idg

The blockchain gaming platform The Sandbox stated that it will compensate users who held bridged SAND on Base or BNB Smart Chain at a 1:1 ratio before the bridge vulnerability attack, with compensation provided in Ethereum-based SAND from the project treasury, and there will be no token issuance. This attack resulted in the theft of approximately 14.744 million SAND from the Ethereum treasury, valued at about $700,000.The application process is expected to open within two weeks and will last for two weeks; over 72% of the balances held by two centralized exchanges that meet the compensation criteria will be directly compensated to affected customers. The Sandbox indicated that the attacker exploited a configuration vulnerability in the SAND contracts on Base and BNB Chain, becoming the sole validator of bridge messages and minting unbacked tokens. Additionally, over 339 trillion unbacked SAND was minted on the two networks but has been isolated and cannot be cross-chain or exchanged; SAND on Ethereum and Polygon remains unaffected, and the compromised bridge contracts will be permanently disabled.

The blockchain network BNB Chain has enabled the Pasteur hard fork on the BNB Smart Chain (BSC) mainnet. The upgrade involves cross-chain bridge validation, validator authorization, staking, and governance security, while enhancing block capacity without changing the 450 milliseconds block time.This upgrade includes BEP-682, BEP-695, and BEP-675, which respectively involve duplicate validator entries, validator key rotation and penalty governance, and block submission processes. In the internal testing environment QANet, the new process increased throughput from 1,237 transactions per second to 2,324 transactions per second, but the related data comes from controlled tests and not mainnet measurement results.

According to Reuters, Xiaopeng Group's humanoid robot business has signed equity financing agreements with multiple investors, raising over $900 million, with a post-investment valuation exceeding $6.3 billion, setting a record for single-round private equity financing in China's embodied intelligence industry.This round of financing was led by IDG Capital, with participation from Gao Rong Capital, and received support from two strategic investors, Tencent and Alibaba. The funds raised in this round will primarily be used for software and hardware research and development of Xiaopeng's robot business, physical AI model training and iteration, high-quality data collection, construction of a full-chain mass production base, and global commercialization expansion.

According to Caixin, the Hong Kong police responded to the abnormal liquidation case of Star Bridge Capital's gold trading, stating that multiple reports have been received, with the reported amount of funds that could not be retrieved totaling approximately HKD 6.63 million. After investigation, the case is temporarily classified as fraud and has been handed over to the third team of the Central District Criminal Investigation Unit for follow-up, with no arrests made yet.According to information obtained by the affected investors in this case, as of 1:50 PM, the number of people who have reported to the Hong Kong police (and have obtained a report number) is approximately 180.

The Slow Mist security team disclosed that the cross-chain bridge project Allbridge was attacked on August 19, 2026, resulting in a loss of approximately $190,000. Notably, this attack was not executed instantly; the attacker had begun laying the groundwork nearly a month prior and bypassed the verification mechanism by forging cross-chain messages. According to Slow Mist's analysis, on July 26, the attacker directly called Circle's MessageTransmitterV2.sendMessage function on the Polygon chain, constructing a cross-chain message disguised as a CCTP style message, claiming that a transfer of 1 million USDC existed, but in reality, no USDC destruction operation took place. Subsequently, Circle generated a valid verification proof (attestation) for this complete message according to normal procedures.About 24 days later, on August 19, the attacker waited for the Base Router to receive a real CCTP deposit, increasing the balance to approximately 191,000 USDC, and initiated the attack just 6 seconds later. The attacker utilized the previously forged message and verification proof to call Allbridge's receiveCctpMessage function. Due to the project's lack of critical verification, the system mistakenly recognized the false cross-chain message as a real deposit and recorded a limit of 1 million USDC. The attacker then temporarily borrowed approximately 809,000 USDC through an Aave flash loan, matching the Router balance with the forged amount, and used the internal credit record to call the transfer function, ultimately transferring out approximately 999,000 USDC (after a 0.1% fee). After repaying the flash loan and fees, the attacker netted a profit of about $189,800. The root cause of this vulnerability lies in Allbridge's failure to verify the identities of the sender and receiver of the cross-chain message, as well as not confirming whether USDC was genuinely minted and whether the balance actually increased, instead directly trusting the amounts and message hash data constructed by the attacker. Slow Mist emphasizes that on-chain message verification does not equate to the actual arrival of real assets. Cross-chain protocols not only need to verify the authenticity of messages but must also ensure that the message source is trustworthy, that the receiver is Circle's official TokenMessengerV2, and that asset accounting can only proceed after confirming the actual minting of assets and changes in balance. This incident once again highlights the security risks of cross-chain bridges in the message verification and asset settlement processes.

