cover

Bitcoin News posted on the X platform that after two weeks of using cutting-edge AI to scan almost the entire Bitcoin open-source ecosystem for vulnerabilities, Bitcoin Red Team member @callebtc stated, "The easily discoverable vulnerabilities have been addressed," and maintainers are verifying "a large number" of serious and high-risk vulnerabilities.@callebtc indicated that the main findings include: decades of accumulated open-source technical debt are being exposed alongside AI capabilities that can discover vulnerabilities at speeds and scales unattainable by human researchers; Lightning seems particularly vulnerable, with its complexity meaning its security status is "worse than average"; unmaintained Bitcoin projects should be considered vulnerable until their security is confirmed.Projects that began building AI security and auditing processes months ago are now in a completely different position compared to those that have been waiting until now. The Bitcoin Red Team has now completed a foundational scan of almost the entire Bitcoin open-source ecosystem. Easily discoverable vulnerabilities have mostly been addressed, but as AI capabilities improve, external red team testing may need to continue indefinitely. Despite discovering and reporting "a large number" of real serious and high-risk vulnerabilities, @callebtc believes this process will ultimately make Bitcoin stronger. The same AI security review will soon expand to areas far beyond Bitcoin.

Bitget's latest data shows that approximately one out of every three contract trades on the platform comes from stock perpetual contract trading. As of now, Bitget supports a total of 271 stock perpetual contracts.Previous data indicated that Bitget's monthly trading volume for stock perpetual contracts in July reached $85.445 billion, with a single-day peak trading volume of $6.674 billion; during the same period, the monthly trading volume increased by 30.6% month-on-month, the number of traders increased by 31.4% month-on-month, and the number of trades increased by 130% month-on-month. Multiple trading indicators have shown steady growth.

According to a report by Decrypt, Israeli cybersecurity company ASecurity released a report stating that a researcher used publicly available AI models to discover multiple vulnerabilities in the Zoom annotation tool in less than 24 hours with fewer than 20 prompts, and constructed an exploitable attack chain. The vulnerabilities are numbered CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415, allowing attackers to remotely execute code in meetings without any action from the victim, control their devices, steal data, and activate the microphone or camera.The attack was tested successfully on Windows, macOS, Linux, Android, and iOS versions of Zoom. ASecurity claimed it reached a "national-level" standard, whereas previously constructing such exploitation tools required months of work and a substantial budget from professional teams. ASecurity reported the first vulnerability to Zoom on June 10, and Zoom released fixes between June 22 and July 20, but the server-side protections in end-to-end encrypted meetings could not filter malicious messages, requiring users to update manually. A Zoom spokesperson confirmed that the issue has been resolved and advised users to keep their versions up to date.

According to informed sources, AI startup Discovery Loop, founded by former Google chief scientist Jeff Dean, is in talks to raise $1 billion, corresponding to a valuation of approximately $10 billion, with specific financing terms still subject to change.Discovery Loop aims to accelerate discoveries in the fields of science and engineering through automated machine learning, science and engineering, and the parallel execution of thousands of experiments. Its initial funding is led by Radical Ventures and Khosla Ventures, with participation from Lightspeed, Kleiner Perkins, and Doerr Capital, while Alphabet serves as the founding investor and cloud services partner. The founding team of Discovery Loop also includes former core researchers from Google such as Sanjay Ghemawat, Quoc Le, and Oriol Vinyals.

According to Fortune, Bank of America announced a $250 billion infrastructure investment plan on Wednesday, committing to invest in key infrastructure areas in the United States over the next year. The investment scope covers multiple fields including data centers and computing power, renewable energy generation, energy storage, natural gas, transmission networks, and critical minerals and mining, with the goal of supporting energy security, job growth, and economic competitiveness.

According to CoinDesk, the cross-border payment company MoneyGram announced the expansion of its cash and cryptocurrency exchange service MoneyGram Ramps to Solana, allowing wallets, exchanges, and developers within the Solana ecosystem to access its global cash network.The service supports two-way exchanges between cash and digital assets, with cash deposits covering over 25 countries and cash withdrawals covering over 170 countries and regions. MoneyGram had previously launched a cash deposit and withdrawal service based on USDC in partnership with Stellar and issued the dollar-backed stablecoin MGUSD, continuously expanding its stablecoin payment and remittance business.

