thor

According to Bitcoin News, the latest Senate draft of the CLARITY Act includes a provision that encourages ethical hackers, specifically "white hat" hackers, to responsibly disclose cybersecurity vulnerabilities. The proposal would authorize rewards for individuals who identify and report security flaws, aiming to enhance the protection of digital asset infrastructure before malicious actors exploit these vulnerabilities. This provision incorporates the views of former CFTC Chairman J. Christopher Giancarlo, who has long supported innovation in digital assets and market resilience.

According to on-chain analyst Yu Jin's monitoring, the AFX Trade hacker has begun exchanging ETH for BTC through the cross-chain exchange tool THORChain. The bridge of AFX Trade was hacked two days ago, resulting in the theft of 24.15 million USDC, which were subsequently exchanged for 12,500 ETH.One hour ago, the hacker started exchanging ETH for BTC across THORChain, and so far, 655.4 ETH have been exchanged for 18.86 BTC.

GoPlus Security issued a security alert stating that a user signed a malicious Permit transaction 183 days ago, resulting in approximately $1,625 of USDC being transferred by a phishing attacker.Since the user did not revoke the relevant authorization afterwards, the attacker again used that authorization to transfer approximately $75,780 of USDC.

According to official news, the ENS DAO has approved the proposal to activate a new security committee, with a term of two years. The committee consists of eight members and has veto power, allowing it to cancel proposals during the waiting period after malicious proposals are passed but before execution. The committee's authority is limited to canceling transactions within the time lock and cannot access treasury funds, submit proposals, or rewrite approved proposals.The committee can only exercise its power under emergency conditions specified in its charter. ENS points out that governance itself may become an attack surface—voting rights can be borrowed to initiate attacks, proposal codes can hide malicious behavior, and credential leaks can be used to push harmful transactions. The new committee adopts a 5-of-8 multi-signature, requiring at least five members' agreement to cancel a proposal, and must seek DAO voting for extension after the two-year term.

According to a report by Reuters, the French National Gaming Authority (ANJ) has stated that it has requested French internet service providers to block the prediction market platform Polymarket, citing that it promotes illegal betting services, which may lead to significant losses for users, and that some bets may be subject to manipulation risks.Polymarket will remain blocked until it complies with French betting regulations.

Cryptocurrency trading and liquidity service provider Cumberland announced on platform X that its Singapore subsidiary Cumberland SG Pte. Ltd. has obtained the MPI license issued by the Monetary Authority of Singapore (MAS), allowing it to provide Digital Payment Token (DPT) services and cross-border money transfer services.

According to Axios, Kevin McGurn, the interim CEO of Trump Media & Technology Group, stated that the company will launch a backend interface allowing financial services companies to pay for access to real-time data from Truth Social.McGurn mentioned that this is the company's first expansion of its media business into the data licensing field. The newly launched Truth API will provide customers with real-time access to content published by the top ten trending accounts on the platform.McGurn stated that customers willing to pay higher fees in the future will also gain access to more accounts' data. These accounts include important decision-makers who influence policy-making and geopolitical trends, such as former President Trump, the White House, FBI Director Kash Patel, White House Deputy Chief of Staff Dan Scavino, and U.S. Secretary of Health and Human Services Robert F. Kennedy Jr.

Robinhood Chain's Pons launchpad officially responded to previous reports regarding a token authorization vulnerability in its frontend, stating that the Pons launchpad trading page does not have any Multicall3 functionality. The Multicall3 functionality mentioned in the tweet comes from the previous version of the Debank Chain cross-chain bridge, which was launched before the Pons launchpad and does not affect launchpad users.Currently, the only confirmed affected asset is 0.6 NOXA tokens, valued at approximately $0.66. As a security precaution, Pons recommends that users who have used the old cross-chain bridge revoke token authorization through revoke.cash. The team is currently working with auditing firms to investigate potential risks and stated that they will restore Pons frontend services once it is confirmed that there are no actual vulnerabilities.

