lit

Humility Protocol released a security incident update on the X platform, indicating that yesterday the H token suffered a coordinated attack on the Ethereum and BSC chains, with over $36 million in assets confirmed to have been stolen and sold off.Preliminary investigations show that the incident originated from an employee's computer being compromised, leading to the leakage of the multi-signature wallet keys controlling the Hyperlane Bridge ProxyAdmin. Among them, the attacker obtained 3 out of 6 private keys from Gnosis Safe holders on the Ethereum chain, transferred ownership of ProxyAdmin to their controlled wallet, and upgraded the bridging contract to a malicious implementation, subsequently transferring approximately 141.2 million H tokens in a single transaction.Meanwhile, the attacker also controlled 3 out of 5 private keys from Safe wallet holders on the BSC chain, taking over ProxyAdmin in the same manner and deploying a malicious contract with unlimited minting capabilities, minting 200 million H tokens to their wallet in two transactions.Humility stated that it has suspended all deposit and withdrawal operations for the affected bridging services and is collaborating with exchanges and other relevant partners to mitigate losses, while also cooperating with law enforcement to investigate and attempt to recover some of the stolen funds.

In the third game of the NBA Finals, the score fluctuated back and forth, and ultimately, the Spurs narrowly defeated the Knicks on the road, bringing the overall score to 1:2.Data from the Base native leverage prediction market OmenX shows that there was a significant fluctuation in the NBA championship prediction market after the game, with the Spurs' championship probability rising from 22% to 37%, while the Knicks' championship probability dropped to 63%. As of now, the cumulative trading volume in the NBA Finals-related prediction market on OmenX has reached 24.5 million dollars.OmenX currently supports a maximum of 5x leverage, allowing users to engage in leveraged prediction trading around sports events such as the NBA championship and the World Cup championship.

According to SoSoValue data, the total net inflow of Ethereum spot ETFs is $82.3717 million. The Ethereum spot ETF with the highest single-day net inflow is Fidelity ETF FETH, with a single-day net inflow of $28.5672 million, and the historical total net inflow of FETH has reached $2.155 billion.The second is Blackrock Staked ETH ETF ETHB, with a single-day net inflow of $26.8973 million, and the historical total net inflow of ETHB has reached $560 million. The Ethereum spot ETF with the highest single-day net outflow is VanEck ETF ETHV, with a single-day net outflow of $3.6975 million, and the historical total net inflow of ETHV has reached $164 million.As of the time of publication, the total net asset value of Ethereum spot ETFs is $9.359 billion, and the ETF net asset ratio (the market value compared to the total market value of Ethereum) is 4.59%, with a historical cumulative net inflow of $11.283 billion.

According to monitoring by Catcher Predict, in the "2026 NBA Championship" event on the prediction market Polymarket, the "Yes" option for the sub-market "New York Knicks" has experienced significant fluctuations in winning probability, dropping from 80.6% an hour ago to the current 64.25% (a fluctuation of 16.35%). Please note the impact of related breaking news.

The founder of Slow Fog, Yu Xian, stated that the attack Asterix encountered is similar to that of Flooring Protocol and BMP yesterday (the underlying protocols are DN404 and BT404), with high-level NFT ID displacement operations overflowing and being reused. It seems the attackers are looking for common vulnerabilities.It is reported that Asterix disclosed an attack incident affecting the ASTX token contract yesterday, stating that its Uniswap v4 liquidity pool was attacked on June 8, with attackers stealing approximately 30 ETH through 242 transactions. The vulnerability originated from a lack of token ID restriction checks on approval operations in an early version of DN404. Attackers exploited the outdated token approval to repeatedly sell tokens in the pool to obtain ETH, and then extracted equivalent tokens through forged IDs, leading to a cycle that drained the funds.Smart contracts are immutable and cannot be patched. The team advises users to stop interacting with the current pool and tokens and is planning to migrate to deploy secure tokens. The team suspects that the attackers used a jailbroken AI tool for fuzz testing to discover unconventional logic paths.

