08 / 22

Faction Shield: The Sandbox was attacked, and 14.9 billion SAND were abnormally minted

Comparative news, according to PaiDun monitoring, an abnormal security incident occurred at The Sandbox (SAND). The attackers are suspected to have abnormally minted about 14.9 billion SAND tokens in the two addresses through the vulnerability. Currently, The Sandbox has not officially released the confirmed results of the incident or details of the vulnerability, and the extent of the impact of the attack and whether there was any financial loss is still under further investigation.

08 / 21

The US IRS warns of a new type of cryptocurrency phishing attack: forged letters use QR codes to steal private wallet keys

According to CoinDesk, according to CoinDesk, the US Internal Revenue Service (IRS) issued a warning that an advanced email phishing campaign targeting US cryptocurrency holders is spreading. By falsifying official tax letters, attackers induce users to scan malicious QR codes to steal encrypted wallet credentials and private keys. According to reports, the attackers impersonated the IRS to send paper letters, used names such as “tax compliance” and “account verification” to create a sense of urgency, and attached QR codes to the letters. Once scanned, users may be directed to a counterfeit website, which in turn leaks wallet login information, mnemonic words, or private keys, leading to the theft of digital assets. The IRS reminds taxpayers that official agencies will not require users to provide private cryptographic wallet keys, mnemonics, or perform similar “wallet verification” operations through unofficial channels. Cryptocurrency holders should be wary of any suspicious emails and letters asking to scan QR codes, connect to wallets, or submit sensitive information. As the number of crypto asset holders expands, social engineering attacks on digital wallets continue to increase, and regulators and security agencies are stepping up prevention reminders about related fraudulent activities.

Data: DeFi's TVL skyrocketed 9.15% to $83.3 billion in a single day, and DEX trading volume broke 10 billion for the first time in two months

Comparative news, according to Defillama data, the DeFi market rebounded strongly. TVL jumped 9.15% to US$83.216 billion in a single day, and spot DEX trading volume reached US$10.886 billion, breaking the $10 billion mark for the first time since June 5. The decentralized perpetual contract platform's turnover reached US$36.72 billion, of which Hyperliquid's daily processing volume reached US$15.205 billion, accounting for about 45% of the total perpetual DEX transaction volume, and its HYPE token price rose to the $70 range. Uniswap continues to lead spot DEX with a turnover of around $3.1 to 3.4 billion, while Solana ranked first in spot DEX activity in various cycles.

08 / 20

Industry leaders warn AI agents may turn billion-dollar crypto hacks into “change money”

Comparatively, at the 2026 Wyoming Blockchain Conference, Global Settlement Network CEO Ryan Kirkley warned that AI agents could allow hackers to hack Wi-Fi networks, passwords, and wallets on an unprecedented scale, dwarfing current billion-dollar cryptographic attacks. Kirkley said, “We thought these bridging attacks were serious; in fact, they were just change money.” Attacking one person with $20,000 in assets used to be too expensive, but now a single agent can attack everyone at the same time. Bill Laboon, vice president of technical operations at the Web3 Foundation, agreed, believing that the efficiency improvements brought about by decentralized systems are also beneficial to attackers. Midnight Foundation President Fahmi Syed emphasized that agents require clear parameter settings and should not be granted unlimited access to credit cards, social security information, and various accounts. Kirkley believes that setting proxy permissions is relatively easy to solve, and that the security of the underlying system is the greater concern. On the issue of trust, Laboon notes that big language models are still occasionally illusory, so they don't want to let agents manage individual pensions. Richard Incurred, founder of Silvermine Capital Advisors, believes proxy AI technology is growing faster than people can accept. Kirkley also mentioned the issue of supervisory liability, that is, when autonomous agents make mistakes or even break the law, accountability and fund recovery mechanisms have yet to be clarified.

