att

According to Jinshi reports, the U.S. Fifth Fleet base in Bahrain was attacked by missiles and drones.

According to Cointelegraph, the Securities and Exchange Commission (SEC) of Thailand has filed a criminal complaint against the digital asset exchange Bitkub Online and two former directors, Sakolkorn Sakavee and Thaweesap Rawan, accusing them of involvement in false reports related to a cyber attack in 2021.The SEC stated that a cyber attack in May 2021 resulted in the theft of 16 digital assets from Bitkub, valued at approximately 1.7 billion Thai Baht, or about 50 million USD. The regulatory agency claimed that Bitkub subsequently replenished the stolen assets before October 31, 2021, but the daily net capital flow reports submitted from May 10 to October 30, 2021, did not accurately reflect the reduction in assets.Bitkub stated on the X platform that the case stems from disclosure decisions made after the cyber attack in May 2021 and is not an act of fraud. The exchange claimed that the delay in disclosing the compromised wallet was to avoid a bank run, and the co-founder subsequently purchased an equivalent amount of digital assets to cover the stolen funds, with no financial losses incurred by the company or its clients. Bitkub was established in 2018 and is one of Thailand's major cryptocurrency exchanges. Bitkub's parent company is considering a potential initial public offering, including the possibility of listing in Hong Kong.

According to Jinshi reports, a logistics warehouse in Saudi Arabia belonging to the U.S. military was attacked by drones, and explosions were heard at the scene.

The joint assessment by the UK Institute for AI Safety and the US Center for AI Standards and Innovation shows that Moonshot AI's Kimi K3 can assist in the development of exploit vulnerabilities and simulate cyber attacks without substantial hindrance, but its overall cybersecurity capabilities still lag significantly behind leading models in the United States.

According to Slow Fog monitoring, the decentralized finance protocol Lien Finance was attacked. The attacker exploited a smart contract vulnerability to mint uncollateralized bond tokens and stole approximately $542,000 USDC.Using this vulnerability, the attacker successfully minted new non-anomalous BondTokens without destroying the corresponding input bonds and exchanged USDC through a pre-authorized address, ultimately transferring about 542,144.63 USDC from the victim's address. Analysis indicates that this incident was essentially due to a validation flaw in the bond token exchange logic, allowing the attacker to bypass asset collateral constraints and mint unsupported assets.

According to The Defiant, Robinhood has confirmed that CEO Vlad Tenev's X account was hacked and used to promote a counterfeit meme coin called Vladhood on the Robinhood Chain. According to DexScreener data, VLAD recorded over $22 million in trading volume within hours, with a fully diluted valuation of about $2.6 million. The Robinhood Chain block explorer has marked the contract as a scam.On-chain records show that the token issuance address launched via the issuance platform Pons 46 minutes before the false post, and filled Tenev's X homepage as the token's official website, indicating that the token issuance and the hacking were part of the same coordinated operation. The attacker did not withdraw liquidity throughout the process but instead made six calls to Pons's fee collection function, extracting approximately 31.6 ETH and about 72 million VLAD, totaling around $247,000. This is at least the third social media scam related to Robinhood Chain meme coins in three weeks.

According to GMGN data, the top 5 tokens with net inflow of KOL in the past 24 hours are as follows:Jimothy (Ge87....ump): Net inflow of $7,000, with a 24-hour change of -32.7%, currently priced at $0.0248.SAKURA (EWiV....ump): Net inflow of $1,000, with a 24-hour change of 49.2%, currently priced at $0.0003.Terp (ALvN....ump): Net inflow of $807, with a 24-hour change of -65.5%, currently priced at $0.0001.Terp (G2rk....ump): Net inflow of $399, with a 24-hour change of 12.1%, currently priced at $0.0001.Lambocheesi (7W2q....ump): Net inflow of $252, with a 24-hour change of 1065.7%, currently priced at $0.0001.

According to Specter monitoring, a long-inactive PancakeSwap liquidity provider (LP) lost approximately $2.96 million due to signing a malicious EIP-7702 authorization.It is reported that the attacker removed about $1.48 million in BSC-USD and $1.48 million in BUSD liquidity provided by the victim and exchanged BUSD for ETH. Currently, the attacker has deposited approximately $1.46 million in funds to Tornado Cash, while the remaining approximately $1.48 million in USDT is still held in the attacker's address.

The well-known cryptocurrency derivatives exchange BitMEX, founded by Arthur Hayes, officially announced that it will close at 04:00 (UTC) on September 23 and has stopped new user registrations. It will stop opening new positions and gradually enforce liquidation starting from August 26.It is reported that BitMEX, as the pioneer of perpetual contract products, gradually withdrew from the operation of BitMEX after being targeted by the U.S. government. In the past few years, BitMEX has continuously sought acquisition without success.

According to Onchain Lens monitoring, after the Drift Protocol was attacked for $285 million on Solana in April, the attacker began to transfer funds through Tornado Cash after leaving the funds idle for 3 months.The attacker is quickly depositing ETH into the Tornado Cash Router in batches of 100 ETH, with multiple transfers occurring every minute.

According to Jinshi reports, the Iranian Revolutionary Guard claimed to have attacked a U.S. base in Jordan, destroying a set of U.S. "THAAD" missile defense system radars. At the same time, a "Patriot" system and a C-RAM radar were also hit and destroyed, and the fuel depot at the base was ignited.

