News linked to both this project and an event.
Odaily News, according to Bitcoin News monitoring, new research released by @PraveenPerera shows that the Coldcard attacker appears to have first identified vulnerable addresses, then sorted them by BTC balance, and began transferring funds in batches starting from the addresses with the highest holdings. The actual transfer software used was relatively crude. One address had 225 spendable UTXOs, and the attacker happened to extract the most recent 200, leaving the earliest 25, including one UTXO worth 0.16 BTC. This is fully consistent with the 200-record limit that a blockchain API investigated by the researchers returns by default, suggesting the attacker may have failed to load the next page of data. The software even spent a 294-satoshi UTXO, reportedly increasing transaction fees by approximately 2,040 satoshis, with the spending amount clearly exceeding the UTXO's own value. Based on this, the study's author believes the tool's builder may have a stronger understanding of account balance systems than of Bitcoin's UTXO model. Although the attacker appears to have obtained victims' full seeds, at least 75 BTC remain in other addresses derived from the same seeds. The biggest mystery at present is that 132.95 BTC still remain across the 153 compromised addresses, and researchers have been unable to reproduce the seeds behind these addresses, so they cannot rule out the possibility that the attacker obtained undisclosed private device data or candidate data.
Odaily News: Cryptocurrency exchange BitMEX has announced that it will fully shut down its platform at 4:00 (UTC) on September 23, 2026. BitMEX CEO Peter Wilkinson stated that the exchange has been operating for over 11 years and has never lost customer funds due to hacker attacks during that period. Peter Wilkinson noted that BitMEX failed to keep pace with its competitors, having long focused on derivatives business while failing to offer spot trading, yield products, custody, and stablecoin trading services in a timely manner. The exchange also entered the USDT market relatively late, in 2021. He stated that BitMEX once supported its founding team in pioneering perpetual swaps, a product that has since become one of the highest-trading-volume financial instruments in the crypto industry and is now widely used for leveraged cryptocurrency trading. (Bitcoin.com News)
Odaily News: Bitcoin News posted on X platform that Trezor stated its customer data was exposed due to a security breach at logistics provider ShipMonk. Customers who received orders within 90 days before August 8 in the United States, United Kingdom, Sweden, Colombia, Brazil, Italy, or Portugal may be affected. The exposed data includes full names, shipping addresses, phone numbers, email addresses, and order numbers. Trezor stated that its systems were not compromised and devices remain secure, but reminded affected customers to beware of sophisticated phishing attacks leveraging the leaked information.
据 Ai 姨 监测，Lazarus Group 于约 2 小时前将 262.2 枚比特币（BTC） 转移至新地址，价值约 1664 万美元，相关转移或用于后续资金清洗。当前该组织在链上仍持有超过 7306 万美元 的资产，主要包括 比特币（BTC）、泰达币（USDT） 和 以太坊（ETH）。
Bitwise Chief Investment Officer Matt Hougan stated in an interview with Bloomberg that the Bitcoin price has not reacted significantly to negative news recently, such as the Coldcard security incident, Strategy sell-off, and the CLARITY Act's progress falling short of expectations, which may indicate that Bitcoin has approached or reached the bottom of this bear market.
According to The Defiant, Boltz announced that its original founders have all exited, and an anonymous team of "senior Bitcoin figures" will take over the suspended Bitcoin Swap service. The new team will provide funding and engineering support to fix vulnerabilities and push for the service to resume as soon as possible.
Odaily News: After a firmware vulnerability in Coldcard hardware wallets was exploited, approximately 2,100 Bitcoin were stolen, with losses nearing $130 million. On-chain data shows that in the days surrounding the incident, wallets held by long-term holders transferred out approximately 233,000 Bitcoin, valued at around $15 billion. Casa CEO Nick Neuman stated that some of the transferred funds came from Coldcard users migrating to multi-signature wallets, with Ledger and Trezor users also taking similar measures after the event. During the same period, approximately 22,000 Bitcoin were transferred into exchanges. Coinkite has advised users who generated seed phrases using firmware versions 4.0.1 through 4.1.9 to treat their wallets as compromised and immediately migrate to new seed phrases. These versions cover the period from March 2021 to July 2026. (Decrypt)
Odaily News: Bitcoin News posted on X platform that Xapo Bank users have reported the app now requires location data before allowing transactions. According to reports, one user was told they must share GPS coordinates to access their funds. Xapo Bank stated it will cross-check location information with other data to confirm that the account holder controls the account. @ToneVays warned that location requirements could become standard for regulated payment apps; Casa CEO @Nneuman said the measure may be aimed at countering large-scale social engineering attacks rather than traditional KYC.
