News linked to both this project and an event.
Regarding the attack details, Teng stated that the incident was not carried out by a single individual and involved sophisticated techniques. Initial investigations pointed to a compromised laptop, with subsequent inquiries revealing additional points of entry. The attackers deployed a self-destruct mechanism to eliminate tools and traces during the attack, complicating tracking efforts. They also exploited the known EIP-7702 protocol to secure on-chain execution authorization for a hot wallet, bypassing Binance's standard approval controls. Consequently, Binance suspended withdrawal services to investigate, rebuild, and thoroughly retest its entire infrastructure.
Onchain Lens posted on X questioning CoinDCX's so-called hack incident, stating that CoinDCX may have undisclosed fund anomalies—user deposits had flowed into a wallet that was not included in the relevant fund accounting, after which nearly equivalent funds were transferred out; some funds were also moved through less common cross-chain bridge entry points and services, indicating abnormal pathways.Onchain Lens further pointed out that some funds suspected to be related to CoinDCX hot wallets flowed through over-the-counter (OTC) services and mixing platforms, and questioned that the CoinDCX team still denied the occurrence of a security incident even after multiple researchers and on-chain investigators presented relevant evidence.
CZ (@cz_binance) posted on X that PHP recently disclosed two vulnerabilities (CVE-2026-109618 and CVE-2026-109619), affecting servers running applications like WordPress and Magento. The relevant patch was released on October 21, but vulnerability details were leaked prematurely, and active exploitation in the wild has been confirmed. CZ warned users that some website administrators may not have updated security patches promptly, making compromised sites potential entry points for credential theft or device attacks. Extreme caution is advised when visiting any website over the next few days. Previously, PHP was reported to have a critical security vulnerability, leading to mass outages of government websites across multiple European countries.
according to on-chain analyst Yu Jin's monitoring, an address received 263 ETH from Tornado Cash yesterday, then swapped it for approximately 643,000 USDC and deposited it into Hyperliquid.The address opened a 40x leveraged cross-margin short position on 305.5 BTC, with a position size of approximately $25.38 million, an average entry price of $83,068, and a liquidation price of $84,088. The current unrealized profit is about $160,000. The source of the address's funds involves Tornado Cash, but it cannot yet be confirmed whether it is related to hacker activity.
Odaily News: The State Attorney General's Office of Mexico (FGJEM) stated that two suspects are accused of killing four people in search of a cold wallet believed to contain millions of dollars in Bitcoin. The two are scheduled to appear in court on Wednesday, where a judge will determine whether there is sufficient evidence to continue criminal proceedings.The surnames of suspects Diego Sebastián and Gerardo have not been disclosed. Prosecutors allege that the pair killed Jonathan Meléndez, keyboardist for the rock band Camilo Séptimo, his pregnant wife, their daughter, and an employee at a residence in the city of Atizapán de Zaragoza. The family's golden retriever was also killed.Mexico's Secretary of Security, Omar García Harfuch, stated that one of the suspects was a business partner of the victim and allegedly used that relationship to gain entry into the residence. If convicted, the two could face sentences ranging from 25 to 70 years in prison for each victim.Blockchain security firm CertiK reported that 52 violent coercion attacks against cryptocurrency holders were recorded globally in the first half of 2026, a 33.3% increase from 39 during the same period in 2025. Blockchain analysis company Chainalysis estimates that the value of stolen cryptocurrency from related attacks exceeded $30 million. (Cointelegraph)
According to Odaily, as monitored by SlowMist, per the SlowMist TI security alert, a Router contract has been exploited due to security flaws in its Swap entry point and uniswapV3SwapCallback, resulting in losses of approximately 62.28 BNB. The Router fails to verify whether the caller is a legitimate V3 Pool, nor does it bind the payer in the callback to the original transaction context. The attacker forged a V3 Pool/adapter and injected a victim's address as the payer, exploiting users' existing ERC-20 approvals granted to the Router to execute transferFrom() and transfer assets. Users who have previously granted sufficient token approvals to this Router may see their approved assets transferred out, even without further interaction on their part.
