sec

According to crypto journalist Kate Irwin, an abnormal asset outflow event occurred on GalaChain this Tuesday, with 1.99 billion GALA (approximately $2.9 million) and other tokens transferred from five main addresses to a new wallet, and GALA was cross-chain exchanged for ETH within about an hour. Approximately 82% (1.639 billion GALA) came from a wallet associated with Gala CEO and co-founder Eric Schiermeyer, which also saw an outflow of about $500,000 in other tokens.Hours after the incident, Gala developers submitted a fix on GitHub, characterizing it as a GalaChain EIP-712 unsigned field injection vulnerability. Currently, Gala has suspended the Ethereum and Solana cross-chain bridge, with officials stating "under maintenance," and GalaChain and its CEO have not yet responded to requests for comment.

The open automated research challenge better.codes, created by the Ethereum Foundation's formal verification team in collaboration with Yukon and zkSecurity, is now live. This platform formalizes the self-contained problems from the Proximity Prize in Lean and places the machine-checked reliability bounds of koalaIRS12 on a public leaderboard, allowing anyone to contribute to improvements, advancing hash-based SNARK and post-quantum Ethereum-related security benchmarks.Solvers can bring their own AI agents to prove higher lower bounds of reliability for this Reed-Solomon proximity problem, moving towards a fixed target of 128 bits. The Lean kernel verifies each submission, and the promoted proofs will enhance the public bounds, with new lemmas, proof techniques, and impossibility results being synchronized upstream for reuse by all participants. Most hash SNARKs in production environments rely on related proximity gaps and related conclusion agreements, while the currently provable results remain below the benchmarks trusted by researchers; this challenge aims to narrow this gap in an open, incremental, and verifiable manner.koalaIRS12 originates from related papers and is end-to-end formalized in ArkLib. Participants can log in via GitHub and clone the challenge repository, submitting under fixed theorem statements and verification frameworks; results confirmed by the comparator and Lean kernel are recorded in a public repository, noting the solver and the model used. Today's launch features the reliability challenge that raises the proven lower bound of koalaIRS12 to 128 bits, with more problems potentially added later, subject to project terms.

The latest research from the Anti-Corruption Data Collective (ACDC) shows that at least 152 anonymous wallets on Polymarket may have profited approximately $8 million by trading on advanced knowledge of U.S. military and defense-related information, achieving an average win rate of 97.2%. However, the research institution emphasizes that blockchain data itself cannot prove the actual identities of the controllers of these wallets, nor can it confirm the sources of their information, and therefore insider trading cannot be established based on this.ACDC analyzed settled markets on Polymarket, focusing on "low probability high stakes" behaviors, which are trades that cumulatively bet at least $2,500 within one hour, with corresponding outcome probabilities not exceeding 35%. The study identified 556 wallets with abnormal trading patterns, of which 152 were involved in military and defense markets. These wallets were referred to by researchers as "Orcas," characterized by their sudden appearance, betting on low probability events, and achieving abnormally high success rates before profiting and exiting.The research found that the success rate of low probability bets in military and defense markets was significantly higher than the overall level on Polymarket, and some abnormal trades quickly attracted large traders and automated trading bots to follow. For example, before a U.S. attack on Iranian nuclear facilities in June 2025, an abnormal bet on U.S. military action appeared, after which an automated trading bot subsequently bet $200,000, and another large trader bet $100,000. Researchers also found similar abnormal bets and follow-on trading behavior before the U.S.-Israeli attack on Tehran.David Szakonyi, co-founder of ACDC, stated that the abnormal trading activities on Polymarket are more public than many traders realize, and large traders and bots are already tracking and replicating suspected informed trades, so foreign intelligence agencies may also be monitoring these public on-chain trading activities. The issue of insider trading in prediction markets has recently received ongoing attention from regulatory agencies. In April, the Commodity Futures Trading Commission (CFTC) accused U.S. Army soldier Gannon Ken Van Dyke of trading Polymarket contracts using confidential information regarding the capture of former Venezuelan President Maduro, allegedly profiting over $404,000. This case is not directly related to the 152 wallets identified. Additionally, in May, the CFTC also charged a Google software engineer with trading 23 Polymarket contracts using confidential information related to the company's 2025 "annual search" rankings, profiting approximately $1.2 million with near-perfect accuracy. Polymarket has previously stated that the company closely monitors suspicious trading and has reported dozens of wallets to the relevant authorities. As the scale of prediction markets continues to expand, insider trading, market manipulation, and national security risks are becoming important reasons for regulatory agencies to strengthen oversight.

