cover

Nomura Securities has initiated coverage on Yushu Technology, assigning a valuation of 25 times the 2027 sales multiple, expecting revenue growth rates of 101% and 144% for the fiscal years 2027 and 2028, respectively, with a compound annual growth rate of approximately 122% from 2026 to 2028. The research report highlights two major investment theses: the full-stack mechanical design and self-developed hardware provide Yushu with structural cost advantages, with outsourced components accounting for only 10% to 20% of total costs, and gross margins increasing from 44% in the fiscal year 2022 to 60% in the fiscal year 2025; rapid product iteration allows Yushu to repeatedly lead the industry into new application scenarios, launching four humanoid product series within 26 months.The report also notes that on July 28, 2026, the U.S. FCC included it in the Covered List, and while authorized models can still be sold, new models under development will face restrictions, constituting structural entry constraints. Currently, 73.6% of humanoid robot revenue still comes from research institutions, and catalysts for growth in new terminal markets remain scarce. Nomura suggests paying attention to the progress of the "brain"—the commercialization of WVLA2.0 and the industrial deployment of UnifoLM-X1-0, which may be key to unlocking new application scenarios. The views expressed in this research report are those of Nomura Securities and do not constitute investment advice.

U.S. Trade Representative Tai stated that the agreement reached with Canada will include comprehensive market access for all U.S. goods, commitments to economic security, and digital trade integration.

According to Decrypt, Swiss hardware wallet manufacturer BitBox discovered two serious vulnerabilities and one bootloader issue in its firmware during an internal AI audit, and has released the Dixence security update. Exploiting the vulnerabilities requires a combination of phishing attacks and user unlocking of the tampered device, but BitBox stated that no user funds were stolen and the recovery phrases were not compromised.The bootloader vulnerability affects the older BitBox02 models, allowing attackers to load malicious firmware to steal assets; this issue has been partially fixed in the Oeschinen update from July. The second serious vulnerability affects the pre-initialization phase of Multi version devices, potentially allowing arbitrary code execution. The third issue involves the silent payment feature, which cannot directly steal coins but may lock funds. The new Nova version is not affected. BitBox warns that users with old firmware need to install the update as soon as possible, and currently, there are no reports of user fund losses.

Decred official X account (@decredproject) released a security notice, stating that a security vulnerability has been discovered in the Decred (DCR) network, and a patch will be released on August 18 at 10 AM Eastern Time.For security reasons, the official recommends that users suspend voting and mining operations until the upgrade is completed. An announcement will be synchronized on the official X account as soon as the patch is released.

Strategy CEO Phong Le shared his experience in a bear market, stating that he once believed everyone would view Bitcoin as an asset that increases by 30% annually and is completely liquid, thinking that holding as much Bitcoin as possible to support digital credit products was more important than holding dollars. However, the market shows that, apart from Bitcoin and DeFi participants, institutions will invest short-term funds for 6 months, as they value cash more, which is an important lesson.Currently, the company has 2.7 years of dividend coverage and $4.75 billion in cash. Phong Le indicated that he might prefer to hold Bitcoin, but making Stretch operate is essential for MSTR and Bitcoin to function. Some people only want dividend coverage, and the substantial cash indicates that the company is listening to these voices.

The U.S. Securities and Exchange Commission (SEC) is reviewing the rule change application submitted by Cboe BZX Exchange, involving six leveraged commodity ETFs that track the benchmark's daily performance by three times. The initial review period set by the SEC is 45 days after publication in the Federal Register.Volatility Shares LLC is the sponsor of the relevant funds, which include 3x Gold, Silver, Bitcoin, Ethereum, Crude Oil, and Natural Gas ETFs, all intended to operate under a commodity pool and not classified as investment companies. Among them, the Bitcoin and Ethereum ETFs will primarily invest in near-month and next-month futures contracts on the Chicago Mercantile Exchange (CME), rather than directly holding Bitcoin or Ethereum, and will allocate cash and cash equivalents as collateral or margin.Before the relevant products are listed, the SEC must approve the exchange rule changes, and the trust's Form S-1 registration statement must also become effective. Each fund must have at least 100,000 shares at the time of listing, and authorized participants can subscribe or redeem cash at a rate of 1,000 shares per 10,000 shares.

