tac

The cross-chain protocol Chainflip disclosed that an attack incident targeting Tron USDT occurred yesterday. It has been confirmed that 736,442.17 USDT was stolen through 6 unauthorized payments, and an additional 115,654.41 USDT from user exchanges remains in the vault due to payment failures, while other funds were unaffected.Chainflip stated that the attacker exploited a vulnerability in the Tron transaction memo mechanism, attaching a custom memo to transactions that had already been signed by validators, causing the system to recognize the same deposit as a separate exchange and refund it again, ultimately leading to funds being paid out multiple times. The attacker executed 8 operations within approximately 90 minutes, gradually increasing the amounts. Chainflip claims to have completed a repair plan and has flagged the stolen funds to relevant authorities in an attempt to recover them, with operations expected to resume as early as Monday, and they will be responsible for compensating affected users for their losses.

According to a report by Decrypt, a new report released by the Bank for International Settlements shows that advanced AI technology has shortened the time window for banks to fix vulnerabilities before attackers exploit software flaws. It warns that periodic security assessments and scheduled patch updates have increasingly become insufficient to meet the challenges, with the time window from vulnerability discovery to exploitation reduced from weeks to minutes.The report focuses on the banks' response capabilities, arguing that financial institutions must accelerate the speed of software fixes and expedite the related authorization decision-making processes.

After the Saudi East-West oil pipeline was attacked, it was temporarily closed, and the number of vessels passing through the Strait of Hormuz dropped to 7 on Thursday. Iraq confirmed that the drone attack on Saudi Arabia originated from its territory, and Saudi Arabia has temporarily refrained from retaliatory actions at Iraq's request.

The cross-chain liquidity protocol Symbiosis announced that it has encountered a security incident. Around September 11, 2026, at 04:28 UTC, attackers exploited a vulnerability in the Bitcoin bridge to carry out the attack. The BTC route has been suspended, while other routes are still operating normally.The official statement indicated that only the Bitcoin bridge was affected and has been isolated from other systems. The remaining routes, including EVM chains, TRON, TON, and components like Octopools, were not impacted. The team has recovered approximately 15 BTC, which is stored in a multi-signature wallet controlled by the team. The official has offered a white hat bounty to the attackers, amounting to 20% of the funds, valid until September 13, 2026; thereafter, an equivalent proportion will be offered to informants who can assist in recovering the funds.The final loss assessment is still ongoing, and confirmation data will be released later. The official is contacting affected liquidity providers one by one and developing a compensation framework. The relay group is still operational and ensuring network security.

In a threat intelligence report released on Thursday, Anthropic stated that Russian and Chinese users are leveraging its AI model Claude to automate cyberattacks. Among them, a Russian operator codenamed "JackPoterz" has automated most parts of the attack chain through a customized AI-driven workflow, targeting over 20 organizations, including government departments and intelligence agencies, as well as embassies and diplomatic missions in Ukraine and several European countries.Chinese users are using Claude as the engineering and orchestration layer for vulnerability research, with one workflow producing more than a dozen potential zero-day vulnerabilities in network device firmware within a month. Anthropic pointed out that AI is changing the economics of cyberattacks, allowing a single operator to complete an intrusion in two to three hours and handle dozens of victims in parallel.Additionally, the report revealed that a suspected independent consultant based in Bamako, collaborating with Mali's national intelligence agency, has used Claude as the primary engineering force to build a large-scale domestic surveillance system covering approximately 25 million SIM cards across all three mobile operators in the country. This system is locally deployed and operates using local models, with software design and engineering support provided by Claude, enabling the generation of intelligence profiles on phone numbers without the need for court warrants.

According to SlowMist monitoring, the BSC chain project BeatXswap suffered a price manipulation attack, resulting in a loss of approximately 2.985 million BTX (about $77,500).The attacker borrowed 6 million BTX through a flash loan and sold it into the Uniswap V3 pool to lower the price. They then exploited a vulnerability in the contract that used only the V3 pool's instant price as the sole pricing basis (without TWAP protection and without deviation limits), depositing USDT in two transactions to trigger liquidity mining and withdrew BTX from the LP position.

