sati

According to CCTV News, the State Council Information Office held a series of themed press conferences on "Starting the 14th Five-Year Plan," introducing the situation regarding "Promoting Comprehensive Rule of Law." At the press conference, Liu Guixiang, a deputy-level full-time member of the Supreme People's Court Judicial Committee and a second-level chief judge, stated that in-depth research on new case adjudication rules for virtual currencies, cross-border finance, and other new types of cases should be conducted. Judicial interpretations regarding civil compensation related to insider trading and market manipulation should be formulated as soon as possible to ensure the stable operation of the capital market and effectively safeguard the legitimate rights and interests of small and medium-sized investors.In response to the new business formats of the digital economy, normative documents regarding judicial protection of artificial intelligence cases and data ownership should be researched and developed. The adjudication rules concerning data ownership, data transactions, AI generation, and other aspects should be improved to promote the deep integration of digital technology with the real economy, assist in perfecting the foundational institutional system for data elements, and promote the construction of an integrated data market that is open, shared, and secure.

According to Decrypt, the Digital Chamber has written to OCC Director Jonathan Gould, urging him to stick to the decision to grant national trust bank charters to crypto companies like Coinbase, Ripple, and Circle.Previously, Senator Elizabeth Warren accused the approval of these charters of violating the National Bank Act and posing a threat to the safety of the U.S. banking system. The Digital Chamber countered that Congress has effectively authorized the OCC to extend bank charters to stablecoin businesses through the GENIUS Act, and that the approved companies do not accept FDIC-insured deposits, thus not constituting traditional banking operations.

According to Decrypt, MoonPay has launched a dedicated app within the ChatGPT application, allowing users to purchase cryptocurrencies such as Bitcoin, XRP, Solana, and USDC directly within the OpenAI chatbot. Users can ask ChatGPT for cryptocurrency information and then request to purchase a specified amount, after which ChatGPT will generate a MoonPay checkout link. Users must complete the standard KYC process and connect their wallets.MoonPay's blockchain engineer stated that ChatGPT is becoming an entry point for financial research, and the cryptocurrency purchasing feature has been previously missing. This app is part of MoonPay's expansion into AI-driven cryptocurrency tools. Earlier this month, MoonPay also acquired the AI trading startup Dawn Labs and launched the trading assistant Dawn CLI. Arifin mentioned that chatbots like ChatGPT are becoming the new entry points to the internet.

The Hong Kong Securities and Futures Commission issued a notice reminding the public to remain highly vigilant against scams that impersonate the Investor Compensation Fund. These scams often cause victims to suffer secondary losses. Scammers contact individuals who have previously suffered investment losses and falsely claim that the victims are eligible to recover losses from the compensation fund, demanding that they only need to pay an additional "deposit" or "fee" to arrange for the compensation fund to provide "compensation," resulting in many victims being defrauded a second time.The Hong Kong Securities and Futures Commission reminds the public that the Commission will not contact investors through social media or instant messaging platforms to request payments related to compensation claims.

According to Bits.media, the U.S. Department of Justice has announced the initiation of a compensation program for victims of the cryptocurrency mining scam AirBit Club. Founded in 2015, AirBit Club operated a financial pyramid scheme under the guise of cryptocurrency mining and virtual currency trading platforms. U.S. authorities have seized over $400 million in assets for compensation. Victims who previously provided information to the FBI or prosecutors will be contacted by RCB Fund Services. Prosecutors stated that there are no fees for the compensation process.The founder of AirBit Club was charged with money laundering and fraud by the Southern District of New York in August 2020, and the trial concluded in September 2023, with the court ordering the forfeiture of all fraud proceeds, including over 16,000 bitcoins.

According to Axios, American Republicans are increasingly dissatisfied with the flow of political donations in the cryptocurrency industry, demanding that the pro-crypto super PAC Fairshake, which holds about $165 million in funds, clarify its stance and focus on supporting Republican candidates in the 2026 midterm elections.Republicans pointed out that, against the backdrop of significant progress in promoting pro-crypto legislation such as the CLARITY Act, Fairshake has yet to announce specific election investment plans, which is disappointing. The points of contention include:Ohio Democratic Senate candidate Sherrod Brown: Fairshake spent over $40 million in 2024 to defeat incumbent Senator Brown, but Brown's attitude towards the cryptocurrency industry has noticeably softened in recent years.New Hampshire Congressman Chris Pappas: His Stand With Crypto rating rose from "F" to "A" within 8 months, and Republicans initially expected Fairshake to focus on his campaign.In response, Fairshake supporters stated that it is still too early to speak out and emphasized that the PAC is bipartisan in nature, aiming to "reward supporters and punish critics," rather than unconditionally supporting a particular party. Some pro-crypto Republicans (such as the Winklevoss brothers) have established separate independent groups specifically to support Republican candidates.

