key

Bitcoin News posted on the X platform that Bitcoin developers have launched a new visualization tool to explain how entropy works and how to generate randomness for Bitcoin private keys.The tool covers true random number generators (TRNG), pseudo-random number generators (PRNG), rolling dice, and flipping coins.

A wallet security incident involving approximately $130 million in Bitcoin losses is reigniting discussions in the crypto industry about asset custody models: should Bitcoin holders rely on personal self-custody or turn to institutional custody? Hardware wallet manufacturer Coldcard had a vulnerability in its firmware in 2021 that led to some mnemonic phrases generated by the device being predictably risky. This vulnerability was discovered years later, and approximately 5,200 addresses and about 2,000 BTC have been stolen, with losses amounting to around $130 million.After the incident, some investors began to turn to Wall Street custody products. Data shows that the U.S. spot Bitcoin ETF saw a net inflow of about $626 million within days of the incident. Bloomberg ETF analyst Eric Balchunas stated that such security incidents could further drive funds into ETFs. However, the Bitcoin core community still insists on the self-custody concept. Casa co-founder Jameson Lopp stated that recent events should not undermine users' confidence in self-custody and pointed out that third-party custody also carries risks. Bitcoin Core early developer Peter Todd also believes that self-custody has a better long-term safety record than centralized institutions.Onramp co-founder Michael Tanguma believes that both options have flaws. He stated that concentrating a large amount of assets in a single institution creates a "honey pot," while hardware wallets face risks related to supply chains, firmware, and random number generation. Tanguma proposed a "multi-institution custody" solution, where multiple regulated institutions hold keys through a multi-signature mechanism, requiring multiple institutions to jointly sign any transaction to reduce single points of failure. However, this model has also sparked controversy. Critics argue that while multi-institution custody enhances security, it also introduces permissioned management, conflicting with the decentralized ideals originally pursued by Bitcoin. As Bitcoin gradually enters the fields of pensions, trusts, and institutional asset allocation, the industry is seeking new custody solutions suitable for long-term wealth management. The Coldcard vulnerability incident once again highlights that achieving a balance between security, decentralization, and usability remains a core challenge facing the Bitcoin ecosystem.

Christopher Smith, founder of the blockchain startup Quantus, stated that the first quantum attack may manifest as a series of unexplained thefts of cryptocurrency wallets, rather than directly stealing the approximately $63 billion worth of dormant Bitcoin expected from Satoshi Nakamoto. He pointed out that sufficiently powerful quantum computers could derive private keys from public keys exposed on the blockchain, allowing attackers to transfer funds without needing to breach wallets, devices, or internal systems of exchanges.In theft incidents at highly secure institutions, the only forensic evidence may be the absence of intrusion traces. Smith indicated that the initial targets of quantum attacks could be military systems and national secrets; in the blockchain space, the minting keys of stablecoin issuer Tether may be of greater value. Attackers could mint tokens out of thin air through managed wallets and sell them off before the issuer responds. Google has accelerated its post-quantum migration timeline to 2029; Smith believes the probability of quantum computers breaking modern cryptography around 2028 is "50-50." Relevant blockchains have begun migrating to post-quantum signatures.

Renowned trader Killa expressed his technical analysis on Bitcoin, stating that if Bitcoin falls below the current weekly high (65,300 USD), it will retrace to test the monthly opening price of around 62,700 USD. However, if it can strongly break through and stay above the resistance level of 65,300 USD, it may further rise to around 66,900 USD.Overall, the judgment is that the market has been in a consolidation range for the past two months, with no obvious breakout signals. Killa, as a quantitative trader focused on BTC, predicted the peak of this bull market in May 2025 and has over 200,000 followers on platform X. In mid-April, he shorted Bitcoin at 74,688 USD and switched to long during the market-wide decline on June 5.

According to monitoring by Catcher Predict, in the predicted market Polymarket for the event "LoL: Vivo Keyd Stars vs. Fluxo W7M - CBLOL Regular Season," the "Yes" option win rate for the sub-market "Both sides kill a dragon" has experienced a dramatic fluctuation, soaring from 50% an hour ago to the current 90% (a fluctuation of 40%). Please note the impact of related breaking news.

Wall Street Journal reporter Nick Timiraos stated that for the Federal Reserve, the July employment report will be a difficult data set to interpret. New evidence that the labor market has not re-accelerated may weaken the urgency for a rate hike next month, but this still depends on better inflation data.The decline in the unemployment rate will continue to keep the market focused on inflation data. Whether price pressures are rising or falling will determine if more officials conclude that they cannot maintain their inflation target forecasts with interest rates unchanged. A moderate inflation report will strengthen the rationale for keeping rates unchanged (as two consecutive months of moderate data begin to show a trend rather than noise). Conversely, strong data would call the forecasts into question again and give officials opposing a rate hike the opportunity to seek a fourth vote in favor.

Vangrid announced the completion of a $9 million seed round financing, with participation from HashKey, Borderless, Crypto.com Capital, Animoca Brands, Gate Labs, and Mapleblock Capital.The main business of the project is to collect spatial data, where users collect geographic location data through smartphones and receive rewards. The data is sold to Physical AI developers, including robotics, autonomous agents, and digital model developers, after being 3D modeled and verified on-chain. Vangrid stated that its network is built on Base and uses Ethereum proof services to verify data batches, with public browsers showing that it has completed nearly 100,000 verification collections and over 1,300 batches of proof.