The gold and silver markets remain high and volatile, with trading activity in the metals sector continuing to rise. According to market data from the Gate platform, gold (XAU) is currently priced at $4370.36, with a 24-hour increase of 0.26%; silver (XAG) is currently priced at $64.60, with a 24-hour increase of 0.56%. According to CoinGlass data, the open interest for Gate XAU (gold) contracts has reached $373 million, ranking second in CEX; the open interest for Gate XAG (silver) contracts has reached $80.61 million, ranking third in CEX.

According to Bitcoin.com, cybersecurity company Genians Security Center has released an analysis report stating that the North Korean Reconnaissance General Bureau's hacker organization Kimsuky is building and testing a set of AI-based cyber attack tools. Researchers found traces of the deployment of three local AI platforms: Ollama, GPT4All, and Msty, as well as components of AI development frameworks such as Microsoft Semantic Kernel and LLaMaSharp in their infrastructure, indicating that the organization is systematically developing dedicated AI attack tools rather than just making temporary attempts.Since early 2026, Kimsuky has been using high-quality documents generated by generative AI for spear-phishing attacks targeting virtual assets, financial investments, and game development. The AI-generated professional documents significantly reduce the effectiveness of traditional phishing email detection. The attack vector is a ZIP archive disguised as a legitimate document, containing a malicious LNK file that, when triggered, can silently execute PowerShell commands in the background.

According to The Block, supporters of the open-source Bitcoin payment processor BTCPay Server have pledged to establish a bounty for recovery: 10% of the recovered funds will be awarded, with a maximum of 3 BTC if the full amount is recovered.BTCPay disclosed last Friday that a serious vulnerability is being actively exploited and urged users to upgrade as soon as possible. This vulnerability allows attackers to obtain LND administrator credentials, thereby gaining full control over connected Lightning wallets. BTCPay stated that on-chain wallets (including hot wallets) are not affected and did not disclose the total amount of losses or the number of affected nodes.

OpenAI announced the expansion of its cybersecurity defense program Daybreak and launched the GPT-5.6-Cyber model specifically for the cybersecurity field, aimed at helping authorized security researchers and defense teams enhance their vulnerability discovery, threat analysis, and security testing capabilities. As attackers increasingly leverage AI to launch faster and larger-scale cyberattacks, defenders need to gain advanced AI capabilities in advance.This Daybreak offers two types of access: Daybreak Blue is aimed at most defense teams, providing general models such as GPT-5.6 Sol for vulnerability discovery, secure code review, malware analysis, incident response, and patch validation; Daybreak Red is aimed at advanced security research, providing GPT-5.6-Cyber for authorized vulnerability research, vulnerability validation, and security testing. GPT-5.6-Cyber is trained on GPT-5.6 Sol and optimized for cybersecurity tasks, including discovering zero-day vulnerabilities and analyzing exploit chains. It has been used in actual vulnerability research and has identified high-risk vulnerabilities in software, including the Chrome V8 JavaScript engine. Additionally, OpenAI stated that GPT-5.6-Cyber has also helped discover high-risk vulnerabilities in various domains, including privilege escalation vulnerabilities in mobile operating systems, remote code execution vulnerabilities in databases, and hundreds of privilege escalation vulnerabilities in operating system kernels.OpenAI also emphasized that Daybreak Red will only be accessible to approved individuals and organizations, controlling access through measures such as authentication, account security, monitoring, usage restrictions, and legal disclaimers. The company stated that it will continue to strengthen security monitoring, access management, and model security testing to reduce the risk of advanced cybersecurity models being abused.

According to The Information, Microsoft's self-developed artificial intelligence chip project has shown signs of recovery after experiencing a slow start.

Discovered Materials completed a $9 million seed round financing, with investors including Lightspeed India Partners, Peak XV Partners, and several angel investors.

According to CCTV News, recently, the National Computer Virus Emergency Response Center and the National Engineering Laboratory for Computer Virus Prevention and Control, relying on the National Computer Virus Collaborative Analysis Platform (https://virus.cverc.org.cn), discovered multiple incidents of users being attacked by the "Sorry" ransomware virus within our country. After the user's important files were encrypted, the file names were changed to the original file name + .sorry suffix string. The attackers also left a ransom note on the user's host, demanding that the user download an encrypted communication tool to contact them.

Standard Chartered Bank set a target price of $200 for the Chainlink token LINK by the end of 2030, indicating significant upside potential from the current level of around $8.The bank believes that the development of asset tokenization will continue to increase the demand for reliable on-chain data, and Chainlink is expected to play a key role in the infrastructure of traditional finance and decentralized finance.

