News linked to both this project and an event.
Syscoin has released a security incident report detailing the UTXO-to-NEVM bridge vulnerability. According to the report, this incident resulted in the unauthorized release of approximately 5 billion SYS tokens on the UTXO side. The affected funds have since been returned to the official recovery address and permanently destroyed using the standard OP_RETURN mechanism, rendering them unusable by the protocol. As a result, the on-chain SYS supply has reverted to its expected value. The bridge functionality remains suspended while the team completes its final review and remediation efforts.
Humanity announced the independent investigation results from Quantstamp, stating that the security incident—exceeding $31 million—originated from a phishing attack that led to the leakage of private keys. The attackers subsequently gained control of the smart contract and dumped tokens; the tools and tactics employed exhibit characteristics commonly associated with North Korean hacker groups.
According to Backpack’s official tweet, Backpack Securities announced on June 11 that the $SPCX token officially launched on Solana via SunriseDeFi following SpaceX’s Nasdaq listing. Users can trade stocks on the Backpack platform and freely transfer assets between traditional brokerages and Solana-based DeFi wallets through deposit and withdrawal operations.
Humility Protocol released a security incident update on the X platform, stating that its H token suffered a coordinated attack on the Ethereum and BSC chains yesterday, with confirmed losses exceeding $36 million in stolen and dumped assets.Preliminary investigations indicate the incident originated from a compromised employee computer, which led to the leakage of private keys for the multi-signature wallet controlling the Hyperlane Bridge ProxyAdmin. Specifically, the attacker obtained 3 out of 6 private keys of the Gnosis Safe wallet on the Ethereum chain, transferred ownership of the ProxyAdmin to a wallet under their control, upgraded the bridge contract to a malicious implementation, and subsequently transferred approximately 141.2 million H tokens in a single transaction.Simultaneously, the attacker also gained control of 3 out of 5 private keys of the Safe wallet on the BSC chain, took over the ProxyAdmin using the same method, deployed a malicious contract with unlimited minting functionality, and minted 200 million H tokens in two separate transactions to their own wallet.Humility stated that it has suspended all deposit and withdrawal operations on the affected bridge services and is collaborating with partners such as exchanges to mitigate losses. Meanwhile, it is cooperating with the police investigation and attempting to recover part of the stolen funds.
Syscoin released a preliminary post-mortem of the cross-chain bridge incident, stating that due to a verification issue in the bridging process, the attacker exploited an abnormal transaction proof validation to generate approximately 5 billion SYS tokens abnormally on the UTXO side via the affected bridging path.
Cryptocurrency exchange Backpack announced the launch of Backpack Securities, enabling investors to buy, hold, and sell real stocks backed by regulated U.S. securities infrastructure—entitling them to dividends, corporate actions, and rights under systems such as ACATS and DTCC. Additionally, positions can be converted into tokenized securities freely transferable and tradable 24/7 on public blockchains like Solana. Orders are routed directly into U.S. equity market liquidity pools, with execution prices reflecting real-time market prices.
Blockaid disclosed on X that the Alephium TokenBridge Ethereum cross-chain bridge was attacked. The attacker compromised three out of four Guardian private keys, forged a Verified Action Approval (VAA) message, and executed the attack within approximately seven minutes, stealing roughly $815,000 worth of assets. During the attack, the attacker minted 13.76 million Wrapped ALPH tokens out of thin air—exceeding the pre-attack circulating supply by over 100%—and simultaneously unlocked and withdrew assets including USDT, USDC, WBTC, and WETH from the custody pool. As of now, the attacker’s address still holds approximately $815,000 in stolen assets and 13.76 million uncollateralized Wrapped ALPH tokens; the largest anomalous transaction involved the out-of-thin-air minting of 13.76 million Wrapped ALPH tokens.
