mission

The Hong Kong Securities and Futures Commission (SFC) issued a restriction notice to Futu Securities International (Hong Kong) Limited, prohibiting it from handling or disposing of assets in customer accounts held by a certain entity, limited to HKD 125,247,000. This entity is suspected of participating in a fraudulent scheme aimed at creating a false or misleading appearance of demand for initial public offering shares. Futu is not the subject of the SFC's investigation, and this restriction notice will not affect Futu or its other clients.According to the notice, Futu must not dispose of or handle the relevant account assets in any way without the SFC's written consent, and must immediately notify the SFC if it receives any instructions related to the restricted assets. The SFC believes that issuing this restriction notice is in the interest of investors and the public. The investigation is still ongoing.

The cryptocurrency card project Tria announced the distribution of over $600,000 in rewards to ambassadors who promoted platform growth during Season One and Season Two, including a $250,000 ambassador bonus pool (distributed based on commission performance grading from Season One, with up to 50% additional rewards) and over $350,000 in card consumption commissions (covering card consumption and membership purchase shares for referred users from January 31 to June 30).The ambassador bonus will be available for claims on July 31, and card consumption commissions will be credited in the coming weeks, with regular distributions on the last Tuesday of each month thereafter. Tria stated that more incentive programs will be opened in Season Three, and the ambassador program continues to recruit.

According to the official report from Ostium, the core of this attack lies in the intrusion of the off-chain price reporting system's permissions, unrelated to smart contract vulnerabilities. After gaining off-chain authorization, the attacker submitted forged prices (5,000 USD and 60,000 USD) to the BTC-USD market using the legally registered forwarding paths of the protocol, completing an atomic open-close arbitrage cycle within the same transaction, and starting with a rolling scale of 100 USDC. Through 8 transactions, they extracted 23.75 million USDC from the OLP treasury within 5 minutes, until the treasury's circuit breaker mechanism was triggered.The root cause is the lack of a multi-party approval mechanism at the same level as on-chain multi-signature in the off-chain infrastructure, creating a single point of permission vulnerability. The stolen funds have been converted to ETH and mixed through Tornado Cash, and tracking efforts are still ongoing.

According to Jinshi reports, SpaceX has obtained a $1.6 billion contract from the U.S. Space Force to carry out 18 Falcon 9 launch missions for launching military-guided satellites.

According to Edaily, the Financial Services Commission (FSC) of South Korea plans to jointly draft a unified government bill for the "Basic Law on Digital Assets" with the ruling Democratic Party, covering the issuance and circulation of stablecoins, business rules for digital assets, exchange admission requirements, information disclosure, internal control, and system resilience standards. Currently, there are 10 related bills pending review in the National Assembly, but there has not yet been consensus on core disputes such as whether the issuers of won-pegged stablecoins must be bank holding companies and whether to impose shareholding restrictions on major exchanges. The FSC has not yet determined the submission date for the bill.Meanwhile, the opposition party's People Power Party lawmaker Song Yeon-sik submitted a proposal to abolish the cryptocurrency income tax amendment to the National Assembly's Finance and Economy Planning Committee for review on Wednesday. Additionally, a tax abolition petition supported by over 50,000 people is also expected to be submitted to the petition subcommittee. According to the current plan, starting from January 1, 2027, cryptocurrency transfers or lending income exceeding 2.5 million won per year will face a 20% income tax plus a 2% local tax. The government and the ruling party support the timely implementation, while the opposition party believes it is unfair to tax cryptocurrencies when most ordinary stock investors remain tax-exempt.

According to INBi, consultant François Garcin, who assisted in building MARA's business in France, filed a lawsuit against MARA Holdings in the U.S. District Court for the Southern District of New York on July 22, seeking over 11 million euros in compensation.Garcin claims that after MARA terminated the contract on March 6, 2026, it failed to pay 2.4 million euros in consulting fees and approximately 5.92 million euros in success commissions (based on 4% of the 148 million euro investment in Exaion). Exaion is a subsidiary of EDF, and this investment accounts for 64% of the capital for the relevant project.Garcin's previous tasks included recruiting former Engie CEO Gérard Mestrallet, obtaining an invitation to the Choose France summit, and arranging a meeting with former President François Hollande, among others.

Fang Xinghai, former member of the Party Committee and Vice Chairman of the China Securities Regulatory Commission, is suspected of serious violations of discipline and law, and is currently undergoing disciplinary review and supervisory investigation by the Central Commission for Discipline Inspection and the National Supervisory Commission.

According to FinanceFeeds, the Indian Parliament's Standing Committee on Finance has recommended that the government establish a temporary regulatory mechanism led by recognized Self-Regulatory Organizations (SROs) to oversee the domestic cryptocurrency and virtual digital asset market. The committee warned that the lack of a clear legal framework exposes millions of retail investors to operational, custodial, and fraud risks.The SRO will implement standardized codes of conduct under the direct supervision of the Reserve Bank of India or the Securities and Exchange Board of India, covering consumer protection, platform transparency, and token disclosure standards, and will be responsible for auditing exchange reserves, mandating the segregation of customer funds from corporate funds, and establishing user complaint handling channels. The committee emphasized that the temporary SRO must operate under strict oversight from the central bank or the securities regulator to address macroeconomic risks such as cross-border capital flows, dollarization of stablecoins, tax evasion, and violations of foreign exchange management laws.

According to the Hong Kong Securities and Futures Commission, Victory Securities Limited has been reprimanded and fined HKD 1.7 million for violating regulatory requirements, and its responsible personnel's licenses have been temporarily revoked.Previously, Hong Kong Victory Securities announced in February this year that it would close all virtual currency trading functions for users with mainland Chinese identities, retaining only withdrawal permissions and no longer supporting deposits and new transactions. The platform's gradual tightening of services for mainland users includes previous measures such as prohibiting purchases and suspending new address verification, aimed at complying with the regulatory requirements of the Hong Kong Securities and Futures Commission and relevant policies in the mainland.

