crit

According to Digital Asset, Park Soo-young, a member of the Korean National Power Party, criticized the government's plan to tax virtual asset gains, stating that it is "a threat of a tax bomb if one does not invest in the domestic stock market," and demanded an immediate withdrawal.Member Park Soo-young stated on her YouTube channel: "I hope this punitive tax plan that puts 13 million digital asset users in danger can be withdrawn immediately." She added, "This does not mean that people will invest in domestic stocks; on the contrary, it will only accelerate the outflow of national wealth." She cited that approximately 124 trillion won flowed into overseas digital asset exchanges from January to September last year.

The PoW blockchain Ravencoin tweeted that its network has a critical consensus vulnerability that has been exploited, causing weak nodes to accept invalid blocks. The first known invalid block appeared at height 4,487,776. Currently, the majority hash power holders 2Miners and RavenMiner have stated that they are mining a chain that excludes the exploited branch starting from height 4,487,776.If this chain becomes the dominant chain, it may lead to approximately three days of deep chain reorganization. The official recommendation is for CEX to temporarily suspend RVN deposits and withdrawals until the network stabilizes; transactions confirmed after height 4,487,775 should be considered at risk. The official also emphasizes that this notice aims to increase transparency and risk awareness and does not represent an endorsement of any rollback or recovery plan.

According to South Korean media NATE, the Korea Regulatory Reform Committee has proposed amendments to the enforcement decree of the Specific Financial Transaction Information Act, excluding minor violations from the qualification restrictions for major shareholders of Virtual Asset Service Providers (VASP).This move has sparked discussions in the market regarding exchange mergers and acquisitions, the entry of new businesses, and the fairness of regulation. The proposal to relax restrictions also involves issues related to the boundaries of the enforcement decree's authority.

According to CoinDesk, the controversial BIP-110 soft fork proposal officially entered the mandatory signaling phase at around 3:35 AM Beijing time this Sunday (UTC 19:35) at Bitcoin block height 961,632, marking the start of the signaling window. This proposal aims to temporarily restrict non-financial data from being written to the Bitcoin blockchain, but the current miner support rate is extremely low, with the proportion of supporting miners far below the 55% activation threshold required by the proposal. The market is concerned that this fork chain may expand its influence in the future as more nodes join, forcing miners to compromise, or it may gradually lose vitality due to a lack of computing power and ecosystem support. Meanwhile, several key figures in the Bitcoin industry have publicly opposed this proposal, including Strategy Chairman Michael Saylor and Blockstream CEO Adam Back. Opponents believe that BIP-110 could undermine consensus in the Bitcoin network and bring unnecessary risks of division.It is reported that the BIP-110 signaling period will last until Bitcoin block height 965,664, expected to conclude in about four weeks. At that time, the community will face a critical decision on whether to activate the proposal.

According to Decrypt, the Bitcoin payment processing project BTCPay Server has warned users of a serious vulnerability in its servers that is currently under active attack. Attackers may exploit this vulnerability to gain unauthorized access and cause financial loss. Administrators are required to upgrade to version 2.4.2 immediately and confirm that the server footer shows the update is complete.If an upgrade cannot be performed in a timely manner, the official recommendation is for users to temporarily shut down BTCPay Server to prevent further attacks. Additionally, BTCPay Server advises users to change any potentially exposed macaroons credentials, recreate the macaroons.db file, and refresh the authentication strings for other Lightning Network backends.

Aave founder Stani Kulechov recently stated that SharpLink Gaming opposes Ethereum Improvement Proposal EIP-8363, claiming that SharpLink is one of the largest supporters and financial contributors to the Ethereum ecosystem. Stani mentioned that SharpLink executive Joseph Chalom raised some reasonable points regarding the feasibility and implementation timeline of the proposal.He also called on the community to "protect ETH staking," emphasizing that the interests and long-term impacts of staking ecosystem participants need to be fully considered when advancing improvements to the Ethereum protocol. EIP-8363 has recently sparked discussions in the Ethereum community, with related controversies mainly focusing on its potential impacts on the ETH staking mechanism, validator economic model, and ecological security. Community members are assessing the necessity of the proposal, its implementation pace, and the possible consequences it may bring.

