News Heat Trend
Project Overview
CertiK, a blockchain security company founded in 2018, utilizes formal verification and AI technology in collaboration for its end-to-end blockchain security audit services. It mathematically validates the safety of smart contracts through a combination of formal and manual verification. Additionally, the company has developed "CertiK Chain", a security-focused blockchain designed to enhance the security of smart contracts.
CertiK Report: From Assistive Tools to "AI Employees," Agentic AI Reshapes Security and Compliance Work
Odaily News — Web3 security firm CertiK today officially released its Intel3D report, "The Rise of AI Employees: How Agentic AI Is Reshaping Cybersecurity, Anti-Money Laundering, and Compliance." The report notes that AI is transitioning from an assistive tool that helps analysts identify issues to a member of the working team capable of conducting investigations, making judgments, and executing remediation tasks within defined permissions. This shift is reshaping security and compliance processes across traditional finance and Web3, and is also raising new requirements for how enterprises supervise AI, define permission boundaries, and allocate responsibility.The report also cautions that model misjudgments, prompt injection, and adversaries' exploitation of AI may introduce new risks. As AI begins to hold and trade digital assets, its own behavior must also be subject to audit. CertiK recommends that enterprises establish governance mechanisms covering permission boundaries, human approval, decision records, and division of responsibilities, and conduct regular red-team testing; these mechanisms must be improved in tandem with AI's execution capabilities to support "AI employees" in continuously creating value for security and compliance work under supervision and accountability.
Central Bank of Kyrgyzstan Signs MoU with CertiK to Jointly Build Digital Som Security Framework
According to reports from Bitcoin.com, the National Bank of the Kyrgyz Republic (NBKR) signed a memorandum of understanding with blockchain security company Certik on September 9. The two parties will collaborate in areas such as cybersecurity, digital asset custody, anti-money laundering (AML), and counter-terrorism financing (CFT) to jointly advance the security development of the country's digital currency, the Digital Som. Under the agreement, NBKR will deploy Certik's monitoring tools to implement 24/7 compliance monitoring of digital assets, and provide technical training and knowledge transfer to central bank personnel. Previously, Certik has provided technical advisory support to U.S. regulators and the Monetary Authority of Singapore (MAS).
CertiK: Term Labs Hit by Governance Attack, Loses Approximately $8.5 Million
According to monitoring by CertiK Alert, the DeFi lending protocol Term Labs has been targeted by a governance attack, resulting in approximately $8.5 million in asset losses. Currently, around 2,843 ETH and approximately $1.6 million worth of DAI have been transferred to address 0xD5183d8BfC65a50863C62aF2538198A8288FFc13. Term Labs has confirmed that its Term Vaults fell victim to a governance exploit, stating that the team is continuing to investigate the incident and will release further details upon completion of the investigation. Official sources have yet to disclose the specific attack vectors or the scope of the impact.
CertiK Report: Brazil's Crypto Market Enters Full Regulatory Phase, Independent Proof Becomes Key to Market Access
Odaily News, August 11 - Web3 security firm CertiK has released its report "Intel3D: PSAV and Brazil's New Security Standards." The report notes that as the deadline for authorization applications set by the Central Bank of Brazil (October 30 this year) approaches, local Virtual Asset Service Providers (PSAVs) are facing a wave of concentrated compliance adjustments. Independent third-party compliance and security certifications are also transitioning from industry best practices to critical requirements for market access. According to the report, CertiK has already begun conducting independent external audits in accordance with Central Bank of Brazil Normative Instruction No. 701.As one of the markets with the highest crypto adoption rates globally, the impact of Brazil's regulatory transformation may extend far beyond its domestic market. The report shows that Brazil currently ranks fifth globally in actual crypto adoption rates. Between June 2024 and June 2025, Brazil received $318.8 billion in on-chain asset value, accounting for nearly one-third of South America's on-chain activity during the same period. Stablecoins have become a critical infrastructure in the local digital asset market, representing approximately 80% of the trading volume in crypto asset transactions reported to Brazil's Federal Revenue Service.
