review

On August 20, MANTRA Chain released a complete review report of the security incident, confirming that the attacker exploited an unsigned integer underflow vulnerability in the balance accounting layer of the upstream dependency cosmos/evm, unauthorizedly transferring a total of 720,923,967.99 MANTRA from two addresses, valued at approximately 3.6 million dollars based on the price before the attack. Among them, the attacker transferred 600,000,035.56 MANTRA from the on-chain burn address and 120,923,932.44 MANTRA from a genesis-era multi-signature address related to an early incentive program.MANTRA stated that this incident did not involve the leakage of validator keys, administrator privileges, governance control, or multi-signature signers; the attacker did not require privileged access and could complete the attack solely through unauthorized contract deployment and self-funded wallets. The first abnormal transfer occurred at 19:06 UTC on August 20, when the attacker transferred approximately 600 million MANTRA from the burn address; subsequently, at 22:59 UTC, another transfer of approximately 120.9 million MANTRA was made. The chain subsequently stopped operating at 23:13 UTC and resumed after upgrading to v8.4.0. The entire network interruption lasted for 30 hours and 13 minutes.This vulnerability was not an issue with MANTRA's self-developed code but originated from the cosmos/evm module, which is responsible for providing EVM functionality on the Cosmos SDK. The vulnerability allowed the attacker to execute unsigned balance deductions without checking if the balance was sufficient, causing an overflow of values and bypassing normal account authorization logic. MANTRA stated that as of today, no funds have been recovered, with approximately 37.96 million MANTRA (accounting for 5.27% of the total transferred) still remaining in the attacker's address, which has been frozen due to the chain's suspension and v8.4.0 restrictions. The remaining funds have flowed to related trading platforms, and the recovery efforts have entered the law enforcement investigation stage. In the future, monitoring of accounts that cannot normally authorize transfers, burn addresses, and other historically "non-transferable" addresses will be strengthened, and efforts will be made to promote improvements in the security vulnerability disclosure process within the Cosmos ecosystem.

Tencent Hunyuan has released and open-sourced the next-generation large language model Hy4 preview. This model has a total of 770B parameters and 49B active parameters, with a context length exceeding 1M. It demonstrates strong capabilities in real productivity tasks such as coding, office work, and science, firmly placing it in the top tier of open-source models. Hy4 preview significantly expands in model size, context length, and data scale, and enhances real-world performance through high-quality data co-built with Tencent experts in software engineering, gaming, finance, security, and deep collaboration with products like WorkBuddy.In software engineering, the model enhances understanding, planning, debugging, and verification capabilities for long-range development tasks, enabling the construction of complex front-end projects like a Three.js miniature town from scratch. In game development, it supports generating playable prototypes from a single sentence and can complete a full demo in Unity. In smart office applications, it can handle complex financial audits, filtering, analyzing, and delivering from multiple documents. In scientific research, it achieves acceleration in tasks such as molecular dynamics simulations and has initially formed a recursive self-improvement feedback loop.Hy4 preview can be experienced in Tencent products such as WorkBuddy/CodeBuddy domestic and international versions, Yuanbao, ima, and can also be accessed via API calls through Tencent Cloud Tokenhub and OpenRouter. WorkBuddy/CodeBuddy will launch a limited-time free activity for two weeks. Since the reconstruction of the infrastructure, the Hunyuan large model has iterated a major version approximately every two months, continuously optimizing through a preview-first and formal version-following approach.

According to Gate market data, on August 28, both the Hang Seng Index and the Hang Seng Tech Index rose in the morning session. By the midday close, the Hang Seng Index was up 0.47%, and the Hang Seng Tech Index was up 0.6%.Hong Kong stock telecommunications infrastructure concept stocks led the gains, with Junzhi Group and Huanlian Lianxun rising over 4%, and Zhongji Xuchuang rising over 3%. Domestic property stocks collectively rose, with Xuhui Holdings Group and Sunac China rising more than 5%.

According to Bloomberg, the U.S. SEC submitted a new proposal to the Office of Management and Budget (OMB) on August 25, aimed at establishing a new custodial rules framework for investment advisors and investment companies holding client digital assets.The proposal will clarify the custodial framework for crypto assets, addressing previous questions from investment companies and advisors about how to hold digital assets for clients without violating regulatory requirements. It will also eliminate certain existing custodial requirements that the SEC considers outdated due to market evolution and current trading practices.The SEC stated that the proposal is part of Chairman Paul Atkins' efforts to modernize the regulatory framework. The complete details of the proposal will be made public after the OMB completes its review, after which it will be returned to the SEC, possibly with suggested modifications, and then voted on by a committee currently composed of three Republicans, before being announced publicly. As a matter of course, the SEC typically seeks at least 60 days of public comment before finalizing the proposal, followed by another vote for it to take effect.

