News Heat Trend
Project Overview
Agentwood Studios is an AI agents designed to revolutionize the filmmaking industry. Derived from the creative minds of filmmakers, producers, actors, and actresses, these AI agents collaborate in a dynamic, user-driven environment to generate scripts, trailers, short films, and even full-length feature films.
Moonshot AI to Open Source 2.8-Trillion-Parameter Kimi K3 Weights, Chinese Open-Weight Model Token Share Rises to 68%
Chinese AI startup Moonshot AI will release the model weights of its high-performance model, Kimi K3. Developers can download the model, modify it for various purposes, and run it in their own data centers or cloud environments.Kimi K3 boasts 2.8 trillion parameters and a 1 million token context window, enabling it to process large-scale documents and codebases in a single pass. Moonshot AI plans to later publish a technical report detailing the model's architecture, training methodology, and performance evaluation results.Following the release of Kimi K3, Moonshot AI's daily revenue is reported to have increased by at least 6 times. The company is reportedly advancing a new round of fundraising at a $50 billion valuation and is considering a Hong Kong listing as early as this year.According to Bloomberg Intelligence, following the release of Kimi K3 and Z.AI's GLM-5.2, the share of Chinese open-weight models in overall token usage has risen to 68%. Services like AWS Bedrock, Microsoft Azure Foundry, and Google Vertex AI currently do not offer Chinese open-weight models such as Kimi K3 and GLM-5.2.
Post-quantum cryptography security company QIZ Security completes $17 million seed funding round
According to PR Newswire, post-quantum cryptography (PQC) management platform QIZ Security announced the completion of a $17 million seed funding round, led by Bessemer Venture Partners and Merlin Ventures, with participation from Evolution Equity Partners, Qbeat Ventures, Singtel Innov8, and Qino Cyber Capital. The funding will be used to accelerate product development and market expansion. QIZ's core capabilities lie in providing enterprises with continuous crypto asset discovery, risk modeling, and remediation governance, helping organizations complete the migration to quantum-safe architecture before "Q-Day" (the point in time when quantum computers are expected to possess the capability to break existing encryption systems, anticipated around 2029) arrives. Currently, QIZ has established strategic partnerships with Cisco, AWS, Google, CrowdStrike, Deloitte, EY, and IBM, among others, with services covering the finance, telecommunications, healthcare, and critical infrastructure sectors. The company was co-founded by cybersecurity industry veterans Ben Volkow, Lenny Ridel, and former head of Deloitte's Global Quantum Cybersecurity team, Dr. Itan Barmes.
São Paulo Sues World and Amazon AWS for Approximately $47 Million
: On Monday, the São Paulo Consumer Protection Office filed a lawsuit against Tools for Humanity, the company behind World, and its hosting service provider Amazon AWS, accusing them of abusive practices in the collection of consumer biometric data in São Paulo. The lawsuit estimates that over 400,000 people participated in World's promotions in São Paulo. It demands the preservation of all data and metadata related to the data collection and the suspension of any payments or benefits associated with biometric data collection before the assessment is completed. The lawsuit seeks a ruling that the related activities constitute abuse and demands payment of 240 million Brazilian reais, approximately $47 million, to compensate for individual consumer losses. The prosecution alleges that World continued to issue crypto rewards through in-app transactions after the National Data Protection Authority ordered it to stop in February 2025. A report from the Iris Parliamentary Committee of Inquiry stated that World concentrated its promotions in peripheral and high-traffic areas to attract people facing socioeconomic issues to submit biometric data in exchange for crypto rewards. The prosecution also claims that consumers were not informed about the economic purpose of the project or the risks associated with processing and storing data on AWS servers.