CertiK Report: Wrench Attacks Surge Nearly 12x in Losses, “Operational Security” Becomes New Core of Prevention
Odaily Odaily News, July 22nd - Web3 security firm CertiK released its "H1 2026 Wrench Attack Report." The report indicates that a total of 52 publicly verified wrench attacks were recorded globally in the first half of 2026, a year-over-year increase of 33.3%; related losses amounted to approximately $124 million, an increase of about 11.8 times compared to the same period last year.The report notes that attackers are shifting from exploiting technical vulnerabilities to targeting asset holders and their real-world social networks. Home invasion incidents increased from 1 case in H1 2025 to 20 cases, accounting for 41% of the total incidents in the period. Europe has become a high-incidence area for attacks, with 33 cases occurring in France alone, representing 63.5% of the global total.CertiK stated that as real-world risks become a significant challenge for digital asset security, enterprises and high-net-worth individuals need to establish more comprehensive protection systems. CertiK has launched operational security services to help identify exposure risks related to identity, family, residence, and travel routes. Simultaneously, through the CertiK Security Workspace, it correlates off-chain intelligence, on-chain transactions, and AML risk signals to support institutions in tracking and analyzing cybercrime activities. Furthermore, CertiK is strengthening cooperation with international law enforcement agencies such as Interpol and Europol, providing technical support for cross-border attack investigations and security policy research.
CLARITY Act could remove Section 604 or expose non-custodial developers to Bank Secrecy Act obligations
one year after the U.S. House of Representatives passed the Clarity for Digital Assets Act (CLARITY Act), the bill remains stalled in the Senate, facing opposition from the banking industry and partisan divisions. Supporters anticipate a potential vote before the Senate's August recess. Industry organizations Coin Center and the Blockchain Association have identified Section 604 as a key provision for protecting open-source innovation. This provision aims to prevent non-custodial blockchain developers, node operators, and validators from being classified as federal money transmitters. Stefan Muehlbauer, Head of U.S. Government Affairs at CertiK, stated that removing Section 604 could conflate software development with financial services, subjecting developers to the Bank Secrecy Act and triggering First Amendment-related constitutional challenges. Iana Dimitrova, CEO of Openpayd, noted that the expanding use of stablecoins for cross-border value transfer has made the need for a federal regulatory framework more apparent. The bill also addresses accounting standards, acknowledges the rescission of SEC Staff Accounting Bulletin SAB 121, and prohibits the SEC from reimposing equivalent crypto custody accounting requirements without a full notice-and-comment rulemaking process. Mark Zalan, CEO of Gomining, pointed out that Bitcoin still faces regulatory gaps, such as tax treatment.
CertiK Warns Crypto Apps Still Face eMudhra Certificate Vulnerability Risks
Odaily reports: Blockchain security firm CertiK stated that although Google, Apple, and Microsoft have blocked 8 affected certificates issued by Indian digital certificate authority eMudhra, crypto trading bots and exchange applications may still be exposed to related vulnerability risks, as browser remediation measures may not cover software that uses independent security systems.Peiyu Wang, Senior Director of Digital Asset Security at CertiK, noted that attackers could exploit compromised certificates to impersonate exchanges, wallet interfaces, and APIs, replace deposit addresses, or trick users into approving malicious transactions. However, such attacks would also require intercepting or redirecting network traffic, and the compromised certificate authority keys alone cannot expose wallet private keys. Crypto service operators should update their software and certificate trust stores, and confirm that their applications reject the affected certificates. (Cointelegraph)
79thVault allegedly hit in an attack, losing approximately $12.5 million
According to CertiK's monitoring, the decentralized protocol 79thVault exhibited suspicious activity. The attacker dumped 2.01 million 79AU tokens via a privileged function and transferred 16,200 BNB (approximately $12.5 million) to an attacker-controlled address. Approximately 90% of the stolen funds currently remain in the relevant address, and the project team has extended a 10% bug bounty offer for their return.
