prevent

Web3 security company CertiK released the "2026 First Half Wrench Attack Report." The report shows that in the first half of 2026, a total of 52 publicly verified wrench attack incidents were recorded globally, an increase of 33.3% year-on-year; related losses amounted to approximately $124 million, an increase of about 11.8 times compared to the same period last year.The report points out that attackers are shifting from exploiting technical vulnerabilities to targeting asset holders and their real-world relationship networks, with home invasion incidents rising from 1 in the first half of 2025 to 20, accounting for 41% of the total incidents during the same period. Europe has become a high-frequency attack region, with 33 incidents occurring in France, accounting for 63.5% of global cases.CertiK states that as real-world risks become a significant challenge for digital asset security, businesses and high-value individuals need to establish a more comprehensive protection system. CertiK has launched operational security services to help identify risks related to the exposure of information such as identity, home, residence, and travel trajectory; at the same time, through CertiK Security Workspace, it correlates off-chain intelligence, on-chain transactions, and AML risk signals to support institutions in tracking and analyzing cybercrime activities.In addition, CertiK is strengthening cooperation with international law enforcement agencies such as Interpol and Europol to provide technical support for cross-border attack investigations and security policy research.

The Financial Services Commission of South Korea responded positively to the recent controversies surrounding single-stock leveraged exchange-traded funds (ETFs) when it released supplementary regulatory measures. Byeon Je-ho, the Director of the Capital Markets Bureau of the Financial Services Commission, clearly stated that launching leveraged ETF products targeting single stocks such as Samsung Electronics and SK Hynix in the domestic market has indeed had a significant effect in locking in domestic investment demand and preventing capital outflow to overseas leveraged markets like Hong Kong or the United States.In response to external accusations that single-stock leveraged ETFs are the "main culprit" behind the recent increase in volatility in the South Korean stock market, the Financial Services Commission refuted this claim. Byeon Je-ho pointed out that the recent dramatic market fluctuations cannot be solely explained by leveraged ETFs, with the core reason being the alternating expectations of the global semiconductor industry cycle. Data shows that from May 26 to July 10, the annualized daily return volatility of U.S. SanDisk (131%), Micron (123%), and Japan's Kioxia (118%) was higher than that of South Korea's SK Hynix (113%) and Samsung Electronics (96%). Additionally, some investors' contrarian operations have played a role in stabilizing stock prices to some extent.Regarding the demands from some politicians and market participants to "forcefully delist single-stock leveraged ETFs," the Financial Services Commission clearly rejected this request. The official explanation stated that delisting must meet statutory termination criteria such as a sharp decline in market value or a lack of liquidity providers (LPs), and currently, the market is showing signs of heating up due to excessive demand, which does not meet the delisting conditions. The Financial Services Commission indicated that such calls should be understood as the market's urgent expectation for strengthened compliance and robust regulatory measures.

According to Jinshi reports, the White House stated that President Trump will not allow Iran to launch attacks in the Strait of Hormuz without facing consequences. The United States can strike Iran at any time and in any place.

According to Etoday, the Financial Services Commission of South Korea has announced a draft amendment to the "Special Law on Preventing Telecom Financial Fraud and Returning Victim Funds," planning to include funds from phone scams that are transferred to crypto assets within the scope of victim compensation, and to clarify the standards for the return and valuation of crypto assets. The relevant regulations are expected to officially take effect on October 1.According to the new regulations, if the frozen assets are cryptocurrencies, victims will generally be compensated based on the type and quantity of assets; if the defrauded assets differ in form from the frozen assets, compensation will be made in the form of assets that existed at the time the account was frozen. In cases where cash and crypto assets are mixed, the regulatory authorities will value the crypto assets based on the market price at the time of freezing to determine the final compensation amount.The Financial Services Commission of South Korea stated that clarifying the form of returned assets and the timing of valuation will help achieve faster and fairer compensation in complex cases involving mixed funds from multiple victims. It is reported that the public consultation for the draft amendment will continue until August 24.

According to Bitcoin.com, the Singapore Police Force's Anti-Fraud Centre and Cybercrime Investigation Department, in a six-week joint anti-fraud operation from April 16 to May 31, 2026, collaborated with Coinbase, Coinhako, Gemini, Independent Reserve, OKX, StraitsX, and Upbit to identify potential fraud victims using blockchain analysis tools from Chainalysis and TRM Labs. They conducted over 145 targeted interventions through phone calls and on-site visits, preventing potential losses exceeding $4.2 million.Coinbase Singapore posted on X on July 10, stating that it collaborated with the Singapore Police to prevent over 145 individuals from losing a total of more than $4.2 million due to fraud. The Singapore Police stated that they will continue to work with cryptocurrency exchanges and other private sectors to combat cybercrime.