Coldcard has released the latest firmware 5.6.1 (Mk4/Mk5) and 1.5.1Q (Q). This update is based on a three-week security review following an emergency fix, focusing on addressing the security risks posed by previous mnemonic phrase generation attacks. Each newly generated mnemonic phrase must include at least one user entropy source, such as irregular key presses at least 65 times, physical dice rolls 50 times, or physical coin tosses 128 times, combined with fresh entropy provided by STM32 TRNG, SE1, and SE2.The new firmware also adds pre-signing phased PSBT verification, strengthens USB connection and firmware update boundaries, improves Delta Mode isolation mechanisms, fixes active wallet backup issues, enhances random number generator initialization and fault checking, adjusts SIGHASH default settings, and includes multiple security and correctness improvements. Coldcard states that this update aims to further reduce the risk of the device being attacked.The official reminder is that updating the firmware cannot fix existing mnemonic phrases generated by previously affected firmware. If a user's mnemonic phrase falls within the scope of this security announcement, they should first update the device, then generate and verify a brand new mnemonic phrase, and migrate funds to the new wallet. Coldcard recommends that all Mk4, Mk5, and Q users update their devices promptly and verify the signatures of the downloaded firmware.

According to Cointelegraph, cybersecurity company Rapid7 has disclosed a phishing operation named Operation Asterix, targeting approximately 885,000 phone numbers across multiple countries and directing victims to fake wallet service websites. A total of 5,576 phone numbers have been matched with Binance user accounts and are included in the attack queue.The attackers steal mnemonic phrases by impersonating fake applications of Ledger, Trezor, and Exodus, while also using forged customer service emails and phone calls to contact victims. Rapid7 also found that out of over 316,000 phone numbers in Germany, 43,066 matched with cryptocurrency trading accounts, resulting in a hit rate of approximately 13.6%. Related attacks also include a bulk phone number verification tool targeting Kraken accounts, with investigations revealing that AI tools have been heavily used in the phishing operations.Data from blockchain security company Hacken shows that phishing attacks and social engineering scams caused losses of $306 million in the first quarter of this year, accounting for the majority of the total losses of $482 million in the cryptocurrency industry.

CITIC Securities released its 2026 semi-annual report, showing that the company achieved operating revenue of 49.692 billion yuan in the first half of the year, a year-on-year increase of 50%; the net profit attributable to shareholders of the parent company was 23.343 billion yuan, a year-on-year increase of 69.6%. The basic earnings per share reached 1.53 yuan, a year-on-year increase of 71.91%.The company's 2026 interim profit distribution plan is: it is proposed to distribute a cash dividend of 4.27 yuan (tax included) for every 10 shares, totaling a cash dividend distribution of 6.672 billion yuan (tax included).

According to RootData, among 3,244 cryptocurrency projects with financing records spanning no more than four years and amounts that can be accounted for, 1,617 have a cumulative financing amount of no more than $5 million, accounting for 49.8%. The median financing for this batch of projects is $2.5 million, with about 96% recording only one round of financing.In terms of sectors, DeFi, infrastructure, and gaming projects together account for 59.2%, with small-scale financing mainly flowing to protocol development, underlying technology, and consumer applications. However, a quarter of the projects in the sample have already ceased operations, indicating that while lower regulatory thresholds can improve financing efficiency, they cannot replace product demand and sustainable operational capability.Institutional participation is also higher than the market's usual perception of "small projects": 92.9% of the sample has identifiable investor records, and 83.5% disclosed at least two investors. Among them, Animoca Brands, Shima Capital, and Big Brain Holdings participated in 84, 69, and 67 projects, respectively.It is reported that the U.S. SEC officially proposed the "Regulation Crypto Assets" on August 18. The proposal aims to set up two tiers of issuance exemptions: projects can raise no more than $5 million in a single instance within four years; projects with greater financing needs can raise up to $75 million within each 12-month period, but must submit financial statements and fulfill ongoing reporting obligations. The proposal is currently in a 60-day public comment period and has not yet officially taken effect.

According to The Block, Securitize President Brett Redfearn stated that the U.S. Securities and Exchange Commission withdrew the crypto innovation exemption rule last Friday due to concerns about the voting progress of the Clarity Act.Redfearn expects that the rule will be introduced after the Senate votes on September 15, possibly in early October.