Anthropic Model Safety Controversy Escalates, Amazon Accused of Being the "Hidden Force" Triggering Regulatory Intervention
the U.S. government's export controls and access restrictions on Anthropic's models, Fable 5 / Mythos 5, were partly driven by Amazon's cybersecurity research and AWS CEO Andy Jassy's communications with the White House.It is understood that research submitted by Amazon indicated that through a series of prompt tests, researchers could induce Fable 5 to output sensitive information potentially usable for cyberattacks, raising security concerns. Subsequently, Andy Jassy reported these findings to the U.S. government level, prompting the White House to implement further restrictions, including banning foreign users from accessing the model.Meanwhile, former U.S. Commerce Department official Kate Koren revealed that the White House's existing policy stance towards Anthropic may have also influenced this decision. This is because Anthropic has disagreements with the White House over the boundaries of AI safety, including refusing to use its models for mass surveillance or lethal autonomous weapons systems. Although the two sides had eased tensions and expanded cooperation earlier this year, this incident could reignite strained relations between them. (The Wall Street Journal)
SlowMist Discloses Cross-Registry Supply Chain Attack Targeting Crypto and AI Developers
According to on-chain analyst PeckShield (@PeckShieldAlert), SlowMist’s threat intelligence system MistEye has detected a cross-registry supply chain attack targeting developers. Malicious packages have spread across three major registries—npm, PyPI, and Crates.io—comprising over 34 malicious packages and more than 384 related versions. The attack targets developer communities in cryptocurrency, DeFi, Solana, Sui/Move, and AI. It may lead to the theft of cryptocurrency wallets, SSH keys, cloud credentials, GitHub/AWS tokens, browser data, and other sensitive developer information. Some malicious payloads also attempt persistence via mechanisms including `.cursorrules`, `CLAUDE.md`, Git hooks, cron, systemd, and SSH. SlowMist recommends immediately removing affected packages, isolating compromised systems, rotating exposed credentials, rebuilding CI environments and developer machines from clean images, and conducting comprehensive reviews of GitHub, cloud, SSH, and wallet-related activities.
Wasabi Protocol Updates on Security Incident Response: Final User Compensation Plan Not Yet Confirmed
Wasabi Protocol released a security incident update, stating that the attacker exploited a Spring Boot Actuator configuration vulnerability in its AWS infrastructure to steal private keys controlling EVM smart contracts, and subsequently drained approximately $4.8 million in user funds and $900,000 from the protocol’s treasury—totaling roughly $5.7 million in losses. The attack chain originated from a public-facing analysis server whose Actuator heap dump was not properly password-protected, enabling the attacker to obtain credentials for another server and ultimately gain control of the smart contract private keys. This incident affected only EVM deployments—including certain treasuries on Ethereum, Base, Blast, and Berachain—while Solana deployments and the Prop AMM remained unaffected. No final user compensation plan has been announced yet; however, “ensuring all affected users are compensated” remains the team’s top priority. Updates on the investigation will be shared with the community via Discord.
PrimePiper Launches Prime Broker Dedicated to AI Agents, Enabling Multi-Exchange Connectivity, Cross-Venue Reconciliation, and Risk Control & Audit Capabilities
PrimePiper has launched an enterprise-grade prime broker platform for AI agents, designed to address challenges including fragmented account management, inadequate risk control, inability to reconcile across venues, and insufficient compliance auditing in AI-driven automated trading. According to the company, its infrastructure supports unified connectivity to multiple trading venues—including Hyperliquid, OKX, Tiger Brokers, and Interactive Brokers (IBKR). For risk control, PrimePiper offers enterprise-grade API key management, spending limits, and circuit-breaker mechanisms to constrain AI agent trading behavior. At the execution layer, it enables automated strategy execution via SDK or the Model Context Protocol (MCP). For compliance and auditing, it provides audit-grade reporting capabilities tailored for funds and traders. PrimePiper has been selected for the latest cohort of Founders Inc’s accelerator program; its product is currently in the Alpha stage. Team members hail from Galois Capital, Kraken, DRW, and AWS.
Vercel CEO: Attackers Stole API Keys via Malware, Impact Broader Than Initially Assessed
Vercel CEO Guillermo Rauch (@rauchg) announced that Vercel is conducting an in-depth investigation into the April 2026 security incident. The investigation revealed that the attackers initially breached Vercel’s systems via Context.ai’s account—a startup—but their activities extended far beyond this initial intrusion. Threat intelligence indicates that the attackers distributed malware to steal Vercel account credentials and API keys from other service providers, then used those keys to rapidly and extensively enumerate non-sensitive environment variables. To trace the root cause, Vercel has processed nearly 1 petabyte of network and API logs. Vercel is collaborating with industry partners—including Microsoft, AWS, and Wiz—to respond jointly and has proactively notified other potentially affected parties, urging them to rotate credentials and adopt security best practices.