According to Decrypt, a volunteer security team stated that it scanned 150 Bitcoin code repositories using cutting-edge artificial intelligence models and discovered a dozen vulnerabilities. The team has built multiple AI-based review systems, targeting wallets, cryptographic libraries, infrastructure, and other Bitcoin projects. Team members claim that, on average, each person can find about one serious vulnerability per hour, and in the past 12 hours, they have submitted security reports to multiple projects, but specific affected projects have not yet been made public.

The Bitcoin Red Team's volunteer security initiative has scanned approximately 150 Bitcoin code repositories and disclosed more than a dozen vulnerabilities. The team is developing an open-source AI platform for auditing Bitcoin software, covering wallets, cryptographic libraries, infrastructure, and other projects.AnchorWatch CEO Rob Hamilton stated that the team has currently spent about $20,000 on various AI services and is using Kimi K3, OpenAI's GPT Sol, Anthropic's Claude Fable and Opus, as well as Z.ai's GLM 5.2 to identify vulnerabilities and generate related documentation. A pseudonymous Bitcoin developer, Calle, mentioned that the team has reported critical vulnerabilities to multiple projects in the past 12 hours, averaging about one critical vulnerability discovered per person per hour, with daily expenditures of approximately $10,000. The team did not disclose the affected projects or details of the vulnerabilities.

"1011 Insider Whale" agent Garrett Jin released a weekly analysis stating that he previously suggested gradually positioning in storage chips and buying on dips, but the market did not experience the expected pullback. He has sold half of the previously rebounded positions during the surge, not because the investment logic has changed, but because he noticed the funding structure driving the rise, stating, "This is more like a short squeeze rather than a final confirmation of the market fundamentals." Rapid capital replenishment of short positions can create short-term increases in stocks like SK Hynix, but cannot solely support a sustained trend. The risks of Korean leveraged ETFs have not been fully released, but the decline in asset scale mainly comes from net value shrinkage rather than investor exit. Currently, the cumulative net subscription of related financial products remains at historical highs and has not turned negative.Garrett Jin emphasized that the decline in the scale of Korean leveraged ETFs does not indicate a bearish outlook on storage demand. SK Hynix's 2026 capacity is already sold out, and Micron's orders are covered until 2028, with strong demand expected to continue until the second half of 2027. However, the storage industry is essentially a cyclical industry, and stock prices have already risen by hundreds of percentage points in advance. Cyclical stocks are usually difficult to sustain long-term growth through valuation expansion. The current market is entering a new phase of the AI capital expenditure cycle, shifting from "rewarding investment" to "evaluating investment returns." Regarding Bitcoin, Garrett Jin stated that it continues to meet the bottoming conditions since the low in July and maintains the position view established around $60,000.

Brian Armstrong posted on the X platform that Coinbase Dev can now create multiple types of wallets through a single API call, including self-custody, developer custody, and user custody.This feature supports multiple blockchains and various types of assets, including stablecoins, crypto assets, and tokenized real-world assets.

The Bitcoin security organization Bitcoin Red Team, composed of 16 volunteers, stated that during a rapid AI-assisted review of Bitcoin ecosystem projects, nearly 5,000 potential issues were discovered. The members of the organization include AnchorWatch CEO Rob Hamilton and Bitcoin developer Calle, among others.Calle mentioned that the Bitcoin Red Team used AI tools alongside manual reviews to scan for vulnerabilities in open-source code repositories related to Bitcoin, averaging about one critical vulnerability discovered per person per hour. Calle revealed that within 29.8 hours of launching, the team had identified 4,962 potential issues across 390 projects, with as many as 720 considered high-risk or critical issues, and currently, 21.4% of the findings are reproducible. This security review initiative was launched a few days after the Coldcard hardware wallet vulnerability incident, in which stolen Bitcoin valued at over $100 million was involved.

According to Jinshi reports, the survey shows that business activity in the Eurozone rose to its highest level in eight months in July, driven by a recovery in the services sector and ongoing improvements in manufacturing.The S&P Global Eurozone Composite PMI rose to 52 in July, above the neutral level of 50 in June, marking the first time this index has entered the expansion zone since March.The Eurozone Services PMI rose to 51.7 in July, reaching a five-month high, up from 49.4 in June.