According to ZDNet Korea, Samsung Electronics is accelerating the expansion of its advanced wafer foundry capacity in the United States. The company plans to start the second phase of construction at the Taylor wafer plant in Texas by the end of this year, aiming for mass production by 2030, and has requested major equipment partners to obtain SEMI certification in advance for subsequent equipment import and export. SEMI certification is a standard for assessing the safety of semiconductor equipment and is usually a necessary procedure before equipment leaves the country.The Taylor wafer plant is responsible for Samsung's most advanced foundry mass production tasks. The first phase is currently undergoing equipment entry and installation, with a target to start production by the end of this year, focusing on a 2-nanometer mass production process, with Tesla seen as a core customer. Samsung stated in last month's second-quarter earnings call that to respond promptly to the growing customer demand, the second phase of Taylor will commence by the end of this year. Industry insiders say that although the specific specifications for the second phase have not yet been finalized, Samsung's foundry business has already pushed forward relevant preparations in advance.Previously, Samsung had postponed the investment in the first phase of Taylor multiple times due to insufficient customers and a sluggish market, until Tesla signed a foundry agreement worth approximately 22.76 trillion won in the third quarter of last year, which accelerated construction. The actual pace of mass production in the second phase will still depend on the expansion of supply to Tesla and the progress of new major customers. Additionally, there are reports that Samsung E&A is considering dispatching dozens of construction personnel locally.

Yesterday, the cryptocurrency market experienced the strongest single-day performance of the year. Bitcoin reached a high of $70,000, marking the first time in two months; Ethereum peaked at $2,300; Solana rose by about 12%. The Bitget Research Institute analyzed that the core driving force behind this round of market activity comes from a dual breakthrough in policy and regulation: the White House convened a meeting with the president, executives from the cryptocurrency industry, and heads of the SEC and CFTC, marking the formal entry of digital assets into the national financial strategy discussion level; on the same day, the SEC proposed "Regulation Crypto Assets," establishing a clear channel for token financing and introducing the "investment contract safe harbor" mechanism for the first time, which is expected to promote the emergence of more U.S.-native projects.From a market structure perspective, when the first two catalysts were realized, the market was in a bearish position, and the price increase triggered a chain reaction of liquidations. On that day, 126,000 traders across the network had a total of $1.92 billion in positions liquidated, setting a record for the largest short liquidation day in history, further amplifying the price increase. The Bitget Research Institute believes that since a considerable proportion of this round of price increase comes from concentrated short liquidations rather than spot buying, there is a short-term pressure for market correction. However, from a medium to long-term perspective, the cryptocurrency market is迎来政策与流动性的双重转折点, with the clarification of regulatory pathways and the improvement of the long-end liquidity environment together forming the foundation for a new cycle.

According to BBX data, yesterday global US stock, Hong Kong stock listed companies, and asset management giants disclosed the latest developments in digital asset injection, compliance trust listings, and institutional-level custody, with the core information as follows:ZeroStack received a $1 billion Memecore token injection: 0G Treasury Company ZeroStack Corp. (NASDAQ: $ZSTK) announced that Puple AI Inc. and Blockcat Pte. Ltd. have reached an agreement to inject a total value of $1 billion in Memecore tokens (M) into the company. In exchange, ZeroStack will issue 3,500,000 shares of common stock, as well as pre-financing warrants to purchase up to 36,198,293 additional shares of common stock (with an issue price of $25.19 per share, more than 12 times the recent market price).Grayscale advances Zcash Trust listing on the NYSE Arca market: Grayscale submitted the fourth amendment of the registration statement for Grayscale Zcash Trust (ZEC) to the SEC, intending to list it on the NYSE Arca market (code: ZCSH). After listing, it will support authorized participants to continuously purchase and redeem shares (previously traded only on OTCQX and not redeemable). As of June 30, 2026, the trust holds approximately 2.3% of the circulating supply of ZEC, with a net asset value (NAV) of approximately $155.2 million; additionally, a subsidiary of Grayscale's parent company DCG is negotiating to purchase trust shares with approximately 200,000 ZEC.OSL Group's enterprise-level stablecoin USDGO connects to Ceffu institutional custody: Hong Kong listed company OSL Group (00863.HK) announced that its compliant enterprise-level stablecoin USDGO has officially become one of the custodial assets of the institutional digital asset custody platform Ceffu. Qualified Ceffu institutional clients can now directly deposit, hold, and withdraw USDGO through their exclusive custody accounts.

According to crypto journalist Eleanor Terrett, sources revealed that before President Trump and crypto industry leaders spoke at the White House, Coinbase CEO Brian Armstrong, a16z's Chris Dixon, Ripple CEO Brad Garlinghouse, and Kraken co-founder Arjun Sethi met with U.S. Secretary of Commerce Howard Lutnick. The discussion focused on the importance of the Clarity Act and its implications for U.S. jobs, economic growth, and attracting crypto businesses back.Participants also discussed the remaining obstacles to the passage of the bill, including issues related to ethical clauses, and how the White House could help facilitate a bipartisan consensus.

U.S. SEC Chairman Paul Atkins stated at today's cryptocurrency meeting with President Trump at the White House that the most important priority right now is for Congress to send the CLARITY Act to the President's desk for his signature, and the SEC is fully supporting this effort.