risk

According to Decrypt, Google has fixed a high-severity vulnerability CVE-2026-85046 in the Chrome browser that was exploited by hackers. This vulnerability exists in the V8 engine, which is used to run JavaScript and WebAssembly.Google confirmed that the vulnerability has been exploited in the wild but did not disclose the identity of the attackers, the targets, or the specific method of exploitation. The patch has been included in Chrome versions 152.7977.82/83 and will be pushed out in the coming days or weeks.The vulnerability was reported by security researcher Salvatore Gulizia on August 4, and Google awarded him a $1,000 bug bounty. This update includes a total of 12 security fixes, of which 9 are high-severity and 2 are medium-severity. Google has not yet linked this vulnerability to cryptocurrency asset theft incidents, but browser wallets, exchange accounts, and trading extensions have previously been targeted in other ways.

Gate Research Institute released the August 2026 cryptocurrency and TradFi quantitative report. BTC and ETH rose approximately 25.1% and 32.6% respectively during the month. Gate contract data shows that the open interest amount for BTC increased from about $4.02 billion to $4.38 billion, while ETH rose from about $2.46 billion to $2.75 billion, with increases of approximately 9% and 12.1% respectively.The funding rates for both remained moderately positive most of the time, with long positions dominating the number of accounts, but the active trading long-short ratio was below 1. The TradFi market also rose in sync, with NAS100 increasing about 4.2% during the month, outperforming US500 and US30, while large tech stocks showed a divergence in trends.The report compared four models: moving average trends, trend momentum, Donchian breakout, and RSI mean reversion. Backtesting results showed that the 100-day moving average and 20-day price momentum strategies achieved positive cumulative returns on BTC, ETH, US500, and NAS100, with a median Sharpe ratio of 0.64 and a median maximum drawdown of 8.71%. The report includes Gate TradFi's US500 and NAS100 in cross-asset observations and evaluates market heat by combining Gate contract long-short ratios, funding rates, and open interest data. The execution over the next one to three months will focus on trend confirmation, volatility rebalancing, leverage limits, and cooling off abnormal liquidations.

On September 2, Curve DAO approved proposal 1492, appointing yRisk as the risk provider for crvUSD and Llamalend, concluding the selection process that began in July. The proposal passed with 621 million veCRV votes in favor, with only 5.33 votes against, and was executed 87 minutes after the voting ended. yRisk will receive a one-year revocable grant, including a principal of 125,000 frxUSD (held in sfrxUSD) and 568,000 CRV, while their previously requested annual funding amount was $250,000.yRisk consists of two members, who claim to be the main developers of Resupply, as well as core developers for Yearn and Resupply. Resupply is a stablecoin and lending protocol built on crvUSD and CurveLend, which lost $9.6 million in June 2025 due to a donation attack vulnerability, although this incident was not mentioned in the proposal. The reviewer, Swiss Stake, confirmed yRisk's experience with Curve but expressed concerns about their limited two-member team and the workload required to cover multiple Llamalend market monitoring scopes.LlamaRisk, which previously held the position, announced the early termination of its cooperation with Curve on May 29, ceased related work on June 30, and returned approximately 270,000 crvUSD of unallocated funds to the treasury. Curve founder Michael Egorov initiated a proposal solicitation on July 7.

OKX founder Star posted a reminder that depositing from high-risk addresses to OKX may trigger stricter anti-money laundering and risk reviews. Depending on the specific situation, the review may last for 15 days or even longer, and some account functions and funds may be restricted; for accounts confirmed to be involved in high-risk or illegal activities, OKX may terminate services.

According to Bitcoin.com, Fidelity Digital Assets has released an analysis report indicating that future quantum computers may derive Bitcoin private keys from exposed public keys, threatening asset security. Existing Bitcoin transactions rely on elliptic curve digital signature algorithms or Schnorr signatures, and sufficiently powerful quantum computers running Shor's algorithm could break this cryptographic assumption.The report evaluates the SHRINCS post-quantum signature scheme as a potential upgrade path—providing a compact 48-byte public key, with state signature sizes ranging from 548 to 4,619 bytes, and a 5,777-byte stateless fallback path to address state loss. However, quantum-resistant signatures will significantly increase transaction data size, consume more block space, reduce network throughput, and drive up transaction fees during congestion. Implementing such upgrades will require new consensus rules (possibly through a soft fork) and broad support from wallets, miners, exchanges, and custodians. In July of this year, Fidelity co-funded a $15 million Bitcoin security program with eight other institutions, covering anti-quantum research.

