verifi

Zcash founder Zooko Wilcox posted on platform X, stating that some users believe there may be a secret increase in the supply of ZEC, and that it may take waiting for the Ironwood migration to complete or even months or years to confirm, but this view is incorrect.Zooko Wilcox stated that users can currently verify the current supply of ZEC themselves through their local computers, with data showing that the total supply of ZEC is 16,848,458 coins.

According to Cointelegraph, the Hungarian Parliament voted to abolish the previously mandated cryptocurrency asset verification requirements that were set to take effect on July 1, 2025. This requirement mandated that specific cryptocurrency conversions must be verified by a licensed third party regarding the source of assets, wallet ownership, and customer information before execution. Finance Minister Kármán András stated that the previously stringent regulatory requirements had led to several service providers exiting the Hungarian market, and the market is currently showing signs of recovery.Meanwhile, the Hungarian National Bank (MNB) officially granted the first local license under the EU MiCA framework to Budapest-based cryptocurrency platform CoinCash operator Tiwala Solutions on July 20, authorizing a range of services including custody, cryptocurrency exchange for fiat, cryptocurrency swaps, transfers, investment advice, and portfolio management.

According to Vietnamese media An Ninh Tien Te, the Ministry of Public Security of Vietnam proposed to expand the scope of electronic identification subjects in the draft of the "Electronic Identification and Authentication Law," incorporating data, applications, digital assets, and various other assets. The draft stipulates that electronic identification subjects include not only institutions, organizations, and individuals but also extend to physical entities such as products, goods, and equipment, as well as digital resources and digital assets like databases, documents, images, and videos. The identification of digital assets is executed in accordance with the provisions of the Digital Technology Industry Law.The draft also establishes mechanisms for the suspension, restoration, and cancellation of electronic identities and identification codes. The Ministry of Public Security stated that the current electronic identification primarily serves the digital construction of citizens and the government, but in the context of the rapid development of the digital economy and digital society, a unified identification mechanism needs to be established, covering various entities in both physical and digital environments.

According to official news, Base Build announced the launch of Base Verify Onchain to address the issue of witch attacks in the blockchain ecosystem. This feature has been launched on the Base Sepolia test network, allowing developers to implement the "one real user, one claim" rule in smart contracts. Base Build stated that traditional airdrop mechanisms are easily manipulated by bulk wallets, and a large number of rewards are often obtained by professional airdrop farmers, while users who genuinely participate in product development can only receive limited benefits.Base Verify Onchain helps project teams identify multiple wallets controlled by the same user by generating a stable identity hash for each real user, without needing to obtain users' names, account information, or other private data. Users can complete verification through existing accounts such as Coinbase, Instagram, X, and TikTok. The system then returns a verified identity credential to the smart contract, which automatically enforces rules such as claim limits, voting restrictions, or quota controls. Currently, Base Verify has been used over 300,000 times and serves collaborative projects such as Base App, Cody, Scratch, and Bracket. Base Build stated that Verify Onchain will provide fairer airdrops, token distributions, governance voting, and user incentive mechanisms for decentralized applications. Developers can use this technology to limit the number of claims per real user, allocate rewards based on real identities, or convert real-world signals into on-chain credibility, thereby reducing the impact of bots and multi-wallet manipulation on the fairness of Web3 applications.

Libbitcoin developer @evoskuil stated that the latest version of Libbitcoin Server can complete the initial block download of a Bitcoin full node in 55 minutes and perform full verification. This speed improvement comes from a new GPU-based signature verification system that runs in parallel with conventional script verification, rather than as a separate step.The software does not pause execution to verify each ECDSA and Schnorr signature; instead, it captures signature checks, batches them, and processes them via GPU while the remaining verification continues. @evoskuil indicated that this method achieves about a 99.5% signature capture rate without blocking verification, thus eliminating the need for a second verification. If a batch signature check fails, the software traces it back to the corresponding block and marks that block as invalid. He also mentioned that this design can batch process an almost arbitrary number of signatures, keeping the GPU ahead of the remaining verification process and significantly shortening the full node synchronization time.

