Track market-moving stories before they get noisy

Upbit will suspend deposits and withdrawals of digital assets worth 1 million Korean won or more with BitMEX.

Upbit official announcement: Due to BitMEX terminating access to the travel rule solution VerifyVASP, Upbit will suspend digital asset deposits and withdrawals of 1 million KRW or more between the two exchanges starting October 16. Deposits under 1 million KRW will remain supported as normal. Manual deposits of 1 million KRW or more from BitMEX to Upbit will be discontinued from 14:00 on December 18. Any such assets received after that will enter a refund process, and users must retrieve them in accordance with the refund procedure.

5 minutes ago

BonkGuy's portfolio value increased by over $1 million in the past 24 hours.

Trader BonkGuy’s portfolio value has surged by over $1 million in the past 24 hours, now standing at $11.43 million. His current positions boast unrealized gains of roughly $5.63 million from PONS, $1.57 million from USELESS, and $1.43 million from MarsCoin, keeping him the top-ranked trader on the Fomo platform.

5 minutes ago

Data: Papertrade’s loss mining period lasted less than 6 days, with the top three addresses by trading volume each exceeding $10 billion.

According to EmberCN’s monitoring, since the Papertrade platform on the Hyperliquid chain launched loss mining on the 10th, the three addresses with the highest trading volumes have all surpassed $10 billion each in less than six days. The top address posted a trading volume of $11.6 billion, with trading losses of $780,000, earning 46 million PAPER tokens at an acquisition cost of $0.017 per token. The second address recorded $10.3 billion in trading volume, $930,000 in trading losses, and received 85 million PAPER tokens at an acquisition cost of $0.011 per token. The third address saw $10.1 billion in trading volume, $980,000 in trading losses, and obtained 252 million PAPER tokens at an acquisition cost of $0.0039 per token. The acquisition cost excludes PAPER token dividends; factoring in dividends would lower the cost further, with the third address potentially even holding a negative cost.

5 minutes ago

Bonk Guy's Portfolio Surges $1M+ in 24H, Maintains #FOMO Leaderboard Lead

As the market rebounds, Bonk Guy(@theunipcs)'s portfolio has grown by $1M+ in the past 24 hours.
He remains No. 1 on both #FOMO's 24H and All-Time leaderboards.

5 minutes ago

Hong Kong Exchanges and Clearing (HKEX) aims to transition to T+1 settlement in the second half of 2028.

Hong Kong Exchanges and Clearing (HKEX) has published a consultation summary document on shortening the settlement cycle of Hong Kong’s spot stock market, which shows widespread market support for implementing a T+1 settlement cycle in Hong Kong’s securities market. Based on feedback from various stakeholders, HKEX plans to complete the relevant transition in the second half of 2028, provided the market is ready and regulatory approval is obtained. The consultation received a total of 109 non-duplicate responses from market stakeholders including brokers, custodians, investment managers, industry associations, technology vendors, and investors. Respondents supported Hong Kong’s adoption of a T+1 settlement cycle, agreeing that this move will help enhance market efficiency, reduce settlement risks, improve capital efficiency, and consolidate Hong Kong’s competitiveness as an international financial center.

5 minutes ago

Microsoft completes pre-training of a 2.8-trillion-parameter model, outperforming the GPT-5.6 base model with only one-quarter of the computing power.

Beating AI News: Microsoft announces completion of pre-training for its new self-developed model MAI-Base-2. The model has a total of 2.8 trillion parameters, adopts a Mixture-of-Experts (MoE) architecture, and activates only 80 billion parameters per forward pass. Between August and September this year, Microsoft used 16,000 NVIDIA GB200 GPUs for 38 days of training, processing approximately 50 trillion tokens. The new model also introduces native visual pre-training for the first time, with visual data accounting for 18% of its training data.
Internal tests released by Microsoft show that MAI-Base-2 outperforms models including DeepSeek-V4-Pro-Base, Kimi K3, and Qwen3.8 on text prediction benchmarks for code, question answering, mathematics, and science and engineering disciplines. Microsoft also claims that training a model of equivalent performance to DeepSeek-V4-Pro-Base would require only 1/4 to 1/12 of the computing power using its approach. However, Microsoft has invested additional computing power to build a larger, more capable model; MAI-Base-2’s actual training computing power consumption is still higher than that of DeepSeek.
Microsoft AI head Mustafa Suleyman stated at an internal meeting on October 15 that MAI-Base-2’s pre-training base is already stronger than the OpenAI model supporting GPT-5.6 Sol, while requiring only one-fourth the training computing power. Microsoft improved MoE expert scheduling, Muon optimizer, and data filtering methods to reduce GPU memory waste and enhance the stability of large-scale training. The company also emphasized that all training data is processed in-house, and the model’s capabilities were not obtained through distillation of other firms’ models.
MAI-Base-2 is currently in the post-training phase. Microsoft plans to first deploy it for its own products, then license the model weights to enterprise partners via Foundry.

5 minutes ago

If you hold ZIL in a Legacy (zil1...) account, the ZKP Migration App provides a way to move that balance to a Zilliqa EVM (0x...) account you control. This guide explains where to get the app and what to expect at each stage.

Read this guide before starting. The process involves your wallet recovery phrase and a transfer of funds. Check every address carefully and use only the official links below. Zilliqa will never ask you to send your recovery phrase to anyone or enter it into a Google Form.

Download and install the appGet the app from Zilliqa’s official GitHub releases page. The download is named zkp-migration-app-linux-amd64.tar.gz.

The app runs directly on 64-bit Linux. On Windows, it runs through Ubuntu using Windows Subsystem for Linux (WSL). There is no separate Windows download.

Follow the guide for your computer:

Windows installation guideLinux installation guideBefore opening the app, compare your download’s SHA-256 checksum with the value published for the release, as described in the Linux guide. Windows users should perform this check too. If the values do not match, do not open the app.

Step 1 - Legacy Account Migration NoticeWhen you open the app, you'll see the Legacy Account Migration Notice. It explains what this app does in plain terms: please read it before you do anything. Click Continue once you've read it.

Step 2 - Downloading the circuit key fileThe app needs a Circuit Key File to generate your zero-knowledge proof. This downloads once and is cached on your device - you won't need to download it again on future runs. Wait for it to finish; you'll see a checksum-verification progress bar.

Once it shows Ready with a green checkmark, click Continue.

Step 3 - Enter your account detailsThis is the important step. You'll enter:

Your Legacy Account address - your old zil1... address.Your designated EVM Account address - the 0x... address you want your ZIL moved to. Double-check this carefully; this is where your funds will migrate to.Original seed wallet - choose LEDGER if your legacy wallet was a Ledger hardware wallet, or OTHERS for a standard software wallets. This determines which derivation path the app uses to recover your account from your seed phrase - picking the wrong one means the app won't find your account.⚠️ The app itself displays a warning at this step: "Enable Flight mode and disable WIFI for this step." You're about to enter your mnemonic seed phrase - the app wants you offline while it's in memory.Fill in your Mnemonic-seed, select the correct Language, then click Compute. The Passphrase field is optional - only fill it in if you originally set one on your wallet; leave it blank otherwise.

Step 4 - Computing the proofThe app now computes your zero-knowledge proof locally, on your device. Your seed phrase never leaves your machine - the app only ever generates the resulting proof, not your seed. The notice itself says this can take several minutes - be patient and don't close the app.

Step 5 - Submission & VerificationOnce computed, you get everything you need to actually complete the migration:

Send your wallet's ZIL balance to the Escrow Contract's legacy (zil1...) address shown on screen, from your legacy Schnorr wallet. Make sure you leave around 0.5 ZIL behind to cover gas fee.Copy the zero-knowledge proof calldata shown (a long hex string) - this is what proves your ownership and claims your funds to your designated EVM account.Submit that calldata one of two ways:Manually: if you'd rather not do that yourself, copy the calldata and submit it via the Google Form link shown on screen for manual processing.Automatically: if your wallet lets you send a transaction with raw hex data (MetaMask, Rabby, and most desktop browser-extension wallets do) then look for Hex Data under "Advanced details" on the send/confirm screen, sometimes labeled "Data" or "Input Data", send a 0-value transaction to the Escrow Contract address shown (the 0x... address on screen with the calldata pasted into that field.For added safety, the app suggests you may remove the Migration App and restart your device after submitting your proof.What happens nextOnce your calldata is submitted and your legacy balance has actually reached the Escrow Contract, your ZIL is released to your designated EVM account automatically - usually within 24 hours if you used the Google Form, immediately if you submitted the transaction yourself directly to the Escrow Contract.

If you need help, use Zilliqa’s official support channels. Never share your recovery phrase, private key, or wallet passphrase with anyone, including someone offering migration support.

