News linked to both this project and an event.
Odaily News, according to official sources, the new X Liquidity campaign under OKX Wallet Boost has gone live. Users can participate through the Boost entry point in OKX Wallet by providing liquidity to eligible trading pairs. In addition to earning LP yields, participants can share in a total incentive pool of approximately $240,000 in USDT. The campaign will run until September 24, 15:00 (UTC+8).It is reported that X Liquidity serves as the entry point for liquidity incentive and staking campaigns on X Layer, aimed at enhancing on-chain liquidity and trading experience for RWA, stablecoins, and major crypto assets. This campaign is part of X Layer's $5 million liquidity incentive program.
Odaily News, Vitalik posted on the X platform stating that he recently updated the EIP-8141 "Frame Transaction" proposal. Key improvements include atomic batch execution of up to 64 operations, support for social recovery, adoption of P256 quantum-resistant signatures, and allowing anyone to pay gas fees on behalf of users. The proposal was co-authored by 10 experts including Vitalik and lightclient, and has been planned for inclusion in the 2027 Hegotá upgrade.
Odaily News, According to a disclosure by the SlowMist security team, they have detected an attack campaign disguised as a free VPS service, specifically targeting iPhone Safari browsers running iOS versions 18.4 to 18.6.2. The attackers exploited a chain of six vulnerabilities codenamed DarkSword to form a complete attack sequence, covering WebKit remote code execution, sandbox escape, and kernel read/write operations. This allows them to access app container files and keychain data without user awareness, and record keyboard inputs while wallets such as imToken, TokenPocket, or TronLink are in the foreground.The SlowMist team stated that all six aforementioned vulnerabilities have been patched by Apple, and the current attack constitutes reuse of an n-day vulnerability chain. Merely visiting a malicious page does not directly prove that mnemonic phrases or private keys have been stolen, and device forensics is still required for confirmation. iOS/iPadOS users are advised to upgrade their systems to version 18.7.3 or 26.3 and above as soon as possible.
According to an official tweet from Binance Wallet, Binance Alpha 1.0 added three new tokens on September 4, 2026: Cash Cat (CASHCAT), UP (UP), and Artificial Inu (AI), exclusively accessible to Binance Wallet users.
Binance Wallet stated that Binance Alpha 2.0 will support the contract swap of TAC (TAC) on BNB Smart Chain (BEP20). Trading of TAC will be temporarily suspended from 02:00 (UTC) on September 4, 2026, for a 1:1 contract swap. TAC trading is expected to resume at 08:00 (UTC) on September 4, 2026.
According to The Block, Robinhood Wallet and Fomo users can purchase select memecoins using credit cards via Apple Pay or Google Pay without completing a separate identity verification process. Testing shows that these transactions are powered by crypto infrastructure company Crossmint and are classified under the "digital goods media" category rather than as cryptocurrency purchases, thereby qualifying for standard credit card points or cashback rewards.
According to security firm Huntress, hackers are distributing credential-stealing malware to cryptocurrency users through forged Google Docs files, malicious files hosted on GitHub, and cloned Claude.ai pages. Attackers impersonate senior CoinDesk employees on the social platform X, luring victims into opening Google Docs documents containing malicious code under the guise of an online meeting invitation, which then prompts users to manually install the malicious software. Mac users face threats from Atomic macOS Stealer (AMOS), which can steal browser passwords, cryptocurrency wallet data, and Telegram files; Windows users are served fake Google API Connector updates that, once installed, deploy NetSupport RAT and counterfeit Ledger hardware wallet applications. Additionally, hackers have placed fraudulent ads on search engines like Bing to lure users to cloned Claude.ai pages where they execute malicious commands; the associated malware, MacSync and SectopRAT, can steal cookies, saved passwords, mnemonic phrases, and payment card information. Security firm Socket also concurrently identified 16 malicious extensions targeting Chrome and Edge, capable of draining EVM, Solana, and Tron wallet assets.
