developer

Ronald Keung, the head of Asian Internet Research at Goldman Sachs, stated that as the global usage of Chinese AI models surges, developers may begin to charge commercial licensing fees to cloud platforms for hosting their open-weight models. Currently, most Chinese models are released under permissive licenses such as the MIT License, allowing any user to use, modify, and host them for free, including for commercial purposes.Keung pointed out that Chinese AI models like Kimi K3 from the Dark Side of the Moon and GLM-5.2 from Zhiyu AI have performance levels that are close to those of leading models in the United States. The adoption rate among small and medium-sized enterprises, both domestically and globally, is very fast, and even large enterprises are beginning to consider using Chinese models. Goldman Sachs believes that model developers can convert the growing use of open-source into actual revenue by requiring third-party service providers to purchase commercial licenses to run model inference on their own infrastructure.

The Bankr developer deployer released a statement on the X platform, stating that the Bankr infrastructure has not been compromised and no Bankr vulnerabilities have been exploited. The attacker infiltrated the X account.Previously, the official Bankr X account was hacked and posted a false airdrop link. Currently, the team is waiting for a response from the X platform and recommends that users enable multi-factor authentication for their Bankr accounts.

The AI agent toolkit Bankr developer deployer posted a reminder on platform X that all Bankr users should enable multi-factor authentication (MFA) within their Bankr accounts, as enabling MFA only on X or other social login accounts is insufficient to ensure the security of account funds.Previously, deployer posted on X stating that the Bankr X account had been compromised and false airdrop links were published, even though the account had previously been protected by device-side Passkey. deployer stated that they have requested the removal of the related false posts from platform X and are assisting in investigating the cause of the account compromise.

Nine financial institutions and Bitcoin companies announced the joint establishment of the Bitcoin Security Alliance, with founding members including Anchorage Digital, ARK Invest, BlackRock, Block, Blockstream, Coinbase, Fidelity, Galaxy, and Strategy, covering the entire chain of institutions such as custody, trading, infrastructure, payments, and asset management.The alliance commits to providing a total of $15 million in funding over the next three years to support developers and researchers in the field of Bitcoin security, including long-term work to prepare Bitcoin for the future era of quantum computing. Each member independently decides which developers, researchers, or organizations to direct their funding towards. The daily operations of the alliance are coordinated on a voluntary basis by Brink Executive Director Mike Schmidt, with Brink being a nonprofit organization that funds Bitcoin open-source developers.The alliance clearly states that it does not formulate or direct Bitcoin protocols, does not express opinions on specific protocol changes, and does not represent Bitcoin or its developers—Bitcoin development continues to be carried out by a globally decentralized community of contributors. Its positioning is to emulate the model of industry organizations that have long supported open-source software, providing resources and attention to developers without controlling the underlying work.Strategy CEO Phong Le stated, "As long-term holders, ensuring the security of Bitcoin for generations is our greatest incentive"; BlackRock's Global Head of Digital Assets Robert Mitchnick pointed out that the work of Bitcoin core developers is "extremely important," and this commitment will provide "significant additional funding" for Bitcoin's long-term security needs. The alliance will also serve as a reliable source of information for investors, the public, and the media in the field of Bitcoin security, with plans to publish and continuously update materials related to Bitcoin security in the coming months.

According to Bitcoin Magazine, Lightning Labs has released the alpha version of Wavelength, a toolkit that provides self-hosted Bitcoin payment capabilities for developers and AI agents through a simple non-custodial API, without the need to run nodes, manage channels, or obtain liquidity.Wavelength supports on-chain Bitcoin, Lightning Network payments, and settlement layers similar to Ark, with each off-chain payment using standard BOLT 11 invoices, allowing interoperability with existing Lightning Network. AI agents can call the API through the Model Context Protocol (MCP), hold balances, and pay for API calls in the smallest units, among other services. Wavelength is live on Signet and testnet, with mainnet access by invitation only, initially supporting Bitcoin, and stablecoin support planned through Taproot Assets.

According to Protos, AI shopping agent developer ORO disclosed that it suffered losses of approximately $630,000 due to a suspected North Korean hacker attack. The attackers sent spoofed Microsoft Teams links to ORO employees through a compromised Telegram account, inducing them to install malicious extensions, and after nearly a month of data theft, stole 147,000 Alpha tokens on July 13. ORO is highly confident that the attack originated from the North Korean hacker group Sapphire Sleet.ORO also admitted to security negligence—due to insufficient hardware wallet support in the Bittensor protocol, the company "temporarily" set the owner keys to software wallets, violating its internal principle of prioritizing hardware wallets, which led to the keys being stolen from the compromised computer. ORO stated that it is working with exchanges, law enforcement, and Bittensor ecosystem partners to recover the stolen assets and emphasized that its subnet is operating normally, and other wallets, user data, and validator signing keys were not affected.