Source: Binance EN

This is a general announcement and marketing communication. Products and services referred to here may not be available in your region. Fellow Binancians, Following the security incident on Zilliqa, the project team has announced the migration of Zilliqa (ZIL) from the Zilliqa mainnet to the ZILEVM Network. As such, Binance will discontinue the mainnet support of Zilliqa (ZIL), and support the network migration to the ZILEVM Network. General Deposits and WithdrawalsAt 2026-08-05 01:00 (UTC), deposits and withdrawals of the aforementioned token via the Zilliqa mainnet were suspended.Zilliqa (ZIL) will be migrated from the Zilliqa mainnet to the ZILEVM Network at a ratio of 1:1.Once the network migration is complete, Binance will open deposits and withdrawals of Zilliqa (ZIL) via the ZILEVM network without any further notice. Deposits and withdrawals will no longer be supported on the Zilliqa mainnet.Spot, Margin, Futures trading and Binance Earn services will not be impacted during the network migration.Binance will handle all technical requirements for users who are involved in this event. Note: There may be discrepancies between this original content in English and any translated versions. Please refer to the original English version for the most accurate information, in case any discrepancies arise. Thank you for your support! Binance Team 2026-09-22

Binance has moved to support Zilliqa’s EVM network for ZIL deposits and withdrawals as the blockchain retires its legacy transaction system following a security incident that exposed thousands of accounts.

Summary

Binance will migrate ZIL from the legacy Zilliqa network to Zilliqa EVM at a 1:1 ratio and handle the process for users. Zilliqa is retiring its legacy transaction system after a Ledger app flaw exposed 6,772 accounts and led to at least 683.13 million ZIL being stolen. ZIL trading on Binance will remain unaffected, while future deposits and withdrawals will be processed through Zilliqa EVM. Self custody holders are being moved through a separate zero knowledge proof based migration process designed to retire exposed legacy keys. Binance said ZIL will be migrated from legacy Zilliqa mainnet addresses to the Zilliqa EVM network at a 1:1 ratio, with the exchange handling the technical process for users who hold the token on its platform.

Deposits and withdrawals through the legacy Zilliqa network have remained suspended on Binance since Aug. 5 at 01:00 UTC. Once its migration is complete, the exchange will open ZIL deposits and withdrawals through Zilliqa EVM without issuing a separate announcement.

Legacy Zilliqa deposits and withdrawals will no longer be supported after the migration. Spot trading, margin trading, futures and Binance Earn products involving ZIL will remain available during the process.

The Binance move forms part of Zilliqa’s ongoing effort to migrate exchanges, custodians and individual holders away from its legacy Schnorr based transaction system after a flaw in the Zilliqa Ledger application left some private keys vulnerable.

Zilliqa migration follows Ledger signing flaw The migration stems from a vulnerability in Zilliqa’s Ledger application that affected native, non EVM transactions signed using Ledger devices.

As crypto.news previously reported, the problem involved the way the application generated Schnorr signatures. Each signature requires a random secret number, known as a nonce, but the affected application incorrectly copied the generated data into the signing buffer.

Zilliqa’s Aug. 20 post mortem found that the error left the top 64 bits of each nonce fixed at zero, reducing the randomness needed to protect a private key. An attacker could use several public signatures from the same account to reconstruct its private key.

The defect had been present in every released version of the Zilliqa Ledger application between 2019 and 2026. Zilliqa said the first proven theft occurred on March 4, months before the problem was detected.

Activity picked up in July, and KuCoin notified Zilliqa on July 19 after finding unusual outgoing transactions from one of its cold wallets. Zilliqa disabled legacy transactions on July 20 before identifying the root cause the following day.

The project later confirmed at least 683.13 million ZIL had been stolen across 66 transactions. A total of 6,772 accounts were identified as exposed, while 51 accounts were drained. Zilliqa described both figures as minimum confirmed totals because further exposed accounts could still be identified.

Initial details were much more limited when ZIL transfers were suspended in July. At the time, Zilliqa disclosed that an exchange partner had suffered a cold wallet theft but had not identified the attack method or the amount involved.

Zilliqa EVM transactions were not affected by the vulnerability. The project said software wallets using its supported SDKs generated nonces correctly, while the recovery phrase stored on Ledger devices was not exposed.

ZIL balances are moving to EVM addresses Fixing the Ledger application could prevent new weak signatures, but Zilliqa said it could not secure private keys that had already been exposed through signatures stored permanently onchain.

The project consequently chose to retire the legacy non EVM transaction system and move users to Zilliqa EVM. Legacy addresses are being retired as balances are reassigned at the protocol level to EVM addresses.

Exchange migrations have been carried out in batches because each participating platform must provide and verify its EVM wallet addresses before balances can be reassigned.

The first exchange migration hard fork took place on Sept. 2, moving balances held in legacy Schnorr based wallets to EVM addresses supplied by participating exchanges.

KuCoin, MEXC, OKCoin, Binance US, Bitvavo, Korbit, Indodax, Bitrue, WhiteBIT, CoinSpot and CoinSwitch were included in the first batch. Users holding ZIL on the participating exchanges were not required to take any action.

A second hard fork was scheduled for Sept. 22 and covered CoinEx, HTX, Bitkub, GOPAX, Coinone, OKX, LBank, Crypto.com, Gate, Paribu, CEX.IO and Bitget.

Bybit and Bithumb were expected to join a third migration hard fork, while Zilliqa said it remained in contact with other platforms as address mappings were collected and verified.

Binance had remained outside the earlier batches. Its latest announcement now confirms that the exchange will stop supporting the old network and move its ZIL deposit and withdrawal infrastructure to Zilliqa EVM.

Self custody holders have a separate ZIL migration route Exchange customers are not the only holders affected by the retirement of legacy addresses.

Zilliqa has developed a zero knowledge proof based migration system for users who hold ZIL in their own legacy wallets. The system is designed to allow a holder to prove ownership of an old address and transfer the associated balance to an EVM address without giving Zilliqa a seed phrase or private key.

The audit of the ZKP migration tool has been completed, according to a September update from Zilliqa, with internal testing following the security review. Its rollout was targeted for Sept. 22 alongside activation of an escrow contract required for the migration process.

The project has warned users against attempting to move funds through exposed legacy keys. Once an attacker reconstructs a private key from old signatures, both the legitimate holder and attacker can sign transactions from the account.

Legacy transactions were therefore disabled for all holders, including accounts that were never exposed. Zilliqa said freezing the old transaction system prevented attackers with reconstructed keys from moving funds while the migration process was being prepared.

Balances linked to ZIL already stolen during the incident are being handled separately and are not automatically restored through the exchange migration hard forks.

Zilliqa has been working with exchanges and law enforcement to trace the stolen assets. Its post mortem said an exchange account used to liquidate part of the stolen funds had been identified and frozen, while the project was working with Singapore Police and a law firm on the recovery process.

The team has separately proposed a community vote on changes to ZIL tokenomics that could include minting tokens to compensate affected holders. Zilliqa said details covering eligibility, amounts and mechanics would be released with the governance proposal because any new issuance would change ZIL supply.

Zilliqa EVM becomes the network’s production environment Zilliqa’s move toward EVM infrastructure began before the Ledger incident.

The blockchain transitioned to Zilliqa 2.0 in June 2025, bringing full Ethereum Virtual Machine compatibility alongside a proof of stake consensus system and changes to the network’s architecture.

Its six month testing period involved 21 external validators, with the proto mainnet processing 7.5 million blocks and completing 15 client upgrades before the transition.

Legacy transaction support continued after Zilliqa 2.0 went live, leaving the blockchain with both the older native transaction infrastructure and its EVM environment.

Zilliqa said the Ledger incident brought forward a decision it had already been considering to retire the old infrastructure completely. The project described the legacy stack as an increasing development and security liability and said Zilliqa EVM would become its sole production environment.

The security incident came after several earlier technical problems involving the blockchain, though Zilliqa has not linked those outages to the Ledger vulnerability. A January 2025 network outage was attributed to problems involving lookup nodes, while a separate bug in September 2024 had halted block production.

Zilliqa’s post mortem said the patch for the Ledger application was submitted on July 24 and merged by a Ledger engineer on July 27. The corrected version restores full nonce generation for new signatures, while private keys already exposed through earlier legacy signatures must be retired.

Not financial or tax advice. PANews content is strictly educational and informational and is not investment advice, financial advice, tax advice, legal advice, or a solicitation to buy or sell any digital asset, security, or financial product. Do your own research and consult qualified advisers.

Disclosure. PANews may publish sponsored content, partner content, advertisements, affiliate links, event promotions, and market commentary involving Web3 projects, service providers, or financial products. PANews personnel, contributors, or affiliates may hold digital assets or other interests related to covered topics. See our Terms of Service.

This site is protected by reCAPTCHA.

Not financial or tax advice. PANews content is strictly educational and informational and is not investment advice, financial advice, tax advice, legal advice, or a solicitation to buy or sell any digital asset, security, or financial product. Do your own research and consult qualified advisers.

Disclosure. PANews may publish sponsored content, partner content, advertisements, affiliate links, event promotions, and market commentary involving Web3 projects, service providers, or financial products. PANews personnel, contributors, or affiliates may hold digital assets or other interests related to covered topics. See our Terms of Service.

This site is protected by reCAPTCHA.

Zilliqa has suspended native ZIL transactions after disclosing a critical flaw in its Ledger application that can allow attackers to recover private keys from public transaction signatures. 

Summary

Zilliqa halted native transactions after a Ledger app flaw exposed private keys from public signatures. Accounts signing roughly five native transactions with Ledger devices should be treated as compromised permanently. Upbit flagged ZIL as cautionary while EVM transactions and Zilliqa software development kits remain unaffected. The bug affected every released version of the app from 2019 through 2026 and applies to native, non-EVM transactions signed with Ledger devices.

