omise

Mike Selig, Chairman of the U.S. Commodity Futures Trading Commission (CFTC), stated that one year after the "GENIUS Act" became law, the United States has become the "global cryptocurrency capital" and thanked U.S. President and Senator Bill Hagerty for their leadership in achieving this goal.

Injective's official account posted on the X platform, stating that recent media reports have covered news about "potential security risks involving the Injective npm package." This issue has been promptly identified and resolved. User funds have never been at risk and have not suffered any losses.The official statement indicated that its security monitoring system detected the issue immediately and quickly marked the affected package version as deprecated, while replacing it with a new version, thus blocking the risk before the malicious package could be downloaded.As a result, the download volume of the malicious package is zero, and it has not affected users; the security of user funds has also not been threatened. Injective's npm package is one of the most widely used SDKs in the cryptocurrency field, and the official team has now implemented optimization measures to ensure that such attack attempts cannot occur again.

According to Cointelegraph, French Interior Minister Laurent Nuñez confirmed that there were 77 crypto-related kidnapping extortion cases in France in the first half of 2026, a significant increase from 45 cases in all of 2025. France is one of the largest hotspots for "ransomware attacks" globally, with about 11% of the population holding crypto assets. Authorities have launched a rapid alert system, with 724 people registered, and emergency measures have led to the arrest of 200 individuals. Nuñez pledged to implement a three-part plan to enhance security measures in the crypto industry, including strengthening intelligence sharing, deepening cooperation with ADAN, and improving coordination among security departments. CertiK stated that France has become a center for attacks due to several leading crypto companies and their executives being based locally, the presence of a "show-off culture and voluntary identity disclosure culture" within the community, and multiple sensitive data leaks.

Taiko posted on platform X stating that all Proposers (nodes responsible for producing new blocks) have suspended block production. Taiko mentioned that the team is currently investigating the breach of the chain state validation mechanism and is continuously assessing the scope of the incident's impact and subsequent response measures. Previously, Taiko confirmed that its chain state validation mechanism had been compromised and advised users to immediately withdraw funds from cross-chain bridges deployed on Taiko.

Taiko posted on platform X that it has confirmed the chain state verification mechanism of Taiko has been compromised, and the security assumptions of all cross-chain bridges deployed on Taiko are no longer reliable.Taiko is coordinating with the security committee and ecosystem partners to control the situation, suspend affected systems, and take technical and legal action. Taiko strongly advises all users to immediately withdraw funds from all cross-chain bridges deployed on Taiko.Taiko urgently requests all centralized exchanges to suspend TAIKO token deposits until further notice. The attacker's address has been disclosed. Previously, it was reported that the Taiko ERC20 Vault was attacked, resulting in losses exceeding $1 million.

According to crypto journalist Eleanor Terrett, the final text of the compromise on Section 702 of the Foreign Intelligence Surveillance Act (FISA), proposed by Senate Intelligence Committee Chairman Tom Cotton, includes a Federal Reserve CBDC ban that was originally part of the housing bill. This text is expected to ultimately become law. Notably, the termination date of the ban has been moved up from December 31, 2030, to June 12, 2029.

According to The Block, Gnosis co-founder and CEO Martin Koppelmann confirmed that the Zodiac delay module related to Gnosis Pay is currently under exploitation. Attackers can initiate transactions from Safe wallets that integrate this module, and Gnosis has requested cross-chain bridge validators to pause to control the risk.Koppelmann stated that Gnosis will cover all user losses and will remove the previous announcement urging users to urgently withdraw EURe and GNO, noting that most users are unable to withdraw their tokens independently. The team is working to control most of the losses and ensure that all users receive full compensation. Gnosis emphasized that the vulnerability is within the Gnosis Pay system, and the core contracts of Safe are unaffected.

