affected

Term Labs released a technical report on the security incident, confirming that all fixed-rate loan positions in the affected vault have been restored as of August 25. The incident was limited to the liquid balance within the Term vault, and Term V1 and V2 contracts were not compromised, with the direct lending market remaining open.Attack process: From August 17 to 18, the attacker funded an operational wallet through Tornado Cash and submitted a malicious proposal disguised as a governance proposal, setting the governance delay parameter to zero and removing the window for LP blocking changes. On August 23, the attacker executed two batches of attacks, extracting assets from the ETH and USDC strategies and transferring them to the attacker's wallet. Term Labs stated that it has cooperated with law enforcement, the affected vault and strategies have been closed, and the contracts have been upgraded and migrated before expiration.

According to the Ontology blog, its core development team discovered potential security vulnerabilities during routine security checks. Due to a high emphasis on the security and integrity of the mainnet, Ontology has immediately suspended block production on the Ontology mainnet to allow the technical team and validators to conduct a comprehensive security review of the network and related components. Ontology stated that no security incidents have been confirmed at this time, and there are no indications that user assets have been lost or stolen. ONT, ONG, and other on-chain assets are currently assessed to be unaffected; this suspension is a preventive security measure rather than a response to confirmed asset losses or ongoing attacks.During the review period, block production will remain suspended, and on-chain transactions cannot be processed. Users do not need to transfer or take any action regarding their ONT, ONG, and other on-chain assets, but should avoid conducting time-sensitive on-chain transactions until the network officially confirms its restoration. The duration of the suspension has not yet been determined, and the team will prioritize the comprehensiveness of the security review over speed; block production will not resume until the network has been thoroughly assessed and confirmed to be secure. The Ontology team is collaborating with validators and ecosystem partners to address this matter and will update progress through official channels, with a separate announcement to be made before and after the network restoration.

Blockstream stated that Jade is not affected by the Coldcard random number generator vulnerability and has released firmware 1.41 after receiving extensive AI-assisted security reviews. Jade indicated that it has undergone dozens of automated AI scans and multiple manual reviews, focusing on sensitive areas such as random number generation and transaction signing.The new firmware enhances stack protection, updates dependencies, audits sensitive memory cleanup processes, and upgrades the Jade runtime environment. Blockstream claims that Jade's random number generation mechanism uses multiple entropy sources, including hardware chip noise, timing data, sensor data, and camera noise, and mixes them using SHA-512 to prevent a single entropy source failure from affecting seed generation. The team stated that other lower-severity findings are still being addressed, and firmware 1.42 is expected to be released in a shorter development cycle.

The Interchain Foundation stated that it is committed to supporting the development of the Cosmos ecosystem and recognizes the impact of recent Cosmos EVM events on teams that rely on Cosmos technology for deployment.To this end, the ICF is establishing a discretionary funding program to support affected chains collaborating on remediation efforts. As part of the same program, the foundation will invest resources alongside the community to further enhance security practices, infrastructure, and incident response capabilities across the ecosystem.The foundation will continue to invest in the resilience and security of Cosmos, with more details on the new funding program to be announced in the coming days.

NVIDIA (NVDA.O) Chief Financial Officer stated that the outlook for fiscal year 2028 will be affected by supply constraints.

Cosmos Labs announced that an ongoing security incident has affected users of the Cosmos EVM module. The security and engineering team at Cosmos Labs is actively responding to the incident and has advised validators on the Cosmos EVM chain in contact with them to suspend the operation of their chain.Cosmos Labs appreciates the swift response from all teams using Cosmos EVM and stated that an incident report will be released after the situation is resolved. If relevant teams are using Cosmos EVM and have questions, they can contact security@cosmoslabs.io.

HumidiFi posted on platform X that the team discovered a security incident affecting certain internal network systems, with the impact limited to proprietary funds; customer and third-party assets were not affected.The team is actively investigating the incident, has suspended trading, and will provide further updates after the review is completed.

The Sandbox official stated that the team has confirmed and fully controlled the recent SAND cross-chain bridge vulnerability incident, involving the Base and BNB Smart Chain (BSC) networks.The official said that the impact of this incident is limited, involving less than 0.01% of the total supply of SAND tokens. SAND on Ethereum and Polygon is unaffected, and user wallets have not been compromised; related token holders and liquidity providers do not need to take action.According to disclosures, the attacker minted uncollateralized SAND tokens on the Base and BSC networks through the vulnerability. Currently, The Sandbox has disabled the SAND cross-chain functionality on both networks, and SAND on Base and BSC has been isolated, temporarily unable to be transferred or exchanged.The Sandbox reminds users not to buy, sell, or trade SAND on the Base and BSC networks, as liquidity on these networks has been affected.The team stated that they have completed a snapshot before the incident and are formulating a compensation plan for affected liquidity pool (LP) users, while continuing to investigate the scope of the vulnerability's impact. A complete incident report and technical review will be released subsequently.