According to BBX data, yesterday corporate Bitcoin reserves were rapidly rebuilt, and the institutional-level crypto derivatives toolchain officially completed the final piece of the puzzle. The core dynamics are as follows:Strategy, Inc. (NASDAQ: $MSTR) submitted Form 8-K to the SEC on June 8, disclosing that the company purchased an additional 1,550 BTC between June 1 and June 7, at a total cost of approximately $101.3 million, with an average price of $65,332; as of June 7, the company's total holdings rose to 845,256 BTC, with a total acquisition cost of approximately $63.97 billion. The funds for this round of purchases came from the sale of 1,409,600 shares of MSTR common stock via ATM, netting approximately $181 million; USD reserves also rebounded simultaneously (specific amounts are subject to real-time disclosure by the company). This additional purchase of 1,550 BTC is a reverse operation just one week after the company disclosed "the first net reduction of 32 BTC in four years," responding to market doubts about its holding position with nearly 48 times the buying scale; as of the time of writing, Bitcoin has rebounded to over $63,000.CME Group Inc. (NASDAQ: $CME) officially launched trading for Bitcoin Volatility Index Futures (BVOL Futures) on June 8, with market makers Monarq and DV Chain completing the first batch of transactions; this product is based on the implied volatility index of Bitcoin, allowing institutional investors to go long or short on volatility itself without needing to judge the direction of BTC prices, filling the last gap in crypto volatility management tools in the regulated U.S. market. Thus, the regulated U.S. crypto derivatives system now covers: spot ETFs, futures, options, perpetual contracts, and volatility futures, completing a comprehensive toolchain, and the infrastructure for institutional-level risk management and pricing capabilities has been declared complete.

According to Jinshi, the CME "Fed Watch" shows that the probability of the Federal Reserve maintaining interest rates unchanged until June is 98.1%, while the probability of a cumulative rate cut of 25 basis points is 1.9%. By July, the probability of maintaining interest rates unchanged is 84.7%, the probability of a cumulative rate increase of 25 basis points is 13.6%, and the probability of a cumulative rate cut of 25 basis points is 1.6%.

According to Jinshi reports, the CME "FedWatch" shows that the probability of the Federal Reserve keeping interest rates unchanged until June is 97%, while the probability of a cumulative rate cut of 25 basis points is 3%. By July, the probability of keeping interest rates unchanged is 81.9%, the probability of a cumulative rate increase of 25 basis points is 15.5%, and the probability of a cumulative rate cut of 25 basis points is 2.5%.

According to monitoring by Catcher Predict, in the market prediction event "Monaco Grand Prix Driver Victory" on Polymarket, the "Yes" option for the sub-market "Lewis Hamilton" has experienced a sharp fluctuation in winning probability, soaring from 2.5% an hour ago to the current 18.35% (a fluctuation of 15.85%). Please note the impact of related breaking news.

According to Jinshi reports, Guotai Junan's research report points out that the non-farm data in May continued to exceed expectations, signaling a stabilization and recovery in the U.S. job market, which catalyzed market expectations for interest rate hikes and led to significant adjustments in asset prices. The U.S. dollar strengthened, U.S. Treasury rates surged, U.S. stocks fell sharply, and gold weakened. Guotai Junan believes that there are still differences within the Federal Reserve, and there may not be an interest rate hike within the year, but the market in June may be affected by liquidity shocks, and U.S. stocks may face at least one to two months of volatility.

Glassnode co-founder Rafael posted an analysis of the recent Bitcoin price trend on the X platform, noting that the current Bitcoin price is in the $62,000 range, having dropped nearly 50% from its all-time high, with a decline of 24% over the past month. The price has crossed the upper range of its pricing framework, entering a valuation cluster area where historical cycles have previously shown bottoms.Rafael further pointed out that market bottoms cannot be confirmed in advance and can only be defined through probability ranges and key price levels to identify potential bottom signals. Bitcoin has fallen below the median holder breakeven line for the first time since December 2022, currently situated within a broader support range: the median realized price is approximately $64,100, and the 200-week moving average price is around $61,700.The current high-probability bottom range may be between $46,000 and $54,000, with a rare "sell-off tail" below that range of $35,000 to $40,000. It is important to note that the magnitude of cyclical pullbacks is gradually decreasing: previous rounds of lows saw declines of about 85%, 84%, and 77%, while this round has only dropped about 50%, indicating that a high-probability bottom is more likely to be in the upper range, though extreme sell-off possibilities cannot be ruled out.

