soc

According to a report by Decrypt, security company Socket released research results linking 77 Firefox extensions to what it calls a "wallet theft factory," with 40 confirmed to have malicious behavior.These extensions disguise themselves as Web3 products like OKX, Rabby Wallet, and TronLink, tricking users into importing wallets through fake wallet interfaces or using modified real wallet code to steal mnemonic phrases and private keys as users input them. Mozilla's signature records show that this activity lasted from March 9 to August 3, and multiple extensions were still online at the time of Socket's report.About half of the extensions displayed realistic wallet interfaces and prompted users to import existing wallets, thereby intercepting the inputted mnemonic phrases or private keys; another 13 were modified versions of Rabby that sent account data stored in wallets to external servers while functioning normally; and 5 specifically collected saved credentials and clipboard content.Additionally, 37 extensions disguised themselves as password generators, dark mode toggles, VPNs, currency converters, and note-taking tools, but actually ran sports score applications sharing the same hardcoded credentials. Nine confirmed malicious extensions were initially released as score applications for sports like football and basketball, with subsequent updates replacing them with wallet theft code.Socket named this activity the "wallet theft factory," but cautioned that it has not confirmed whether all extensions are controlled by the same operator. The Socket team stated that any user who has entered mnemonic phrases or private keys into these extensions should consider it a "permanent leak" and immediately transfer funds to a new wallet, as uninstalling the extensions cannot undo the mnemonic phrases sent elsewhere.

According to The Block, the Blockchain Association has submitted a letter of opinion regarding the stablecoin issuer rules proposed jointly by the U.S. Department of the Treasury's Financial Crimes Enforcement Network, the Office of the Comptroller of the Currency, and the Federal Reserve. The association supports limiting the Customer Identification Program (CIP) obligations to transactions where issuers directly face customers in the primary market, and it should not extend to peer-to-peer transfer activities in the secondary market.At the same time, the association calls on regulators to further clarify definitions such as "account," "customer," and "digital asset service provider," excluding one-time redemptions and other non-continuous businesses, and to avoid creating overlapping compliance burdens with anti-money laundering rules. The association stated that the implementation of the rules should balance stablecoin security, operability, and space for industry innovation.

The digital asset advocacy organizations Crypto Council for Innovation (CCI) and Blockchain Association (BA) have filed a lawsuit against Illinois officials, opposing the state's 0.2% cryptocurrency tax. This tax is expected to take effect from January 2027, taxing based on transaction volume rather than income.The two organizations submitted the lawsuit in the Sangamon County Seventh Judicial Circuit Court, claiming that the tax violates the U.S. Constitution, the Illinois Constitution, federal and state due process laws, and the Internet Tax Freedom Act, and may result in double taxation. The lawsuit also states that the tax regulations are overly vague, placing compliance responsibilities on residents and brokers, and exposing them to civil and criminal penalties.Blockchain Association CEO Summer Mersinger stated that Illinois cannot implement a tax system that discriminates against digital businesses and increases uncertainty for consumers and enterprises. The Digital Chamber filed a similar lawsuit in July regarding the same tax, claiming it discriminates against digital asset traders.

The China Payment and Clearing Association issued the "Self-Regulatory Convention for Intelligent Agent Payment Applications," which regulates the behavior of member institutions in initiating and executing payment instructions using large models and other artificial intelligence "intelligent agents" in payment scenarios. The convention requires banks, non-bank payment institutions, clearing institutions, and others engaged in intelligent agent payment applications to adhere to the principle of "who provides the payment service is responsible," and to implement cybersecurity, data security, and privacy protection.The convention proposes the establishment of "Know Your Agent (KYA)," a hierarchical management system for intelligent agents, and a full-link identity transmission mechanism, strengthening model robustness and traceability, anti-money laundering and anti-fraud controls, and setting stricter authorization and risk control measures for vulnerable groups such as the elderly and minors. The convention will be implemented from the date of its release.

According to on-chain analyst Ai Yi's monitoring, the entity associated with bit (0x6c8...d84f6) has taken profits for the first time in four months, reducing its position by 38,000 ETH and realizing a profit of 9.407 million USD.Currently, four addresses still hold a long position of 82,000 ETH, with unrealized profits exceeding 20 million USD.