According to The Block, the rescheduling date for Tornado Cash developer Roman Storm has been postponed to April 26, 2027, because the motion for his release on bail is still under review.Previously, U.S. prosecutors had pushed for the rescheduling to take place in October 2026. Tornado Cash is a mixing protocol in the Ethereum ecosystem, and Roman Storm, as one of the core developers, has faced judicial proceedings due to related charges. This schedule adjustment is directly related to the progress of his motion hearing.

According to Gate market data, the main Hong Kong stock indices fluctuated in the morning session. As of the midday close, the Hang Seng Index rose by 0.68%, and the Hang Seng Tech Index rose by 1.58%. Tech stocks rebounded in the morning, with Xiaomi Group rising over 4%, Meituan and Kuaishou rising over 2%, and Baidu, Alibaba, and Tencent Holdings rising over 1%. The financial sector was also active, with CICC and Shenwan Hongyuan Hong Kong rising over 8%, and Nanhua Futures and China Merchants Securities rising over 5%.

According to LiveMint, Nvidia CEO Jensen Huang stated in the All-In podcast that he personally reviews the compensation and remuneration proposals for the company's approximately 42,000 employees at the end of each cycle, and he almost always increases operating expenses. He said, "If you take good care of your employees, everything else will fall into place," and noted that there are more billionaires born from his management team than from any other CEO.The report cited a survey of about 3,000 Nvidia employees, stating that approximately 76%-78% of employees have become millionaires, with about half having a net worth exceeding $25 million. Employees can purchase stock through the company's stock purchase plan at a 15% discount, and Nvidia's stock price has increased nearly 3,800% since 2019, significantly boosting employee wealth.

The Alibaba Qwen team will release Qwen 3.8-Flash-Next on Wednesday, which is a mixture of experts (MoE) model with a total of 125 billion parameters, but only 6 billion parameters are activated for each token. The team positions it as a preview version of the next-generation Qwen 4 architecture, rather than the final flagship model.The model is described as multimodal and is built on the upcoming Qwen 4 architecture. The team stated that the early release of this version is to prepare developers for the subsequent complete Qwen series. The model weights will be hosted on the Hugging Face and ModelScope platforms.As of now, Qwen has not disclosed the benchmark results for this model, nor has it released comparative data with its own Qwen 3 series or overseas competitors. The specific figures of 125 billion and 6 billion parameters have not been officially confirmed. As an open-weight model, developers can download, fine-tune, and run it for free without sending data to a closed API, which helps reduce the cost of hosting the model.

Franklin Templeton portfolio manager Sara Alagi stated that Nvidia investors are focused not only on the company's earnings report "exceeding expectations," but also on the specific details of the company's capital deployment and spending plans. She pointed out that Nvidia's expected price-to-earnings ratio for the next 12 months is about 21 times, and the market has priced in expectations of slowing growth. Nvidia needs to demonstrate earnings growth to prove that its free cash flow can be used for investments and stock buybacks.

The cryptocurrency wallet project SafePal has released updates on the security incident, stating that it is continuously tracking phishing websites and impersonation accounts, and plans to introduce a professional anti-phishing security company to expedite the removal of malicious information to protect user asset security. SafePal mentioned that it is currently in the final selection process among four professional anti-phishing security companies, and once a partner is selected, it will further enhance the efficiency of handling threats such as counterfeit websites and scam accounts.The team is also continuously monitoring whether the affected data has been sold or made public, including channels such as dark web forums and trading markets. Once signs of data leakage are detected, affected users will receive risk alerts immediately. Regarding security audits, SafePal stated that it is in the final selection among three mature independent security institutions, which will conduct a comprehensive security review of the order system. Meanwhile, the team is reassessing the order and logistics processes to reduce the amount of data that needs to be stored in the initial phase of the system, thereby reducing potential risks from the source.For affected users, SafePal stated that it will continue to provide one-on-one assistance through official support channels and will keep updating the fraud protection page, providing updates on the incident, FAQs, and analysis of fraud cases. SafePal once again reminds users: the official will never ask users to provide their seed phrase. Users should not disclose their seed phrase to anyone, should not scan unknown QR codes or click on suspicious links, and should verify the source of information through official channels.

According to Cointelegraph, the European Commission is assessing whether to include crypto lending (including DeFi vaults) in the Markets in Crypto-Assets Regulation (MiCA). The relevant targeted consultation was launched on May 20, 2026, with a feedback deadline of September 30. MiCA originally excluded crypto lending and completely decentralized activities, but Brussels is currently reviewing these gaps.EU digital asset lawyer Yuriy Brisov stated that there is no category of "vault" in EU law, and lawyers need to define by function rather than label. Vaults decentralize economic functions such as lending across smart contracts and multiple participants (such as owners, curators, distributors, and sentinels in Morpho Vault V2), making it difficult to correspond to a single regulated entity. Cahill partner Jonathan Galea cautioned against treating "DeFi lending" as a single label, as products with different structures may be subject to a one-size-fits-all approach. Curve founder Michael Egorov noted that if included in regulation, they should be treated differently, as DeFi does not require all the protections of traditional lending and may need different rules.

