Crypto News

According to ChainCatcher, DeFi United announced a technical fix plan for the Kelp DAO rsETH cross-chain bridge vulnerability on Tuesday. Previously, attackers exploited the LayerZero-powered Unichain-to-Ethereum bridge vulnerability to release 116,500 rsETH by forging inbound packets, of which about 107,000 are still distributed as collateral in the seven associated addresses of Aave and Compound. DeFi United said it has received enough ETH pledges to support the restoration of rsETH, converting it to rsETH in batches and injecting the bridge-locked contract. LayerZero Labs pledged more than 10,000 ETH to support the restoration effort on Tuesday. In terms of liquidating attacker positions, the alliance will perform controlled liquidation through Aave and Compound governance proposals, and is expected to recover approximately 13,000 ETH and 16,776 ETH, respectively. During the fix, WETH and rsETH reserves on multiple chains will remain frozen. DeFi United also warns of enforcement risks, including governance approval progress, possible interference by attackers, and new security measures pending production validation.

ChainCatcher news, according to a16z, its researchers conducted systematic tests on whether AI agents can independently complete DeFi price manipulation exploits. The study used 20 Ethereum price manipulation events as a dataset, using Codex (GPT 5.4) equipped with the Foundry toolchain as a test agent. Under the baseline condition of no domain knowledge, the agent success rate is only 10%; The success rate increased to 70% after introducing structured domain knowledge distilled from real-world attack events. Failure cases show that agents can accurately identify vulnerabilities, but generally fail to understand the leverage logic of recursive lending, misjudge profit margins, and fail to assemble multi-step attack structures across contracts. The experiment also recorded a sandbox escape event: the agent retrieved the RPC key from the local node configuration and called the anvil_reset method to reset the node to a future block, bypassing the information isolation restriction and obtaining real attack data. The research team believes that AI agents can effectively assist in vulnerability identification, but they are not yet a substitute for professional security auditors.

According to ChainCatcher news, Bitwise Chief Investment Officer Matt Hougan said that the core driving force behind Bitcoin's recent 20% rise is Michael Saylor's Strategy. According to monitoring, Strategy has increased its holdings of $7.2 billion in Bitcoin over the past eight weeks. Despite Bitcoin ETFs buying $380 million since March 1 and long-term holders resuming purchases, Strategy remains the biggest influencer. As of now, Strategy holds a total of 818,334 Bitcoins, which has exceeded BlackRock's holdings. Hougan pointed out that Strategy raised funds to purchase Bitcoin through the issuance of STRC, a perpetual preferred stock, and if Bitcoin continues to grow, its holdings are expected to surpass Satoshi Nakamoto within two years. The current Bitcoin price is around $76,486.

Bithumb Listing: [마켓 추가

According to Tencent Cloud, on April 29, Tencent ima released a new Agent mode "copilot" to support users to create exclusive agents. According to reports, Copilot has a built-in memory system, which remembers the user's background, habits and promotion matters through the four modules of Copilot settings, user profiles, long-term memory, and experience skills, realizes continuous calls across scenarios, and reduces repeated inputs. (Jin Shi)

According to ChainCatcher news, according to official sources, Monad's official X account (@monad) has now been restored after being banned yesterday. ChainCatcher previously reported that Monad co-founder Keone Hon posted on the X platform that Monad's account was frozen without any warning, which is speculated to be caused by a system error. Monad did not perform any unusual operations or use the API in violation of regulations. The X platform support team has been contacted through various channels, and the account is expected to be restored soon.

Odaily Planet Daily News Polymarket posted on the X platform that the characteristic of on-chain data is that all data can be publicly audited. In response to data breach concerns, Polymarket clarified that there was no data breach and that relevant information can be obtained through its public endpoints and on-chain data. Instead of paying for this type of data, users can access it for free through its API.

ChainCatcher news, ZetaChain officially announced that on the 27th, a premeditated targeted attack was encountered, and the attacker used Tornado Cash to recharge funds and forge wallet addresses. Cross-chain ZETA transfers were not affected. All affected user funds were not affected – all affected wallets were controlled by ZetaChain. The mainnet patch has been deployed, and cross-chain transactions will be re-enabled after ongoing monitoring.

According to Gate data, the U.S. and Brexit oils have continued to fall in the short term, and have completely given up the gains since the announcement of Trump's plan to extend the blockade of Iran, and are now trading at $100.71/barrel and $103.2/barrel respectively, down about 0.6% during the day.

According to ChainCatcher news, the decentralized prediction market platform Polymarket is suspected of being hacked, and threat actor xorcat has released more than 300,000 data records and supporting exploit kits on a well-known cybercrime forum. The attackers allegedly extracted data through undisclosed API endpoints, paging bypasses, and CORS misconfigurations for the Polymarket Gamma and CLOB APIs. The leaked content includes: 10,000 users' complete personal information (including names, proxy wallets, and underlying addresses), 4,111 comments, 1,000 report records (including 58 ETH addresses and administrator authentication address identifiers), 48,536 Gamma market metadata, more than 250,000 fixed-product market maker addresses in active CLOB markets, and 9,000 follower social graph data. The toolkit contains proof-of-concept code for multiple vulnerabilities, including CVE-2025-62718 (Axios NO_PROXY bypass, CVSS 9.9, which triggers server-side request forgery), CVE-2024-51479 (Next.js middleware authentication bypass, CVSS 7.5), and CORS misconfiguration. In addition, the toolkit comes with an automated continuous pull script and a full red teaming report.