According to CoinDesk, security engineer Taylor Hornby, who discovered a serious vulnerability in Zcash using the Anthropic Opus 4.8 AI model, stated that Monero (XMR) has been added to the audit queue, and more privacy coin projects will undergo security reviews in the future.Hornby previously discovered a critical vulnerability in the Zcash Orchard privacy pool on May 29, which had gone unnoticed since May 2022 and could theoretically allow attackers to create unlimited undetectable fake ZEC. The development team at Shielded Labs completed an emergency fix before June 1 and subsequently disclosed the details of the vulnerability. As a result of the incident, ZEC dropped by as much as 38% within 24 hours after the news broke, with the market concerned that attackers may have exploited the vulnerability to steal funds from the privacy pool without leaving on-chain traces.Hornby stated that he was commissioned by the nonprofit organization Shielded Labs in April of this year to identify protocol vulnerabilities before attackers could exploit them. Although he had the means to profit from the vulnerability, he chose to report the issue to the development team, stating that "such betrayal is unacceptable." Additionally, Hornby plans to apply for funding from the Zcash community to support subsequent security research efforts.

Dragonfly Managing Partner Haseeb published a statement regarding the recently patched Zcash vulnerability, indicating that there are many misunderstandings in the market about this event. He pointed out that even if the vulnerability had been exploited before it was fixed, attackers could only profit by faking ZEC in the privacy pool, and these tokens must first be converted from a privacy address to a transparent address to enter mainstream trading platforms.Since the supply of ZEC in transparent addresses can be publicly verified, any abnormal transfers exceeding the maximum supply will be detected and blocked, so the vast majority of investors holding transparent ZEC and exchange users will not be affected.Haseeb stated that the Zcash team plans to introduce a new "Turnstile" mechanism and a brand new privacy pool in future upgrades to verify that there is no inflation issue in the current privacy pool. He also mentioned that formally verified cryptographic systems can reduce implementation errors from a design perspective. Haseeb finally disclosed that Dragonfly still holds ZEC, and he is also a ZODL investor.

According to monitoring by Catcher Predict, in the predicted market event "Knicks vs. Spurs" on Polymarket, the "Spurs" option in the sub-market "1H Spread -10.5" experienced significant fluctuations in winning probability, soaring from 28% an hour ago to the current 49% (a fluctuation of 21%). Please note the impact of related breaking news.

According to monitoring by Catcher Predict, in the predicted market event "Knicks vs. Spurs" on Polymarket, the option "Knicks" in the sub-market "First Scoring Team" has experienced a sharp fluctuation in winning probability, rising from 32.5% an hour ago to the current 49.5% (a fluctuation of 17%). Please note the impact of related breaking news.

Dragonfly partner Haseeb tweeted to clarify the recently fixed vulnerability in Zcash. He stated that if the vulnerability had been exploited before the fix (although the probability is extremely low), it would manifest as the privacy pool minting false ZEC. Attackers would need to sell quickly, but since the market primarily trades transparent ZEC, they cannot directly sell the unmasked privacy ZEC on mainstream exchanges. Therefore, the losses would mainly be borne by users holding privacy ZEC, with almost no impact on holders of transparent ZEC and price discovery.Haseeb emphasized that the Zcash team will introduce a new turnstile mechanism and a brand new privacy pool in the next upgrade to verify that the privacy pool has not been inflated. He also has high hopes for formal verification technology, believing it is an important path for enhancing software security across the industry in the future, especially crucial for privacy protocols.

According to monitoring by Catcher Predict, in the predicted market Polymarket for the event "Roland Garros ATP: Jakub Mensik vs. Alexander Zverev," the option "Jakub Mensik" in the sub-market "Roland Garros ATP: Jakub Mensik vs. Alexander Zverev" experienced a dramatic fluctuation in winning probability, soaring from 25.5% an hour ago to the current 50% (a fluctuation of 24.5%). Please note the impact of relevant breaking news.

According to Jinshi reports, U.S. interest rate futures data shows that the probability of the Federal Reserve raising interest rates in December has increased from 48% to 63%.