According to the latest report released by Grayscale Research Director Zach Pandl, as U.S. federal debt surpasses $40 trillion, Bitcoin's 90-day correlation with the Nasdaq 100 Index has dropped from over 60% to approximately 33%, while its correlation with gold has risen from near zero at the start of the year to above 50%, indicating that Bitcoin is shifting from a high-beta risk asset to an inflation-resistant store of value. Grayscale believes that expanding fiscal deficits and rising long-end interest rates will drive investors toward scarce alternative assets, positioning Bitcoin, Ethereum, and Zcash as primary beneficiaries. Among them, Zcash, featuring financial privacy, quantum resistance, and cross-chain interoperability, is considered to have the potential to challenge Bitcoin's network effect, despite its market capitalization currently accounting for less than 1% of Bitcoin's. Additionally, Grayscale notes that the current Bitcoin bear market has persisted for roughly 10 months, approaching the historical average bear market cycle of 11–12 months. Coupled with a macroeconomic environment that is becoming increasingly supportive, it suggests that current prices may represent a favorable entry point for long-term investors.
Odaily News, Galaxy Research Head Alex Thorn stated on the X platform that attacks exploiting the Coldcard hardware wallet vulnerability have noticeably declined, but cumulative losses continue to rise as more victims come forward. The impact of this incident on the Bitcoin community is significant, as the victims are primarily long-term BTC holders who adhered to self-custody cold storage principles, rather than those who lost assets due to high-risk trading or DeFi activities.At a scale of $112 million, this incident ranks among the top 20 largest hacks in crypto history and is one of the most severe security breaches in the hardware wallet self-custody sector to date. Bitcoin culture may be entering a new phase—the era of relying solely on ideological advocacy and extreme self-custody promotion is coming to an end. The community needs to place greater emphasis on technical security, lower the barrier to entry for users, and avoid simply shifting the burden of security responsibility onto ordinary users. This crisis may ultimately drive the Bitcoin ecosystem to establish a more mature security framework.Galaxy Research has directly contacted 190 victims and has confirmed with high confidence that the exploit has led to the theft of 1,778.84 BTC (approximately $112.7 million) from over 8,600 addresses. This tally does not yet include certain moderately credible suspicious attack records, such as the unconfirmed "Wave 4." If these potential attack scopes are incorporated, total losses could expand to 2,417.35 BTC (approximately $153 million).Meanwhile, the incident is reshaping market perceptions of self-custody security. Galaxy noted that multisig wallets have emerged as the "winners" of this event, with no stolen transactions traced to multisig wallets so far. Multisig service providers including Casa, Unchained, Nunchuk, and Anchorwatch have all observed a notable increase in user registrations and BTC inflows.
According to monitoring by Odaily Seer Prophecy Channel, in the Polymarket prediction event for "2026 World Cup Group F Round 1: Sweden vs. Tunisia," a smart money address (0x8cb4ca5af7d9361322340bb307a828d288c91057) that has accumulated over $1 million in profit purchased more than $1.1 million on Sweden defeating Tunisia, with an average entry price of 51.7¢ and a position of 2,139,999.7 shares.The match between Sweden and Tunisia began today at 10:00. Sweden holds an advantage in overall strength and attacking power. The first half has concluded with Sweden leading Tunisia 2:1.Odaily Seer Prophecy Channel continues to monitor the prediction market, spotting changes before prices are set.
Euler Finance announced it will take over the maintenance and operation of the Euler contract stack known as Mewler under HypurrFi on the Hyperliquid EVM. The relevant infrastructure is undergoing a smooth transition, with Clearstar Labs continuing to serve as the risk manager for the Prime, Yield, and Earn vaults. HypurrFi Scale and Pooled Markets are scheduled to gradually wind down and undergo orderly liquidation over the coming weeks. However, all existing markets remain solvent and fully operational, with no security vulnerabilities or emergency parameter adjustments.During the migration process, new borrowing functionality for some Pooled assets has been frozen, but HYPE, USDC, and USDT0 can still be used for liquidity provision to allow borrowers to gradually unwind their positions. Euler emphasized that its isolated lending architecture on HyperEVM will continue to serve as core infrastructure, jointly maintained by Euler and Clearstar Labs.The HypurrFi team stated that user deposits, positions, and collateral assets remain fully secure. This adjustment is an active strategic migration, not a security incident or protocol failure. According to the plan, Euler Prime and Yield markets will become the primary entry points for lending and yield markets on HyperEVM moving forward. The HypurrFi brand will be gradually phased out, with related support services closing after May 28. Full market liquidation is expected to be completed by July 15, 2026.HypurrFi also reminded users to be aware of risks and fraudulent links during the migration process, to operate only through official channels, and to use the built-in migration tools to transfer Pooled positions to Euler Prime or Yield markets.