MakerDAO Legacy Auction Contract Exploited, Attacker Drains 200 ETH Worth Over $500,000
Odaily News: Analysis by security firm CertiK shows that a legacy MakerDAO auction keeper contract was exploited, with the attacker draining 200 ETH worth over $500,000. According to CertiK, the root cause is a lack of access control in the 0x8804d1de function within the keeper implementation contract. This contract was involved in the March 2020 "Black Thursday" liquidation crisis, where it won ETH at zero bids. Four lots of 50 ETH each were never settled, and the attacker used this to drain the funds, transferring them out via Tornado Cash in batches of 10 ETH each. This contract is not part of the current Sky ecosystem core, but old contracts still holding funds may remain potential attack targets.
CertiK：与 Coldcard Wallet 攻击相关资金经 THORChain 跨链后转入 Tornado Cash
CertiK 表示，其监测系统发现两笔各 200 ETH 的交易转入 Tornado Cash，相关资金与正在进行的 Coldcard Wallet 攻击事件有关。上述资金此前通过 THORChain 由 BTC 跨链转入以太坊地址，随后再被转入 Tornado Cash。
VerusCoin Ethereum Cross-Chain Bridge Attacked, Approximately $7.53 Million Transferred Out
According to CertiK Alert monitoring, a security incident occurred on VerusCoin's Ethereum cross-chain bridge, with approximately $7.53 million in assets transferred out. Preliminary analysis indicates that this issue may be related to the cross-chain bridge failing to sufficiently verify whether the Verus chain-side input supports the paid amount, similar to an incident that occurred in May this year.
CodexField's X account and website taken offline, previously accused of fraud
according to CertiK's monitoring, CodexField's X account and website have been taken offline. Earlier, on-chain analyst Specter had warned that the project might be a scam and exit scam, and tracked abnormal cross-chain fund transfers totaling over 17.3 million USDT.
CertiK Warns Crypto Apps Still Face eMudhra Certificate Vulnerability Risks
Odaily reports: Blockchain security firm CertiK stated that although Google, Apple, and Microsoft have blocked 8 affected certificates issued by Indian digital certificate authority eMudhra, crypto trading bots and exchange applications may still be exposed to related vulnerability risks, as browser remediation measures may not cover software that uses independent security systems.Peiyu Wang, Senior Director of Digital Asset Security at CertiK, noted that attackers could exploit compromised certificates to impersonate exchanges, wallet interfaces, and APIs, replace deposit addresses, or trick users into approving malicious transactions. However, such attacks would also require intercepting or redirecting network traffic, and the compromised certificate authority keys alone cannot expose wallet private keys. Crypto service operators should update their software and certificate trust stores, and confirm that their applications reject the affected certificates. (Cointelegraph)
Three men break into UK home and assault victim in attempt to steal crypto, receive maximum sentences of 6 years
Odaily Report: Three men in Bristol, UK, broke into a man's home in the early hours of May 15, assaulted the victim, and demanded he hand over a large amount of cryptocurrency. The victim sustained head injuries and was hospitalized for treatment; the three men were unsuccessful in their attempt.Terroll Paul, Mohamed Samagassi, and Pierre Madzou all pleaded guilty to aggravated burglary and were sentenced at Bristol Crown Court on October 15. Paul was sentenced to 6 years, Madzou to 5 and a half years, and Samagassi to 5 years; the victim's underage sister called the police, and the three were subsequently arrested at the scene.Police did not disclose the amount of cryptocurrency the three demanded. The case is a "wrench attack," in which criminals use violence or threats to force cryptocurrency holders to hand over digital assets; data from blockchain security firm CertiK shows that in the first six months of 2026, such attacks worldwide caused $124 million in losses, a 12-fold year-on-year increase. (Decrypt)
79thVault allegedly hit in an attack, losing approximately $12.5 million
According to CertiK's monitoring, the decentralized protocol 79thVault exhibited suspicious activity. The attacker dumped 2.01 million 79AU tokens via a privileged function and transferred 16,200 BNB (approximately $12.5 million) to an attacker-controlled address. Approximately 90% of the stolen funds currently remain in the relevant address, and the project team has extended a 10% bug bounty offer for their return.
