News linked to both this project and an event.
Odaily Planet Daily Report: Bitcoin hardware wallet manufacturer Coinkite disclosed in late July 2026 that a firmware build error introduced in March 2021 caused some Coldcard wallets to generate mnemonics from a smaller range, reducing the randomness of user private keys. Galaxy Research analysts stated that the Coldcard exploit occurred in multiple rounds, with observed Bitcoin losses rising from approximately $88 million to nearly $114 million within days. Researchers warned that other vulnerable addresses could still become targets, prompting many Coldcard users to move their Bitcoin. Coldcard is a Bitcoin-only wallet that supports offline signing via microSD card and optional QR codes. Launched in 2017, it has long been regarded as one of the security-focused Bitcoin hardware wallets.
Odaily News: Bitcoin wallet service provider Nunchuk has issued an important update regarding the recent Coldcard security incident, recommending that users with multisig wallets containing Coldcard-generated keys migrate their funds as soon as possible.Nunchuk has categorized response levels based on the number of affected Coldcard keys in a multisig wallet: if the number of Coldcard-generated keys has reached the signing threshold, attackers could theoretically transfer funds directly, and such users should migrate immediately; if the wallet contains only 1 Coldcard-generated key and it is below the signing threshold, a single compromised key cannot move funds independently, making the risk relatively lower, but migration is still strongly recommended. If users cannot confirm the exact number of Coldcard keys in their wallet, they should treat it as a high-risk situation.Additionally, Nunchuk announced that an upcoming mobile update will automatically enable the Slipstream channel for paid users. At that point, any auxiliary multisig wallet transaction containing at least one Coldcard key will bypass the public mempool and be submitted via Slipstream, reducing the risk of transaction monitoring and replacement. For users who wish to act immediately or for free-tier users, Nunchuk offers a manual migration option: users need to create a migration transaction, complete multisig signing without broadcasting, and then submit the raw transaction data to the Slipstream platform.
Alibaba Qwen's latest generation 2.4 trillion-parameter flagship model Qwen3.8-Max has officially launched on the B.AI platform. The model achieves comprehensive improvements in coding, real-world office scenarios, long-horizon tasks, and multimodal agents, and is now live on B.AI with a limited-time free trial. To celebrate the launch, B.AI offers multiple stacked benefits: New users logging in with Binance Wallet, Bitget Wallet, or imToken will immediately receive 1 million free Credits; Top-ups enjoy generous bonuses, with BNB Chain top-ups receiving a 1:1 bonus and other methods 1:0.5, up to a maximum extra $100 per user; Invite friends to register to get 300,000 Credits for them, stacking with the login bonus for a cumulative maximum of 1.3 million, while inviters simultaneously enjoy rebates from friends' top-ups and subscriptions. Limited-time benefits, first come, first served. Log in now at https://chat.b.ai/chat to experience the charm of the new-generation flagship.
According to Cointelegraph, Coinkite, the manufacturer of Coldcard hardware wallets, disclosed that its devices have contained a random number generator (RNG) vulnerability persisting for up to five years since March 2021. The vulnerability stemmed from a firmware upgrade that mistakenly routed wallet seed generation to a less secure MicroPython pseudo-random number generator (PRNG), rather than the originally designed true random number generator (TRNG). Since code reviews only verified the existence of TRNG code without confirming whether it was actually invoked, the vulnerability remained undetected for a long period. To date, over 4,500 addresses have been compromised, with nearly $90 million worth of Bitcoin stolen. Kraken Chief Security Officer Nick Percoco stated that this incident should serve as a "wake-up call" for the hardware wallet industry, calling for the introduction of independent third-party testing mechanisms to mandate verification of whether the entropy sources actually invoked by production firmware are certified. Coinkite has suspended all device shipments and destroyed affected inventory after confirming the vulnerability, and stated it will cooperate with law enforcement agencies across multiple countries to trace the responsible parties.
Odaily News: The U.S. Internal Revenue Service (IRS) issued a fraud alert on July 30, warning that scammers are mailing counterfeit IRS notices requiring cryptocurrency holders to register through a non-existent "Digital Asset Compliance Portal" before an urgent deadline. Each fraudulent letter contains a QR code that directs recipients to a website impersonating IRS.gov. The fake portal may request personal information, cryptocurrency wallet details, exchange login credentials, recovery phrases, private keys, or other data that could be used for theft. Cryptocurrency exchange Coinbase and cybersecurity firm Darktower traced the related infrastructure to a domain registered through a Hong Kong-based registrar shortly before the letters were distributed. Investigators found that the website is hosted in Romania, on a network previously associated with phishing pages impersonating financial institutions.
