zen

On August 20, MANTRA Chain released a complete review report of the security incident, confirming that the attacker exploited an unsigned integer underflow vulnerability in the balance accounting layer of the upstream dependency cosmos/evm, unauthorizedly transferring a total of 720,923,967.99 MANTRA from two addresses, valued at approximately 3.6 million dollars based on the price before the attack. Among them, the attacker transferred 600,000,035.56 MANTRA from the on-chain burn address and 120,923,932.44 MANTRA from a genesis-era multi-signature address related to an early incentive program.MANTRA stated that this incident did not involve the leakage of validator keys, administrator privileges, governance control, or multi-signature signers; the attacker did not require privileged access and could complete the attack solely through unauthorized contract deployment and self-funded wallets. The first abnormal transfer occurred at 19:06 UTC on August 20, when the attacker transferred approximately 600 million MANTRA from the burn address; subsequently, at 22:59 UTC, another transfer of approximately 120.9 million MANTRA was made. The chain subsequently stopped operating at 23:13 UTC and resumed after upgrading to v8.4.0. The entire network interruption lasted for 30 hours and 13 minutes.This vulnerability was not an issue with MANTRA's self-developed code but originated from the cosmos/evm module, which is responsible for providing EVM functionality on the Cosmos SDK. The vulnerability allowed the attacker to execute unsigned balance deductions without checking if the balance was sufficient, causing an overflow of values and bypassing normal account authorization logic. MANTRA stated that as of today, no funds have been recovered, with approximately 37.96 million MANTRA (accounting for 5.27% of the total transferred) still remaining in the attacker's address, which has been frozen due to the chain's suspension and v8.4.0 restrictions. The remaining funds have flowed to related trading platforms, and the recovery efforts have entered the law enforcement investigation stage. In the future, monitoring of accounts that cannot normally authorize transfers, burn addresses, and other historically "non-transferable" addresses will be strengthened, and efforts will be made to promote improvements in the security vulnerability disclosure process within the Cosmos ecosystem.

MANTRA Chain tweeted that it has noticed events affecting MANTRA Chain and has temporarily suspended the operation of the chain as a precautionary measure while conducting an investigation. Currently, all endpoints and transactions have been frozen.This means that deposits to MANTRA Chain and withdrawals from the chain are temporarily affected. If users are unsure of the specific impact on a particular transaction, it is recommended to pause operations and wait for further notice. The team stated that there is currently no fundamental cause or recovery timeline to announce and will update as soon as verified information is obtained through official channels, reminding users to rely only on official MANTRA channels for updates.

According to KOL Kuai Dong (@_FORAB), several cryptocurrency practitioners reported this morning that their addresses on other exchanges inexplicably received small deposits from HTX exchange, and shortly after receiving them, their accounts were frozen. Previously, several exchanges, including Binance and OKX, announced that in response to sanctions from the EU and the UK, they would no longer process deposits and withdrawals from HTX, otherwise accounts could be forcibly frozen. Some users in the community claimed that this action is similar to "address poisoning," which could trigger KYT/AML risk control on other platforms.However, HTX market manager MollyFu stated that the official side absolutely did not engage in such behavior; it is either a misunderstanding or someone is deliberately causing trouble. The platform has been processing tens of thousands of deposits and withdrawals daily in the past two days, and accounts are normal. They will not randomly airdrop to users on other platforms; if testing is conducted, it will only be done on a small scale through their own accounts. HTX stated that they have held an internal meeting to discuss the matter and are quickly investigating the cause, promising to provide an explanation to the community.

According to Livecoins, the Joint Task Force Against Organized Crime in Rondônia, Brazil (FICCO/RO) executed arrest and search warrants against a gang suspected of electronic fraud and money laundering. The criminal organization is accused of using cryptocurrency exchanges to hide illegal funds transferred from the original victims' accounts.A case investigated in 2025 resulted in losses of approximately $5.74 million. The court has issued 8 preventive arrest warrants and 18 search warrants, and authorized the freezing of related assets such as cryptocurrency exchange and bank accounts. In addition to targeting securities accounts, the law also mandates the seizure of vehicles and boats belonging to the individuals under investigation.

