users

According to the news released by the X platform robot account "Grok," a large number of accounts are currently experiencing unsolicited X password reset emails, with attackers using publicly available usernames to trigger password reset forms in bulk. There are currently no confirmed signs of systems being breached or large-scale account takeovers.Grok recommends that users enable "Password Reset Protect" (Path: Settings and privacy > Security and account access > Security) and also enable two-factor authentication (2FA), while ignoring related emails and avoiding clicking on any links.

Balancer posted on platform X that the team discovered a vulnerability in the legacy Balancer v1 contracts that allows for the depletion of LP funds. These pools are deprecated and cannot be paused, and users are advised to withdraw funds proportionally through legacy.balancer.fi. Other Balancer products are not affected.

According to Bloomberg, the decentralized perpetual contract trading platform Hyperliquid is in advanced negotiations with Kraken's parent company Payward, planning to offer some crypto perpetual contract products to U.S. traders through its U.S.-regulated digital asset exchange and clearinghouse Bitnomial. Representatives from Payward and Hyperliquid Labs declined to comment.If the deal is reached, it will mark Hyperliquid's first entry into the U.S. market, headquartered in Singapore. The platform has a daily trading volume exceeding $4 billion, but it cannot be opened to U.S. users due to its design without a centralized operator. Providing access through Bitnomial's regulated infrastructure can meet regulatory requirements for operators and regulatory frameworks. Any agreement still requires regulatory approval, and Payward has submitted a proposal outlining the basic structure to the U.S. Commodity Futures Trading Commission.This negotiation comes as Trump stated earlier this month that his administration is working to bring the platform to the U.S., and CFTC Chairman Michael Selig is also seeking to pave the way for Hyperliquid. Meanwhile, the SEC and CFTC are pushing to bring offshore perpetual contract trading back to U.S. platforms.

On August 31, WEEX announced the launch of U.S. stock trading activities, which will take place from August 31 at 16:00 to September 15 at 23:59:59 (UTC+8).During the event, new users who choose any cryptocurrency stock in the spot trading stock area for their first spot trade will have their losses covered by the platform, with a maximum subsidy of 60 USDT. All users who achieve a cumulative trading volume of no less than 1,000 USDT in the spot trading stock area can share a cash prize of 30,000 USDT based on their trading volume proportion. Rewards can be unlocked by meeting the cumulative trading volume requirements for designated U.S. stock tokens, and the rewards for hitting the top three in price increase will be doubled.

Tibo, the product head of OpenAI Codex, stated that the number of active users has reached 25 million. To celebrate this milestone, the usage limits for all paid subscriptions of ChatGPT Work and Codex have now been reset.

Zhao Changpeng appeared on the podcast "Meanders." Zhao Changpeng stated that if he were to redo a global cryptocurrency trading platform in 2017, the first principle would be to avoid U.S. users. Their definition of centralized financial platforms is: if you have U.S. users, you need to be subject to U.S. regulation and obtain a license in the U.S. This is not 100% enforced in the U.S., but they have the right and the ability to do so.Additionally, contracts might be developed a bit earlier. Even some other financial products could potentially be developed a bit earlier, and financial products would be more comprehensive. Communication with regulators might be more thorough. Binance is currently the trading platform that communicates the most with regulators, but the coverage is still somewhat lacking. Moreover, if you really want to do this, the cost is very high. It's not just a matter of money; you need to hire good people, spend a lot of time, and invest a lot of time managing this matter.

Crypto KOL Him, in response to the community's question about whether an airdrop plan will be launched this week, stated that the airdrop will be conducted manually and in phases, targeting loyal users and contributors, similar to the Black Bull / Ansem style. He also mentioned that in the later stages of the airdrop, almost the entire token supply he holds will be distributed.According to GMGN market data, the market capitalization of the Robinhood chain meme coin COPPERINU has surpassed 18 million USD, currently reported at 18.1 million USD.It is understood that COPPERINU was deployed by the Pons Vault developers, who sent 40% of the tokens to crypto KOL Him's wallet. Him stated that he accepted the token because it was deployed by the Pons Vault developers and intends to incorporate mechanisms such as staking, claiming, and burning around the token, while using the obtained tokens for community airdrops.

Cointelegraph reported that Avici will fully refund all 1,685 users affected by the $500,859 card balance vulnerability.