BNB Agent Studio is Now Live on BNB Chain Mainnet
BNB Chain has announced the official mainnet launch of its AI Agent development platform, BNB Agent Studio.Developers can now use a single prompt in AI coding tools like Cursor and Claude Code to complete Agent wallet creation, on-chain identity registration (ERC-8004), and deployment, without needing to separately set up wallets, identities, payments, custody, or LLM integration.Once deployed, Agents can use the x402 protocol to automatically deduct fees from users' pre-funded wallets to cover LLM usage, and they can be discovered and invoked by other Agents via the ERC-8183 task interface. The entire process runs on the AWS Bedrock AgentCore.The platform is also launching a limited-time free trial, where users can experience the full deployment process on the BSC testnet using their GitHub account.
Coinbase Review of May Outage: AWS Cascading Failures Exposed Architectural Risks
Coinbase has released a post-mortem report on the large-scale service outage that occurred on May 7, 2026. The disruption lasted approximately 8 hours, with full recovery taking about 12 hours. During this period, trading, deposits, withdrawals, and most core services were either unavailable or severely degraded.Coinbase stated that the outage was triggered by the simultaneous failure of multiple chillers in the cooling system of a data center within an Availability Zone (use1-az4) of the AWS us-east-1 region. This led to thermal shutdown protection for server racks, causing EC2 instances and EBS volumes to go offline, and impacting multiple internet services.During the recovery process, Coinbase's trading matching engine lost quorum after its cluster architecture, deployed within a single AWS data center, lost the majority of its nodes. Emergency code adjustments and the formation of new node groups were required to restore operations, with market trading being gradually restarted throughout the recovery.Additionally, the AWS Managed Streaming for Kafka (MSK) service experienced a control plane failure, preventing automatic re-election of partition leaders. This further blocked order books, fee calculations, and parts of the settlement and data streaming systems, expanding the overall impact. After Coinbase and the AWS engineering teams collaborated on manual partition migrations, the system gradually returned to normal.Coinbase indicated that this incident exposed deficiencies in its cross-Availability Zone automatic failover capabilities and the disaster recovery of managed middleware. The company will upgrade its cross-region hot standby architecture, strengthen regular disaster recovery drills, migrate its Kafka systems from a dual-AZ to a triple-AZ deployment, and work jointly with AWS to address root causes and implement improvements.
SlowMist Discloses Cross-Registry Supply Chain Attack Targeting Crypto and AI Developers
According to on-chain analyst PeckShield (@PeckShieldAlert), SlowMist’s threat intelligence system MistEye has detected a cross-registry supply chain attack targeting developers. Malicious packages have spread across three major registries—npm, PyPI, and Crates.io—comprising over 34 malicious packages and more than 384 related versions. The attack targets developer communities in cryptocurrency, DeFi, Solana, Sui/Move, and AI. It may lead to the theft of cryptocurrency wallets, SSH keys, cloud credentials, GitHub/AWS tokens, browser data, and other sensitive developer information. Some malicious payloads also attempt persistence via mechanisms including `.cursorrules`, `CLAUDE.md`, Git hooks, cron, systemd, and SSH. SlowMist recommends immediately removing affected packages, isolating compromised systems, rotating exposed credentials, rebuilding CI environments and developer machines from clean images, and conducting comprehensive reviews of GitHub, cloud, SSH, and wallet-related activities.
AWS partners with Coinbase and Stripe to launch AI agent stablecoin payment functionality, enabling microtransactions using USDC
According to The Block, Amazon Web Services (AWS) has partnered with Coinbase and Stripe to launch Amazon Bedrock AgentCore Payments, enabling AI agents to conduct transactions using stablecoins. Coinbase stated that developers can build “agent-based payment” solutions using the x402 protocol, allowing AI agents to make micro-payments in USDC. This feature enables AI agents to instantly pay for web content, APIs, MCP servers, and other agents. AWS noted that developers can choose between Coinbase and Stripe wallets and fund those wallets using either stablecoins or fiat currency.