The metaverse gaming platform The Sandbox confirmed that there is a vulnerability in its cross-chain bridge, allowing attackers to mint uncollateralized SAND on Base and BNB Smart Chain. Blockchain security company PeckShield discovered on August 21 that two addresses had collectively minted approximately 1.49 billion SAND, prompting The Sandbox to shut down the bridging functions for both networks.The Sandbox stated that the affected assets are those bridged on Base and BNB Smart Chain, while SAND on Ethereum and Polygon, user wallet assets, and Ethereum locked assets used to support the tokens remain unaffected. The incident involved a proportion of real collateralized assets that is less than 0.01% of the total supply of SAND. The Sandbox is formulating a compensation plan for the affected liquidity providers and advises users not to trade SAND on Base or BNB Smart Chain until the bridging function is restored.Coinbase plans to delist 10 perpetual futures contracts, including SAND, on August 26, at which time any open positions will be automatically settled.

The Sandbox official stated that the team has confirmed and fully controlled the recent SAND cross-chain bridge vulnerability incident, involving the Base and BNB Smart Chain (BSC) networks.The official said that the impact of this incident is limited, involving less than 0.01% of the total supply of SAND tokens. SAND on Ethereum and Polygon is unaffected, and user wallets have not been compromised; related token holders and liquidity providers do not need to take action.According to disclosures, the attacker minted uncollateralized SAND tokens on the Base and BSC networks through the vulnerability. Currently, The Sandbox has disabled the SAND cross-chain functionality on both networks, and SAND on Base and BSC has been isolated, temporarily unable to be transferred or exchanged.The Sandbox reminds users not to buy, sell, or trade SAND on the Base and BSC networks, as liquidity on these networks has been affected.The team stated that they have completed a snapshot before the incident and are formulating a compensation plan for affected liquidity pool (LP) users, while continuing to investigate the scope of the vulnerability's impact. A complete incident report and technical review will be released subsequently.

Ray Dalio, the founder of Bridgewater Associates, warned that the annual budget deficit in the United States has reached $2 trillion, with approximately $10 trillion in debt needing to be refinanced. If the current trajectory is not changed, a debt crisis could arrive "within three years, with a two-year margin of error."In terms of asset allocation, Dalio advises investors to reduce their bond holdings to avoid debt risks; increase their allocation to gold, raising it to 10% to 15% of their portfolio; and hold a small amount of Bitcoin to hedge against government credit risk. Dalio also calls for the U.S. to reduce the budget deficit from the current level of about 6% of GDP to 3%, through measures including cutting spending, increasing taxes, and lowering interest rates.As a result of these statements, gold prices surged to their highest level since May on Friday, and Bitcoin broke through $77,000, marking the largest weekly increase since 2023.

