hub

The DeFi lending protocol Venus Protocol has launched the Liquidity Hub, aimed at establishing a unified capital allocation layer for the Venus ecosystem. Users only need to deposit one type of asset to receive the corresponding Hub Token. The Liquidity Hub will automatically seek better APY combinations based on different market yield opportunities and allocate funds to products such as Core, Flux, and Fixed-Rate Vaults, without requiring users to manually manage positions across multiple products.The Liquidity Hub is not a new lending market but a unified liquidity entry built on top of Venus's existing products. Capital allocation, rebalancing, and the flow of underlying assets are all recorded on-chain, maintaining openness, transparency, and verifiability. Currently, Liquidity Hub v1 has been deployed on the BNB Chain, and in the future, it will connect to more lending markets, institutional yield products, and new sources of yield.

Numa Lunah, co-founder of the crypto project Refi Hub, stated that he was hacked after installing a transcription application using a download link provided in the Claude chat window. The link pointed to a counterfeit website and bundled malware that attempted to steal all information from his device upon execution. Numa Lunah mentioned that he cleared and reinstalled the affected laptop and found no sensitive information leaked.Subsequently, he discovered a contaminated Claude Code skill file SKILL.md in his backup, which disguised itself as a style guide written by him and contained instructions to re-download the malware and steal credentials every time it was loaded. Microsoft Defender Experts had warned that attackers had shifted from search engine optimization poisoning to large language model response poisoning, with related tactics including recommending download links controlled by attackers, AI brand impersonation installers, and contaminated code libraries and proxy skills. Crypto industry practitioners may hold irrevocable credentials such as mnemonic phrases, private key files, hot wallet JSON, exchange API keys with withdrawal permissions, and deployer keys.

The Slow Fog security team recently disclosed the discovery of a malicious GitHub repository impersonating the "Qwen 3.8 27B local quantitative model." The repository claims that the model file should exceed 16GB, while the actual downloaded content is only about 487KB, containing disguised files, a LuaJIT interpreter, and obfuscated Lua scripts. Slow Fog emphasizes that the official Qwen project has not been compromised.Slow Fog's analysis indicates that after the malicious program runs, it will collect host information, capture the screen, and send it to the attacker's C2 server; when the hard-coded server fails, it will also read backup C2 addresses from contracts on the Polygon chain, allowing the attacker to rotate infrastructure through on-chain transactions.Subsequent payloads can steal browser login information, cookies, history, email, WinSCP, Steam credentials, as well as files and extension data related to cryptocurrency wallets. Slow Fog also found that at least 23 GitHub repositories and 29 similar compressed packages used the same Lua delivery chain.

EthHub founder Eric Conner stated that he has written a new ERC proposal, ERC-8391, aimed at providing an asset status interface for tokenized stocks and RWAs. Tokenized stocks can be traded on-chain around the clock, but the New York Stock Exchange is only open for 32.5 hours a week. Smart contracts find it difficult to distinguish whether outdated prices are due to the weekend market closure or due to price feed failures or a company being acquired during the market closure; both scenarios have the same on-chain bytes, but the correct responses are opposite. Information such as trading halts, price locks, and redemption windows cannot be reflected in the price.This standard will regulate the queryable issues of contracts, covering market phases, trading halts, valuation activity, and redemption windows. Oracles can feed data into it, and tokens will respond.

According to Fortune, cryptocurrency exchange Coinbase has chosen Abu Dhabi in the UAE as its "International Tokenization Hub," aiming to bring more traditional financial assets onto the blockchain. This move is seen as a significant advancement for Abu Dhabi in attracting global cryptocurrency and fintech companies.Coinbase plans to promote the tokenization of real-world assets (RWA) through this hub, leveraging Abu Dhabi's regulatory environment and policy support to expand its presence in the Middle East and international markets. In recent years, Abu Dhabi has continuously improved its digital asset regulatory framework, attracting multiple cryptocurrency institutions to settle there.