The network said it observed onchain activity consistent with active exploitation on July 19 and confirmed the root cause on July 21. Zilliqa has prepared a corrected Ledger app build, but the fix cannot protect keys exposed through earlier signatures. Native transactions remained suspended in the latest official update while the team finalized a coordinated recovery plan.

Zilliqa Ledger bug weakened transaction signatures The flaw affected how the Zilliqa Ledger app generated Schnorr signatures for native transactions. Each signature needs a fresh random number, known as a nonce, to protect the private key. Zilliqa said the app generated enough random data but copied the wrong 32 bytes into the signing process. The mistake left the highest 64 bits of every nonce fixed at zero.

The reduced randomness allowed attackers to compare several public signatures from the same account and reconstruct its private key. Zilliqa said accounts that broadcast roughly five or more affected native transactions should be treated as compromised. The project said the recovery process can take seconds on ordinary hardware once enough signatures are available.

Because the signatures remain permanently recorded onchain, updating the Ledger app cannot repair an already exposed key. Zilliqa said affected keys must be retired. It also warned against simply moving funds when transactions restart because an attacker holding the recovered key could try to send a competing transaction.

Native transactions stop while EVM users remain unaffected Zilliqa suspended native transactions after identifying the flaw, blocking further native transfers while the team develops a method to protect affected balances. The project asked Ledger users who signed native transactions to wait for official instructions.

“Users who have signed native Zilliqa transactions with a Ledger device should await official guidance before taking any action,” Zilliqa noted.

The issue does not affect EVM transactions, according to Zilliqa. The project also said its software development kits, including zilliqa-js, gozilliqa-sdk and pyzil, generate nonces correctly. Users who only transact through EVM-compatible tools therefore sit outside the affected signing path.

Nonce-Generation Vulnerability in the Zilliqa Ledger App: A critical vulnerability has been identified in the Zilliqa Ledger application affecting the generation of Schnorr signatures for native (non-EVM) Zilliqa transactions. The vulnerability causes signatures to be generated… https://t.co/sudV7WA3TV

— Zilliqa (@zilliqa) July 22, 2026 Zilliqa credited KuCoin with helping trace the problem. The exchange recovered affected private keys from public signatures, helped confirm active exploitation and assisted in identifying the faulty nonce-generation process. Zilliqa said the cooperation helped it introduce protective measures while preparing a broader recovery plan.

Upbit places ZIL under caution after disclosure South Korean exchange Upbit placed ZIL under cautionary status after the vulnerability became public. The designation covers its KRW and BTC markets, while ZIL deposits and withdrawals remain suspended. Trading support could face further review if the issue is not resolved through the exchange’s monitoring process.

The exchange action comes while Zilliqa works on securing balances controlled by keys that may already be recoverable. A corrected Ledger build has been prepared, but the project has not yet published its full recovery procedure or announced when native transactions will resume.

As crypto.news reported on July 20, Zilliqa had already asked exchanges to pause ZIL deposits and withdrawals after an exchange partner reported a cold-wallet theft. At that stage, the project had not disclosed the stolen amount, affected exchange or attack method. Zilliqa has not publicly stated whether that earlier theft was caused by the Ledger flaw.

Bug follows earlier Zilliqa network disruptions The Ledger vulnerability differs from earlier Zilliqa outages because it affects private-key security rather than block production or node synchronization. Still, the disclosure follows several technical disruptions that affected the network in previous years.

Moreover, Zilliqa announced a permanent fix in September 2024 after a bug halted block production. The network later suffered another outage in January 2025 linked to node synchronization problems before restoring full service. Zilliqa has not connected those incidents to the Ledger app flaw.

The current issue also sits outside Ledger hardware itself. Zilliqa described the problem as a defect in its own Ledger application’s native signing code. The corrected build restores full-width nonce generation and should prevent new weak signatures once released.

For affected users, the old transaction history remains the main risk. Public signatures cannot be removed from the blockchain. Zilliqa said users who signed about five or more native transactions with a Ledger device should consider their keys compromised and wait for recovery instructions. The network has not announced a date for restoring native transactions.

US Senator Cynthia Lummis: In the coming days, she will continue to push for a bipartisan agreement on the CLARITY Act to enact it into law.

US Senator Cynthia Lummis released a statement thanking her Democratic colleagues for their key contributions to the new draft of the CLARITY Act, and pledged to continue pushing for an agreement in the coming days to get the bill enacted into law. Lummis noted that consumer protection and supporting innovation are not mutually exclusive, adding that the draft demonstrates both goals can be achieved simultaneously. Earlier reports indicated that Senate Republicans unveiled the new version of the CLARITY Act following a briefing call with industry stakeholders. The revised text proposes to ban officials including the U.S. president, vice president, members of Congress, federal judges, and their spouses from receiving compensation via issuing or sponsoring digital assets while in office; the relevant provisions will remain in effect until January 20, 2029. Restricted officials must also sell their crypto assets and investments in crypto-related firms, or place them in blind trusts over which they have no control; sales of crypto assets exceeding $1,000 are required to be disclosed.

3 hours ago

The CLARITY Act adds, for the first time, provisions restricting the president and government officials from profiting through crypto assets.

According to CNBC, the new CLARITY Act under consideration by the U.S. Senate would ban the president and other federal officials from issuing or sponsoring cryptocurrencies and other digital assets. Republican lawmakers updated the bill’s text on Wednesday, adding for the first time provisions restricting the president from profiting from crypto assets, with the rules applying to both the president and other federal officials. The CLARITY Act is designed to be the U.S.’s first comprehensive piece of legislation regulating the digital asset market, and remains pending in the Senate.

3 hours ago

The revised CLARITY Act has been officially released, prohibiting the president and government officials from issuing or sponsoring crypto assets for profit.

Crypto journalist Eleanor Terrett reported that U.S. Senate Republicans have released a revised version of the CLARITY Act following a briefing call with industry stakeholders. The ethics framework in the revised bill was developed by the White House in consultation with Republican Senators Cynthia Lummis and Bernie Moreno, and has not yet secured Democratic backing. The new text would bar U.S. officials—including the president, vice president, members of Congress, federal judges—and their spouses from earning compensation during their terms via issuing or sponsoring digital assets; these provisions are set to expire on January 20, 2029. Covered officials must sell their crypto assets and investments in crypto firms, or place them in blind trusts over which they have no control, with sales of crypto assets exceeding $1,000 requiring disclosure. The U.S. Department of Justice would be granted civil enforcement authority for ethics violations, including prosecuting trading platforms that knowingly operate banned tokens. However, Democrats oppose granting the DOJ sole enforcement power without extending authority to state attorneys general, and the relevant provisions could still be adjusted in the coming days. The revised bill retains the BRCA and Keep Your Coins Act, clarifying that non-custodial software developers and blockchain infrastructure providers will not be classified as money transmitters solely for maintaining decentralized networks, while safeguarding individuals’ right to self-custody of crypto assets. Stablecoin provisions remain unchanged: interest on idle payment stablecoin balances is banned, but rewards tied to actual activities like trading or staking are permitted.

3 hours ago

Report: Crypto industry contributes $55 billion to U.S. economy, directly employs 34,000 people

The US National Cryptocurrency Association released a report stating that the US crypto industry directly employs 34,000 people; when including jobs supported by supplier industries and consumer spending of related workers, total employment in the sector is roughly 232,000. The report projects that by 2026, the industry will contribute over $55 billion to US GDP, with around $31 billion flowing to workers as labor income. Of the 232,000 supported jobs, approximately 75,000 come from supplier industries, and another 123,000 are driven by household spending of related employees. These figures are based on multiplier effects from input-output models and do not represent direct hires by crypto firms. Among the 34,000 direct roles, software, blockchain, and data engineering positions are the most numerous, at about 10,100. Regionally, California and New York support 57,649 and 53,766 jobs respectively, totaling over 111,000; Texas accounts for roughly 26,536 jobs. The 12 US heartland states defined in the report collectively support around 17,000 jobs. The report was commissioned and funded by the National Cryptocurrency Association, with analysis conducted by Pragmatic Policy Group. Its estimates are based on the US Bureau of Economic Analysis’ 2024 input-output tables and $23.22 billion in crypto industry revenue data, with model assumptions incorporated into occupational structure and industry mapping.

3 hours ago

The development company behind Pump.fun is hiring a Growth Marketing Lead, offering a base annual salary of up to $1 million.

Baton Corporation, the developer behind Pump.fun, is hiring a Head of Growth Marketing, with a base annual salary of $400,000 to $1,000,000 plus performance-based incentives. Pump.fun founder Alon noted that the platform has grown to become one of the largest in the crypto industry with almost no paid marketing. The company’s next goal is to transition Pump.fun from a crypto-native product to the mainstream market, targeting an application with hundreds of millions of users. The role requires candidates to have hands-on experience in consumer app growth, a proven track record managing multi-million dollar marketing budgets, and familiarity with strategies including digital advertising, user-generated content (UGC), and short-form video clips.