According to Caixin, Star Bridge Capital (SBCFX) experienced an abnormal liquidation incident in London gold trading. After the incident, the Hong Kong office of the platform was empty, and some investors faced huge losses. According to multiple investors, their automated trading in London gold (XAUUSD) derivatives through the Star Bridge Capital platform encountered extreme abnormal trading on the evening of August 19: the system automatically generated huge reverse short positions within just 1 to 3 seconds, followed by a rapid rise in international gold prices, leading to collective liquidations of accounts, with some accounts' funds reaching zero, and some even incurring negative debts.The so-called London gold liquidation refers to the risk of trading in the opposite direction of gold price movements, and due to leverage and other reasons, resulting in excessive losses, where the available margin in the investor's account is exhausted, falling below the maintenance margin ratio, leading to forced liquidation by the platform and total loss of principal.Affected investors estimate that this incident involves about 2,000 to 3,000 people, including a large number of mainland investors. Currently, some investors have reported to the Hong Kong police and requested the platform to refund 70% of the principal according to the previously promised "maximum loss of 30%" rule.Some investors claim that Star Bridge Capital offers leverage of up to 500 times, and some funds were deposited via USDT stablecoins, increasing the difficulty of tracking funds. Public information shows that Star Bridge Capital's business scope covers foreign exchange, commodities, indices, cryptocurrencies, etc., and it claims to be a licensed and compliant international trading platform.

According to crypto journalist Kate Irwin, an abnormal asset outflow event occurred on GalaChain this Tuesday, with 1.99 billion GALA (approximately $2.9 million) and other tokens transferred from five main addresses to a new wallet, and GALA was cross-chain exchanged for ETH within about an hour. Approximately 82% (1.639 billion GALA) came from a wallet associated with Gala CEO and co-founder Eric Schiermeyer, which also saw an outflow of about $500,000 in other tokens.Hours after the incident, Gala developers submitted a fix on GitHub, characterizing it as a GalaChain EIP-712 unsigned field injection vulnerability. Currently, Gala has suspended the Ethereum and Solana cross-chain bridge, with officials stating "under maintenance," and GalaChain and its CEO have not yet responded to requests for comment.

According to Curve.finance Governance, Swiss Stake AG submitted a progress report for H1 2026 stating that Llamalend V2 has passed the ChainSecurity audit and has launched on Optimism and the Ethereum mainnet, supporting LP Token and PT collateral while introducing new admin fee revenue for Curve DAO.FXSwap has entered the production optimization phase, focusing on research around liquidity concentration, price_scale, and dynamic fees. FastBridge has launched on Arbitrum, Optimism, and Fraxtal, reducing the time to withdraw crvUSD from Layer 2 to Ethereum from about 7 days to approximately 15 minutes. The team has secured the second phase of 8.725 million CRV and additional CRV and crvUSD funds to support operations until the end of 2026, and plans to submit a proposal to increase the DAO protocol fee share from 10% to 30%.

According to Yahoo Finance, SkyBridge Capital founder Anthony Scaramucci stated in a CNBC interview that the current narrow fluctuations in Bitcoin are due to three factors: miners shifting resources to AI, capital flowing into AI investments, and the position of cryptocurrency in the four-year market cycle.He still expects Bitcoin to rise to $100,000, but the next catalyst may take 20 months to arrive. He pointed out that Bitcoin is in a "clear bear market," but the current decline is only about 55%, far lower than the previous cycles' 75%-80%, which is actually a positive signal—indicating that there are many net buyers preparing for the next bull market. Over the past three months, Bitcoin has only outperformed the S&P 500 on about one-third of trading days, but on Monday and Tuesday of this week, it outperformed the major U.S. stock indices for two consecutive days.

In the second quarter 13F holdings report for 2026 (reporting period ended June 30, 2026), Bridgewater Associates, founded by Ray Dalio, disclosed a reduction of 1,359,038 shares of Micron Technology, still holding approximately 116,700 shares, with a reduction ratio of about 92%.

On August 9, the cross-chain bridge connecting the XRP Ledger and Coreum was attacked, with the attacker stealing approximately 199,900 XRP through a validation logic vulnerability, causing the bridged asset balance to drop from about 200,400 XRP to 493.5 XRP. This attack did not involve private key leakage and did not target the XRP Ledger protocol itself.The attacker forged deposit operations, causing the bridging system to recognize them as real deposits and triggering the other end of the bridging wallet to send real XRP to them. On-chain data shows that the attacker completed the fund transfer through 94 multi-signature authorization transactions within 97 minutes. These transactions required 17 signatures from 28 relay node keys, allowing the attacker to bypass the validation mechanism of the bridging system. As of August 11, the Coreum cross-chain bridge remains in a suspended state, and the Coreum Development Foundation has not yet released an official incident report. The security of the XRP mainnet and user private keys has not been affected.