According to a community alert released by Blockaid, the old governance proposals (#14 and #15) of BarnBridge Smart Yield have token authorization risks. If maliciously executed or upgraded, they may jeopardize existing token authorizations. It has not yet been confirmed that any funds have been withdrawn, but users are advised to check and revoke relevant authorizations on Ethereum as soon as possible.Proposal #14 is in an executable grace period, while proposal #15 is queued, with an expected on-chain execution time of July 16 at 09:23:58 UTC. The affected tokens include USDC, DAI, USDT, GUSD, and RAI, and the relevant contract addresses have been publicly disclosed. Blockaid reminds users to use trusted authorization management tools, not to trust links in replies or accounts claiming to be "support," and not to send funds or sign transfers to any address, only revoke authorizations through trusted tools.

Cryptocurrency trading and liquidity service provider Cumberland announced on platform X that its Singapore subsidiary Cumberland SG Pte. Ltd. has obtained the MPI license issued by the Monetary Authority of Singapore (MAS), allowing it to conduct Digital Payment Token (DPT) services and cross-border money transfer services.

According to CoinDesk, as the competition for tokenization in the capital markets heats up, the Securities Transfer Association (STA) recently submitted a letter of opinion to the U.S. Securities and Exchange Commission (SEC), warning that stock tokens issued by third-party organizations may undermine market integrity and calling on regulators to prioritize support for tokenized securities authorized by publicly listed companies in future rule-making.The STA represents several Wall Street transfer agents, whose members believe that true tokenized stocks should be formally authorized by the issuing company and recorded in the official shareholder register, rather than created as "packaged" token products by independent platforms.The association pointed out that third-party stock tokens may confuse investors about the actual rights they hold and expose them to risks related to platform credit, custody, and operations, without establishing a direct legal relationship with the publicly listed company. Therefore, any innovative exemptions, pilot projects, or permanent regulatory frameworks for tokenized securities should prioritize the issuer-supported model.The STA also urged the SEC to reform the existing Direct Registration System (DRS), arguing that the current U.S. securities custody system is inadequate to meet the real-time transfer and settlement needs of on-chain securities, and suggested that regulators collaborate with the Depository Trust & Clearing Corporation (DTCC) to optimize the digital securities infrastructure.Currently, the global market for tokenized stocks, valued at approximately $2 billion, is primarily dominated by third-party models, including products launched by Ondo Finance and Kraken, while organizations like Securitize and Figure adopt the issuer authorization model.

According to Bits.media, a new draft bill submitted by the Russian government aims to grant the Financial Supervisory Authority the power to monitor all cryptocurrency transactions. For cryptocurrency transactions exceeding 60,000 rubles and foreign trade cryptocurrency transactions exceeding 1,000,000 rubles, the agency will collect complete information such as the full names or corporate names of the payer and payee, wallet addresses, actual addresses, birth dates, and taxpayer identification numbers. Transactions below 60,000 rubles only require the provision of names and wallet addresses.The bill also stipulates that the new limit for digital asset transactions by banks is 1% of the bank group's capital, and banks must hold corresponding funds to cover risks for the purchased cryptocurrencies. The central bank will be authorized to restrict or prohibit specific cryptocurrency operations when they threaten investor interests or may "undermine the stability of the financial system," with the scope extending from non-bank financial institutions to banks. The bill is expected to take effect simultaneously with the main cryptocurrency regulatory legislation, originally scheduled for implementation on July 1, but the review has been postponed. The first deputy governor recently stated that the relevant laws may take effect on September 1.

According to The Block, the U.S. Supreme Court ruled 6 to 3 in favor of Trump's right to replace the leaders of several independent federal agencies, including the FTC, excluding the Federal Reserve, strengthening the president's control over personnel in regulatory agencies.As this ruling comes out, the SEC and CFTC are advancing a new round of regulatory rules for crypto assets, including rule revisions, exemptions, and the allocation of responsibilities regarding digital assets. Currently, the SEC is led by three Republican commissioners, while the CFTC has only its chairman, Michael Selig, in office.Former CFTC officials and industry insiders have stated that the reduction in the number of commissioners may weaken internal negotiations and the robustness of rules, and may also make rules under a single commissioner more susceptible to being rewritten or abolished in future administrations. However, as long as they comply with their respective authorizing statutes and the Administrative Procedure Act, the relevant rules still have legal effect.

