nera

According to monitoring by Catcher Predict, in the predicted market Polymarket for the event "Generali Open: Alexander Bublik vs. Quentin Halys," the option "Alexander Bublik" in the sub-market "Generali Open: Alexander Bublik vs. Quentin Halys" experienced a sharp fluctuation in winning probability, plummeting from 57.5% an hour ago to the current 38.5% (a fluctuation of 19%). Please note the impact of relevant breaking news.

According to Bitcoin News, the latest Senate draft of the CLARITY Act includes a provision that encourages ethical hackers, specifically "white hat" hackers, to responsibly disclose cybersecurity vulnerabilities. The proposal would authorize rewards for individuals who identify and report security flaws, aiming to enhance the protection of digital asset infrastructure before malicious actors exploit these vulnerabilities. This provision incorporates the views of former CFTC Chairman J. Christopher Giancarlo, who has long supported innovation in digital assets and market resilience.

U.S. Senator Cynthia Lummis released an updated draft of the CLARITY Act, which aims to require digital commodity exchanges, brokers, and dealers to segregate customer assets and prohibit the use of customer funds and assets as the platform's own property.The draft also aims to classify digital commodities held by the platform on behalf of customers as "customer property" in bankruptcy liquidation proceedings, reducing the risk of users being classified as general unsecured creditors.

According to Slow Fog monitoring, the decentralized finance protocol Lien Finance was attacked. The attacker exploited a smart contract vulnerability to mint uncollateralized bond tokens and stole approximately $542,000 USDC.Using this vulnerability, the attacker successfully minted new non-anomalous BondTokens without destroying the corresponding input bonds and exchanged USDC through a pre-authorized address, ultimately transferring about 542,144.63 USDC from the victim's address. Analysis indicates that this incident was essentially due to a validation flaw in the bond token exchange logic, allowing the attacker to bypass asset collateral constraints and mint unsupported assets.

According to the Bitwise "Q3 2026 Staking Report," Q2 2026 presents a divergent pattern of "increased on-chain activity and decreased fee revenue," with the core driving factor being various protocols actively reducing block space costs.In terms of core data across chains, Ethereum's active staking volume reached a historic high of 40.2 million ETH (accounting for 33% of the total supply), while network revenue decreased by 51% year-on-year to $64 million, although it rebounded in ETH terms quarter-on-quarter; Solana's Q2 Real Economic Value (REV) dropped to $51 million, significantly down from the peak of $812 million in Q1 2025, but non-voting transaction volume reached 9.8 billion, maintaining resilience in on-chain activity; Hyperliquid's Q2 total protocol revenue was $174.8 million, with perpetual contract trading volume reaching $65.2 billion, and the proportion of non-crypto assets (commodities, stock indices, etc.) rose to 32%; Avalanche C chain's transaction volume grew approximately fourfold year-on-year to 236 million transactions, but network revenue plummeted due to a significant drop in fees, leaving only $330,000; NEAR saw a dramatic 75% drop in on-chain transaction volume to 77.7 million transactions due to the collapse of Kai-Ching application activity, but the Intents execution layer generated fees approximately 68 times that of the base chain.In terms of institutional adoption, BlackRock launched an Ethereum staking ETF (ETHB), Coinbase and Circle each staked 500,000 HYPE, and Bitwise, 21Shares, and Grayscale successively launched HYPE spot ETFs. Additionally, the stablecoin payment chain Tempo, incubated by Stripe and Paradigm, processed $386 million in transfers in its first quarter, while the global payroll platform Deel distributed approximately $30 million to 7,200 contractors through this chain.

Zilliqa stated that there is a serious random number generation vulnerability in the Zilliqa Ledger application, affecting the Schnorr signatures of native non-EVM Zilliqa transactions. Attackers can recover the signer's private key from the biased temporary random numbers using only publicly available on-chain data.Any account that has signed and broadcasted about 5 or more native transactions through the Zilliqa Ledger application should be considered compromised. Since the related signatures are permanently recorded on the chain, subsequent updates to the application cannot eliminate the risk, and the affected private keys must be deactivated. EVM transactions and development tools such as zilliqa-js, gozilliqa-sdk, and pyzil are not affected.The vulnerability arises from the application selecting the wrong 32 bytes when copying the random number, retaining 8 bytes of zero padding and losing 8 bytes of entropy, resulting in each random number having a maximum of 64 bits fixed to zero. Attackers can use 5 or more affected signatures to recover the private key within seconds using ordinary hardware. Zilliqa observed suspected active exploitation on July 19 and confirmed the root cause on July 21.Zilliqa has suspended native transactions to prevent further loss of funds and is preparing a revised application with Ledger. However, the revised version cannot protect the exposed keys, and affected users should not transfer assets on their own but wait for the official announcement of a coordinated disposal plan.