Bitcoin News posted on the X platform that after two weeks of using cutting-edge AI to scan almost the entire Bitcoin open-source ecosystem for vulnerabilities, Bitcoin Red Team member @callebtc stated, "The easily discoverable vulnerabilities have been addressed," and maintainers are verifying "a large number" of serious and high-risk vulnerabilities.@callebtc indicated that the main findings include: decades of accumulated open-source technical debt are being exposed alongside AI capabilities that can discover vulnerabilities at speeds and scales unattainable by human researchers; Lightning seems particularly vulnerable, with its complexity meaning its security status is "worse than average"; unmaintained Bitcoin projects should be considered vulnerable until their security is confirmed.Projects that began building AI security and auditing processes months ago are now in a completely different position compared to those that have been waiting until now. The Bitcoin Red Team has now completed a foundational scan of almost the entire Bitcoin open-source ecosystem. Easily discoverable vulnerabilities have mostly been addressed, but as AI capabilities improve, external red team testing may need to continue indefinitely. Despite discovering and reporting "a large number" of real serious and high-risk vulnerabilities, @callebtc believes this process will ultimately make Bitcoin stronger. The same AI security review will soon expand to areas far beyond Bitcoin.

Bitget's latest data shows that approximately one out of every three contract trades on the platform comes from stock perpetual contract trading. As of now, Bitget supports a total of 271 stock perpetual contracts.Previous data indicated that Bitget's monthly trading volume for stock perpetual contracts in July reached $85.445 billion, with a single-day peak trading volume of $6.674 billion; during the same period, the monthly trading volume increased by 30.6% month-on-month, the number of traders increased by 31.4% month-on-month, and the number of trades increased by 130% month-on-month. Multiple trading indicators have shown steady growth.

According to a report by Decrypt, Israeli cybersecurity company ASecurity released a report stating that a researcher used publicly available AI models to discover multiple vulnerabilities in the Zoom annotation tool in less than 24 hours with fewer than 20 prompts, and constructed an exploitable attack chain. The vulnerabilities are numbered CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415, allowing attackers to remotely execute code in meetings without any action from the victim, control their devices, steal data, and activate the microphone or camera.The attack was tested successfully on Windows, macOS, Linux, Android, and iOS versions of Zoom. ASecurity claimed it reached a "national-level" standard, whereas previously constructing such exploitation tools required months of work and a substantial budget from professional teams. ASecurity reported the first vulnerability to Zoom on June 10, and Zoom released fixes between June 22 and July 20, but the server-side protections in end-to-end encrypted meetings could not filter malicious messages, requiring users to update manually. A Zoom spokesperson confirmed that the issue has been resolved and advised users to keep their versions up to date.

According to informed sources, AI startup Discovery Loop, founded by former Google chief scientist Jeff Dean, is in talks to raise $1 billion, corresponding to a valuation of approximately $10 billion, with specific financing terms still subject to change.Discovery Loop aims to accelerate discoveries in the fields of science and engineering through automated machine learning, science and engineering, and the parallel execution of thousands of experiments. Its initial funding is led by Radical Ventures and Khosla Ventures, with participation from Lightspeed, Kleiner Perkins, and Doerr Capital, while Alphabet serves as the founding investor and cloud services partner. The founding team of Discovery Loop also includes former core researchers from Google such as Sanjay Ghemawat, Quoc Le, and Oriol Vinyals.

According to Fortune, Bank of America announced a $250 billion infrastructure investment plan on Wednesday, committing to invest in key infrastructure areas in the United States over the next year. The investment scope covers multiple fields including data centers and computing power, renewable energy generation, energy storage, natural gas, transmission networks, and critical minerals and mining, with the goal of supporting energy security, job growth, and economic competitiveness.

According to CoinDesk, the cross-border payment company MoneyGram announced the expansion of its cash and cryptocurrency exchange service MoneyGram Ramps to Solana, allowing wallets, exchanges, and developers within the Solana ecosystem to access its global cash network.The service supports two-way exchanges between cash and digital assets, with cash deposits covering over 25 countries and cash withdrawals covering over 170 countries and regions. MoneyGram had previously launched a cash deposit and withdrawal service based on USDC in partnership with Stellar and issued the dollar-backed stablecoin MGUSD, continuously expanding its stablecoin payment and remittance business.