Celestia Labs announced that it has acquired the high-performance blockchain framework developer Sovereign Labs. The latter has been deeply engaged in the Celestia ecosystem since 2021, and its framework has provided underlying support for projects such as the cross-chain bridge Relay Protocol and the high-performance perpetual contract trading platform Bullet.After this acquisition, Celestia Labs' technical capabilities will extend from Layer 1 to the execution layer and application layer, becoming a full-stack custom blockchain development partner for enterprises. As projects like Hyperliquid, Polymarket, and Robinhood choose to build their own chains, the demand for full-stack blockchain infrastructure among enterprises is accelerating.

Starknet announced the opening of its privacy development stack to developers, launching a privacy SDK and privacy wallet API, allowing applications, wallets, and protocols to integrate private balances, private transfers, and related DeFi interaction features based on STRK20.

AI data center developer Hyperscale Data GPUS additionally purchased 32.49 BTC, currently holding a total of 1032.49 BTC, ranking 45th in Bitcoin 100.

According to The Block, U.S. Democratic Senator Ron Wyden has written to the bipartisan leaders of the Senate, urging them to retain Section 604 of the Clarity Act, the Blockchain Regulatory Certainty Act. This provision provides a safe harbor for non-custodial developers, clarifying that they do not fall under the category of money transmitters, and it has received widespread support from the crypto industry, which believes it offers legal certainty for software developers and prevents the outflow of innovation.However, law enforcement agencies and Catholic leaders warn that this provision could weaken regulatory capabilities in combating human trafficking and hinder investigations. Wyden countered in his letter that the provision aligns the policies of the DOJ and FinCEN, ensuring that resources are focused on illegal money transmission activities, and stipulates that non-custodial developers are not protected if they are found to be transferring or using funds from illegal activities. This controversy is one of the main unresolved issues in advancing the Clarity Act, with another being the ethics provision. The time window before the Senate recess in August is narrowing.

Sophia Dew, a member of the Ethereum Foundation (EF) Developer Acceleration team, announced in a post that this week will be her last week working full-time for the Ethereum Foundation. Dew has been active in the Ethereum ecosystem for the past four years and has participated in projects such as Funding Commons, Gitcoin, and Celo.She stated that after leaving, she will continue to promote the vision of Ethereum and cryptocurrency technology in other ways, and she clearly expressed her continued optimism about the future development of Ethereum.

According to official news, NEAR Protocol announced the launch of Confidential Intents, opening NEAR's confidential execution infrastructure to all developers. Developers and dApps can provide users with confidential trading features through the NEAR Intents 1 Click Swap API.NEAR stated that Confidential Intents uses encryption rather than proof generation, requiring no client-side proof and not increasing wallet complexity; each user's data is encrypted individually rather than pooled for obfuscation. Integration only requires adding one parameter, with no need for reconstruction. Over $1.5 billion in ZEC has been settled through NEAR Intents, and within weeks of going live on near.com, 42% of transaction volume used the confidential mode, with daily confidential TVL exceeding $30 million.

Alipay announced that its AI open platform is officially launched and is now open for invitation testing to enterprise developers and service providers. The platform aims to assist merchants and institutions in conveniently upgrading their service capabilities to AI.According to the official introduction, through this platform, merchants can upgrade their existing mini-programs, API interfaces, and service capabilities to AI-callable MCP, Skill, or Agent without starting from scratch. Once integrated, services can not only be provided to Alipay's 1 billion users through the built-in AI assistant "Abao," but can also be authorized for cross-end interconnection to smart terminals and large model platforms such as mobile phones, in-car systems, AI glasses, and IoT, achieving "one-time access, multi-end distribution and unified management," thereby reducing the R&D costs of adapting to multiple terminals separately. In addition, the platform will provide basic support for the hosting, distribution, trading, and settlement of AI-enabled services. Alipay emphasizes that this AI upgrade will not affect the existing Alipay App mini-program services, and the platform will continue to provide security infrastructure such as identity verification, payment security, and risk prevention and control.