Bitcoin News posted on the X platform that the volunteer organization Bitcoin Red Team has scanned 150 code repositories, privately disclosed more than a dozen vulnerabilities, and identified key issues during the process of strengthening wallets, cryptographic libraries, and infrastructure following the COLDCARD vulnerability incident. This work has consumed approximately $20,000 in AI computing costs, covered by OpenSats.Researchers are using multiple AI tools, with many stating that open-source models like Kimi K3 have become primary tools for security research, while cutting-edge closed-source models like OpenAI and Anthropic are considered to impose more limitations in such analyses. The team plans to open-source its AI security tools to enable projects to continuously audit their own codebases. Researchers warn that Bitcoin may just be the first industry facing a wave of AI-assisted vulnerability discovery, with similar efforts likely to expand to all open-source software.

Bitcoin News posted on the X platform stating that Coinkite claims the vulnerability exists at the boundaries of two unrelated firmware submodules, rather than in its Bitcoin or crypto code, allowing it to evade manual and AI-assisted code reviews for years.Coinkite stated that after the incident, the company tested cutting-edge AI models including Kimi K3, Claude Fable, and Codex 5.6, none of which identified the flaw. Coinkite is currently urging security-critical projects to specifically audit build systems and submodule boundaries, warning that AI-assisted development may leave similar blind spots in the Bitcoin ecosystem.

Developers on Reddit used Claude Code to scan the Coldcard open-source firmware for vulnerabilities, identifying the core issue within 8 minutes:The firmware called a software pseudo-random number generator instead of a hardware true random number generator when generating private keys, and this vulnerability led to the theft of approximately $70 million in BTC from 1,196 wallets.At the same time, community users also reported that an independent scan using Zhizhu GLM 5.2 (trained on June 16, not connected to the internet) similarly discovered the same vulnerability.This bug has existed in the open-source wallet code for over five years.

According to Jinshi reports, U.S. President Trump has ordered restrictions on the export of critical mineral waste.

According to Jinshi reports, D.A. Davidson's co-chief investment officer James Ragan stated that since the last Federal Reserve meeting, inflation data has been moderate and employment growth has been modest, but the escalation of military conflict between the U.S. and Iran in July has disrupted these positive trends. This means that the progress made in inflation in June may reverse, and the Federal Reserve needs to assess the persistence of core inflation trends.If it is determined that higher inflation expectations are forming, they should raise interest rates in July rather than wait until September, especially considering the political risks of the midterm elections.

According to South Korean media Maeil Business, data from the Financial Supervisory Service of Korea shows that during the first phase of the CBDC pilot project led by the Bank of Korea, financial authorities did not conduct any independent security verification, and only the participating banks conducted their own pre-security reviews.Before the project launched, only an IT vulnerability self-assessment was conducted for the participating banks, executed by the Financial Security Institute, SK Shields, and self-inspection teams from Woori Bank and NongHyup Bank, forming an evaluation model of "self-check by the regulated entities." The central bank acknowledged external doubts about the security of the deposit tokens in the pilot result report and responded that the pre-review was sufficient, but critics pointed out that this explanation was a self-assessment and not an independent third-party verification.

According to The Block, Trezor's Chief Business Officer Danny Sanders refuted recent criticisms of cryptocurrency hardware wallets made by blockchain investigator ZachXBT.Earlier this week, ZachXBT posted on Telegram, "All hardware wallets are complete garbage and I do not recommend using them for important tasks such as signing transactions or storing funds," and suggested that users use a dedicated iPhone to store funds and sign transactions.In response, Sanders acknowledged in an interview that firmware/software updates for hardware wallets can sometimes interfere with urgent or large transactions, and that the user experience can indeed be "clunky," understanding the users' frustration. However, he opposed ZachXBT's blanket statement: while hardware wallets may not be the best single solution for advanced users managing large amounts of funds, they are not garbage.He pointed out that compared to hardware wallets, the operating system and connectivity features of an iPhone present more "attack risks." For the average cryptocurrency user, hardware wallets remain the best self-custody option available.

According to Bitcoin.com, the European Parliament passed the resolution to advance the digital euro with 416 votes in favor, 169 against, and 22 abstentions, entering a critical phase of negotiations with member states. This currency was first proposed in 2023, aiming to maintain European monetary sovereignty and provide citizens with digital cash.Negotiation representative Fernando Navarrete Rojas emphasized that the digital euro will "complement rather than replace cash," and will provide free basic accounts and holding limits to protect the financial system. The European Central Bank has previously established partnerships with major European payment standard providers, using it as a tool to counter the growing influence of private currencies such as stablecoins. European Central Bank Executive Board member Piero Cipollone stated that the digital euro will "reduce Europe's dependence on external providers."

