lit

Decred announced that the mandatory patch version v2.1.6 has been released, which includes a fix for a critical security issue related to consensus, preventing potential periodic de-anonymization mixing attacks.In addition, this patch also addresses several possible network-related denial of service (DoS) attack issues and improves the expiration duration of mixing sessions. The official urges users to upgrade as soon as possible, while noting that the Windows version of Decrediton has not yet been released and is expected to be launched the following day.

The cross-chain liquidity protocol Maya Protocol was attacked on August 18, with the attacker exploiting six interconnected software vulnerabilities to create false account balances, stealing approximately 20.83 BTC (about $1.34 million) and other assets, resulting in a total direct loss of about $1.65 million. The incident led to the suspension of trading on the MAYAChain network, with its token CACAO plummeting nearly 89% from $0.115 to $0.013, before recovering to around $0.03.Technical reviews show that the attack began when MAYAChain mistakenly judged a transaction to be lost and triggered a compensation mechanism, but the mechanism miscalculated, adding about 49 million CACAO to a small liquidity pool, while the protocol's reserves only held about 168,000 CACAO. After the transfer failed, the system incorrectly saved the new balance, and the attacker subsequently deposited a very small amount into the liquidity pool, acquiring over 99% of the pool's share and immediately withdrawing 48.87 million CACAO, which was then exchanged for Bitcoin, Ethereum, and other assets.The incident caused the total value of the Maya Protocol liquidity pool to decrease by about $10.9 million, of which approximately $6.4 million was due to the depreciation of CACAO, and about $2.9 million came from arbitrage trading. The team expressed hope that the attacker would return the funds in the form of a bug bounty; otherwise, they would seek to recover losses through investments in channels like Aztec Chain. Maya Protocol has not yet announced a specific time for resuming trading. This incident once again exposed the security risks within the complex logic of DeFi protocols.

According to Decrypt, Swiss hardware wallet manufacturer BitBox discovered two serious vulnerabilities and one bootloader issue in its firmware during an internal AI audit, and has released the Dixence security update. Exploiting the vulnerabilities requires a combination of phishing attacks and user unlocking of the tampered device, but BitBox stated that no user funds were stolen and the recovery phrases were not compromised.The bootloader vulnerability affects the older BitBox02 models, allowing attackers to load malicious firmware to steal assets; this issue has been partially fixed in the Oeschinen update from July. The second serious vulnerability affects the pre-initialization phase of Multi version devices, potentially allowing arbitrary code execution. The third issue involves the silent payment feature, which cannot directly steal coins but may lock funds. The new Nova version is not affected. BitBox warns that users with old firmware need to install the update as soon as possible, and currently, there are no reports of user fund losses.

According to CoinDesk, Bitcoin has recently shown unusually calm performance, achieving an annualized volatility of about 42% on the 30th, narrowing the gap with the S&P 500's 18% to the narrowest level on record. After narratives related to Trump and corporate treasury buying, the market has entered a prolonged compression range. Edmond Goh, Global Trading Head at B2C2, stated that retail funds are shifting towards AI stocks, tokenized stocks, and prediction markets; TradFi high-frequency trading and risk models are improving efficiency, with open interest nearing historical lows, further suppressing volatility.Shiliang Tang, Partner at Monarq Asset Management, mentioned that Bitcoin is in a price stalemate, with upward pressure from corporate treasury sell-offs (such as Strategy, MARA) and limited downward movement due to speculative leverage clearing and net accumulation in long-term wallets. Strategy has sold about 7,000 BTC by 2026. Paul Howard, Senior Director at Wincent, pointed out that institutional ETFs and DAT are driving market maturity, while clarity in U.S. regulation (CLARITY Act) is still pending, and low volatility has led to a decrease in trading volume.Greg Cipolaro from NYDIG stated that short-term traders are chasing 5x or 10x returns, with target options expanding to Nvidia, gold, perpetual stock contracts, 0DTE options, or sports event contracts. Retail in South Korea is shifting from crypto to domestic AI-related stocks, with Upbit and Bithumb's trading volume significantly dropping year-on-year. Trading in traditional asset perpetuals on crypto platforms and prediction markets like Kalshi and Polymarket has seen a significant increase.

The Shanghai Intermediate People's Court has published typical cases, analyzing whether "traffic personnel" involved in telecommunications network fraud related to virtual currencies constitute accomplices in fraud. From February 2022 to April 2023, the defendants, for the purpose of profit, assisted upstream fraudulent activities by "draining traffic," using online virtual phone software to lure victims into related scam groups, ultimately causing 30 victims to be defrauded of more than 2.34 million yuan (the same currency hereafter) by an overseas fraudulent organization. The overseas fraudulent organization transferred funds into the suspects' trading accounts via virtual currency.The Shanghai First Intermediate People's Court pointed out that in telecommunications network fraud cases, "traffic personnel" may constitute accomplices in fraud or illegal use of information networks depending on specific circumstances. The key lies in determining whether they have formed a clear criminal intent connection with the upstream fraudulent organization and whether there is stable cooperation and division of labor. In judicial practice, when assessing the criminal responsibility of "traffic personnel," factors such as their role in the criminal chain, the degree of organizational management, connections with upstream criminals, methods of profit, and abnormal behavior should be comprehensively considered. Actions that only provide general online services and do not form a conspiracy to commit fraud should be distinguished from "draining" actions that knowingly participate in the implementation of fraud.

