node

THORChain has released its fourth update regarding the attack incident on May 15, and the proposal ADR028 has been announced, with voting for node operators now open.According to the recovery plan, the protocol will first absorb losses through its own liquidity, with the remaining portion to be shared by synthetic asset holders; the specific distribution ratio of the two is still under evaluation. The protocol's own liquidity will be reduced to zero, and will be gradually replenished through system revenue. This plan will not issue or sell RUNE, nor will it dilute any holders.On the technical side, GG20 will be temporarily retained and has completed patch upgrades. Trading will resume after the vulnerabilities are fixed and node rotation is successfully conducted, with a future release pace that is slower and more security-conscious. Innocent nodes located in the same vault as the attacker will be protected, while the attacker nodes will be fully confiscated. The recovered RUNE will be paired with the recovered assets, and any excess will be destroyed.The protocol also offers a white hat bounty to the attacker to recover funds; if some are returned, the recovery plan will be adjusted proportionally. THORChain remains neutral and permissionless, and there will be no review of the attacker's Swap transactions after trading resumes. Node operators are currently voting on the proposal direction, and the numbers in the ADR are only indicative, with adjustments to be made through Mimir later.

According to Decrypt, research published by Glassnode shows that nearly one-third of circulating Bitcoin has exposed public keys, theoretically making it vulnerable to future quantum computer attacks. Specifically, about 6.04 million Bitcoins worth over $46.9 billion are at quantum risk. Among these, approximately 1.92 million are structurally exposed, originating from early "pay-to-public-key" addresses, multi-signature structures, and Taproot outputs, which are script formats that default to exposing public keys.About 4.12 million are operationally exposed, stemming from address reuse behavior. Among the Bitcoins with operational exposure, approximately 1.66 million are related to exchanges, accounting for 8.3% of the total supply and about 40% of all operationally exposed Bitcoins. From the holdings of major exchanges, only 5% of Coinbase's Bitcoins are exposed to quantum risk, while Binance and Bitfinex have exposure rates of 85% and 100%, respectively. Glassnode states that this result should not be interpreted as a risk ranking of specific companies or a signal of solvency.

Glassnode stated that Bitcoin has reclaimed the real market average at $78,300 but has failed to maintain a position above this level. Historical cycles suggest that several weeks to months of consolidation may be needed before confirming a credible bull market transition. The 30-day moving average has seen its risk-reward ratio rise from 0.4 in February to 1.8 during the rebound, indicating that demand is insufficient to absorb the wave of profit-taking. This indicator needs to remain above 2 to signal a true recovery of buyer strength.The 30-day cost baseline at $78,200 has shifted from a support level to an overhead resistance level, while the cost baseline of the accumulation group formed from February to April ($71,400) is currently the most direct support level in the ongoing pullback. The internal structure of the spot market has weakened in recent weeks, with the cumulative volume delta (CVD) remaining negative overall, and Coinbase activity continues to lag. This indicates that while there is sporadic offshore speculative demand, the participation of U.S. institutions in the spot market remains relatively weak.CME futures open interest has continued to rise alongside prices, indicating that while overall spot demand remains hesitant near the current range highs, institutional participation in the derivatives market is improving. The accumulation rate of U.S. spot ETFs has recently slowed, further indicating that positions are increasingly driven by futures activity. Implied volatility is rebounding from low levels, primarily concentrated in short-term contracts, while long-term expectations remain stable. Realized volatility continues to decline, and the volatility risk premium has expanded, making the cost of hedging relatively manageable. Options positions remain defensive. The skew indicator shows a resurgence in demand for downside protection, while the negative gamma range around $75,000 makes spot prices susceptible to amplified hedging flows and increased price volatility.

According to PR Newswire, global payment giant MoneyGram announced a strategic partnership with Layer 1 blockchain Tempo to become its core validation node for cross-border remittances (Anchor Remittance Validator) and participate in network transaction validation.The three parties will jointly build a global interoperable payment network based on stablecoins, promoting on-chain settlement in real fund flows, while Stripe will provide on-chain stablecoin settlement services for MoneyGram on the Tempo infrastructure.

Glassnode data shows that the current Bitcoin price is around $76,700, with over 7.8 million BTC still in a state of unrealized loss.Glassnode points out that there is still a huge surplus of supply from buyers near the cycle high, and the market needs to fully digest this selling pressure in order to form a structurally sustainable upward trend.

The Chief Information Security Officer of Slow Fog, 23pds, disclosed on platform X that node-ipc has been compromised again. The released three malicious versions of node-ipc (9.1.6, 9.2.3, 12.1) carry the same credential-stealing payload, with the package being downloaded over 10 million times per week.