THORChain officials stated that a large number of fake accounts and false information have appeared in the market, involving activities such as "refunds," "airdrops," and "compensations"; preliminary investigations show that user funds were not harmed in the previous security incidents, and no refund, airdrop, or compensation plans are currently underway. Any accounts claiming otherwise are impersonating or spreading false information. Progress on the investigation and more information will be announced later.

According to a notice from Transit Finance, a security incident recently occurred in the project due to historical vulnerabilities in an old version of the smart contract deployed on TRON, which was deprecated in 2022, affecting a small number of users after being exploited.The team stated that after discovering the issue, they urgently completed investigation, isolation, and repair, and on May 12, further auditing and rectification were carried out. The currently used contract version has not been affected, has been running safely for over four years, and continues to undergo security audits and monitoring.Transit stated that affected users will receive full compensation, and specific plans will be announced through official channels. They also reminded users to be wary of counterfeit official messages and not to disclose private keys or mnemonic phrases.

CoW DAO announced that its domain registrar was subjected to a social engineering attack on April 14, during which the attacker briefly controlled the official domain for about 4.5 hours and directed users to a phishing website, thereby inducing them to sign malicious transactions. The project team emphasized that the CoW Protocol itself was not compromised, but some user assets were affected during that time window.In response to this incident, the CoW DAO community governance proposal CIP-86 has been approved, establishing a discretionary compensation fund to reimburse affected users for their losses. The official reminder states that eligible users must submit their claims by May 14, including affected wallet addresses, asset information, transaction hashes, and names, and apply via email at help@cow.fi, with the email subject clearly stating "Discretionary Grant Claim for".

The AI infrastructure platform B.AI has released a history of Credits consumption record optimization and compensation explanation. With the continuous upgrade of the Credits billing system and display dimensions, the platform has recently conducted a comprehensive review of historical consumption records. During this process, it was found that for certain requests made between May 1, 2026, 00:00 and May 3, 2026, 03:00 (SGT), the consumption details displayed on the front end did not fully present all cost components. This was mainly due to the underlying cache-related fees not being displayed on the page, causing users to typically only see input/output token consumption, leading to a misunderstanding of the overall Credits consumption.To address the above issues, the platform has now completed data corrections and realigned with historical records. Additionally, based on more cautious and user-friendly rules, Credits compensation will be automatically issued to affected accounts (valid for 30 days from the date of receipt) without any action required from users. Please pay attention to account balance updates. In the future, B.AI will continue to upgrade the Credits display system to further enhance long-term transparency and user experience.

Syndicate stated on platform X that regarding the latest developments of the Syndicate bridge security incident, all affected SYND holders on the Commons Chain have received full compensation, along with an additional 15% of the total losses as compensation.The relevant amounts have been directly sent to the affected users' Base chain wallets, with the Gas fees covered by Syndicate Labs. The total compensation amounts to 12.901 million SYND, and no action is required through any claim page.

Wasabi Protocol released a security incident update, stating that attackers exploited a configuration vulnerability in the Spring Boot Actuator within its AWS infrastructure to steal the private keys controlling EVM smart contracts, resulting in the theft of approximately $4.8 million in user funds and $900,000 in protocol treasury funds, with total losses amounting to about $5.7 million.The attack chain began with a public server used for analysis, whose Actuator heap dump was not properly password protected, allowing attackers to obtain credentials for another server and ultimately gain control of the smart contract private keys. This incident only affected EVM deployments, including certain treasuries on Ethereum, Base, Blast, and Berachain, while Solana deployments and Prop AMM were not affected.There has not yet been a final update on the user compensation plan, but "ensuring all affected users are compensated" remains the team's top priority, and updates on the investigation progress will be released in the Discord community in the future.

Kelp DAO announced that it will migrate its re-staked token rsETH to Chainlink CCIP, stating that this move is to enhance security.Previously, the cross-chain bridge built by Kelp DAO based on LayerZero was attacked on April 18, resulting in hackers stealing approximately 116,500 rsETH, involving an amount of about $292 million, and using the related assets as collateral to borrow WETH on Aave v3. Regarding the cause of the vulnerability, LayerZero previously stated that the issue stemmed from Kelp DAO using a single DVN verification path configuration instead of multiple independent verifications. Kelp DAO responded that this configuration was the default setting and that LayerZero had confirmed its security without indicating any related risks. LayerZero CEO Bryan Pellegrino subsequently denied this claim, stating that Kelp DAO had actively modified the default multi-DVN configuration. Both parties are currently still in ongoing disputes over the attribution of responsibility.

