mal

Strike, founded by Jack Mallers, has launched a new Bitcoin collateral loan product aimed at avoiding forced liquidation due to a drop in BTC prices. Strike states that as long as borrowers make timely repayments, the collateralized BTC will not be moved or liquidated, regardless of how deep the Bitcoin price falls.Mallers stated on X that this product has no margin call requirements and no price-based liquidation mechanism, allowing users to borrow USD while continuing to hold Bitcoin. He mentioned that volatility is inevitable, but liquidation is not a certainty. Strike indicated that the new loan product eliminates price-triggered actions linked to the loan-to-value (LTV) ratio, so borrowers do not have to worry about automatic liquidation due to a drop in BTC prices. As long as interest and maturity payments remain normal, the collateral will remain unchanged.

The Zcash development team announced plans to introduce formal verification through the upcoming new privacy pool Ironwood, using mathematical proofs to eliminate the risk of "undetectable inflation vulnerabilities."According to previous news, although the vulnerabilities in the Orchard shielded pool have been fixed and there is no evidence of exploitation, the community decided to launch a brand new Ironwood shielded pool and conduct comprehensive formal verification of its protocol, as it is theoretically impossible to confirm whether hidden inflation has occurred through on-chain history.

BonkDAO disclosed on platform X that it suffered a malicious governance proposal attack, resulting in approximately 20 million dollars worth of BONK tokens being stolen from the BonkDAO treasury.BonkDAO stated that during the investigation, the attacker was identified using an exchange wallet to purchase BONK before the proposal was initiated, and they are currently collaborating with exchanges, cross-chain bridges, and the Solana Foundation. Additionally, the team has notified law enforcement and continues to work with relevant parties to recover funds and trace the responsible individuals.

According to Malaysian media "The New Straits Times," Malaysian police raided an illegal cryptocurrency mining operation located in a warehouse in the Port Klang Free Trade Zone at Pulau Indah yesterday and shut it down. During the raid, two foreign men, aged 20 and 31, were detained, and mining equipment was confiscated.According to Malaysian law, this action violates the Penal Code and the Electricity Supply Act. If convicted, the two men could face ten years in prison and a fine of 100,000 ringgit (approximately 24,500 USD).

SlowMist issued a security alert, detecting a coordinated malicious npm supply chain attack. The attackers utilized fake trading bot repositories and DeFi-themed npm packages to deploy JavaScript information stealers, targeting npm users, DeFi developers, and trading bot users.This attack involved 30 malicious npm packages, among which stake-math@3.5.4 appeared as a locked dependency in the donoaccestag/forex-mt5-trading-bot repository. This repository presented approximately 2300 highly homogeneous bulk-generated forks, mostly concentrated under the poly-stocks account, with signals being exceptionally clear. The sensitive data that attackers could steal is extensive, including cryptocurrency wallet libraries, browser cookies and saved passwords, browsing history, developer credentials, shell history, password manager libraries, private keys, mnemonic phrases, and API tokens exposed in source code.SlowMist recommends that developers immediately remove the affected npm packages, audit package.json and package-lock.json, and check CI logs for any of the 30 malicious packages; consider any system that has executed npm install as potentially compromised, rotate all exposed wallets, private keys, npm tokens, cloud credentials, SSH keys, and API tokens, and rebuild the affected environment from a clean image.

Blockchain intelligence company AMLBot's monitoring data shows that recently Polymarket users on the Polygon network had approximately $3.1 million PUSD stolen due to a front-end malicious script intrusion.The attackers implanted a malicious script that induced users to sign authorization transactions (involving EIP-7702 delegated execution), resulting in the users' wallets being emptied. The stolen funds were then converted to USDC.e through Relay, bridged to Ethereum, and ultimately exchanged for ETH, which was concentrated in a designated address. Currently, about 1891.9 ETH is distributed across three new wallets.AMLBot pointed out that this attack is similar to the incident involving the 2024 1inch web application, where a wallet theft script was implanted in the Lottie Player library, both cases involved third-party scripts being compromised, leading to front-end contamination.

Michael Saylor posted on the X platform stating that Bitcoin is operating normally, and so are we (Strategy).