Odaily News: In response to the persistent attacks on Coldcard wallets, Binance co-founder CZ reposted on X platform stating that for self-custody wallets, developers fixing vulnerabilities cannot resolve the risks associated with previously generated wallets, and developers are unable to directly contact users of air-gapped devices.CZ stated that users' wallets may still be exposed to attack risks before any action is taken. He emphasized that he still supports the self-custody model, but self-custody means users need to bear more security responsibilities.
BNB Chain: Former Employee Used Original Test Wallet Without Authorization to Deploy Meme Tokens, Legal Proceedings Initiated
Odaily News Four.Meme has announced the launch of the Stock Meme feature. Projects launching tokens on Four.Meme can now choose bStocks US stock tokens as the trading liquidity pool. The first batch supports NVDAb (NVIDIA), with more US stock assets to be added gradually.This feature is jointly launched by Four.Meme, bStocks, and Binance Wallet with the support of the BNB Chain ecosystem, making it one of the first officially supported US stock liquidity pools on BNB Chain. Four.Meme will collaborate with bStocks to provide liquidity support for each bStocks pool on the platform. Additionally, select Stock Meme projects may be featured in the Binance Wallet US Stock Meme section.
Bitget Wallet announces that its crypto payment card, Bitget Wallet Card, has completed a major upgrade and will officially launch the "Assetback" mechanism on August 1, with the asset cashback rate simultaneously increased to 3%. This mechanism will be open to over 50 countries across Europe, Latin America, Africa, and the Asia-Pacific region. Cardholders can freely choose their preferred cashback assets, covering BTC, gold, tokenized US stocks (NVDA, TSLA, GOOGL, S&P 500), stablecoins, and more. The base asset cashback rate is 2%, while new users or users who reach the monthly spending threshold can unlock the 3% cashback tier. This upgrade breaks the traditional model where card swiping only returns cash/points, marking the transformation of Bitget Wallet Card services from consumption cashback to accumulation of appreciating assets. It turns daily consumption into an opportunity for RWA asset allocation, allowing users to achieve a new daily finance experience of "spend to build positions" without needing to open a brokerage account throughout the process or perform extra operations at checkout.
As the provider of bank account and card services for crypto wallets and payment card products such as SafePal and Bitget Wallet, Fiat24 stated that due to the growth in user base and trading volume outpacing the expansion of its risk management, compliance, and customer service capabilities, it has suspended crypto asset deposits and temporarily halted new user registrations starting July 14 to upgrade its internal control systems. Its international wire transfers, foreign exchange conversions, and P2P payments remain operational, while the resumption time for crypto asset deposits has not yet been announced.
data from Dune shows that the trading volume of the stock token rToken launched by Bitget has reached approximately $30 million in the past 24 hours, while the total trading volume of Ondo stock tokens across all CEXs and DEXs was about $25 million.Ondo is one of the earliest RWA protocols to venture into stock tokens. Its assets were previously listed on platforms such as Binance Wallet, Bitget, and Gate, with a peak daily trading volume reaching $620 million. However, as various trading platforms have begun launching their own stock tokens, Ondo's overall trading volume has experienced a significant decline compared to the beginning of the year.
that, according to official sources, the Binance wallet has listed perpetual contract trading for CXMT, supporting up to 20x leverage.
according to official sources, OKX, in collaboration with Elliptic, SlowMist, and OttoSec, has released the "H1 2026 Web3 Security and Risk Control Report." The report indicates that the focus of Web3 attacks is shifting from smart contract code to more complex scenarios such as signature processes, user devices, operational infrastructure, and AI Agents.Data shows that in the first half of 2026, OKX's risk control system intercepted over 5.7 million high-risk transactions, including approximately 2.41 million related to hacking and theft, about 1.48 million phishing-related transactions, and roughly 990,000 fraud-related transactions. OKX Web3's on-chain intelligence label library now boasts over 1.1 billion labels, covering more than 420 chains. It has also integrated capabilities such as address screening, transaction monitoring, and sanctioned address control into infrastructure like DEX and Exchange OS.Furthermore, in terms of user protection, OKX has intercepted over 7 million risky website visits, completed more than 200,000 device risk detections, identified over 60,000 high-risk Apps, and blocked or alerted on over 4 million high-risk signature operations. The report also introduces the "proactive risk control" design in scenarios such as Exchange OS, Outcomes, RWA, and Agentic Wallet.