据 Cointelegraph 报道，比特币政策研究所（BPI）联合 Anchorage Digital、BitGo、Bitwise、Blockstream、Kraken、Ledger、MARA、Trezor 等多家加密机构，发布公开信敦促各大前沿 AI 实验室为比特币及开源软件开发者建立或扩展可信访问计划。 信中指出，Bitcoin Core 等开源维护者目前缺乏对 AI 实验室网络安全程序的访问渠道，被迫依赖能力较弱的开源模型，而比特币网络当前保护着逾 1 万亿美元资产，任何开源基础设施漏洞均可能危及用户毕生积蓄。BPI 同时披露，已收到多份报告显示包括潜在境外势力在内的复杂攻击者正借助先进 AI 能力持续发动攻击。
Odaily News: Kostas Chalkias, co-founder and chief cryptographer of Mysten Labs, the development company behind the Sui blockchain, stated that he has leased a dedicated factory at a secret location and plans to scale up production of quantum-safe hardware wallet cards for Sui. The project aims to keep the cost of a single quantum card key under $10, with NFC quantum signing expected to take 1 to 2 seconds. Chalkias noted that the project is being advanced in his personal time outside of work and may include funding to provide cards for users who cannot afford them. The initiative is partly driven by a recent incident involving Coldcard hardware wallets, though the vulnerability was not a quantum attack. Coldcard manufacturer Coinkite disclosed that a firmware vulnerability in Coldcard, traceable to a 2021 update, bypassed the hardware random number chip and generated keys using a predictable software process linked to device serial numbers. Attackers have been moving funds since July 30, with losses climbing to approximately 2,055 BTC, affecting over 7,700 addresses and nearing a value of $130 million. At the protocol level, Sui plans to integrate two quantum-resistant signature schemes approved by the U.S. National Institute of Standards and Technology (NIST), designed for everyday accounts and high-value Move vaults, respectively. Existing accounts can be rotated to quantum-safe keys based on their original recovery phrases, without needing to migrate to new wallets. (Bitcoin.com News)
Odaily News: Bitcoin News posted on X platform that a new technical analysis released by @KLoaec shows that some vulnerable COLDCARD Mk3 wallets may be generated from only approximately 4.5 million random number generator starting states, which can be searched in about 3 seconds on a single RTX 4090 GPU. Even accounting for additional uncertainty in each wallet's generation method, an attacker could complete the search in about 50 minutes on a single high-end GPU. More critically, this vulnerability could cause different devices to generate identical mnemonic phrases. Assuming 30,000 Mk3 devices, the analysis estimates that approximately 120 pairs of devices could generate the same random number stream. This collision estimate is theoretical but indicates that duplicate mnemonic generation across different devices may be possible.
Odaily News: Hardware wallet Coldcard has suffered a hack, with no confirmed total loss amount yet. Blockchain analytics platform CryptoQuant has confirmed losses of 1,432 BTC, while Galaxy Research places a high-confidence minimum estimate at 1,730 BTC. Other analyses suggest the scale of losses could be even higher. Research firm Galaxy Research stated that its earlier estimate of 1,816 BTC represents a potential figure, not a confirmed total. As of Tuesday, the firm's confirmed high-confidence minimum loss stands at 1,730 BTC, with over 450 BTC directly confirmed based on victim reports. Blockchain intelligence firm TRM Labs estimates that the attacker moved approximately 1,816 BTC from more than 5,200 addresses in four phases. CryptoQuant stated that its confirmed figures only include addresses publicly disclosed by victims and verified through on-chain patterns, meaning the tally could rise as more victims come forward with information. (Cointelegraph)
According to The Block, open-source Bitcoin payment processor BTCPay Server disclosed a critical security vulnerability being actively exploited last Friday and urgently requested users to upgrade to version 2.4.2. The vulnerability affects all versions prior to 2.4.2; attackers can use it to steal administrator macaroon authentication credentials of LND nodes, thereby fully controlling the connected Lightning Network wallets. Users such as Foundation and Citadel21 have confirmed that their Lightning node funds were drained, but BTCPay has not publicly disclosed the total amount stolen or the number of affected nodes. Currently, the official release version 2.4.2 has fixed this vulnerability, and on-chain hot wallets are not affected. The BTCPay Server Foundation has donated 0.21 BTC each to security researcher Craig Raw and Bitcoin Red Team to commend their responsible private disclosure of the vulnerability. Meanwhile, BTCPay supporters have promised to provide a bounty incentive of "10% of recovered funds," capped at 3 BTC.
