ole

On-chain detective ZachXBT stated on X that unless the case involves recent events, each victim has lost more than $250,000, the jurisdiction is favorable, the relevant chain supports their work, and it does not involve meme coins or prediction markets, they will not review or respond to related case requests.

According to monitoring by Blockaid, Summer.fi is currently under attack and has had approximately 6 million dollars stolen.

According to monitoring by Catcher Predict, in the predicted market Polymarket for the event "Baltimore Orioles vs. Cincinnati Reds," the "Baltimore Orioles" option in the sub-market "Baltimore Orioles vs. Cincinnati Reds" has experienced a dramatic fluctuation in winning probability, soaring from 35.5% an hour ago to the current 93.5% (a fluctuation of 58%). Please note the impact of related breaking news.

According to CertiK monitoring, the decentralized privacy protocol Hinkal Protocol has experienced suspicious transactions. The address (0xbB3...fc20) executed multiple "Transact" transactions after initiating a "Proofless Deposit," withdrawing approximately 800,000 USDC from the Hinkal contract.

Blockchain intelligence company AMLBot's monitoring data shows that recently Polymarket users on the Polygon network had approximately $3.1 million PUSD stolen due to a front-end malicious script intrusion.The attackers implanted a malicious script that induced users to sign authorization transactions (involving EIP-7702 delegated execution), resulting in the users' wallets being emptied. The stolen funds were then converted to USDC.e through Relay, bridged to Ethereum, and ultimately exchanged for ETH, which was concentrated in a designated address. Currently, about 1891.9 ETH is distributed across three new wallets.AMLBot pointed out that this attack is similar to the incident involving the 2024 1inch web application, where a wallet theft script was implanted in the Lottie Player library, both cases involved third-party scripts being compromised, leading to front-end contamination.

According to on-chain detective ZachXBT's monitoring, it was found that signs of mixing appeared in the funds stolen from the Humanity Protocol and Kelp DAO vulnerability attacks one hour ago, indicating that there may be an overlap between the attackers of these two incidents.Based on this new evidence, it can be largely ruled out that the theft case of Humanity Protocol was committed by an insider.

According to The Block, since June 2026, the Google search volume related to "stablecoins" has dropped to 31, a significant decline from 98 in May and down over 69% from the historical peak of 100 in August 2025. Even if the current trend is annualized, the search volume in June is only about 45, with a month-on-month decline of approximately 54%.At the same time, the total supply of global stablecoins has fallen by about $5 billion after reaching a peak of around $300 billion in early June, with a cumulative growth of only 0.23% this year, far below the growth rates of 56% in 2024 and 46% in 2025.The report points out that the peak in search volume in August 2025 coincided closely with the advancement of the GENIUS Act and announcements from institutions like Stripe, Visa, and Mastercard regarding the issuance of stablecoins. The current decline in both search volume and supply indicates that 2025 may have been the stage for large-scale retail user adoption, and there is currently no new large-scale retail incremental capital flowing in at the same cost.

According to monitoring by PeckShield, the address marked as the KyberSwap attacker has transferred 2,000 ETH to Tornado Cash again. Over the past two years, this attacker has transferred and laundered a total of 16,100 ETH through Tornado Cash, equivalent to approximately $40 million at current prices, accounting for over 80% of the $48.8 million in losses from the KyberSwap attack in November 2023. There are still some stolen funds that have not yet been fully transferred.

CryptoQuant founder Ki Young Ju stated that the current Bitcoin purchasing behavior of Strategy resembles a "liquidity absorber" rather than an effective price catalyst.He pointed out that in the past two years, Bitcoin's market capitalization has increased by $467 billion, yet the price has actually dropped by 1%, indicating that the influx of large amounts of capital has merely resulted in a transfer of chips without driving up the price. In the current environment with obvious selling pressure, continuous buying by Strategy may only serve to maintain the range rather than truly drive an increase.Ki Young Ju suggested that Strategy pause Bitcoin purchases until cash reserves and dividend coverage capabilities are restored; establish a systematic, model-driven buying framework to avoid the market impression of "always buying at local highs"; and create a disciplined selling mechanism in the next bull market to reduce leverage and realize shareholder value by partially taking profits at highs, while accumulating reserves of "dry powder" for future lows.He believes that this cycle is different from previous ones, as Bitcoin has been in a sideways trend for nearly two years, neither forming a strong bull market nor experiencing sufficient panic selling and weak hands clearing out. The market may need a more thorough clearing to initiate a healthier rebound.

The National Association of Attorneys General, the National Association of Assistant U.S. Attorneys, the International Association of Chiefs of Police, and the National Sheriffs' Association jointly sent a letter to the Department of Justice and the White House on Tuesday, warning that Section 604 of the Digital Asset Market Structure Clarity Act contains serious enforcement loopholes that could make it difficult for law enforcement agencies to investigate and prosecute crypto-related criminal activities. The letter pointed out that Section 604 includes broad exemption clauses that may allow individuals or entities assisting in the circulation of crypto assets to evade regulatory accountability, disrupting the investigative and enforcement powers that have long been relied upon.The four organizations emphasized that their concerns are not aimed at developers who simply write or publish software code, but rather at the broad exemptions that may provide a shield for illegal activities. The core of the controversy lies in Section 604—the "Blockchain Regulatory Clarity Act" (BRCA) provision, which was originally a standalone bill but was later incorporated into the Clarity Act, aimed at providing a safe harbor for non-custodial developers, clarifying that they do not fall under money transmission entities. Law enforcement organizations believe this move will create obstacles for investigations into crypto crimes.Additionally, the letter pointed out that several other provisions of the bill would "reduce transparency, weaken accountability mechanisms, and create loopholes in the anti-money laundering framework." On the same day, nearly a hundred Catholic leaders representing parishes across the country also issued a warning, stating that the bill could weaken protections against human trafficking. In response, White House cryptocurrency advisor Patrick Harker insisted that the Clarity Act is a bill that "supports regulation and supports law enforcement," emphasizing that the U.S. must proactively set standards or risk passively accepting the rules of other countries.

