lp

According to the Binance Wallet announcement, starting from June 1, 2026, 08:00 (UTC+8), the assets participating in the Binance Wallet DeFi Earn activities (including currently and subsequently added qualified certificate tokens) will be included in the calculation of Binance Alpha Balance Points.The specific list of qualified assets is subject to the Binance Alpha Points FAQ page.

According to monitoring by Catcher Predict, in the predicted market Polymarket for the event "LoL: Anyone's Legend vs Team WE - LPL Playoffs," the "Anyone's Legend" option in the sub-market "Match Winner" has experienced a drastic fluctuation in winning probability, dropping from 66.5% an hour ago to the current 15.5% (a fluctuation of 51%). Please note the impact of related breaking news.

Bitget's compliant RWA issuance platform Reality announced a partnership with the U.S. registered brokerage and self-clearing agency Alpaca. According to the cooperation details, Alpaca will provide brokerage infrastructure support for Reality, assisting it in accessing U.S. stocks and ETF tokenized products within a regulated market framework, covering key aspects such as clearing, custody, and trade execution.Founded in 2015, Alpaca is a developer-first brokerage infrastructure company, with Alpaca Clearing being a FINRA registered broker-dealer and SIPC member, focusing on the custody and clearing of underlying assets. Through this partnership, Reality will further enhance its underlying infrastructure capabilities for tokenized U.S. stocks and ETF products, providing a more standardized and transparent access method for eligible global users.Bitget CEO Gracy Chen stated that Reality is a key part of Bitget UEX's panoramic exchange strategy, aiming to connect traditional financial assets with on-chain infrastructure in a more pragmatic way. Alpaca co-founder and CEO Yoshi Yokokawa expressed his pleasure in partnering with Reality to jointly promote the development of tokenized stock infrastructure, further enhancing the accessibility of global financial services.

A white hat hacker using the alias "0xflorent" stated on X on Sunday that he has helped recover approximately 1,003 ETH (worth about $2 million) from a faulty smart contract of the Hong Coin (HONG) token sale in 2016, involving 48 investors.Hong Coin was originally designed as a community-operated decentralized venture capital fund, with the token sale starting on August 29, 2016, and ending on October 28 of the same year, but it failed to launch due to not reaching its funding goal. The contract was supposed to automatically refund investors, but a vulnerability in the refund function caused the funds to be locked for nearly a decade.0xflorent collaborated with the HONG creator to exploit an administrator function with an integer overflow vulnerability, resetting the token holders' balances and triggering the refund mechanism through specific inputs, successfully extracting the locked funds. According to Etherscan data, one investor has already received a refund of 96 ETH (approximately $192,500). Previously, on May 24, 0xflorent also recovered 19.33 ETH from another failed token sale project from 2018.

Recently, the People's Procuratorate of Licang District, Qingdao City, Shandong Province, China, handled a Bitcoin theft case. The defendant, Zhang, obtained the mnemonic phrase while assisting an acquaintance in registering a virtual currency wallet, and later transferred 107 BTC in multiple transactions, equivalent to over 50 million yuan at current market prices. Zhang argued that his actions were a "protective takeover," but the prosecution found that he transferred the stolen BTC through multiple trading platforms and exchanged it for over 660,000 yuan. The Licang District Court sentenced Zhang to 10 years and 9 months in prison for theft and imposed a fine of 100,000 yuan; the second instance upheld the original judgment.Reports indicate that the prosecutor handling the case strictly adhered to laws and judicial policies, and after in-depth analysis, concluded that although China's regulatory policies deny the legal currency status of virtual currencies, they do not negate their property attributes, nor do they prohibit citizens from legally holding and circulating them. Bitcoin requires investment in computing power, funds, and other costs to acquire, which gives it economic value; rights holders can achieve exclusive control and management through private keys and mnemonic phrases, aligning with the core characteristics of "property" in criminal law, making it a target for theft. In determining the amount, since virtual currencies have no official pricing, the Licang District Procuratorate discarded market price estimates and used the actual proceeds from the crime of over 660,000 yuan as the amount for theft, ensuring accurate conviction, appropriate sentencing, and unity of guilt and punishment.

