cati

Zilliqa stated that there is a serious random number generation vulnerability in the Zilliqa Ledger application, affecting the Schnorr signatures of native non-EVM Zilliqa transactions. Attackers can recover the signer's private key from the biased temporary random numbers using only publicly available on-chain data.Any account that has signed and broadcasted about 5 or more native transactions through the Zilliqa Ledger application should be considered compromised. Since the related signatures are permanently recorded on the chain, subsequent updates to the application cannot eliminate the risk, and the affected private keys must be deactivated. EVM transactions and development tools such as zilliqa-js, gozilliqa-sdk, and pyzil are not affected.The vulnerability arises from the application selecting the wrong 32 bytes when copying the random number, retaining 8 bytes of zero padding and losing 8 bytes of entropy, resulting in each random number having a maximum of 64 bits fixed to zero. Attackers can use 5 or more affected signatures to recover the private key within seconds using ordinary hardware. Zilliqa observed suspected active exploitation on July 19 and confirmed the root cause on July 21.Zilliqa has suspended native transactions to prevent further loss of funds and is preparing a revised application with Ledger. However, the revised version cannot protect the exposed keys, and affected users should not transfer assets on their own but wait for the official announcement of a coordinated disposal plan.

Gate gStocks' tokenized securities service has undergone a comprehensive upgrade, officially launching five major financial functions: collateralized borrowing, idle asset management, unified accounts, leveraged trading, and stock dividends, further expanding the integrated application scenarios of stock assets from trading, yield management to liquidity management.Currently, gStocks supports over 58 global tokenized securities, covering various assets such as U.S. stocks, Korean stocks, unlisted equity, and ETFs, and employs a 1:1 native stock reserve mechanism to provide users with a transparent and trustworthy asset holding experience. At the same time, gStocks supports 24/7 trading with a minimum investment of 1 USDT, lowering the participation threshold. After this functional upgrade, users can release liquidity through collateralized borrowing without having to sell their held gStocks assets; idle stock assets can also participate in yield management through idle asset management. In addition, gStocks has deeply integrated into the Gate unified account system, supporting tokenized stock assets as trading collateral and providing features such as leveraged trading, long and short strategies, and stock dividends, further enhancing asset utilization efficiency.

According to Bitcoin Magazine, Jack Dorsey, the founder of Block (formerly Square), announced the launch of the open-source decentralized group chat application Buzz, aimed at challenging team collaboration platforms like Slack. Buzz is built on the decentralized social protocol Nostr and is designed for teams composed of humans and AI agents, supporting chat, project management, coding, and PR collaboration.Block stated that the application is decentralized and open-source, allowing users to have full control over their data, and teams can collaborate with members and dedicated agents in a shared space.

According to Coinglass data, the cryptocurrency Fear and Greed Index is currently at 26, down 4 points from yesterday. The average over the past 7 days is 27, and the average over the past 30 days is 21.

According to South Korean media Maeil Business, data from the Financial Supervisory Service of Korea shows that during the first phase of the CBDC pilot project led by the Bank of Korea, financial authorities did not conduct any independent security verification, and only the participating banks conducted their own pre-security reviews.Before the project launched, only an IT vulnerability self-assessment was conducted for the participating banks, executed by the Financial Security Institute, SK Shields, and self-inspection teams from Woori Bank and NongHyup Bank, forming an evaluation model of "self-check by the regulated entities." The central bank acknowledged external doubts about the security of the deposit tokens in the pilot result report and responded that the pre-review was sufficient, but critics pointed out that this explanation was a self-assessment and not an independent third-party verification.

According to Coinglass data, the cryptocurrency Fear and Greed Index is currently at 30, up 1 point from yesterday. The average over the past 7 days is 26, and the average over the past 30 days is 21.

According to Cointelegraph, Japanese logistics company AZ-COM Maruwa Holdings plans to use the JPYC stablecoin to make payments to approximately 2,300 business partners, potentially becoming the first large-scale enterprise in Japan to use the yen stablecoin JPYC. This stablecoin will be used to pay transportation contractors (including truck drivers) fees and compensation.Since JPYC does not charge transfer fees, using the stablecoin allows for faster and more frequent payments. AZ-COM Maruwa is also considering establishing a partnership with JPYC and plans to invest over 1 billion yen (approximately 6.2 million USD). AZ-COM Maruwa is a medium-sized Japanese logistics company, with major clients including Amazon Japan.

According to Coinglass data, the cryptocurrency Fear and Greed Index is currently at 29, up 5 points from yesterday. The average over the past 7 days is 25, and the average over the past 30 days is 20.

According to a report by CCTV Finance, Wei Liang, Vice President of the China Academy of Information and Communications Technology, stated that the daily Token call volume in our country has surged from about 100 billion at the beginning of 2024 to 140 trillion by the end of March 2026, an increase of over a thousand times.Intelligent agents are giving rise to a brand new economic form, known as the "Token economy." Token, in Chinese, is called 词元, and it is an important unit for large models to process information and measure model invocation costs. Its growth rate is the most intuitive barometer of industrial development.In the era of intelligent agents, a single user command may trigger multiple rounds of model calls and resource consumption, directly driving an explosion in demand for artificial intelligence computing power. With the large-scale application of intelligent agents, a series of new models surrounding Token measurement, scheduling, pricing, and trading are beginning to take shape.