3 hours ago

灰度：若美联储不再加息，比特币或已触底

Zach Pandl, head of research at Grayscale, wrote in a post that the market currently holds two main views on when Bitcoin’s bear market will end: one is adherence to the "four-year cycle" theory, and the other is viewing Bitcoin as a mature asset driven by macroeconomic factors. The "four-year cycle" theory holds that halving events remain the core driver of Bitcoin’s price cycles. Historically, Bitcoin has typically bottomed roughly one year after a cycle peak and about 2.5 years after a halving, with an average cumulative drawdown of around 80%. Based on this pattern, Bitcoin could still decline further in the current cycle and form a bottom in September or October. The other view argues that Bitcoin’s price will, like other major assets, be more influenced by economic growth, real interest rates, and changes in Federal Reserve policy going forward. Past Bitcoin bear markets have typically coincided with slowing economic growth or rising real interest rates, and this current downturn has unfolded against a backdrop of rising rate hike expectations and climbing real interest rates. Pandl noted he leans more toward the macro-driven view. If the Fed stops raising interest rates and economic growth remains stable, Bitcoin’s price may have already bottomed.

3 hours ago

Layer-1 blockchain network Zilliqa warned that a vulnerability in the Zilliqa Ledger app could allow attackers to recover users’ private keys using publicly available onchain data.

“The vulnerability causes signatures to be generated with predictably weakened ephemeral nonces, from which an attacker can recover the signer’s private key,” Zilliqa said in a Wednesday X post.

Zilliqa said protective measures are in place to prevent further losses and that a coordinated remediation plan is being finalized. Users who signed at least five native Zilliqa transactions with a Ledger device are considered compromised and are advised to await further guidance before taking any action.

The warning comes after Zilliqa on Monday asked exchanges to temporarily pause Zilliqa (ZIL) deposits and withdrawals after identifying a security vulnerability that resulted in the theft of an undisclosed amount of ZIL from a cold wallet.

Zilliqa said it will publish a corrected version of the app in coordination with Ledger. It said that users transacting ZIL through EVM-compatible tooling were not affected.

The ZIL token fell 1.5% in the past 24 hours and 17% over the past week, to trade above $0.0024 at publication, according to CoinMarketCap.

Magazine: How a ‘Wrong Number’ message turned into a $3.4M crypto scam

Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.

Not financial or tax advice. PANews content is strictly educational and informational and is not investment advice, financial advice, tax advice, legal advice, or a solicitation to buy or sell any digital asset, security, or financial product. Do your own research and consult qualified advisers.

Disclosure. PANews may publish sponsored content, partner content, advertisements, affiliate links, event promotions, and market commentary involving Web3 projects, service providers, or financial products. PANews personnel, contributors, or affiliates may hold digital assets or other interests related to covered topics. See our Terms of Service.

This site is protected by reCAPTCHA.

THE BLOCK: Zilliqa halts native transactions over bug in its Ledger app dating to 2019

Cover image via U.Today Disclaimer: The opinions expressed by our writers are their own and do not represent the views of U.Today. The financial and market information provided on U.Today is intended for informational purposes only. U.Today is not liable for any financial losses incurred while trading cryptocurrencies. Conduct your own research by contacting financial experts before making any investment decisions. We believe that all content is accurate as of the date of publication, but certain offers mentioned may no longer be available.

Major South Korean cryptocurrency exchange Upbit has flagged Zilliqa (ZIL) as a cautionary asset following the discovery of a critical vulnerability in its Ledger application.

According to Wu Blockchain, Upbit has placed ZIL under cautionary asset status, raising concerns over the token's future trading support on the crypto exchange, with the possibility of delisting it if the security issue isn't resolved.

Zilliqa Ledger App Flaw Exposes Private Keys, Upbit Flags ZIL as a Cautionary Asset

Zilliqa disclosed a critical nonce-generation flaw in its Ledger app that allows private keys to be recovered from public signatures after about five native transactions. The issue affected all… pic.twitter.com/uMfV9ZbepR

— Wu Blockchain (@WuBlockchain) July 22, 2026 Earlier today, July 22, Zilliqa disclosed a critical nonce-generation flaw in its Ledger app that allows private keys to be recovered from public signatures after about five native transactions.

The issue affects all versions released from 2019 to 2026, with active exploitation observed on July 19. Native Zilliqa transactions have been suspended, with affected keys set to be retired, while EVM transactions are unaffected.

HOT Stories

You Might Also Like

Upbit subsequently designated ZIL as a cautionary asset across its KRW and BTC markets. ZIL deposits and withdrawals remain suspended, and trading support may be terminated if the issue is not resolved.

What happened?On July 22, Zilliqa announced the discovery of a nonce-generation vulnerability in its Ledger app in an X post.  

You Might Also Like

A critical vulnerability was identified in the Zilliqa Ledger application affecting the generation of Schnorr signatures for native (non-EVM) Zilliqa transactions. The vulnerability causes signatures to be generated with predictably weakened ephemeral nonces, from which an attacker can recover the signer's private key using only publicly available on-chain data.

The Zilliqa team noted that protective measures are already in place to prevent further loss, and a coordinated remediation plan is being finalized.

The vulnerability affects private keys used to sign native Zilliqa transactions with a Ledger device, and any account that has broadcast about five or more native transactions signed through the Zilliqa Ledger app should be considered compromised. This is because their private keys can be reconstructed from signatures already recorded on-chain, regardless of any subsequent software update.

The issue is, however, confined to the Ledger app's native signing path, with EVM transactions unaffected.

Table of contents

A hardware wallet vulnerability that went undetected for seven years has forced Zilliqa to suspend all native transactions after attackers began exploiting the flaw on July 19. The nonce-generation bug in the Zilliqa Ledger app allowed private keys to be recovered from public signatures after roughly five on-chain transactions, according to the original report. Every version released between 2019 and 2026 was affected.

The disclosure has already triggered a sharp exchange-side response. South Korea’s Upbit designated ZIL as a cautionary asset across both its KRW and BTC trading pairs, suspended deposits and withdrawals, and warned that trading support could end entirely if the problem is not remedied quickly. The move immediately amplifies the pressure on Zilliqa’s development team, who must now contend not only with patching the flaw but also with the specter of losing one of its most important exchange listings.

How the Flaw Compromises Security The vulnerability sits at the intersection of hardware wallet design and Zilliqa’s nonce implementation. A nonce—a number used once—is supposed to ensure that each transaction signature is unique. When nonces are generated incorrectly, an observer who collects multiple signatures from the same private key can reconstruct the key itself. The problem is especially dangerous because it requires no malware on the user’s device; an adversary only needs to see the publicly broadcast signatures from about five native transfers. The exploit timeline suggests active exploitation began before the public advisory, raising the possibility that funds were taken before the network could react.

Zilliqa’s immediate mitigation was to halt native transactions altogether. EVM-based activity on the network is not affected, but for many long-term holders who used the Ledger app, retiring the compromised keys is now a necessity. That process—generating new wallets and moving assets—carries its own risks if users are not careful. Meanwhile, the incident casts a long shadow over trust in hardware wallet integrations for lesser-known chains, where security audits may have been thinner than for Ethereum or Bitcoin.

Upbit’s Cautionary Flag and the Delisting Threat Upbit’s cautionary asset designation is not a full delisting, but it functions as a public warning that the exchange’s risk management team sees a material threat to user funds. Korean exchanges have grown increasingly aggressive with such flags following regulatory guidance and past incidents, where failure to act quickly drew scrutiny. The parallel between this action and the broader push for exchange accountability is hard to ignore—as regulatory pressures on crypto infrastructure intensify, trading platforms have little tolerance for assets that introduce custody-layer risk.

For ZIL’s liquidity, the suspension of deposits and withdrawals on a major venue like Upbit tightens available exit routes for Korean traders. While the token remains listed for now, the warning creates a binary outcome: either Zilliqa patches the flaw and satisfies Upbit’s review, or trading is terminated. In the interim, market participants are watching whether other exchanges follow Upbit’s lead, which would compound the token’s liquidity squeeze.

What Remains Unresolved The extent of the damage is still unclear. Neither Zilliqa nor Upbit has disclosed how many private keys were actually compromised during the exploitation window, nor what the total loss in dollar terms may be. Additionally, the fact that the flaw existed across every Ledger app version for seven years raises questions about the chain’s overall security review process and how many other integrated apps may contain similar nonce-generation weaknesses. Developer confidence metrics have already become a yardstick for chain health, as tracked by efforts like weekly developer activity rankings, and incidents like this one can erode that confidence quickly.

For hardware wallet users, the advisory is a reminder that a Ledger device does not eliminate risk—it only shifts it. A vulnerability in an app that signs transactions can be just as devastating as a compromised seed phrase. The Zilliqa incident will likely prompt a fresh round of audits across Ledger integrations for other chains, particularly those with smaller developer communities where such flaws could persist without notice. Until those audits are complete, the market will have to price in the possibility that similar vulnerabilities are lurking elsewhere.

AUTHOR

Kester is an experienced freelance content writer. His focus is primarily on blockchain technology and cryptocurrency. One might even refer to him as a "blockchain enthusiast." He has been following advancements in the crypto and blockchain area for several years, researching and writing his insights in the media. In addition to being a skilled content writer, Mushumir is also knowledgeable in SEO and digital marketing. He aspires to succeed as a content creator in the digital realm, dealing with customers in the finance and tech industries to generate traffic through engaging taglines and content. Mushumir enjoys traveling, reading, and playing cricket when he is not writing. He now works as a news and article writer for BlockchainReporter.

