News linked to both this project and an event.
Odaily News: On-chain security platform Blockaid has discovered a vulnerability in the Bitcoin bridge of cross-chain protocol Symbiosis. The attacker minted approximately 2^62 syBTC to a newly created externally owned account, with a face value of roughly $46.1 billion calculated at 8 decimal places, and sold approximately 4.39 WBTC on Uniswap V4 on Ethereum, realizing a cash-out of about $336,000.Symbiosis stated that the attack occurred at around 4:28 AM on September 11. The team has paused the BTC route, while other routes remain operational and unaffected. The team has recovered approximately 15 BTC and deposited them into a multisig wallet controlled by the team. They have also offered the attacker a 20% white-hat bounty, with a deadline of September 13.In recent weeks, Liquid Network, Nomic, and Symbiosis have all experienced security incidents involving the inflation of supply through the minting of tokens without real asset backing. As of September 13, Symbiosis has not yet publicly released a BridgeV2 technical post-mortem, the final loss amount, or confirmation of whether the attacker has accepted the bounty. (Bitcoin.com News)
Privy has launched a stablecoin card prebuilt component, enabling applications to embed a cardholder experience with a single integration, and has partnered with Stripe to issue stablecoin cards. The service currently covers more than 25 card issuing markets and plans to expand to over 100 by the end of the year. Users can spend directly using their Privy wallet or DeFi vault balances without needing to pre-transfer funds to a separate card account. The card issuer is Lead Bank, program management is handled by Bridge, and Stripe provides issuance services.
Circle announced that USDC, EURC, the Cross-Chain Transfer Protocol (CCTP), and Bridge Kit are now live on Plasma. Payment service providers, fintech companies, digital banks, and developers on Plasma can use regulated US dollar and Euro stablecoins to support scenarios including payments, cross-border remittances, multi-currency foreign exchange, on-chain transactions, lending, liquidity provision, treasury management, corporate payments, and global settlement.
Odaily News The digital euro, issued by the European Central Bank (ECB) and representing public money, is still in the development stage; EURR, on the other hand, is a stablecoin issued by a private institution designed to maintain a value of 1 euro. Both are aimed at meeting the demand for instant fund transfers within digital platforms.Fintech company Revolut has begun a phased rollout of its euro stablecoin EURR to eligible users in Denmark, Poland, and Portugal, with plans to expand to the European Economic Area in the future. EURR is deployed on the Ethereum network and can be used for on-chain transfers between fiat currencies, crypto assets, external wallets, and supported blockchain networks.EURR is issued by Bridge Building, a Stripe-owned company, rather than directly by Revolut. Piero Cipollone, a member of the ECB's Executive Board, stated that the digital euro will offer the highest level of privacy supported by current technology, with offline payments visible only to the payer and payee, while in online transactions, participating banks will still have access to information required for anti-money laundering compliance. (Forbes Digital Assets)
According to Odaily, blockchain network BNB Chain has activated the Pasteur hard fork on the BNB Smart Chain (BSC) mainnet. The upgrade addresses cross-chain bridge verification, validator authorization, staking, and governance security, while increasing block capacity without altering the 450-millisecond block time.This upgrade includes BEP-682, BEP-695, and BEP-675, which pertain to duplicate validator entries, validator key rotation and penalty governance, and the block submission process, respectively. In the internal test environment QANet, the new process increased throughput from 1,237 transactions per second to 2,324 transactions per second, though these figures are from controlled tests and do not represent mainnet measurements. (Cointelegraph)
Odaily News: AI architecture development company Pathway has announced the completion of a $30 million seed funding round, with participation from Id4 Ventures, TQ Ventures, Red Bridge Ventures, Kadmos Capital, and WS Investment, the investment arm of Wilson Sonsini, among others. Databricks' Chief AI Scientist Jonathan Frankle has joined as an angel investor.Pathway is developing a Bio-inspired Dynamic Hierarchical architecture (BDH), a "post-Transformer" architecture designed to overcome the limitations of current Transformer models, which continue to rely on ever-increasing data, GPUs, energy, and capital expansion. Unlike traditional large models that require periodic retraining, BDH enables continuous learning and ongoing adaptation with significantly less data.The company also announced the appointment of Adam Kurzrok, former product lead for Google DeepMind's Gemini, as Chief Product Officer. He will oversee the product direction of BDH models, covering areas such as model packaging, evaluation systems, and commercial deployment. (Finsmes)
Odaily News: The cross-chain bridge connecting XRP Ledger and Coreum was attacked on August 9. The attacker exploited a validation logic vulnerability to steal approximately 199,900 XRP, reducing the bridge's asset balance from roughly 200,400 XRP to 493.5 XRP. The attack did not involve private key leaks and did not target the XRP Ledger protocol itself. The attacker forged deposit operations, causing the bridge system to recognize them as legitimate deposits and triggering the bridge wallet on the other end to send real XRP. On-chain data shows that the attacker completed the fund transfer through 94 multi-signature authorization transactions within 97 minutes. These transactions required signatures from 17 of the 28 relay node keys, allowing the attacker to bypass the bridge's validation mechanism. As of August 11, the Coreum cross-chain bridge remains suspended, and the Coreum Development Foundation has not yet released an official incident report. The XRP mainnet and user private keys remain unaffected and secure.