According to Coinglass data, the cryptocurrency Fear and Greed Index is currently at 24, down 4 points from yesterday. The average over the past 7 days is 25, and the average over the past 30 days is 20.

According to FinanceFeeds, security researchers have discovered an information-stealing malware targeting macOS devices that is attacking cryptocurrency users. This malware can hijack Telegram Desktop sessions, steal passwords and wallet databases, further controlling user accounts and stealing digital assets. Currently affected wallets and applications include software wallets like Exodus, Atomic, Electrum, Wasabi, and Monero.The malware is capable of extracting sensitive information from macOS Keychain, Safari Cookies, Apple Notes, Telegram Desktop, and multiple cryptocurrency wallet-related databases, including login credentials, authenticated session files, wallet data, and browser extension information. Security analysis points out that the danger of this attack chain lies in its reliance not on a single wallet vulnerability, but on collecting various types of data from the device, linking device intrusion, account takeover, wallet cracking, and mnemonic phrase theft together. Among these, Telegram Desktop sessions have become a key target.Attackers can copy authenticated Telegram local session data and restore the login on another Mac device without needing to enter a phone number, verification code, or Telegram two-factor authentication password. This means that Telegram 2FA cannot provide complete protection in this attack scenario, as the attacker is not performing a new login but is exploiting an already trusted local session. For cryptocurrency users, the risks are further amplified. Since Telegram is widely used for exchange customer service, project communities, OTC trading, and wallet communication, once attackers gain access to user session permissions, they could impersonate the victim, read private chats, locate asset information, and even spread malicious links to contacts.

According to CoinPost, the Tokyo Stock Exchange-listed company Bitcoin Japan (Old Horita Maru Masashi: 8105) announced the issuance of unsecured convertible bonds with stock subscription rights and the second round of stock subscription rights through the Cayman Islands investment fund EVO FUND, with an estimated total amount of approximately 9.657 billion yen.This marks the first time the company has allocated funds to Bitcoin since its name change, with an amount of 662 million yen, accounting for about 7% of the total financing. The remaining funds are primarily used for undisclosed equity investments (3.756 billion yen), investments in South African rare earth mines (3.503 billion yen), and investments in RaaS business (1.446 billion yen).

Injective stated that it has submitted a transfer agent registration application to the U.S. Securities and Exchange Commission. The transfer agent is responsible for maintaining the official ownership records of securities and handling transfer changes, a function typically maintained by specialized institutions off-chain in traditional markets.This application aims to migrate this core market function on-chain, allowing the tokens themselves to serve as ownership records, thereby enabling the registration and transfer of tokenized securities to be completed in seconds and reducing intermediary verification steps.

According to Magzter, the Indian Enforcement Directorate conducted searches at 19 locations from July 10 to 11 in a money laundering investigation involving online investment fraud and "work from home" scams, including 16 locations in Tamil Nadu, 2 in Kerala, and 1 in Srinagar.During the operation, approximately 335 million rupees in cryptocurrency, 145,000 rupees in cash were seized, and over 400,000 rupees in bank accounts were frozen, while documents, electronic devices, and bank records were confiscated.

According to Coinglass data, the cryptocurrency Fear and Greed Index is currently at 26, an increase of 0 points from yesterday. The average over the past 7 days is 24, and the average over the past 30 days is 19.

According to Coinglass data, the cryptocurrency Fear and Greed Index is currently at 26, up 5 points from yesterday. The average over the past 7 days is 23, and the average over the past 30 days is 19.

TxFlow L1 announces the launch of its second Channel Probly, which is the first prediction market application developed based on the TxFlow Improvement Protocol 3 (TIP3). When Probly goes live, it will offer 172 real-time markets covering over 7,000 events, including continuous rolling markets with a minimum duration of 5 minutes, and supports full on-chain settlement and TxFlow L1 shared financial infrastructure.Probly covers 15 categories including politics, sports, crypto, finance, and geopolitics, and provides prediction markets related to BTC, ETH, SOL, and XRP price trends for 5 minutes, 15 minutes, 1 hour, and 4 hours. Users can access Probly through an email-based embedded wallet without managing mnemonic phrases, and can also connect compatible wallets such as MetaMask, Coinbase Wallet, Phantom, and Uniswap Wallet. Eligible settlement amounts will be automatically credited in USDC after the event resolution, without the need for separate claims.

According to Bloomberg, DeepSeek has begun preparations for its initial public offering (IPO), which may submit its listing application as early as this year.DeepSeek is working with accounting firms and expects to complete its financial reports by the end of December this year, which is a necessary preparation for submitting the IPO application. The company plans to officially submit its listing application by the end of this year or early 2027.