According to Euronews, Taiwan's stock market surged by 59% in the first half of this year due to a spike in demand for AI hardware, with chip giants like TSMC being the main drivers. Driven by high return expectations, a large number of ordinary people borrowed money to enter the market through bank loans and mortgage properties, with the scale of margin trading increasing by nearly 20% compared to the first half of the year.Some investors have made substantial profits, such as Mr. Chen, a real estate practitioner, who borrowed 5 million New Taiwan dollars and quadrupled his assets within six months; however, others have suffered significant losses, with one anonymous user claiming to have invested over 10 million New Taiwan dollars (including 6 million in mortgage loans) and lost nearly half, even experiencing mental health issues.Taiwan's Financial Supervisory Commission stated that the overall credit risk remains within a controllable range and has released videos on social media to warn young investors about the risks of loan defaults.

According to CoinDesk, the "credit pulse" indicator, which measures the speed of new credit in China relative to GDP changes, is flashing red. The Bloomberg China Credit Pulse Index recently reported 20.84 points, the lowest level since 2008. This indicator was proposed by economist Michael Biggs in 2008 and is considered related to the global manufacturing cycle, leading S&P 500 returns by about 12 months.Albert Edwards, a strategist at Société Générale, warned that ignoring China's recent monetary tightening could become "the biggest investment mistake of the decade." Despite the weakening indicators, Bitcoin surged 25% in August and briefly broke through $80,000, mainly driven by inflows from U.S. spot ETFs, short covering, and a catch-up rally of previously lagging assets compared to the stock market.Looking ahead, there are two scenarios: one is that Bitcoin continues to rise, as current crypto trading is primarily driven by U.S. institutional funds, reducing sensitivity to signals from China's credit conditions; the other is that if U.S. stocks decline as Edwards predicts, risk aversion may spill over into Bitcoin. Which scenario will materialize remains to be seen.

The Solana core client development team Anza announced that it is gradually removing floating-point operations from the Solana core protocol. The first layer, SIMD-0391, was activated in epoch 1026 of the mainnet Beta, replacing floating-point operations in the Stake Program and validator client’s warm-up and cool-down logic with fixed-point operations.The second layer, SIMD-0607, has been proposed and is under review, targeting the runtime itself to remove floating-point operations in the inflation rewards and rent calculation paths. Anza stated that floating-point operations can produce different rounding results on different hardware, validator clients, and compilers, which may lead to consensus divergence and network activity risks. These two improvements eliminate that risk by standardizing fixed-point operations. Further work will continue to address floating-point operations in other paths.

In response to the recent warning from Pablo Hernández de Cos, General Manager of the Bank for International Settlements (BIS), regarding the risks that stablecoins may pose to financial stability, Tether CEO Paolo Ardonio took to the X platform to criticize the BIS.He stated that there is a fundamental difference in the underlying risk structure between stablecoins and tokenized bank deposits. Stablecoins are essentially tools that are 100% backed by high-liquidity assets (such as U.S. Treasury bonds); in contrast, tokenized bank deposits still belong to the deposit system of banks, which typically use a fractional reserve model, with only a portion backed by high-liquidity assets.

According to South Korean media Daum, an analysis of the five major Korean won exchanges Upbit, Bithumb, Coinone, Korbit, and GOPAX, as well as the public API of CoinGecko, found that after excluding duplicate assets, the five exchanges collectively support approximately 606 types of crypto assets. Among them, 164 types (27.1%) are only available for trading on one exchange, and another 324 types (53.5%) are traded on two or fewer exchanges.Among the assets supported by a single exchange, Coinone has the most, with 55 types; Bithumb has 54 types, GOPAX has 25 types, Upbit has 16 types, and Korbit has 14 types. In terms of liquidity, the median trading volume of these 164 assets in nearly 24 hours is only about 1.37 million won, with 79 types having a trading volume of less than 1 million won, and 38 types even having zero transactions.The analysis suggests that listing on a single exchange does not inherently mean that the asset carries risk. If the relevant assets are actively traded on overseas exchanges or support smooth withdrawals, investors still have other exit channels. However, for assets with low overseas trading volume and restricted deposit and withdrawal networks, once support is terminated, investors may face difficulties in both selling and transferring.

According to GMGN data, BSC Meme Coin Niulai experienced a short-term surge, with a market capitalization exceeding 80 million USD, currently reported at approximately 79 million USD, with a 24H increase of 40%.Market news reminds users that the prices of Meme Coins are highly volatile, and investors should be aware of the risks.

Fox Business crypto reporters posted on the X platform that the Office of the Comptroller of the Currency and the Federal Deposit Insurance Corporation are advancing the finalization of a rule to define "unsafe or unsound practices" in bank regulation. This term has not been clearly defined for years, primarily relying on the broad discretion of bank examiners.Under this rule, when regulators determine that a practice is "unsafe or unsound," they must link it to actual illegal conduct or significant financial risk, thereby reducing the likelihood of pressuring banks serving legitimate clients, including crypto companies, based on vague reputational or procedural issues. This rule marks another important step towards further dismantling "Operation Chokepoint 2."

According to Bloomberg, the Orange County Employees Retirement System invested $60 million in SpaceX about eight years ago, and now that investment has grown to approximately $2 billion.Although the significant appreciation of the investment has brought considerable returns to the pension fund, it has also resulted in a concentration of assets that is significantly higher than expected. As a result, the fund needs to reassess and adjust its risk management and portfolio strategy to address the long-term management challenges posed by the high proportion of a single high-volatility asset.