MakerDAO Legacy Auction Contract Exploited, Attacker Drains 200 ETH Worth Over $500,000
Odaily News: Analysis by security firm CertiK shows that a legacy MakerDAO auction keeper contract was exploited, with the attacker draining 200 ETH worth over $500,000. According to CertiK, the root cause is a lack of access control in the 0x8804d1de function within the keeper implementation contract. This contract was involved in the March 2020 "Black Thursday" liquidation crisis, where it won ETH at zero bids. Four lots of 50 ETH each were never settled, and the attacker used this to drain the funds, transferring them out via Tornado Cash in batches of 10 ETH each. This contract is not part of the current Sky ecosystem core, but old contracts still holding funds may remain potential attack targets.
CertiK Report: From Assistive Tools to "AI Employees," Agentic AI Reshapes Security and Compliance Work
Odaily News — Web3 security firm CertiK today officially released its Intel3D report, "The Rise of AI Employees: How Agentic AI Is Reshaping Cybersecurity, Anti-Money Laundering, and Compliance." The report notes that AI is transitioning from an assistive tool that helps analysts identify issues to a member of the working team capable of conducting investigations, making judgments, and executing remediation tasks within defined permissions. This shift is reshaping security and compliance processes across traditional finance and Web3, and is also raising new requirements for how enterprises supervise AI, define permission boundaries, and allocate responsibility.The report also cautions that model misjudgments, prompt injection, and adversaries' exploitation of AI may introduce new risks. As AI begins to hold and trade digital assets, its own behavior must also be subject to audit. CertiK recommends that enterprises establish governance mechanisms covering permission boundaries, human approval, decision records, and division of responsibilities, and conduct regular red-team testing; these mechanisms must be improved in tandem with AI's execution capabilities to support "AI employees" in continuously creating value for security and compliance work under supervision and accountability.
Four people killed in Mexico, suspects accused of stealing a cold wallet holding millions of dollars in Bitcoin
Odaily News: The State Attorney General's Office of Mexico (FGJEM) stated that two suspects are accused of killing four people in search of a cold wallet believed to contain millions of dollars in Bitcoin. The two are scheduled to appear in court on Wednesday, where a judge will determine whether there is sufficient evidence to continue criminal proceedings.The surnames of suspects Diego Sebastián and Gerardo have not been disclosed. Prosecutors allege that the pair killed Jonathan Meléndez, keyboardist for the rock band Camilo Séptimo, his pregnant wife, their daughter, and an employee at a residence in the city of Atizapán de Zaragoza. The family's golden retriever was also killed.Mexico's Secretary of Security, Omar García Harfuch, stated that one of the suspects was a business partner of the victim and allegedly used that relationship to gain entry into the residence. If convicted, the two could face sentences ranging from 25 to 70 years in prison for each victim.Blockchain security firm CertiK reported that 52 violent coercion attacks against cryptocurrency holders were recorded globally in the first half of 2026, a 33.3% increase from 39 during the same period in 2025. Blockchain analysis company Chainalysis estimates that the value of stolen cryptocurrency from related attacks exceeded $30 million. (Cointelegraph)
CertiK Warns Crypto Apps Still Face eMudhra Certificate Vulnerability Risks
Odaily reports: Blockchain security firm CertiK stated that although Google, Apple, and Microsoft have blocked 8 affected certificates issued by Indian digital certificate authority eMudhra, crypto trading bots and exchange applications may still be exposed to related vulnerability risks, as browser remediation measures may not cover software that uses independent security systems.Peiyu Wang, Senior Director of Digital Asset Security at CertiK, noted that attackers could exploit compromised certificates to impersonate exchanges, wallet interfaces, and APIs, replace deposit addresses, or trick users into approving malicious transactions. However, such attacks would also require intercepting or redirecting network traffic, and the compromised certificate authority keys alone cannot expose wallet private keys. Crypto service operators should update their software and certificate trust stores, and confirm that their applications reject the affected certificates. (Cointelegraph)
Aethir Announces Major Update to ATH Tokenomics: Daily Burn Mechanism Launches in November, with Burn Volume Directly Tied to Actual Network Revenue
根据官方消息，Aethir 今日宣布对 ATH 代币经济机制进行重大调整。自 2026 年 11 月起，平台将每日从网络费用中提取一部分销毁 ATH，代币永久发送至公开销毁地址（0x000...dEaD），销毁规模随网络实际算力使用量浮动。 与此同时，固定平台费将被浮动网络费取代，费率通过 TWAP 实时读取市场状况，弱市时费率下降、销毁占比上升。Cloud Host 排放时间表不受影响，费用设有上限且永不超过 Host 奖励价值。销毁 Dashboard 将与首笔销毁同步上线，该机制已通过 CertiK 审计。
Setting a World Record: Sui Achieves Verified Throughput of 40,614,180 Transactions Per Second
Odaily News: Sui posted on X platform that it achieved a throughput of 40,614,180 transactions per second on-site at Sui Basecamp, setting a world record, with the data independently analyzed by CertiK. AI agents completed payments, interactions, and chats in programmable tunnels, with transactions executed off-chain and settled on Sui. Sui stated it is ready to support the agent economy.