Glassnode data shows that Bitcoin long-term holders (LTH) experienced an unrealized loss of 15% at the beginning of April, while in previous deep bear markets, this indicator exceeded 75%. This indicates that despite the recent significant pullback in Bitcoin, the pressure faced by long-term holders is only a small fraction of historical cycle lows, and their belief in holding has not been tested to the same extent.

Glassnode's latest weekly report indicates that Bitcoin slowly climbed from $77,000 to $82,000 last week, with buying pressure continuing to support during the pullback, even as momentum began to cool near local highs. The spot CVD surged, reflecting strong bullish sentiment and a firm belief in price increases. Meanwhile, spot trading volume also increased, indicating that the recent price trend gained more support with heightened investor participation. However, the easing of price momentum suggests that buying and selling pressures are becoming more balanced, implying that the market may be entering a stabilization phase.The situation in the futures market is similar, with a rise in risk appetite. The increase in open interest indicates heightened speculative activity, with investors willing to take on more risk; the perpetual contract CVD surged, indicating sustained bullish momentum. However, the decline in long funding rates suggests a shift towards bearish sentiment, and bullish sentiment may have weakened.In the options market, the demand for downside protection has decreased, while open interest has increased, indicating a shift in market expectations towards neutral or slightly bullish. However, the volatility spread has surged significantly, indicating that the risks reflected in options pricing are much higher than the actual risks, reflecting a notable increase in participant uncertainty.In summary, supported by stronger on-chain activity, healthier profitability, and more stable holder positions, Bitcoin's market structure continues to improve. Although bullish sentiment is strengthening, the slowdown in capital inflows and cautious market sentiment suggest that the market remains sensitive to changes in risk appetite.

Glassnode pointed out that after Bitcoin broke through resistance and entered the $82,000-$83,000 range, market volatility has significantly rebounded. Options data shows that the implied volatility (IV) has rebounded sharply from the low in October 2025, with 1-week IV rising by 6 points, indicating a recovery in short-term options demand. The 25D skew continues to compress towards neutrality, with bearish hedge demand weakening.The volatility risk premium (VRP) has turned positive, and the future volatility priced in options is now higher than the realized volatility in the spot market. Additionally, there is a short-term gamma short cluster of nearly $2 billion around the $82,000 mark, and traders' hedging behavior may amplify the current price volatility.In the past 24 hours, selling call options accounted for 81% of trading flow, indicating that some traders are starting to cash in on gains, with overall positions leaning towards consolidation rather than panic hedging.

According to The Block, Glassnode data shows that Bitcoin whales on Hyperliquid have pushed net long positions to a new high for 2026.Glassnode pointed out on the X platform that in recent weeks, whales have continuously increased their cumulative long positions, continuing the trend of going long that began during last month's BTC price breakout. Hyperliquid, as the largest on-chain perpetual contract exchange, often sees whale activity used as a sentiment indicator, with the total whale positions on the platform amounting to approximately $3.5 billion, with longs slightly outpacing shorts. Most liquidations in the past month have concentrated on short positions. On Wednesday, Bitcoin briefly broke through $82,000, reaching a three-month high.Bitcoin has maintained a negative 30-day average funding rate for 67 consecutive days, the longest record in ten years, with some analysts believing this may indicate a market bottom. However, the long-short ratio on Binance is currently about 0.53, below 1, indicating that most accounts still hold a bearish outlook.

Glassnode's latest report indicates that Bitcoin has broken through the real market average ($78,200) and the cost price for short-term holders ($79,100). If it can maintain this range for the next week, the "deep value phase" since 2026 may become the shortest in Bitcoin's history.The next key resistance level in the current market is around $85,200. On-chain data shows that the 30-day net realized profit and loss average has turned positive to 0.003% of the market cap, and long-term holders have realized profits rising to $180 million daily, but this is still significantly lower than the over $1 billion level during the peak of this cycle.However, the market has realized losses still amounting to $479 million daily, which is 140% higher than the stable range of this cycle. Glassnode believes that it needs to continuously fall below $200 million to confirm a healthier demand recovery.In terms of capital, the 30-day net inflow of the U.S. spot Bitcoin ETF has turned positive again, indicating that institutional demand is recovering. At the same time, the perpetual contract funding rate remains negative during the upward process, suggesting that market short positions are still heavy. If shorts continue to be squeezed, it may further drive prices up.Additionally, there is a concentration of about $2 billion in "Short Gamma" positions around $82,000, and market makers' hedging behavior may amplify price volatility. Glassnode believes that the overall trend for Bitcoin remains strong, but the market has entered a more sensitive phase. If there is a lack of sustained spot buying support, there may be significant selling pressure around $85,000.