The cryptocurrency exchange Kraken recently temporarily locked some customer accounts due to nearly 12,000 small transfers sent from wallets marked by Arkham Intelligence as belonging to competitor HTX to Kraken-associated addresses between August 17 and 24. Each transfer ranged from a few cents to several dollars. Kraken stated that this method, known as dusting attacks, exploits the arbitrary transfer characteristics of public blockchains to associate sanctioned funds with unrelated users, thereby triggering sanction screening mechanisms.The Kraken compliance team has restored user access while continuing to freeze the relevant sanctioned funds and cooperating with authorities to ensure the attack does not achieve its intended effect. HTX responded that an internal review found no official accounts involved in the related small transactions and is investigating whether the sending wallets were misidentified or operated by third parties. The UK sanctioned HTX in May, and the EU included it in a trading ban in July, which took effect on August 23, coinciding with the timing of the attack.

On August 25, OpenAI announced the addition of proxy browsing capabilities for ChatGPT Work, enabling it to take over tasks on websites that require login and continue working. Users only need to enter their credentials or security codes once at the login interface, and the proxy can continue executing tasks, with sessions potentially remaining logged in for subsequent tasks without the need to log in again. OpenAI stated that this browser supports password managers, and the model cannot see usernames or passwords; this information will not be stored or used for training.However, one-time authentication effectively leaves a foothold for the proxy to maintain continuous access to the account. OpenAI's own models have previously exhibited boundary-crossing behavior, with approximately 1,200 OpenAI proxies (including GPT-5.6 Sol and a pre-release model) breaching the testing environment and invading Hugging Face's production servers to cheat benchmark tests, with about 700 proxies participating in the attack. This feature has been launched on the web and mobile browsers of ChatGPT Work, allowing users to clear sessions by site individually in the cloud browser settings.

Ledger's Chief Technology Officer Charles Guillemet stated that there has recently been "FUD" targeting Ledger in the market, as a smart contract security company claimed to have discovered vulnerabilities in the Ledger Ethereum application. Guillemet mentioned that there indeed were vulnerabilities related to certain Clear Signing processes in the Ledger Ethereum application, but these vulnerabilities were discovered by Ledger's security research team Donjon using AI-driven vulnerability research tools, and the fixes were completed and deployed two weeks ago. Users can obtain protection by timely updating their Ledger device firmware and applications.The relevant security company contacted Ledger's bug bounty program only after the fixes were completed, did not follow responsible disclosure processes, and did not communicate with the bug bounty team, yet implied in subsequent content that the issue had not been resolved. This approach is not true security research but rather a way to create panic for attention. AI is changing the cybersecurity landscape, and both attackers and defenders can enhance efficiency with AI, but AI-driven security research can only truly enhance the security of the entire ecosystem when basic security principles such as responsible disclosure and pre-release verification are followed.Guillemet finally reminded Ledger users to keep their device firmware, Ledger applications, and related software up to date to automatically receive the latest security fixes and research results. Users should not be influenced by the related "FUD" and should timely update their software and maintain safe habits.

Aave began opening its iOS mobile application to early users on Wednesday, pushing its consumer savings product into early access, while Android and Web users still need to wait on the waiting list. Aave founder Stani Kulechov stated that the Ghost Pass allows users to invite friends to skip the waiting list.The app is positioned as a savings application, supporting bank account and stablecoin deposits, allowing users to connect bank accounts and debit cards, with stablecoin wallets supporting deposits and withdrawals on Arbitrum. Funds deposited generate returns through the public lending market, with assets supplied to the lending pool, and the interest paid by borrowers flowing to depositors. Aave Labs stated in July that there were about 50,000 registered users on the iOS waiting list.Aave describes the app as self-custodial, although it has login and recovery features similar to fintech applications. The app's terms state that the embedded wallet generates and stores private keys locally, and Aave Labs does not hold user assets or keys, managing wallet setup and gas through smart account abstraction. This release is part of Aave's initiative to expand retail distribution following the acquisition of Stable Finance in October 2025, with Stable Vaults now providing a savings layer for the Aave app and open to fintech companies seeking embedded stablecoin yields.

One-stop AGI infrastructure platform B.AI released the latest ecological data: On August 25, the number of new API users reached 23,432 in a single day, with a total of 79,500 new API users during the period; the single-day token throughput exceeded 594.71 billion, with a total of 74.108 million calls during the period and a cumulative throughput of over 3 trillion tokens.Two core indicators simultaneously refreshed historical records. The continuous influx of developers and explosive growth in computing power demand confirm B.AI's exceptional stability and extreme cost-effectiveness in high concurrency and complex load scenarios. B.AI is committed to becoming the preferred inclusive computing infrastructure for global teams, accelerating the comprehensive implementation of AGI.

According to official news, Gate CandyDrop will launch a special event exclusively for old users from August 25 at 18:00 to September 8 at 18:00 (UTC+8), with a total prize pool of 1 BTC.During the event, eligible old users who complete contract trading tasks can receive candies and participate in sharing airdrop rewards. Among them, old users who registered before August 25, 2026, at 00:00 (UTC+8) and have a cumulative contract trading volume of any token (opening + closing) reaching 1 USDT will receive 1 candy and participate in sharing the 1 BTC prize pool, with a maximum individual reward of 0.001 BTC.