PrimePiper Launches Prime Broker Dedicated to AI Agents, Enabling Multi-Exchange Connectivity, Cross-Venue Reconciliation, and Risk Control & Audit Capabilities
PrimePiper has launched an enterprise-grade prime broker platform for AI agents, designed to address challenges including fragmented account management, inadequate risk control, inability to reconcile across venues, and insufficient compliance auditing in AI-driven automated trading. According to the company, its infrastructure supports unified connectivity to multiple trading venues—including Hyperliquid, OKX, Tiger Brokers, and Interactive Brokers (IBKR). For risk control, PrimePiper offers enterprise-grade API key management, spending limits, and circuit-breaker mechanisms to constrain AI agent trading behavior. At the execution layer, it enables automated strategy execution via SDK or the Model Context Protocol (MCP). For compliance and auditing, it provides audit-grade reporting capabilities tailored for funds and traders. PrimePiper has been selected for the latest cohort of Founders Inc’s accelerator program; its product is currently in the Alpha stage. Team members hail from Galois Capital, Kraken, DRW, and AWS.
Claude Code exposed to high-severity security risk: Malicious configuration files could silently execute commands
Cos, founder of SlowMist, shared a tweet on X platform regarding potential poisoning attack risks in Claude Code and published a detailed analysis of poisoning attacks targeting Grok Build CLI and Claude Code CLI. The analysis pointed out that the security mechanisms of Grok Build CLI are not unified, with different code paths having different trust assumptions, and the gaps between them serve as channels for attackers.Attackers may exploit malicious project configuration files to execute arbitrary commands without the user's knowledge, thereby stealing API keys, cloud credentials, or gaining control over local devices. Researchers constructed a test environment and found that on Mac systems, if Claude Code is compromised, executing a specific test command could trigger the launch of a local calculator, demonstrating a potential command execution risk. If the attack succeeds, attackers could further steal API keys from AI services such as Claude and OpenAI, causing account cost losses; obtain credentials for cloud services like AWS, Alibaba Cloud, and Tencent Cloud to access servers and data; tamper with code repositories to implant backdoors; and leverage local devices as a springboard to attack internal enterprise networks. It is reported that the relevant vulnerability has existed for one year.
Claude Code Has Potential Poisoning Attack Risk: Malicious Configuration Files Could Enable Silent Code Execution
SlowMist founder Cosine retweeted a post about the potential poisoning attack risks of Claude Code, pointing out that attackers could execute arbitrary commands without the user's knowledge through malicious project configuration files, thereby stealing API keys, cloud credentials, or controlling local devices. Researchers constructed a test environment and found that in Mac systems, if Claude Code is affected, executing specific test commands can trigger the local calculator to launch, proving the existence of potential command execution risks. If the attack succeeds, attackers may further steal API Keys for AI services such as Claude and OpenAI, causing account fee losses; obtain cloud service credentials for AWS, Alibaba Cloud, Tencent Cloud, etc., to access servers and data; tamper with code repositories to implant backdoors; and use local devices as a springboard to attack enterprise internal networks.
