Scan to download
BTC $80,990.57 -0.26%
ETH $2,293.00 -0.85%
BNB $681.90 +2.84%
XRP $1.45 -0.93%
SOL $95.13 -1.18%
TRX $0.3489 -0.03%
DOGE $0.1113 +0.74%
ADA $0.2733 -1.71%
BCH $440.47 -1.13%
LINK $10.41 -0.86%
HYPE $40.45 -1.76%
AAVE $98.22 -1.84%
SUI $1.23 -4.99%
XLM $0.1637 -1.93%
ZEC $586.72 +5.73%
BTC $80,990.57 -0.26%
ETH $2,293.00 -0.85%
BNB $681.90 +2.84%
XRP $1.45 -0.93%
SOL $95.13 -1.18%
TRX $0.3489 -0.03%
DOGE $0.1113 +0.74%
ADA $0.2733 -1.71%
BCH $440.47 -1.13%
LINK $10.41 -0.86%
HYPE $40.45 -1.76%
AAVE $98.22 -1.84%
SUI $1.23 -4.99%
XLM $0.1637 -1.93%
ZEC $586.72 +5.73%

wallets

LayerZero has been reported to have used multi-signature wallets to trade Meme coins, and the default library contract upgrade mechanism poses risks

According to market news, LayerZero Labs co-founder and CEO Bryan Pellegrino had a heated debate with security researchers today in the ETHSecurity Community Telegram group. The core controversy includes: since LayerZero Labs can immediately upgrade a default library contract without a time limit to forge messages (similar to the case where rsETH was hacked), the LZ OFT, valued at over $3 billion, is recently at risk of being stolen; researcher Banteg pointed out that mainstream projects like Ethena and EtherFi were still using this default library contract weeks ago, and currently, there is still $178 million worth exposed to risk, with these funds coming from projects that are still using the default library.On-chain data shows that LayerZero Labs multi-signature signers participated in non-multi-signature activities such as meme coin trading, DEX exchanges, and cross-chain bridging, which means that the multi-signature keys in the formal environment were connected to websites, increasing phishing risks. Regarding the multi-signature signers of LayerZero using production environment keys for trading activities, Bryan confirmed that the related transactions were completed by members of the multi-signature team, but denied that it was "meme coin trading," explaining it as "testing PEPE on the LZ OFT token standard," and stated that the involved member has been removed. Bryan also suggested that project parties "directly fix configurations" instead of using default configurations to reduce risks. Banteg subsequently tagged a long list of LayerZero users still using the default library contract, pointing out that these projects should migrate to fixed configurations as soon as possible.

On-chain analysis questions the U.S. accusations of "Iranian cryptocurrency assets," with some seized wallets possibly related to actors from other countries

According to Cointelegraph, Nominis analysis indicates that some of the "Iran-related" crypto wallets recently seized and frozen by the U.S. OFAC may not exhibit on-chain behavior characteristics consistent with the past operational patterns of the Islamic Revolutionary Guard Corps (IRGC), suggesting the involvement of other state-level actors.Previously, the U.S. Treasury stated that over $340 million, totaling nearly $500 million in Iran-related crypto assets, had been frozen in the "Operation Economic Fury." Nominis CEO Snir Levi noted that historically, IRGC-related wallets typically spread funds across multiple addresses, maintain low balances in single wallets, avoid long-term holdings, and employ complex operations to reduce the risk of being frozen; however, the wallets that were seized this time show significant differences in their funding structure and behavior patterns.He believes this raises a critical question: how much of the frozen $340 million in assets is directly controlled by the IRGC, and how much involves broader infrastructures that may even overlap with financial networks of other countries.Levi also pointed out that organizations, including the IRGC and potential state-level actors from China, are continuously upgrading their use of blockchain infrastructure, and traditional static risk control labels are no longer sufficient; behavioral analysis and address clustering are becoming increasingly critical.

Report: Polymarket may have a broader insider trading issue, with a few wallets capturing most of the profits

The latest report from the non-profit research organization Anti-Corruption Data Collective (ACDC) indicates that the prediction market platform Polymarket may have broader insider trading issues than the previously reported "Green Beret Bet on the Venezuela Raid."The research analyzed 435,000 settled markets from January 2021 to mid-March 2026, with a total trading volume of $54.4 billion, and found that low-probability bets related to government decision-making in military and defense markets had abnormally high success rates. Data shows that the average success rate for such "long-shot bets" in political markets is about 14%, while in some cases of military-related contracts, the success rate exceeds 50%. The study suggests that these markets are difficult to predict based solely on public information and are more susceptible to information asymmetry, including insider trading or professional information advantages.The report also points out that Polymarket's profits are highly concentrated. Research from the London Business School and Yale University shows that about 3% of traders contribute to most of the platform's price discovery; blockchain analytics firm Solidus Labs found that less than 1% of wallets accounted for about half of the profits. For example, in the case of the U.S. airstrike on Iran in June 2025, just hours before the attack, 19 low-probability bets totaling $164,000 concentrated on buying the ultimately realized "YES" contract, with 8 wallets collectively profiting about $1.8 million, including one wallet that made nearly $500,000.Despite the Pentagon's efforts to conceal the operation through decoy bombers and stealth fighters, a few traders accurately predicted the outcome. ACDC recommends that Polymarket strengthen identity verification, set conditional payments for suspicious bets, limit markets where results are determined by a few individuals, and reduce overly detailed contract designs. The report further calls for a broader discussion on whether the public should be allowed to bet on such events.
app_icon
ChainCatcher Building the Web3 world with innovations.