门罗币 · 315

Apple urgently fixes a macOS screen sharing bug, revealing that Macs have been used for cryptocurrency mining

Comparatively, according to The Hacker News, the Dutch National Cyber Security Center (NCSC) warned that a recently fixed serious authentication flaw (CVE-2026-65400, CVSS score 9.8) in Apple's macOS screen sharing component has been exploited in the wild, and attackers can access Macs exposed to the Internet (port 5900) without valid credentials and implant an entry-level Bitcoin mining program. Apple fixed the vulnerability with the macOS Tahoe 26.6.1, Sequoia 15.7.9, and Sonoma 14.8.9 emergency update on August 6 to strengthen credential verification through improved state management. NCSC confirmed that in multiple attacks, attackers have obtained root privileges and deployed mining software. Security researcher @osxreverser revealed another pre-authentication vulnerability in the same component (also fixed in 26.6), which only requires the target IP to bypass password authentication and can be exploited without a username. According to Calif, the researchers used AI to develop a usable attack program with two vulnerabilities in just 4 hours, showing that AI is drastically shortening the time from finding the vulnerability to developing the attack code. Users are advised to update the system immediately, and turn off the screen sharing function if the update is not possible. This article is sponsored by GENG, Build Your Fortune on GENG (https://geng.one)

6d agoburnking

$282 million in Bitcoin and Litecoin stolen due to Trezor impersonation support scam

Comparing news, a Bitcoin and Litecoin holder provided a 12-word mnemonic to an attacker posing as a Trezor supporter, resulting in the transfer of approximately $282 million in assets, including approximately $139 million in Bitcoin and $153 million in Litecoin. Blockchain forensics firm ZeroShadow said the incident stemmed from a social engineering attack, not a breach of wallet software or private key infrastructure. The stolen funds were split across the THORChain cross-chain bridge within minutes and converted to Monero through an instant exchange service. The ZeroShadow monitoring team flagged and frozen approximately $700,000 in funds within 20 minutes. Under the BIP39 standard, a 12-word mnemonic contains approximately 128 bits of entropy, and a 24-word mnemonic contains 256 bits of entropy. Chainalysis estimates that up to 23% of the bitcoins that have been mined are permanently inaccessible due to lost keys, involving millions of BTC due to forgotten mnemonics, damaged backups, and unscheduled inheritance plans.

20d ago

THORChain has resumed trading after suffering an attack that lost $10.7 million

Comparing news, the decentralized cross-chain liquidity protocol THORChain has resumed trading after being down for more than five weeks due to an attack in May. Signing, circulation, liquidity provider operations, and exchanges have all been re-launched. Earlier, on May 15, blockchain investigator ZachXBT and security company PeckShield indicated that it was suspected of being attacked, and THORChain suspended the transaction. The vulnerability caused one of its six Asgard vaults to lose approximately $10.7 million, leaving the remaining five unaffected. THORChain said that currently every vault has been verified, and every key card has also been checked. The native Monero exchange has been tested end-to-end and will be launched later.

60d ago

Bank of the Philippines tightens crypto regulations: complete ban on privacy coins

In comparison, the Central Bank of the Philippines (Bangko Sentral ng Pilipinas, BSP) issued new virtual asset supervision guidelines requiring all licensed virtual asset service providers (VASPs) to establish strict due diligence and asset review mechanisms before listing or trading any crypto assets to improve financial stability and consumer protection. The new regulations also clearly prohibit virtual assets that enhance anonymity, that is, private coins, from being launched or traded on compliant trading platforms, which means that private cryptoassets, including Monero (Monero) and Zcash (Zcash), will be removed or banned from local compliance platforms. Regulatory documents require trading platforms to continuously monitor listed assets and set standards that trigger delisting mechanisms, such as deterioration in liquidity, risk incidents on the project side, technical security breaches, insufficient information disclosure, or suspected fraud. The policy continues the Philippines' trend of tightening crypto regulations over the past year. Previously, the Philippine Securities and Exchange Commission (SEC) had established a licensing framework for crypto asset service providers, requiring local registration, raising capital thresholds and local data storage, and imposing access restrictions on many overseas trading platforms. Currently, the Philippines has formed a dual regulatory system: the central bank is responsible for payment and transaction channels (VASPs), and the securities regulator is responsible for cryptographic assets involving securities attributes. The two sets of compliance frameworks must be met separately. Analysts believe this move will further promote the centralization of local compliant exchanges and accelerate market migration to regulated platforms. On May 26, Binance returned to the Philippine market in a regulatory compliance manner through a partnership with local Philippine company BlockShoals. The partnership will take place within the framework of the Philippine Securities and Exchange Commission (SEC) regulatory sandbox, with Binance moving from being restricted due to regulatory issues to an officially authorized test operation phase. This article is sponsored by GENG, Build Your Fortune on GENG (https://geng.one)

