warning

The South Korean cryptocurrency exchanges Bithumb and Upbit have issued trading warnings related to the stablecoin USR, reminding investors that USR has encountered security issues and significant price fluctuations, and to exercise extra caution when investing in REOLV.

The Federal Bureau of Investigation (FBI) has issued a warning that fake tokens impersonating the FBI have appeared on the Tron network, urging users to remain vigilant.The FBI's New York field office stated on social media that users who receive tokens claiming to be from the FBI in their wallets should exercise caution and never provide any personal identification information to related websites. According to disclosed information, these scams typically operate based on the TRC-20 token standard, where attackers send so-called "FBI tokens" to users' wallets and threaten to freeze assets under the pretext of violating anti-money laundering (AML) regulations, thereby inducing users to submit sensitive information and executing phishing attacks. The FBI also recommends that users report any suspicious activities through its Internet Crime Complaint Center (IC3). It is currently unclear how many users have been affected.

According to Decrypt, cybersecurity company Malwarebytes Labs has warned that a fake website impersonating the newly released game Pudgy World from Pudgy Penguins is attempting to steal cryptocurrency wallet passwords.The phishing site pudgypengu-gamegifts[.]live uses a highly realistic replica of a cryptocurrency wallet interface to deceive users. When visitors select a wallet on this fake site, a seemingly authentic wallet unlock interface is displayed, leading users to mistakenly believe it is a trustworthy cryptocurrency wallet software.Malwarebytes points out that the timing of this phishing campaign appears to be carefully planned, coinciding with the game's launch and a surge of new users, and the attack almost covers all mainstream wallets, indicating that it may be backed by well-resourced threat actors or using commercial phishing toolkits. Users are advised to access the official website only through trusted bookmarks, avoid clicking on social media links, and be cautious of wallet password prompts that appear on web pages.

According to Jinshi reports, the China Internet Finance Association has warned that while the OpenClaw intelligent system can enhance work efficiency, its default high system permissions and weak security configurations can easily be exploited by attackers, becoming a breakthrough point for stealing sensitive data or illegally manipulating transactions, posing severe risk challenges to the industry.The China Internet Finance Association advises financial consumers to be extremely cautious when installing OpenClaw on terminals for online banking, securities trading, payments, and other personal financial services. If installation is necessary, it is recommended not to grant operational permissions to financial service systems, to promptly follow up on OpenClaw vulnerability fixes, to strictly control the installation of functional plugins, and not to input sensitive information such as ID numbers, bank card numbers, and payment passwords when not in use. Additionally, such applications continuously call large model interfaces during operation, which may incur high Token costs, so users are advised to pay close attention.

The monitoring data from the China National Cybersecurity and Information Security Information Notification Center shows that there are currently over 200,000 active OpenClaw internet assets worldwide, with approximately 23,000 active OpenClaw internet assets within the country, exhibiting explosive growth, mainly concentrated in internet resource-intensive areas such as Beijing, Shanghai, Guangdong, Zhejiang, Sichuan, and Jiangsu.A large number of OpenClaw assets exposed to the internet pose significant security risks and are likely to become prime targets for cyberattacks. Among them, the behavior of the agents is uncontrollable, making management difficult. During the execution of commands, OpenClaw agents are prone to privilege escalation, leading to unauthorized task execution and disregard for user instructions, which may result in the deletion of user data, theft of user information, and takeover of user terminal devices, causing significant economic losses.

Etherscan posted on social media that there were approximately 17 million poisoning attempts on Ethereum from 2022 to 2024, affecting 1.3 million users, with confirmed losses of at least $79.3 million. After the Fusaka upgrade (December 3, 2025), transaction costs will decrease significantly, and dust transfers will explode, increasing by 612%.Etherscan recommends that users take the following measures:Always manually verify the complete target address before transferring (most important)Add private name tags for frequently used addresses + use ENS domain namesEnable the Etherscan Address Highlight feature · Pay attention to pop-up reminders when copying addresses.