According to official news, Uniswap has launched Permissioned Pools, a new hook standard in Uniswap v4 that supports permissioned asset trading through automated market makers (AMM), with compliance enforced directly on-chain. Permissioned asset pools are collaboratively built by on-chain asset management teams. The first batch of partners includes Superstate, Securitize, and Dowgo.

The South Korean Financial Services Commission stated that it will submit the government bill for the second phase of the "Basic Law on Digital Assets" as soon as possible, and will coordinate the release of guidelines for corporate cryptocurrency asset trading with the legislative process. At the same time, it plans to include digital asset custody under independent business regulation and holds a cautious attitude towards the mandatory separation of custody business from exchanges.In addition, South Korea will refer to the practices of the European Union to provide a more convenient access mechanism for traditional financial institutions applying for virtual asset service provider licenses. Regarding the market's concern about the separation of exchange custody business, the South Korean Financial Services Commission stated that there are currently few cases of mandatory separation overseas and prefers to prevent conflicts of interest through improved behavioral regulation rather than requiring exchanges to operate custody business independently.

According to the SEC official website, Commissioner Hester M. Peirce issued a statement highlighting the intersection of cryptocurrency vaults and on-chain lending strategies with federal securities laws. Peirce pointed out that migrating activities to the blockchain does not automatically exempt them from the regulatory scope of securities laws. Cryptocurrency vaults allocate user assets to yield activities such as staking and lending through smart contracts, and if the managers are involved in selecting yield strategies or reallocating assets, it may trigger compliance obligations under securities laws; some vault structures may be deemed joint enterprises or fall under the regulation of investment companies.Regarding on-chain lending strategies, management actions such as interest rate setting, asset admission, and liquidation thresholds may also involve securities laws, and related loans may be classified as securities under certain conditions. Peirce stated that the SEC welcomes proactive communication from market participants in the vault and on-chain lending space and seeks input from all parties to explore whether there is a need to revise rules to protect investors while allowing space for innovation.

According to Jinshi reports, the prediction market platform Kalshi has applied to the U.S. Commodity Futures Trading Commission (CFTC) to launch perpetual futures linked to gold.

According to the official website of the Brazilian Securities Commission (CVM), the CVM officially established the Security Tokenization Working Group (GTT) on July 17, 2026, aiming to conduct research, testing, and regulatory framework development around Distributed Ledger Technology (DLT), covering aspects such as the registration, custody, trading, and clearing of securities.The initial operating period of the working group is 120 days, which can be extended by 30 days, gathering representatives from 14 departments within the CVM, and will invite government agencies, self-regulatory organizations, and market experts to participate. The first task is to submit an experimental regulatory framework proposal for security tokenization to the CVM committee within 60 days of its establishment. CVM Chairman Otto Lobo stated that tokenization is one of the most important structural changes in the capital market and requires equally innovative regulatory responses.

According to The Block, Hyperliquid announced that it will introduce a permissionless deployment mechanism for the HIP-4 outcome markets in future upgrades. According to the disclosure plan, validators will vote on outcome templates to ensure market quality and clarity of expression.In addition, HIP-4 market deployers are required to stake 500,000 HYPE and can receive up to 50% of the fee share from the markets they create.

According to South Korean media KBS, the Financial Services Commission of South Korea has announced the results of virtual asset market regulation. Since the implementation of the "Virtual Asset User Protection Act" two years ago, approximately 40 investigations into unfair virtual asset trading have been completed, and more than 30 cases have been reported or notified to judicial authorities, focusing on cracking down on market disorder behaviors such as short-term manipulation and "pump and dump."In the future, the ability to monitor the market will be further strengthened, and an AI-based virtual asset regulatory system will be established, including real-time market monitoring, second-level price manipulation analysis, and automatic identification of suspicious accounts and trading intervals.

Founder of Strategy Michael Saylor published a post opposing the BIP 110 proposal that restricts the use of inscriptions and other data storage purposes. Bitcoin should adhere to neutrality, open markets, and permissionless innovation, and should not target specific uses through consensus rules.Saylor listed 110 reasons for opposition, emphasizing that Bitcoin should remain conservative at its core. Bitcoin does not need guardians of purity; it needs guardians of neutrality.

According to FinanceFeeds, security researchers have discovered an information-stealing malware targeting macOS devices that is attacking cryptocurrency users. This malware can hijack Telegram Desktop sessions, steal passwords and wallet databases, further controlling user accounts and stealing digital assets. Currently affected wallets and applications include software wallets like Exodus, Atomic, Electrum, Wasabi, and Monero.The malware is capable of extracting sensitive information from macOS Keychain, Safari Cookies, Apple Notes, Telegram Desktop, and multiple cryptocurrency wallet-related databases, including login credentials, authenticated session files, wallet data, and browser extension information. Security analysis points out that the danger of this attack chain lies in its reliance not on a single wallet vulnerability, but on collecting various types of data from the device, linking device intrusion, account takeover, wallet cracking, and mnemonic phrase theft together. Among these, Telegram Desktop sessions have become a key target.Attackers can copy authenticated Telegram local session data and restore the login on another Mac device without needing to enter a phone number, verification code, or Telegram two-factor authentication password. This means that Telegram 2FA cannot provide complete protection in this attack scenario, as the attacker is not performing a new login but is exploiting an already trusted local session. For cryptocurrency users, the risks are further amplified. Since Telegram is widely used for exchange customer service, project communities, OTC trading, and wallet communication, once attackers gain access to user session permissions, they could impersonate the victim, read private chats, locate asset information, and even spread malicious links to contacts.