The cross-chain liquidity protocol Symbiosis is currently under attack on the BSC chain, resulting in an actual loss of approximately $336,000 WBTC.

According to Cryptopolitan, over 100 researchers, using AI coding agents, have reduced the quantum attack resource score for the Bitcoin secp256k1 elliptic curve point addition subroutine by 86.1% (from 10.75 billion to 1.496 billion). This optimization only targets a single step in Shor's algorithm and does not break any private keys or transfer funds; a complete attack still requires fault-tolerant quantum hardware that does not yet exist. However, each efficiency improvement compresses the time window for quantum migration after blockchain completion.According to Glassnode data, approximately 6.04 million BTC (30.2% of the circulating supply) face potential quantum risks due to exposed public keys on-chain. Ethereum plans to achieve full quantum resistance by December 2029, while the Bitcoin community faces greater challenges at the governance level, including how to handle approximately 1.7 million suspected dormant P2PK address coins held by Satoshi, which remains unresolved.

According to The Wall Street Journal, the Pentagon is negotiating a loan of about 5 billion dollars to the AI cloud computing startup FluidStack to strengthen the supply chain of data centers in the United States.

According to CoinDesk, the latest paper released by researchers from institutions such as Theta Labs, the Ethereum Foundation, and StarkWare shows that the resources required for potential quantum attacks on Bitcoin (BTC) and Ethereum (ETH) have decreased by more than 50% compared to the estimates previously published by Google's quantum artificial intelligence team.The quantum circuit design proposed in the study requires only about 1,151 logical qubits and uses approximately 1.3 million Toffoli gate operations to complete the relevant calculations, with a comprehensive score of about 1.5 billion, lower than the approximately 3 billion level previously published by Google.The research primarily optimized the point addition calculation in Shor's algorithm, which theoretically can use sufficiently powerful quantum computers to derive private keys from public keys. Jieyi Long, one of the main authors of the paper and CTO of Theta Labs, stated that quantum attacks are not imminent at the moment, but transitioning to quantum resistance will take years, and remediation cannot be done after an attack occurs.

According to the official statement from Osmosis, the proposal for the solution regarding the previous Nomic chain nBTC incident is now online and has officially entered community discussion.According to the proposal, the Osmosis governance community will consider confiscating the previously frozen assets of the attacker and using the accumulated BTC in the community fund pool to cover the remaining collateral gap, in order to restore the full collateral support for Alloyed BTC. Currently, this plan still needs to go through governance discussion and voting, and the asset confiscation or collateral replenishment has not yet been completed.

Circle's blockchain Arc tweeted that the transaction memo feature is now available on the testnet.Developers can attach structured context to a single contract call without modifying the existing contract. Applicable scenarios include invoice numbers, payment reference numbers, customer IDs, and reconciliation tracking.

The TON Network DePIN project PinGo officially stated that regarding the recent security incident, the team has confirmed that this attack is related to the asynchronous execution mechanism of the TON blockchain. To further enhance the security of the protocol and prevent similar issues from occurring again, PinGo will upgrade the project contract.In addition, the PinGo team stated that they are currently communicating with relevant ecological partners and exchanges, and will promote exchanges to restore $PINGO deposit services as soon as possible. After the contract upgrade and necessary security checks are completed, the team will continue to disclose subsequent progress.

DeepSeek stated in the V4.1 Flash open-source announcement that if there are 2000 GPUs and storage clusters, they can contact DeepSeek directly.V4.1 Flash is still open-sourced under the MIT License, without additional licensing conditions based on company revenue or business scale. Companies with resources can deploy it themselves, and contacting DeepSeek is more like a direct technical collaboration for ultra-large-scale scenarios. DeepSeek has not yet announced a formal private deployment product or paid service.In the past, after DeepSeek open-sourced the model, deployment adaptations were mostly completed by inference frameworks and hardware vendors such as SGLang and TensorRT-LLM. This time, the official team has proactively provided direct contact information for large-scale deployments and stated that they will continue to support the open-source community in adapting inference for new models.