TL;DR Zilliqa found a Ledger app flaw that exposes private keys after roughly five native transactions. Native ZIL transactions were suspended, while EVM transactions remain unaffected. Upbit designated ZIL as a cautionary asset and warned trading support could be terminated. A patched Ledger app is ready, but compromised wallets will require new keys under a coordinated recovery plan. Zilliqa has suspended native transactions after uncovering a critical vulnerability in its Ledger application that could allow attackers to reconstruct users’ private keys from publicly available blockchain signatures. The security issue, which existed in every released version of the Zilliqa Ledger app between 2019 and 2026, prompted South Korean crypto exchange Upbit to designate ZIL as a cautionary asset, raising the possibility of further trading restrictions if the issue is not fully resolved. 

The blockchain team said the flaw affects only native (non-EVM) Zilliqa transactions signed with Ledger hardware wallets. According to the disclosure, any wallet that signed approximately five or more native transactions using the affected Ledger app should be considered compromised because its private key can be mathematically reconstructed from signatures already recorded on-chain.

To limit further losses, Zilliqa has halted all native transactions while it finalizes a coordinated recovery plan. The project stressed that users who may be affected should avoid taking independent action and instead wait for official instructions, warning that simply transferring funds would not adequately protect compromised wallets because attackers could potentially front-run any transaction once the network resumes. 

Nonce-Generation Vulnerability in the Zilliqa Ledger App: A critical vulnerability has been identified in the Zilliqa Ledger application affecting the generation of Schnorr signatures for native (non-EVM) Zilliqa transactions. The vulnerability causes signatures to be generated… https://t.co/sudV7WA3TV

— Zilliqa (@zilliqa) July 22, 2026

Signature Flaw Traced to Weakened Nonce Generation The vulnerability stems from an error in the app’s implementation of Schnorr signatures, which authenticate native Zilliqa transactions.

Each Schnorr signature relies on a unique, randomly generated ephemeral nonce. While the app initially generated enough randomness, a coding mistake copied the wrong 32-byte segment into the signing buffer. As a result, the most significant 64 bits of every nonce were fixed to zero, dramatically reducing the randomness required to keep private keys secure.

Security researchers explained that once around five affected signatures become publicly available, attackers can recover the corresponding private key within seconds using commodity hardware through a well-known cryptographic attack called the Hidden Number Problem solved via lattice reduction techniques. Because those signatures are permanently stored on-chain, updating the Ledger application cannot eliminate the exposure for wallets that have already signed vulnerable transactions. Those keys must ultimately be retired. 

Zilliqa emphasized that the issue is isolated to the Ledger application’s native signing path. Users interacting exclusively through the network’s EVM-compatible environment or using official software development kits such as zilliqa-js, gozilliqa-sdk, and pyzil are not affected. 

Ziliqa Exploitation Detected Before Public Disclosure According to Zilliqa’s incident timeline, the defect had existed unnoticed across every Ledger app release since 2019.

The team said suspicious on-chain activity consistent with active exploitation was first observed on July 19. Engineers isolated the root cause two days later after reproducing the attack using publicly available blockchain signatures.

A corrected version of the Ledger application has already been prepared in coordination with Ledger and restores proper nonce generation. However, the update cannot secure wallets whose private keys have already been exposed, making a broader remediation process necessary before native transactions can safely resume. 

Zilliqa also credited KuCoin’s security team for helping identify the vulnerability, successfully recovering affected private keys from public signatures during the investigation, and confirming that the exploit was actively being abused. 

Following the disclosure, Upbit classified ZIL as a cautionary asset across its KRW and BTC markets, citing unresolved security concerns. The exchange has already suspended deposits and withdrawals and warned that trading support could ultimately be terminated if the project fails to sufficiently address the incident.

According to Upbit’s notice, the review period is expected to continue until the third week of August, after which the exchange will decide whether to remove the cautionary designation, extend the review, or delist the token altogether depending on the progress of Zilliqa’s remediation efforts. 

Bir dönem kripto para piyasasının en popüler Layer 1 projeleri arasında gösterilen Zilliqa (ZIL), yaşanan güvenlik ihlaliyle yeniden gündeme geldi. Proje ekibi, borsa ortaklarından birinin siber saldırıya uğradığını ve soğuk cüzdanda saklanan ZIL varlıklarının çalındığını doğruladı. Güvenlik ihlalinin ardından olası ek kayıpların önüne geçmek amacıyla tüm kripto para borsalarına ZIL yatırma ve çekme işlemlerini geçici olarak durdurmaları yönünde çağrı yapıldı. Olayın kapsamı henüz netlik kazanmazken, yatırımcılar hem çalınan fonların akıbetine hem de soruşturmadan gelecek resmi açıklamalara odaklanmış durumda.

Zilliqa Güvenlik İhlalini Doğruladı Zilliqa tarafından yapılan resmi açıklamada, borsa ortaklarından birinin güvenlik ihlaline maruz kaldığı ve saldırganların soğuk cüzdanda tutulan ZIL varlıklarına erişim sağladığı belirtildi. Proje ekibi, olayın kapsamının henüz tam olarak belirlenemediğini ve güvenlik ihlalinin nedeninin araştırıldığını ifade ederken, ilgili taraflarla koordineli şekilde çalışmaların sürdüğünü açıkladı. Yaşanan güvenlik ihlalinin ardından Zilliqa ekibi, çalınan varlıkların hareket ettirilmesini önlemek amacıyla tüm kripto para borsalarından ZIL yatırma ve çekme işlemlerini geçici olarak askıya almalarını talep etti.

İlginizi Çekebilir: Bitcoin 65 Bin Dolarda Takıldı: Gözler Yeni Zirvede!

Bu adımın, olası ek kayıpların önüne geçmek ve çalınan fonların izlenmesini kolaylaştırmak amacıyla atıldığı belirtildi. Şirket, saldırıya uğrayan borsa ortağının ismini ve çalınan ZIL miktarını henüz kamuoyuyla paylaşmadı. Yetkililer, soruşturmanın devam ettiğini ve doğrulanmamış bilgilerin paylaşılmasının süreci olumsuz etkileyebileceğini ifade etti.

“Soruşturma aktif olarak devam ediyor. Doğrulanmış bilgiler elde edildikçe yeni güncellemeler paylaşacağız. Kullanıcıların yalnızca resmi Zilliqa kanallarından yapılan açıklamaları takip etmeleri önem taşıyor.”

Bithumb Daha Önce de ZIL İşlemlerini Durdurmuştu Güney Kore merkezli kripto para borsası Bithumb da yaşanan güvenlik endişelerinin ardından ZIL yatırma ve çekme işlemlerini geçici olarak askıya aldığını duyurdu. Bu gelişme, saldırının etkilerinin yalnızca tek bir platformla sınırlı kalmayabileceğine yönelik endişeleri artırırken, yatırımcılar soruşturmadan gelecek yeni açıklamalara odaklandı. Güvenlik ihlalinin duyurulmasının ardından ZIL fiyatında kısa süreli bir satış baskısı görüldü. Ancak panik satışlarının azalmasıyla birlikte altcoin kayıplarının bir bölümünü geri almayı başardı. Analistler, soruşturmanın sonucuna ve çalınan fonların durumuna ilişkin yapılacak resmi açıklamaların ZIL fiyatının kısa vadeli yönü üzerinde belirleyici olacağını ifade ediyor.

Değerlendirme Zilliqa ekosisteminde yaşanan güvenlik ihlali, yatırımcıların güvenlik risklerine yönelik endişelerini yeniden gündeme taşıdı. Proje ekibinin borsalara yaptığı geçici işlem durdurma çağrısı, olası zararların büyümesini önlemeyi hedeflerken, saldırının kapsamına ilişkin belirsizlik sürüyor. Uzmanlar, soruşturmadan gelecek yeni bilgilerin hem ZIL fiyatı hem de yatırımcı güveni açısından kritik önem taşıdığını değerlendiriyor.

Son Dakika kripto para haberleri için hemen tıkla.

Konu ile ilgili yorumlarınızı bize yazabilirsiniz. Ayrıca, bu tarz bilgilendirici içeriklerin devamının gelmesini isterseniz, bizleri Telegram, Youtube ve Twitter kanallarımızdan takip edebilirsiniz.

FATF Releases Seventh Virtual Asset/VASP Standard Implementation Update: Global Regulation Advances, but Enforcement and DeFi Oversight Still Show Significant Gaps

The international anti-money laundering standard-setter FATF (Financial Action Task Force) recently released a report stating that global regulation of virtual assets (VA) and virtual asset service providers (VASP) continues to progress, with 86% of jurisdictions having completed risk assessments and 83% having legislated to implement the Travel Rule. The proportion of jurisdictions rated “largely compliant” with R.15 rose to 34%. However, significant deficiencies remain in enforcement, VASP identification, offshore VASP regulation, and DeFi regulation. The report also warns of emerging risks such as stablecoin abuse, non-custodial wallet P2P transactions, offshore VASPs, DeFi, and AI-assisted fraud, and calls for strengthened international cooperation, risk-based regulation, and public-private collaboration.