Bitget launches the 4th phase of the VIP Guardian Program, running from August 24 to September 13, with a total prize pool of 55,000 USDT. This phase of the event is aimed at a specific user group: users whose VIP level has dropped since May 18 and have not reached VIP1 as of August 16.The event includes three main sections: return benefits, level recovery rewards, and trading volume rewards. Eligible users who complete registration will automatically receive a 30-day VIP2 experience card and a 200 USDT contract position voucher based on the type of VIP level they lost. In addition, users who complete specified stock spot or contract trading tasks can receive rewards of up to 1,600 USDT. Rewards can be accumulated and are available on a first-come, first-served basis. For more details, please refer to the Bitget official platform.

According to security company Salus monitoring, a user lost approximately 550,000 USDC after clicking on a Google sponsored ad that led to a counterfeit Hyperliquid website. This case utilized specialized "coin theft service" infrastructure associated with the Inferno system. The relevant services attract customers through Telegram accounts, offering malicious scripts, automatic theft, cross-chain withdrawals, and automatic profit sharing functions.In this case, the phishing gang was responsible for purchasing ads, deploying counterfeit entry points, and providing the final collection address; after the theft of coins was successful, the backend automatically completed the fund splitting. The total amount involved by the relevant gang is approximately 52.74 million USD, which has been linked to multiple significant phishing incidents, such as on September 23, 2025, when the original attacker of UXLINK encountered a second authorization phishing, resulting in about 542 million UXLINK; on April 15, 2026, the official domain of CoW.fi was hijacked, with associated losses of 316,000 USDC; on July 9, 2026, a fake DApp/fake airdrop authorization phishing stole about 1 million USDT. Salus stated that the relevant evidence and high-risk addresses have been submitted to the appropriate authorities for handling.

Phantom and Sui have decided to stop supporting Sui on Phantom on September 24 and will keep the possibility of exploring other collaborations in the future.Before September 24, users can migrate their wallets to other applications that support Sui, or exchange Sui for other assets supported on Phantom, and Phantom will waive the fees.

On August 21, the GATE ZONE fireside chat event took place in the Summer Bay area of Coinfest Asia, where Gate Head of Global Partnerships Jason Fung shared insights on the theme "Predicting the Biggest Market Opportunities." He discussed the competitive landscape of prediction markets, user-created markets, the Builder ecosystem, and future market opportunities. Jason Fung stated that as on-chain prediction markets continue to develop, industry competition will no longer focus solely on liquidity and trading volume. Instead, lowering the barriers to market creation, diversifying market types, and enabling more users to participate in market building will become important directions for the future development of prediction markets.Regarding the recent launch of the event contract Builder by Gate DexBuilder, Jason Fung mentioned that enabling users to create markets independently is an important step towards the openness of prediction markets. By lowering the barriers to creating and launching event markets, users can quickly build markets around popular events and explore more niche themes and potential demands, thereby driving the evolution of prediction markets from a product form dominated by a few platforms to a more open market ecosystem.Jason Fung believes that there are still many opportunities in prediction markets that have not been fully explored, and their application scope is expected to continue extending from popular fields such as politics, sports, crypto, AI, and entertainment. As more developers and entrepreneurs enter this space, the Builder ecosystem, market diversity, and user experience will become important driving forces for industry development, and on-chain event markets are expected to further expand from early user groups to a broader user market.

Coldcard has released the latest firmware 5.6.1 (Mk4/Mk5) and 1.5.1Q (Q). This update is based on a three-week security review following an emergency fix, focusing on addressing the security risks posed by previous mnemonic phrase generation attacks. Each newly generated mnemonic phrase must include at least one user entropy source, such as irregular key presses at least 65 times, physical dice rolls 50 times, or physical coin tosses 128 times, combined with fresh entropy provided by STM32 TRNG, SE1, and SE2.The new firmware also adds pre-signing phased PSBT verification, strengthens USB connection and firmware update boundaries, improves Delta Mode isolation mechanisms, fixes active wallet backup issues, enhances random number generator initialization and fault checking, adjusts SIGHASH default settings, and includes multiple security and correctness improvements. Coldcard states that this update aims to further reduce the risk of the device being attacked.The official reminder is that updating the firmware cannot fix existing mnemonic phrases generated by previously affected firmware. If a user's mnemonic phrase falls within the scope of this security announcement, they should first update the device, then generate and verify a brand new mnemonic phrase, and migrate funds to the new wallet. Coldcard recommends that all Mk4, Mk5, and Q users update their devices promptly and verify the signatures of the downloaded firmware.