According to Decrypt, a volunteer security team stated that it scanned 150 Bitcoin code repositories using cutting-edge artificial intelligence models and discovered a dozen vulnerabilities. The team has built multiple AI-based review systems, targeting wallets, cryptographic libraries, infrastructure, and other Bitcoin projects. Team members claim that, on average, each person can find about one serious vulnerability per hour, and in the past 12 hours, they have submitted security reports to multiple projects, but specific affected projects have not yet been made public.

The Bitcoin Red Team's volunteer security initiative has scanned approximately 150 Bitcoin code repositories and disclosed more than a dozen vulnerabilities. The team is developing an open-source AI platform for auditing Bitcoin software, covering wallets, cryptographic libraries, infrastructure, and other projects.AnchorWatch CEO Rob Hamilton stated that the team has currently spent about $20,000 on various AI services and is using Kimi K3, OpenAI's GPT Sol, Anthropic's Claude Fable and Opus, as well as Z.ai's GLM 5.2 to identify vulnerabilities and generate related documentation. A pseudonymous Bitcoin developer, Calle, mentioned that the team has reported critical vulnerabilities to multiple projects in the past 12 hours, averaging about one critical vulnerability discovered per person per hour, with daily expenditures of approximately $10,000. The team did not disclose the affected projects or details of the vulnerabilities.

According to monitoring by Bitcoin News, Galaxy Research stated that the largest known COLDCARD theft involved 1159 BTC, spread across seven attacker addresses, which have not yet been utilized, with 0 BTC cashed out or transferred through mixers. The related BTC was stolen within 41 minutes, but approximately 600 attacker addresses have been flagged by law enforcement, exchanges, and blockchain analysis companies.Meanwhile, a smaller-scale attacker seems to have begun laundering funds. On-chain analysts tracked 64 BTC entering a mixer, of which only about 10 BTC were initially mixed, and 54 BTC were returned as change, which was then split into outputs of about 7 BTC for further mixing. Analysts noted that these unusually large outputs remain easy to trace, making this laundering attempt relatively transparent.

Bitcoin News posted on the X platform that the volunteer organization Bitcoin Red Team has scanned 150 code repositories, privately disclosed more than a dozen vulnerabilities, and identified key issues during the process of strengthening wallets, cryptographic libraries, and infrastructure following the COLDCARD vulnerability incident. This work has consumed approximately $20,000 in AI computing costs, covered by OpenSats.Researchers are using multiple AI tools, with many stating that open-source models like Kimi K3 have become primary tools for security research, while cutting-edge closed-source models like OpenAI and Anthropic are considered to impose more limitations in such analyses. The team plans to open-source its AI security tools to enable projects to continuously audit their own codebases. Researchers warn that Bitcoin may just be the first industry facing a wave of AI-assisted vulnerability discovery, with similar efforts likely to expand to all open-source software.

According to Fortune, Israeli cybersecurity startup Zenity announced the completion of a $125 million Series C funding round, led by Norwest, with participation from SoftBank Vision Fund 2, Hitachi Ventures, and LG Technology Ventures. The funding will be used to expand into the Asia-Pacific and European markets.Zenity focuses on enterprise AI agent security protection. Unlike traditional AI security solutions, its platform can monitor the behavior of AI agents in real-time, allowing for immediate interception or intervention if an agent deviates from preset goals or poses a risk to organizational data.CEO Ben Kliger stated that AI agents have been deeply embedded in various aspects of enterprise operations, and the adoption rate in the Asia-Pacific market is even faster than any previous wave of AI. There is strong demand in Japan, South Korea, Singapore, and Australia.

According to Bits Media, Russian law enforcement conducted a series of searches at a cryptocurrency exchange office located in the Federal Eastern Tower of the Moscow City Business Center. The police stated that the searches are related to a theft case involving 144 million rubles, with the funds suspected to have been circulated through related exchanges. They are currently tracking the transactions and investigating whether the office staff are involved.During the investigation, dozens of employees were detained, and a Moscow court has ordered pre-trial detention for eight of the defendants, while the procedural status of the remaining detainees has not been disclosed. The office temporarily ceased operations during the searches.