NVIDIA CEO Jensen Huang defended the company's increasingly expanding role in financing the AI ecosystem on CNBC's "Mad Money," calling the investment in cutting-edge labs a "once-in-a-generation" opportunity and stating that the risks are relatively low. He pointed out that the outside world overlooks a key point: these are the first batch of startups that require hundreds of billions of dollars in funding, with a very high capital intensity for building and deploying AI. NVIDIA has invested in model companies like OpenAI and Anthropic, as well as new cloud service providers, and has provided financial support for data center projects, including $105 billion in support for a large computing power park in Ohio (with OpenAI as a tenant), and has collaborated with Wall Street institutions to arrange up to $500 billion in data center financing.In response to criticisms of "circular financing" and comparisons to similar internet bubbles, Huang stated that NVIDIA hopes to become an equity investor in cutting-edge AI labs and provide broader support, as these companies do not yet have investment-grade qualifications and low-cost financing records. He emphasized that the invested capital will yield substantial returns and that the risks are low because the computing infrastructure can be redeployed to other clients and workloads when the supported companies encounter difficulties. NVIDIA just announced better-than-expected results for the second quarter of fiscal year 2027: revenue of $96.2 billion, more than doubling year-on-year; data center revenue increased by 117% to $89 billion, and it is expected that revenue will grow by about 70% in fiscal year 2028. Following the announcement, the stock price rose about 4% in after-hours trading.

Coinkite's hardware wallet Coldcard has been exposed for a serious entropy vulnerability, which has gone undetected since 2021, resulting in over $100 million in Bitcoin being stolen, with victims mostly being users of single mnemonic wallets. The weak entropy allowed attackers to guess private keys through customized means, prompting the Bitcoin community to reassess the reliability of single-signature self-custody.Against this backdrop, multi-vendor multisig solutions are becoming the new custody baseline recommended by long-term holders. This solution requires users to construct multisig addresses using keys from different wallet vendors, such as Trezor Safe 7, Ledger Nano, and Casa recovery keys to form a 2-of-3 multisig, thereby reducing reliance on a single hardware vendor. Multisig can also defend against wrench attacks and has given rise to Bitcoin insurance services priced in BTC, such as AnchorWatch.However, multisig also has its drawbacks; users not only need to keep threshold keys but also need to save copies of the multisig script or template to independently recover funds when the wallet service is offline.

The latest survey by the National Institute on Retirement Security (NIRS) shows that 77% of Americans believe that cryptocurrencies in workplace retirement plans are risky, with 46% considering the risk to be extremely high, and 53% opposing employers offering cryptocurrencies as an investment option. The survey was conducted by Greenwald Research from October 24 to November 14, 2025, with a sample of 1,203 Americans aged 25 and older.The survey also revealed that 80% of respondents believe the U.S. is facing a retirement crisis, up from 67% in 2020; 61% expressed concern about achieving financial security in retirement, 68% believe it is becoming more difficult to prepare for retirement, and 77% stated that debt hinders adequate savings. Meanwhile, the Trump administration and federal regulators are pushing to expand access to alternative assets in retirement accounts.In May 2025, the U.S. Department of Labor rescinded previous guidance urging 401(k) fiduciaries to exercise "extreme caution" regarding cryptocurrency investments. Trump signed an executive order on August 7, 2025, directing the Department of Labor and the SEC to consider easing regulations. In March 2026, the Department of Labor proposed a draft rule allowing 401(k) plans to include alternative assets, but faced opposition from Senators Bernie Sanders, Elizabeth Warren, and others.

The Barclays strategy team stated that the rapidly expanding AI infrastructure is triggering a backlash among bipartisan voters in the United States, which could pose political risks to the currently popular AI trades.The construction of data centers has made AI a cost of living issue, and voters are dissatisfied with rising electricity costs. Barclays warns investors that AI trades lack new upward catalysts, and related stocks may face policy pressure.

According to an announcement on the official website of the U.S. Department of the Treasury, the U.S. Department of the Treasury has announced the launch of the Quantum Readiness Working Group. This working group is a public-private partnership mechanism that will promote the orderly and resilient transition of the U.S. financial industry to post-quantum technology, and will connect to the roadmap for post-quantum cryptography migration developed by the G7 Cyber Experts Group.The working group will operate through three workstreams: "Industry Collaboration and Post-Quantum Cryptography Migration," "Third-Party and Vendor Readiness," and "Digital Asset and Emerging Technology Risks." It will bring together government, financial institutions, financial market infrastructure, technology vendors, and other private sector participants, focusing on identifying critical dependencies, enhancing cryptographic agility and interoperability, strengthening the protection of critical financial infrastructure, and addressing implementation challenges related to third-party dependencies and digital assets.