According to the report from the Cybersecurity Threat and Vulnerability Information Sharing Platform (NVDB) of the Ministry of Industry and Information Technology on July 8, recent monitoring has found serious security backdoor risks in the AI programming tool Claude Code developed by the American company Anthropic.The report pointed out that the affected versions of Claude Code are from 2.1.91 to 2.1.196. This tool has a built-in monitoring mechanism that can, without user consent, secretly transmit sensitive data such as users' location and identity identifiers to remote servers. The official recommendation is for relevant units and users to immediately conduct a comprehensive inspection, uninstall the affected versions of the terminal, or upgrade to the latest secure version that has removed the related backdoor code; at the same time, they should strengthen the control of external access permissions and traffic monitoring for development tools within the core business network segment to prevent the illegal transmission of sensitive data.

The China Payment and Clearing Association has issued a warning to prevent cross-border gambling scams involving virtual currency, aimed at helping the general public enhance their awareness of fraud prevention and their ability to recognize scams.The China Payment and Clearing Association reminds that cross-border gambling results in "ten bets, ten losses." Participating in gambling through virtual currency is more concealed and risky. Engaging in gambling and providing funding for gambling activities is illegal and against regulations. Do not participate in virtual currency gambling transactions, and maintain the bottom line of financial security.

According to market news, European Central Bank President Lagarde directly prevented Binance from entering Europe to support the promotion of the digital euro.

According to informed sources, the CFTC is proposing a comprehensive set of new rules to regulate prediction markets. The parameters of these rules will continue to allow most sports-related betting while striving to avoid obvious manipulation.According to a draft of the proposed rules seen by The Wall Street Journal, the U.S. CFTC will introduce new regulations on Wednesday, seeking to prevent predictive bets that it believes are not in the public interest or are easily manipulable, such as in cases where one person may have an undue influence on the outcome.The agency's proposal does not directly prohibit trading any specific type of so-called event contracts but outlines the factors under which regulators will review certain types of contracts on a case-by-case basis.The U.S. CFTC has previously provided some preliminary guidance on which types of bets should be avoided, and Kalshi and other prediction platforms have taken action in advance.Additionally, informed sources revealed that the CFTC is considering other rules, including those aimed at protecting retail traders.

According to the Wall Street Journal, Kalshi plans to require some participants in the prediction market to disclose their employer identities. It is reported that users will need to submit an online form disclosing their workplace when placing bets in markets involving undisclosed significant information, and this change will be rolled out in the coming weeks. Sensitive betting markets involving company performance, national security, and other areas are expected to require the disclosure of employment information.The audit committee report reveals for the first time that Kalshi has submitted over 20 referral cases to the U.S. Commodity Futures Trading Commission and the Department of Justice in the first quarter of 2026. This year, individuals referred to federal authorities include former New York Congressman George Santos and accounts related to military spouses.

Aave has released the latest developments regarding the rsETH security incident on platform X, disclosing that operations related to rsETH reserves have been suspended on the Ethereum mainnet and networks such as Arbitrum, Base, Mantle, and Linea, in order to prevent excess aETH rsETH from being withdrawn, thereby pushing the position closer to the 95% liquidation threshold.This measure aims to preserve as much capital as possible during the asset recovery plan process and reduce systemic risk. Aave stated that further developments and disposal plans will continue to be disclosed to the community.

The privacy protocol Umbra has shut down its hosted frontend website to prevent attackers from using the protocol to transfer stolen funds from recent security incidents.Umbra stated that approximately $800,000 had been transferred through its protocol, but the protocol is only used to hide the identity of the recipient, and the related transactions can still be tracked on-chain. This measure comes after the Kelp protocol was attacked, resulting in losses exceeding $280 million. Umbra stated that it will restore frontend services once it is confirmed that asset recovery efforts are not affected, but it cannot prevent users from continuing to use the protocol through smart contracts or self-hosted frontends.

Pablo Hernandez de Cos, General Manager of the Bank for International Settlements (BIS), stated that global coordination on stablecoin regulation is crucial to prevent severe market fragmentation; otherwise, regulatory differences across jurisdictions could lead to regulatory arbitrage.He pointed out that stablecoins are typically pegged to the US dollar at a 1:1 ratio, which could undermine monetary and fiscal policy, trigger pressures in financial markets, and hinder efforts to combat illegal financing. Currently, the two major stablecoins issued by Tether and Circle account for about 85% of the global circulation of stablecoins, which is approximately $315 billion. He also mentioned that these two types of stablecoins are closer to securities rather than currencies in terms of redemption friction and operate more like ETFs.