Decred official X account (@decredproject) released a security notice, stating that a security vulnerability has been discovered in the Decred (DCR) network, and a patch will be released on August 18 at 10 AM Eastern Time.For security reasons, the official recommends that users suspend voting and mining operations until the upgrade is completed. An announcement will be synchronized on the official X account as soon as the patch is released.

According to BeInCrypto, Sean Farrell, the head of digital asset strategy at Fundstrat Global Advisors, released a research report indicating that Bitcoin's current 30-day price volatility has dropped to historically low levels. Reviewing the past eight similar low-volatility periods, the median absolute price change of Bitcoin over the subsequent 60 days has reached about 30.2%, with four instances of increases and four instances of decreases.Based on the current price of approximately $64,000, a 30% upward volatility would target a price of about $83,200; if it goes downward, it would be around $44,800. Farrell also pointed out that Bitcoin's approximately 2% rebound this Monday was mainly driven by short covering, and the future direction remains unclear, while the continuous rise in real bond yields poses the greatest downside risk at present.

The PPP prediction market tool monitoring shows that in the Polymarket "OpenAI Astra Release Date" prediction market, the probability of OpenAI releasing Astra before August 31 has risen to 24%, an increase of 8% in 24 hours; the probability of it being released before September 15 is currently reported at 61%, an increase of 6% in 24 hours. According to the settlement rules, if OpenAI releases Astra before the corresponding deadline, or releases a product confirmed to be the same model as Astra and makes it publicly available, the market will settle as "Yes."Public testing or open waitlists qualify, but closed testing and private access do not count; the main settlement basis is OpenAI's official information. Previously, OpenAI disclosed that it would slow down the development process of Astra until appropriate safety measures are established. However, OpenAI founder Sam Altman also stated that Astra is a powerful model, and the company is working hard to make it available to a broader range of users.

Payward (the parent company of Kraken) stated that in the coming weeks, it will use Claude Mythos 5 to scan for vulnerabilities in all Payward environments, and the findings will be directly incorporated into its existing security program.

Glassnode co-founder Rafael Schultze-Kraft stated that the current low volatility environment of Bitcoin (BTC) does not necessarily indicate an investment opportunity, and the market may be forming a "volatility trap."Schultze-Kraft pointed out that the implied volatility of BTC is currently in the lowest 2% range of historical distribution, but the volatility level priced in the options market is still about 1.5 times that of the actual market volatility performance.He noted that the "volatility trap score" constructed by Glassnode has currently reached 91/100, the highest level in over 3.5 years. Schultze-Kraft believes that although the current market appears to be in an extremely low volatility state, the options prices do not fully reflect the actual trends, and the volatility premium paid by investors may be relatively high.This indicator shows that the market is experiencing a rare phase of volatility compression. Historically, similar extreme low volatility environments often create conditions for subsequent volatility expansion, but the specific direction still depends on capital flows, the macro environment, and market catalysts.

BitMart founder Sheldon stated that regarding the public accountability statement released by a BitMart employee through the official Twitter account, he has completed the collection of evidence related to the content and claims that the information is all false. Sheldon indicated that he will report to the police during the day in the United States and send a lawyer's letter to the X platform, requesting technical and data evidence collection regarding the relevant content. Sheldon also stated that employee assets do not take precedence over customer assets, and everyone is a customer, with no privileges existing. Previously, BitMart employees publicly questioned the whereabouts of platform assets and related handling situations. Sheldon had previously stated that he would respond to the whereabouts of platform assets by the 19th.Blockchain investigator ZachXBT posted on the X platform questioning the BitMart exchange. In response to the relevant account, he stated that if BitMart indeed has sufficient liquidity, it should directly return the funds to all users instead of issuing vague statements. ZachXBT pointed out that BitMart's related actions have caused real users to be unable to use their funds normally, and there is insufficient transparency. This statement has raised market concerns about the safety of the exchange's funds and operational transparency.

According to the Netherlands National Cyber Security Centre (NCSC-NL), attackers are exploiting a serious authentication vulnerability CVE-2026-65400 in the macOS screen sharing feature to target Mac devices exposed to the internet. The vulnerability has a CVSS score of 9.8, allowing attackers to bypass authentication and gain system root access without valid credentials.NCSC-NL stated that multiple reports of active exploitation have been received, with the affected devices' port 5900 being directly accessible from the internet. In the currently confirmed cases, attackers have successfully obtained root access and deployed Monero (XMR) mining programs on the infected Mac devices. Apple has recently patched the vulnerability through macOS Tahoe 26.6.1, Sequoia 15.7.9, and Sonoma 14.8.9. Security Affairs reminds users who have screen sharing enabled and have not yet updated their systems to complete the upgrade as soon as possible; if updating is temporarily not possible, they should disable the screen sharing feature to avoid exposing port 5900 to the internet.