According to CoinDesk, the Crypto Innovation Council (CCI) and the Blockchain Association recently filed a civil lawsuit in Sangamon County, Illinois, officially joining the legal challenge against the state's digital asset tax policy. This move follows a lawsuit initiated by the Digital Chamber last month, marking a further escalation of the industry's coalition against the measures.The plaintiffs accuse the state’s new tax law of violating the U.S. Constitution, the Illinois Constitution, and the Internet Tax Freedom Act. The controversy stems from the tax law's stipulation that any entity conducting business or providing services to residents in the state with an annual income exceeding $100,000 must pay a 0.2% tax on digital asset transactions or storage. Although lawmakers expect this measure to raise $6 million annually for the state budget, the plaintiffs argue that the lack of corresponding taxes on traditional assets constitutes a 'unique punitive treatment' of digital assets, allegedly resulting in unfair resource allocation through the tax code.

According to monitoring by Lookonchain, the Matrixport-associated whale (@BITofficial_EN) holds 120,000 ETH and 500 BTC long positions, valued at $187 million and $29.33 million, respectively.After holding for 4 months, the long position changed from an unrealized loss of $92.5 million to an unrealized gain of $11.5 million.

According to crypto journalist Kate Irwin, an abnormal asset outflow event occurred on GalaChain this Tuesday, with 1.99 billion GALA (approximately $2.9 million) and other tokens transferred from five main addresses to a new wallet, and GALA was cross-chain exchanged for ETH within about an hour. Approximately 82% (1.639 billion GALA) came from a wallet associated with Gala CEO and co-founder Eric Schiermeyer, which also saw an outflow of about $500,000 in other tokens.Hours after the incident, Gala developers submitted a fix on GitHub, characterizing it as a GalaChain EIP-712 unsigned field injection vulnerability. Currently, Gala has suspended the Ethereum and Solana cross-chain bridge, with officials stating "under maintenance," and GalaChain and its CEO have not yet responded to requests for comment.

According to Onchain Lens monitoring, the wallet related to a16z (0xb5E...c24e) has unstaked and transferred 89,470 HYPE to Wintermute a few minutes ago, worth approximately 6.6 million dollars, possibly for sale.

According to CoinDesk, a source revealed that the social media platform X is in discussions on how to use stablecoins (such as Circle's USDC) to pay royalties to influential users for content uploads. The source stated that negotiations with X are still ongoing.He is also working on other social media platforms that are testing the use of stablecoins to pay commissions to influential users.

The China Gold Association issued a stern statement regarding the U.S. Department of Homeland Security's inclusion of certain domestic gold enterprises in the "Uyghur Forced Labor Prevention Act" (UFLPA) entity list, which led to the London Bullion Market Association (LBMA) suspending the qualified delivery status of related enterprises. The association stated that the U.S. "forced labor" accusations lack factual basis and are an attempt to politicize human rights issues and promote trade protectionism.The LBMA, without sufficient factual verification, accepted false information and suspended qualifications, harming the legitimate rights and interests of Chinese gold enterprises and disrupting the stability of the global gold market. The association stated that the Chinese gold industry chain has the ability to withstand external risks and will work together with the industry to protect rights, strengthen compliance self-discipline and traceability system construction, and support the Chinese government in taking necessary countermeasures, urging the U.S. to lift sanctions and calling on the LBMA to correct related decisions.

