idg

KelpDAO stated on platform X that it has filed a lawsuit against LayerZero and its co-founder Bryan Pellegrino, seeking accountability for the rsETH cross-chain bridge attack incident that occurred earlier this year. The lawsuit claims that LayerZero failed to adequately disclose its inherent technical weaknesses and risks; failed to prevent its security infrastructure from being compromised; and that LayerZero had previously reviewed and approved Kelp's deployment and configuration in writing.Officials stated that LayerZero has publicly attributed responsibility to itself in recent months. Since the occurrence of the attack, the team has taken action to ensure the safety of user assets, including migrating the rsETH cross-chain bridge to a more secure cross-chain standard.LayerZero co-founder and CEO Bryan Pellegrino tweeted that KelpDAO's related claims lack basis and that he will respond and defend in Vancouver.Previously, LayerZero released an incident report indicating that on April 18, 2026, the KelpDAO rsETH cross-chain bridge built on LayerZero was attacked, resulting in a loss of approximately 116,500 rsETH, valued at around $292 million.

According to the Financial Times, Saudi Arabia has withdrawn from the digital currency project led by Beijing, which is part of China's efforts to develop an alternative cross-border payment system to the US dollar.The mBridge platform has sparked controversy in the United States, with concerns that participants may use it to bypass traditional dollar-dominated payment systems like Swift. The platform is set to be commercially launched, utilizing blockchain technology to enable central banks to directly transact using their respective digital currencies, reducing foreign exchange transaction times and costs, and diminishing the role of the dollar as an intermediary currency.

Gravity Chain Official Announcement: It has been observed that the G token has significant price discrepancies between various trading platforms, with the price difference between certain platforms remaining above 30% for several hours and once exceeding 40%. This is mainly related to the fragmentation of liquidity and bridging limitations between the Gravity Alpha mainnet and Ethereum.The official team is actively developing solutions to enable users to quickly and safely bridge assets from the Gravity Alpha mainnet to Ethereum, and further updates will be shared later. According to market information, the G token is currently priced at $0.013 on the Binance platform, $0.008 on the OKX platform, approximately $0.0037 on the Gravity Alpha mainnet, and approximately $0.012 on the Ethereum mainnet.

SEC Chairman Paul Atkins issued a statement regarding the committee's approval of the "innovation exemption." He pointed out that more than a week ago, Congress failed to advance the CLARITY Act, thus the SEC today took significant steps within its statutory authority to bring the U.S. capital markets into the digital age by promoting on-chain trading of specific tokenized stocks.The order grants two types of temporary, conditional exemptions under Section 36(a)(1) of the Securities Exchange Act: first, it exempts "Tokenized Securities Venues" (TSV) from the definition of "exchange" under the Securities Exchange Act; second, it exempts specific liquidity providers ("regulated companies") from the definition of "dealer." Atkins emphasized that the anti-fraud and anti-manipulation provisions of federal securities laws fully apply to all securities activities in these markets, without exception.The exemption comes with several investor protection conditions: TSV must be U.S. entities and comply with OFAC sanctions; access standards must be set for a licensing system, allowing only specific participants to trade; synthetic products cannot be used—tokenized NMS "national market system" stocks must be tokenized by the issuer of the underlying stock or its representative, or by a third party not affiliated with the issuer, and holders must enjoy the same rights as traditional securities (including dividends and voting rights); issuers have the right to oppose and prevent their securities from being traded on TSV.Atkins stated that the committee is not solidifying current technology as future standards but rather allowing the market to evolve, monitoring its development, and using this as a basis to establish a more flexible, future-oriented regulatory framework. This exemption is a temporary measure, and the committee is seeking public input on all aspects, emphasizing that this transitional arrangement must be followed by the establishment of permanent rules to ensure that on-chain markets maintain a viable path as capital markets evolve.

Superseed officially announced that its Superseed L2 chain is shutting down, and the window for bridging back to Ethereum has now closed. The team has taken a snapshot of the final network state at block 31,688,848.Wallets holding 10,000 or more SUPR that have not yet completed the bridging will be able to claim SUPR in the claim portal that will go live in the coming weeks. Superseed stated that the first phase of its new application has launched on Ethereum, with more products to be released in the future.

