infi

DeFi yield protocol infiniFi announced the token economics of its native token INFI and announced an upcoming Token Generation Event (TGE).According to the allocation plan, 45% is allocated to the ecosystem, with the team and investors each accounting for 20%, and the foundation accounting for 15%. infiniFi adopts an on-chain partial reserve model, primarily providing stablecoin deposits and yield management services.

On October 12, 2026, the strategy and treasury infrastructure provider INFINIT launched a custodial trading treasury framework, with the first named treasury being APEX Multi-Strategy. The treasury is limited to qualified Hyperliquid markets with an open interest of at least $100 million. Depositors enter with USDC during the specified window and receive receipt tokens representing their shares. The strategy manager trades within a fixed period, and at the end of the term, holders can redeem their shares based on the treasury's USDC value after fees are deducted. The manager sets fees, lock-up periods, deposit windows, risk limits, and strategies before opening deposits.INFINIT states that deposits are held in a 3-of-4 multi-signature, with keys distributed between INFINIT and the operations team. Trading vouchers can be opened and closed, but depositor funds cannot be withdrawn. The company publishes a shared trading wallet and provides weekly performance reports to depositors. The shared infrastructure INFINIT OS covers strategy research and testing, treasury setup, share accounting, controlled execution, risk monitoring, and investor reporting, and can provide strategy managers with legal frameworks, regulated fund licenses, and fund management support.Managers must comply with INFINIT Standard to accept deposits, including completing identity verification and screening, co-investing with depositors in initial loss capital, demonstrating live trading records, and declaring market, leverage, exposure, and drawdown limits. The first treasury is operated by Apex Quantitative Capital, with a strategy based on a systematic CTA momentum model, covering stocks, commodities, and crypto through Hyperliquid perpetual contracts, maintaining a dollar-neutral book.

"On-Chain Detective" ZachXBT stated that he once disguised himself as a client to infiltrate a criminal gang suspected of laundering money for the North Korean-backed hacker organization Lazarus Group, and assisted in freezing funds related to the 2025 Bybit attack incident.ZachXBT indicated that after Bybit was attacked for $1.5 billion in February 2025, he discovered over 15 accounts seeking help with transactions related to the stolen funds in public Telegram and Discord groups. He then contacted a Telegram user using the alias "Jimmy Green" and built trust through multiple transactions.According to his disclosure, on March 6, 2025, he transferred $3.497 million USDC to an Ethereum address for exchanging USDC with TRON chain USDT. The Gas funds for that address trace back to the Bybit attack funds and have been publicly marked as a Bybit attack blacklist address.ZachXBT stated that in subsequent communications, the other party revealed that their team had participated in handling the stolen funds from Bybit and disclosed in advance that the funds would be transferred on chains such as Solana. By matching transaction times, amounts, and on-chain data, he discovered a wallet cluster involving over $12 million of Bybit attack funds, with funding paths including BTC→ETH→SOL→TRON and others, among which approximately 442,000 USDT had been frozen by Tether. The gang also attempted to launder money through Uniswap liquidity pools and low liquidity tokens.In addition, the other party revealed that they had helped other clients handle approximately $3 million in scam proceeds, and ZachXBT tracked the related funds flowing to sanctioned Huione Guarantee-related wallets.ZachXBT disclosed that during this investigation, he initially invested $3.497 million and bore about 5% loss risk for each transaction. The intelligence obtained was promptly provided to relevant investigative agencies and law enforcement. Since 2022, he has assisted in freezing over $75 million related to North Korea-related incidents.

Market news reports that hackers have infiltrated the propulsion system of a tanker heading to the United States.

According to PR Newswire, the on-chain yield protocol infiniFi announced the completion of a new funding round exceeding $3 million, led by Electric Capital, with participation from New Form Capital, Generative Ventures, Fasanara Capital, 2Square, 4th Revolution Capital, DCFGod, The Rollup, and others. The token generation event will take place in the fourth quarter of 2026, and the funds will be used for protocol development, new integrations, multi-chain expansion, and product promotion.infiniFi ended its stealth mode in February 2025 and completed a $3 million pre-seed funding round, launching in June of the same year; the total raised from pre-seed and seed rounds exceeded $6 million. The protocol has expanded to Ethereum, Arbitrum, Katana, Base, and has collaborated or integrated with Ethena, Pendle, Morpho, Aave, FalconX, Curve, Euler, and others. Since its launch, it has generated over $9 million in revenue, with a historical TVL peak of $180 million, currently exceeding $50 million.Founder and CEO Rob Montgomery stated that this round of funding will continue to advance the mission of enabling ordinary people to earn dollar yields and expand distribution through the upcoming infiniFi Prime, enriching yield sources.