According to Bitcoin.com, cybersecurity company Genians Security Center released an analysis report stating that the North Korean Reconnaissance General Bureau-affiliated hacker group Kimsuky is building and testing an AI-centric cyberattack tool suite. Researchers discovered traces of the deployment of three local AI platforms, Ollama, GPT4All, and Msty, in their infrastructure, as well as AI development framework components such as Microsoft Semantic Kernel and LLaMaSharp, indicating that the organization is systematically developing dedicated AI attack tools rather than just making temporary attempts. Since early 2026, Kimsuky has used high-quality documents created by generative AI for spear-phishing attacks targeting the virtual assets, financial investment, and game development sectors; AI-generated professional documents have significantly reduced the effectiveness of traditional phishing email identification. The attack vector consists of ZIP archives disguised as legitimate documents, containing malicious LNK files that can silently execute PowerShell commands in the background after being triggered.
Odaily News: Harry Yeh, founder and managing partner of Quantum Fintech Group, an investment firm focused on the Fanton ecosystem with over $2 billion in assets under management, was found dead on Friday local time in Paraguay. He fell from the 30th floor of the Jade Park tower in Asunción, a vertical drop of over 100 meters. When police arrived at the scene, they found Yeh completely naked and covered with a black bag; the door to his residence was open, and items inside were scattered. Police stated that the investigation is still in its preliminary stages, and the cause of the fall remains unclear. Building surveillance footage has been reviewed, and an autopsy and forensic examination have been scheduled. (Bitcoin.com News)
Odaily News: Part of hardware wallet manufacturer Coldcard's firmware had a random number generation vulnerability in 2021, causing some mnemonic phrases generated by the devices to carry predictable risks. The vulnerability was only discovered years later, and by then approximately 5,200 addresses and around 2,000 BTC had been stolen, with losses totaling about $130 million. Following the incident, some investors turned to Wall Street custody products. U.S. spot Bitcoin ETFs saw net inflows of approximately $626 million within days of the event. ETF analyst Eric Balchunas noted that security incidents like this could further drive capital flows into ETFs. The Bitcoin core community continues to uphold the principle of self-custody. Casa co-founder Jameson Lopp said recent events should not weaken user confidence in self-custody, as third-party custody carries risks as well. Early Bitcoin Core developer Peter Todd stated that self-custody has a better long-term security track record than centralized institutions. Michael Tanguma, co-founder of Bitcoin custody platform Onramp, said both approaches have flaws: concentrating large amounts of assets in a single institution creates a "honey pot," while hardware wallets face risks related to supply chains, firmware, and random number generation. Michael Tanguma proposed a "multi-institution custody" approach, in which multiple regulated institutions each hold keys through a multi-signature mechanism, and any transaction requires joint signing by multiple institutions to reduce the risk of single points of failure. Critics argue that while multi-institution custody improves security, it also introduces permissioned management, which conflicts with the decentralized ideals Bitcoin originally pursued. As Bitcoin enters pension funds, trusts, and institutional asset allocation, the industry is seeking custody solutions suitable for long-term wealth management. How to strike a balance among security, decentralization, and usability remains a challenge facing the Bitcoin ecosystem.