The managed cross-chain bridge Long released a post-mortem report on the WETH hacking incident on September 14. On that day at 07:07 UTC, the bridge paid 46.7928 WETH (approximately $118,000) to the attacker's address from the Robinhood Chain treasury. There were no user fund losses, and the treasury has been fully replenished from platform revenue. The bridge has been rebuilt, reinforced, and continues to operate. During the recovery period, some orders were delayed by several hours.The bridge's keeper read the burn events on Arc via RPC to release assets. At that time, the official mainnet endpoint was not online, relying on public RPC. After the backup endpoint was overloaded, the main endpoint provided the keeper with forged withdrawal event logs within a short window, which did not exist on Arc. The keeper's protection at that time was against replay and double spending, and did not question the data source, thus releasing the WETH. Meanwhile, three other forged withdrawals were completely reverted on-chain. The forged events entered through the RPC channel, and the contract, keys, and treasury were not breached.

According to Cointelegraph, the cross-chain liquidity protocol Symbiosis announced that it has recovered 15 BTC (approximately $1.1 million) from its Bitcoin bridge vulnerability and deposited it into a multi-signature wallet controlled by the team. The vulnerability occurred last Friday, where the attacker exploited the protocol's flaw to mint 46.1 billion uncollateralized tokens, resulting in a profit of 4.3 WBTC (approximately $336,000).Symbiosis had previously offered a 20% white hat bounty to the attacker for the return of the assets, but the deadline has passed, and the attacker has not responded. The protocol is now offering a 20% bounty to anyone who can provide clues to help recover the assets, while also promising to announce a compensation plan for affected liquidity providers. The affected Bitcoin bridging function remains suspended.

Samsung Electro-Mechanics and Qualcomm are jointly developing organic bridge technology for 2.1D packaging, with related development and validation ongoing for over a year. The organic bridge is similar to the silicon bridge used in Intel's EMIB but is made with organic materials and produced using substrate processes to connect multiple semiconductor chips within the same package.Samsung Electro-Mechanics embeds the organic bridge in FC-BGA substrates with grooves, connecting Qualcomm chips and evaluating performance and reliability. Qualcomm is considering using it for large multi-chip semiconductors in data centers and applied for related patents in October 2024. Samsung Electro-Mechanics is also developing this technology in parallel with several other customers.The organic bridge aims for 5 to 7 layers of redistribution layers, with line widths and spacings of 1.5 to 2 microns, and vias of 4 to 5 microns, achieving a pattern density of 500 to 1000 per millimeter between chips. Samsung Electro-Mechanics is self-manufacturing and evaluating samples while also assessing external suppliers and collaborating with Samsung Electronics' wafer foundry for packaging evaluations.

The on-chain security platform Blockaid discovered a vulnerability in the Bitcoin bridge of the cross-chain protocol Symbiosis, where attackers minted approximately 2^62 syBTC to a newly created externally owned account, valued at about 46.1 billion dollars when calculated to 8 decimal places, and sold about 4.39 WBTC on Uniswap V4 on Ethereum, realizing a cash-out of approximately 336,000 dollars.Symbiosis stated that the attack occurred around 4:28 AM on September 11, and the team has suspended the BTC routing, while other routings remain operational and unaffected. The team has recovered about 15 Bitcoins and deposited them into a multi-signature wallet controlled by the team, while offering a 20% white hat bounty on the funds to the attackers, with a deadline of September 13.In recent weeks, Liquid Network, Nomic, and Symbiosis have all experienced security incidents involving the expansion of supply by minting tokens without real asset backing. As of September 13, Symbiosis has not publicly disclosed a technical review of BridgeV2, the final loss amount, or confirmation on whether the attackers accepted the bounty.

The cross-chain liquidity protocol Symbiosis announced that it has encountered a security incident. Around September 11, 2026, at 04:28 UTC, attackers exploited a vulnerability in the Bitcoin bridge to carry out the attack. The BTC route has been suspended, while other routes are still operating normally.The official statement indicated that only the Bitcoin bridge was affected and has been isolated from other systems. The remaining routes, including EVM chains, TRON, TON, and components like Octopools, were not impacted. The team has recovered approximately 15 BTC, which is stored in a multi-signature wallet controlled by the team. The official has offered a white hat bounty to the attackers, amounting to 20% of the funds, valid until September 13, 2026; thereafter, an equivalent proportion will be offered to informants who can assist in recovering the funds.The final loss assessment is still ongoing, and confirmation data will be released later. The official is contacting affected liquidity providers one by one and developing a compensation framework. The relay group is still operational and ensuring network security.