Cambridge Study: US Hosts ~31% of Ethereum Nodes; Over One-Third Nodes Offline Could Impact Finalization
Odaily Odaily A new study by the Cambridge Centre for Alternative Finance reveals that approximately 31% of Ethereum node activity is located in the United States, with another 39% distributed across EU countries excluding the UK, indicating that the geographic distribution of Ethereum nodes remains relatively concentrated in Western nations.Lead researcher Alexander Neumuller stated that while node distribution is not currently concentrated in any single country, it is heavily reliant on a few major cloud service providers, including Hetzner, Amazon AWS, and OVH. Notably, the Ethereum network does not require half of its validators to fail for problems to arise. If more than one-third of validators go offline simultaneously, the network may be unable to finalize block checkpoints (finalization). Neumuller pointed out that nodes and validators do not have a one-to-one correspondence; a single node may run multiple validators. Therefore, it is currently impossible to precisely assess the actual impact on the validator network from the failure of a specific node or service provider.Furthermore, the study reassessed the energy consumption of Ethereum following The Merge. Data shows that Ethereum's current annual energy consumption is approximately 7.9 GWh, equivalent to a continuous power draw of about 1 MW. This represents only about 0.02% of pre-merge levels, a reduction of approximately 99.98%. Currently, over 56% of the energy used by the Ethereum network comes from sustainable sources, exceeding the global average.The study also noted that client software diversity is another potential risk. If a dominant client software has a vulnerability, it could affect a large number of network participants. The report was published by the Cambridge Centre for Alternative Finance and supported by the Ethereum Foundation. (The)
Anthropic Model Safety Controversy Escalates, Amazon Accused of Being the "Hidden Force" Triggering Regulatory Intervention
the U.S. government's export controls and access restrictions on Anthropic's models, Fable 5 / Mythos 5, were partly driven by Amazon's cybersecurity research and AWS CEO Andy Jassy's communications with the White House.It is understood that research submitted by Amazon indicated that through a series of prompt tests, researchers could induce Fable 5 to output sensitive information potentially usable for cyberattacks, raising security concerns. Subsequently, Andy Jassy reported these findings to the U.S. government level, prompting the White House to implement further restrictions, including banning foreign users from accessing the model.Meanwhile, former U.S. Commerce Department official Kate Koren revealed that the White House's existing policy stance towards Anthropic may have also influenced this decision. This is because Anthropic has disagreements with the White House over the boundaries of AI safety, including refusing to use its models for mass surveillance or lethal autonomous weapons systems. Although the two sides had eased tensions and expanded cooperation earlier this year, this incident could reignite strained relations between them. (The Wall Street Journal)
SlowMist Discloses Cross-Registry Supply Chain Attack Targeting Crypto and AI Developers
According to on-chain analyst PeckShield (@PeckShieldAlert), SlowMist’s threat intelligence system MistEye has detected a cross-registry supply chain attack targeting developers. Malicious packages have spread across three major registries—npm, PyPI, and Crates.io—comprising over 34 malicious packages and more than 384 related versions. The attack targets developer communities in cryptocurrency, DeFi, Solana, Sui/Move, and AI. It may lead to the theft of cryptocurrency wallets, SSH keys, cloud credentials, GitHub/AWS tokens, browser data, and other sensitive developer information. Some malicious payloads also attempt persistence via mechanisms including `.cursorrules`, `CLAUDE.md`, Git hooks, cron, systemd, and SSH. SlowMist recommends immediately removing affected packages, isolating compromised systems, rotating exposed credentials, rebuilding CI environments and developer machines from clean images, and conducting comprehensive reviews of GitHub, cloud, SSH, and wallet-related activities.
TrapDoor Cryptocurrency Theft Campaign Spans npm, PyPI, and Crates.io, Involving Over 34 Malicious Packages
According to research by security firm Socket Security, a cryptocurrency-stealing supply chain attack dubbed “TrapDoor” spans npm, PyPI, and Crates.io, involving over 34 malicious packages and 384 related versions and artifacts. The attack targets cryptocurrency, DeFi, Solana, Sui, Move, and AI developers. Attack samples can steal sensitive information including SSH keys, wallet data, AWS credentials, GitHub tokens, browser data, and environment variables. Specifically, npm packages execute the shared payload `trap-core.js` via the `postinstall` hook; PyPI packages execute remote JavaScript upon import; and Crates.io packages steal local keystores via `build.rs`. Socket has flagged all related packages as malicious and reported them to the respective package registries.
Amazon Q2 Earnings Beat Expectations, AWS Growth Hits 18-Quarter High, Full-Year Capital Expenditure Raised to $220 Billion
According to Fortune magazine, Amazon released its Q2 2026 earnings report, showing strong overall performance, with after-hours stock price rising over 9%. In terms of core data, AWS cloud business revenue reached $42.2 billion, a year-over-year increase of 37%, marking the fastest growth in nearly 18 quarters; operating income was $16.6 billion, up 64% year-over-year, with profit margin rising to 39.4%; AWS customer contract backlog reached $496 billion. The company's overall net sales increased by 20% year-over-year to $200.6 billion, with operating income of $27.5 billion. Regarding outlook, CEO Andy Jassy stated that Amazon's 2026 capital expenditure expectation was raised from $200 billion to $220 billion, mainly driven by rising memory costs, but even so, capacity is expected to remain insufficient to meet all demand in the next two years. Jassy also pointed out that 85% of global IT spending is still on-premises, the cloud migration wave is far from over, and AWS is winning the "largest share" of enterprise migration plans.