Keone Hon from Monad Lianchuang stated: "I feel that the lending protocol for the liquidity pool should set rate limits on the supply of assets deposited as collateral. For example, if the current supply is 100 million and the supply cap is 300 million, then in the next 10 minutes, the maximum allowed increase should be to 110 million, rather than allowing a one-time deposit of the full 200 million. In reality, no one needs to complete such a large deposit all at once.This is important because when certain exotic assets are attacked, the impact depends on the scale of the exit channels for that asset. Especially in many cases where attacks belong to infinite issuance vulnerabilities, the scale of the exit that can be made essentially determines the upper limit of the attack losses. Lending protocols are often the largest exit channels. If a smart cap is introduced, where the initial cap is slightly above the current supply and is gradually adjusted to the real cap over several hours, it would have a huge effect. With such a mechanism, rsETH depositors could have avoided about 200 million dollars in losses.This also raises a point: the asset issuers themselves should support such mechanisms. If you are issuing redeemable tokens with redemption delays, you are not worried about hackers redeeming directly from you, but you need to compress the scale of external exit paths as much as possible without affecting normal users. Therefore, a high supply cap should be seen as a risk rather than a symbol of strength. For example, the Hyperbridge DOT attack did not result in a 100 million dollar loss because there were very few exit paths; the Resolv attack loss was 24 million dollars instead of 200 million dollars because the scale of the exit path limited the loss cap. This is an obvious principle, but there are still immediately actionable measures: audit the supply caps of all assets and lower the caps when unnecessary."

Anthropic has launched an authentication mechanism in some use cases of Claude to prevent abuse, enforce usage policies, and fulfill legal obligations. This process is supported by Persona, requiring users to submit a government-issued photo ID and possibly undergo real-time selfie verification.Anthropic states that the verification data is only used to confirm identity, not for model training, and will not be used for marketing or advertising. If verification fails, users can retry multiple times within the process or submit a form to request manual assistance. Accounts may be banned in cases of repeated violations of usage policies, terms of service, registration from unsupported regions, or use by individuals under 18 years of age.

The Cybersecurity Threat and Vulnerability Information Sharing Platform (NVDB) of the Ministry of Industry and Information Technology of China has monitored and found that attackers are using exploit tools targeting Apple Inc.'s terminal products to carry out cyber attack activities, which can lead to serious harms such as information theft and system control. The affected range includes Apple terminal products such as iPhone and iPad running iOS 13 to 17.2.1.Attackers induce users to use the Safari browser to visit web pages containing malicious code through methods such as SMS, email, or web poisoning, comprehensively utilizing security vulnerabilities present in the terminal devices to implant remote control Trojans into the victim's terminal products, stealing sensitive user information, gaining maximum privileges, and taking control.It is recommended that users of Apple terminal products conduct risk assessments, and promptly fix vulnerabilities through version upgrades and patch installations (refer to the Apple Security Updates). Pay attention to system update notifications and the latest security update announcements released by Apple, upgrade to the latest secure version in a timely manner, strengthen security awareness, avoid clicking on unknown links, and prevent the risk of cyber attacks.

Richard Tice, Vice Chairman of the Reform Movement (who is also the spokesperson for business, trade, energy, and housing for the Reform Party), stated in an interview with Bloomberg that new technologies such as stablecoins can help prevent financial fraud."Fraud always exists, but we need to make it more difficult for them to commit crimes—especially with the advancement of technologies like tech, blockchain, and tokenization, tracking the flow of funds should become easier," Tice said. "Can we somehow track, intercept, or settle these funds before they leave British sovereign territory? I don't know, but I think we must have the courage to consider all these possibilities."

According to market news, the Ukrainian government plans to regulate cryptocurrency donations in political funding to prevent Russian interference.The Ukrainian National Securities and Stock Market Commission outlined relevant mechanisms in the upcoming legal framework for the crypto economy during a public discussion with legal advisors, including the implementation of the "travel rule" to identify participants in cryptocurrency transactions and requiring service providers to report information directly to tax authorities. Ukraine will also restrict access to its crypto market for participants created by Russian capital or associated with Russia. The Ukrainian securities regulator stated that these measures aim to enhance transaction transparency and reduce the risk of opaque or foreign interference in the political process.

Members of the UK's Treasury Select Committee and the All-Party Parliamentary Group on Crypto and Digital Assets (APPG) are calling for an immediate ban on donations to political parties in the form of cryptocurrency.The proposal stems from recent controversies regarding "dark money" flowing into the political system, with lawmakers believing that the anonymity of crypto assets could be used to evade existing political funding transparency requirements. The report points out that blockchain addresses are difficult to trace back to actual beneficiaries or could be used to obscure the source of funds, posing risks of foreign interference and money laundering. Some investigations have also found that certain crypto donations in the winter of 2025 can be traced back to overseas IP addresses. According to the proposal, political parties must liquidate existing crypto assets and refuse future related donations to ensure political funding returns to the traditional financial system. In response, crypto industry organizations believe that a blanket ban may be an overreaction and suggest enhancing transparency through measures such as strengthening KYC.

Aave released a recap of the Swap event stating that a user exchanged approximately $50.43 million aEth USDT for about $36,000 aEth AAVE through the CoW Swap route on the Aave front end, with a price impact of about 99.9%.Aave indicated that the transaction occurred within a third-party Swap protocol, and the core lending protocol was unaffected. The cause of the event was the user executing a large order in a market with extremely low liquidity and confirming a high-risk quote. Aave stated that it will launch the Aave Shield feature, which will by default block Swaps with a price impact exceeding 25%.