According to Scam Sniffer monitoring, a user lost approximately 999,999 USDT after signing a phishing token authorization on Ethereum.The attacker initially attempted to withdraw 1 million dollars (which was 631 dollars more than the wallet balance) but failed. After 36 seconds, they recalculated and successfully withdrew the entire remaining balance. Scam Sniffer reminds users to verify all signature requests and never rush to sign transactions.

According to The Block, Ripple announced that it has obtained a full authorization as a MiCA CASP (Crypto Asset Service Provider) issued by the Luxembourg financial regulator CSSF, allowing it to legally provide crypto asset services in all 30 countries of the European Economic Area.

The Spanish National Securities Market Commission has authorized the cryptocurrency platform Venga to operate under the EU's Markets in Crypto-Assets Regulation (MiCA), making it one of the few entities in Spain to receive MiCA approval. The MiCA transitional period took effect on July 1, and digital asset companies that previously operated under national rules must obtain formal approval under the new regime, or they must cease providing regulated services in the EU.This authorization allows Venga to provide services within the market composed of 27 EU member states based on a single regulatory framework. Michael Stroev, co-founder and CEO of Venga, stated that the MiCA review covers aspects such as ownership structure, corporate governance, management suitability, risk framework, and product infrastructure. Previously, over 3,000 crypto companies in the EU held local virtual asset service provider registrations, but currently, about 240 companies have received full MiCA authorization, with fewer than 15 companies approved in Spain.

The Hong Kong Monetary Authority and the Financial Services and the Treasury Bureau jointly announced that the first phase review on promoting the further application of Distributed Ledger Technology (DLT) in Hong Kong's fixed income market has been completed.The review results indicate that the current legal and regulatory environment in Hong Kong is sufficiently flexible to support the issuance of tokenized bonds. The three batches of iconic tokenized bonds issued by the Hong Kong government and the increasing number of corporate issuances (including those from issuers in Asia and the Middle East) are the best evidence of this. The next phase will involve a review of the legislation to promote the broader application of DLT in the fixed income market and the digital asset sector, including allowing the electronic execution of tokenized bond issuance documents and exploring concepts such as "custody" and "transfer" of tokenized fixed income products.

According to The Block, Benchmark Equity Research maintains a Buy rating on Strategy and reiterates a target price of $570. This target price still has about a 515% upside compared to Strategy's closing price of $92.68 on Monday.Analyst Mark Palmer stated in the report that the digital credit capital framework launched by Strategy allows it to actively manage both ends of its capital structure based on market conditions, including repurchasing common and preferred stock when needed, selling Bitcoin to meet obligations, and suspending new issuances when the stock price is not at a premium.Palmer believes that this framework marks a shift for Strategy from a past focus on one-way issuance of securities to proactive two-way capital management. He stated, "This is a significant positive for shareholders."The report also noted that this framework addresses market concerns about dilution and enhances flexibility through a structured repurchase plan. Palmer also believes that the authorization to sell up to $1.25 billion worth of Bitcoin is negligible compared to Strategy's reserve of approximately 847,000 BTC.

According to official news, Binance has announced that it has decided to withdraw its MiCA license application submitted in Greece and instead seek authorization in another EU member state. The company stated that this move is based on a prudent assessment of the current approval progress and timeline in Greece, emphasizing that user interests are at the core of the decision.Binance stated that Europe remains an important market for it, and its commitment to operate in compliance with the EU MiCA unified regulatory framework remains unchanged. It expects to obtain the relevant licenses in a new member state within the next few months, but the specific country will be announced "when ready."

According to the THORChain announcement, the network has fully resumed operation after being offline for more than a month, with core functions such as signing, node churning, asset custody, liquidity provision, and cross-chain exchanges back online, and trading services officially restored.THORChain stated that this recovery prioritizes security and stability, and comprehensive verification of the treasury and key shares has been completed. The future roadmap includes native Monero exchanges, Zcash support, dynamic fees, and deeper liquidity optimization.