nsa

The security team of the open-source wallet provider OneKey successfully replicated the exploitation of a vulnerability in the old version of the Ledger Ethereum application in a laboratory environment. OneKey's founder and CEO Wang Yishi stated that they executed a "transaction replacement attack" on Ledger Ethereum application version 1.22.1 by exploiting a previously patched vulnerability, allowing attackers to overwrite pending transactions while users review legitimate transactions.Ledger responded that exploiting this vulnerability requires controlling the communication between the device and the host, such as through malware, compromised wallet software, or malicious web pages. Ledger has added application layer protections in the Ethereum application version 1.22.2 released on August 13 and fixed the underlying issue in Secure SDK 26.6.1 on August 21. Ledger emphasized that no users were hacked as a result; this was merely a replication of the vulnerability in a laboratory environment.This security test occurred after the Coldcard vulnerability incident. Previously, the Coldcard wallet had a firmware vulnerability that posed security risks to some mnemonic phrase generation, but Ledger stated that its devices were not affected by this vulnerability because recovery phrases are generated by a certified random source built into the device's secure chip. The vulnerability replicated by OneKey is unrelated to mnemonic phrase generation but affects the way transactions are processed during the signing process.

The blockchain gaming platform The Sandbox stated that it will compensate users who held bridged SAND on Base or BNB Smart Chain at a 1:1 ratio before the bridge vulnerability attack, with compensation provided in Ethereum-based SAND from the project treasury, and there will be no token issuance. This attack resulted in the theft of approximately 14.744 million SAND from the Ethereum treasury, valued at about $700,000.The application process is expected to open within two weeks and will last for two weeks; over 72% of the balances held by two centralized exchanges that meet the compensation criteria will be directly compensated to affected customers. The Sandbox indicated that the attacker exploited a configuration vulnerability in the SAND contracts on Base and BNB Chain, becoming the sole validator of bridge messages and minting unbacked tokens. Additionally, over 339 trillion unbacked SAND was minted on the two networks but has been isolated and cannot be cross-chain or exchanged; SAND on Ethereum and Polygon remains unaffected, and the compromised bridge contracts will be permanently disabled.

According to monitoring by Catcher Predict, in the prediction market Polymarket for the event "Kansas City Royals vs. Toronto Blue Jays," the "Kansas City Royals" option in the sub-market "Kansas City Royals vs. Toronto Blue Jays" has experienced a dramatic fluctuation in winning probability, soaring from 61.5% an hour ago to the current 90.5% (a fluctuation of 29%). Please note the impact of related breaking news.

According to sources from The Wall Street Journal, Nvidia (NVDA.O) has suspended some deals that provided credit support in exchange for revenue sharing.

Coinbase stated on the X platform that the financial layer surrounding AI agents is referred to as agent finance, or AiFi, which encompasses agent trading and agent commerce. AI agents can research information, make decisions, and execute operations on behalf of individuals and businesses, and they need to perform basic financial activities such as payments, receipts, value storage, and fund transfers. Coinbase claims that it is building tools for AI agents to continuously execute financial operations within predefined goals, permissions, limitations, and security boundaries.Coinbase indicated that Coinbase Advisor, Coinbase for Agents, x402, and Coinbase Business have formed the AiFi infrastructure. Coinbase Advisor is an SEC-registered investment advisor integrated into the app for Coinbase One users, providing portfolio analysis and guidance through a chat interface; Coinbase for Agents connects tools like Claude, ChatGPT, and Cursor to Coinbase accounts via MCP, allowing users to set operational conditions and security boundaries for agents, as well as create independent sandbox accounts for agent use.Coinbase stated that x402 is an open payment standard initiated by Coinbase and currently managed by an independent foundation, which supports AI agents in paying fees to other agents, applications, and services. As of now, x402 has processed over 205 million transactions, with a transaction volume of $53 million, covering 200,000 sellers, with Coinbase facilitating 67% of the activities. Single payments can be used for API calls, datasets, research materials, or computing resources.Coinbase indicated that Coinbase Business supports enterprises in natively receiving AI agent payments in USDC, and Coinbiz can help merchants sell services and content to software without relying on credit card credentials, manual invoicing, or payment processes designed with human customers in mind. Eligible businesses can earn a floating reward of 3.35% from idle USDC balances. USDC currently accounts for 99% of on-chain agent commerce transactions, while x402 represents 97% of agent finance protocol usage, with related activities operating on Base.