According to on-chain analyst Onchain Lens (@OnchainLens), the Summer Fi vulnerability attacker has transferred most of the stolen funds. The attacker obtained 6.017 million DAI from the vulnerability on July 6 and has since continued to mix and transfer funds through Tornado Cash.Currently, two related addresses still have a small amount of funds remaining: the original wallet (0x7bf7...bdca) has 11.3 ETH (approximately $21,600) left, and the second wallet (0x46e0...eba7) has 282.9 ETH (approximately $543,500) left.

According to SoSoValue data, the cryptocurrency market sector has generally rebounded, with the DeFi sector performing outstandingly, rising 2.28% in 24 hours. Among them, Hyperliquid (HYPE) increased by 3.55%, DeXe (DEXE), Uniswap (UNI), and Lido DAO (LDO) rose by 4.96%, 5.32%, and 11.80% respectively. At the same time, Bitcoin (BTC) rose by 0.80%, breaking through $65,000; Ethereum (ETH) increased by 1.88%, surpassing $1,900.In other sectors, the RWA sector rose by 2.02% in 24 hours, with Maple Finance (SYRUP) increasing by 6.13%; the PayFi sector rose by 1.00%, with Telcoin (TEL) increasing by 2.62%; the Layer1 sector rose by 0.62%, with NEAR Protocol (NEAR) increasing by 4.40%; the CeFi sector rose by 0.22%, with NEXO (NEXO) increasing by 1.85%; the Meme sector rose by 0.17%, with Bonk (BONK) increasing by 15.22%; the Layer2 sector rose by 0.04%, with Arbitrum (ARB) increasing by 2.14%.Only the SocialFi sector slightly declined by 0.96%, with Gram (GRAM) decreasing by 0.76%, but Chiliz (CHZ) rose by 3.06%.The cryptocurrency sector indices reflecting historical market trends show that the ssiDeFi, ssiRWA, and ssiDePIN indices rose by 2.38%, 2.14%, and 1.59% respectively.

On-chain detective ZachXBT stated that the cross-chain protocol TeleSwap suffered a vulnerability attack of approximately $735,000 on July 15, and after the incident, its Bitcoin hot wallet immediately stopped processing transactions.As of now, five days have passed since the incident, and the project team has not made any public disclosures regarding this event. ZachXBT noted that about two hours ago, the attacker transferred the stolen funds to Tornado Cash.

According to TechRepublic, Elon Musk recently acquired the mobile power generation company APR Energy, with the deal valued at least around $1 billion. According to regulatory documents, Duos Technologies sold its 5% non-voting shares in New APR Energy, gaining a net profit of $50.4 million, which implies the company's overall valuation exceeds $1 billion.APR Energy is headquartered in Jacksonville, Florida, USA, and specializes in rapidly deployable gas and diesel generator sets, providing temporary or supplemental power for scenarios such as data centers. Its total power generation capacity exceeds 1 GW and can complete some project deployments within 15 to 30 days. Analysts suggest that this move may provide options for xAI to expand its computing power infrastructure and reduce reliance on local power grids, but it will also bring trade-offs in emissions, compliance, and costs.

Project Eleven has launched a new zero-knowledge proof system, providing a recovery method for the quantum-vulnerable Bitcoin proposed to be frozen under BIP-361, including the Bitcoin held by Satoshi Nakamoto.The solution leverages the property that quantum computers can break elliptic curve signatures but cannot break the one-way hash used in modern wallet key derivation, allowing the true owner holding the seed material to prove control. Benchmark tests show that the Project Eleven prototype is significantly faster than previous solutions, but the prototype has not yet been audited and is incomplete. It requires controversial modifications to blockchain rules before it can protect existing Bitcoin on the chain.

Bitcoin News posted on the X platform that Dathon Pwn claims to have discovered a BIP 110 late upgrade consensus vulnerability, which may allow nodes upgrading from old software to retain chain history, while newly deployed BIP 110 nodes would reject this history, potentially leading to a hidden chain split.