Moonshot AI to Open Source 2.8-Trillion-Parameter Kimi K3 Weights, Chinese Open-Weight Model Token Share Rises to 68%
Chinese AI startup Moonshot AI will release the model weights of its high-performance model, Kimi K3. Developers can download the model, modify it for various purposes, and run it in their own data centers or cloud environments.Kimi K3 boasts 2.8 trillion parameters and a 1 million token context window, enabling it to process large-scale documents and codebases in a single pass. Moonshot AI plans to later publish a technical report detailing the model's architecture, training methodology, and performance evaluation results.Following the release of Kimi K3, Moonshot AI's daily revenue is reported to have increased by at least 6 times. The company is reportedly advancing a new round of fundraising at a $50 billion valuation and is considering a Hong Kong listing as early as this year.According to Bloomberg Intelligence, following the release of Kimi K3 and Z.AI's GLM-5.2, the share of Chinese open-weight models in overall token usage has risen to 68%. Services like AWS Bedrock, Microsoft Azure Foundry, and Google Vertex AI currently do not offer Chinese open-weight models such as Kimi K3 and GLM-5.2.
Claude Code exposed to high-severity security risk: Malicious configuration files could silently execute commands
Cos, founder of SlowMist, shared a tweet on X platform regarding potential poisoning attack risks in Claude Code and published a detailed analysis of poisoning attacks targeting Grok Build CLI and Claude Code CLI. The analysis pointed out that the security mechanisms of Grok Build CLI are not unified, with different code paths having different trust assumptions, and the gaps between them serve as channels for attackers.Attackers may exploit malicious project configuration files to execute arbitrary commands without the user's knowledge, thereby stealing API keys, cloud credentials, or gaining control over local devices. Researchers constructed a test environment and found that on Mac systems, if Claude Code is compromised, executing a specific test command could trigger the launch of a local calculator, demonstrating a potential command execution risk. If the attack succeeds, attackers could further steal API keys from AI services such as Claude and OpenAI, causing account cost losses; obtain credentials for cloud services like AWS, Alibaba Cloud, and Tencent Cloud to access servers and data; tamper with code repositories to implant backdoors; and leverage local devices as a springboard to attack internal enterprise networks. It is reported that the relevant vulnerability has existed for one year.
Cambridge Study: US Hosts ~31% of Ethereum Nodes; Over One-Third Nodes Offline Could Impact Finalization
Odaily Odaily A new study by the Cambridge Centre for Alternative Finance reveals that approximately 31% of Ethereum node activity is located in the United States, with another 39% distributed across EU countries excluding the UK, indicating that the geographic distribution of Ethereum nodes remains relatively concentrated in Western nations.Lead researcher Alexander Neumuller stated that while node distribution is not currently concentrated in any single country, it is heavily reliant on a few major cloud service providers, including Hetzner, Amazon AWS, and OVH. Notably, the Ethereum network does not require half of its validators to fail for problems to arise. If more than one-third of validators go offline simultaneously, the network may be unable to finalize block checkpoints (finalization). Neumuller pointed out that nodes and validators do not have a one-to-one correspondence; a single node may run multiple validators. Therefore, it is currently impossible to precisely assess the actual impact on the validator network from the failure of a specific node or service provider.Furthermore, the study reassessed the energy consumption of Ethereum following The Merge. Data shows that Ethereum's current annual energy consumption is approximately 7.9 GWh, equivalent to a continuous power draw of about 1 MW. This represents only about 0.02% of pre-merge levels, a reduction of approximately 99.98%. Currently, over 56% of the energy used by the Ethereum network comes from sustainable sources, exceeding the global average.The study also noted that client software diversity is another potential risk. If a dominant client software has a vulnerability, it could affect a large number of network participants. The report was published by the Cambridge Centre for Alternative Finance and supported by the Ethereum Foundation. (The)
Cobo becomes a partner of Hong Kong Cyberport OPC Hub
: The inaugural Web4.0 and Agent Innovation Summit, along with the launch ceremony of OPC Hub, was held at Hong Kong Cyberport. Cobo was officially announced as a partner of OPC Hub, listed alongside Alibaba Cloud, AWS, NVIDIA, Dell, Lenovo, and BytePlus. Cobo will provide blockchain infrastructure support for entrepreneurs within the ecosystem. Its product capabilities cover Agentic Wallet and stablecoin payments (Cobo Payments), enabling developers to build agent-based applications with on-chain payment capabilities.