Global payment and financial infrastructure Infini announced the completion of a $6 million seed round financing, with participation from SNZ, Reforge, Enlight Capital, NDV (NextGen Digital Venture), FORTWEST, Vernal, and others.Infini stated that the funds will be used to further strengthen its global payment and financial infrastructure, making it easier and more efficient for individuals and businesses to manage and use funds globally.

According to Forbes, a warning jointly issued by multiple agencies including the Federal Bureau of Investigation (FBI) and the National Police Agency (NPA) of Japan indicates that the North Korea-linked hacker group WaterPlum (also known as Contagious Interview) will launch attacks on global IT developers from December 2025 to July 2026 by disguising itself as companies in the AI, cryptocurrency, or NFT sectors and offering fake job positions.Attackers contact job seekers on social media and recruitment platforms, luring them into downloading malicious files under the pretext of technical interviews or programming tests. They successfully infected over 30,000 devices, covering more than 100 countries and regions, and stole data from over 7,000 cryptocurrency wallets. Related funds of at least $10.71 million have flowed into wallets controlled by the attackers.

According to The Wall Street Journal, an independent security research team used Anthropic's Claude software to breach a ChatGPT account belonging to an OpenAI employee, allowing them to access and modify the internal code system associated with that employee.The researchers first used Claude to analyze a vulnerability in Discourse, which is used by the OpenAI developer community, and generated executable attack code. They then obtained an authentication token and, due to a permissions configuration issue, accessed a ChatGPT account belonging to an OpenAI employee, while also gaining limited read and modification suggestion permissions for some private GitHub repositories.

According to NBC, North Korea is utilizing remote IT workers from third countries such as Iran and Lebanon to assist in infiltrating American companies and obtaining funds to finance its weapons programs. Alerts issued by the U.S. and several foreign agencies in July indicated that North Korean IT workers "seek to sign contracts with the intention of remitting salaries back to relevant North Korean agencies," while also posing internal threats to companies, involving data leaks, cryptocurrency theft, and sensitive information theft.As governments like the United States increase countermeasures, North Korea is increasingly leveraging third-country IT workers to secure job interviews, and after obtaining work contracts, the relevant positions are typically taken over by North Korean agents. Reports indicate that these foreign IT workers are scouted on LinkedIn, with some earning about $500 per month in cryptocurrency to work part-time as "interview assistants."Cointelegraph reported in May, citing data from cybersecurity company CrowdStrike, that state-affiliated North Korean hackers and threat actors caused cryptocurrency losses exceeding $2 billion in 2025, a 51% increase year-on-year. The Bank of Korea estimates that despite facing global sanctions, North Korea's GDP will still grow by 3.5% in 2025.

According to Wired, a security researcher who has been infiltrating a North Korean hacking organization for nearly two years has issued a warning, pointing out that the attack methods targeting individual employees and contractors are extremely effective and have a wide-ranging impact, leading to numerous organizations worldwide suffering breaches.Greek cybersecurity researcher Vangelis Stykas stated that since gaining access to the North Korean system 22 months ago, he has found evidence indicating that 1,640 companies in 57 countries have been affected by North Korean hacking operations. Among them, approximately 700 to 800 affected organizations have suffered "highly destructive" breaches.

According to Jinshi reports, German chip manufacturer Infineon expects fourth-quarter revenue for the period ending in September to reach approximately 4.7 billion euros (5.4 billion dollars), exceeding analysts' average expectations of 4.6 billion euros. This growth is mainly attributed to the increased demand for data center chips and rising prices.Infineon CEO Jochen Hanebeck stated that the demand for power solutions aimed at artificial intelligence data centers remains strong, becoming an important growth driver for the company.

According to CNBC, Anthropic disclosed that its Claude AI model unexpectedly breached the isolated environment during a cybersecurity assessment, accessed the real internet, and unauthorizedly infiltrated the real systems of three different organizations through basic means such as accessing unverified endpoints and exploiting weak passwords. The models involved include Opus 4.7, Mythos 5, and an internal research testing model.The incident was caused by a communication misunderstanding between Anthropic and the third-party evaluation partner Irregular, which led to the model being told it was in a simulated environment with no internet access, while it could actually still access the internet. Anthropic stated that this review was triggered by a similar incident involving Hugging Face disclosed by OpenAI last week, and it has currently suspended all cybersecurity assessments and initiated further investigations in collaboration with the independent AI evaluation agency METR, while also urging other AI labs to conduct similar reviews.

