cio

On August 6, according to WEEX TradFi market data, the precious metals sector continued to strengthen after yesterday, with funds reallocating around safe-haven demand. Among them, GOLD (PAXG) rose over 4.88% in 24 hours, SILVER (XAG) rose over 4.71% in 24 hours, and PLATINUM (XPT) rose over 2.30% in 24 hours, with gold, silver, and platinum all warming up simultaneously. WEEX Labs believes that this round of increase is mainly driven by repair trading after the pullback, as the market weighs geopolitical risks, changes in the dollar, and U.S. Treasury yields, with gold's safe-haven and diversification attributes gaining attention. The WEEX TradFi trading carnival season is underway, with zero slippage protection, first order compensation, and newcomers receiving 200 USDT.

According to Slow Fog monitoring, MistEye detected a large-scale npm supply chain attack affecting the Keyv/Cacheable ecosystem. The attackers published over 2,000 malicious package versions, including keyv@6.0. Keyv is a widely used key-value storage abstraction library that supports backends such as Redis, SQLite, PostgreSQL, and MongoDB, with approximately 127 million downloads per week, leading to significant downstream supply chain exposure.The attack method is highly similar to the previous Shai-Hulud npm worm activity, indicating a highly automated and scalable supply chain attack. Potential attack behaviors include credential theft, environment variable leakage, CI/CD key leakage, remote payload delivery, and lateral propagation through compromised development environments. Security teams should immediately identify and remove affected package versions, upgrade to verified secure versions, review dependency lock files and build logs, monitor suspicious external connections, rotate leaked credentials, and rebuild environments upon confirmation of the impact.

The Hong Kong Securities and Futures Commission has announced that BiFinance has been listed as a suspicious virtual asset trading platform. The Hong Kong Securities and Futures Commission stated that the company claims to be licensed in Hong Kong and asserts that it offers digital asset trading services such as spot, futures, and wealth management on its website, as well as other services related to digital assets. However, the company is not licensed by the Securities and Futures Commission and is suspected of conducting unlicensed activities.

According to News.bitcoin, MoneyFlip CEO Marcos Arturo Kleiman Tronllan was arrested for allegedly hiring a hitman. The investigation initially targeted currency exchange businesses near the US-Mexico border, suspecting that he used the business to evade the requirements of the Bank Secrecy Act and launder money through cross-border transactions (to clean drug trafficking proceeds).In February 2026, an undercover agent from the Department of Homeland Security contacted Kleiman, requesting to exchange dollars claimed to be from drug transactions into cryptocurrency. Kleiman exchanged approximately $750,000 into cryptocurrency and transferred it to the undercover wallet, charging a 10% fee. During discussions, Kleiman asked the undercover agent to help collect debts from a Mexican businessman and to commit murder, agreeing to pay $40,000 for kidnapping and murder. Kleiman paid a cash deposit of $5,000 in two installments; after the undercover agent presented forged "victim murder" photos and videos, he delivered an additional $5,000 in cash and approximately $25,000 USDT as final payment.

According to Jinshi reports, the Ministry of Commerce stated that the U.S. practice of including Chinese companies in the so-called Xinjiang-related entity list has no factual basis and is a typical act of economic coercion. The U.S. measures seriously harm the legitimate rights and interests of the relevant enterprises and undermine the stability of global industrial and supply chains.China urges the U.S. to immediately stop its attacks and smear campaigns against Xinjiang, cease manipulating the so-called "forced labor" issue, and will take necessary measures to firmly safeguard the legitimate rights and interests of Chinese enterprises.

Bitwise Chief Investment Officer Matt Hougan posted that the impact of interest rate decisions on Bitcoin over the next five years will be less than it has been over the past fifteen years. He stated that since Bitcoin's inception, interest rates have fluctuated significantly between 0% to 2.5%, 0% to 5%, and 3.5%, with changes measured in whole percentage points. However, future adjustments may be more moderate, with CME expecting interest rates to rise by only 50 basis points over the next year.Matt Hougan assesses that the Federal Reserve under Warsh may be closer to the slight adjustment style of the mid-1990s under Greenspan, rather than the patterns seen in recent years under Bernanke and Powell. If this is indeed the case, the smaller magnitude of interest rate changes will also weaken their impact on Bitcoin; while interest rates remain important, the weight of other factors will increase.

According to Specter monitoring, a long-inactive PancakeSwap liquidity provider (LP) lost approximately $2.96 million due to signing a malicious EIP-7702 authorization.It is reported that the attacker removed about $1.48 million in BSC-USD and $1.48 million in BUSD liquidity provided by the victim and exchanged BUSD for ETH. Currently, the attacker has deposited approximately $1.46 million in funds to Tornado Cash, while the remaining approximately $1.48 million in USDT is still held in the attacker's address.

Bitwise Chief Investment Officer Matt Hougan published an analysis, stating that the crypto market is showing signs of a bottom ------ since July 1, Bitcoin has risen by 9% while the Nasdaq has fallen by 6%, ETF fund flows have turned positive, and market sentiment has improved. Hougan believes that the next bull market will be driven by the integration of on-chain finance and traditional finance, with the core sectors being stablecoins, tokenization, 24/7 trading, instant settlement, and institutional DeFi.He suggests focusing on two types of opportunities: one type is crypto-native applications represented by Hyperliquid (HYPE) ------ which have real revenue and a strong token economic model (99% of revenue is used for buybacks and burns of HYPE), which has risen 146% this year; the other type is traditional financial institutions represented by Robinhood (HOOD) ------ whose Layer2 blockchain Robinhood Chain attracted over $300 million in deposits within two weeks of launch, processing an average of 3.6 million transactions daily, supporting 24/7 trading of tokenized stocks for users in 120 countries. Hougan is optimistic about mainstream assets such as Bitcoin, Ethereum, and Solana, as well as crypto stocks, while also paying attention to institutions like Coinbase, Figure, BlackRock, Visa, Stripe, and JPMorgan that are scaling up in the crypto space.

