ito

The Slow Fog security team recently disclosed the discovery of a malicious GitHub repository impersonating the "Qwen 3.8 27B local quantitative model." The repository claims that the model file should exceed 16GB, while the actual downloaded content is only about 487KB, containing disguised files, a LuaJIT interpreter, and obfuscated Lua scripts. Slow Fog emphasizes that the official Qwen project has not been compromised.Slow Fog's analysis indicates that after the malicious program runs, it will collect host information, capture the screen, and send it to the attacker's C2 server; when the hard-coded server fails, it will also read backup C2 addresses from contracts on the Polygon chain, allowing the attacker to rotate infrastructure through on-chain transactions.Subsequent payloads can steal browser login information, cookies, history, email, WinSCP, Steam credentials, as well as files and extension data related to cryptocurrency wallets. Slow Fog also found that at least 23 GitHub repositories and 29 similar compressed packages used the same Lua delivery chain.

According to South Korean media Chosun Biz, SK Hynix's NAND is lagging in the transition of old process lines, making it difficult to narrow the efficiency gap. As of the second quarter of this year, its 176-layer products still account for about 50%, while Samsung has completed the transition mainly to 236 layers. Omdia data shows that Micron's 232-layer products account for 53%, and YMTC reaches 68%.During the rising cycle of NAND prices, companies with a higher proportion of advanced processes see better cost and profit improvements. SK Hynix (including Solidigm) saw its NAND revenue share drop from 21.4% in the fourth quarter of last year to 16.4% in the first quarter of this year, while YMTC increased from 11.5% to 16.2%. SK Hynix prioritizes equipment investment in DRAM and HBM, with NAND investments decreasing for three consecutive years, from $3.5 billion in 2023 to $2.9 billion in 2025, slowing down the transition. It is currently considering impairing old NAND assets to optimize costs.

U.S. President Trump stated that all mines in the Strait of Hormuz have been cleared or detonated. The U.S. has notified Iran that any new mining vessels will be destroyed.The U.S. Space Force is monitoring the strait and nuclear facilities, and a zero-tolerance mining policy has been implemented.

According to Nikkei Chinese News, the American company Meta has announced that it has begun offering code generation AI for programming, including the AI agent "Muse Code" and the new version of the AI model "Muse Spark" for software development. Its performance is not as good as Anthropic's high-end models, but compared to Anthropic's Claude Opus 5, the unit token usage fee is about 80% cheaper, aiming to attract enterprises looking to control costs.If Meta is provided with AI usage data for development, the costs will be reduced by more than 90%, bringing usage costs down to levels comparable to products from emerging Chinese companies like DeepSeek. Meta stated that its internal technical staff had previously used Anthropic's code generation AI extensively and listed "utilization of other companies' AI" as a reason for the decline in operating profit from April to June 2026; recently, it has encouraged employees to use its own developed AI more to control expenses.Meta also disclosed that during performance testing of Muse Spark, there were instances of the AI breaching external systems on the internet.

Kaito AI founder Yu Hu responded to the community's privacy concerns regarding the Pulse browser extension. Yu Hu stated that Pulse's verification feature is based on zkTLS technology and generates encrypted proofs only when users actively initiate verification. Kaito only receives the final proof and not the complete account data or browsing history. The interactive data collection of Pulse on the X platform (such as content exposure, duration of stay, interactions) has been clearly authorized at the time of user installation and will not send browsing activities from other web pages to Kaito.Regarding the Chrome prompt "can read and write all website data," Yu Hu acknowledged that its displayed scope is broader than actual use and will be corrected in the next version to "can read and write X website data," which critics like Ultra have recognized. Kaito Pulse will be open-sourced this week for community review. Yu Hu stated that Pulse's device fingerprinting feature is only used to prevent abuse behaviors such as click fraud and witch attacks, and is not used for analysis or other purposes. This statement serves as Kaito's official response to recent community concerns, with the specific features of Pulse to be confirmed by the open-source code.