Ethereum core development team Nethermind abandons LayerZero and switches to Chainlink CCIP

Comparatively, according to The Block, Nethermind, a core contributor to the Ethereum ecosystem, announced that it will withdraw from the LayerZero decentralized verification network (DVN) business and migrate the cross-chain infrastructure to the Chainlink network after a “thorough review”. Nethermind said it has stopped operating LayerZero's DVN and joined the Chainlink network as a node operator and strategic technology provider. In the future, Nethermind will provide engineering tools, infrastructure services, and integration support for blockchain application developers. It is reported that this shift occurred after the LayerZero ecosystem experienced a security incident. In April of this year, Kelp DAO's RsETH cross-chain bridge was attacked, losing about 116,500 RsETH, worth about $292 million at the time. Following this incident, several companies have begun to shift their cross-chain business from LayerZero to Chainlink. However, Nethermind did not specify whether the migration was directly related to the Kelp DAO incident, nor did it disclose that LayerZero had specific technical issues or changes in the commercial terms of both parties.

08 / 19

Fluid Q2 TVL falls to $3.4 billion, revenue down 29% month-on-month

According to the Token Terminal report, Fluid, a DeFi protocol created by the Instadapp team, released data for the second quarter of 2026. The average TVL for the quarter was US$3.4 billion, down 21.1% from the previous year, and still up 84.9%; active loans of US$1.5 billion, down 15.1% from the previous year, up 92.9%; transaction volume of US$18 billion, down 37.3% from the previous month; expenses of US$9.5 million, down 21.5% from the previous month; the contract revenue of US$1.8 million, down 29.3% from the previous year and 9.8% from the previous year; and 70,700 thousand monthly users, down 43.8% from the previous month. The capital structure continues to lean towards Jupiter Lend, which collaborates with Jupiter on Solana, with an average TVL of about $1.7 billion, accounting for nearly half and achieving month-on-month growth, making it the largest lending deployment. There were outflows at the beginning of the quarter due to third-party incidents such as Resolv. Fluid contracts were not attacked, related bad debts were covered by treasury, etc., and there was no loss of user funds. During this period, Bitwise began managing the USDE market on Jupiter Lend, Liquidity-as-a-Service launched and launched a US$100 million susDAI liquidity facility, and RWA related assets such as Huma PST were also connected to Fluid. The team said it will continue to promote institutional-level deployment, Jupiter DEX and Sui expansion, etc., to introduce incremental capital and improve revenue efficiency through vertical product cooperation with institutions.

Maya Protocol attacked: Approximately $1.7 million was stolen due to six serial vulnerabilities, and the funding pool shrunk by $11 million

Comparatively, the cross-chain liquidity protocol Maya Protocol was attacked on August 18. The attackers used six serial software vulnerabilities to create false account balances and steal about 20.83 BTC (about $1.34 million) and other assets from the protocol's fund pool, with a total direct loss of about $1.65 million. The incident caused the MayaChain network to suspend trading, and its token CACAO plummeted almost 89% from $0.115 to $0.013 before recovering to around $0.03. Technical review shows that the attack began when MayaChain misjudged that a transaction was lost and triggered a compensation mechanism, but the mechanism miscalculated and added about 49 million CACAO to a small pool of funds, while the agreement reserve was only about 168,000 CACAO. After the transfer failed, the system mistakenly saved a new balance. The attackers then deposited a very small amount into the fund pool, obtained more than 99% of the pool's share, and immediately withdrawn 48.87 million CACAO, which were then exchanged for Bitcoin, Ethereum, and other assets. As a result of the incident, the total value of Maya Protocol's pool decreased by about $10.9 million, of which about $6.4 million was due to the depreciation of CACAO and about $2.9 million from arbitrage transactions. The team said they hope the attackers will return the funds in the form of bug bounties, otherwise they will make up for losses through channels such as Aztec Chain investments. Maya Protocol has yet to announce when it will resume trading. The incident once again exposed the security risks in the complex logic of DeFi protocols.