According to the South China Morning Post, Hong Kong’s Financial Secretary and Secretary for Financial Services and the Treasury, Christopher Hui, stated that gold can serve as a potential bridge between traditional finance and new finance. He emphasized that Hong Kong needs to provide more development opportunities for the digital asset market to support its sustainable growth. He also noted that, given the “convergence” trend between traditional and innovative finance, Hong Kong has opted not to establish a separate digital asset regulatory authority. Hui pointed out that both gold ETFs and blockchain-based tokenized gold products are already available in the market. Earlier, HSBC and Hang Seng Investment launched Hong Kong’s first tokenized, non-listed Hang Seng Gold ETF product on HashKey Exchange in April.
Ondo Finance has officially disclosed that Ondo now supports bridging its tokenized stocks and ETFs (such as SPYon, NVDAon, TSLAon, etc.) from Ethereum and BNB Chain to Hyperliquid’s HyperEVM via the Ondo Bridge. This integration supports 35 types of tokenized assets, which can be combined with Hyperliquid’s perpetual contract markets for strategies such as basis trading, funding rate arbitrage, and neutral hedging. The prices of Ondo’s tokenized assets are pegged to quotes from traditional markets like the NYSE and Nasdaq, aiming to preserve off-chain market liquidity. Since its launch in September 2025, Ondo Global Markets has accumulated a total TVL of approximately $970 million, with a trading volume of nearly $18 billion.
According to GlobeNewswire, Applied Digital—a Bitcoin mining hosting and cloud services company—announced a $300 million senior secured bridge financing facility led by Goldman Sachs to advance the construction of its AI data center projects. The financing is secured against project assets, is repayable at any time without penalty, and the company plans to pursue additional long-term financing in the future to support the development and construction of its AI data centers.
According to Cointelegraph, U.S. law firm Gerstein Harrow LLP has filed an application with the U.S. District Court for the Southern District of New York seeking a temporary restraining order and three writs of execution to prevent the Arbitrum DAO from transferring 30,766 ETH (valued at approximately $73 million) frozen following the Kelp vulnerability. The firm argues that its clients obtained default judgments against North Korea in U.S. courts in 2010, 2015, and 2016, entitling them to roughly $877 million in compensation—and contends that the stolen ETH constitutes North Korean-linked assets that should be used to satisfy those judgments. Kelp DAO suffered a $292 million hack on April 18; the attacker was identified as TraderTraitor, a subgroup of the North Korean state-sponsored hacking group Lazarus Group. Aave Labs previously proposed unfreezing the seized funds and transferring them into the “DeFi United” fund to compensate rsETH holders—but this legal action by Gerstein Harrow may significantly delay compensation for victims. Members of the Arbitrum DAO community have criticized the move, arguing it shifts the burden of North Korea’s debts onto another set of victims, thereby exacerbating the original harm. Gerstein Harrow had previously pursued litigation related to the 2023 Heco Bridge hack involving Teth
Syndicate Labs disclosed a security incident: an attacker compromised the system through a private key leak and maliciously upgraded the cross-chain bridge contracts on two chains, leading to the transfer of approximately 18.5 million SYND and about $50,000 in user assets. The attack originated from a compromised development endpoint. The attacker exploited production environment permissions to upgrade the bridge contracts to a malicious version, but other chains were unaffected. The losses include:Commons Bridge: Approximately 18.5 million SYND were transferred and sold, worth roughly $330,000.Another Appchain: Approximately $50,000 in user assets were transferred.Syndicate Labs stated that affected SYND holders will receive full compensation, along with additional excess compensation, leaving their overall holdings higher than before the incident. Affected users on the Appchain will also be fully reimbursed for their losses.
