cover

According to Bitcoin.com, cybersecurity company Genians Security Center has released an analysis report stating that the North Korean Reconnaissance General Bureau's hacker organization Kimsuky is building and testing a set of AI-based cyber attack tools. Researchers found traces of the deployment of three local AI platforms: Ollama, GPT4All, and Msty, as well as components of AI development frameworks such as Microsoft Semantic Kernel and LLaMaSharp in their infrastructure, indicating that the organization is systematically developing dedicated AI attack tools rather than just making temporary attempts.Since early 2026, Kimsuky has been using high-quality documents generated by generative AI for spear-phishing attacks targeting virtual assets, financial investments, and game development. The AI-generated professional documents significantly reduce the effectiveness of traditional phishing email detection. The attack vector is a ZIP archive disguised as a legitimate document, containing a malicious LNK file that, when triggered, can silently execute PowerShell commands in the background.

According to The Block, supporters of the open-source Bitcoin payment processor BTCPay Server have pledged to establish a bounty for recovery: 10% of the recovered funds will be awarded, with a maximum of 3 BTC if the full amount is recovered.BTCPay disclosed last Friday that a serious vulnerability is being actively exploited and urged users to upgrade as soon as possible. This vulnerability allows attackers to obtain LND administrator credentials, thereby gaining full control over connected Lightning wallets. BTCPay stated that on-chain wallets (including hot wallets) are not affected and did not disclose the total amount of losses or the number of affected nodes.

OpenAI announced the expansion of its cybersecurity defense program Daybreak and launched the GPT-5.6-Cyber model specifically for the cybersecurity field, aimed at helping authorized security researchers and defense teams enhance their vulnerability discovery, threat analysis, and security testing capabilities. As attackers increasingly leverage AI to launch faster and larger-scale cyberattacks, defenders need to gain advanced AI capabilities in advance.This Daybreak offers two types of access: Daybreak Blue is aimed at most defense teams, providing general models such as GPT-5.6 Sol for vulnerability discovery, secure code review, malware analysis, incident response, and patch validation; Daybreak Red is aimed at advanced security research, providing GPT-5.6-Cyber for authorized vulnerability research, vulnerability validation, and security testing. GPT-5.6-Cyber is trained on GPT-5.6 Sol and optimized for cybersecurity tasks, including discovering zero-day vulnerabilities and analyzing exploit chains. It has been used in actual vulnerability research and has identified high-risk vulnerabilities in software, including the Chrome V8 JavaScript engine. Additionally, OpenAI stated that GPT-5.6-Cyber has also helped discover high-risk vulnerabilities in various domains, including privilege escalation vulnerabilities in mobile operating systems, remote code execution vulnerabilities in databases, and hundreds of privilege escalation vulnerabilities in operating system kernels.OpenAI also emphasized that Daybreak Red will only be accessible to approved individuals and organizations, controlling access through measures such as authentication, account security, monitoring, usage restrictions, and legal disclaimers. The company stated that it will continue to strengthen security monitoring, access management, and model security testing to reduce the risk of advanced cybersecurity models being abused.

According to The Information, Microsoft's self-developed artificial intelligence chip project has shown signs of recovery after experiencing a slow start.

Discovered Materials completed a $9 million seed round financing, with investors including Lightspeed India Partners, Peak XV Partners, and several angel investors.

According to CCTV News, recently, the National Computer Virus Emergency Response Center and the National Engineering Laboratory for Computer Virus Prevention and Control, relying on the National Computer Virus Collaborative Analysis Platform (https://virus.cverc.org.cn), discovered multiple incidents of users being attacked by the "Sorry" ransomware virus within our country. After the user's important files were encrypted, the file names were changed to the original file name + .sorry suffix string. The attackers also left a ransom note on the user's host, demanding that the user download an encrypted communication tool to contact them.

Standard Chartered Bank set a target price of $200 for the Chainlink token LINK by the end of 2030, indicating significant upside potential from the current level of around $8.The bank believes that the development of asset tokenization will continue to increase the demand for reliable on-chain data, and Chainlink is expected to play a key role in the infrastructure of traditional finance and decentralized finance.