According to CoinDesk, Rob Nichols, President and CEO of the American Bankers Association (ABA), stated that the goal is to strengthen rather than block the passage of the CLARITY Act. He believes that the digital asset industry needs a clear regulatory framework, but a key provision in the bill regarding stablecoin rewards still needs to be tightened further. Nichols pointed out that the GENIUS Act, set for 2025, has already prohibited stablecoin issuers from paying interest or returns to holders, and the current controversy revolves around whether related parties, such as cryptocurrency exchanges, can offer similar interest-like rewards.He believes that if stablecoin wallets attract bank deposits out through such mechanisms, it could weaken the funding base that banks use for small business loans, housing mortgages, and agricultural financing. The American Bankers Association suggests amending the relevant statements in the bill to prohibit stablecoin rewards that are "substantially similar" to interest payments and to remove certain wording that may cause ambiguity. Nichols stated that these modifications would not prevent crypto companies from offering other reward programs but could avoid the reward mechanism evolving into a disguised form of deposit interest.He also mentioned that the American Bankers Association is pushing for senators to amend the relevant provisions before the vote in September and believes that the U.S. can be both a global banking center and a global crypto center, provided that clear and consistent regulatory rules are established.

The attention economy platform Kaito AI launched the browser extension Kaito Pulse on August 18, which can directly integrate users' public holdings and other off-chain activities on platforms like Polymarket and Hyperliquid into the X timeline, and synchronously introduce the attention metric Aura to measure the attention signals generated by users' statements and actual behaviors. Users can accumulate Aura by installing the extension, using Yaps to receive initial Aura, verifying transactions, or engaging in creator activities.Subsequently, well-known analyst @0x_ultra released a source code analysis stating that the extension has multiple data collection behaviors, including generating a unique device fingerprint through GPU rendering, device model, and audio tests, and associating it with the X account; recording user behaviors such as scrolling duration, clicks, searches, bookmarks, etc., during X sessions, and sending heartbeat packets every 30 seconds; reading subscription plans and usage for ChatGPT and Claude during verification, as well as wallet balances, holdings, profits and losses, and deposit/withdrawal records on platforms like Binance. The extension only allows communication with the Kaito domain, and the ZKTLS part is based on the open-source project Primus branch. Kaito officials have not yet responded to this.

According to Onchain Lens monitoring, a wallet suspected to be associated with the Ethena team deposited 17 million ENA to FalconX one hour ago, worth approximately 14.09 million USD, possibly for over-the-counter (OTC) sales.This wallet previously received ENA from Ethena's Gnosis Safe last year.

The Blockchain Association submitted a comment letter to the U.S. Securities and Exchange Commission (SEC), urging it to abolish outdated rules 611 and 610(e) to promote market structure adaptation to tokenization development.The association pointed out that the current rules can no longer match the technological realities of blockchain and tokenized securities, calling for timely updates to the regulatory framework to facilitate compliant innovation and enhance market efficiency.

On-chain data shows that three wallets associated with Multicoin currently hold approximately 1.777 million HYPE, valued at about 10.2 million USD.Previously, some related HYPE was transferred to Coinbase Prime and Galaxy OTC, but it cannot be confirmed whether the sale has been completed.

In the second quarter 13F holdings report for 2026 (reporting period ended June 30, 2026), Bridgewater Associates, founded by Ray Dalio, disclosed a reduction of 1,359,038 shares of Micron Technology, still holding approximately 116,700 shares, with a reduction ratio of about 92%.

A study published at USENIX Security '26 shows that researchers identified 65,340 high-risk crypto addresses associated with abuse on Ethereum and BNB Chain, with associated native token losses amounting to 126,982.94 ETH and 17,726.7 BNB.The study estimates that the total losses associated with these addresses exceed $574.8 million, with two newly described active attack vectors directly leading to approximately $15.7 million in losses (accounting for 2.7%).The first type involves misuse of contract accounts and exploitation of deterministic contract addresses; the second type uses EIP-7702 to delegate accounts exposing keys to malicious code for direct fund transfers. The research team extracted over 16.3 million deduplicated private keys by mining 63,004 GitHub repositories from January 2015 to May 2025, with an overall detection accuracy of 99.11%.

According to Bloomberg, Trump is being sued for planning to sell quick access to Truth Social posts.

According to Onchain Lens monitoring, Abraxas Capital (0x73f...32E) has transferred 10,100 XAUT (worth approximately $43.92 million) to another wallet.In the past 3 days, this entity has transferred 25,400 XAUT (worth approximately $110 million) between wallets, most of which was previously accumulated from Bitfinex. The associated wallet cluster holds 137,920 XAUT, worth approximately $600 million.