Taiko officially stated on X: "We have identified the root cause of this attack and are currently developing a fix to restore the blockchain's online operation as soon as possible. At the same time, we are working closely with major exchanges and security partners to track and freeze the hacker's assets. The remaining funds in the cross-chain bridge are currently safe, and we will announce the next steps in our upcoming updates. To focus on fixing the vulnerabilities and protecting user assets, we will pause updates for a few hours."Previously, it was reported that the Taiko cross-chain bridge was attacked, with losses potentially reaching up to $1.7 million.

The well-known MEV Bot address ae13 issued a white hat bounty notice on-chain to hackers, stating, "If 2,150 Ethereum is returned to this address within 48 hours, we are willing to pay 50% of the white hat bounty; otherwise, we will take all feasible legal and enforcement actions to hold accountable."According to previous reports, the well-known MEV robot Jaredfromsubway.eth (ae13), which has been active on the Ethereum network for a long time, was attacked by hackers exploiting vulnerabilities in the automated execution system, resulting in losses exceeding $75 million.

According to monitoring by PeckShield, the OLPC/LABUBU liquidity pool on PancakeSwap on the BNB Chain was attacked, with the attacker stealing assets worth approximately $1.1 million. After the incident, the attacker transferred the stolen funds across chains to Ethereum and subsequently deposited 633.4 ETH into the mixing protocol Tornado Cash. In addition, the attacker sent 0.0221 BNB and 0.0411 ETH to an abandoned address, and the details of the attack and the flow of funds are still being tracked.

According to monitoring by Lookonchain, the Humanity Protocol attacker has exchanged part of the stolen funds for USDC and deposited them into KuCoin.

Axelar Network stated on platform X that an event affecting assets bridged from the Axelar chain to the Secret Network via IBC has been discovered, with approximately $4.67 million worth of tokens stolen.According to the information currently available, the issue is limited to the ICS-20 smart contract on the Secret side, which is part of the Cosmos IBC connection between Secret and Axelar, used to bridge assets from Axelar to Secret. The Axelar Emergency Committee immediately disabled the Secret and Secret-SNIP connections upon discovering the incident. The team is contacting relevant exchanges and law enforcement agencies. The incident is limited to assets bridged from Axelar to Secret via IBC. Other IBC connections or Secret tokens do not appear to be affected. Other Axelar integrations are unaffected. The core protocol of Axelar is not impacted.Additionally, according to Common Prefix's analysis of the Secret Network incident, an attacker exploited an infinite minting vulnerability in a modified CW20-ICS20 token contract on Secret, stealing approximately $4.67 million. The attacker minted arbitrary Secret-wrapped Axelar assets on Secret by launching a new Cosmos chain (with only one validator) and self-relaying IBC packets to it. The contract did not verify which IBC channel the inbound tokens came from. The attacker exited through the Axelar bridge. The Axelar protocol was not compromised and prevented the spread of contagion to other chains.

According to SlowMist's YuXian monitoring, Aztec is suspected to have been hacked again, with its Private Rollup Bridge 0x737...A2ba showing three suspicious transactions, totaling approximately $2.15 million, involving 1,158 ETH, 150,000 DAI, and 0.46963295 renBTC.

Bitget, in collaboration with Block Scholes, released the RWA perpetual contract liquidity report. The data shows that since 2026, the tokenized stock and commodity markets on Bitget have continued to mature. Taking Nvidia NVDA-USDT as an example, as of mid-May, the order book liquidity within its ±2% price range is approximately $4.1 million, reaching about 75% of the depth of the Bitget Bitcoin spot market.During the high volatility period triggered by geopolitical conflicts in February 2026, although the price spread briefly widened, the liquidity in the related markets quickly returned to normal levels within a few days, demonstrating strong resilience. Bitget CEO Gracy Chen stated that the core competitive point of the current tokenized market has shifted from "access" to "efficiency," and liquidity is becoming one of the important indicators for measuring the tokenized market.

Raydium core contributor InfraRAY posted on platform X, stating that the team has confirmed that the old version of the AMM V3 program, which was previously discontinued in 2021, has been attacked. The attacker unauthorizedly removed part of the liquidity, but this incident does not affect current Raydium users, and the related liquidity pools have been unable to interact through the official Raydium UI since being disabled. The Raydium SDK and DApp also do not support operations on the mainnet old version AMM V3 liquidity pools.The five affected liquidity pools include: Sollet USDT-RAY, Sollet ETH-RAY, SRM-RAY, USDC-RAY, and RAY-SOL. Preliminary statistics show that the stolen assets include approximately 150,177 RAY, 5,603 SOL, and 893,700 USDC, with a total value of about $1.34 million. The related losses will be fully compensated by the treasury.Investigations reveal that the vulnerability originated from insufficient verification of the LP token minting address. The attacker created new LP tokens and impersonated legitimate LP tokens, bypassing the protocol's ratio verification mechanism to extract funds. However, this incident is classified as an independent logical vulnerability and is not due to private key leakage or permission intrusion, and there is no risk of spread. Currently, all existing Raydium mainnet programs have not been affected.