According to Protos, Bitcoin Core developers recently disclosed a high-risk vulnerability numbered CVE-2024-52911, which affects versions 0.14.1 to 28.4, allowing miners to remotely crash other users' nodes and execute code by mining specially crafted blocks.The vulnerability was discovered and responsibly disclosed by developer Cory Fields in November 2024. The fix was merged in December of that year and released with version v29 in April 2025. The last vulnerable 28.x version series was discontinued on April 19, 2026.However, since upgrading Bitcoin full nodes is voluntary, it is estimated that about 43% of nodes are still running the vulnerable old version software, facing potential risks. Fortunately, the cost of implementing such an attack is extremely high—miners would need to allocate significant computational power to mine invalid blocks that do not yield block rewards—so it is likely that it has never been exploited in practice.

Telegram founder Pavel Durov stated in his personal channel that the TON network transaction fees have decreased by about 6 times, and are currently approaching "almost zero" levels.Key adjustments for the next phase include: Telegram will replace the TON Foundation as the main driving force behind TON, Telegram will become the largest validator on the TON network, and the focus of the ecosystem will shift towards technical performance and infrastructure optimization; updates to the technical roadmap include: the launch of a new ton.org, the release of a new generation of developer tools (dev tools), and upgrades to network performance and scalability, with related upgrades expected to be implemented within 2-3 weeks.

The Zcash Foundation officially announced the release of Zebra version 4.4.0. This update fixes multiple consensus-level critical security vulnerabilities and strongly recommends that all node operators upgrade immediately. This includes a denial-of-service vulnerability that can cause new blocks to stop being discovered permanently, consensus divergences caused by errors in block signature operation (sigops) counting, anomalies in the processing of transparent transaction signature hashes, and risks of memory allocation amplification attacks.The Zcash Foundation stated that some of these vulnerabilities could cause Zebra nodes to accept blocks that are rejected by zcashd, leading to chain forks. If not updated in a timely manner, nodes may face risks such as interruption in block discovery, consensus forks, and resource consumption amplification, and there are currently no alternative mitigation solutions.

According to on-chain data platform Glassnode (@glassnode), the Bitcoin spot trading volume on major exchanges has fallen to its lowest level since October 2023, comparable to the level at the end of the previous bear market in September 2023. In a low trading volume environment, market depth has significantly decreased, and even minor capital flows can trigger liquidations, leading to a notable increase in the market's sensitivity to changes in liquidity.

Glassnode tweeted that the whales on Hyperliquid have been anticipating a price breakthrough in this range. Over the past two months, their confidence and long positions have continued to increase, indicating a strong bullish sentiment among large perpetual contract traders.

According to Decrypt, Admiral Samuel Paparo, the commander of the U.S. Pacific Command, stated during a hearing before the U.S. House Armed Services Committee that the U.S. government is currently running a Bitcoin node for cybersecurity-related testing, but is not engaged in mining.Paparo indicated that the U.S. military's interest in Bitcoin primarily focuses on its value as a computer science tool, including cryptography, blockchain, and reusable proof-of-work mechanisms, with the aim of using the Bitcoin protocol to strengthen cybersecurity and enhance military capabilities, which is still in the experimental stage. He also mentioned that maintaining the global dominance of the U.S. dollar aligns with U.S. military interests and gave a positive evaluation of the stablecoin legalization bill, the GENIUS Act, signed by Trump last summer, believing that the bill helps to solidify the global position of the dollar.

Kelp DAO officially stated in a post on X regarding the theft incident that the cause of the theft was the compromise of two RPC nodes hosted by LayerZero, while a third RPC node suffered a DDoS attack. This was an attack targeting LayerZero's infrastructure, and Kelp's own system was not involved in the construction or operation of that infrastructure.The 1/1 DVN configuration is the scheme recorded in LayerZero's documentation and is the default setting for all new OFT deployments. Kelp has been operating on LayerZero's infrastructure since January 2024 and has maintained open communication with the LayerZero team. During Kelp's expansion to Layer2, the DVN configuration issue was discussed, and at that time, the default configuration was explicitly confirmed to be appropriate. Kelp's current top priority is to safeguard user interests and prevent risks from spreading within the DeFi ecosystem. The team is collaborating with various parties within the ecosystem to analyze the impact, seek support, and explore all possible mitigation solutions.

The Zcash Foundation tweeted that it has released version 4.3.1 of Zebra. This version includes several critical security fixes, and all node operators are advised to upgrade immediately. Additionally, this version introduces a Dockerized mining environment, automated checkpoint management, and several CI enhancement improvements.