68d agoburnking

Zcash Fatal Flaw Researchers Will Audit Monero, Plans to Expand to More Privacy Coin Projects

Comparing news, Taylor Hornby, a security engineer who discovered a serious vulnerability in Zcash using the Anthropic Opus 4.8 AI model, said that Monero (XMR) has been added to the audit queue and will conduct security reviews of more privacy coin projects in the future. Hornby previously discovered a critical vulnerability in the Zcash Orchard privacy pool on May 29. The vulnerability has not been detected since May 2022 and could theoretically allow attackers to distribute unlimited fake ZECs that cannot be detected. Shielded Labs, which was responsible for development, completed an emergency fix by June 1, and publicly disclosed the details of the vulnerability thereafter. Affected by the incident, ZEC fell 38% within 24 hours after the news was announced. The market is concerned that attackers may have used this vulnerability to steal funds from the privacy pool without leaving a trace on the chain. Hornby said it was commissioned by the non-profit organization Shielded Labs in April of this year to identify protocol vulnerabilities before attackers discover them. Despite being able to profit from the bug, he chose to report the issue to the development team and said “this betrayal is unacceptable.” Additionally, Hornby plans to apply for Zcash community grants to support subsequent security research efforts.

77d ago

MLM: Suspected $23 million in hacker funds to buy XMR triggered currency price fluctuations

According to MLM monitoring, three days ago, someone withdrew about $29.3 million USDC from Coinbase and began exchanging it for DAI, which is suspected to have been hacked or phished. Yesterday, the account began exchanging DAI back to USDC and USDC to Monero (XMR) through multiple wallets. The analysis shows that about 17 to 4 hours ago, the relevant addresses purchased a total of about 23 million US dollars of XMR, which contributed to an increase of nearly 15% in the XMR price during this period. Currently, these accounts still hold around $4 million of DAI on the chain, but they haven't continued to buy XMR.

84d ago

Data: About $29.3 million of suspected hacker funds flowed into XMR, driving the currency price to rise nearly 15% at one point

Comparing news, on-chain monitoring shows that a batch of funds related to suspected hacking or phishing activities has continued to buy XMR recently, with a cumulative purchase scale of about 23 million US dollars, which has had an obvious impact on market prices.

84d ago

From “Project Death” to Institutional Heavy Inventory: Zcash Strikes Back with a Private Bitcoin Narrative

Author: Bankless Compiled by: Yuliya, PanNews Original title: Opinion: After surviving the death cycle, how can Zcash, the founder of privacy, return to the mainstream view? Editor's note: Zcash has had its first true narrative moment in years. In this podcast, host David sits down with Multicoin Capital co-founder Tushar Jain and Helius CEO Mert Mumtaz to analyze why privacy may be a missing value storage primitive in cryptocurrencies, why Zcash is positioned as a “private Bitcoin,” how the entry of institutions will normalize privacy funds, how AI and on-chain surveillance are changing the privacy debate, and why the risks of quantum computing may become Zcash is a real catalyst. Zcash has survived the death cycle. Privacy is the final puzzle of encryption David: Mert, you've been talking about Zcash for more than half a year. Tushar, Multicoin also recently publicly announced heavy Zcash positions. Tushar, what made you decide to invest in Zcash on a large scale now? Tushar: Mainly a combination of several factors. First of all, I have to admit that Mert paid attention to this earlier than me, and I had a wait-and-see attitude at first. I've known the Zcash project since its inception, but for a long time, it was basically treated as a “death project” by the market, and no one paid attention to it. Last year, I saw a sudden increase in discussions surrounding Zcash, and the price went up. But I was wondering: is this hype? Can it last? The market later recovered, and the cryptocurrency experienced a macro-bear market and serial liquidations, and the price of Zcash also fell. But what surprised me: first, those who supported it before are still supporting it; second, its price support level after the pullback is much stronger than when no one paid attention to it in the past few years. It has withstood the market wash, the core team hasn't left, and the community is still there, which proved to me that its consensus is sustainable, which is the main reason we decided to invest. David: Mert, everyone used to know you're a “Solana die-hard fan,” but now you're almost a “Zcash spokesperson.” Tell me about this transformation, what are you seeing in Zcash? Mert: Two years ago, Sean Bowe, the core developer of Zcash, asked me to help evaluate their expansion plans. I also thought Zcash had cooled down at the time, but after thorough research, I discovered that its ZK technology was excellent and really useful. It's just that they're doing a poor job in user experience, recruitment, marketing narrative, and market positioning. BTW, I'm still a “Solana First”; my company works on Solana's infrastructure, and we're even developing a privacy layer on Solana now. My personal investment strategy is a “barbell strategy (two-way bet)” — Bitcoin and Zcash on one end and Hyperliquid and Solana on the other. Later, as cryptocurrencies became more and more “institutionalized” (such as the entry of Wall Street), I began to get confused. What kind of defense technology, drones, and cutting-edge AI laboratories were everyone working on. I was wondering, what exactly is the coin industry doing? USDC is cool, but to put it bluntly, it's just an API interface for the dollar. I feel that cryptocurrencies have strayed from their original purpose. I realized that “privacy” was the last piece of the puzzle forgotten in the crypto world. Cryptocurrency development has several stages: Bitcoin has proven that cryptocurrencies can be used; Ethereum (Vitalik) has proven that it can be programmed; Solana (Anatoly) has proven that it can be expanded. However, in the process of legalizing “cryptocurrencies are not used to commit crimes,” everyone lost their “privacy.” Now that the regulatory environment is likely to improve, we have ushered in a window where we can bring privacy back to the crypto world and return it to its roots. Why Zcash, and why now? David: So, it's really an ideal return to cryptopunk. However, there are other privacy coins on the market, so why Zcash? Why now? Mert: There are many reasons why Zcash is receiving attention in the current market, and institutionalization is one of the key factors. Events such as BlackRock ETF, Bitcoin derivatives, and Jane Street have once again heated up the market's focus on private assets. Meanwhile, the participation of famous people such as Saylor was also...