GitHub has updated the details of the investigation into the unauthorized access incident of its internal repositories: GitHub detected and contained an incident yesterday involving an employee's device being compromised, which involved a maliciously implanted VS Code extension. GitHub removed the malicious extension, isolated the affected terminals, and immediately initiated an incident response. Current assessments show that only GitHub's internal repositories experienced data exfiltration, and the approximately 3,800 repositories claimed by the attackers are roughly consistent with the investigation results. GitHub has prioritized rotating critical credentials, is analyzing logs, verifying credential rotations, and monitoring subsequent activities, with a complete report to be released after the investigation is concluded.Additionally, Slow Mist's Chief Information Security Officer 23pds commented on this incident, stating: "By analyzing leaks from cybercrime forums, hackers may have used Anthropic's Mythos security AI to precisely breach GitHub's defenses and steal information from about 4,000 core internal repositories: including the source code for Copilot, the algorithms for CodeQL, the Actions runtime, and the entire billing system. Further analysis of this code could lead to subsequent attacks, having a profound security impact on the integration of the open-source community."

Echo Protocol announced that its eBTC deployment on Monad experienced unauthorized activity, resulting in abnormal minting and financial losses. Preliminary investigations indicate that the issue stemmed from the compromise of the administrator keys related to the Monad deployment, with approximately $816,000 in assets currently confirmed to be affected.Echo stated that the Monad network itself was not affected and continues to operate normally. The team has regained control of the administrator keys and has destroyed the remaining 955 eBTC held by the attacker. The project further clarified: the current incident appears to be limited to the Monad deployment; there is no evidence to suggest that the Aptos side has been affected; aBTC on Aptos and eBTC on Monad are independent, non-bridgeable assets; the current related risk exposure on Aptos is approximately $71,000.As an additional precaution, Echo has suspended the cross-chain functionality of the Monad deployment and has begun upgrading the related EVM bridging contracts and permission control mechanisms, while reminding users not to interact with any unofficial claims, refund, or recovery pages.

The Chief Information Security Officer of Slow Fog, 23pds, disclosed on platform X that node-ipc has been compromised again. The released three malicious versions of node-ipc (9.1.6, 9.2.3, 12.1) carry the same credential-stealing payload, with the package being downloaded over 10 million times per week.

Crypto journalist Eleanor Terrett disclosed on the X platform that since last Friday, members of the American Bankers Association have sent over 8,000 letters to Senate offices urging lawmakers to amend the stablecoin revenue compromise proposal. Sources say this does not include additional phone lobbying activities.

According to Bloomberg, on the eve of the Senate Banking Committee's upcoming review of the digital asset bill, banking groups are proposing last-minute modifications to the compromise on stablecoin yields, aiming to completely ban stablecoin issuers from offering any form of rewards, rather than the previously allowed model of "users receiving rewards when actively using stablecoins."Six banking lobbying groups, including the American Bankers Association, stated in a letter that the exception clause in the senators' compromise would "harm deposits." The crypto industry quickly countered, with Coinbase Chief Legal Officer Paul Grewal stating on the X platform that the banking industry's proposal is not a "narrow adjustment," but rather aims to "stifle competition." Senators Angela Alsobrooks and Thom Tillis, who previously facilitated the compromise, issued a joint statement disagreeing with the banking industry's position, emphasizing that the compromise also allows crypto companies to offer other forms of customer rewards, and most importantly, provides a bipartisan path for the passage of the CLARITY Act.

After the U.S. Senate reached a compromise on the issue of stablecoin yields, expectations for the advancement of the cryptocurrency market structure bill have significantly improved. Industry insiders say this progress has "significantly boosted market sentiment," and the Senate Banking Committee may advance the review and vote next week.Previously, the probability of the bill passing was only about 20%–30%, but expectations have now risen to about 60%. However, ethical issues surrounding Donald Trump and his connections to cryptocurrency businesses are still seen as a key obstacle. The bill aims to establish a comprehensive regulatory framework at the federal level for the first time and delineate the regulatory authority between the SEC and CFTC.