A crypto user lost approximately $50 million in a token swap transaction on Thursday. On-chain data shows that the user exchanged about $50.43 million worth of aEthUSDT for aEthAAVE through the CoW Protocol, but due to insufficient liquidity pool depth, the transaction experienced a slippage of over 99%, ultimately resulting in the user receiving only about 327 aEthAAVE, worth approximately $36,000, with the difference being captured by arbitrage traders and network intermediaries.Aave founder Stani Kulechov posted on the X platform that the user purchased AAVE using $50 million USDT through the Aave interface. Due to the unusually large size of the single order, the interface issued an extreme slippage warning to the user and required confirmation. After accepting the warning on a mobile device, the user proceeded with the transaction.Kulechov stated that the CoW Swap router operated as expected and followed industry-standard operating procedures, but the outcome was clearly not ideal. Kulechov mentioned that Aave plans to contact the user and refund approximately $600,000 in fees charged from the transaction. Days before this incident, about $27 million in positions on Aave were liquidated, and some market participants believe that this liquidation may be related to a temporary pricing issue with wstETH.

The Cybersecurity Threat and Vulnerability Information Sharing Platform of the Ministry of Industry and Information Technology recently monitored and found that some instances of the OpenClaw (commonly known as "Lobster") open-source AI agent have a high security risk under default or improper configurations, making them susceptible to cyberattacks, information leaks, and other security issues. It is recommended that relevant units and users thoroughly check the public exposure, permission configurations, and credential management when deploying and using OpenClaw, close unnecessary public access, improve security mechanisms such as identity authentication, access control, data encryption, and security auditing, and continuously pay attention to official security announcements and hardening recommendations to prevent potential cybersecurity risks.

According to a Forbes article, Trump recently warned that U.S. military actions against Iran could last more than five weeks, stating that "the real large-scale operations have not yet begun, and the big ones will come soon."The market believes that if the conflict in the Middle East becomes prolonged, it could lead to increased fiscal spending and raise the probability of the Federal Reserve easing monetary policy or even restarting large-scale liquidity injections, which may benefit cryptocurrencies like Bitcoin. Some aggressive predictions suggest that Bitcoin could reach highs of $200,000 to $500,000 within the year.Additionally, a potential financial crisis driven by artificial intelligence could trigger impacts more severe than those of 2008, similarly benefiting Bitcoin in reaching new historical highs. Analysts point out that geopolitical risks, expectations of fiscal expansion, and shifts in monetary policy are becoming important macro variables for the current market's bets on Bitcoin's upward movement.

According to Forbes, Trump recently warned that U.S. military actions against Iran could last more than five weeks, stating that "the real large-scale operations have not yet begun, and the big ones will come soon." The market believes that if the Middle East conflict becomes prolonged, it may drive up fiscal spending and increase the likelihood of the Federal Reserve easing monetary policy or even restarting large-scale liquidity injections, which could benefit cryptocurrencies like Bitcoin. Some aggressive predictions suggest that Bitcoin may hit highs of $200,000 to $500,000 within the year.Additionally, a potential financial crisis driven by artificial intelligence could trigger impacts more severe than those of 2008, also favoring Bitcoin to reach new historical highs. Analysts point out that geopolitical risks, expectations of fiscal expansion, and shifts in monetary policy are becoming important macro variables for the current market's bets on Bitcoin's upward movement.

GoPlus has released a security alert that a vulnerability in the Chrome browser allows malicious extensions to escalate privileges through the Gemini panel. Please upgrade your Chrome browser to version 143.7499.192 or above immediately.This vulnerability allows malicious extensions to control the Gemini Live panel in the Chrome browser, thereby escalating privileges to access the camera and microphone, take screenshots, access local files, and more without user consent. The vulnerability is identified as CVE-2026-0628, and Google has fixed it in the Windows/Mac versions 143.7499.192/.193 and the Linux version 143.7499.192 at the beginning of January 2026. Please check and upgrade your Chrome version immediately.