According to Cointelegraph, the U.S. law firm Gerstein Harrow LLP has applied to the court for an injunction to prevent Arbitrum DAO from transferring frozen Ethereum assets related to the Kelp attack.The law firm claims that its clients have obtained default judgments in three cases against North Korea, totaling approximately $877 million (including punitive damages and interest), and assert a right to claim the related assets.Previously, Kelp DAO was attacked on April 18, resulting in losses of about $292 million, which is believed to be related to the North Korean hacker group Lazarus Group. Subsequently, the Arbitrum security committee urgently froze approximately 30,766 Ether (about $73 million).The incident has sparked controversy. Some community members believe that if the injunction takes effect, it will delay the return of funds to the victimized users and shift the North Korean-related debts onto secondary victims. Previously, Aave Labs had proposed to unfreeze the funds and inject them into a compensation fund to restore the damaged assets.It is worth noting that Gerstein Harrow has previously filed claims regarding assets stolen by North Korean-related hackers and frozen by cryptocurrency platforms, including the 2023 Heco Bridge incident. Industry analysts believe that this case may have a demonstrative impact on the disposal of DAO assets and the definition of cross-jurisdictional claims.

According to official news, a recent agreement was attacked due to a lack of verification mechanisms, resulting in approximately 11 BTC being stolen, mainly involving altcoin trading. The attackers exploited a negative miner fee vulnerability to transfer funds to their own accounts through multi-signature transactions.Currently, Bisq is discussing compensation plans, and victims can choose compensation in Bitcoin or BSQ tokens, but it must be implemented after a DAO vote, which is expected to be determined after the DAO cycle ends on May 25.Bisq stated that the vulnerability has been fixed and plans to release a patch update while strengthening the security review of the codebase, focusing on preventing vulnerabilities that may affect wallets. In addition, Bisq reminds users to temporarily reduce the amount of BTC stored in their wallets. The officials believe that although this incident is serious, it is controllable, and they hope to provide a security warning for other projects.

According to Cointelegraph, Nominis analysis indicates that some of the "Iran-related" crypto wallets recently seized and frozen by the U.S. OFAC may not exhibit on-chain behavior characteristics consistent with the past operational patterns of the Islamic Revolutionary Guard Corps (IRGC), suggesting the involvement of other state-level actors.Previously, the U.S. Treasury stated that over $340 million, totaling nearly $500 million in Iran-related crypto assets, had been frozen in the "Operation Economic Fury." Nominis CEO Snir Levi noted that historically, IRGC-related wallets typically spread funds across multiple addresses, maintain low balances in single wallets, avoid long-term holdings, and employ complex operations to reduce the risk of being frozen; however, the wallets that were seized this time show significant differences in their funding structure and behavior patterns.He believes this raises a critical question: how much of the frozen $340 million in assets is directly controlled by the IRGC, and how much involves broader infrastructures that may even overlap with financial networks of other countries.Levi also pointed out that organizations, including the IRGC and potential state-level actors from China, are continuously upgrading their use of blockchain infrastructure, and traditional static risk control labels are no longer sufficient; behavioral analysis and address clustering are becoming increasingly critical.

According to official news, Syndicate Labs disclosed that its cross-chain bridge contract was maliciously upgraded on two chains due to a private key leak. The attacker transferred and sold approximately 18.5 million SYND (about $330,000) and around $50,000 worth of user tokens. The incident only affected specific chains, while others were not impacted.Syndicate Labs stated that this attack involved multi-stage reconnaissance, infrastructure mapping, and careful execution, demonstrating a high level of technical complexity, and ruled out the involvement of internal personnel. The root cause was that the private key was stored in a password management tool without an additional layer of encryption, and the upgrade process did not utilize multi-signature or hardware signature mechanisms, nor did it have early warning and circuit breaker measures for contract upgrades.Syndicate Labs announced that it will fully compensate all affected users, including returning 18.5 million SYND and providing additional compensation, while also fully compensating affected application chain clients. The company has initiated security upgrade measures, including strengthening private key encryption, tightening access permissions, and plans to introduce hardware or multi-signature mechanisms and upgrade path monitoring to prevent similar incidents from occurring again.

The Sui liquid staking protocol Aftermath Finance's social media stated that it expects users to receive full compensation within the next 48 to 72 hours.Previously, it was reported that the Sui Foundation and Mysten Labs will ensure the Aftermath protocol continues to operate and recover user funds.