According to South Korean media Maeil Business, data from the Financial Supervisory Service of Korea shows that during the first phase of the CBDC pilot project led by the Bank of Korea, financial authorities did not conduct any independent security verification, and only the participating banks conducted their own pre-security reviews.Before the project launched, only an IT vulnerability self-assessment was conducted for the participating banks, executed by the Financial Security Institute, SK Shields, and self-inspection teams from Woori Bank and NongHyup Bank, forming an evaluation model of "self-check by the regulated entities." The central bank acknowledged external doubts about the security of the deposit tokens in the pilot result report and responded that the pre-review was sufficient, but critics pointed out that this explanation was a self-assessment and not an independent third-party verification.

Vitalik posted on the X platform stating that he has developed a toy demonstration version of the idea of a "censored anonymous bulletin board" on Aztec. This idea comes from his previous article on using SNARKs, and it is still in the early stages, but it can already achieve interesting and non-trivial functionalities.

According to GoPlus analysis, Lumi Finance on Arbitrum was attacked on July 13, resulting in a loss of approximately $270,000.The vulnerability originated from a logical flaw in the validateUserOp function of the Sodium smart account contract (ERC-4337) when calling _validateSignature to verify the signature—specifically, during the execution of isValidSignatureNow, the signer parameter was passed as the attacker's address. After an error occurred in the call to ECDSA.tryRecover, it did not revert but instead called the isValidSignature function in the attack contract and passed the verification. The attacker exploited this vulnerability to execute Token approve operations during the UserOperation verification period, obtaining approval rights for ERC20 tokens from multiple smart accounts without the payer's consent.

According to The Information, the Depository Trust & Clearing Corporation (DTCC) plans to showcase a real-time stock trading settlement process based on blockchain technology this Wednesday, focusing on verifying the feasibility of this technology in the clearing, settlement, and recording stages to enhance the operational efficiency of capital market infrastructure.

According to CoinDesk, the Ethereum Foundation recently disclosed that its security team used AI agents to test the software running on Ethereum validator nodes and successfully discovered a remotely triggerable vulnerability that could cause node crashes. However, researchers emphasized that human review remains a key step in distinguishing real vulnerabilities from false positives among the large number of security reports generated by AI.It is reported that the discovered vulnerability exists in the Ethereum network message propagation protocol gossipsub, where an attacker can remotely trigger the node software to enter an abnormal computation state, causing the program to crash and shut down, making the validator node go offline until the operator manually restarts it. This vulnerability has been fixed and registered under the identifier "CVE-2026-34219."Nikos Baxevanis, a member of the Ethereum Foundation's protocol security team, stated that what was truly surprising about this incident was not the AI's ability to discover vulnerabilities, but rather the amount of time the team spent discerning which vulnerabilities were real and which were merely seemingly credible "illusions."

According to The Block, the Hong Kong Securities and Futures Commission (SFC) has issued a circular requiring licensed virtual asset trading platforms and internet brokers to stop using one-time passwords (OTP) for user login and device binding within 12 months, and instead adopt stronger authentication methods such as passkeys and device binding.This move is due to the fact that in the 2025 Hong Kong cybersecurity incident, phishing attacks accounted for as much as 57%. The SFC also requires institutions to establish monitoring systems for suspicious logins, transactions, and withdrawals, and to promptly notify customers of any unusual account activities. Large brokers must implement the new authentication measures immediately. The SFC emphasizes that if internal controls are found to be deficient and result in customer losses, relevant responsibilities will be pursued.