According to Decrypt, a volunteer security team stated that it scanned 150 Bitcoin code repositories using cutting-edge artificial intelligence models and discovered a dozen vulnerabilities. The team has built multiple AI-based review systems, targeting wallets, cryptographic libraries, infrastructure, and other Bitcoin projects. Team members claim that, on average, each person can find about one serious vulnerability per hour, and in the past 12 hours, they have submitted security reports to multiple projects, but specific affected projects have not yet been made public.

The Bitcoin Red Team's volunteer security initiative has scanned approximately 150 Bitcoin code repositories and disclosed more than a dozen vulnerabilities. The team is developing an open-source AI platform for auditing Bitcoin software, covering wallets, cryptographic libraries, infrastructure, and other projects.AnchorWatch CEO Rob Hamilton stated that the team has currently spent about $20,000 on various AI services and is using Kimi K3, OpenAI's GPT Sol, Anthropic's Claude Fable and Opus, as well as Z.ai's GLM 5.2 to identify vulnerabilities and generate related documentation. A pseudonymous Bitcoin developer, Calle, mentioned that the team has reported critical vulnerabilities to multiple projects in the past 12 hours, averaging about one critical vulnerability discovered per person per hour, with daily expenditures of approximately $10,000. The team did not disclose the affected projects or details of the vulnerabilities.

"1011 Insider Whale" agent Garrett Jin released a weekly analysis stating that he previously suggested gradually positioning in storage chips and buying on dips, but the market did not experience the expected pullback. He has sold half of the previously rebounded positions during the surge, not because the investment logic has changed, but because he noticed the funding structure driving the rise, stating, "This is more like a short squeeze rather than a final confirmation of the market fundamentals." Rapid capital replenishment of short positions can create short-term increases in stocks like SK Hynix, but cannot solely support a sustained trend. The risks of Korean leveraged ETFs have not been fully released, but the decline in asset scale mainly comes from net value shrinkage rather than investor exit. Currently, the cumulative net subscription of related financial products remains at historical highs and has not turned negative.Garrett Jin emphasized that the decline in the scale of Korean leveraged ETFs does not indicate a bearish outlook on storage demand. SK Hynix's 2026 capacity is already sold out, and Micron's orders are covered until 2028, with strong demand expected to continue until the second half of 2027. However, the storage industry is essentially a cyclical industry, and stock prices have already risen by hundreds of percentage points in advance. Cyclical stocks are usually difficult to sustain long-term growth through valuation expansion. The current market is entering a new phase of the AI capital expenditure cycle, shifting from "rewarding investment" to "evaluating investment returns." Regarding Bitcoin, Garrett Jin stated that it continues to meet the bottoming conditions since the low in July and maintains the position view established around $60,000.

Brian Armstrong posted on the X platform that Coinbase Dev can now create multiple types of wallets through a single API call, including self-custody, developer custody, and user custody.This feature supports multiple blockchains and various types of assets, including stablecoins, crypto assets, and tokenized real-world assets.

The Bitcoin security organization Bitcoin Red Team, composed of 16 volunteers, stated that during a rapid AI-assisted review of Bitcoin ecosystem projects, nearly 5,000 potential issues were discovered. The members of the organization include AnchorWatch CEO Rob Hamilton and Bitcoin developer Calle, among others.Calle mentioned that the Bitcoin Red Team used AI tools alongside manual reviews to scan for vulnerabilities in open-source code repositories related to Bitcoin, averaging about one critical vulnerability discovered per person per hour. Calle revealed that within 29.8 hours of launching, the team had identified 4,962 potential issues across 390 projects, with as many as 720 considered high-risk or critical issues, and currently, 21.4% of the findings are reproducible. This security review initiative was launched a few days after the Coldcard hardware wallet vulnerability incident, in which stolen Bitcoin valued at over $100 million was involved.

According to Jinshi reports, the survey shows that business activity in the Eurozone rose to its highest level in eight months in July, driven by a recovery in the services sector and ongoing improvements in manufacturing.The S&P Global Eurozone Composite PMI rose to 52 in July, above the neutral level of 50 in June, marking the first time this index has entered the expansion zone since March.The Eurozone Services PMI rose to 51.7 in July, reaching a five-month high, up from 49.4 in June.