Odaily News According to official sources, Aave governance proposal AIP-514 has been officially approved, and Pendle PT-USDG is now a supported collateral asset for Aave V3 on X Layer, further bridging Pendle's fixed-income market with the Aave lending protocol.It has been reported that OKX Wallet has simultaneously launched a limited-time incentive campaign for PT-USDG. Users can participate through the DeFi section in a one-stop manner, earning up to 6.8% APY. With PT-USDG integrated into Aave, it will further enrich stablecoin yield and lending scenarios on X Layer.
Odaily News, According to monitoring by HyperliquidNews, an on-chain data monitoring page for a certain address has been released.
According to Decrypt, privacy-focused Bitcoin wallet Sparrow Wallet released version 2.5.4 on August 28. Developer Craig Raw stated that the update was driven by an AI-assisted code review, with the majority of fixes originating from it. This review was prompted by the recent seed generation code vulnerability exploit affecting Coldcard, as well as the release of unrestricted AI models in China, which has significantly enhanced vulnerability scanning capabilities across large codebases. Key updates include: validating the authenticity of transactions returned by Electrum servers, enforcing stricter BitBox02 hardware wallet security requirements (firmware v9.4.0 or higher required), patching local DNS leaks, and masking sensitive credentials in debug logs. Raw noted that there are no indications of any exploits being leveraged, user funds remain secure, and he still advises all users to update at their earliest convenience.
Odaily News: Sparrow Wallet v2.5.4 has been released following an extensive AI-assisted review, featuring multiple security hardening updates aimed at reducing users' reliance on external servers such as Electrum.Additionally, this version strengthens Ledger, Keycard, Trezor, Payjoin, PSBT, and multi-signature handling, removes Bitcoin Core credentials and other sensitive information from debug logs, restricts permissions for existing wallet and backup directories to owner-only access, closes residual local DNS resolution leaks when using Tor, and reinforces validation for wallet import, signing, downloads, and server responses. The update expands Sparrow Wallet's scope of independent verification for transaction data, hardware devices, and other inputs, reducing dependence on data provided by external servers. (Bitcoin News)
Odaily News - The U.S. Internal Revenue Service (IRS) has issued a warning about an advanced email phishing campaign targeting cryptocurrency holders in the United States. Attackers are using forged official tax letters to trick users into scanning malicious QR codes, aiming to steal crypto wallet credentials and private keys.According to reports, the attackers are impersonating the IRS by sending physical letters that create a sense of urgency under the guise of "tax compliance" or "account verification," and include QR codes within the correspondence. Once users scan these codes, they may be redirected to counterfeit websites, potentially exposing wallet login information, recovery phrases, or private keys, ultimately leading to the theft of digital assets.The IRS reminds taxpayers that official agencies will never request users to provide crypto wallet private keys, recovery phrases, or perform similar "wallet verification" procedures through unofficial channels. Cryptocurrency holders should remain vigilant against any suspicious emails or letters that ask them to scan QR codes, connect wallets, or submit sensitive information.As the number of crypto asset holders continues to grow, social engineering attacks targeting digital wallets are on the rise. Regulatory and security agencies are stepping up efforts to raise awareness and prevent such fraudulent activities. (CoinDesk)
Binance has launched the Agent OS developer platform, designed to connect AI applications to its trading, market data, wallet, payment, and on-chain features. The platform integrates the Binance API, Binance Wallet Agent Center, the programmable payment tool Binance x402, and Skill Hub, while supporting the Model Context Protocol. Users can authorize agents to access market data, view account information, and execute restricted transactions through compatible tools.
Odaily News Figure Co-founder and Executive Chairman Mike Cagney announced that the company will launch a mobile application called The Wallet Co, designed to combine the ease of modern fintech with self-custody and blockchain-native products.The Wallet Co will offer features such as instantly spendable interest-bearing cash, RWA yields, and securities prediction markets, with an AI Agent built into every wallet.Additionally, The Wallet Co is publicly hiring for operations and compliance lead roles, requiring relevant experience in KYC/AML, payments, and fund flows.
As disclosed by security researcher V12 (@v12sec), the Rabby Wallet browser extension contains a silent signature extraction vulnerability that allows attackers to extract wallet signatures via malicious websites without user awareness, thereby draining wallet assets. The conditions required to trigger this vulnerability are extremely limited: users must simultaneously meet two conditions—connecting to a malicious website and manually setting the auto-lock timer to 10 minutes. Other timer settings are unaffected, and the mobile app is also unaffected. Rabby Wallet officially stated that a fix update was released on August 11 following the vulnerability's discovery. No actual exploitation cases have been detected so far. Users are advised to confirm as soon as possible that the extension has been updated to the latest version.
