantum security goals. It may also extend these requirements to the entire federal contractor system, not just government agencies, thereby accelerating the practical application of post-quantum cryptographic technology.This policy comes amid growing attention within the blockchain industry to quantum threats. The Ethereum Foundation, Solana Foundation, and others have already begun advancing post-quantum security R&D, while the Bitcoin community is also discussing potential risks. Some Bitcoin held in publicly exposed addresses is considered vulnerable to private key derivation attacks once sufficiently powerful quantum computers emerge.Pruden noted that this executive order sets a clear deadline of 2031 for the adoption of post-quantum cryptography, which is more enforceable than the previous US government guidance which only proposed phasing out traditional cryptographic systems by 2035. For Bitcoin and the broader crypto industry, government-level investment in post-quantum security could accelerate the maturation of related tools, standards, and migration pathways.
Odaily, the decentralized cross-chain liquidity protocol THORChain has resumed trading after being down for over five weeks following a May attack. Signing, swapping, liquidity provider operations, and redemptions have all been restored.On May 15, blockchain investigator ZachXBT and security firm PeckShield identified that the protocol had likely been exploited, prompting THORChain to halt trading. The vulnerability resulted in a loss of approximately $10.7 million from one of its six Asgard vaults, while the other five vaults were unaffected.THORChain stated that each vault has now been verified, and every key share has been cross-checked. Native Monero swaps are currently undergoing end-to-end testing and will be launched subsequently. (The Block)