Wyoming moves FRNT stablecoin from LayerZero to Chainlink CCIP

Comparatively, the Wyoming Stablecoin Commission has migrated its issued Frontier Stable Token (FRNT) from LayerZero to Chainlink's cross-chain interoperability protocol CCIP, and will completely stop implementing the LayerZero token after completing a full security review. CCIP will be FRNT's sole cross-chain infrastructure under a multi-year contract. This is the first time that a US government entity has publicly changed blockchain infrastructure on security grounds. FRNT is currently the only stablecoin issued by a US public agency and backed by full fiat reserves. The reserve proceeds are used to support the state's school foundation projects. The tokens have been deployed on chains such as Ethereum, Base, and Avalanche, and the market capitalization is currently less than 1 million US dollars. The decision was released four months after Kelp DAO's LayerZero-based bridge was attacked and approximately 116,500 RSetH (worth about $292 million at the time) was stolen. The incident sparked a wave of industry security reviews and migrations. So far, nearly $15 billion of related assets have been transferred from LayerZero to Chainlink. Early migrators include Kelp, Solv Protocol, Re, Kraken, etc. BitGo then chose CCIP and completed the migration of approximately $7.7 billion of encapsulated bitcoins, bringing the total amount to the current level. Also, according to the LayerZero case study in January of this year, Wyoming operated its own decentralized verification network and controlled verification and compliance functions.

08 / 18

Decred discovered a security flaw and advised users to suspend voting and mining

In comparison, Decred's official X account (@decredproject) issued a security notice. The Decred (DCR) network discovered a security flaw, and the patch fix will be released on the morning of August 18 EST. For security reasons, users are officially advised to suspend voting and mining operations before the upgrade is completed, and the patch will be announced simultaneously on the official X account as soon as the patch is released.

Circle: The euro stablecoin EURC has surpassed 400 million euros in circulation and has become an important component of Europe's on-chain payment infrastructure

Comparing news, Circle officially announced that its euro stablecoin EURC circulation has surpassed 400 million euros and has become an important growth point for the Eurozone on-chain financial ecosystem. Circle said that EURC supply has increased by more than 100% over the past year, and EURC is moving from the experimental phase to the actual application phase as demand for compliant stablecoins increases in trading platforms, payment networks, and institutional businesses. EURC first launched on Ethereum in June 2022, then expanded to multiple blockchains such as Avalanche, Stellar, Solana, and Base. By the end of 2024, EURC had covered 5 chains, with a circulation volume of around 80 million euros, and continued to grow since then. Currently, EURC has been launched on many mainstream trading platforms such as Bitpanda, Bitstamp, Bybit, Coinbase, and Kraken, supporting EURC/EUR and EURC/USD trading pairs to further enhance the liquidity on the Euro chain. Circle said EURC's application scenarios are expanding from transactions to the fields of payments, settlement and institutional money management. Currently, fiat deposit and withdrawal service providers such as Mercuryo, MoonPay, Ramp, and Transak have enabled users to directly use the Euro to access digital assets, and institutional hosting and settlement platforms such as Cobo, Copper, and Fireblocks have also integrated EURC. Additionally, Visa and Mastercard have both previously expanded support for EURC settlement capabilities, making them usable for cross-border payments, card payment settlements, and enterprise-level fund transfer scenarios. With the full implementation of the European Union's Crypto Asset Market Regulation Act (MiCA), EURC operates according to the electronic currency token (EMT) standard, issued by Circle France's electronic money agency, and is regulated by the French Prudential Regulation and Disposal Authority (ACPR). EURC reserve assets are completely segregated from Circle's funds and confirmed by regular audits by an independent third party. As of January 2026, the total global supply of stablecoins is around $300 billion. Although dollar stablecoins still dominate, euro stablecoins have become the second largest category. The euro stablecoin market has grown from around €400 million in June 2025 to around €650 million in June 2026, with EURC maintaining its leading position. Circle said that despite EURC's growth, the euro stablecoin is still in its early stages compared to the Eurozone's M2 money supply of more than 16 trillion euros, and there is still plenty of room for future development in real-time settlement, cross-border payments, and corporate financial infrastructure.

Uniswap will be deployed synchronously when the Arc mainnet goes live in September

Comparatively, Uniswap announced that it will complete deployment when the Arc mainnet is officially launched in September to provide developers with deep on-chain liquidity infrastructure and support the construction of DeFi applications such as lending, structured products, LP strategies, and token issuance. Arc is a public chain owned by Circle. It uses USDC as the gas token and has sub-second deterministic finality.