Analyst @alicharts recently posted that the death cross of the 50 and 200 simple moving averages on the Bitcoin 3-day K-line chart occurred on February 27, which historically often signals the final decline phase of a bear market.The article cites historical data since 2014, noting that Bitcoin has dropped about 50% after this indicator appeared in each bear market cycle.

According to a report by Cointelegraph, a study by data provider Amberdata found that WLFI exhibited significant warning signs during a massive market liquidation on October 10, 2025. More than five hours before approximately $6.93 billion in leveraged positions were liquidated across the network, WLFI began to decline sharply, while the price of Bitcoin remained around $121,000, showing no obvious signs of pressure.The study suggests that due to many trading platforms supporting WLFI as collateral, the token's extreme volatility led to a decrease in collateral value, forcing traders to liquidate BTC and ETH to cover their positions, triggering a chain reaction across the entire market. Mike Marshall from Amberdata stated that this five-hour lead time is hard to consider a coincidence, as WLFI's high leverage characteristics make it more sensitive to market pressures.

CoinW recently issued an official announcement reminding that a scam activity involving fake websites and mobile applications (Apps) has been detected. The scammers maliciously impersonated CoinW's name, graphics, logo, and brand image.The scammers targeted potential victims through publicly available information on the internet and social media platforms like LinkedIn. They used the victims' social profiles to verify their locations and establish initial contact, subsequently luring users to move the communication to Telegram. Scammers commonly employ manipulative tactics (including fabricating "luxurious lifestyle" stories) to deceive victims into transferring cryptocurrency to wallet addresses under their control. CoinW solemnly reminds: please be sure to access the official website or download the app through official channels. If you have doubts about the source of information, please contact the CoinW legal team for verification immediately. If you discover suspicious websites or counterfeit applications, please stop all operations and report them to the official channels. CoinW stated that it will continue to strengthen the construction of its security and risk control system, maintain a safe, fair, and transparent trading environment, and firmly support global anti-fraud, anti-money laundering, and sanctions compliance efforts.

According to Bloomberg, cryptocurrencies stabilized during the Asian trading session. Previously, Standard Chartered warned that Bitcoin could weaken further, while Coinbase, the largest cryptocurrency exchange in the U.S., reported a loss in the fourth quarter.Bitcoin is currently reported above $66,000, having previously dropped 4% during the New York trading session, reaching a low of $65,118, the lowest level of the week. Standard Chartered warned that BTC could drop to $50,000 before a rebound, with a year-end target price lowered to $100,000.

Several European tokenization and market infrastructure companies have jointly written to EU lawmakers, urging for a prompt revision of the EU's DLT Pilot Regime. Securitize, 21X, Boerse Stuttgart Group, and others pointed out that the current asset scope, issuance size limits, and six-year license restrictions have hindered the expansion of regulated on-chain markets.Relevant institutions believe that if adjustments are delayed, global liquidity may permanently shift in favor of the U.S. due to advancements in tokenized securities and near-real-time settlement. The proposal is not about relaxing regulations, but rather about technically "quickly revising" to expand the scope of eligible assets, raise limits, and remove time restrictions to maintain the competitiveness of European capital markets.

The Hong Kong Securities and Futures Commission announced today that it has included "ADG platform/Grady Technology Limited" in the warning list of suspicious virtual asset trading platforms, stating that the entity claims to operate a platform on its related website that offers trading services for tokenized real assets and stablecoins that are suspected to constitute "securities," and is suspected of unlicensed activities.

The community has announced that the official Solar X account (https://x.com/Solana_zh) is suspected to have been hacked, and the account is currently unable to log in. They are urgently contacting the platform for resolution.Solar has also issued a risk warning to the community, stating that during this period, any requests for information, funds, or sensitive operations made in the name of Solar on the X platform are fraudulent. Community users are reminded not to be deceived.

The Hong Kong Securities and Futures Commission officially announced that "Ju.com" has been included in the warning list of suspicious virtual asset trading platforms. The Hong Kong SFC stated that the entity claims to operate a virtual asset trading platform and is suspected of conducting unlicensed activities.