The attention economy platform Kaito AI launched the browser extension Kaito Pulse on August 18, which can directly integrate users' public holdings and other off-chain activities on platforms like Polymarket and Hyperliquid into the X timeline, and synchronously introduce the attention metric Aura to measure the attention signals generated by users' statements and actual behaviors. Users can accumulate Aura by installing the extension, using Yaps to receive initial Aura, verifying transactions, or engaging in creator activities.Subsequently, well-known analyst @0x_ultra released a source code analysis stating that the extension has multiple data collection behaviors, including generating a unique device fingerprint through GPU rendering, device model, and audio tests, and associating it with the X account; recording user behaviors such as scrolling duration, clicks, searches, bookmarks, etc., during X sessions, and sending heartbeat packets every 30 seconds; reading subscription plans and usage for ChatGPT and Claude during verification, as well as wallet balances, holdings, profits and losses, and deposit/withdrawal records on platforms like Binance. The extension only allows communication with the Kaito domain, and the ZKTLS part is based on the open-source project Primus branch. Kaito officials have not yet responded to this.

Cryptocurrency analyst cryptopainter pointed out that the Kaito-related address base:0x98d0baa52b2d063e780de12f615f963fe8537553 will unlock 18.53 million tokens on August 20, followed by an additional 6.58 million tokens unlocking from September 16 to 17. He believes that the recent actions of issuing good news and driving up prices to sell off are forms of price manipulation, and explained that although he was once optimistic about Kaito, his current stance has shifted to criticism.The analyst stated that his observation logic for Kaito has been simplified to testing whether the new product ecosystem can truly take off and generate social heat and scale close to 2025 levels. Even a recovery to 50% would prove that it remains a leader in InfoFi, and re-entering related positions at that time would be more assured. If product delivery falls short of expectations and ecosystem participation is average, he will not consider re-staking for now.He further mentioned that the aforementioned massive unlocks have mostly completed hedging and closing positions, and the spot supply has not been fully released. The true release signal should be when the spot price is significantly lower than the futures price, the funding rate is positively high, and the price is declining with volume. Without seeing these signals, he has no motivation to participate and advises investors to at least wait until after October to observe, while also reminding those who have recently bought back due to the price drop to be cautious.

According to Binance spot market data, the market has experienced significant fluctuations. ALICE has dropped by 31.56% in the last 24 hours, and KAITO has decreased by 47.91% this week.At the same time, RED and YB have both reached new highs today, with increases of 5.76% and 6.51%, respectively. Additionally, BICO has hit a new low today, falling by 18.62%, while KAIA and ACE have also reached new lows for the week, with declines of 9.2% and 55.4%, respectively.Other tokens like LISTA and THETA have also shown a "sharp rise and fall" state, with decreases of 6.95% and 6.5%, respectively.

U.S. President Trump stated that after defeating Iran, he will soon declare the Strait of Hormuz as "U.S. territory." He described the blockade against Iran as "unstoppable" and characterized the blockade as "a steel wall."Trump emphasized that the U.S. is fully prepared to deal with Iran and will not allow Iran to possess nuclear weapons.

According to token unlocking data from the crypto asset data platform RootData, Kaito (KAITO) will unlock approximately 58.11 million tokens at 12:00 PM Beijing time on August 20, worth about 25.87 million USD.

According to on-chain analyst Ai Yi's monitoring, KAITO plummeted 67.3% in half a month, dropping from a high of $1.3764 on July 29 to $0.45.On August 3, two addresses that opened $6.94 million in 5x long positions on Hyperliquid have both stopped out, with a cumulative loss of $2.874 million.

According to Arkham monitoring, Alameda Research associated addresses transferred a total of 8.25 million USD in SOL to BitGo custody wallets through 24 transactions, presumably for distribution of compensation to FTX creditors.Arkham data shows that Alameda currently still holds over 200 million USD in SOL.

ChianCatcher news, Solana Foundation Chair Lily Liu tweeted that the foundation's work revolves around two main goals: attracting top talent and capital to Solana. Capital and talent are interdependent and mutually prerequisite. She pointed out that "king-making" is shortsighted and self-limiting, and that "trustworthy neutrality" is feasible in code, but insufficient when applied to humans who require judgment. The foundation's principle is to be open to talent: actively promoting competition and letting the market decide the outcome. No one can rise above the market.Regarding perpetual contracts, the foundation has always supported diversity among builders, and the recent efforts include making the perpetual plan and cutting-edge trader program public. It is not true that only one team on Solana can build fully on-chain perpetual contracts; several teams have recently challenged this. A fully on-chain architecture is more valuable for DeFi and Solana's future. The foundation does not determine success or failure; the market does.

According to monitoring by Catcher Predict, in the event "LoL Hanwha Life Esports vs Gen.G KeSPA Cup Last Chance Qualifier" on the prediction market Polymarket, the "Yes" option for the sub-market "Both Teams Destroying the Suppressor" has experienced a sharp fluctuation in win rate, soaring from 29.5% an hour ago to the current 47.5% (a fluctuation of 18%). Please note the impact of related breaking news.