TVL grew by more than 45%, and Robinhood Chain's share of tokenized RWA fell to 6%

In comparison, Robinhood Chain's total hedging volume (TVL) increased by more than 45% in August, reaching more than US$540 million; the on-chain tokenized RWA was 32 million US dollars, up 120% month-on-month, but its share of TVL dropped from nearly one-third to 6% on July 7. The market value of on-chain stablecoins reached US$640 million, growing more than 22% during the month. Among them, USDe has grown by nearly 50% to US$286 million since the beginning of August, accounting for 44% of the total number of stablecoins on the chain; the native stablecoin USDG remained between US$330 million and US$350 million during the same period, accounting for 92.7% of total supply in the first week of launch.

08 / 16

The data breach may have occurred as early as April, and users have been attacked by phishing and stolen

Comparing the news, on-chain detective Specter posted an article on the X platform saying that considering the time period covered by the stolen data, this may mean that the data leak occurred as early as April, no later than early May, but the parties concerned chose to remain silent until recently, roughly at the same time as Trezor announced their own data breach. Some users had already received phishing attacks and lost assets at the time, but the parties concerned denied the data breach without maintaining transparency, reminding users, or issuing risk alerts.

Ethereum's Next Upgrade 'Hegotá' Enters Planning Phase, 66 EIPs Competing for 2027 Hard Fork

In comparison, Ethereum developer Toni Wahrstätter said in an article on the X platform that Ethereum core developers are planning the next annual upgrade “Hegotá”, and 66 Ethereum Improvement Proposals (EIPs) are currently on the shortlist. The next few core developer meetings will screen these proposals to finalize the upgrade content that can complete implementation, development network testing, testnet deployment, and launch in 2027. Proposals that fail to enter Hegotá will be postponed until the next hard fork, so the current screening process will have an important impact on the future direction of Ethereum. Currently, FOCIL (Fork-Choice Inclusion Lists) has been identified as one of Hegotá's key upgrades. The developers believe that a combination of framework transactions (EIP-8141), cryptographic nonce (EIP-8250), and root references (EIP-8272) will help build native privacy capabilities, so that privacy applications can run without relying on third-party intermediaries. Furthermore, improving the ability to expand is an important direction for Hegotá. The developers proposed that it is necessary to prepare for a further increase in the gas limit to 600 million in the future by repricing data resources (EIP-8131, EIP-8279) and state growth costs (EIP-8368). Although these improvements aren't as intuitive as the privacy features, they are considered a key part of driving Ethereum's expansion in the short term. Other candidate upgrades include shorter block times (EIP-8198), issuance mechanism adjustments (EIP-8363), anti-correlation penalty mechanisms (EIP-7716), EVM optimization and simplification, and discussions on the first batch of EIPs related to zkEVM and anti-quantum cryptography. According to reports, it is impossible for Hegotá to include all the features expected by the community. The core team needs to make a trade-off between “future vision” and “recent deliverable upgrades,” and most candidate EIPs may not be able to enter this upgrade in the end. Currently, Ethereum is 256 days away from the launch of the current Glamsterdam upgrade, and the goal is to complete deployment by the end of this year. Hegotá is scheduled to go live in 2027, and the core developers and community will discuss the priorities of each EIP in the coming months. Community input will still play a part in the screening process, and participants who support or oppose the entry of an EIP into Hegotá can submit their views to the core development team through open discussions.

Ondo Stocks tokenized stock TVL surpasses $1 billion

According to Chainwire, Ondo Stocks, the tokenized stock platform under Ondo Finance, has reached a total hedged value (TVL) of 1.01 billion US dollars, less than a year since it was launched in September 2025. Within 48 hours of launch, the platform became the world's highest TVL tokenized stock service provider, and currently remains in the lead and offers more than 440 assets. Each token is fully backed by the corresponding stock or ETF and held by a licensed US escrow broker. In addition, Ondo Finance also officially disclosed that Ondo Perps, a perpetual contract platform launched in July, had a cumulative turnover of more than 8 billion US dollars, and more than 5 billion US dollars in nearly 30 days since its public launch.

Founder of Stacks, the hard fork is running smoothly, and Binance's “watch label” is still awaiting the next round of evaluation

Comparing news, Muneeb Ali, co-founder of Stacks, said that the Satoshi Upgrade I hard fork has been successfully completed, and the degree of network decentralization has further increased after the launch of the new signer. As for Binance's “watch label,” there are currently no concerns about the risk of removal or liquidity, but it is still necessary to wait for the next round of formal evaluation.