Bitcoin News posted on the X platform that the volunteer organization Bitcoin Red Team has scanned 150 code repositories, privately disclosed more than a dozen vulnerabilities, and identified key issues during the process of strengthening wallets, cryptographic libraries, and infrastructure following the COLDCARD vulnerability incident. This work has consumed approximately $20,000 in AI computing costs, covered by OpenSats.Researchers are using multiple AI tools, with many stating that open-source models like Kimi K3 have become primary tools for security research, while cutting-edge closed-source models like OpenAI and Anthropic are considered to impose more limitations in such analyses. The team plans to open-source its AI security tools to enable projects to continuously audit their own codebases. Researchers warn that Bitcoin may just be the first industry facing a wave of AI-assisted vulnerability discovery, with similar efforts likely to expand to all open-source software.

According to Jinshi reports, Musk stated that this year they will attempt to recover the first and second stages of Starship V3, possibly achieving this in the next flight.

According to Jinshi reports, today's key economic data and events to focus on include: 04:30 US API crude oil inventory for the week ending July 31, 08:15 speech by Federal Reserve Chairman Schmid, 09:45 China's July RatingDog services PMI, 14:45 France's June industrial production month-on-month, 15:50 France's July services PMI final value, 15:55 Germany's July services PMI final value, 16:00 Eurozone's July services PMI final value, 16:30 UK's July services PMI final value, 17:00 Eurozone's June PPI month-on-month, 20:15 US July ADP employment change, 21:45 US July S&P Global services PMI final value, 22:00 US July ISM non-manufacturing PMI, 22:30 US EIA crude oil inventory for the week ending July 31, 22:30 US EIA Cushing crude oil inventory for the week ending July 31, 22:30 US EIA strategic petroleum reserve inventory for the week ending July 31, and on the next day at 04:05, Federal Reserve Governor Cook will give a speech on the economic outlook.

Global remittance giant Western Union announced that its Stablecard, built on the Rain stablecoin infrastructure, is officially launched.Users can directly receive the stablecoin USDPT issued by Western Union and issued on Solana by Anchorage Digital Bank, and can make instant purchases at Visa-supported merchants worldwide through an integrated Visa card, or choose to withdraw cash.The first batch of Stablecard covers 37 markets, and Western Union plans to expand to more than 60 markets by the end of the year. The company stated that the stablecoin will help reduce the pre-funding requirements for cross-border remittances, improve capital efficiency, and support the launch of more digital financial services.

According to the Economic Times of India, the Indian Central Board of Direct Taxes has revised the global tax reporting framework, expanding the scope of the Foreign Account Tax Compliance Act and the Common Reporting Standard to include specific crypto assets, central bank digital currencies, and digital currency products, while tightening the due diligence requirements for financial institutions.The updated compliance framework provides guidelines for banks, mutual funds, insurance companies, custodians, and other investment entities on account identification, tax residency verification, and financial information reporting. Financial institutions are also required to conduct enhanced due diligence on high-value accounts with balances exceeding $1 million.

Developers on Reddit used Claude Code to scan the Coldcard open-source firmware for vulnerabilities, identifying the core issue within 8 minutes:The firmware called a software pseudo-random number generator instead of a hardware true random number generator when generating private keys, and this vulnerability led to the theft of approximately $70 million in BTC from 1,196 wallets.At the same time, community users also reported that an independent scan using Zhizhu GLM 5.2 (trained on June 16, not connected to the internet) similarly discovered the same vulnerability.This bug has existed in the open-source wallet code for over five years.

According to Jinshi reports, Iranian Army spokesman Akraminia stated that Iran has recently used new types of drones, with specific details to be announced in the coming days.Akraminia pointed out that the range of these drones is sufficient to cover U.S. military bases in the Middle East. He also mentioned that, given the historical context of agreements signed by Americans, Iran anticipates that the memorandum of understanding may be torn up, and war will break out again.