Cambridge Research: 31% of Ethereum Node Activity Located in the US, One-Third of Nodes Offline Can Block Network Finality
According to The Block, the Cambridge Centre for Alternative Finance (CCAF)'s newly released report "Ethereum After the Merge" shows that approximately 31% of Ethereum node activity is located in the United States, with 39% distributed across the European Union (excluding the UK), presenting an overall Western-centric centralization pattern. The report points out potential centralization risks in the Ethereum network—nodes are highly concentrated among three major hosting providers: Hetzner, AWS, and OVH. Once more than one-third of validators go offline simultaneously, network checkpoints will stop finalization (Finalization). Additionally, the report recalculated Ethereum's energy consumption; annual electricity consumption after the Merge is approximately 7.9 GWh, a decrease of approximately 99.98% compared to before the Merge, with sustainable energy accounting for over 56%, and the cost required to offset its annual carbon emissions is only about $33,500 to $73,800.
Related news
Cloud computing's big three AI infrastructure capex reaches up to $220 billion, with Q2 cloud revenue all beating expectations
Odaily News Amazon, Microsoft, and Google Cloud all reported Q2 cloud revenue above market expectations. Amazon disclosed that AWS Q2 revenue grew 37% year-over-year to $42.23 billion, the fastest growth rate since 2021, with Amazon's overall revenue surpassing $200.6 billion for the first time and operating profit reaching $16.6 billion.Microsoft's Q4 fiscal 2026 revenue grew 18% year-over-year to $90.007 billion, with Azure revenue growth accelerating from 40% in the previous quarter to 43%, and full-year revenue surpassing $100 billion for the first time. Google's parent company Alphabet disclosed that Q2 Google Cloud revenue grew 82% year-over-year to $24.8 billion, with contract backlog increasing to $514 billion.Amazon raised its capital expenditure guidance for this year from approximately $200 billion to $220 billion, primarily for data centers, servers, network equipment, and AI semiconductors. Alphabet raised its capital expenditure guidance for this year to up to $205 billion, while Microsoft's quarterly capital expenditure was $41 billion, up 69% year-over-year.Alphabet CEO Sundar Pichai stated that demand for AI infrastructure and AI solutions is driving cloud business growth, with 90% of Fortune 100 companies using Gemini Enterprise. Amazon CEO Andy Jassy said that even with the $220 billion investment, it will still not be enough to meet all customer AI demand this year, and this situation will continue into next year.
Amazon Q2 Earnings Beat Expectations, AWS Growth Hits 18-Quarter High, Full-Year Capital Expenditure Raised to $220 Billion
According to Fortune magazine, Amazon released its Q2 2026 earnings report, showing strong overall performance, with after-hours stock price rising over 9%. In terms of core data, AWS cloud business revenue reached $42.2 billion, a year-over-year increase of 37%, marking the fastest growth in nearly 18 quarters; operating income was $16.6 billion, up 64% year-over-year, with profit margin rising to 39.4%; AWS customer contract backlog reached $496 billion. The company's overall net sales increased by 20% year-over-year to $200.6 billion, with operating income of $27.5 billion. Regarding outlook, CEO Andy Jassy stated that Amazon's 2026 capital expenditure expectation was raised from $200 billion to $220 billion, mainly driven by rising memory costs, but even so, capacity is expected to remain insufficient to meet all demand in the next two years. Jassy also pointed out that 85% of global IT spending is still on-premises, the cloud migration wave is far from over, and AWS is winning the "largest share" of enterprise migration plans.
