authorization

Robinhood Chain's Pons launchpad officially responded to previous reports regarding a token authorization vulnerability in its frontend, stating that the Pons launchpad trading page does not have any Multicall3 functionality. The Multicall3 functionality mentioned in the tweet comes from the previous version of the Debank Chain cross-chain bridge, which was launched before the Pons launchpad and does not affect launchpad users.Currently, the only confirmed affected asset is 0.6 NOXA tokens, valued at approximately $0.66. As a security precaution, Pons recommends that users who have used the old cross-chain bridge revoke token authorization through revoke.cash. The team is currently working with auditing firms to investigate potential risks and stated that they will restore Pons frontend services once it is confirmed that there are no actual vulnerabilities.

According to a community alert released by Blockaid, the old governance proposals (#14 and #15) of BarnBridge Smart Yield have token authorization risks. If maliciously executed or upgraded, they may jeopardize existing token authorizations. It has not yet been confirmed that any funds have been withdrawn, but users are advised to check and revoke relevant authorizations on Ethereum as soon as possible.Proposal #14 is in an executable grace period, while proposal #15 is queued, with an expected on-chain execution time of July 16 at 09:23:58 UTC. The affected tokens include USDC, DAI, USDT, GUSD, and RAI, and the relevant contract addresses have been publicly disclosed. Blockaid reminds users to use trusted authorization management tools, not to trust links in replies or accounts claiming to be "support," and not to send funds or sign transfers to any address, only revoke authorizations through trusted tools.

According to CoinDesk, as the competition for tokenization in the capital markets heats up, the Securities Transfer Association (STA) recently submitted a letter of opinion to the U.S. Securities and Exchange Commission (SEC), warning that stock tokens issued by third-party organizations may undermine market integrity and calling on regulators to prioritize support for tokenized securities authorized by publicly listed companies in future rule-making.The STA represents several Wall Street transfer agents, whose members believe that true tokenized stocks should be formally authorized by the issuing company and recorded in the official shareholder register, rather than created as "packaged" token products by independent platforms.The association pointed out that third-party stock tokens may confuse investors about the actual rights they hold and expose them to risks related to platform credit, custody, and operations, without establishing a direct legal relationship with the publicly listed company. Therefore, any innovative exemptions, pilot projects, or permanent regulatory frameworks for tokenized securities should prioritize the issuer-supported model.The STA also urged the SEC to reform the existing Direct Registration System (DRS), arguing that the current U.S. securities custody system is inadequate to meet the real-time transfer and settlement needs of on-chain securities, and suggested that regulators collaborate with the Depository Trust & Clearing Corporation (DTCC) to optimize the digital securities infrastructure.Currently, the global market for tokenized stocks, valued at approximately $2 billion, is primarily dominated by third-party models, including products launched by Ondo Finance and Kraken, while organizations like Securitize and Figure adopt the issuer authorization model.

According to Scam Sniffer monitoring, a user lost approximately 999,999 USDT after signing a phishing token authorization on Ethereum.The attacker initially attempted to withdraw 1 million dollars (which was 631 dollars more than the wallet balance) but failed. After 36 seconds, they recalculated and successfully withdrew the entire remaining balance. Scam Sniffer reminds users to verify all signature requests and never rush to sign transactions.

According to The Block, Ripple announced that it has obtained a full authorization as a MiCA CASP (Crypto Asset Service Provider) issued by the Luxembourg financial regulator CSSF, allowing it to legally provide crypto asset services in all 30 countries of the European Economic Area.

The Spanish National Securities Market Commission has authorized the cryptocurrency platform Venga to operate under the EU's Markets in Crypto-Assets Regulation (MiCA), making it one of the few entities in Spain to receive MiCA approval. The MiCA transitional period took effect on July 1, and digital asset companies that previously operated under national rules must obtain formal approval under the new regime, or they must cease providing regulated services in the EU.This authorization allows Venga to provide services within the market composed of 27 EU member states based on a single regulatory framework. Michael Stroev, co-founder and CEO of Venga, stated that the MiCA review covers aspects such as ownership structure, corporate governance, management suitability, risk framework, and product infrastructure. Previously, over 3,000 crypto companies in the EU held local virtual asset service provider registrations, but currently, about 240 companies have received full MiCA authorization, with fewer than 15 companies approved in Spain.

