authorization

According to BBX data, yesterday, publicly listed companies in multiple countries globally intensively disclosed their latest strategies regarding the expansion of Bitcoin treasury, stock buybacks, and the authorization of super debt financing tools. The core dynamics are as follows:Strive, Inc. (NASDAQ: $STRE) CEO Matt Cole officially disclosed yesterday that the company has invested approximately $185.2 million to increase its holdings by 2,500 BTC (average purchase price of about $74,092). As a result, Strive's total Bitcoin holdings have reached 19,000 BTC, with a year-to-date (YTD) return of 36.7% and an expansion rate of 57.0%. At the same time, the company has proactively increased its cash reserves to ensure the stable distribution of dividends over the next 18 months.European Bitcoin treasury company Capital B (Euronext Growth Paris: $ALCPB) officially announced that it has opened online voting for the shareholders' meeting until June 17. The board is seeking shareholder authorization to establish a capital increase limit of up to €5 billion and a debt instrument issuance limit of up to €100 billion, aiming to accelerate its Bitcoin treasury strategy and enhance the Bitcoin value per share.Hyperscale Data, Inc. (NYSE: $GPUS) officially announced that as of May 31, 2026, the company holds a total of 704.3405 BTC (with a total value of approximately $51.8 million based on the price of $73,579 on that day). The company also confirmed that it did not execute any Bitcoin purchases in the open market last week, with the increase in holdings mainly coming from the regular mining output of its AI data center.Brazilian listed Bitcoin treasury company OranjeBTC (B3: $OBTC3) announced an increase of 20 BTC in the secondary market (average price of about $75,346), raising its total holdings to 3,762 BTC. Meanwhile, the company repurchased 289,100 shares of OBTC3 during the period, further enhancing the Bitcoin exposure per share through a dual reduction of circulating shares.

AMM infrastructure Ekubo posted on platform X that a security incident occurred with the Swap routing contract on the EVM chain, but liquidity providers were not affected, and Starknet was not affected. The team is investigating the scope of the incident and recommends that users immediately revoke all authorizations for the affected addresses.The affected addresses include the V2 and V3 contract addresses on Ethereum, as well as the V3 contract address on Arbitrum. The team is preparing a post-incident analysis report and reminds users to be cautious of links claiming to be related to the Ekubo Protocol or the vulnerability.

Category Labs today announced that it is expanding its potential public market purchase authorization limit to $80 million and extending the repurchase period until the end of 2026.Category Labs stated that any repurchase actions will be carried out opportunistically based on market conditions and may be initiated, suspended, or terminated at the company's discretion, while strictly adhering to relevant laws and regulations. This update does not constitute a commitment to repurchase any specific number of tokens but reflects the company's intention to consider opportunistic purchases under favorable market conditions.

According to monitoring by PeckShield, a user lost their Alchemix Yearn yvVault position yvWETH, worth approximately $1 million, due to previously authorizing an unverified contract. This unverified contract was created 10 days ago and has vulnerabilities that can be exploited to execute arbitrary calls.

According to the official announcement from the Pakistan Virtual Assets Regulatory Authority (PVARA), all virtual asset services are included under PVARA's regulatory scope and must obtain prior authorization before commencing operations or making public announcements.PVARA welcomes responsible innovation and encourages relevant parties to engage in communication as early as possible. Innovation can be conducted through compliance pathways such as regulatory sandboxes, No-Action Relief Letters, and No Objection Certificates (NOC).

According to official news, the cloud hosting platform Vercel has confirmed that a security incident has occurred, involving unauthorized access to some internal systems.Currently, only a small number of customers have been confirmed to be affected, and Vercel is communicating directly with the relevant customers. Vercel stated that its services are still operating normally, and it has initiated an investigation and hired incident response experts to assist in handling the situation, while also notifying law enforcement.Vercel recommends that all customers review their environment variables and use the sensitive environment variable feature to enhance security protection.

Solana co-founder toly commented on the controversy surrounding Circle's USDC freezing mechanism, stating that we need a base layer stablecoin that can only be frozen under a court order. If there are other factors that can freeze it besides authorization from a judge approved by the U.S. Senate, then it is not a true dollar stablecoin.toly suggested that various protocols (such as Drift and Kamino) should issue wrapped stablecoins with their own freezing and unfreezing strategies on top of the base layer stablecoin, equipped with a security team truly responsible for handling hacking incidents, while having independent freezing and unfreezing strategies.It is reported that after the recent hacking of the Drift protocol, Circle did not promptly freeze the stolen USDC. Circle CEO Jeremy Allaire's remarks about the "moral dilemma" and freezing policy have sparked widespread discussion in the community regarding the freezing mechanisms of centralized stablecoins.

Binance announced its participation in the international law enforcement operation "Operation Atlantic," led by the UK's National Crime Agency (NCA), in collaboration with multiple countries' law enforcement agencies to combat cryptocurrency and investment fraud, focusing on "approval phishing" scams.The operation was jointly initiated by the NCA, the U.S. Secret Service, and relevant law enforcement and regulatory agencies in Ontario, Canada, aiming to identify victims who have been compromised or are at risk. Approval phishing typically disguises itself as an investment opportunity, luring users into granting wallet access permissions, thereby transferring assets. During the operation, Binance's special investigation team provided on-site support in London, including fraud identification processes, risk screening, and intelligence analysis, and assisted in identifying potential victims and related malicious websites.At the same time, Binance also provided law enforcement agencies with addresses and suspect intelligence related to the case, supporting asset tracking and enforcement actions. The NCA stated that this operation has successfully protected thousands of potential victims in the UK and overseas. Binance emphasized that it will continue to cooperate with global law enforcement agencies to strengthen the fight against cryptocurrency fraud.