According to The Block, Coinbase Chief Legal Officer Paul Grewal stated that he is "very confident" that the stablecoin legislation, the Clarity Act, will pass before this summer, and publicly supports the compromise version proposed by Senators Thom Tillis and Angela Alsobrooks.The proposal retains activity-based rewards linked to actual platform usage and limits balance-based idle yield, which banks view as a risk of deposit outflow.Grewal mentioned that banks failed to provide substantial evidence of deposit outflow risk during multiple meetings and warned that if the compromise is rejected, banks will face a more lenient framework under the GENIUS Act, which allows any non-issuer to offer any rewards. Grewal expects the Clarity Act to pass by this summer at the latest.

Fox Business reporter Eleanor Terrett posted on the X platform that U.S. Senators Thom Tillis and Angela Alsobrooks issued a joint statement regarding the compromise proposal on stablecoin earnings in Section 404 of the CLARITY Act. The statement may indicate that the relevant agreement is close to being finalized.The statement said that the two have discussed concerns from various stakeholders about the banking industry's worries regarding deposit outflows, and the related compromise proposal will prohibit stablecoin rewards similar to bank deposit interest while allowing crypto companies to offer other forms of customer rewards.

U.S. lawmakers have reached an agreement on the stablecoin yield provision, which had previously stalled the Clarity Act in the Senate for months.Senators Tom Tillis and Angela Alsobrooks have finalized the text of the relevant compromise, which stipulates in Section 404 that crypto companies may not offer interest or yields that are economically or functionally equivalent to bank deposits, but allows for activity incentives related to the use of real platforms. Coinbase CEO Brian Armstrong stated that the Senate Banking Committee should be urged to review the bill as soon as possible. This progress may provide the conditions needed to advance the previously stagnant review process.

Coinbase stated that a key disagreement regarding the yield terms for stablecoin holdings has been resolved with traditional banks, clearing the way for the U.S. Senate to advance the cryptocurrency market structure bill.Previously, banks had lobbied to restrict or prohibit exchanges from providing yields to stablecoin holders, mainly concerned about funds flowing out of the banking deposit system. Coinbase's Chief Policy Officer Faryar Shirzad indicated that the final plan, while adding some restrictions, still preserves the space for users to earn rewards through crypto platforms and networks based on actual use cases. This progress is expected to push the "Clarity Act" into the voting process in the Senate Banking Committee, further clarifying the division of responsibilities between the SEC and CFTC in the regulation of crypto assets.

Purrlend announced that it encountered a security incident during the deployment of HyperEVM and MegaETH, resulting in a loss of approximately $1.52 million.The attacker breached the team's 2/3 multi-signature wallet, granting permissions such as BRIDGE_ROLE to a malicious EOA, and minted unbacked pUSDm and pUSDC through mintUnbacked, using them as collateral to borrow assets from the pool. Purrlend stated that it has suspended the protocol, revoked related permissions, and is working with security teams, law enforcement, and cross-chain bridge partners to track and attempt to recover the funds.

According to official news, Syndicate Labs disclosed that its cross-chain bridge contract was maliciously upgraded on two chains due to a private key leak. The attacker transferred and sold approximately 18.5 million SYND (about $330,000) and around $50,000 worth of user tokens. The incident only affected specific chains, while others were not impacted.Syndicate Labs stated that this attack involved multi-stage reconnaissance, infrastructure mapping, and careful execution, demonstrating a high level of technical complexity, and ruled out the involvement of internal personnel. The root cause was that the private key was stored in a password management tool without an additional layer of encryption, and the upgrade process did not utilize multi-signature or hardware signature mechanisms, nor did it have early warning and circuit breaker measures for contract upgrades.Syndicate Labs announced that it will fully compensate all affected users, including returning 18.5 million SYND and providing additional compensation, while also fully compensating affected application chain clients. The company has initiated security upgrade measures, including strengthening private key encryption, tightening access permissions, and plans to introduce hardware or multi-signature mechanisms and upgrade path monitoring to prevent similar incidents from occurring again.