According to The Block, New York-listed fintech company Broadridge announced that its Distributed Ledger Repo (DLR) platform processed over $8 trillion in transactions in July, averaging about $365 billion per day, a year-on-year increase of 28%.DLR allows companies to use distributed ledger technology to settle repo transactions in existing trading and post-trading environments, enabling real-time financing and tokenized collateral liquidity. In addition, Broadridge also offers on-chain proxy voting and governance services, as well as digital asset infrastructure management.

On August 10, UMX (The Unified Market Exchange), incubated by Avenir Group under Li Lin, announced the launch of an invitation-only public beta. UMX is positioned as a crypto-friendly securities platform for global professional investors, supporting spot, leverage, contract, and options trading of crypto assets, while also supporting real US stocks, ETFs, and US stock options trading. The aim is to connect crypto assets and real securities trading on the same platform, enhancing the capital efficiency of cross-asset trading.The public beta focuses on opening the capital link between crypto assets and securities accounts, supporting functions such as stablecoin exchange transfers, non-stablecoin collateralized lending, fiat account withdrawals and deposits, and the mutual conversion of securities holdings and stock tokens. To enhance cross-asset capital efficiency, the platform introduces a cross-asset margin mechanism, allowing financial assets to be used as margin. During the public beta, BTC and USDT financial products will also be launched, with the highest annualized returns reaching 2.5% and 5.5%, respectively. This public beta is invitation-only, and users who have not yet obtained a public beta code can reserve the official version and participate in the early bird benefits program.

According to Shield's monitoring, the wallet address marked as the attacker of the Aztec Network Private Rollup Bridge has deposited 300 ETH into Tornado Cash again, worth approximately $572,000. So far, the attacker has transferred a total of 500 ETH to Tornado Cash.Previously, Aztec Network suffered a security attack in June 2026, resulting in a loss of approximately $2.165 million in crypto assets. This transfer of funds may further complicate the tracking of the stolen assets.

According to Cointelegraph, Bridge, a stablecoin infrastructure company under Stripe, has officially joined the EU Crypto Asset Market Regulation (MiCA) registry through its Luxembourg entity, Bridge Building. Previously, Bridge obtained authorization as a Crypto Asset Service Provider (CASP) under the MiCA framework and received an Electronic Money Institution (EMI) license from the Luxembourg Financial Supervisory Authority (CSSF) on July 2.Mai Leduc Blount, Head of Products at Bridge, stated that the aforementioned approvals will allow EU businesses to build stablecoins and payment products within a compliant framework. According to the latest update from the European Securities and Markets Authority (ESMA), Bridge's inclusion increases the total number of EU-authorized Electronic Money Token (EMT) issuers to 42; during the same period, three institutions from Germany newly obtained CASP authorization, raising the total number of EU-authorized CASPs to 324.

Financial technology company Broadridge has partnered with Kraken's B2B infrastructure platform Payward Services to integrate its unified governance platform with the tokenized stock framework xStocks developed by the latter. This collaboration provides qualified holders of xStocks with shareholder communication and proxy voting support, allowing token holders to participate in corporate governance voting for the companies they invest in for the first time.According to the announcement, the main features include qualified holders logging into ProxyVote.com via Web3 identity verification, receiving proxy materials and shareholder communication information in a digital format, submitting proxy voting intentions for tokenized securities supported by xStocks, and obtaining a consistent governance experience between traditional securities and mainstream tokenized models. Additionally, this service is based on Broadridge's proxy voting infrastructure, offering institutional-level governance, reporting, and audit capabilities.

According to CertiK Alert monitoring, VerusCoin's Ethereum cross-chain bridge experienced a security incident, with approximately $7.53 million in assets being transferred out.Preliminary analysis indicates that this issue may be related to the cross-chain bridge not adequately verifying whether the Verus chain-side input supports the paid amount, similar to the incident that occurred in May of this year.