The DeFi protocol Neutrl announced on platform X that its frontend is suspected to have been attacked, and the team is conducting an urgent investigation. For security reasons, the official advises users not to interact with the website until further updates are released.At the same time, Neutrl reminds users to promptly go to Revoke.cash to revoke Permit2 authorizations for the relevant addresses, and also reminds users to check and revoke authorizations for other suspicious addresses to reduce potential asset risks.

According to GoPlus monitoring, a user lost approximately $53,000 worth of PAXG due to signing a malicious authorization (Approve) transaction, which was exploited by phishing attackers.

The globally leading cryptocurrency trading platform Gate has announced that the CEX MCP within the Gate for AI system has completed an important upgrade.This upgrade focuses on optimizing the AI Agent access and authorization process. After the upgrade, users can complete authorization directly within the conversation when using Gate MCP in AI tools, without the need to manually open a browser or switch pages; the authentication process can be completed in the same chat window. Whether using tools like Cursor, Claude Code, or OpenClaw, the overall experience is much smoother. Additionally, the platform provides a one-click installation tool and supports both API Key and OAuth authorization methods, making it simpler and more flexible for AI models to access trading capabilities.In terms of capabilities, the tool system of Gate MCP has further expanded, with the total number of tools now increased to 161. The callable capabilities of the AI Agent now cover market data, spot trading, contracts, and have expanded to include options, delivery contracts, wealth management, and more product scenarios, enabling AI not only to execute trades but also to participate in a more complete asset management and strategy execution process.

Mastercard and Google jointly released the open standard framework Verifiable Intent, designed specifically for the "agent commerce" scenario where AI agents autonomously complete shopping transactions. This framework utilizes cryptographic technology to create tamper-proof authorization records when AI agents execute transactions on behalf of users, integrating identity, intent, and actions into a single privacy-protecting audit trail, addressing the issue where merchants and issuing institutions cannot confirm whether consumers truly authorized a transaction when AI agents place orders autonomously.The framework employs selective disclosure technology to ensure that parties only receive necessary information and integrates widely adopted industry standards such as those from the FIDO Alliance and EMVCo. Mastercard stated that Verifiable Intent will be integrated into its Agent Pay API in the coming months.Meanwhile, the cryptocurrency camp is also actively positioning itself. Coinbase CEO Brian Armstrong pointed out that while AI agents cannot open bank accounts, they can hold cryptocurrency wallets, indicating that blockchain infrastructure may be more suited to the future of the AI agent economy.

According to GoPlus monitoring, a user lost approximately $127,000 worth of USDC, TIBBIR, and PAXG assets to a phishing attack after signing multiple malicious Approve transactions.

According to Scam Sniffer monitoring, an Ethereum user lost $388,051 after signing a phishing token authorization transaction.

According to market news, the AI intelligence forum Moltbook experienced a database leak due to configuration issues, exposing 4.75 million records, including 1.5 million API authorization tokens, 35,000 user email addresses, 20,000 email records, and some OpenAI API keys. Users should promptly check the security of their accounts and timely change relevant keys and passwords.

On-chain information shows that the Binance SAFU fund address initiated authorization 10 minutes ago, suspected to be adding two new addresses to the "allowed recipient whitelist," or preparing to increase Bitcoin holdings.Previously, it was reported that three days have passed since the announcement of Binance's "1 billion dollar purchase of Bitcoin," and the SAFU fund address has not made any buying actions yet. This situation may be related to the weekend timing.

WORLD3 has officially submitted the ERC-8118 (Agent Authorization) proposal to the Ethereum Foundation. This standard aims to provide a secure and controllable authorization mechanism for autonomous AI Agents to perform on-chain operations. ERC-8118 introduces time-limited authorizations with automatic expiration mechanisms, usage and transaction limits, as well as fine-grained permission control at the function level, allowing users to revoke authorizations at any time, thus bridging the gap between the high risks of unlimited authorizations and the cumbersome nature of one-time signature operations.Currently, ERC-8118 has undergone production-level validation on the WORLD3 platform, covering over 1 million wallets and 5.7 million transactions, and has completed peer review at the IEEE International Blockchain Conference (BRAINS 2025). This standard is compatible with all EVM-based blockchains and has entered the community public discussion phase on the Ethereum Magicians forum.

According to CoinDesk, Bitmine Chairman Thomas "Tom" Lee stated in a statement released on Monday that whether BitMine can continue to increase its holdings of Ethereum (ETH) depends on whether shareholders approve the company's authorization to issue new shares. If not approved, the company may be forced to slow down its purchasing pace in the coming weeks.Lee stated, "We must move forward with the issuance immediately, as BitMine's current authorization of 500 million shares is about to be exhausted. Once the limit is reached, our pace of ETH accumulation will slow down." The shareholder vote will be held on Thursday. According to regulations, the issuance proposal needs to receive support from 50.1% of all outstanding shares to pass. "This is a very high threshold, making it extremely difficult to obtain authorization for the issuance," Lee emphasized in the statement.

Slow Mist posted on platform X that MistEye detected potential suspicious activities related to Fusion. The root cause is a vulnerability in the underlying contract commissioned by an EOA account controlled by the project team through EIP-7702, which allows arbitrary external calls, enabling attackers to create and configure malicious circuit breaker contracts for PlasmaVault, thereby extracting funds from the contract.