News linked to both this project and an event.
According to the quarterly Security and Compliance Report by Hacken, 67 security incidents in the Web3 space resulted in losses of $763.9 million in Q2 2026, making it the most severe quarter since Q2 2025. Compromised keys and infrastructure accounted for 88.3% of the stolen funds, approximately $674.5 million. Smart contract vulnerabilities remained the most common type of attack, linked to 44 out of the 67 incidents, but corresponding losses represented only about 11% of the total. Approximately 75.5% of the losses stemmed from two incidents attributed to North Korean threat actors, and 14 audited protocols were breached during the quarter. Leo Fan, founder of Cysic, stated that an audit is a point-in-time assessment of a specific codebase and does not automatically cover signature devices, cloud infrastructure, operational permissions, subsequent upgrades, third-party dependencies, or old contracts that remain callable. Samuel Videau, CTO of Genius, pointed out that nearly 90% of losses came from compromised keys, signers, and infrastructure. Multiple security leaders noted that Web3 security requires layered defenses including real-time monitoring, key management, multi-party authorization, and bug bounty programs. Leo Fan expects that operational access control attacks will continue to dominate losses in the second half of 2026, including social engineering, credential theft, compromised signers, cloud or CI/CD intrusions, and attacks on off-chain validator infrastructure.
According to Reuters, the Johor state government of Malaysia has revoked the business license of the digital nomad community Network School, founded by American investor and former Coinbase CTO Balaji Srinivasan, and required it to cease all operations in Forest City starting from July 22. The project was previously investigated after being accused on social media of assisting Israeli citizens in entering Malaysia, but the immigration department stated after inspection that the relevant members held valid travel documents. The Johor state government stated that the decision to revoke the license was made based on inspection reports, law enforcement results, and the company's statements.
In response to public accusations by Du Jun, Co-founder of Huobi and ChainUP and Founder of Vernal Capital, Metagent Co-founder and former CTO Li Bojie (@bojie_li) issued a response. Li Bojie stated that ABCDE Capital committed to investing $1.5 million in the investment agreement, but actually only $500,000 was received, with the remaining $1 million never arriving, yet the company's cap table continued to record their equity based on the $1.5 million share. Affected by this, he and the co-founders voluntarily reduced their salaries, and the company's recruitment and R&D also fell into difficulties. In October 2024, Li Bojie officially resigned with board approval, citing personal family reasons preventing him from leaving mainland China and compliance risks existing in Web3 projects. He stated that during his tenure, he always fulfilled the responsibility of disclosing the cap table and business status on schedule, and after resignation, he also complied with non-compete clauses, voluntarily avoiding startup projects in fields such as Web3, AI infra, and image generation. Previously, Du Jun publicly posted stating that Li Bojie is the "founder with the least contractual spirit" he has ever cooperated with, accusing him of refusing to fulfill basic obligations agreed in the investment agreement, including refusing to synchronize business progress and financial status with investors, and subsequently losing contact.