The Sandbox released an update on the security vulnerability attack incident involving the SAND cross-chain bridge, stating that the attacker modified the verification mechanism to forge cross-chain deposit messages and mint unbacked SAND. This incident resulted in approximately 14.7423 million SAND being withdrawn, valued at about $697,000. Additionally, some uncollateralized SAND was profited through market trading, leading to an overall economic impact of approximately $1.497 million, of which the attacker actually obtained about $987,000.The Sandbox stated that the attack did not affect the supply of SAND on Ethereum and Polygon, with the total amount of SAND on Ethereum remaining unchanged at 3 billion. There were also no super administrator privileges stolen, and the attack stemmed from a vulnerability caused by the combination of the general call function in the token contract and the design of bridge permissions. Currently, the related addresses have been marked, and collaboration has begun with exchanges, security agencies, and the LayerZero team.For affected users, The Sandbox promises to compensate wallets holding legitimate bridged SAND with a 1:1 ratio of SAND on the Ethereum chain based on an on-chain snapshot taken before the attack. The compensation application process is expected to open within two weeks and will last for two weeks.

Japanese cryptocurrency exchange service provider Coincheck announced that it has completed the registration for electronic payment methods and other transactions on August 27, 2026, becoming the second company in Japan to obtain a license related to stablecoins.Coincheck stated that it will gradually develop stablecoin and on-chain financial related businesses based on its previous cooperation with the American company Circle to expand the use cases of USDC in Japan. The company claims that stablecoins have price stability linked to fiat currencies, which can be used for around-the-clock, fast, and low-cost transfers and payments.

The Sandbox released an incident analysis report on the vulnerability on August 22. The report shows that attackers exploited vulnerabilities in cross-chain configuration contracts on the Base and BNB Smart Chain (BSC) to steal 14,742,341.84 SAND from the Ethereum treasury, accounting for approximately 0.5% of the maximum supply, with an estimated economic impact of about $1.4968 million, of which approximately $987,000 was actually intercepted by the attackers. The Ethereum mainnet and Polygon network were not affected.Please do not purchase or send SAND on Base or BNB Smart Chain until further notice. The contracts deployed on Base and BNB Smart Chain have been permanently disabled and will not be reopened. The Sandbox stated that the team has reported the attackers' wallet addresses to blockchain analysis companies TRM Labs and Chainalysis and is in direct communication with relevant exchanges.The Sandbox also announced a compensation plan, which will compensate wallets that legally held cross-chain SAND on Base or BSC before the incident at a 1:1 ratio with Ethereum SAND. The compensation funds will come from The Sandbox treasury, and no new tokens will be issued. The application process will open in the next two weeks and will remain open for two weeks.

According to the latest stock spot exchange ranking released by RootData, Bitget's 24h public order book transaction volume is approximately $41.3151 million, with an increase of 22.84%, the largest increase among the top three, and a market share of 9.14%, up 1.25%. Binance's 24h public order book transaction volume is approximately $165 million, with an increase of 13.59%, a market share of 36.54%, and an increase of 2.41%.