According to Decrypt, a volunteer security team stated that it scanned 150 Bitcoin code repositories using cutting-edge artificial intelligence models and discovered a dozen vulnerabilities. The team has built multiple AI-based review systems, targeting wallets, cryptographic libraries, infrastructure, and other Bitcoin projects. Team members claim that, on average, each person can find about one serious vulnerability per hour, and in the past 12 hours, they have submitted security reports to multiple projects, but specific affected projects have not yet been made public.

The Bitcoin Red Team's volunteer security initiative has scanned approximately 150 Bitcoin code repositories and disclosed more than a dozen vulnerabilities. The team is developing an open-source AI platform for auditing Bitcoin software, covering wallets, cryptographic libraries, infrastructure, and other projects.AnchorWatch CEO Rob Hamilton stated that the team has currently spent about $20,000 on various AI services and is using Kimi K3, OpenAI's GPT Sol, Anthropic's Claude Fable and Opus, as well as Z.ai's GLM 5.2 to identify vulnerabilities and generate related documentation. A pseudonymous Bitcoin developer, Calle, mentioned that the team has reported critical vulnerabilities to multiple projects in the past 12 hours, averaging about one critical vulnerability discovered per person per hour, with daily expenditures of approximately $10,000. The team did not disclose the affected projects or details of the vulnerabilities.

According to CoinDesk, Summer Mersinger, CEO of the Blockchain Association and former commissioner of the U.S. Commodity Futures Trading Commission (CFTC), published an article responding to the Wall Street Journal's editorial on August 4, accusing it of a fundamental misreading of the Clarity Act.Mersinger stated that the bill explicitly prohibits stablecoin rewards that are equivalent to bank deposit interest but allows for rewards similar to credit card points and user behavior-based incentive mechanisms. From the perspective of DeFi regulation, Section 10301 of the bill requires the SEC to establish regulatory rules for protocols that are "nominally decentralized and substantially controllable," which does not equate to regulatory exemption; Section 10201 includes digital commodity brokers under all reporting obligations of the Bank Secrecy Act and allocates $3 billion for state-level enforcement, contrary to the Wall Street Journal's accusations of insufficient regulation of illegal finance.Addressing concerns about the "shadow market" for tokenized securities, Mersinger emphasized that Section 10505 of the bill clearly states that securities remain subject to SEC oversight even after settlement on the blockchain. She believes that the Wall Street Journal is essentially defending the monopoly position of traditional financial institutions, which conflicts with the free market principles that the paper has consistently advocated.

According to Jinshi reports, five sources said that Iran has warned Gulf countries that any new attacks by the United States on Iranian territory will trigger Iran's retaliation against critical energy infrastructure in the region.

Bitcoin News posted on the X platform that the volunteer organization Bitcoin Red Team has scanned 150 code repositories, privately disclosed more than a dozen vulnerabilities, and identified key issues during the process of strengthening wallets, cryptographic libraries, and infrastructure following the COLDCARD vulnerability incident. This work has consumed approximately $20,000 in AI computing costs, covered by OpenSats.Researchers are using multiple AI tools, with many stating that open-source models like Kimi K3 have become primary tools for security research, while cutting-edge closed-source models like OpenAI and Anthropic are considered to impose more limitations in such analyses. The team plans to open-source its AI security tools to enable projects to continuously audit their own codebases. Researchers warn that Bitcoin may just be the first industry facing a wave of AI-assisted vulnerability discovery, with similar efforts likely to expand to all open-source software.

According to The Bell, Alexander Samoilov, an official from the 12th Center of the Federal Security Service of the Russian Federation (FSB), revealed at the KROS Network Technology Annual Conference held in Sochi in May 2026 that the FSB plans to extend the installation requirements of SORM (System for Operative Investigative Activities) to cryptocurrency exchanges and gaming platforms, mandating them to share user data with security agencies in real-time.It is noteworthy that Samoilov also acknowledged that the "Yarovaya Law" has been in effect for 10 years since its passage in 2016, but the implementation rate of the relevant provisions is only about 80%. Market participants believe this estimate is still on the high side. According to The Bell's investigation, following the terrorist attack at the "Krokus City Hall," the FSB's Second Directorate took the opportunity of a large-scale inspection of the SORM system to further strengthen its control over the Russian internet.