The GitHub official status page shows that the platform is currently experiencing service disruptions, with multiple core functionalities experiencing decreased availability.According to the latest announcement, the error rate for GitHub's web interface and API requests reached about 20%, while the error rate for repository archive downloads and raw repository content downloads was around 50%. Additionally, SAML and OIDC authentication, SCIM, and Team Sync functionalities are also affected.Currently affected services include: decreased performance of Pull Requests; decreased performance of Issues; decreased performance of Actions; decreased performance of Webhooks; anomalies in API Requests; decreased availability of GitHub Copilot.GitHub stated that the team is continuously investigating the root cause of this incident and will provide further updates once more information is available.As of now, GitHub has not disclosed the specific cause of the outage, nor has it indicated whether it involves a security incident. This service disruption may affect developers and enterprise users who rely on GitHub for code hosting, continuous integration and deployment, and AI-assisted development.

Coinbase posted on the X platform stating that the company has designated the Abu Dhabi Global Market (ADGM) as its international tokenization center. After obtaining the new FSRA license, the company can now offer global securities to any user with a wallet.Coinbase stated that the next frontier of global finance is the on-chain space, and the company is advancing related developments from the UAE.

According to Bloomberg, Thailand's True Internet Data Center is seeking approximately $2 billion in equivalent loans to build new data center facilities to help Thailand develop into a regional AI and cloud services hub.In terms of financing structure, the loan will be divided into three parts, with about $1.8 billion denominated in US dollars, and the other two parts denominated in Thai baht. Sources familiar with the matter requested anonymity as the details of the transaction have not yet been publicly disclosed.

Aave V4 has been deployed to the Avalanche network, marking the first multi-chain deployment of the Aave V4 Hub & Spoke architecture. This deployment includes a core liquidity hub and three sub-markets: the main market supports lending of assets such as WAVAX, BTC.b, USDC, USDT, and WETH.e; the AVAX-related market focuses on AVAX liquidity staking strategies, allowing users to deposit sAVAX with a 95% collateral rate and borrow WAVAX; the foreign exchange market supports mutual collateralization and lending among three stablecoins: EURC, USDC, and USDT.The core liquidity hub adopts a shared liquidity pool design, with all sub-markets sharing the same pool to avoid liquidity fragmentation. Aave stated that since its deployment on Avalanche in 2021, the historical cumulative inflow for V2 and V3 has exceeded $15 billion, and the current stablecoin utilization rate in the V3 market is over 90%.

According to an announcement from Qubic's official X account (@Qubic), a security incident occurred in the Qubic GitHub organization on July 13, where a compromised account accessed the code repository and extracted sensitive information. The official team has intervened to address the situation.The official team recommends that the following users take immediate action: Network Guardians should immediately rotate their seeds; Web wallet users who unlocked their wallets between 03:00 and 10:00 UTC on that day should migrate to a new identity; if unsure of the last unlock time, migration is also advised; developers should pause pulling or deploying code from the Qubic code repository until the official audit is confirmed to be completed.The official team stated that complete details and subsequent updates will be released on the official Discord channel, reminding users not to trust information from unofficial channels, and warning that no one should request user seeds for any reason. A post-incident report will be published after the situation is resolved.

According to monitoring by Catcher Predict, in the predicted market Polymarket for the event "Wimbledon ATP: Hubert Hurkacz vs. Jan-Lennard Struff," the option "Hubert Hurkacz" in the sub-market "Wimbledon ATP: Hubert Hurkacz vs. Jan-Lennard Struff" has experienced a sharp fluctuation in winning probability, dropping from 92.5% an hour ago to the current 76.5% (a fluctuation of 16%). Please note the impact of related breaking news.

According to The Wall Street Journal, blockchain public chain data analysis shows that Iranian entities have completed over $3.84 billion in transactions through the cryptocurrency exchange CoinEx to evade U.S. economic sanctions.Investigators have traced funds associated with two digital wallets controlled by the Central Bank of Iran, which are linked to the $1.5 billion stolen by North Korean hackers from the Bybit exchange. After flowing through a complex multi-layer transaction path, the related funds ultimately entered CoinEx, making it one of the core channels for Iran to bypass the sanctions system using cryptocurrency.

The Digital Renminbi International Operation Center announced that with the adjustment of the digital renminbi measurement framework and the overall upgrade of the infrastructure system, the three major business platforms of the digital renminbi cross-border digital payment platform, blockchain service platform, and digital asset platform have been upgraded to the "Shubi Da" cross-border settlement comprehensive service platform (Cross-border e-CNY Transfer Services, referred to as CBETS). Currently, service agreements for direct participants have been signed with the first batch of 26 financial institutions.