According to The Block, Benchmark Equity Research maintains a Buy rating on Strategy and reiterates a target price of $570. This target price still has about a 515% upside compared to Strategy's closing price of $92.68 on Monday.Analyst Mark Palmer stated in the report that the digital credit capital framework launched by Strategy allows it to actively manage both ends of its capital structure based on market conditions, including repurchasing common and preferred stock when needed, selling Bitcoin to meet obligations, and suspending new issuances when the stock price is not at a premium.Palmer believes that this framework marks a shift for Strategy from a past focus on one-way issuance of securities to proactive two-way capital management. He stated, "This is a significant positive for shareholders."The report also noted that this framework addresses market concerns about dilution and enhances flexibility through a structured repurchase plan. Palmer also believes that the authorization to sell up to $1.25 billion worth of Bitcoin is negligible compared to Strategy's reserve of approximately 847,000 BTC.

According to official news, Binance has announced that it has decided to withdraw its MiCA license application submitted in Greece and instead seek authorization in another EU member state. The company stated that this move is based on a prudent assessment of the current approval progress and timeline in Greece, emphasizing that user interests are at the core of the decision.Binance stated that Europe remains an important market for it, and its commitment to operate in compliance with the EU MiCA unified regulatory framework remains unchanged. It expects to obtain the relevant licenses in a new member state within the next few months, but the specific country will be announced "when ready."

The blockchain infrastructure protocol Lava Network has signed a non-binding memorandum with developer BHL Group to design a tokenized regulatory sandbox for the planned residential development project Alba Bay in the Caribbean. The project plans to build over 40,000 residential units, covering nearly 40 million square meters, with a cost of billions of dollars, and is expected to break ground in the first quarter of 2027.Lava claims this is its first real-world asset authorization project. Currently, no units have been tokenized, and no infrastructure has been deployed; BHL is not required to pay any upfront fees to Lava. Lava's role is to support ecological promotion, coordinate the application of crypto-native teams, and participate in the sandbox design, with commercial terms based on usage, no fixed fees, equity, or token grants.According to CoinGecko data, the LAVA token has fallen over 90% from its peak in 2024, with a market capitalization of approximately $9 million. Lava stated that the tokenization structure has not yet been determined, and any tokens will supplement rather than replace existing property registrations; whether the project can advance to the tokenization stage depends on subsequent assessment results.

According to BBX data, yesterday, publicly listed companies in multiple countries globally intensively disclosed their latest strategies regarding the expansion of Bitcoin treasury, stock buybacks, and the authorization of super debt financing tools. The core dynamics are as follows:Strive, Inc. (NASDAQ: $STRE) CEO Matt Cole officially disclosed yesterday that the company has invested approximately $185.2 million to increase its holdings by 2,500 BTC (average purchase price of about $74,092). As a result, Strive's total Bitcoin holdings have reached 19,000 BTC, with a year-to-date (YTD) return of 36.7% and an expansion rate of 57.0%. At the same time, the company has proactively increased its cash reserves to ensure the stable distribution of dividends over the next 18 months.European Bitcoin treasury company Capital B (Euronext Growth Paris: $ALCPB) officially announced that it has opened online voting for the shareholders' meeting until June 17. The board is seeking shareholder authorization to establish a capital increase limit of up to €5 billion and a debt instrument issuance limit of up to €100 billion, aiming to accelerate its Bitcoin treasury strategy and enhance the Bitcoin value per share.Hyperscale Data, Inc. (NYSE: $GPUS) officially announced that as of May 31, 2026, the company holds a total of 704.3405 BTC (with a total value of approximately $51.8 million based on the price of $73,579 on that day). The company also confirmed that it did not execute any Bitcoin purchases in the open market last week, with the increase in holdings mainly coming from the regular mining output of its AI data center.Brazilian listed Bitcoin treasury company OranjeBTC (B3: $OBTC3) announced an increase of 20 BTC in the secondary market (average price of about $75,346), raising its total holdings to 3,762 BTC. Meanwhile, the company repurchased 289,100 shares of OBTC3 during the period, further enhancing the Bitcoin exposure per share through a dual reduction of circulating shares.