The gold and silver markets remain high and volatile, with trading activity in the metals sector continuing to rise. According to market data from the Gate platform, gold (XAU) is currently priced at $4370.36, with a 24-hour increase of 0.26%; silver (XAG) is currently priced at $64.60, with a 24-hour increase of 0.56%. According to CoinGlass data, the open interest for Gate XAU (gold) contracts has reached $373 million, ranking second in CEX; the open interest for Gate XAG (silver) contracts has reached $80.61 million, ranking third in CEX.

According to Bitcoin.com, cybersecurity company Genians Security Center has released an analysis report stating that the North Korean Reconnaissance General Bureau's hacker organization Kimsuky is building and testing a set of AI-based cyber attack tools. Researchers found traces of the deployment of three local AI platforms: Ollama, GPT4All, and Msty, as well as components of AI development frameworks such as Microsoft Semantic Kernel and LLaMaSharp in their infrastructure, indicating that the organization is systematically developing dedicated AI attack tools rather than just making temporary attempts.Since early 2026, Kimsuky has been using high-quality documents generated by generative AI for spear-phishing attacks targeting virtual assets, financial investments, and game development. The AI-generated professional documents significantly reduce the effectiveness of traditional phishing email detection. The attack vector is a ZIP archive disguised as a legitimate document, containing a malicious LNK file that, when triggered, can silently execute PowerShell commands in the background.

According to The Block, supporters of the open-source Bitcoin payment processor BTCPay Server have pledged to establish a bounty for recovery: 10% of the recovered funds will be awarded, with a maximum of 3 BTC if the full amount is recovered.BTCPay disclosed last Friday that a serious vulnerability is being actively exploited and urged users to upgrade as soon as possible. This vulnerability allows attackers to obtain LND administrator credentials, thereby gaining full control over connected Lightning wallets. BTCPay stated that on-chain wallets (including hot wallets) are not affected and did not disclose the total amount of losses or the number of affected nodes.

OpenAI announced the expansion of its cybersecurity defense program Daybreak and launched the GPT-5.6-Cyber model specifically for the cybersecurity field, aimed at helping authorized security researchers and defense teams enhance their vulnerability discovery, threat analysis, and security testing capabilities. As attackers increasingly leverage AI to launch faster and larger-scale cyberattacks, defenders need to gain advanced AI capabilities in advance.This Daybreak offers two types of access: Daybreak Blue is aimed at most defense teams, providing general models such as GPT-5.6 Sol for vulnerability discovery, secure code review, malware analysis, incident response, and patch validation; Daybreak Red is aimed at advanced security research, providing GPT-5.6-Cyber for authorized vulnerability research, vulnerability validation, and security testing. GPT-5.6-Cyber is trained on GPT-5.6 Sol and optimized for cybersecurity tasks, including discovering zero-day vulnerabilities and analyzing exploit chains. It has been used in actual vulnerability research and has identified high-risk vulnerabilities in software, including the Chrome V8 JavaScript engine. Additionally, OpenAI stated that GPT-5.6-Cyber has also helped discover high-risk vulnerabilities in various domains, including privilege escalation vulnerabilities in mobile operating systems, remote code execution vulnerabilities in databases, and hundreds of privilege escalation vulnerabilities in operating system kernels.OpenAI also emphasized that Daybreak Red will only be accessible to approved individuals and organizations, controlling access through measures such as authentication, account security, monitoring, usage restrictions, and legal disclaimers. The company stated that it will continue to strengthen security monitoring, access management, and model security testing to reduce the risk of advanced cybersecurity models being abused.

According to The Information, Microsoft's self-developed artificial intelligence chip project has shown signs of recovery after experiencing a slow start.

Discovered Materials completed a $9 million seed round financing, with investors including Lightspeed India Partners, Peak XV Partners, and several angel investors.

According to CCTV News, recently, the National Computer Virus Emergency Response Center and the National Engineering Laboratory for Computer Virus Prevention and Control, relying on the National Computer Virus Collaborative Analysis Platform (https://virus.cverc.org.cn), discovered multiple incidents of users being attacked by the "Sorry" ransomware virus within our country. After the user's important files were encrypted, the file names were changed to the original file name + .sorry suffix string. The attackers also left a ransom note on the user's host, demanding that the user download an encrypted communication tool to contact them.

Standard Chartered Bank set a target price of $200 for the Chainlink token LINK by the end of 2030, indicating significant upside potential from the current level of around $8.The bank believes that the development of asset tokenization will continue to increase the demand for reliable on-chain data, and Chainlink is expected to play a key role in the infrastructure of traditional finance and decentralized finance.