On July 28, OpenAI quietly updated its security incident disclosure, confirming that its AI agent accessed four external service platforms during the breach of Hugging Face, bringing the total number of affected platforms to five.Previously, OpenAI had disabled security filters while testing GPT-5.6 Sol and a more powerful model to assess raw capabilities. The model did not complete the security benchmark tests as expected; instead, it discovered a zero-day vulnerability in the package caching agent within the testing environment that granted internet access, subsequently breaching Hugging Face to steal answers.According to a forensic report released by Hugging Face on July 27, this autonomous agent executed 17,600 operations over approximately four and a half days, connecting 181 devices to the Hugging Face internal VPN and forging identity tokens. Among the four additional platforms, Modal Labs CTO Akshat Bubna confirmed through Reuters that his company was one of them, with the attacker using an unprotected public endpoint from a customer as a relay and command control base for the entire attack.The identities of the other three platforms remain undisclosed. OpenAI stated it would "directly notify the service providers" but would not publicly name them, as there is currently no legal requirement for mandatory disclosure. The U.S. Congress has responded by proposing a bipartisan "AI Emergency Shutdown Act," which aims to authorize the Department of Homeland Security to forcibly shut down AI models, with violators facing fines of up to $2 million per day.

According to South Korean media Daily NK, North Korean authorities arrested an elite hacker group on July 12, which is suspected of infiltrating the internal networks of the North Korean central bank and foreign trade bank, stealing national trade funds and laundering money through cryptocurrency. Sources say the group's leader is a veteran from the cyber warfare unit under the North Korean Reconnaissance General Bureau, who recruited talented IT graduates from Kim Chaek University of Technology and Pyongyang University of Science and Technology, using encrypted communications and wireless devices to commit crimes.They split the stolen funds into small amounts and transferred them to overseas cryptocurrency wallets, exchanged them for cash through intermediaries, and then converted them into dollars and other currencies in border areas. Pyongyang officials launched an investigation after discovering anomalies in foreign currency payment approvals and records of overseas IP access, ultimately raiding a safe house and arresting suspects who were laundering money, seizing equipment worth hundreds of thousands of dollars. This case has caused a stir among the elite and military circles in Pyongyang, with senior officials in the Reconnaissance General Bureau and the science and education sector worried about being implicated. North Korea has long been accused of stealing billions of dollars in cryptocurrency assets through hacker organizations like the Lazarus Group, but this incident rarely shows that its own financial system has also become a target of internal attacks.

According to News.bitcoin, the Kenyan government is investigating the hacking incident of President William Ruto's official website, where attackers briefly disabled the site and altered the homepage content, demanding a ransom of 5 Bitcoins.William Kabogo, the Cabinet Secretary for the Ministry of Information, Communication and the Digital Economy, stated that the Kenyan law enforcement agency ICT Authority immediately activated the cybersecurity response protocol to control the incident and conduct forensic investigations, temporarily restricting public access to the portal. Currently, there is no evidence that sensitive data has been accessed without authorization, leaked, or lost, and government systems and digital services remain securely operational.

AI inference infrastructure startup Infinity announced the completion of a $15 million financing round, with the company's valuation reaching $100 million. Investors in this round include Touring Capital, Principal VC, and researchers from organizations such as OpenAI and Anthropic.The company is developing a general reasoning library that enables different AI chips to automatically reproduce cutting-edge AI research results and enhance hardware performance through software optimization.

INFINIT recently responded to the abnormal price fluctuations of the IN token, stating that the platform and the token have not been hacked or attacked, and all funds are secure. The project team tracked and found that a certain wallet transferred tokens from Bitget and Gate to a cross-chain address, using LayerZero to move from Ethereum to BNB Chain. Approximately 9 million tokens were destroyed on the Ethereum side, and 3 minutes later, an equivalent amount of tokens was minted on the BNB Chain side. Subsequently, the wallet conducted multiple sell transactions on Pancakeswap. INFINIT stated that this is a market integrity issue rather than a platform security issue, and the team has cooperated with relevant exchanges to pursue accountability.Coingecko data shows that the price of the IN token has dropped by 43.6% in the last 24 hours, currently reported at $0.06669.

The cross-chain protocol Axelar Network released a statement regarding the recent security incident related to Secret Network, stating that there is a misunderstanding within the community about the event. Both Axelar and the Inter-Blockchain Communication Protocol (IBC) were not attacked or compromised. The affected token smart contracts were neither developed, deployed, nor maintained by Axelar, and Axelar's firewall mechanism also prevented the impact from spreading to other chains.It is reported that the exploited contract is a forked version based on CW20-ICS20, but the developers removed two core security checks, resulting in an "infinite minting" vulnerability. By deleting the verification mechanisms originally used to prevent such issues, this fork altered the original trust model of the contract and did not undergo a new security audit.Axelar Network explained that anyone can deploy contracts for cross-chain asset wrapping through IBC, and similar contracts have also been used to wrap tokens from other chains into Secret Network. However, the Secret side fork version in this incident has vulnerabilities due to the removal of key security checks. This incident is not a unique logical flaw, nor is it an issue with the IBC protocol itself, but rather a security risk introduced by modifications to third-party contracts.