According to Cointelegraph, Bridge Building, the Luxembourg entity of Stripe's stablecoin infrastructure company Bridge, has officially joined the EU Markets in Crypto-Assets (MiCA) registry. Previously, on July 2, Bridge obtained Crypto-Asset Service Provider (CASP) authorization under the MiCA framework and an Electronic Money Institution (EMI) license issued by the Luxembourg Financial Sector Supervisory Commission (CSSF). Bridge Head of Product Mai Leduc Blount stated that the aforementioned approvals will allow EU enterprises to build stablecoin and payment products within a compliant framework. According to the latest update from the European Securities and Markets Authority (ESMA), Bridge's inclusion brings the total number of authorized Electronic Money Token (EMT) issuers in the EU to 42; during the same period, three institutions from Germany newly received CASP authorization, raising the total number of authorized CASPs in the EU to 324.
Odaily News: Bridge, Stripe's stablecoin infrastructure company, has joined the EU's Markets in Crypto-Assets Regulation (MiCA) register through its Luxembourg entity Bridge Building, after receiving regulatory approval from Luxembourg. The European Securities and Markets Authority (ESMA) update on Wednesday shows that with Bridge's inclusion, the number of MiCA-authorized electronic money token (EMT) issuers in the EU register has increased to 42. Bridge announced on July 2 that it had obtained the MiCA Crypto Asset Service Provider (CASP) authorization and Electronic Money Institution (EMI) license from the Luxembourg Financial Industry Supervisory Commission. Bridge product lead Mai Leduc Blount stated that the approvals allow EU companies to build stablecoin and payment products within a regulated framework. The same ESMA update also added three new German CASP entries, including Volksbank Die Gestalterbank, VBU Volksbank im Unterland, and VR-Bank Erding, bringing the total number of authorized CASPs in the EU register to 324. Asset-referenced token (ART) authorizations remained unchanged, with no ART issuers currently listed.
NFT platform Forma announced it will cease operations of the Forma blockchain, stating that continuing to maintain the network is unsustainable. Forma stated it will migrate the Modularium platform and Forma NFTs to the Ethereum mainnet to ensure the long-term continuity of related works and trading markets. After the migration is complete, user NFTs will remain accessible and can be traded on Ethereum ecosystem markets such as OpenSea, while Modularium will continue to operate as a display platform for these NFT series. Forma also urged users to withdraw on-chain funds via the Forma Bridge as soon as possible. Unwithdrawn assets will be manually migrated by the team to a new EVM-compatible chain at a later stage. The team emphasized that user funds and NFT assets are secure, and specific migration timelines and processes will be announced subsequently.
According to CertiK Alert monitoring, a security incident occurred on VerusCoin's Ethereum cross-chain bridge, with approximately $7.53 million in assets transferred out. Preliminary analysis indicates that this issue may be related to the cross-chain bridge failing to sufficiently verify whether the Verus chain-side input supports the paid amount, similar to an incident that occurred in May this year.