Odaily News: Cryptocurrency platform Bitcoin.com has announced the integration of USDU into its self-custody Bitcoin.com Wallet, serving millions of wallet users. USDU, issued by Universal Digital Intl Limited (Universal), is the first USD stablecoin registered as a foreign payment token by the Central Bank of the UAE (CBUAE). USDU is an Ethereum ERC-20 token, with each token backed 1:1 by liquid USD reserves held by regulated banks in the UAE. The reserves are independently attested monthly by a third-party accounting firm, with reports published on Universal's official website. Bitcoin.com Wallet's web and mobile versions will support self-custody holding, sending, and receiving of USDU. Bitcoin.com will accept USDU as payment for designated services and plans to enable its use for payments between users and merchants within its products. The wallet will also offer stablecoin education and Learn-to-Earn content. Exchange and buy/sell functionalities will be launched after support from third-party service providers, with availability varying by jurisdiction. (Bitcoin.com News)
Odaily News: Payment app Cash App is expanding its cryptocurrency services through crypto payment platform MoonPay, allowing 50 million users to purchase tokens such as ETH, SOL, XRP, and USDT. Additionally, users can top up major wallets like Ledger, BitPay, Trust Wallet, MetaMask, and Uniswap through Cash App. Previously, Cash App's crypto services only supported Bitcoin, with USDC support added earlier this year. (CoinDesk)
Odaily News - Bitcoin News announced on the X platform that BitBox has disclosed two severe hardware wallet vulnerabilities, stating there is currently no evidence that these vulnerabilities have been exploited or led to user fund theft. All disclosed issues have been fixed in firmware v9.26.5, and BitBox urges all users to update immediately. An internal security audit uncovered two severe vulnerabilities, along with new details regarding a previously fixed bootloader vulnerability. One vulnerability affecting BitBox Multi devices could allow a malicious host to execute arbitrary code and install malicious firmware on devices that have not yet completed setup. Another vulnerability in Silent Payments could allow an attacker to exploit a malicious host device to redirect funds to unintended addresses, resulting in Bitcoin being locked and potentially enabling extortion attacks. BitBox also disclosed that the previously fixed bootloader vulnerability could allow attackers to trick users into installing malicious firmware capable of stealing funds.
Odaily News: Crypto wallet service provider SafePal recently issued a security announcement stating that the company discovered a vulnerability in its order tracking plugin, which led to unauthorized access to certain customer information.SafePal stated that the incident affects approximately 39,798 users, involving customers who placed orders between March 2, 2025, and April 11, 2026. The leaked information includes names, email addresses, shipping addresses, phone numbers, and order-related data such as purchase records.The company emphasized that the incident did not involve users' wallet security data, including seed phrases, private keys, wallet passwords, other wallet credentials, bank account information, payment card numbers, and government-issued identification documents, all of which remain unaffected.SafePal stated that the relevant vulnerability has now been fixed, and additional security measures have been implemented to strengthen the order system's protection. Affected users have received individual notifications via email. Users can also check whether they have been affected through the official page by entering their order number and shipping country.SafePal reminds users to remain vigilant, not to disclose seed phrases, private keys, or passwords to anyone, and to be cautious of phishing emails or fraudulent activities such as impersonated customer service that may arise in connection with this incident.
Odaily News, DefiLlama founder 0xngmi, of the crypto data analytics platform, stated that the team spent months asking Apple to remove phishing apps impersonating DefiLlama from the App Store, which delayed the mobile app's launch until all such counterfeit apps had been removed. 0xngmi noted that after the team downloaded one of the malicious apps and documented a small crypto wallet being stolen, Apple removed it within days. In 2024, the App Store also saw counterfeit apps impersonating Rabby Wallet and Curve Finance; in November 2023, a fake Ledger Live app on the Microsoft Store siphoned off $588,000 across 38 transactions. (Cointelegraph)