Odaily News According to an official announcement, BitMart will list Genius Terminal (GENIUS) at 12:00 (UTC+8) on April 23. The listing will open the GENIUS/USDT trading pair.Genius Terminal is the first privacy-focused ultimate on-chain trading terminal, representing the next-generation product following aggregators, cross-chain bridges, and wallet extensions. It is specifically designed for professional users who wish to enjoy DeFi functionalities without enduring cumbersome experiences. The platform eliminates the need for multiple authorization bridges or asset wrapping, features no signature pop-ups, and supports programmable trading strategies. It unifies spot trading, perpetual contracts, pre-launch tokens, and yield management within a single account. Orders are routed for execution across 150+ DEXs on 9 blockchains via the Genius Bridge Protocol. The Ghost Orders function can split a transaction across up to 500 wallets to achieve on-chain privacy protection. The project is backed by YZi Labs (formerly Binance Labs), with CZ serving as an advisor.
Odaily News On-chain data indicates that Kelp DAO's rsETH bridge protocol based on LayerZero is suspected of being exploited by hackers, resulting in a loss of 116,500 rsETH, valued at approximately $292 million.
Odaily News USDC has officially announced the launch of its cross-chain bridge, USDC Bridge. Built and operated by Circle, it supports cross-chain transfers based on a native burn-mint mechanism.According to the announcement, the bridge supports upfront fee display and real-time status tracking, eliminates the need for manual path selection, and can automatically handle destination chain gas fees.
USDC officially announced the launch of the USDC Bridge, built and operated by Circle. It supports cross-chain transfers via a native burn-and-mint mechanism, offers upfront fee visibility and real-time status tracking, eliminates the need for manual route selection, and automatically handles gas fees on the destination chain.
Odaily News Circle announced on the X platform that the USDC Bridge bridging service is now officially live. It is reported that this is a method for direct cross-chain transfer of USDC, built and operated by Circle, supporting native burn-to-mint transfers without the need to select a route, and automatically handling gas fees on the destination chain.
According to an official announcement, the BTTC Bridge transaction history page has completed its functional upgrade and is now officially live, aiming to provide cross-chain users with a more efficient and transparent asset tracking experience. This update introduces a dual-view mode—“All Records” and “In Progress”—displayed independently, along with a multi-dimensional filtering tool that supports flexible, combined searches by transaction status, type, and custom date ranges. Additionally, the page now features dedicated identification markers for deposits, withdrawals, and cross-chain activities, helping users quickly locate fund flows. Users can now visit the platform to experience a clearer cross-chain transaction management view. The team will continue refining product details to support broader on-chain interaction scenarios.
Circle has unveiled its 2026 vision for the development of internet finance systems, outlining a strategic focus on building cross-chain interoperability infrastructure, liquidity orchestration capabilities, and institutional-grade asset issuance frameworks to enable efficient value flow across multi-chain ecosystems. Regarding cross-chain infrastructure, Circle stated that it will introduce features such as “Fast Transfer” in the future—enabling sub-second settlement without waiting for source-chain finality—to enhance capital efficiency. At the asset expansion level, the Cross-Chain Transfer Protocol (CCTP) will expand beyond USDC to support additional assets—including EURC, USYC, and cirBTC—and facilitate the issuance and circulation of real-world assets (RWAs) across multiple chains. Additionally, Circle is advancing cross-chain process coordination by offering tools such as Bridge Kit, Deposit Kit, Fee Service, and Workflows—streamlining multi-chain operations into “one-click” cross-chain interactions, reducing development complexity, and improving user experience.
Decentralized GPU cloud computing infrastructure platform Aethir confirmed that its Ethereum-related bridge contract was attacked. The team promptly disconnected the affected contract and, in collaboration with major exchanges, blacklisted the hacker’s wallet, limiting losses to under $90,000. Earlier, blockchain security firm PeckShield estimated losses at $400,000. The attacker exploited Aethir’s cross-chain smart contract, AethirOFTAdapter, to transfer stolen funds from BNB Chain to Tron. Aethir stated that its Ethereum mainnet ATH token supply remains unaffected. It plans to release a detailed compensation plan and incident analysis next week and will collaborate with exchanges including Binance, Upbit, and Bithumb to freeze funds. Web3 security platform ZeroShadow is assisting with the investigation. In 2025, Aethir achieved $127.8 million in revenue and deployed over 440,000 GPU containers globally.