The Digital Renminbi International Operation Center officially signed service agreements with the first batch of 26 financial institutions in Shanghai, marking the official launch of the brand operation of the upgraded "Digital Currency Cross-Border Settlement Comprehensive Service Platform" (CBETS).It is reported that with the overall upgrade of the infrastructure architecture, the original three platforms for cross-border digital payment, blockchain services, and digital assets have been officially integrated into CBETS. This platform has outstanding advantages such as low access costs, high settlement efficiency, and strong compatibility: it technically supports both centralized and blockchain systems, and the message standards are compatible with ISO20022; the business scenarios not only support cross-border retail scenarios such as barcode payment and tap-to-pay but also comprehensively cover remittances, trade, and investment and financing settlement, as well as wholesale and financial innovation businesses.The first batch of 26 financial institutions includes overseas branches and subsidiaries of banks such as ICBC, ABC, BOC, CCB, Bank of Communications, Pudong Development Bank, and Guangfa Bank, as well as Standard Chartered China and Xinyin International. After the business goes live, its services will cover multiple countries and regions including Hong Kong, Macau, Singapore, Laos, Thailand, the UAE, Qatar, and Brazil, further leveraging digital technology to facilitate cross-border trade and investment financing.

In May 2026, the decentralized wallet imToken announced its strategic direction for the next decade on the occasion of its tenth anniversary, proposing to evolve from a "Trusted Main Wallet" to a "Personal Digital Hub," helping users control their assets, identity, permissions, and intelligent actions in an open and intelligent internet.imToken stated that in the past decade, the wallet primarily focused on Store, Send, and Stake services for users; facing the era of AI intelligence, the wallet needs to add a fourth core product proposition: Sign. Sign is no longer just about signing transactions, but rather the foundational interface for users to express intentions, grant permissions, set rules, delegate actions, and revoke authorizations.imToken Founder & CEO Ben He stated: "AI will make autonomous action increasingly abundant, but what will truly be scarce is control. In the next decade, imToken hopes to help users continue to control their digital world in the intelligent era."imToken also upgraded its brand proposition to: Your Digital World, Under Your Control.

According to the latest on-chain data, in May, the total market value of TRON stablecoins exceeded 90 billion USD, with a month-on-month growth of 3.63%; monthly revenue reached 32.23 million USD, with a month-on-month growth of 5.6%. Meanwhile, TRON's on-chain transfer data remains impressive, reflecting the vibrancy of the on-chain economy. In the face of massive stablecoin liquidity, an efficient lending and yield hub is becoming a necessity.According to the JUST weekly report data on June 2, the total TVL of the JUST ecosystem has reached 11.08 billion USD, accounting for over 40.25% of the market share in the TRON DeFi sector, continuously providing users with diversified services such as stablecoin savings, collateralized lending, and energy leasing. In addition, the JST buyback and burn mechanism is also operating steadily, injecting the protocol's real earnings into the governance token's deflationary flywheel, allowing the dividends of ecological growth to be genuinely returned to every holder.

SlowMist has issued a security alert, detecting an active npm supply chain attack targeting @redhat-cloud-services related packages. Currently, over 31 packages have been confirmed affected, with a weekly download volume of approximately 116,000 times, and stolen credentials exist in more than 300 GitHub repositories. This attack method is highly similar to the previous "Shai-Hulud" npm attack, including credential theft, creation of malicious repositories, and automated secret leakage. New suspicious repositories continue to emerge, indicating that the attack is still ongoing, and developers are still being continuously infected.Potential harms include: theft of GitHub/npm tokens, leakage of AWS/GCP/Azure cloud credentials, collection of SSH keys and Kubernetes secrets, leakage of local environment and wallet data, creation of malicious repositories and persistence operations, and even potentially destructive actions after tokens are revoked. It is recommended to immediately remove or downgrade affected @redhat-cloud-services package versions, conduct a comprehensive audit of CI/CD workflows and dependency installations, rotate all GitHub, npm, cloud service, SSH, and wallet-related keys, retain logs, and rebuild exposed developer machines or Runners from clean images while maintaining a high level of vigilance.