GoPlus Security issued a security alert stating that a user signed a malicious Permit transaction 183 days ago, resulting in approximately $1,625 of USDC being transferred by a phishing attacker.Since the user did not revoke the relevant authorization afterwards, the attacker again used that authorization to transfer approximately $75,780 of USDC.

According to official news, the ENS DAO has approved the proposal to activate a new security committee, with a term of two years. The committee consists of eight members and has veto power, allowing it to cancel proposals during the waiting period after malicious proposals are passed but before execution. The committee's authority is limited to canceling transactions within the time lock and cannot access treasury funds, submit proposals, or rewrite approved proposals.The committee can only exercise its power under emergency conditions specified in its charter. ENS points out that governance itself may become an attack surface—voting rights can be borrowed to initiate attacks, proposal codes can hide malicious behavior, and credential leaks can be used to push harmful transactions. The new committee adopts a 5-of-8 multi-signature, requiring at least five members' agreement to cancel a proposal, and must seek DAO voting for extension after the two-year term.

According to the security agency Slow Fog, the malicious TRAE IDE extension juannegro.solidity disguises itself as a Solidity plugin and acts as a cross-platform malware delivery mechanism. This extension automatically executes and establishes persistence after the IDE starts, and it also uses Ethereum smart contracts to store and retrieve dynamic C2 configurations, allowing attackers to update C2 endpoints and payloads without needing to re-release the extension.Although the extension has been removed from Open VSX, it was still available through the TRAE marketplace as of July 18. Users who have installed it should immediately delete it and check their systems for compromise.

The founder of Slow Fog, Yu Xian, retweeted a tweet on the X platform regarding the potential poisoning attack risks of Claude Code and published an analysis of the poisoning attack details targeting Grok Build CLI and Claude Code CLI.It pointed out that the security mechanisms of Grok Build CLI are not unified, with different code paths having different trust assumptions, creating gaps that serve as channels for attackers. Attackers may execute arbitrary commands through malicious project configuration files without the user's knowledge, thereby stealing API keys, cloud credentials, or controlling local devices.Researchers constructed a testing environment and found that on Mac systems, if Claude Code is affected, executing specific test commands can trigger the local calculator to launch, proving the existence of potential command execution risks.If the attack is successful, attackers may further steal API keys from AI services like Claude and OpenAI, resulting in account cost losses, gain access to servers and data by obtaining cloud service credentials from AWS, Alibaba Cloud, Tencent Cloud, modify code repositories to implant backdoors, and use local devices as jump points to attack corporate internal networks. It is reported that the related vulnerabilities have existed for a year.

DeFi infrastructure company Enso disclosed in a report a type of malicious liquidity pool called "toxic pools," which manipulates trading simulations to return false optimal quotes to wallets and DEX aggregators, and alters logic during actual on-chain execution. Enso stated that the relevant malicious contracts can identify read-only simulation environments and return optimized prices, but once the trades are broadcasted on-chain, they execute at worse prices or result in transaction failures.A manipulated Curve pool processed over 129,000 exchanges, resulting in approximately $225,000 in inflated quotes, with over 37,000 transactions rolling back and consuming nearly $30,000 in gas fees. On Polygon, a malicious Uniswap v4 hook attracted routing systems with false exchange rates, subsequently triggering a 99.1% transaction failure rate. Enso stated that it has updated its execution protection product Enso Shield to detect false quotes in Ethereum and Polygon environments.

According to TenArmorAlert monitoring, the BSC chain project "CrowdRingCircle" suffered a suspicious attack, resulting in a loss of approximately $201,400.

According to TenArmorAlert monitoring, the BSC chain contract VECAndETH suffered a suspicious price manipulation attack, resulting in a loss of approximately $109,600.

According to CoinDesk, Franklin Crypto Chief Investment Officer Seth Ginns stated that although digital asset prices have not reflected the strongest fundamentals in the industry for years, institutional adoption of crypto is accelerating. Ginns pointed out that the momentum of the integration between traditional finance and crypto is strong, and believes that under current market conditions, liquidity crypto investments are becoming increasingly attractive.He mentioned that Robinhood's blockchain initiative is an example of the shift from traditional financial distribution to crypto infrastructure, with the tokenization of money market funds, tokenized stocks, and stablecoin adoption driving the integration of traditional finance and blockchain technology. Ginns expects that the Senate vote on the Clarity Act will provide institutions with more regulatory certainty and is optimistic about Hyperliquid's revenue-driven token buyback model. He also believes that DeFi protocols such as Uniswap, Aave, and Chainlink can benefit from improved token value capture mechanisms.

According to TenArmorAlert monitoring, the BFB token on the BSC chain was subjected to a suspicious attack, resulting in a loss of approximately $220,000.

BonkDAO disclosed on platform X that it suffered a malicious governance proposal attack, resulting in approximately 20 million dollars worth of BONK tokens being stolen from the BonkDAO treasury.BonkDAO stated that during the investigation, the attacker was identified using an exchange wallet to purchase BONK before the proposal was initiated, and they are currently collaborating with exchanges, cross-chain bridges, and the Solana Foundation. Additionally, the team has notified law enforcement and continues to work with relevant parties to recover funds and trace the responsible individuals.

Former Tether Chief Investment Officer Richard Heathcote plans to sell part of his 1.26% equity stake.The USDT issued by Tether accounts for about 59% of the stablecoin market share.