AMM infrastructure Ekubo posted on platform X that a security incident occurred with the Swap routing contract on the EVM chain, but liquidity providers were not affected, and Starknet was not affected. The team is investigating the scope of the incident and recommends that users immediately revoke all authorizations for the affected addresses.The affected addresses include the V2 and V3 contract addresses on Ethereum, as well as the V3 contract address on Arbitrum. The team is preparing a post-incident analysis report and reminds users to be cautious of links claiming to be related to the Ekubo Protocol or the vulnerability.

Category Labs today announced that it is expanding its potential public market purchase authorization limit to $80 million and extending the repurchase period until the end of 2026.Category Labs stated that any repurchase actions will be carried out opportunistically based on market conditions and may be initiated, suspended, or terminated at the company's discretion, while strictly adhering to relevant laws and regulations. This update does not constitute a commitment to repurchase any specific number of tokens but reflects the company's intention to consider opportunistic purchases under favorable market conditions.

According to monitoring by PeckShield, a user lost their Alchemix Yearn yvVault position yvWETH, worth approximately $1 million, due to previously authorizing an unverified contract. This unverified contract was created 10 days ago and has vulnerabilities that can be exploited to execute arbitrary calls.

According to the official announcement from the Pakistan Virtual Assets Regulatory Authority (PVARA), all virtual asset services are included under PVARA's regulatory scope and must obtain prior authorization before commencing operations or making public announcements.PVARA welcomes responsible innovation and encourages relevant parties to engage in communication as early as possible. Innovation can be conducted through compliance pathways such as regulatory sandboxes, No-Action Relief Letters, and No Objection Certificates (NOC).

According to official news, the cloud hosting platform Vercel has confirmed that a security incident has occurred, involving unauthorized access to some internal systems.Currently, only a small number of customers have been confirmed to be affected, and Vercel is communicating directly with the relevant customers. Vercel stated that its services are still operating normally, and it has initiated an investigation and hired incident response experts to assist in handling the situation, while also notifying law enforcement.Vercel recommends that all customers review their environment variables and use the sensitive environment variable feature to enhance security protection.

Solana co-founder toly commented on the controversy surrounding Circle's USDC freezing mechanism, stating that we need a base layer stablecoin that can only be frozen under a court order. If there are other factors that can freeze it besides authorization from a judge approved by the U.S. Senate, then it is not a true dollar stablecoin.toly suggested that various protocols (such as Drift and Kamino) should issue wrapped stablecoins with their own freezing and unfreezing strategies on top of the base layer stablecoin, equipped with a security team truly responsible for handling hacking incidents, while having independent freezing and unfreezing strategies.It is reported that after the recent hacking of the Drift protocol, Circle did not promptly freeze the stolen USDC. Circle CEO Jeremy Allaire's remarks about the "moral dilemma" and freezing policy have sparked widespread discussion in the community regarding the freezing mechanisms of centralized stablecoins.

Binance announced its participation in the international law enforcement operation "Operation Atlantic," led by the UK's National Crime Agency (NCA), in collaboration with multiple countries' law enforcement agencies to combat cryptocurrency and investment fraud, focusing on "approval phishing" scams.The operation was jointly initiated by the NCA, the U.S. Secret Service, and relevant law enforcement and regulatory agencies in Ontario, Canada, aiming to identify victims who have been compromised or are at risk. Approval phishing typically disguises itself as an investment opportunity, luring users into granting wallet access permissions, thereby transferring assets. During the operation, Binance's special investigation team provided on-site support in London, including fraud identification processes, risk screening, and intelligence analysis, and assisted in identifying potential victims and related malicious websites.At the same time, Binance also provided law enforcement agencies with addresses and suspect intelligence related to the case, supporting asset tracking and enforcement actions. The NCA stated that this operation has successfully protected thousands of potential victims in the UK and overseas. Binance emphasized that it will continue to cooperate with global law enforcement agencies to strengthen the fight against cryptocurrency fraud.

The DeFi protocol Neutrl announced on platform X that its frontend is suspected to have been attacked, and the team is conducting an urgent investigation. For security reasons, the official advises users not to interact with the website until further updates are released.At the same time, Neutrl reminds users to promptly go to Revoke.cash to revoke Permit2 authorizations for the relevant addresses, and also reminds users to check and revoke authorizations for other suspicious addresses to reduce potential asset risks.

According to GoPlus monitoring, a user lost approximately $53,000 worth of PAXG due to signing a malicious authorization (Approve) transaction, which was exploited by phishing attackers.