Osmosis posted on platform X that due to a security incident with the Nomic nBTC cross-chain bridge, Osmosis has suspended the minting and redemption of BTC Alloyed assets, and deposits and withdrawals have been simultaneously suspended.The BTC on Osmosis is backed by 30% nBTC. The team will soon release a complete post-mortem analysis and recovery plan. BTC in the pool is still tradable, and users are reminded to be aware of the risks.

The Federal Bureau of Investigation (FBI) tracked and seized over $560,000 in cryptocurrency originally intended for Hamas by combining blockchain analysis, human intelligence, and court orders. The investigation involved shared wallets, cross-chain bridges, exchanges, and stablecoin accounts. Three seizure operations occurred in March, June, and October 2025.Investigators found that multiple donation addresses associated with Hamas's military wing, Al Qassam Brigades, used the same Gas wallet to pay transaction fees, and visualized funds flowing from donation wallets to operational wallets and related infrastructure through Reactor. In the June 2025 case, funds circulated through new addresses, accounts, over-the-counter brokers, and suspected money mule accounts; in October, the network switched to one-time donation wallets and cross-chain bridges. Court orders required Tether to destroy USDT from specified addresses and to reissue equivalent assets to law enforcement wallets, while Binance was instructed to transfer the balances of three accounts.

Gate, the global cryptocurrency exchange, has launched the Gate Card, a Visa prepaid card product, in collaboration with Bridge and Stripe, significantly reducing the implementation period to about 6 months, compared to the over one year estimated by traditional banking partners.The Gate Card is issued by Lead Bank and allows users to top up with stablecoins and spend on the global Visa network. The card can be added to Apple Pay and Google Wallet. Previously, Gate had launched card products in overseas markets, but faced complexities related to compliance and multi-party coordination in the U.S. market.Gate US COO Laura Lui stated, "Bridge serves as a critical coordinating layer among different participants, allowing Gate US to focus on customers, product experience, and overall business strategy." Gate US views the Gate Card as an early step in a broader stablecoin payment strategy, with potential plans to issue its own stablecoin in the U.S. through Bridge's stablecoin platform in the future.

The Hong Kong Securities and Futures Commission has listed Star Bridge Capital, Star Bridge Capital Group, SBCFX, Star Bridge Capital Group, Star Bridge Capital Pty Limited, and Topical Wealth International Ltd as unlicensed companies, prohibiting them from engaging in any regulated activities in Hong Kong or actively promoting their services to the public in Hong Kong (whether within or outside Hong Kong).Previously, it was reported that Star Bridge Capital experienced an abnormal liquidation incident in London gold trading, and after the incident, the Hong Kong office of the platform was empty. Due to some funds being deposited through USDT stablecoin, tracking the funds has become more difficult. The Hong Kong police have accepted the case and temporarily classified it as fraud, but no arrests have been made yet.

The blockchain gaming platform The Sandbox stated that it will compensate users who held bridged SAND on Base or BNB Smart Chain at a 1:1 ratio before the bridge vulnerability attack, with compensation provided in Ethereum-based SAND from the project treasury, and there will be no token issuance. This attack resulted in the theft of approximately 14.744 million SAND from the Ethereum treasury, valued at about $700,000.The application process is expected to open within two weeks and will last for two weeks; over 72% of the balances held by two centralized exchanges that meet the compensation criteria will be directly compensated to affected customers. The Sandbox indicated that the attacker exploited a configuration vulnerability in the SAND contracts on Base and BNB Chain, becoming the sole validator of bridge messages and minting unbacked tokens. Additionally, over 339 trillion unbacked SAND was minted on the two networks but has been isolated and cannot be cross-chain or exchanged; SAND on Ethereum and Polygon remains unaffected, and the compromised bridge contracts will be permanently disabled.

The blockchain network BNB Chain has enabled the Pasteur hard fork on the BNB Smart Chain (BSC) mainnet. The upgrade involves cross-chain bridge validation, validator authorization, staking, and governance security, while enhancing block capacity without changing the 450 milliseconds block time.This upgrade includes BEP-682, BEP-695, and BEP-675, which respectively involve duplicate validator entries, validator key rotation and penalty governance, and block submission processes. In the internal testing environment QANet, the new process increased throughput from 1,237 transactions per second to 2,324 transactions per second, but the related data comes from controlled tests and not mainnet measurement results.