According to an official post from Midnight Foundation (@midnightfdn), the Wanchain Cardano<>BNB cross-chain bridge suffered a security attack. Currently, multiple major exchanges including KuCoin, Kraken, Binance, Bybit, OKX, and MEXC have responded rapidly, taking preventive measures to restrict the flow of stolen assets, including freezing relevant accounts and addresses, blacklisting the attacker's wallets, and suspending NIGHT token deposit and withdrawal services. The exchanges confirmed that this incident is an isolated third-party bridge vulnerability and is unrelated to the Midnight Network mainnet and the NIGHT asset itself.
the Midnight Foundation has provided an update on the handling of the cross-chain bridge attack event involving Wanchain Cardano and BNB. Multiple exchanges including KuCoin, Kraken, Binance, Bybit, OKX, Gate, and MEXC have coordinated risk control actions, temporarily freezing the involved accounts and associated addresses, adding the hacker wallet to a blacklist, and pausing NIGHT token deposits and withdrawals as needed to curb the transfer and cashing out of stolen assets.The Foundation specifically noted that this security incident is an isolated incident related to a third-party cross-chain bridge, and the Midnight mainnet and native NIGHT assets have not been affected. The project team continues to collaborate with major exchanges and ecosystem partners to advance traceability investigations, reminding the community to rely on official disclosures for information and to be cautious of misinformation.
stablecoin project Native Markets has announced that the final deadline for users to exchange USDH via the official website is today. The exchange portal will be officially deactivated on July 17 at 21:00 Beijing time (July 17, 13:00 UTC).Native Markets stated that the Bridge will continue to offer 1:1 redemption and exchange services for USDH, but users will need to complete an independent account registration and onboarding process on the Bridge platform.The official reminder advises that users who still need to complete conversion operations through USDH.com should do so before the portal closes. After the portal is deactivated, USDH exchange services will be migrated to the official Bridge channel.This adjustment is part of the migration of USDH ecosystem infrastructure. Native Markets recommends that users complete Bridge onboarding in advance to ensure that subsequent stablecoin exchange and redemption services remain unaffected.
Syscoin has released a security incident report detailing the UTXO-to-NEVM bridge vulnerability. According to the report, this incident resulted in the unauthorized release of approximately 5 billion SYS tokens on the UTXO side. The affected funds have since been returned to the official recovery address and permanently destroyed using the standard OP_RETURN mechanism, rendering them unusable by the protocol. As a result, the on-chain SYS supply has reverted to its expected value. The bridge functionality remains suspended while the team completes its final review and remediation efforts.
Humanity announced the independent investigation results from Quantstamp, stating that the security incident—exceeding $31 million—originated from a phishing attack that led to the leakage of private keys. The attackers subsequently gained control of the smart contract and dumped tokens; the tools and tactics employed exhibit characteristics commonly associated with North Korean hacker groups.
According to Backpack’s official tweet, Backpack Securities announced on June 11 that the $SPCX token officially launched on Solana via SunriseDeFi following SpaceX’s Nasdaq listing. Users can trade stocks on the Backpack platform and freely transfer assets between traditional brokerages and Solana-based DeFi wallets through deposit and withdrawal operations.
Humility Protocol released a security incident update on the X platform, stating that its H token suffered a coordinated attack on the Ethereum and BSC chains yesterday, with confirmed losses exceeding $36 million in stolen and dumped assets.Preliminary investigations indicate the incident originated from a compromised employee computer, which led to the leakage of private keys for the multi-signature wallet controlling the Hyperlane Bridge ProxyAdmin. Specifically, the attacker obtained 3 out of 6 private keys of the Gnosis Safe wallet on the Ethereum chain, transferred ownership of the ProxyAdmin to a wallet under their control, upgraded the bridge contract to a malicious implementation, and subsequently transferred approximately 141.2 million H tokens in a single transaction.Simultaneously, the attacker also gained control of 3 out of 5 private keys of the Safe wallet on the BSC chain, took over the ProxyAdmin using the same method, deployed a malicious contract with unlimited minting functionality, and minted 200 million H tokens in two separate transactions to their own wallet.Humility stated that it has suspended all deposit and withdrawal operations on the affected bridge services and is collaborating with partners such as exchanges to mitigate losses. Meanwhile, it is cooperating with the police investigation and attempting to recover part of the stolen funds.
Syscoin released a preliminary post-mortem of the cross-chain bridge incident, stating that due to a verification issue in the bridging process, the attacker exploited an abnormal transaction proof validation to generate approximately 5 billion SYS tokens abnormally on the UTXO side via the affected bridging path.
Cryptocurrency exchange Backpack announced the launch of Backpack Securities, enabling investors to buy, hold, and sell real stocks backed by regulated U.S. securities infrastructure—entitling them to dividends, corporate actions, and rights under systems such as ACATS and DTCC. Additionally, positions can be converted into tokenized securities freely transferable and tradable 24/7 on public blockchains like Solana. Orders are routed directly into U.S. equity market liquidity pools, with execution prices reflecting real-time market prices.