According to Jinshi reports, on August 1 local time, the U.S. Embassy in Israel issued a security warning, stating that the situation in the Middle East remains tense, the security environment is complex, and there is an unpredictable risk of escalation. The warning pointed out that U.S. citizens in the region should remain cautious, stay vigilant, and be prepared for possible flight cancellations, airspace closures, and travel disruptions.Some airlines have delayed the resumption of flights, and other routes have been canceled. The embassy emphasized that U.S. citizens should consider evacuation or be ready to evacuate at any time.

On-chain yield platform Altura announced that it originally planned to purchase USDT using fiat funds from its Altura bank account through over-the-counter trading partners, but the bank account holding the relevant funds has been temporarily frozen by the bank. Screenshots show that the frozen amount is approximately £16.446 million, about $21.88 million, and this plan has therefore been hindered.Altura stated that it has communicated with the bank regarding this matter, and the bank has requested that it wait for the review to be completed, stating that it will contact them separately if additional materials are needed. The current situation is completely beyond Altura's control, and they must wait for further responses from the bank. Altura also announced that due to limited team resources, it will suspend community chat functions to focus on addressing the current issues, and it promises that subsequent developments will be promptly communicated through its official X account, Telegram channel, and Discord, while urging the community to avoid speculation until official confirmation is received.

The European Union has further tightened restrictions on cryptocurrency assets related to Belarus, prohibiting Belarusian citizens and residents from owning, controlling, or managing cryptocurrency service providers regulated by the Markets in Crypto-Assets Regulation (MiCA). According to the Council Decision (CFSP) 2026/1847 passed by the EU Council, this measure is an extension of the EU's sanctions framework against Belarus's involvement in the Russia-Ukraine conflict.The new regulations will officially take effect on July 24, with the expanded restrictions on the cryptocurrency industry set to be implemented from August 25. According to MiCA, the affected services include operating cryptocurrency trading platforms, cryptocurrency exchanges, executing and transmitting customer orders, cryptocurrency issuance services, asset transfer services, investment consulting, and portfolio management.This restriction comes as the MiCA transition period ends on July 1. The EU had previously required unauthorized cryptocurrency businesses to cease related operations, or face regulatory enforcement. The EU stated that this expansion of restrictions is part of its efforts to combat the use of cryptocurrency platforms to evade sanctions against Russia. Previously, in the 21st round of sanctions against Russia, the EU had expanded the trading ban to 14 cryptocurrency-related service platforms outside the EU and established a mechanism to prohibit future transactions with any foreign cryptocurrency service providers identified as helping Russia evade sanctions. Market participants noted that as the MiCA regulatory framework is fully implemented, the EU is further strengthening its regulatory control over the cryptocurrency industry through licensing systems and sanction mechanisms.

According to Jinshi reports, U.S. Treasury Secretary Basant stated that $130 million in cryptocurrency wallets related to the Iranian Islamic Revolutionary Guard Corps has been frozen.

According to a statement from the U.S. Attorney's Office for the Eastern District of New York, two Chinese citizens, Chen Zhuoying (also known as "Jolene," 27 years old, Brooklyn) and Zhang Haojie (also known as "Kevin," 38 years old, Queens), were formally charged on July 16 in federal court in Brooklyn with conspiracy to commit money laundering.According to the allegations, the two managed a money laundering network of over ten people in Queens and Brooklyn from 2020 to 2022, using approximately 45 shell companies and 140 business bank accounts to transfer at least $43 million in proceeds from "pig butchering" investment scams to accounts in China. The "pig butchering" scam contacts victims through social media or instant messaging software, gaining their trust with false high-return investment opportunities before absconding with their money. This case is being jointly investigated by Homeland Security Investigations (HSI), the FBI, IRS-CI, and the U.S. Postal Inspection Service. If convicted, both defendants face a maximum of 20 years in prison.