The founder of Slow Fog, Yu Xian, retweeted a tweet on the X platform regarding the potential poisoning attack risks of Claude Code and published an analysis of the poisoning attack details targeting Grok Build CLI and Claude Code CLI.It pointed out that the security mechanisms of Grok Build CLI are not unified, with different code paths having different trust assumptions, creating gaps that serve as channels for attackers. Attackers may execute arbitrary commands through malicious project configuration files without the user's knowledge, thereby stealing API keys, cloud credentials, or controlling local devices.Researchers constructed a testing environment and found that on Mac systems, if Claude Code is affected, executing specific test commands can trigger the local calculator to launch, proving the existence of potential command execution risks.If the attack is successful, attackers may further steal API keys from AI services like Claude and OpenAI, resulting in account cost losses, gain access to servers and data by obtaining cloud service credentials from AWS, Alibaba Cloud, Tencent Cloud, modify code repositories to implant backdoors, and use local devices as jump points to attack corporate internal networks. It is reported that the related vulnerabilities have existed for a year.

On-chain analyst Yu Jin posted on the X platform, stating that Pump.fun continued to cash out $6.15 million in fee income today, transferring 81,700 SOL to Kraken.From the beginning of 2024 to now, Pump.fun has likely accumulated a total of 4.812 million SOL in fee income, worth $812 million, with an average price of approximately $168.7.

According to Xinhua News Agency, as the 2026 World Artificial Intelligence Conference and the High-Level Meeting on Global Governance of Artificial Intelligence are about to be held, the new generation model Kimi K3 was released on the 16th, with a parameter scale of 28 trillion. This is currently the largest open-source model in the world by parameters, marking a new step in the development of artificial intelligence models in our country.Beijing Moon's Dark Side Technology Co., Ltd., which released the model, introduced that Kimi K3 natively supports visual understanding, has a context window of 1 million tokens, and is optimized for complex task scenarios such as software engineering, knowledge work, deep research, and multimodal understanding, further enhancing the processing capability of large models for complex tasks. It is understood that in evaluations, Kimi K3's comprehensive intelligence level is close to that of the world's leading closed-source models. A relevant person in charge of Moon's Dark Side stated that in the process of training the new generation foundational model Kimi K3, they used a self-developed underlying model architecture and accumulated a complete set of scientific model training methods.

Robinhood Chain's Pons launchpad officially responded to previous reports regarding a token authorization vulnerability in its frontend, stating that the Pons launchpad trading page does not have any Multicall3 functionality. The Multicall3 functionality mentioned in the tweet comes from the previous version of the Debank Chain cross-chain bridge, which was launched before the Pons launchpad and does not affect launchpad users.Currently, the only confirmed affected asset is 0.6 NOXA tokens, valued at approximately $0.66. As a security precaution, Pons recommends that users who have used the old cross-chain bridge revoke token authorization through revoke.cash. The team is currently working with auditing firms to investigate potential risks and stated that they will restore Pons frontend services once it is confirmed that there are no actual vulnerabilities.

Elon Musk stated that after completing the security vulnerability review, X will open source all code repositories without exception. In addition, X will invite third-party auditors to verify the actual operating system to confirm its consistency with the publicly available source code.

Global stablecoin payment infrastructure service provider WasabiCard today announced its participation as an official sponsor at WebX 2026, the top Web3 event in Asia, to be held on July 13-14 at the Prince Park Tower Hotel in Tokyo. As an industry flagship summit hosted by Japan's largest crypto media CoinPost, this year's WebX is expected to attract over 15,000 attendees to discuss the deep integration of Web3 and traditional finance.With the explosive growth of stablecoin applications in global commerce, WasabiCard is committed to connecting stablecoin liquidity with the traditional financial system, providing efficient and compliant cross-border payment channels for global enterprises. At booth S26, WasabiCard will focus on showcasing its core B2B solutions for enterprise-level scenarios, covering global corporate card issuance, real-time settlement of stablecoins and fiat currencies, as well as cross-border issuance capabilities that span over 200 countries and regions and support more than 30 fiat currencies.During the exhibition, WasabiCard's core executive team will be stationed at the booth to discuss customized white-label card issuance and global expansion plans with partners worldwide.

According to CoinDesk, the Ethereum Foundation recently disclosed that its security team used AI agents to test the software running on Ethereum validator nodes and successfully discovered a remotely triggerable vulnerability that could cause node crashes. However, researchers emphasized that human review remains a key step in distinguishing real vulnerabilities from false positives among the large number of security reports generated by AI.It is reported that the discovered vulnerability exists in the Ethereum network message propagation protocol gossipsub, where an attacker can remotely trigger the node software to enter an abnormal computation state, causing the program to crash and shut down, making the validator node go offline until the operator manually restarts it. This vulnerability has been fixed and registered under the identifier "CVE-2026-34219."Nikos Baxevanis, a member of the Ethereum Foundation's protocol security team, stated that what was truly surprising about this incident was not the AI's ability to discover vulnerabilities, but rather the amount of time the team spent discerning which vulnerabilities were real and which were merely seemingly credible "illusions."