According to Fortune magazine, Michael Saylor, Executive Chairman of Bitcoin treasury company Strategy, stated that artificial intelligence is changing the way wealth is created, and businesses and individuals should not try to compete with machines but should leverage AI to amplify their own capabilities. In an interview, Saylor mentioned that he used ChatGPT to help Strategy design a preferred stock financing plan based on Bitcoin, ultimately enabling the company to raise about $15 billion through an IPO and related financing. He stated, "AI helped me create $15 billion."Saylor believes that the core advantage of the AI era is not to repeatedly execute tasks that machines can accomplish, but to ask better questions and use AI to explore new opportunities that were previously unattainable. "Don't try to work harder than robots." In recent years, Saylor has pushed Strategy to allocate Bitcoin on a large scale, transforming the company from a traditional software enterprise into a publicly traded company with Bitcoin as its core asset. Although this strategy comes with higher risks, Saylor stated that significant innovations often require enduring volatility and continuously adjusting direction. He noted that the successful entrepreneurs of the future will be those who can combine AI with human creativity, rather than individuals trying to replace AI in completing tasks.

According to Slow Fog monitoring, MistEye detected a large-scale npm supply chain attack affecting the Keyv/Cacheable ecosystem. The attackers published over 2,000 malicious package versions, including keyv@6.0. Keyv is a widely used key-value storage abstraction library that supports backends such as Redis, SQLite, PostgreSQL, and MongoDB, with approximately 127 million downloads per week, leading to significant downstream supply chain exposure.The attack method is highly similar to the previous Shai-Hulud npm worm activity, indicating a highly automated and scalable supply chain attack. Potential attack behaviors include credential theft, environment variable leakage, CI/CD key leakage, remote payload delivery, and lateral propagation through compromised development environments. Security teams should immediately identify and remove affected package versions, upgrade to verified secure versions, review dependency lock files and build logs, monitor suspicious external connections, rotate leaked credentials, and rebuild environments upon confirmation of the impact.

Hong Kong licensed cryptocurrency exchange HashKey Exchange has received approval from JPMorgan to open client fund accounts. HashKey Holdings stated that these accounts will support client fund segregation and settlement through JPMorgan's banking infrastructure.HashKey Exchange activated its client fund accounts with DBS Bank in Singapore on June 30, supporting fiat currency deposits, withdrawals, and settlement services. One week ago, HashKey Holdings merged the previously independent HashKey Exchange and HashKey Global applications into a single entry point.HashKey Holdings went public in Hong Kong last December, raising $206 million through an oversubscribed initial public offering.

According to CNBC, the combined market value change of 6 U.S. tech giants that have released earnings reports this week is close to $2 trillion, as investors are selecting winners based on cloud business growth and AI capital expenditure returns.The combined market value of Alphabet, Amazon, and Microsoft increased by nearly $1.5 trillion, with Microsoft increasing by over $600 billion, and both Amazon and Alphabet increasing by over $400 billion.Meanwhile, Apple's market value evaporated by over $350 billion, Meta decreased by about $85 billion, and Tesla decreased by about $7 billion. Although Apple exceeded expectations in revenue, profit, and iPhone sales, it expects revenue growth of 9% to 11% this quarter, below analysts' expectations of 12%, and stated that shortages of memory chips and competition for wafer production capacity will continue to limit supply, causing its stock price to drop by over 7% on Friday.Amazon's AWS revenue in the second quarter grew by 37% year-on-year, marking the fastest growth rate since 2021, which drove its stock price up by over 15% on Friday. The company also raised its capital expenditure forecast for 2026 from $200 billion to $220 billion. Microsoft rose 15% on Thursday, while Meta fell 8%, indicating a clear divergence in the market's judgment on the AI investment returns of the two companies.Jefferies stated that the AI spending of tech giants is approaching $800 billion over the next 12 months. The current market debate is no longer whether there is real demand for AI, but whether long-term profits can support such large-scale investments.

According to Jinshi, the People's Bank of China held a work meeting for the second half of 2026, pointing out that the financial risks in key areas continue to be resolved, and significant results have been achieved in financial support for the resolution of financing platform debt risks.The meeting emphasized that the operation of the financial market is in good condition and monitored and assessed the bond market operation from a macro-prudential perspective, strengthening regulatory enforcement in the bond market.

Binance founder Zhao Changpeng reposted on the X platform about a user being attacked by a Coldcard wallet and stated that software will always have vulnerabilities; the key is how the team behind it addresses the issues.Zhao Changpeng added that Trust Wallet also faced a similar problem years ago, where the use of a non-truly random pseudorandom number generator led to a loss of about 12 million dollars, but the team ultimately covered the users' losses.Previously, a suspected third wave of attacks targeting Coldcard-generated addresses has emerged, with attackers again transferring about 207.7294 BTC. Data shows that the scale of observed Coldcard-related attacks has expanded to about 1,367.05 BTC, involving approximately 4,585 addresses, valued at about 88.6 million dollars at current prices.

According to monitoring by Bitcoin News, Nunchuk stated that some keys on the Nunchuk platform are generated by Coldcard Mk4, but these keys will not be used directly.Nunchuk will derive independent keys through custom logic, making them less susceptible to lookup table attacks based on leaked Coldcard seeds. Nunchuk added that, given enough time, it believes attackers may eventually incorporate these derived keys as well.

The decentralized asset management protocol Swan Treasury on BNBChain suffered a loss of approximately $625,000 due to a private key leak. The attacker forged a valid signature using their own address to purchase STY at a 100x discount and bought approximately 687,000 STY with about 19,700 USDT through a PancakeSwap flash loan.Subsequently, they forged claim() and transfer signatures on a brother contract, dumping STY into the STY/USDT pool and profiting approximately 625,000 USDT. Each ecrecover in the transaction was resolved to an exact hardcoded signer, confirming that the key itself had been leaked, rather than a flaw in the signature logic.

According to Jinshi reports, local power plant officials stated that a drone from the Ukrainian armed forces attempted to attack the critical infrastructure of the Zaporizhzhia Nuclear Power Plant.