Regarding the attack on the Kelp rsETH LayerZero V2 bridge that occurred on April 18, Aave released a post-incident investigation on the X platform, emphasizing that the exposure was primarily due to third-party bridge infrastructure rather than the protocol itself. The attacker executed an RPC poisoning attack targeting a single validator of LayerZero, forging a cross-chain message. This led to the release of 116,500 rsETH on the Ethereum side without actual destruction on Unichain. The attacker subsequently deposited the stolen rsETH into Aave V3 (Ethereum Core and Arbitrum), borrowing approximately 82,650 WETH and 821 wstETH.The Aave Protocol Guardian and Risk Steward immediately implemented protective measures for the rsETH and WETH reserves. Currently, the WETH and rsETH markets in the affected V3 deployments are operating normally. The rsETH held by the attacker on Arbitrum has been destroyed, the LayerZero OFT adapter has been fully recharged in five batches, rsETH support has been fully restored, and Kelp has reopened the withdrawal, bridging, and claims functions for rsETH. The WETH LTV in the affected markets has been reset to pre-attack values, and Aave V3 is fully operational across all markets except for rsETH.The Arbitrum DAO has voted to authorize the transfer of frozen ETH to Aave LLC, and it is currently awaiting on-chain execution. The court is still reviewing the substantive content of the injunction, and Aave LLC will continue to comply with the injunction during the court's deliberation. Ongoing projects include: the Aave risk framework from Llama Risk, the bridging assessment framework, the release of evaluation reports for currently live assets, on-chain execution of Arbitrum DAO votes, and the court's review of the injunction.

Regarding the incident "DxSale accused of using a backdoor to withdraw $7.3 million in liquidity funds," the security company GoPlus stated that the attack may have been an inside job, and there is still $15.5 million in funds and LP urgently needing rescue. GoPlus recommends that the project team immediately check whether their project LP is locked in the contracts 0xEb3a9C56, 0x81E0eF68, 0x2D045410, 0x5b5e9448, and if so, take immediate measures to withdraw. Since the initial funding source was Bybit, KYC tracing is recommended; the final withdrawal channels are multiple Binance addresses, and it is suggested that the relevant security teams submit on-chain evidence to apply for freezing the attacker's address.GoPlus calls on the project to strengthen security mechanisms, stating that critical admin functions must have a time lock, and Owner permissions must use multi-signature. GoPlus emphasizes that as of now, DxSale has not issued any public incident response statement, and its silence is also worth noting.

On-chain security analysis account Eye stated that the BNB Chain project launch platform DxSale is suspected of exploiting a hidden backdoor to siphon off funds from an old liquidity pool locked in 2021, involving over 1,400 LPs and an amount of approximately $7.3 million. The analysis indicates that this attack includes operations such as "silent ownership transfer" and over 80 wallet hops.After the LP was drained, the attack address received over 1,200 BNB (approximately $763,000), with the funds believed to come directly from multiple stolen LP pools. More concerning is that this address had previously been dormant for a long time but has a direct on-chain association with a wallet marked as related to the DxSale team; this address is also one of the important funding inflow addresses for the DxSale smart contract.Subsequently, the attack address transferred about 3,400 BNB (approximately $1.2 million) to multiple wallets and completed the fund transfer through several Binance deposit addresses. Eye stated that if the related accusations are true, it implies that the DxSale team may have reserved a backdoor for the platform years ago and ultimately carried out the attack themselves. They also called for Binance to freeze the related funds, believing that these assets essentially belong to the project investors who had previously financed through DxSale. DxSale was one of the most well-known launchpads and LP locking infrastructure on the BNB Chain, with projects like SAFEMOON having used its services.