Zilliqa: ZIL Stolen from an Exchange’s Cold Wallet, All Exchanges Notified to Temporarily Suspend ZIL Deposits and Withdrawals

The project team learned that one of its exchange partners suffered a security incident, resulting in some ZIL being stolen from a cold wallet. The incident is currently under joint investigation by multiple parties, and the specific scale and cause of the theft have not yet been disclosed. As a precautionary measure, Zilliqa has notified all exchanges to temporarily suspend ZIL deposits and withdrawals to prevent the stolen funds from being transferred or sold through centralized platforms. The team stated that further updates will be released once accurate information is available, and reminded users to only follow official channels.

White House Has Not Yet Signed the ‘Clarity Act’ Ethics Clause, Legislative Text Still Awaiting Update

The White House and Republican senators have yet to reach an agreement on the digital asset-related ethics provisions in the “Clarity Act,” leaving the bill unable to be scheduled for a Senate vote. President Trump met last week with Chief of Staff Susie Wiles, White House Counsel David Warrington, Crypto Council Executive Director Patrick Witt, Acting Attorney General Todd Blanche, and Senators Cynthia Lummis and Bernie Moreno, but the White House has not yet clarified acceptable ethical boundaries. Technical negotiations continue on the BRCA provisions in the bill and on the Agriculture Committee’s text regarding vertical integration and affiliate transactions of crypto exchanges. Law enforcement concerns that “crypto fuels money laundering and crime” are also affecting the stance of some Democratic lawmakers. If a procedural vote cannot be advanced this week, the window for passing the bill before the August recess will essentially close.

Strategy Did Not Increase Bitcoin Holdings Last Week, Injected $225 Million into Dollar Reserves

Michael Saylor’s Strategy (formerly MicroStrategy) did not purchase any bitcoin over the past week. Meanwhile, the company added $225 million to its dollar reserves, bringing its total dollar reserves to approximately $3.2 billion.

Coinbase to Launch CRCL, HOOD, MSTR Perpetual Contract Trading on July 21

Coinbase announced that it will launch perpetual contract products related to CRCL, Robinhood (HOOD), and MicroStrategy (MSTR). The platform plans to open trading for the CRCL-PERP, HOOD-PERP, and MSTR-PERP perpetual contract markets on or after 9:00 UTC on July 21 (17:00 Beijing time on July 21).

BitMine Increased ETH Holdings by 7,430 Last Week, Repurchased 5.5 Million Common Shares in the Same Period

BitMine added 7,430 ETH last week, bringing its total ETH holdings to 5,777,468 ETH, approximately 4.8% of the total Ethereum supply. The company disclosed that the total value of its crypto, cash, and other investment assets is approximately $11.5 billion, including $385 million in cash and marketable securities, 207 BTC, $180 million in Beast Industries equity, and a $58 million investment in Eightco Holdings (ORBS). BitMine has staked 4,917,189 ETH (about 85% of its ETH holdings), valued at approximately $9.2 billion based on a price of $1,879 per ETH, with current annualized staking income of about $247 million, and earns yield through its self-built MAVAN staking network. Bitmine repurchased 5.5 million common shares last week, carried out under the previously announced $4 billion share repurchase program authorization.

Foreign Media: Google’s ‘Frozen V2’ Chip Expected to Be 6–10 Times More Efficient Than Its Existing TPUs

Two people familiar with the matter revealed that Google is developing a new server chip that can directly integrate the design blueprint of its Gemini AI model, thereby enabling the company to deliver AI model services to users more efficiently. The sources said that Google hopes to leverage this new chip, internally codenamed “Frozen v2,” to alleviate the severe shortage of AI computing power. The lack of computing power has not only triggered internal resource contention but also forced Google Cloud to turn down collaborations with some external customers. According to the sources, Google employees involved in the project expect that once the chip is launched, its efficiency, measured by tokens processed per unit of power consumption, will be 6 to 10 times higher than that of Google’s current latest-generation self-developed AI chip. Engineers are still deciding the main features of the new chip and how the various components will work together. Sources said Google plans to deploy the chip as early as 2028. Alphabet (GOOG.O) rose in pre-market trading, now up 1.2%.

AI Security Control Platform Neo Completes $100 Million Funding Round Led by Andreessen Horowitz and Bessemer Venture Partners

Neo, a company founded by former SentinelOne executives, announced the completion of a $100 million funding round led by Andreessen Horowitz and Bessemer Venture Partners, with participation from Craft Ventures and Merlin Ventures. Neo is positioned as an “Agentic Software Control” platform, providing enterprise SecOps teams with real-time inventory, capability and risk intelligence, behavioral attribution, and fine-grained policy control over AI agents, AI applications, browsers, identities, and traditional software, with native ability to intercept high-risk operations and malicious models. Gartner predicts that by 2026 the proportion of enterprise applications with agentic capabilities will rise from 5% in 2025 to 40%. Neo plans to use this funding to accelerate product development and market expansion, helping enterprises enhance security governance while adopting AI agents at scale.

Hut 8 Signs $9.8 Billion Long-Term Deal to Advance AI Data Center Expansion, Related Computing Power Stocks Rise

Bitcoin miner and AI infrastructure developer Hut 8 (HUT) has signed a second-phase 15-year lease agreement with the same investment-grade tenant, valued at approximately $9.8 billion, for its Beacon Point AI data center campus in Texas. The new agreement will add 352 megawatts of AI computing power based on Nvidia architecture, bringing the tenant’s total contracted computing power at the campus to 704 megawatts and commercializing the campus’s full 1 gigawatt of power capacity, with the total base contract value for the campus rising to approximately $19.6 billion. Boosted by this, shares of IREN, Cipher Mining (CIFR), TeraWulf (WULF), and the CoinShares Bitcoin Miners ETF (WGMI) rose simultaneously in early trading.

Exodus Lays Off 25% to Cut Costs and Focus on Stablecoin Payments and Card Infrastructure

Exodus Movement (EXOD) will reduce its global workforce by approximately 25% to cut costs and shift its business focus to stablecoin payments and card payment infrastructure. In a recent filing, the company said the restructuring is part of its strategy to build a complete payment stack platform following the acquisitions of e-money institution Monavate and crypto payment company Baanx. Exodus expects to record pre-tax restructuring charges of approximately $2.5 million to $3.5 million, primarily for severance and employee-related costs, and anticipates annual cash operating expense savings of about $10 million to $13 million through 2027. EXOD shares rose about 2.2% in early trading but remain down nearly 85% from the same period last year.

ZachXBT: TeleSwap suspected of $735,000 attack, still undisclosed 5 days later

The cross-chain bridge TeleSwap is suspected of suffering an attack exceeding $735,000 on July 15, 2026. As of July 20, 2026 Beijing time, the project team has still not publicly disclosed the incident. Shortly after the attack, TeleSwap’s Bitcoin hot wallet stopped processing transactions; about two hours ago, the attacker transferred the stolen funds into Tornado Cash, suspected of mixing. ZachXBT also disclosed suspected addresses involved and TeleSwap’s Bitcoin hot wallet address for community tracking.

Skyfall AI plans to use AI to take over SME operations, verifying feasibility of “AI CEO”

Founded by a former Microsoft AI team, Skyfall AI plans to spend up to $1 million to acquire a small B2B SaaS or e-commerce company, with an AI acting as “CEO” responsible for key decisions such as pricing, marketing, customer service, finance, and operations. The goal is to double revenue while gradually reducing human intervention. Its founders Sam Pasupalak and Kaheer Suleman believe that existing enterprise AI paths centered on LLMs and “digital employees” struggle to continuously learn in dynamic environments. Skyfall is instead developing “Enterprise World Models,” simulating the long-term impact of decisions on business by building enterprise evolution world models and latent world models, and will publicly verify in real business scenarios whether this architecture can support highly autonomous enterprises.

Superseed to abandon its own Layer2 and return to Ethereum mainnet, users need to bridge assets out before August 15

The project announced it will abandon its own Layer2 and focus on launching a self-repaying loan product on the Ethereum mainnet. The team will deploy a native lending protocol and stable asset suprUSD, and automatically repay users’ debts and improve collateral utilization through “Super Strategies” yield strategies. The native token SUPR will be used for strategy efficiency and potential fee sharing. Officials require users to bridge all assets such as USDC, USDT, oUSDT, cbBTC, OP, and ETH on the Superseed chain to other chains before August 15, 2026; after the deadline, all assets except SUPR (which will be distributed later via a subsequent contract) may be irrecoverable.

Bloomberg: Correlation between Korean stocks and Nasdaq approaches two-year high, becoming a global AI investment sentiment bellwether

As the correlation between the South Korean stock market and U.S. tech stocks continues to strengthen, global fund managers are viewing the Korean market as a leading indicator of AI investment sentiment. Monitoring the trends of Korean tech stocks such as Samsung Electronics and SK hynix before the market opens has become a new normal in the industry. The 60-day correlation coefficient between the Korea Composite Stock Price Index (KOSPI) and the Nasdaq 100 Index has risen to 0.46, close to the highest level in the past two years and about three times the five-year average of 0.16. Especially during market downturns, the sensitivity of the Nasdaq to Korean stock moves has increased significantly, with the relevant indicator hitting its highest level since 1990 on the 7th of this month.