According to Cointelegraph, AnchorWatch CEO and Bitcoin Red Team founder Rob Hamilton stated that after integrating OpenAI Trust & Cyber capabilities into the Bitcoin Red Team's security research work, he faced access restrictions the next day and was forced to switch back to using Chinese open-source AI models to continue research. The Bitcoin Red Team has currently discovered 1,288 critical and high-risk vulnerabilities in the Bitcoin ecosystem, and research work significantly accelerated after the Coldcard hardware wallet was hacked (over $100 million in Bitcoin stolen). Hamilton commented on this: "Black-hat hackers face no restrictions, while white-hat researchers dedicated to reducing risk are excluded."
Odaily News: On August 5, the minority staff of the U.S. Senate Committee on Banking, Housing, and Urban Affairs stated that the July 22 version of the CLARITY Act fails to meet five minimum standards. The bill, numbered H.R. 3633, aims to divide digital asset regulatory authority between the U.S. Securities and Exchange Commission (SEC) and the U.S. Commodity Futures Trading Commission (CFTC). The analysis suggests that the bill's two-tier system could remove certain blockchain assets from SEC oversight, allowing issuing companies to self-certify exemptions from securities regulation. Healthy Markets and five labor organizations have raised concerns over pension protections and securities law loopholes, while minority staff also noted that investors' private right of action and state and tribal enforcement powers could be weakened. Minority staff stated that DeFi-related companies could be exempt from anti-illegal financing obligations even if they earn millions of dollars from platform transactions; some crypto mixers may circumvent U.S. sanctions by exploiting the "Tornado Cash loophole." The Independent Community Bankers of America (ICBA) and the Conference of State Bank Supervisors (CSBS) warned that stablecoin yields could drain deposits from community banks, and the Systemic Risk Council has flagged related banking activities as potential bailout risks. Minority staff noted that Donald Trump alone earned over $1.4 billion from crypto businesses in 2025, with related enforcement solely under the purview of his Attorney General, and that obligations would terminate upon his departure from office. Elizabeth Warren and Richard Blumenthal, citing $3.8 billion in investor losses, have separately called on the SEC to investigate Trump memecoin. The Senate is scheduled to hold a cloture vote on September 15 on the motion to proceed, with the bill needing 60 votes to advance. (Bitcoin.com News)
Odaily News – A body of a Chinese national was discovered outside the Jade Park high-rise apartment complex in the Trinidad district of Asunción, Paraguay. Preliminary identification suggests it is Harry Chun Tak Yeh, founder and managing partner of Quantum Fintech Group. Police stated that he is suspected to have fallen from the 30th floor of the building, and his body was found naked and covered with a black plastic bag. Investigators found the door of his suspected residence on the 30th floor wide open, with the interior in severe disarray, and confirmed that he also owned another apartment on the 27th floor of the same building. Criminal forensic technicians have collected evidence from the exterior of the building and both apartments, and relevant physical evidence has been handed over to the prosecutor's office. The prosecutor's office is currently investigating multiple possibilities in parallel, including accident, suspected suicide, and homicide. The judicial authorities will determine the specific cause and circumstances of death through an autopsy.It is reported that Chinese-American crypto investor Harry Yeh entered the Bitcoin market in 2013, when BTC was trading at $60. He launched his first fund with $250,000, and his investment network claims to manage over $2.4 billion in assets, with close ties to Fantom, Tomb Finance, Lif3, ZooCoin, L3 USD, and L3 Reserve. (Latribuna)
Odaily Odaily News: Bitcoin Red Team member @Rob1Ham stated that OpenAI has blocked him from continuing security analysis of the Bitcoin codebase, after he had responsibly disclosed real vulnerabilities found within it. Rob1Ham said he had previously completed identity verification and onboarding processes related to OpenAI's cybersecurity capabilities, but is currently unable to continue investigating whether the fixes are sufficient or whether other vulnerabilities still exist. He stated that he will now resume Bitcoin security research using an open-source Chinese AI model. Rob1Ham commented: "Black hat hackers won't attack these issues, white hat hackers will." He also added: "For those who don't follow the rules and engage in harmful behavior, intelligence is unrestricted, while those committed to reducing harm are being excluded." (Bitcoin News)