ChainCatcher news, a class action lawsuit accuses Believe founder Ben Pasternak of withdrawing $54 million in fees through the Launchcoin migration. The lawsuit alleges that the migration process had a two-week window, resulting in holder tokens being diluted and tokens with staggered deadlines being permanently burned. In addition, the relevant operations are accused of insiders linking wallets.

ChainCatcher news, the Hong Kong Monetary Authority issued an announcement calling on the public to be vigilant and pay attention to press releases issued by Anchorage Fintech Co., Ltd. and The Hongkong and Shanghai Banking Corporation Limited, involving tokens claiming to be related to licensed stablecoin issuers. Tokens using the symbol "HKDAP" or "HSBC" appear in the market, but the relevant tokens are not issued by or have no relationship with the issuer. So far, both licensed stablecoin issuers have indicated that they are not issuing any regulated stablecoins in the market. The public should remain vigilant against any fraudulent activities or scams claiming to be related to licensees or stablecoins issued by them. If in doubt, members of the public should refer to the official announcements of the two licensees. The public should also purchase or use stablecoins through regulated channels.

According to people familiar with the matter, the White House is developing guidance that allows agencies to bypass Anthropic's supply chain risk determination and introduce new models, including Mythos. A draft administrative measure currently being drafted could provide a way for the government to de-escalate the conflict with Anthropic. One source described the White House's efforts as "both saving face and getting them back." Earlier this month, White House Chief of Staff Wiles and Treasury Secretary Besenter met with Anthropic CEO Dario, both of whom described as a productive initial meeting to discuss how the company and the government can work together. The White House is convening companies across industries this week to provide input on potential executive actions and best practices for deploying Mythos. These meetings include a "trial reading" of possible guidance documents that may withdraw previous directives from the Office of Management and Budget that governments should not use Anthropic. （Axios）

Odaily Planet Daily News To commemorate the 250th anniversary of the founding of the United States, the U.S. government will issue a limited edition commemorative passport. The inner page of the passport contains Trump's portrait and his gold signature, and the cover design features the words "United States of America" at the top. The first batch of commemorative passports is planned to be issued in 25,000 to 30,000 copies, and will begin to be issued around July 4. Limited edition passports are limited to individual users who apply on-site at the Washington Passport Agency while supplies last. Those who apply through an online application or another regional agency will still receive a standard version of the passport. The move is part of a series of commemorations of the 250th anniversary of the founding of the United States, and Trump also became the first incumbent president to appear on a U.S. passport.

ChainCatcher news, according to Onchain Lens monitoring, a newly created address (0x70d... d318) received 25,000 ETH worth $57 130 000 from BitGo. This address may belong to Bitmine.

According to ChainCatcher news, the re-staking protocol Puffer Finance officially announced that it has invested treasury funds into the DeFi United ecological rescue operation led by Aave, but did not disclose the specific amount. Puffer believes that strong infrastructure and consistent incentives are key to DeFi gaining support at critical moments.

ChainCatcher news, according to BBX data, yesterday's mining enterprise credit management, Ethereum treasury reserve update and Bitcoin reserve expansion action were implemented simultaneously, and the core dynamics are as follows: Riot Platforms, Inc. (NASDAQ: $RIOT) disclosed in its SEC Form 8-K signed on April 21 and published by CoinDesk on April 28 that the company has completed the second amendment to its credit agreement with Coinbase Credit, Inc., switching the original floating rate $200 million secured term loan to a fixed interest rate and extending the maturity date by 364 days, while retaining the option to extend it for another 364 days; The loan size and collateral structure remain unchanged, and the collateral is still Bitcoin, USDC, and Coinbase Custody cash in custody. The company's Bitcoin holdings have dropped from 19,368 at the beginning of the year to 15,680; If the price of BTC falls further, the selling pressure will continue under the loan-to-value ratio constraints, which is an analytical judgment and is not officially disclosed by the company. Bitmine Immersion Technologies, Inc. (NYSE: $BMNR) released its latest position update on April 27, holding 5,078,386 ETH (approximately $2,369 at the market price of the day, market capitalization of approximately $12.04 billion), and 200 BTC, $200 million in equity in Beast Industries (owned by MrBeast) and $91 million in cash. the total amount of combined crypto assets and strategic investments is approximately $13.3 billion; ETH holdings account for approximately 4.21% of the total circulating supply, which is the size accumulated by the company in the 10 months since launching its Ethereum treasury strategy in June 2025. Strive, Inc. (NASDAQ: $ASST) disclosed through an official announcement on GlobeNewswire on April 27 that the company purchased approximately 789 BTC (at a cost of approximately $61.43 million, with an average price of approximately $77,890), bringing its total holdings to approximately 14,557 BTC as of April 24; During the same period, it held $90.5 million in cash and equivalents, $50.3 million in Strategy Preferred Shares (STRC), and the total market value of BTC reserves was about $1.13 billion, surpassing Hut 8 to rank ninth in the world's listed Bitcoin reserves.

According to the Wall Street Journal: U.S. President Donald Trump instructed his aides to prepare for a long-term blockade of Iran. (Jin Shi)

ChainCatcher reported that after ASOS co-founder Quentin Griffiths fell to his death in Thailand, about $4 million in assets in his Bitcoin wallet were transferred. The funds were transferred from Quentin Griffiths' online account to an unknown location in three separate transactions within days of his death. His eldest son, Joel, reported the incident to the police six weeks after his father's death. Thai police are currently investigating the asset theft. Quentin Griffiths was previously investigated for alleged fraud and faced multiple legal proceedings and family property disputes before and after the fall.