Analyst: Declining stablecoin reserves signal liquidity contraction, Bitcoin’s breakout still lacks capital support

CryptoQuant analyst Darkfost published a note pointing out that Bitcoin has been oscillating around the $60,000 key support level for nearly 165 days, failing to hold above it and reignite upward momentum. A core reason is the lack of new liquidity in the market. Over the past 30 days, the net outflow of stablecoin reserves on Binance and Bybit approached $2.3 billion. New demand, whether flowing into Bitcoin or the broader crypto market, has been relatively weak. Exchange stablecoin reserves have been declining continuously this year. This relatively bearish market sentiment is still limiting the capital support needed for Bitcoin to break out of its current consolidation range. However, as regulatory measures such as the GENIUS Act require stablecoins to improve compliance, the decentralized nature of the stablecoin ecosystem may be weakened. In the long term, Bitcoin’s decentralized characteristics may become more prominent as a result.

Analysis: Bitcoin “volatility storm” may be coming, market could face a new round of turbulence

Market analysts are reminding traders to pay close attention to a potential Bitcoin “volatility storm” — a rapid spike in volatility — which often accompanies price declines. This warning is primarily based on the trend of Bitcoin’s 30-day Implied Volatility Index (BVIV), often seen as the crypto market’s version of the “fear index” (VIX), whose changes are influenced by options demand. Options are derivatives used by investors to hedge against the risk of sharp market fluctuations; the higher the demand, the higher the implied volatility usually is, and vice versa. Currently, BVIV is hovering in the 34%-38% range. Historical data shows this area has repeatedly been a critical juncture before volatility outbreaks, often followed by Bitcoin price pullbacks. Although past performance does not guarantee future recurrence, the market generally believes volatility exhibits mean-reverting characteristics. Typically, a low-volatility phase is easily followed by a volatility expansion, while a high-volatility phase may gradually return to stability.

Tom Lee responds to slowing ETH purchases: Due to large-scale stock buybacks

Bitmine Chairman Tom Lee stated that Bitmine’s recent ETH purchase pace has slowed somewhat due to large-scale stock buybacks during the same period. However, since launching its ETH Treasury Strategy on June 30, 2025, it has maintained a weekly ETH buying rhythm. Bitmine repurchased approximately 5.5 million common shares over the past week at an average repurchase price of $15.6156 per share, and this stock buyback will help enhance shareholder value. In addition, Bitmine’s proprietary staking business generated a yield of 2.67% (annualized) over the past 7 days, and it will continue to strengthen its digital asset treasury strategy by expanding ETH holdings and staking yields.

Analysis: Memory chip trio hit by sell-off, Samsung’s low valuation may become a new choice for investors

The share prices of the three major memory chip companies — Samsung Electronics, SK hynix, and Micron Technology — all fell this month, providing an opportunity for investors to reposition in the rapidly growing memory chip sector. The market is concerned that the current memory chip boom driven by AI demand may slow in the coming years, repeating the familiar “expansion—oversupply—downturn” pattern seen in cyclical industries. Analysts note that if investors choose to enter the memory chip sector at this stage, they need to believe that AI-driven memory demand growth can be sustained and will be able to withstand the risks brought by industry cyclical fluctuations. In terms of investment choice, one strategy is to focus on the company with the lowest valuation. Samsung currently trades at a relatively low valuation among the three major memory chip firms, potentially making it a choice for some investors seeking exposure to memory sector growth.

Arthur Hayes bought another 1,332.5 ETH 3 hours ago, worth about $2.53 million

BitMEX co-founder Arthur Hayes bought another 1,332.5 ETH ($2.53 million) 3 hours ago.

Ethereum pre-mine address dormant for 11 years activated, containing 2,000 ETH

At 03:30 Beijing time today, a dormant pre-mine address containing 2,000 ETH was activated after 11 years of inactivity. The address was worth about $620 in 2015 and is currently worth about $3.785 million.

Grayscale has submitted a Worldcoin ETF registration statement to the U.S. SEC

Grayscale has submitted a Grayscale Worldcoin ETF registration statement to the U.S. Securities and Exchange Commission (SEC). The fund will hold WLD, the native token of the World Network, as a passive investment vehicle, aiming for each share’s value to reflect the value of the held WLD minus expenses and liabilities. If approved, the ETF will list on Nasdaq, with Bank of New York Mellon serving as transfer agent and BitGo Bank & Trust as custodian.

The Russian State Duma will conduct the second and third readings of the crypto market regulation bill on July 21

Anatoly Aksakov, Chairman of the Russian State Duma Financial Market Committee, stated that the crypto market regulation bill will undergo its second and third readings on July 21. Aksakov said the bill will “combat the illegal use of cryptocurrencies” while providing legal space for international settlements. Under the bill, non-professional investors wishing to purchase cryptocurrencies must pass a special test, with an annual limit of 300,000 rubles, can only trade through licensed institutions, and may only buy the most liquid crypto assets. The bill was originally scheduled to take effect on July 1, but was postponed to September 1. The Duma Financial Market Committee had previously rejected multiple amendments to relax the rules, including increasing the purchase limit for non-professional investors and allowing the use of non-custodial wallets. If passed on the 21st, the bill still needs approval from the Federation Council and the president’s signature.

Trump did not sign ethics provisions, Clarity Act negotiations deadlocked

Last Thursday, President Trump held a meeting with Republican Senators Bernie Moreno and Cynthia Lummis, and White House crypto advisor Patrick Witt on the ethics provisions of the Clarity Act, but the meeting details were not disclosed. Industry sources revealed that Trump did not sign the ethics provisions at the meeting, and the two sides failed to reach agreement on any provisions, with concerns that the clauses could have adverse effects on Trump in the future. Lummis' spokesperson declined to comment, and Moreno's team and the White House did not respond. The ethics provisions are one of the last obstacles to passing the Clarity Act, aimed at restricting senior officials including the president, vice president, and members of Congress from profiting from digital assets during their tenure, with the core controversy centering on Trump’s meme coin and his family company World Liberty Financial. Politico previously reported that the current text lacks Democratic support, and Senator Ruben Gallego stated there will be no Democratic votes without strong ethics provisions. The bill text is expected to be released in the coming days, and the Senate needs to vote by the first week of August, but industry sources say the text may not be released until an ethics deal is reached.

Coinbase executive: US Democrats have added consumer protection rules to the CLARITY Act

Coinbase Vice Chairman Ryan VanGrack said that Democratic lawmakers in the US have added customer protection provisions to the digital asset market structure bill, the CLARITY Act, which is under consideration in the Senate. The new provisions are designed to ensure that digital asset trading platforms better protect consumer rights during their operations, including strengthening transparency requirements, preventing fraud, and ensuring the security of customer funds. He added that these consumer protection measures are the result of bipartisan cooperation, reflecting legislators' growing attention to the digital asset market. The bill is still under Senate review and has not yet reached the final voting stage. VanGrack's comments were made during a public discussion on digital asset regulation, and he emphasized that Coinbase supports establishing a balanced regulatory framework that both promotes innovation and protects investors.

Total marked suspicious trades on prediction market Polymarket in H1 this year about $200 million

As prediction markets like Kalshi and Polymarket become increasingly popular and scaled, the use of insider information for trading is surging. Bloomberg’s analysis of about 34,000 suspicious trades on Polymarket flagged by Polysights shows that from January to June 2026, the total volume of suspicious trades flagged on Polymarket was about $200 million, with geopolitical and war-related bets being the main driver, and Iran-related bets peaking in late February. Among the flagged trades, as many as 71% were funded through US-regulated crypto exchanges. Profits from flagged suspicious trades are highly concentrated, with the top 1% of profitable wallets reaping over half of the profits, and 57% of these wallets created within 24 hours before trading. Several cases have already triggered investigations: a US soldier was accused of using military secrets to profit over $400,000 on Polymarket; Israeli reserve soldiers were accused of using secret intelligence to bet on Iran events. Although Polymarket bans US users, users can bypass restrictions via VPN. Goldman Sachs has banned employees from trading prediction markets, and the US Senate prohibits lawmakers and staff from participating.

South Korea's KOSPI index volatility surpasses 60%, higher than Bitcoin, AI chip duopoly and leveraged ETFs the main causes

South Korea's KOSPI index volatility has exceeded 60% this year, almost twice that of the Nikkei 225, even higher than Bitcoin, known for its volatility. The Korea Exchange has triggered circuit breakers seven times this year (zero in 2025, only once in 2024). The root cause of the volatility lies in Samsung Electronics and SK Hynix, the two AI chip giants that together account for over 50% of the KOSPI market cap. The AI boom has driven their stock prices soaring, but the sector’s valuation is highly dependent on investor sentiment, while AI has yet to generate enough revenue to cover construction costs. The proliferation of leveraged ETFs has exacerbated market volatility. Korean retail investors actively use leveraged products, with over $4 billion flowing into leveraged ETFs tracking individual stocks this year, accounting for more than 70% of the daily trading volume of the related stocks, amplifying price swings. Retail investors net purchased over 100 trillion won (about $67 billion) of KOSPI stocks this year, while foreign investors net sold about $108 billion. Goldman Sachs strategists noted that “leveraged ETFs are a major risk to watch.” Although margin debt has retreated from its June peak, it remains significantly higher than the same period last year.