RWA Layer 1 blockchain MANTRA Chain stated that the vulnerability in the Cosmos-EVM module has been fixed, the network is now back up and producing blocks, and the incident did not affect user funds. The team will release a complete post-incident analysis report in the coming days.

According to crypto journalist Kate Irwin, an abnormal asset outflow event occurred on GalaChain this Tuesday, with 1.99 billion GALA (approximately $2.9 million) and other tokens transferred from five main addresses to a new wallet, and GALA was cross-chain exchanged for ETH within about an hour. Approximately 82% (1.639 billion GALA) came from a wallet associated with Gala CEO and co-founder Eric Schiermeyer, which also saw an outflow of about $500,000 in other tokens.Hours after the incident, Gala developers submitted a fix on GitHub, characterizing it as a GalaChain EIP-712 unsigned field injection vulnerability. Currently, Gala has suspended the Ethereum and Solana cross-chain bridge, with officials stating "under maintenance," and GalaChain and its CEO have not yet responded to requests for comment.

Coldcard has released the latest firmware 5.6.1 (Mk4/Mk5) and 1.5.1Q (Q). This update is based on a three-week security review following an emergency fix, focusing on addressing the security risks posed by previous mnemonic phrase generation attacks. Each newly generated mnemonic phrase must include at least one user entropy source, such as irregular key presses at least 65 times, physical dice rolls 50 times, or physical coin tosses 128 times, combined with fresh entropy provided by STM32 TRNG, SE1, and SE2.The new firmware also adds pre-signing phased PSBT verification, strengthens USB connection and firmware update boundaries, improves Delta Mode isolation mechanisms, fixes active wallet backup issues, enhances random number generator initialization and fault checking, adjusts SIGHASH default settings, and includes multiple security and correctness improvements. Coldcard states that this update aims to further reduce the risk of the device being attacked.The official reminder is that updating the firmware cannot fix existing mnemonic phrases generated by previously affected firmware. If a user's mnemonic phrase falls within the scope of this security announcement, they should first update the device, then generate and verify a brand new mnemonic phrase, and migrate funds to the new wallet. Coldcard recommends that all Mk4, Mk5, and Q users update their devices promptly and verify the signatures of the downloaded firmware.

H100 released its second-quarter report for 2026, reporting a pre-tax loss of 98.2 million Swedish Krona, approximately 9.82 million USD, most of which was due to non-cash items, primarily from Bitcoin impairment.The company stated that the actual cash consumption for business in the second quarter was 5.1 million Swedish Krona, approximately 510,000 USD; for the first half of the year, it was 12.7 million Swedish Krona, approximately 1.27 million USD. As of the end of June, the company held cash of 18.1 million Swedish Krona, approximately 1.81 million USD.

According to BeInCrypto, Nasdaq-listed company Forward Industries reported a net loss of $69 million for the third quarter of fiscal year 2026, primarily due to impairment losses resulting from fair value adjustments of its Solana assets in accordance with U.S. Generally Accepted Accounting Principles. The company held approximately 7.55 million SOL at the end of the quarter, with the per-share SOL holding increasing by 9% quarter-over-quarter to 0.073; during the quarter, it increased its holdings by over 500,000 SOL through purchases and staking, and repurchased 2.5 million shares of stock.Revenue for the quarter increased more than fourfold year-over-year to $10.8 million, mainly from SOL staking and other financial services income. As of August 3, the company held approximately 7.8 million SOL, with the per-share SOL holding rising to 0.0754. After the earnings report was released, FWDI's stock price fell slightly by 1.36% in after-hours trading.

According to The Block, Tether-backed Bitcoin treasury company Twenty One Capital (NYSE: XXI) announced its financial performance for the second quarter of 2026, reporting a net loss of $413.5 million, primarily due to the decline in the value of its Bitcoin holdings. The financial report shows that approximately $401.5 million of Twenty One Capital's second-quarter losses came from the decline in the book value of its Bitcoin assets.As the company uses Bitcoin as its core asset allocation, BTC price fluctuations directly impact its financial performance. New CEO Raphael Zagury stated that Twenty One Capital cannot exist solely as a "Bitcoin treasury company" in the future but needs to transform into a broader financial services platform.Zagury proposed that the company's next phase will focus on three main directions, including: expanding its business landscape through mergers and acquisitions; enhancing financing capabilities using capital market tools; and exploring Bitcoin-collateralized loan services.