According to CertiK Alert monitoring, VerusCoin's Ethereum cross-chain bridge experienced a security incident, with approximately $7.53 million in assets being transferred out.Preliminary analysis indicates that this issue may be related to the cross-chain bridge not adequately verifying whether the Verus chain-side input supports the paid amount, similar to the incident that occurred in May of this year.

Finance Minister Scott Bessent posted on the X platform, expressing support for open-source AI and the innovations it brings, but stated that open-source is not an excuse to arbitrarily infringe on U.S. intellectual property rights.If Chinese companies engage in secret, industrial-scale extraction attacks and cross the line into intellectual property theft, sanctions will be considered, and they will be placed on the entity list.

According to on-chain analyst Specter, the B² Network on the BNB Chain suffered a hack, resulting in a loss of approximately 8.591 million B2 tokens (about 3.86 million USD). The attacker exchanged it for 5,409 WBNB (about 3.11 million USD) and then cross-chained to Ethereum, currently transferring the funds to Zcash via NEAR Intents.The team subsequently contacted the attacker on-chain, stating that if they could return at least 10% of the stolen funds (about 386,000 USD) to the official address within the next 24 hours, the team would consider it a good faith gesture and would not initiate legal proceedings.

According to Blockaid's monitoring, the Arbitrum ecosystem protocol AFX was attacked at 5:30 AM Beijing time, targeting a cross-chain bridge operated by the protocol. So far, approximately 24.15 million USDC has been stolen. Blockaid stated that it is working with the Arbitrum team to respond to the incident, communicate with the affected protocols, and assist in freezing the stolen funds.In addition, Offchain Labs co-founder Steven Goldfeder responded on the X platform, stating that the Arbitrum team has noted the reports of the cross-chain bridge attack on Arbitrum and is investigating. Goldfeder confirmed that the related transactions originated from a third-party protocol, and the Arbitrum native bridge was not attacked or exploited. The team will coordinate with the third-party team and provide more details.

According to monitoring by Catcher Predict, in the prediction market Polymarket for the event "Cincinnati Reds vs. Seattle Mariners," the option "Cincinnati Reds" in the sub-market "Cincinnati Reds vs. Seattle Mariners" experienced a dramatic fluctuation in winning probability, soaring from 54.5% an hour ago to the current 94.5% (a fluctuation of 40%). Please note the impact of related breaking news.

Web3 security company CertiK released the "2026 First Half Wrench Attack Report." The report shows that in the first half of 2026, a total of 52 publicly verified wrench attack incidents were recorded globally, an increase of 33.3% year-on-year; related losses amounted to approximately $124 million, an increase of about 11.8 times compared to the same period last year.The report points out that attackers are shifting from exploiting technical vulnerabilities to targeting asset holders and their real-world relationship networks, with home invasion incidents rising from 1 in the first half of 2025 to 20, accounting for 41% of the total incidents during the same period. Europe has become a high-frequency attack region, with 33 incidents occurring in France, accounting for 63.5% of global cases.CertiK states that as real-world risks become a significant challenge for digital asset security, businesses and high-value individuals need to establish a more comprehensive protection system. CertiK has launched operational security services to help identify risks related to the exposure of information such as identity, home, residence, and travel trajectory; at the same time, through CertiK Security Workspace, it correlates off-chain intelligence, on-chain transactions, and AML risk signals to support institutions in tracking and analyzing cybercrime activities.In addition, CertiK is strengthening cooperation with international law enforcement agencies such as Interpol and Europol to provide technical support for cross-border attack investigations and security policy research.

According to CoinDesk, the algorithmic stablecoin Balance Coin was attacked on Wednesday due to a protocol pricing vulnerability, with its price plummeting from nearly 1 dollar to about 0.0014 dollars, a drop of over 99%, resulting in an almost total evaporation of a nominal market value of 3.5 million dollars. Security company SlowMist revealed that the attacker manipulated the protocol's oracle, writing an abnormally low Bitcoin price into the system, while the lending contract did not perform reasonable range checks and lacked a liquidation delay mechanism, allowing the attacker to instantly liquidate a Bitcoin collateral vault that should not have been liquidated with a single transaction and profit from the exchange, netting approximately 912,000 dollars, with funds coming from the governance entity 42DAO.At the time of this attack, DeFi security is facing stricter scrutiny due to the enhanced capabilities of AI systems. Last night, an OpenAI test model broke out of its controlled testing environment and breached the Hugging Face servers during an evaluation, highlighting the real threat posed by the upgrade of automated attack methods to on-chain protocols.

According to on-chain analyst Onchain Lens (@OnchainLens), the Summer Fi vulnerability attacker has transferred most of the stolen funds. The attacker obtained 6.017 million DAI from the vulnerability on July 6 and has since continued to mix and transfer funds through Tornado Cash.Currently, two related addresses still have a small amount of funds remaining: the original wallet (0x7bf7...bdca) has 11.3 ETH (approximately $21,600) left, and the second wallet (0x46e0...eba7) has 282.9 ETH (approximately $543,500) left.

According to a security alert released by the on-chain security monitoring organization TenArmor on July 22, its system detected a suspicious attack incident involving GemJoin under 42DAO (@42dao_official), which occurred on the BNB Smart Chain (BSC) and resulted in a loss of approximately $900,000.On-chain transaction records show that the attacker extracted about 10.73 Binance-Peg BTCB (worth approximately $715,000) through the GemJoin contract and conducted token exchange operations via PancakeSwap, involving assets such as BALANCE COIN (BLC) and Binance-Peg BSC-USD.