A new wallet withdrew 74,000 ETH from Gemini and staked all, worth about $136 million

A newly created wallet withdrew 74,033 ETH ($136.17 million) from Gemini and staked all of it.

Japanese media: US Big Five tech giants' "hidden debt" soars to $1.65 trillion

A study by Nikkei shows that with the surge in AI investment, the hidden debt of US tech giants has grown eightfold in just four years, estimated to reach $1.65 trillion. This figure exceeds their actual on-book debt, making it harder for investors to assess the associated risks. Nikkei analyzed recent financial statements and other materials of Google parent Alphabet, Microsoft, Amazon, Meta, and Oracle. Among them, Meta’s off-balance-sheet debt is particularly high, at about $420 billion, nearly three times its recorded debt.

London Stock Exchange plans to launch round-the-clock trading in H1 2027 to win back retail market

London Stock Exchange Group (LSEG) plans to launch an independent night trading venue in the first half of 2027 to win back retail investors and compete with crypto platforms that operate 24/7. Initially, this after-hours market will offer trading services for exchange-traded products (ETPs), including funds tracking UK and US stock markets.

Solv: BTC+ contract attacked due to deployer private key leak, subscriptions and redemptions expected to resume within two weeks

Solv Protocol posted on X platform stating that on July 13, the BTC+ contract on BNB Smart Chain suffered a security incident. After investigation, the attacker compromised the deployer’s private key and upgraded the BTC+ minting proxy contract on BSC, minting unauthorized BTC+ tokens. The team completed emergency response within three hours, isolated the malicious contract, and froze, burned, or isolated all unauthorized BTC+. All underlying BTC assets are safe. As a precaution, BTC+ subscriptions and redemptions have been suspended and are expected to resume within two weeks. BTC+ has never established official liquidity pools on any DEX, and users should only obtain and hold BTC+ through Solv’s official channels. The team has upgraded deployer security measures, rotated all affected access credentials and signing keys, and initiated a comprehensive external re-audit. A detailed post-mortem report will be released later.

A whale spent 20 million USDC to buy 10,500 ETH

A whale just transferred 20 million USDC into Binance, bought 10,501 ETH at $1,904, and withdrew it back to an on-chain wallet.

Trump has agreed to ethics provisions, clearing the last obstacle for the Clarity Act

U.S. President Trump has agreed to the ethics provision, clearing the final hurdle for the passage of the Clarity Act. Industry sources say that after months of negotiations, the two sides reached an agreement on the ethics provision. The provision was discussed during Trump’s July 16 meeting with Republican senators and White House crypto advisors, when no agreement was reached, but on Monday the provision was signed by Trump. The bill text is expected to be released in the coming days, and the Senate needs to vote by the first week of August. If passed, the bill will return to the House and then be sent to Trump for signature. The ethics provision was the final obstacle to the Clarity Act’s passage, and it aims to restrict senior officials such as the president, vice president, and members of Congress from profiting from digital assets while in office. The core controversy revolves around Trump’s Meme coin and his family company World Liberty Financial. White House crypto advisor Patrick Witt has postponed military training to remain at the White House to push the bill, and his deputy Harry Jung will leave in two weeks.

Robinhood Opens Its Platform to AI Agents, Users Can Authorize AI to Trade and Manage Portfolios

Robinhood announced on X that Robinhood is now open to AI agents. Users can open an agent account and connect an AI agent, authorizing it to research, trade, and manage their portfolio on their behalf. Users only need to add the Robinhood MCP server to the agent platform, and the entire setup takes less than a minute.

Anchorpoint, Led by Standard Chartered, Expected to Launch Hong Kong Dollar Stablecoin HKDAP as Soon as This Month

Anchorpoint, a fintech company formed under the leadership of Standard Chartered Bank (Hong Kong), is expected to announce the launch of a stablecoin by the end of this month at the earliest. Anchorpoint plans to launch HKDAP, a stablecoin pegged to the Hong Kong dollar. Virtual asset trading platforms including OSL Group and HashKey Exchange will serve as distributors. An Anchorpoint spokesperson told the Hong Kong Economic Journal that preparations for the phased issuance of the regulated Hong Kong dollar-pegged stablecoin HKDAP are proceeding as planned, and further updates will be announced in due course.

Zilliqa asks exchanges to pause ZIL transfers after suspected cold wallet theftZilliqa said exchanges paused ZIL deposits and withdrawals after an exchange partner’s cold wallet was compromised, with the amount stolen still undisclosed.

Zilliqa, a layer-1 blockchain network, said it is investigating a security incident involving an exchange partner after ZIL was stolen from a cold wallet.

In an X post on Monday, Zilliqa said it had asked exchanges to temporarily pause ZIL deposits and withdrawals as a precaution while it investigates the incident.

Zilliqa did not disclose the amount of ZIL stolen, identify the affected exchange partner or explain the possible cause of the incident. “We understand the community will have questions. We will share further updates as soon as we have verified information,” it said.

Zilliqa was launched in 2017 as a blockchain designed around sharding, a technology that splits transaction processing across multiple groups of nodes to improve scalability. The project was co-founded by researchers Amrit Kumar and Xinshu Dong, with the network’s mainnet going live in January 2019.

Zilliqa’s native token, ZIL, is used for transaction fees and smart contracts on the network. According to CoinGecko, ZIL was trading at around $0.0025 at the time of writing, down 7.1% over the past 24 hours.

Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.

Zilliqa (ZIL), one of the most popular altcoins during the previous bull run, announced that one of its exchange partners suffered a security breach and that ZIL assets held in a cold wallet were stolen.

The Layer 1 blockchain reported that a security incident involving ZIL and its exchange partner led to the theft of ZIL from a cold wallet, and that the investigation is ongoing.

With this announcement, the ZIL team requested that all exchanges temporarily suspend ZIL deposit and withdrawal transactions to prevent further damage and stop the movement of stolen funds through exchanges.

The company has not yet publicly disclosed the name of the exchange affected by the security breach or the amount of ZIL stolen. The team stated that the investigation is ongoing and that they are actively investigating the incident and coordinating with relevant parties to determine the cause and extent of the security breach.

Zilliqa stated that it will provide further updates as verified information becomes available and advised users to rely only on official Zilliqa channels for relevant information.

Previously, the South Korean exchange Bithumb had also temporarily suspended ZIL deposits and withdrawals due to suspected security concerns.

Although the price of ZIL dropped after the incident, it subsequently recovered.

*This is not investment advice.

Follow our Telegram and Twitter account now for exclusive news, analytics and on-chain data!

Zilliqa reports theft of ZIL tokens from exchange partner’s cold wallet

Not financial or tax advice. PANews content is strictly educational and informational and is not investment advice, financial advice, tax advice, legal advice, or a solicitation to buy or sell any digital asset, security, or financial product. Do your own research and consult qualified advisers.

Disclosure. PANews may publish sponsored content, partner content, advertisements, affiliate links, event promotions, and market commentary involving Web3 projects, service providers, or financial products. PANews personnel, contributors, or affiliates may hold digital assets or other interests related to covered topics. See our Terms of Service.

This site is protected by reCAPTCHA.

Institutional blockchain finance has always had the same problem: you settle first, then you check compliance. If the counterparty wasn't who they said they were, you find out afterwards. Every reconciliation process, every post-trade compliance check, every remediation workflow exists because the infrastructure runs in the wrong order.

Zilliqa is built to change that at the infrastructure level.

The Mediation Layer runs the check before a transaction settles — confirming both
parties are permitted to transact, on any chain or settlement rail. Compliance enforced before settlement, not reconciled after the fact. The credential check runs first. Everything else follows.

Today we're publishing the roadmap that shows how we build that infrastructure from Q2 2026 through mid-2027, in four phases.

Phase 01 — Credential Infrastructure LiveThe settlement network goes live. The Mediation Layer architecture specification is
published. The first public report on ZIL economics sets the baseline.

Phase 02 — First Live Regulated FlowsReal transactions run through the Mediation Layer in production. Volume, latency, and revenue data are published — the first hard evidence the architecture works at scale.

Phase 03 — Cross-Chain and Cross-JurisdictionCredential-verified settlement extends beyond a single chain and single jurisdiction.

The mediation model is no longer single-chain.

Phase 04 — The Model ProvenRevenue exceeds subsidy — audited and published. The flywheel running in public,
not projected.

One rule governs every milestone: no claim without something shipped behind it.
The roadmap names the direction. Each phase publishes the evidence.

Read the roadmap at https://zilliqa.com/roadmap

PANews reported on September 12th that Binance announced that it will suspend deposits and withdrawals of Zilliqa (ZIL) tokens at 01:00 on September 25, 2025, to facilitate its network upgrade and hard fork. The upgrade is expected to take place at block height 10,153,271, at 02:00 on September 25, 2025 (Beijing Time).

Binance to Facilitate Zilliqa Hard Fork and Network Upgrade

Binance Will Support the Zilliqa (ZIL) Network Upgrade & Hard Fork - 2025-11-17

3 Altcoins To Watch In The Third Week Of November 2025