Hyundai Card announced on the 9th that it has completed a proof of concept (PoC) for cross-border remittances based on stablecoins with Hyundai Motor America (HMA) and Hyundai Motor Mexico (HMM). In the first PoC, the U.S. entity converted $20,000 into USDT and then remitted it to the Mexican entity, which converted it back to dollars. The entire process, including international remittance and verification, averaged only 7 minutes, significantly shorter than the 3 to 4 hours typically required for traditional bank cross-border remittances. Tether and Avalanche participated in this verification.The second phase of the PoC will be launched at the end of this month, targeting Hyundai Motor's European entity, to conduct actual remittances in local currency instead of dollars, verifying the cost-saving effects of currency exchange. Circle and Visa will participate as partners. Hyundai Card emphasized that this verification has comprehensively considered regulatory requirements such as accounting, taxation, legal, and internal controls, going beyond mere technical testing to reach the level of actual business deployment. In the future, there are plans to expand the application of stablecoins to inter-entity settlements and fund transfers within Hyundai Motor Group's global network.

The legal team of the Bank of Korea released a research paper titled "Regulatory Framework for Foreign Remittance Transactions Involving Stablecoins," proposing regulatory recommendations for large stablecoin transactions. The paper references South Korea's current foreign exchange management regulations and outlines constraints for stablecoin transfers exceeding $10,000 between individuals, requiring such transactions to be conducted only between officially certified wallets, along with a prior declaration mechanism.Institutions admit that comprehensive control over unregistered wallets faces technical obstacles, but due to anti-money laundering compliance requirements, it is necessary to strengthen restrictions on large cross-border stablecoin fund flows. South Korean regulatory authorities have previously stated the need to improve the monitoring system for cross-border cryptocurrency transactions involving non-custodial wallets, and this paper further refines the control approach.

The Zcash development team announced plans to introduce formal verification through the upcoming new privacy pool Ironwood, using mathematical proofs to eliminate the risk of "undetectable inflation vulnerabilities."According to previous news, although the vulnerabilities in the Orchard shielded pool have been fixed and there is no evidence of exploitation, the community decided to launch a brand new Ironwood shielded pool and conduct comprehensive formal verification of its protocol, as it is theoretically impossible to confirm whether hidden inflation has occurred through on-chain history.

According to Cointelegraph, Australia officially implemented the "travel rule" for local compliant cryptocurrency trading platforms starting in July. All transactions involving the sending and receiving of cryptocurrency assets must provide the name of the recipient or payer and the name of the platform. This rule is enforced by the financial intelligence agency AUSTRAC and applies to any amount, with no minimum threshold, and requires users to confirm that the address belongs to them when withdrawing to a self-custody wallet. Exchanges like Swyftx state that users can reuse the information after submitting it once, while Kraken and CoinJar have already begun implementation in advance. The regulatory goal is to enhance the traceability of on-chain funds to combat money laundering, terrorist financing, and fraud activities.

The founder of DefiLlama, 0xngmi, announced the launch of a new off-chain proof/verification service, which will be used to verify and audit off-chain data, including information such as bank account balances, to help projects achieve reliable verification of real-world assets and other off-chain data.

Taiko posted on platform X stating that all Proposers (nodes responsible for producing new blocks) have suspended block production. Taiko mentioned that the team is currently investigating the breach of the chain state validation mechanism and is continuously assessing the scope of the incident's impact and subsequent response measures. Previously, Taiko confirmed that its chain state validation mechanism had been compromised and advised users to immediately withdraw funds from cross-chain bridges deployed on Taiko.

Taiko posted on platform X that it has confirmed the chain state verification mechanism of Taiko has been compromised, and the security assumptions of all cross-chain bridges deployed on Taiko are no longer reliable.Taiko is coordinating with the security committee and ecosystem partners to control the situation, suspend affected systems, and take technical and legal action. Taiko strongly advises all users to immediately withdraw funds from all cross-chain bridges deployed on Taiko.Taiko urgently requests all centralized exchanges to suspend TAIKO token deposits until further notice. The attacker's address has been disclosed. Previously, it was reported that the Taiko ERC20 Vault was attacked, resulting in losses exceeding $1 million.

The Zodiac team released a security incident analysis report regarding the impact on the Zodiac Roles Modifier, disclosing that the root cause of the vulnerability lies in a flaw in the ERC-1271 transaction signature verification logic: the system only determines the validity of the signature based on the returned "magic value" without verifying whether the call itself was successful, which may disguise a failed verification as a valid signature, bypassing the module authentication mechanism.