Amazon will announce its second-quarter earnings after the US stock market closes, with AWS cloud business and capital expenditure becoming market focuses
Amazon will announce its second-quarter 2026 earnings after the US stock market closes. According to LSEG data, the market expects the company's revenue to be $196.47 billion, with earnings per share of $1.82. Among this, AWS cloud business revenue is expected to reach $40.54 billion, and advertising business revenue is estimated at $19.43 billion.The market is also closely watching Amazon's AI infrastructure investment progress. The company previously maintained its 2026 capital expenditure guidance of approximately $200 billion, but after Alphabet raised its full-year capital expenditure expectations, multiple institutions anticipate that Amazon may also increase its full-year capital expenditure target. Morgan Stanley estimates that Amazon's capital expenditure will reach $218 billion this year, and is optimistic about AWS maintaining long-term growth driven by collaborations with OpenAI, Anthropic, and others.
Moonshot AI to Open Source 2.8-Trillion-Parameter Kimi K3 Weights, Chinese Open-Weight Model Token Share Rises to 68%
Chinese AI startup Moonshot AI will release the model weights of its high-performance model, Kimi K3. Developers can download the model, modify it for various purposes, and run it in their own data centers or cloud environments.Kimi K3 boasts 2.8 trillion parameters and a 1 million token context window, enabling it to process large-scale documents and codebases in a single pass. Moonshot AI plans to later publish a technical report detailing the model's architecture, training methodology, and performance evaluation results.Following the release of Kimi K3, Moonshot AI's daily revenue is reported to have increased by at least 6 times. The company is reportedly advancing a new round of fundraising at a $50 billion valuation and is considering a Hong Kong listing as early as this year.According to Bloomberg Intelligence, following the release of Kimi K3 and Z.AI's GLM-5.2, the share of Chinese open-weight models in overall token usage has risen to 68%. Services like AWS Bedrock, Microsoft Azure Foundry, and Google Vertex AI currently do not offer Chinese open-weight models such as Kimi K3 and GLM-5.2.
São Paulo Sues World and Amazon AWS for Approximately $47 Million
: On Monday, the São Paulo Consumer Protection Office filed a lawsuit against Tools for Humanity, the company behind World, and its hosting service provider Amazon AWS, accusing them of abusive practices in the collection of consumer biometric data in São Paulo. The lawsuit estimates that over 400,000 people participated in World's promotions in São Paulo. It demands the preservation of all data and metadata related to the data collection and the suspension of any payments or benefits associated with biometric data collection before the assessment is completed. The lawsuit seeks a ruling that the related activities constitute abuse and demands payment of 240 million Brazilian reais, approximately $47 million, to compensate for individual consumer losses. The prosecution alleges that World continued to issue crypto rewards through in-app transactions after the National Data Protection Authority ordered it to stop in February 2025. A report from the Iris Parliamentary Committee of Inquiry stated that World concentrated its promotions in peripheral and high-traffic areas to attract people facing socioeconomic issues to submit biometric data in exchange for crypto rewards. The prosecution also claims that consumers were not informed about the economic purpose of the project or the risks associated with processing and storing data on AWS servers.
亚马逊正大力重构 Alexa+ 的 AI 架构，减少对 Anthropic 模型依赖
According to Business Insider, Amazon is aggressively restructuring the AI architecture of Alexa+, routing more requests to in-house models and reducing calls to Anthropic Claude models through caching mechanisms, while optimizing GPU utilization to cut operating costs. Internal documents show that Alexa+'s AWS cloud costs are projected to reach approximately $1.7 billion in 2026, nearly triple the previous year, and exceeding target costs by about 60%. Even with approximately $450 million in potential savings identified, internal assessments still indicate that the business will struggle to meet financial targets. Amazon CEO Andy Jassy has publicly emphasized the urgency of reducing AI inference costs, and this architectural adjustment is the concrete implementation of this strategic direction.