Odaily news, Samsung announced at the 2026 Galaxy Unpacked event that Samsung Wallet will support stablecoins, expanding from cash and savings to include new digital value forms such as stablecoins. A demo screen showed the wallet app holding Circle’s USDC, but Samsung did not mention USDC or USDT as partners for the initiative. Samsung product manager Lee Dinham stated that Samsung Wallet will become the financial ecosystem foundation connecting Galaxy devices and services, integrating payments, rewards, and digital assets into a single experience. Samsung also unveiled its first credit card, the Samsung Galaxy Card, offering users 5% cash back on eligible spending at brand stores and other qualifying merchants. Samsung previously introduced an embedded cryptocurrency wallet in the 2019 Galaxy S10 series, adopting a hardware-supported security solution. In October of this year, Samsung announced the integration of Coinbase's subscription service, Coinbase One, into Samsung Wallet in the US.
crypto payment platform MoonPay has announced the launch of Paybox, an AI shopping wallet that integrates with ChatGPT and Claude. This enables AI assistants not only to search for products and compare prices but also to directly complete transactions such as making payments, booking restaurants, purchasing flight tickets, and shopping on Amazon.According to reports, Paybox requires no coding or additional software installation. Users can top up their wallet via bank accounts or crypto assets, and can set risk control rules such as spending limits and payment confirmations. MoonPay stated that Paybox is built on the open x402 protocol, adopts a decentralized design, does not rely on platform permissions, and can support any compatible merchant and service. (Fortune)
According to Digital Asset, Samsung Electronics stated that Samsung Wallet will support new forms of digital value, including stablecoins, in the future, with plans to integrate payments, rewards, and digital assets into a unified experience, further expanding its financial service capabilities within the Galaxy ecosystem.
Cardano ecosystem wallet SecondFi announced that due to a cryptographic defect in its wallet software, approximately 16.1 million ADA (worth around $2.6 million) were stolen. The platform will gradually shut down the SecondFi and Yoroi wallet services. This incident has affected 374 wallets. SecondFi stated that an independent investigation by blockchain intelligence agency Groom Lake identified the attackers as a sophisticated external actor and found indicators potentially linked to North Korea's Lazarus Group, though attribution has not yet been confirmed. SecondFi is developing a recovery tool based on zero-knowledge proofs to help affected users recover assets while limiting the information that needs to be shared. The tool is still being tested and will undergo third-party audits before its planned release in August. SecondFi is also preparing a wallet export feature to allow users to migrate their assets to other services. The platform has not announced a direct compensation plan, nor has it indicated whether it will use its own funds to compensate users.
Odaily Odaily Telegram founder Pavel Durov posted on his personal channel that this summer will see the "largest non-custodial crypto wallet deployment in human history." Telegram plans to integrate the native non-custodial Gram wallet into all its applications. Pavel Durov stated that the wallet will provide over 1 billion Telegram users with instant, zero-fee cryptocurrency transaction experiences, further popularizing on-chain payments. He said, "We are bringing the native non-custodial Gram wallet into every Telegram application."
according to official sources, OKX Wallet has now launched "Social Login," allowing users to create a wallet in seconds using their email, Apple, or Google accounts, without the need to record or back up a seed phrase throughout the process. Wallets created via social login remain self-custodial; the seed phrase and private key will be generated, stored, and used for signing within a TEE (Trusted Execution Environment). OKX cannot access or export the user's private key, ensuring users always maintain control over their assets. Users can export their private key or convert to a standard seed phrase wallet at any time.It is reported that OKX Wallet's "Social Login" adopts a unified account system. One account can seamlessly connect across the App, browser extension, web platform, and Agent, automatically restoring the same wallet upon login. The initial launch supports 19 chains, including X Layer, Solana, among others, and natively supports trading scenarios such as Swap, cross-chain transactions, limit orders, copy trading, and RWA.
according to Zilliqa's monitoring, it has learned of a security incident involving a CEX partner, where some ZIL has been stolen from a cold wallet. The incident is currently under investigation, and the team is working with relevant parties to determine the root cause and the scope of the impact. As a precautionary measure, Zilliqa has notified all CEX partners to temporarily suspend ZIL deposits and withdrawals to prevent the stolen funds from being transferred or sold through centralized platforms. The official stated that further updates will be released after verifying the information and reminded the community to only follow information published through official channels.