CertiK Report: From Assistive Tools to "AI Employees," Agentic AI Reshapes Security and Compliance Work
Odaily News — Web3 security firm CertiK today officially released its Intel3D report, "The Rise of AI Employees: How Agentic AI Is Reshaping Cybersecurity, Anti-Money Laundering, and Compliance." The report notes that AI is transitioning from an assistive tool that helps analysts identify issues to a member of the working team capable of conducting investigations, making judgments, and executing remediation tasks within defined permissions. This shift is reshaping security and compliance processes across traditional finance and Web3, and is also raising new requirements for how enterprises supervise AI, define permission boundaries, and allocate responsibility.The report also cautions that model misjudgments, prompt injection, and adversaries' exploitation of AI may introduce new risks. As AI begins to hold and trade digital assets, its own behavior must also be subject to audit. CertiK recommends that enterprises establish governance mechanisms covering permission boundaries, human approval, decision records, and division of responsibilities, and conduct regular red-team testing; these mechanisms must be improved in tandem with AI's execution capabilities to support "AI employees" in continuously creating value for security and compliance work under supervision and accountability.
Central Bank of Kyrgyzstan Signs MoU with CertiK to Jointly Build Digital Som Security Framework
According to reports from Bitcoin.com, the National Bank of the Kyrgyz Republic (NBKR) signed a memorandum of understanding with blockchain security company Certik on September 9. The two parties will collaborate in areas such as cybersecurity, digital asset custody, anti-money laundering (AML), and counter-terrorism financing (CFT) to jointly advance the security development of the country's digital currency, the Digital Som. Under the agreement, NBKR will deploy Certik's monitoring tools to implement 24/7 compliance monitoring of digital assets, and provide technical training and knowledge transfer to central bank personnel. Previously, Certik has provided technical advisory support to U.S. regulators and the Monetary Authority of Singapore (MAS).
Besu fixes 5 security vulnerabilities, version 26.7.1 released on July 27
Odaily News: Ethereum client Besu has fixed 5 security vulnerabilities discovered by blockchain security firm CertiK in version 26.7.1 released on July 27, and published 4 detailed security advisories on August 14. Vulnerability details were disclosed after a delay to allow node operators to complete upgrade deployments.Jialiang Chang, Director of Security Engineering and Senior Audit Partner at CertiK, stated that the arrangement of releasing patches first and details later provided an 18-day buffer period, allowing node operators to identify affected deployments, test new versions, and coordinate with validators or consortium participants to complete upgrades.The vulnerabilities involve block broadcast handling, caching of future-height consensus proposals, WebSocket subscription limits, and JSON-RPC filter creation. If left unpatched, attackers could exhaust node memory or thread resources, impacting node availability and consensus processing.Using the Chain Scan methodology, CertiK conducted adversarial testing on peer-to-peer, HTTP RPC, WebSocket RPC, and consensus interfaces in a private multi-node test network, and provided reproducible testing tools to the Besu team. CertiK is updating Chain Scan to expand round-the-clock multi-node testing on public chain networks. (Bitcoin.com News)
Related news
CertiK Warns Crypto Apps Still Face eMudhra Certificate Vulnerability Risks