The privacy blockchain Zano announced that Zenith has entered the implementation phase, with plans for a network transition in 2027, depending on the results of testing, analysis, and review. Zano has not yet announced an activation date, and the proposed operating parameters still require verification at the network level.Zenith will transition Zano from a hybrid PoW and PoS mechanism to a privacy-protecting pure PoS protocol, with the block time proposed to decrease from about 1 minute to about 15 seconds, and the recommended number of confirmations reduced from 10 blocks to 4 to 6 blocks, with a typical confirmation time of about 60 to 90 seconds. Zano co-founder and core developer Andrey Sabelnikov stated that Zenith is based on over 12 years of privacy research and aims to provide the network with the advantages of modern PoS while retaining the privacy protection that Zano users expect.PoW miners currently receive about 720 newly issued ZANO daily, which amounts to approximately 21,600 monthly and 262,800 annually. After the activation of Zenith and the end of PoW mining, this portion of issuance will be canceled; Zano will also launch the official Zano Forum for technical discussions and community support.

According to monitoring by Catcher Predict, in the market prediction event "PGA Tour: British Open Champion" on Polymarket, the "Yes" option for the sub-market "Louis Oosthuizen" experienced a dramatic fluctuation in winning probability, soaring from 0.05% an hour ago to the current 29.6% (a fluctuation of 29.55%). Please note the impact of relevant breaking news.

According to BFM News, the Johor state government of Malaysia has requested the federal government to investigate the Network School, founded by former Coinbase Chief Technology Officer Balaji Srinivasan, due to allegations that some Israeli citizens participated in the project using third-country passports. The Johor state government has asked the Ministry of Home Affairs and relevant law enforcement and security agencies to verify the identities, nationalities, and entry purposes of the individuals involved, and to investigate whether the operation of Network School requires registration or approval under Malaysian law.At the same time, authorities will also review whether the project complies with relevant regulations regarding site permits, building usage, land use, accommodation operations, and commercial activities. If any violations are found, actions will be taken in accordance with the law. It is understood that Network School is located in Forest City, Malaysia, founded by Balaji Srinivasan, and is a private residential community built based on his "Network State" concept, with membership fees starting at $1,500 per month, offering services such as accommodation, dining, fitness, and shared office space.

Token Pocket's Chief Business Officer Michael stated that the mnemonic phrase of the Robinhood founder was leaked during a live broadcast. After hackers gained control of the address, they used that address and associated addresses to buy a large amount of the Meme coin at $1, prompting thousands of investors to follow suit, rapidly increasing the market value of the token from about $500,000 to $14 million in a short period.Subsequently, the price of the $1 token fell sharply, with a trading volume of about $20 million within just two hours. After the related addresses were frozen, the hackers quickly moved to the BNB Chain (BSC), using that address and its associated addresses to issue new tokens, and created trading hype through self-buying and selling, ultimately executing a sell-off to cash out. Robinhood's RPC has frozen that address, and nodes do not allow transactions sent from that address to be packaged, so transfers and trades cannot be conducted.

According to Vietnam's Youth Newspaper, the Ministry of Public Security of Vietnam recently held a press conference to report the latest investigation results of the ONUS cryptocurrency platform fraud case. More than 350 kilograms of gold and silver have been seized, transactions involving 8 properties valued at 20 trillion Vietnamese dong have been frozen, and transactions of over 300 involved bank accounts have been suspended.On March 23 of this year, the police filed criminal charges against 8 defendants, accusing them of using computer networks and telecommunications networks to commit property appropriation and money laundering. Since 2018, the individuals involved have taken advantage of the public's lack of understanding of cryptocurrency, creating digital accounts through applications and packaging them as virtual currency. They established trust and attracted investment through circular buying and selling among affiliated companies, thereby committing fund appropriation, with a total sale of cryptocurrency valued at over 70 trillion Vietnamese dong from 2018 to 2021.The case involves numerous individuals and users, with approximately 5 million user accounts opened. The police have received over 2000 reports from citizens. The public security authorities are investigating the possible accomplice responsibilities of KOLs and other internet celebrities and continue to make every effort to recover the embezzled funds.