According to official news, Base disclosed at 00:27 Beijing time that the mainnet experienced an interruption due to block production issues. The team confirmed that the problem originated from an anomalous block interfering with the construction of subsequent blocks, and all funds are safe. At 1:53, the team announced that the new block ordering had been restored, and internal nodes were synchronizing normally. Teams running validation nodes need to restart Base nodes to restore synchronization. At 3:22, the team announced that block production had returned to normal, and various applications and infrastructure were gradually coming back online as nodes were restarted. The team has identified the root cause of this interruption and will prioritize releasing a complete post-incident analysis report.In addition, The Block reported that this interruption occurred on the same day that Base planned to conduct the Beryl upgrade at 02:00 Beijing time, but it is claimed to be unrelated to the scheduled maintenance.

The security alert released by Blockaid on platform X indicates that its system has detected an attack targeting the front end of the Yield Yak website. The project's subdomain vote.yieldyak.com has been implanted with eleven drainer malicious code. Blockaid pointed out that the method of this attack is similar to the security incident that Gitcoin.co encountered yesterday.

CoinUp stated that there has been some discussion about the platform in recent market and social media, where certain KOLs have made statements such as "running away" and "difficulty in withdrawing funds" that are inconsistent with the facts and contain misleading interpretations.CoinUp specifically clarifies that the individual mentioned online, Zhu Pan, is not the operator of the platform and does not participate in the core operations, asset custody, or risk control decisions of the platform. His personal rumors should not be confused with the platform itself.In response to market concerns regarding the withdrawal situation, CoinUp emphasizes that the platform's withdrawal function is operating normally, and the account system, wallet system, and asset custody are all in a safe and controllable state. User recharge, withdrawal, and trading functions have not been affected.

Public market data shows that the stock of Nasdaq-listed company (Nasdaq: WTO) has recently seen a significant increase, with the rise approaching 500% at one point. Against the backdrop of growing interest in Web3 data platforms, prediction markets, and the concept of coin-stock linkage in the US stock market, WTO's price performance has sparked market discussions.Market participants believe that WTO's recent surge may be related to the recent launch of the "Non-Small Number World Cup Carnival" by Non-Small Number. This event revolves around the 2026 World Cup and combines this global sporting event with Web3 prediction markets, precisely hitting the hottest event that attracts the highest global user attention, as well as the prediction market track with strong growth potential in the current Web3 market.From a market logic perspective, the World Cup naturally possesses global traffic, high-frequency discussions, and clear outcomes, which can continuously generate demand for predictions; while prediction markets are currently one of the few application scenarios in Web3 that can directly connect real events, user judgments, and on-chain participation. The launch of related activities by Non-Small Number during the World Cup cycle is seen as a precise entry point into the global market's enthusiasm and the demand from Web3 users.Industry insiders believe that as the World Cup Carnival drives increased exposure for Non-Small Number in the direction of prediction markets, the market is reassessing its potential value as a Web3 data entry point, a hot event operation platform, and a connection asset for US stock capital in a more positive direction.

According to Decrypt, CryptoQuant data shows that despite Bitcoin's price dropping nearly 50% from its historical peak, network activity continues to rise, recently reaching its highest level since the end of 2024, only 7% lower than the historical peak in September 2024. Analysis points out that this is the first sustained activity above the trend line since mid-2024, contrasting sharply with the bearish price trend of Bitcoin.However, while activity is growing, the economic value of transactions is significantly low. Transactions of less than 0.01 BTC and less than 0.001 BTC have increased from 44% in 2023 to about 80%. CryptoQuant considers this a sign of "protocol-driven activity": high transaction volume but low individual value.The usage of OP_RETURN also surged to near historical highs in 2026, involving applications such as Bitcoin NFT activity and timestamp services. Bitcoin's price has dropped 17% over the past 30 days, currently around $63,865.

According to Digital Asset, the Financial Intelligence Unit (FIU) of South Korea proposed at the FATF plenary meeting to expand the applicability of the virtual asset Travel Rule to small transactions and suggested implementing transaction restrictions on high-risk unregistered virtual asset service providers.The South Korean delegation emphasized that as the money laundering risks associated with cross-border digital asset transactions increase, member countries should apply the Travel Rule to both sending and receiving VASPs and expand its applicability to small transactions. In response to the increasing cases of criminal organizations utilizing overseas and unregistered VASPs, South Korea recommended strengthening customer identification obligations and considering transaction restrictions on high-risk unregistered VASPs.The FIU had previously advanced similar regulatory measures in the amendment to the enforcement decree of the Specific Financial Information Act, which is planned to be implemented in August, expanding the applicability of the Travel Rule from transactions over 1 million won to those under 1 million won.