The Shanghai Stock Exchange has changed the IPO review status of Yangtze Memory Technologies Co., Ltd. to accepted for its initial public offering and listing on the Sci-Tech Innovation Board, with a proposed financing amount of 33 billion yuan. The sponsoring institutions are CITIC Securities and CITIC Construction Investment.The prospectus of Yangtze Memory shows that after turning a profit in 2024, the profit level will rise rapidly, with operating revenue of 47.042 billion yuan and net profit attributable to the parent company of 33.379 billion yuan achieved from January to March 2026. According to TrendForce data, from January to March 2026, the company ranked third globally and first in China among global NAND Flash manufacturers by both sales revenue and shipment volume.

On August 21, China Merchants Yonglong Bank issued a notice to customers, stating that it is cooperating with the latest risk management and account compliance guidelines from the Hong Kong Monetary Authority and the Securities and Futures Commission to conduct a comprehensive optimization and review of investment accounts for mainland investors. Upon verification, all investment accounts held by relevant customers (including wealth management, securities, and/or paper gold passbook accounts) as of May 22, 2026, have no asset balance, and there have been no investment transaction records in the past 12 months, which have been classified as "zero balance non-active investment accounts."To maintain normal account operations, the bank requires customers to submit the "Non-Active Investment Account Declaration" as soon as possible. Customers can complete the submission through the pop-up in the personal account section of the China Merchants Yonglong Bank mobile app; joint account holders or those who have not registered for the mobile app can call the customer service hotline for guidance, and each joint account holder must submit separately. The main content of the declaration includes confirming the accuracy of personal information, the legality of the source of funds, that the account has not been closed or suspended due to suspicious documents, and timely notification of any changes in information.The bank reminds that if customers fail to complete the submission in a timely manner, new investment transactions (including buying stocks, subscribing to wealth management products, etc.) will be suspended accordingly; if the submission continues to be delayed, it is expected that starting from November 2026, relevant "non-active investment accounts" may be closed. Once an account is suspended or closed, no new securities or wealth management product investment transactions can be conducted.

The U.S. Securities and Exchange Commission (SEC) is reviewing the rule change application submitted by Cboe BZX Exchange, involving six leveraged commodity ETFs that track the benchmark's daily performance by three times. The initial review period set by the SEC is 45 days after publication in the Federal Register.Volatility Shares LLC is the sponsor of the relevant funds, which include 3x Gold, Silver, Bitcoin, Ethereum, Crude Oil, and Natural Gas ETFs, all intended to operate under a commodity pool and not classified as investment companies. Among them, the Bitcoin and Ethereum ETFs will primarily invest in near-month and next-month futures contracts on the Chicago Mercantile Exchange (CME), rather than directly holding Bitcoin or Ethereum, and will allocate cash and cash equivalents as collateral or margin.Before the relevant products are listed, the SEC must approve the exchange rule changes, and the trust's Form S-1 registration statement must also become effective. Each fund must have at least 100,000 shares at the time of listing, and authorized participants can subscribe or redeem cash at a rate of 1,000 shares per 10,000 shares.

According to CNBC, sources reveal that the Commodity Futures Trading Commission (CFTC) is conducting an internal review of the "mention markets" on prediction platforms. These markets allow traders to predict whether specific words will appear in scenarios such as speeches, company earnings call meetings, or television programs.Sources indicate that the CFTC notified Kalshi about the review a few weeks ago, after which Kalshi removed the mention markets related to sports from the platform. It is still unclear whether this review is only targeting sports-related contracts or if it covers all types of mention markets.

According to Decrypt, the Irish government has released its first national anti-money laundering (AML) strategy, which plans to strengthen the review of digital asset transfers involving self-hosted wallets and increase due diligence requirements for crypto companies when cooperating with overseas institutions.According to the announcement from the Irish Department of Finance, this strategy implements the remaining requirements of the EU's Transfer of Funds Regulation, which will require crypto asset service providers (CASP) to perform "enhanced checks" on transfers involving private wallets, while implementing stricter customer due diligence when conducting business with overseas crypto companies.The related measures are based on the Financial Action Task Force (FATF) Travel Rule, which requires the inclusion of sender and receiver information in digital asset transactions to enhance the transparency of fund flows. Ireland stated that the new regulations will be advanced in parallel with the EU's Markets in Crypto-Assets Regulation (MiCA).MiCA establishes a unified regulatory framework for crypto asset service providers, while Ireland previously granted a 12-month transition period for its domestic crypto companies, which is shorter than the maximum 18 months allowed by the EU. The transition period is set to end at the end of December 2025, so the new requirements will directly apply to companies that have obtained formal authorization.