According to Digital Asset, South Korean cryptocurrency exchange Bithumb won the first instance of a lawsuit regarding the "misissued Bitcoin" incident, with the court ruling that users who sold the misissued Bitcoin must return approximately 194 million won (about 145,000 USD).In February of this year, Bithumb faced a huge controversy after erroneously distributing 620,000 Bitcoins (worth about 5 billion USD at the time) as activity rewards. Subsequently, Bithumb initiated a recovery program and reported in March that 99% of the misissued Bitcoins had been recovered. This ruling is the first in four lawsuits filed against users who have not returned the funds, and the likelihood of Bithumb winning the subsequent three lawsuits has also increased. The basis for the court's ruling and whether the defendants will appeal have not yet been disclosed.

According to The Block, StarkWare announced that the first quantum-resistant Bitcoin transaction has been successfully executed.StarkWare's Avihu Levy used signature aggregation technology to protect public key data while ensuring that transactions are secure in the Bitcoin mempool, thereby introducing a second layer of security to protect assets.

AI Economic Settlement Agreement AEON disclosed that since its launch of the x402 AI payment architecture on the BNB Chain, it has processed over 1.4 million x402 transactions on the BNB Chain, with a total settlement amount exceeding 14.73 million USD. This agreement mainly supports AI Agents in autonomously completing instant verification and settlement of on-chain assets. Relevant transaction data is currently open for real-time tracking on BNB x402scan (https://bnbscan.ai/).

The Barclays strategy team stated that the rapidly expanding AI infrastructure is triggering a backlash among bipartisan voters in the United States, which could pose political risks to the currently popular AI trades.The construction of data centers has made AI a cost of living issue, and voters are dissatisfied with rising electricity costs. Barclays warns investors that AI trades lack new upward catalysts, and related stocks may face policy pressure.

According to The Kobeissi Letter, the total on-chain transactions of Solana reached a record 4.2 billion in July, a month-on-month increase of 13.5%. Compared to December 2025, the transaction volume increased by 2 billion, a growth rate of 91%. During the same period, Solana's native token SOL rose by 40% within 8 days, reaching its highest level since February 3.The increase in on-chain transaction activity was also driven by tokenized assets, with the current market value of RWA exceeding $38 billion. Several on-chain platforms contributed to this growth, with Jupiter currently handling 71% of DEX aggregator transaction volume on Solana. Since August 16, the total market capitalization of cryptocurrencies has increased by $58 billion, and on-chain transaction activity has returned to historical highs.

Binance co-founder He Yi stated that Binance Wallet currently accounts for about 75% of the overall wallet transaction volume, processing over $13 billion in transactions daily. The wallet uses a Multi-Party Computation (MPC) architecture to enhance asset security and account recovery capabilities, and integrates features such as error address protection, potential malicious contract warnings, and high-risk token/network alerts.He Yi mentioned that the future direction of self-custody development is not only to improve security strength but also to make security usage more intuitive at the product design level.

The blockchain network BNB Chain has enabled the Pasteur hard fork on the BNB Smart Chain (BSC) mainnet. The upgrade involves cross-chain bridge validation, validator authorization, staking, and governance security, while enhancing block capacity without changing the 450 milliseconds block time.This upgrade includes BEP-682, BEP-695, and BEP-675, which respectively involve duplicate validator entries, validator key rotation and penalty governance, and block submission processes. In the internal testing environment QANet, the new process increased throughput from 1,237 transactions per second to 2,324 transactions per second, but the related data comes from controlled tests and not mainnet measurement results.

According to Onchain Lens monitoring, Fireblocks Custody (9Ryc...4xfCxk) deposited a total of 28 million USD1 to Binance in three transactions over the past 21 hours, with amounts of 10 million USD, 15 million USD, and 3 million USD respectively.

BitcoinTreasuries.NET reported that Strive's SATA expects to raise enough funds to purchase over 130 bitcoins, with 90 minutes remaining until the transaction ends.Since returning to par value, SATA's trading volume has exceeded $125 million in the past three days.

According to HyperliquidNews monitoring, HyperEVM set a record for daily transaction fee revenue, reaching $538,100, with all fees paid and burned in hyperliquid.