Odaily reports: Blockchain security firm CertiK stated that although Google, Apple, and Microsoft have blocked 8 affected certificates issued by Indian digital certificate authority eMudhra, crypto trading bots and exchange applications may still be exposed to related vulnerability risks, as browser remediation measures may not cover software that uses independent security systems.Peiyu Wang, Senior Director of Digital Asset Security at CertiK, noted that attackers could exploit compromised certificates to impersonate exchanges, wallet interfaces, and APIs, replace deposit addresses, or trick users into approving malicious transactions. However, such attacks would also require intercepting or redirecting network traffic, and the compromised certificate authority keys alone cannot expose wallet private keys. Crypto service operators should update their software and certificate trust stores, and confirm that their applications reject the affected certificates. (Cointelegraph)
Aethir Announces Major Update to ATH Tokenomics: Daily Burn Mechanism Launches in November, with Burn Volume Directly Tied to Actual Network Revenue
根据官方消息，Aethir 今日宣布对 ATH 代币经济机制进行重大调整。自 2026 年 11 月起，平台将每日从网络费用中提取一部分销毁 ATH，代币永久发送至公开销毁地址（0x000...dEaD），销毁规模随网络实际算力使用量浮动。 与此同时，固定平台费将被浮动网络费取代，费率通过 TWAP 实时读取市场状况，弱市时费率下降、销毁占比上升。Cloud Host 排放时间表不受影响，费用设有上限且永不超过 Host 奖励价值。销毁 Dashboard 将与首笔销毁同步上线，该机制已通过 CertiK 审计。
Three men break into UK home and assault victim in attempt to steal crypto, receive maximum sentences of 6 years
Odaily Report: Three men in Bristol, UK, broke into a man's home in the early hours of May 15, assaulted the victim, and demanded he hand over a large amount of cryptocurrency. The victim sustained head injuries and was hospitalized for treatment; the three men were unsuccessful in their attempt.Terroll Paul, Mohamed Samagassi, and Pierre Madzou all pleaded guilty to aggravated burglary and were sentenced at Bristol Crown Court on October 15. Paul was sentenced to 6 years, Madzou to 5 and a half years, and Samagassi to 5 years; the victim's underage sister called the police, and the three were subsequently arrested at the scene.Police did not disclose the amount of cryptocurrency the three demanded. The case is a "wrench attack," in which criminals use violence or threats to force cryptocurrency holders to hand over digital assets; data from blockchain security firm CertiK shows that in the first six months of 2026, such attacks worldwide caused $124 million in losses, a 12-fold year-on-year increase. (Decrypt)
TPS Reaches 40.68 Million, Sui Completes Live Test On-Site and Receives CertiK Certification
Sui posted on X that it achieved a live on-site TPS of 40.68 million at Sui Basecamp 2026, certified by CertiK. Sui stated that it can now process Visa's daily transaction volume within 20 seconds; AI Agents will not wait 3 seconds to complete a payment.
79thVault allegedly hit in an attack, losing approximately $12.5 million
According to CertiK's monitoring, the decentralized protocol 79thVault exhibited suspicious activity. The attacker dumped 2.01 million 79AU tokens via a privileged function and transferred 16,200 BNB (approximately $12.5 million) to an attacker-controlled address. Approximately 90% of the stolen funds currently remain in the relevant address, and the project team has extended a 10% bug bounty offer for their return.
MakerDAO Legacy Auction Contract Exploited, Attacker Drains 200 ETH Worth Over $500,000
Odaily News: Analysis by security firm CertiK shows that a legacy MakerDAO auction keeper contract was exploited, with the attacker draining 200 ETH worth over $500,000. According to CertiK, the root cause is a lack of access control in the 0x8804d1de function within the keeper implementation contract. This contract was involved in the March 2020 "Black Thursday" liquidation crisis, where it won ETH at zero bids. Four lots of 50 ETH each were never settled, and the attacker used this to drain the funds, transferring them out via Tornado Cash in batches of 10 ETH each. This contract is not part of the current Sky ecosystem core, but old contracts still holding funds may remain potential attack targets.