According to Reuters, Xiaopeng Group's humanoid robot business has signed equity financing agreements with multiple investors, raising over $900 million, with a post-investment valuation exceeding $6.3 billion, setting a record for single-round private equity financing in China's embodied intelligence industry.This round of financing was led by IDG Capital, with participation from Gao Rong Capital, and received support from two strategic investors, Tencent and Alibaba. The funds raised in this round will primarily be used for software and hardware research and development of Xiaopeng's robot business, physical AI model training and iteration, high-quality data collection, construction of a full-chain mass production base, and global commercialization expansion.

According to Caixin, the Hong Kong police responded to the abnormal liquidation case of Star Bridge Capital's gold trading, stating that multiple reports have been received, with the reported amount of funds that could not be retrieved totaling approximately HKD 6.63 million. After investigation, the case is temporarily classified as fraud and has been handed over to the third team of the Central District Criminal Investigation Unit for follow-up, with no arrests made yet.According to information obtained by the affected investors in this case, as of 1:50 PM, the number of people who have reported to the Hong Kong police (and have obtained a report number) is approximately 180.

The Slow Mist security team disclosed that the cross-chain bridge project Allbridge was attacked on August 19, 2026, resulting in a loss of approximately $190,000. Notably, this attack was not executed instantly; the attacker had begun laying the groundwork nearly a month prior and bypassed the verification mechanism by forging cross-chain messages. According to Slow Mist's analysis, on July 26, the attacker directly called Circle's MessageTransmitterV2.sendMessage function on the Polygon chain, constructing a cross-chain message disguised as a CCTP style message, claiming that a transfer of 1 million USDC existed, but in reality, no USDC destruction operation took place. Subsequently, Circle generated a valid verification proof (attestation) for this complete message according to normal procedures.About 24 days later, on August 19, the attacker waited for the Base Router to receive a real CCTP deposit, increasing the balance to approximately 191,000 USDC, and initiated the attack just 6 seconds later. The attacker utilized the previously forged message and verification proof to call Allbridge's receiveCctpMessage function. Due to the project's lack of critical verification, the system mistakenly recognized the false cross-chain message as a real deposit and recorded a limit of 1 million USDC. The attacker then temporarily borrowed approximately 809,000 USDC through an Aave flash loan, matching the Router balance with the forged amount, and used the internal credit record to call the transfer function, ultimately transferring out approximately 999,000 USDC (after a 0.1% fee). After repaying the flash loan and fees, the attacker netted a profit of about $189,800. The root cause of this vulnerability lies in Allbridge's failure to verify the identities of the sender and receiver of the cross-chain message, as well as not confirming whether USDC was genuinely minted and whether the balance actually increased, instead directly trusting the amounts and message hash data constructed by the attacker. Slow Mist emphasizes that on-chain message verification does not equate to the actual arrival of real assets. Cross-chain protocols not only need to verify the authenticity of messages but must also ensure that the message source is trustworthy, that the receiver is Circle's official TokenMessengerV2, and that asset accounting can only proceed after confirming the actual minting of assets and changes in balance. This incident once again highlights the security risks of cross-chain bridges in the message verification and asset settlement processes.

The metaverse gaming platform The Sandbox confirmed that there is a vulnerability in its cross-chain bridge, allowing attackers to mint uncollateralized SAND on Base and BNB Smart Chain. Blockchain security company PeckShield discovered on August 21 that two addresses had collectively minted approximately 1.49 billion SAND, prompting The Sandbox to shut down the bridging functions for both networks.The Sandbox stated that the affected assets are those bridged on Base and BNB Smart Chain, while SAND on Ethereum and Polygon, user wallet assets, and Ethereum locked assets used to support the tokens remain unaffected. The incident involved a proportion of real collateralized assets that is less than 0.01% of the total supply of SAND. The Sandbox is formulating a compensation plan for the affected liquidity providers and advises users not to trade SAND on Base or BNB Smart Chain until the bridging function is restored.Coinbase plans to delist 10 perpetual futures contracts, including SAND, on August 26, at which time any open positions will be automatically settled.