According to Catcher Predict monitoring, in the "Philadelphia Phillies vs. San Diego Padres" event on the prediction market Polymarket, the "Over" option in the sub-market "O/U 4.5" has experienced a drastic fluctuation in win probability, dropping from 73.5% an hour ago to the current 42.5% (a fluctuation of 31%). Please note the impact of related breaking news.

According to The Block, since the KelpDAO cross-chain bridge attack in mid-April, the total value locked (TVL) in DeFi has decreased by about 14%, from approximately $172 billion to $148 billion. The attackers exploited vulnerabilities in off-chain infrastructure rather than smart contract vulnerabilities, stealing about $292 million and exposing new infrastructure risks.The outflow of funds has continued for more than five weeks, indicating that investors are broadly withdrawing marginal capital rather than just targeting specific protocols that were attacked. Lending, as the largest DeFi category, saw its locked amount decrease from about $53 billion to $40 billion, marking the largest decline. Liquidity re-staking protocols also experienced significant drops. The KelpDAO attack indicates that as the security of smart contracts improves, off-chain infrastructure is becoming a more easily exploitable attack surface.

Binance Alpha will launch Citrea (CTR), with trading starting on May 26 at 21:00 (UTC+8).Users with at least 211 Alpha points can participate in the airdrop, which is first come, first served, with a total of 1,090 CTR tokens for the airdrop.

According to Bits.media, the Italian energy company Alps Blockchain has partnered with the Bolivian company Qurubiqa to launch Bitcoin mining at a dormant 127-megawatt natural gas power plant in the Cochabamba region of Bolivia. The mining site currently consumes about 27 megawatts of power, with a hash rate of 1.23 EH/s, and plans to increase power consumption to 45 megawatts by the end of the year. The mining equipment directly uses the electricity generated by the power plant and is not connected to the public grid. Due to Bolivia facing a currency crisis and a shortage of US dollars, project participants settle in US dollars.

Kelp DAO announced on Monday that after losing $293 million due to an attack by North Korea's Lazarus Group on April 18, rsETH has been fully restored after five weeks of repairs. Kelp DAO stated that the final batch of 20,373.7 rsETH has been sent to the LayerZero smart contract responsible for cross-chain transfers, officially concluding the operational phase of the rsETH recovery plan.Multiple crypto protocols contributed funds through the DeFi United initiative to assist in restoring the support for rsETH. The first batch of 25,000 rsETH was transferred on May 13, and withdrawals were reopened the next day. Currently, minting, redemption, and reward operations are all functioning normally. This attack caused a chain reaction in the DeFi lending market, with the attacker borrowing WETH using a large amount of stolen rsETH as collateral on Aave, resulting in Aave incurring $190 million in bad debt. The TVL dropped from $26.4 billion to below $14 billion and has since remained in the range of $13.9 billion to $15.1 billion without showing signs of recovery. In April, there were 25 crypto hacking incidents, resulting in total losses of $630 million.

According to official news, KelpDAO stated that the last batch of 20,373.72 rsETH has been transferred to the rsETH OFT adapter earlier, thus completing the operational part of the rsETH recovery plan. KelpDAO also attached the relevant transaction information.

According to monitoring by Catcher Predict, in the prediction market Polymarket, the "Philadelphia Phillies vs. San Diego Padres" event has seen significant fluctuations in the "Philadelphia Phillies" option's win probability in the sub-market "Philadelphia Phillies vs. San Diego Padres," rising from 57.5% an hour ago to the current 89.5% (a fluctuation of 32%). Please note the impact of related breaking news.

According to the official announcement, Binance has launched the DYOR Research Center, integrating on-chain data to provide transparent information for all users.DYOR now supports Binance Alpha tokens, and users can view market information, trading data, token unlocks, and project fundamentals on the spot trading page of the Binance App. It will gradually expand to more tokens in the future.