The founder of TRON, Justin Sun, stated that the milestone of 90 billion has finally arrived, marking a critical moment for both Tether and TRON. TRON remains one of the main networks for large-scale settlements of stablecoins.It is reported that with the issuance of TRC20-USDT exceeding 90 billion USD, the scale of stablecoins on the TRON network has reached a new historical level.

According to CoinDesk, the Clarity Act failed to be signed into law on July 4 as White House advisor Patrick Witt had hoped, and the time window for passing it through Congress before the midterm elections is narrowing.Three individuals familiar with the process stated that they remain optimistic about the bill passing this year, as relevant staff are still coordinating between the Senate Agriculture Committee and the Banking Committee versions. The Senate may only need a few days for public debate and voting, but if the bill fails to pass before the midterm elections, the post-election outlook remains uncertain. The next key date is August 7, 2026, which is the last session day before the Senate's summer recess and the campaign season.

According to CoinDesk, researchers from the blockchain security company Hexens have discovered a "stale cache" type obfuscation vulnerability in the Aptos blockchain Move virtual machine. Attackers only need about $3,000 in server costs to launch an attack in a simulated environment with nearly a 90% success rate, without requiring validator permissions or insider knowledge.In simulated tests, researchers ran about 20 attacks, successfully executing 17-18 times, and verified the potential control over cross-chain protocol management permissions such as LayerZero, Wormhole, and USDC CCTP.Hexens assesses that this vulnerability directly threatens DeFi, stablecoins, and liquid staking protocols on the Aptos chain, involving low single-digit billion-dollar assets; if spread through cross-chain bridges, stablecoin minting, and centralized exchanges, the systemic risk exposure could reach up to $70 billion. The Aptos team completed the fix and deployed it to the mainnet within hours of receiving the vulnerability report on February 25, and currently, no user funds have been compromised.

According to CoinDesk, investment bank Jefferies stated in its latest report that the U.S. CLARITY Act still faces significant legislative hurdles in the Senate, and related legislative progress in the coming weeks may exacerbate volatility in the cryptocurrency market.Jefferies pointed out that although the bill previously passed the Senate Banking Committee with a bipartisan vote of 15 to 9, there are only about 20 legislative days left before the August congressional recess. The Senate still needs to complete the bill's consolidation, procedural voting, coordination with the House version, and submission for presidential signature, making the timeline very tight.Polymarket data shows that the probability of the bill passing by the end of 2026 has dropped from 70% in mid-May to 48%. Jefferies believes that if the bill passes smoothly, it will establish a clear regulatory framework for digital assets, prompting banks, asset management institutions, and exchanges to accelerate their layout in tokenized assets, custody, staking, lending, and other businesses, as well as facilitate more cryptocurrency ETFs and IPOs of cryptocurrency infrastructure companies. If the legislation is delayed, it may prolong regulatory uncertainty, causing traditional financial institutions to slow down their blockchain business advancement.The report predicts that the progress of the bill will continue to affect the market performance of cryptocurrency concept stocks such as Circle (CRCL), Coinbase (COIN), Bullish (BLSH), and some cryptocurrency assets.Jefferies also noted that in the long term, compared to regulatory changes, the greater challenge faced by stablecoin issuer Circle still comes from competition with banks, fintech, and payment companies.

According to Crypto in America, the U.S. Senate will recess until July 13, and the advancement of the CLARITY Act depends on the progress of behind-the-scenes coordination over the next two weeks. Staff from both parties, government officials, and industry stakeholders are working to resolve remaining differences, including reconciling text discrepancies between the Banking Committee and the Agriculture Committee, as well as reaching consensus on ethical standards and provisions to combat illegal financial activities.The bill requires the support of at least 60 senators to pass. Even if all 53 Republican votes are in favor, at least 7 Democratic senators will need to join; the support of the majority of Democrats may depend on whether the White House can agree to establish a strong ethical framework regarding issues related to Trump's cryptocurrency business. According to Reuters, since Trump's return to the White House, his cryptocurrency business has generated over $2 billion in new wealth for him.Additionally, major law enforcement groups still oppose the inclusion of provisions from the Blockchain Regulatory Certainty Act in the bill, arguing that it would increase the difficulty of investigating and prosecuting on-chain crimes. Remaining discrepancies in the Agriculture Committee's text include issues such as the prioritization of federal law over state law, management of conflicts of interest in exchanges, and restrictions on related-party transactions. Sources indicate that the parties have not yet reached a final agreement, and there remains uncertainty about whether the Senate vote can be completed before the August recess.