According to a recent article by npm co-founder Laurie Voss, research from Stanford University's Digital Economy Lab based on ADP payroll data shows that since the end of 2022, the number of employed junior software developers aged 22 to 25 has decreased by 19%, and entry-level software development positions have dropped by 28% from their peak, with the unemployment rate for computer science graduates rising to 6.1%. However, the total number of developers employed in the U.S. has still grown by 4.4% during the same period, with the employment of senior developers aged 41 to 49 increasing by 14%. Data from the U.S. Bureau of Labor Statistics (BLS) further indicates that over the past year, the number of "computer programmer" positions primarily responsible for writing code on demand has decreased by 16%, while positions for data scientists and core software developers that require more architectural judgment have increased by 12% and 2%, respectively.At the same time, the proliferation of AI tools has led to an explosion in software creation. GitHub added a record 36 million accounts and 121 million code repositories last year, and the number of app submissions to the Apple App Store surged by 80% year-on-year in the first quarter of 2026. Data from platforms like Vercel and Lovable indicates that over 60% of new users are "non-traditional developers" such as product managers and analysts. Industry analysts warn that as AI replaces basic coding tasks, the traditional "junior to senior" engineer apprenticeship promotion path has been disrupted, raising concerns about the safety of AI-generated code and challenging the future sources of senior developers. However, the latest hiring data from platforms like Indeed shows that the demand for related entry-level positions hit bottom in May 2025 and has begun to show signs of rebound.

Sharplink Co-CEO and former Blackrock executive Joseph Chalom stated that Ethereum has over 900,000 validators and more than 1,000,000 developers, possessing a decentralization advantage that Solana cannot match.Data from Electric Capital shows that 1,012,824 developers have contributed code to Ethereum, with approximately 232,000 remaining active over the past 12 months.Chalom noted that Solana has fewer than 800 validators, with 92% running on the same client. Data shows that Sharplink held 886,725 ETH as of late June.

Anthropic's latest Sonnet series masterpiece, Claude Sonnet 5, has officially been made available for developers through the B.AI API platform. This model has achieved breakthrough progress in code generation and complex agent tasks. With a 1M large context window and innovative adaptive thinking capabilities, Claude Sonnet 5 can more stably and efficiently manage large complex projects. At the same time, to meet the needs of different business scenarios, B.AI has taken the lead in the industry by launching a dual-channel access model of "official direct connection" and "self-selected service providers," fully assisting developers in flexibly balancing extreme performance and operational costs. Starting today, users can log in to the B.AI console to apply for an API key and quickly access the experience. For detailed technical guides and documentation, please refer to the B.AI official website.

SlowMist issued a security alert, detecting a coordinated malicious npm supply chain attack. The attackers utilized fake trading bot repositories and DeFi-themed npm packages to deploy JavaScript information stealers, targeting npm users, DeFi developers, and trading bot users.This attack involved 30 malicious npm packages, among which stake-math@3.5.4 appeared as a locked dependency in the donoaccestag/forex-mt5-trading-bot repository. This repository presented approximately 2300 highly homogeneous bulk-generated forks, mostly concentrated under the poly-stocks account, with signals being exceptionally clear. The sensitive data that attackers could steal is extensive, including cryptocurrency wallet libraries, browser cookies and saved passwords, browsing history, developer credentials, shell history, password manager libraries, private keys, mnemonic phrases, and API tokens exposed in source code.SlowMist recommends that developers immediately remove the affected npm packages, audit package.json and package-lock.json, and check CI logs for any of the 30 malicious packages; consider any system that has executed npm install as potentially compromised, rotate all exposed wallets, private keys, npm tokens, cloud credentials, SSH keys, and API tokens, and rebuild the affected environment from a clean image.

According to Crowdfundinsider, Nasdaq-listed Lion Group Holding Ltd. plans to invest up to $12 million in Indonesian fintech company PT Nusantara Bumi Sangkara through Meili Capital Management Ltd., in exchange for a 10% indirect economic interest via the issuance of common stock or equity-linked securities, with no cash payment involved.Nusantara Bumi Sangkara is developing the Indonesian Rupiah stablecoin NIDR, which is pegged 1:1 to the Indonesian Rupiah and backed by reserve assets, aimed at reducing cross-border payment costs and supporting blockchain financial services. The company has received regulatory approval or confirmation from the Indonesian Financial Services Authority and is expected to become one of the first compliant stablecoin issuers in the country.