According to a report by AML Intelligence, the European Commission has passed an authorization bill to expand the "Central Contact Point" (CCP) framework to include Crypto Asset Service Providers (CASP), granting regulatory authorities in member states the power to require local contact persons to be designated by institutions such as cryptocurrency exchanges operating in their countries.This framework previously only applied to electronic money institutions and payment institutions. After the revision, it will include crypto service providers in the anti-money laundering and compliance regulatory network, allowing regulatory authorities to have a fixed contact window domestically and enhance information sharing and law enforcement collaboration.

According to Bloomberg, cryptocurrency hardware wallet manufacturer Ledger SAS announced the appointment of Oded Blatman as Chief Information Officer (CIO) and Chief Security Officer (CSO), integrating internal technology systems and security functions under the same executive management.Blatman previously worked at the blockchain company Fireblocks and will be fully responsible for network and infrastructure security, product security, physical and workplace security, internal IT, and enterprise risk management.

The official announcement from the Ton Network DePIN project PinGo states that the project has once again encountered a cyber attack, and the attackers have sold some of the involved tokens. Currently, the PinGo team has completed the consolidation of on-chain assets and is actively addressing this security incident.It is reported that Gate has temporarily suspended the recharge of PinGo tokens. The PinGo team stated that they will continue to disclose subsequent information based on the progress of the incident. As a result of the incident, the price of PINGO briefly surged by 70%, with the current quote at 0.03 USD.

Iran is gradually relaxing foreign exchange controls and allowing companies to use Tether (USDT) and Bitcoin for cross-border transactions. According to informed sources, the Central Bank of Iran has encouraged companies in recent months to repatriate overseas funds through local cryptocurrency exchanges, and companies can also exchange foreign currency in the open market, using export revenue directly for imported goods. An executive close to the Iranian regime stated that the central bank is currently not questioning the methods of fund transfer, and using cryptocurrency to receive export payments has become the norm.Data shows that approximately $10 billion worth of cryptocurrency will flow through Iran by 2025, and blockchain analytics firm Elliptic estimates that Iran accounts for about 4.5% of global Bitcoin mining activity. There are still over $100 billion in undeclared overseas and domestic earnings within Iran, with more than 20,000 individuals and companies failing to fulfill their obligation to repatriate approximately €94 billion in export revenue. Tether had previously frozen about $344 million in wallet assets related to the Central Bank of Iran, and the U.S. Treasury has also warned that engaging in digital asset transactions with Iran may face sanction risks.

According to Bitcoin Magazine, the Bitcoin fintech company Castle announced that it will open its automated Bitcoin financial stack to individual users and launch a pioneering feature in this category: users can choose to receive dividend income in cash or Bitcoin at any ratio.Castle's revenue comes from the perpetual preferred stock STRC issued by Strategy, which was incorporated into the platform earlier this year and currently pays an annualized dividend of 12% on a semi-monthly basis. Users can receive 100% of the dividends in cash, convert 100% to Bitcoin, or choose any ratio between the two. According to the company, most users opt for a compromise solution, using cash to cover daily expenses while automatically reinvesting the remaining portion into Bitcoin with each dividend payout.Castle co-founder and CTO João Almeida stated that investors have long faced a dilemma of choosing between stable income and holding Bitcoin. Castle allows users to achieve both cash flow and long-term upside by automatically converting a portion of the dividends into Bitcoin. Previously, Castle only catered to business clients such as restaurants, gyms, accounting firms, and e-commerce; the opening of personal accounts was due to repeated requests from business owners. Castle was co-founded by Almeida and CEO Stephen Cole and has received investments from Boost VC and Winklevoss Capital.

According to Slow Fog monitoring, a certain Router contract was attacked due to security flaws in the Swap entry and uniswapV3SwapCallback, resulting in a loss of approximately 62.28 BNB.The Router did not verify whether the caller was a legitimate V3 Pool, and it also failed to bind the payer in the callback to the original transaction context. The attacker forged a V3 Pool/adapter and injected the victim's address as the payer, utilizing the ERC-20 authorization previously granted to the Router by the user to execute transferFrom() and transfer assets. Users who had previously granted sufficient token authorization to the Router may have their authorized assets transferred away even without further interaction.