According to The Edge Malaysia, Malaysia has made comprehensive revisions to the regulations on shareholding and asset declaration for civil servants. The new rules stipulate that public officials can purchase shares in companies registered in Malaysia, but the shareholding ratio must not exceed 5% of the company's paid-up capital or a value of no more than 300,000 ringgit, whichever is lower. Although the upper limit for shareholding remains at 5%, the value limit has been increased from 100,000 ringgit. If officials wish to exceed the shareholding limits, they must apply for approval from designated officials, including the Prime Minister and the Chief Secretary to the Government. The announcement also specifies relevant rules regarding digital assets.Previously, Bloomberg reported in February that the then Chief Commissioner of the Malaysian Anti-Corruption Commission (MACC), Azam, held 17.7 million shares in a financial services company, valued at nearly 800,000 ringgit. This report sparked public debate in the country.

CryptoQuant data shows that Bitcoin network activity has risen to a level approximately 7% away from the historical peak in September 2024, and has broken through the long-term trend line for the first time since mid-2024, primarily driven by a large number of small transactions rather than traditional economic payment activities. The daily number of Bitcoin transactions in 2026 has exceeded 800,000, more than doubling from the low point in 2025, approaching the cycle peak from 2023 to 2025.CryptoQuant believes that this growth has structural characteristics rather than being a short-term fluctuation. Among these, small transactions below 0.01 BTC now account for about 80%, significantly higher than about 44% in 2023. This change is closely related to the usage of OP_RETURN, which is near historical highs. CryptoQuant points out that protocols such as Runes, Ordinals, BRC-20, and data timestamp services generate a large number of low-value transactions by writing data to the blockchain, with some transaction amounts as low as 546 satoshis.As inscription activities increase, the number of transactions in the Bitcoin mempool has risen to about 128,000, the highest level since February 2025. Although still below the extreme congestion levels of September 2023 and November 2024, the report suggests that non-financial use transactions are occupying an increasing amount of Bitcoin network throughput, and if this trend continues, it may drive up transaction fees for time-sensitive economic transactions.Meanwhile, the rise in on-chain activity contrasts with the flow of funds. There has been a net outflow of over $528 million from Bitcoin and Ethereum spot funds; however, institutional investors still view ETF fund flows as the core driving force of this cycle and maintain the benchmark expectation that Bitcoin will reach $150,000 by the end of the year.

According to CoinDesk, the Malta Financial Services Authority (MFSA) has released a discussion paper exploring how decentralized finance (DeFi) can be incorporated into the EU MiCA framework. The MFSA pointed out that while MiCA exempts "fully decentralized" crypto services, many DeFi projects still retain centralized features such as admin keys, governance centralization, and protocol upgrade permissions.The regulatory body is seeking public opinion on whether decentralization should be viewed as a "spectrum" rather than a binary concept, and discussing whether to establish a standardized framework to determine if protocols fall outside the scope of MiCA regulation. Additionally, the document proposes potential legal structures such as DAOs and segregated cell companies, and examines automated compliance mechanisms like custodial agents. The public consultation on this discussion paper is open until July 10.

Curve Finance announced that its lending product LlamaLend V2 has officially launched on the Ethereum Layer 2 network Optimism. Users can engage in borrowing, lending, or circular leverage operations in the isolated market based on the Curve LLAMMA mechanism. It is reported that this upgrade will open a new market and distribute OP rewards to eligible users through Merkl.

According to Jinshi reports, U.S. President Trump stated that the relationship between the United States and Iran has now been normalized, and he announced that the text of the Iran agreement will be released. In the coming days, he will discuss the relevant documents with the media and hold a press conference regarding the Iran agreement.U.S. Vice President Pence stated that Iran will commit to not acquiring nuclear weapons. Previously, Trump also mentioned that the Strait of Hormuz will not charge tolls and indicated that the negotiations with Iran may take longer or shorter than 60 days, hoping to complete the formal signing before the document is released.