Regarding the abnormal and severe fluctuations in the perpetual contract market for TUT (TUTUSDT), Lobster (LobsterUSDT), and BICO (BICOUSDT) on August 9, 2026, Gate has promptly initiated a special review and risk control investigation. To protect users' legitimate rights and interests, Gate will provide full USDT compensation to affected users who meet the compensation criteria. The platform has opened a special processing channel, and affected users can contact Gate through official channels such as VIP account managers and online customer service. The platform will assist in implementing the compensation plan within three working days and will distribute the compensation amount to users' spot accounts.Gate stated that user rights are always the core focus of the platform, and it will continue to strengthen the identification of abnormal trading, risk control in low liquidity markets, dynamic management of risk parameters, and the construction of pricing and settlement mechanisms, further enhancing the platform's risk prevention capabilities and market governance level. Gate is committed to creating a fair, transparent, and secure trading environment, continuously listening to user feedback, and working with the community to maintain a healthy and stable market ecosystem.

Bitget's head of Greater China, Xie Jiayin, issued a statement indicating that in response to the abnormal price marking incident involving TUT and two other trading pairs on August 9, Bitget will compensate affected users who meet the criteria, with a total compensation amount of nearly 40 million USD. The compensation will be calculated based on the user's account equity at 15:00 on that day, addressing related losses caused by forced liquidation of short positions during the period of abnormal price fluctuations.Xie Jiayin also stated that Bitget will continue to uphold the concept of "a warm exchange," ensuring the protection of user rights for retail, VIP, and institutional clients alike. After handling the incident, the platform will continue to review and promote the continuous iteration of products and related mechanisms.

UPBIT will launch CYS on August 10 at 14:00, supporting BTC and USDT trading pairs. Users must complete their deposits within 2 hours after the announcement is made. As of the time of publication, the price of CYS has increased by over 20%, currently quoted at $0.979.

U.S. Treasury bonds faced pressure in the New York morning session. Google announced the launch of a 10-part bond issuance, dragging down the long end of the yield curve and pushing the 2s10s and 5s30s spreads to intraday highs. On the short end, reports indicated that if inflation data released in the coming weeks is hotter than expected, Federal Reserve Chairman Kevin Walsh "will be prepared to raise rates at the September meeting."Following the report, short-term U.S. Treasury yields rose. U.S. Treasury yields increased across the board by 3 to 4 basis points, with long-term bonds leading the decline, and the 2s10s and 5s30s spreads steepening by about 1 basis point to their widest intraday levels. The yield on the 10-year U.S. Treasury rose to about 4.65%, up 3.5 basis points on the day.Google's bond issuance covers multiple maturities, with the shortest being 2 years and the longest being 40 years. The interest rate market is currently pricing in about 15 basis points of rate hike expectations for September, with cumulative rate hike expectations of about 33 basis points by the end of the year.

According to monitoring by Galaxy's research director, a suspected organized Coldcard attack is occurring, with similar transactions still waiting for confirmation in the mempool. Previously confirmed transactions show RBF enabled. During the period from block 960,778 to 960,792, 218 transactions occurred within approximately 2.5 hours, involving 462 victim addresses, 216 new destination addresses, and 388.92748828 BTC; all transactions had no inputs earlier than the Coldcard firmware boundary.The clearing rate per block during this period was 13.8 times, compared to a pre-incident control window of 0.3 times per block, approximately 45 times higher. The transaction topology was 1:1, with each victim address corresponding to a new destination address, and only one destination address received two clearings, with no aggregation addresses appearing. Some funds have been cleared to second-hop addresses.

Bitcoin News posted on the X platform that Bitcoin Core developer instagibbs stated that he successfully reproduced the reported COLDCARD vulnerability on a newly initialized COLDCARD MK3 device, using only the number of button presses during the setup process, and said, "Sorry, now is the time to panic."He believes the issue affects MK2/MK3 devices but stated that it is currently not possible to confirm whether MK4 has a vulnerability. Developer Antoine Poinsot indicated that the key difference is that MK4 uses a hardware random number generator to provide entropy for the seed and actually uses the microcontroller's true random number generator (TRNG), while MK3 does not. The proof of concept and mnemonic verification are still under review.