According to Catcher Predict monitoring, the "Brazil Presidential Election" event is currently among the hottest trading topics on the prediction market Polymarket, with a cumulative pool size reaching $1.255 billion. The option with the highest market consensus is "Luiz Inácio Lula da Silva," corresponding to a winning probability of about 65.5%.

According to SoSoValue data, during the last trading week (Eastern Time from August 10 to August 14), Bitcoin spot ETFs experienced a net outflow of $390 million. The Bitcoin spot ETF with the highest net outflow last week was Fidelity ETF FBTC, with a weekly net outflow of $153 million. Currently, FBTC has a historical total net inflow of $9.88 billion.The second highest was Grayscale Bitcoin Trust GBTC, with a weekly net outflow of $88.3 million. Currently, GBTC has a historical total net outflow of $27.55 billion. The Bitcoin spot ETF with the highest net inflow last week was Grayscale Bitcoin Mini Trust BTC, with a weekly net inflow of $75.98 million. Currently, BTC has a historical total net inflow of $2.74 billion.As of the time of publication, the total net asset value of Bitcoin spot ETFs is $76.61 billion, with an ETF net asset ratio (market value compared to total Bitcoin market value) of 6.07%. The historical cumulative net inflow has reached $51.79 billion.

According to analysis by BIT official Chinese (@BITofficial_CN), the 7-day implied volatility of Bitcoin has fallen below the 30% mark to 25%, similar to the low volatility period in the summer of 2023.In the context of relatively low option prices, analysts suggest that investors consider a "spot replacement strategy" ------ selling part of their Bitcoin spot holdings, replacing it with a bullish call spread or directly buying call options, which can retain upside exposure. If the price continues to decline, the maximum loss is limited to the option premium, and the released funds can also earn interest elsewhere.

Ethereum co-founder Vitalik Buterin posted on the X platform, stating that the Bitcoin community deserves recognition for promoting the development of related technological concepts, including Utreexo and other UTXO (Unspent Transaction Output) state optimization solutions. The scaling route currently being explored by Ethereum is integrating the advantages of different blockchain state models in practice.Vitalik Buterin pointed out that Ethereum hopes to simultaneously leverage the advantages of UTXO model states, dynamic states, and solutions between the two, enabling the vast majority of network activities to achieve "hyperscale" while not sacrificing decentralization, ease of node operation, and censorship resistance.Vitalik Buterin stated that future Ethereum scaling is not simply about copying a certain architecture, but rather aims to enhance throughput while maintaining the openness and security of the network by combining different design philosophies. Among them, Utreexo is a state compression solution proposed by the Bitcoin ecosystem, which reduces the storage burden on nodes by introducing accumulator technology, making full node operation more lightweight, and is considered beneficial for enhancing Bitcoin's long-term scalability.

According to The Hacker News, the Netherlands National Cyber Security Centre (NCSC) has warned that a recently patched severe authentication vulnerability (CVE-2026-65400, CVSS score 9.8) in Apple's macOS screen sharing component has been exploited in the wild, allowing attackers to access Macs exposed to the internet (port 5900) and implant Monero mining software without valid credentials.Apple has fixed the vulnerability with an emergency update on August 6, alongside macOS Tahoe 26.6.1, Sequoia 15.7.9, and Sonoma 14.8.9, by enhancing credential verification through improved state management. The NCSC confirmed that in multiple attacks, the attackers gained root access and deployed mining software. Security researcher @osxreverser disclosed another pre-authentication vulnerability in the same component (also patched in 26.6), which allows bypassing password authentication with just the target IP, without needing a username.According to Calif, researchers developed usable attack programs for both vulnerabilities using AI in just 4 hours, demonstrating that AI is significantly shortening the time from vulnerability discovery to the development of attack code. Users are advised to update their systems immediately; if unable to update, they should disable the screen sharing feature.

SafePal stated that its order tracking plugin has a security vulnerability, leading to unauthorized access to some customer information.This incident involves approximately 39,798 users, with affected customers being those who placed orders between March 2, 2025, and April 11, 2026.The leaked information includes names, email addresses, shipping addresses, phone numbers, and purchase details, but does not involve mnemonic phrases, private keys, wallet passwords, bank card information, or government-issued identification numbers.SafePal stated that the relevant vulnerability has been fixed, and affected users have been notified individually. At the same time, the official has launched a query page where users can confirm whether they are affected by entering their order number and shipping country.

According to Catcher Predict monitoring, the event "UFC 330: Islam Makhachev vs. Ian Machado Gary (Welterweight, Main Event)" is currently among the top trading activities on the prediction market Polymarket, with a cumulative pool size reaching $2,402,700. The option with the highest market consensus is "O/U 0.5 Rounds," corresponding to a winning probability of approximately 95%.