93d agoburnking#Zcash #Bitcoin

Monero GUI 0.18.5 “Fluorine Fermi” released, fixes several bugs and upgrades P2Pool components

In comparison, the privacy coin project Monero released the graphical wallet software GUI 0.18.5 “Fluorine Fermi” version. This update is a recommended upgrade, which mainly includes a number of bug fixes and functional optimizations. The focus of this update includes migrating the P2Pool installation path to LocalAppData on Windows systems, fixing boundary issues in URI parsing, prohibiting the creation of offline transactions in long payment ID scenarios, parsing untrusted text during QR code scanning, improving security, upgrading P2Pool to v4.15, and a number of detailed bug fixes and stability improvements. Monero officially stated that this version has been released as an open source on GitHub, and users can download the upgrade through the official channel to get the latest security fixes and stability improvements.

102d ago

Everyone is watching Bitcoin, but Zcash used a market capitalization of $6.9 billion to complete a counterattack

Author: Camille Meulien Compiled by: AidiDiaoJP, Foresight News Original title: While everyone is watching Bitcoin, Zcash is quietly surging beneath the surface of the 2026 cryptocurrency rally, a trend is quietly building up, and most market commentators have overlooked it. As Bitcoin (BTC) dominates the headlines and Ethereum Layer-2 projects compete for throughput records, the privacy coin sector is preparing for a quieter and possibly more important trend in a structural sense. As of May 4, 2026, Zcash (ZEC) traded at $413, a 24-hour increase of more than 7%, and its market capitalization has surpassed $6.9 billion. This makes ZEC the 18th largest cryptocurrency by market capitalization in the world, a ranking that seemed almost impossible to achieve in 2023 and 2024 when regulatory pressure caused multiple exchanges to completely remove privacy assets. Note: At the time of publication, the ZEC price hit a maximum of $606 and is now reported at $572. Abstract As of May 4, 2026, Zcash traded at $413 with a market capitalization of $6.9 billion and ranked 18th globally, mainly driven by institutions' interest in privacy protection infrastructure. Zcash's first zero-knowledge proof technology has become the backbone of major Ethereum Layer-2 networks, verifying the value of the protocol's ten-year research investment. Regulatory headwinds remain a core risk in this area, but compliance-oriented blocking transaction features and institutional escrow adoption are reshaping the way regulators view privacy coins. Zcash's price movement is not random noise. The 7% single-day increase recorded by ZEC on May 4, 2026 did not come out of thin air. The asset has been steadily rising against the BTC and USD benchmarks for several weeks, reaching $771 million in 24-hour trading volume on May 4. This trading volume figure is remarkable because it is equivalent to more than 11% of ZEC's total market value changing hands in a single day. This liquidity ratio indicates real speculative interest rather than weak market manipulation. The broader basket of privacy coins also rose at the same time. Monero (XMR), a long-term volume leader in the sector, continued to flow in the first and second quarters of 2026. Academic research on the price behavior of privacy coins has consistently found that when macroeconomic uncertainty rises or regulatory clarity appears (in either direction), ZEC and XMR tend to see a surge in correlation, as both catalysts force market participants to reprice the value of financial privacy options. On May 4, 2026, ZEC's 24-hour trading volume was $771 million, accounting for more than 11% of its total market capitalization. This liquidity ratio is in line with the characteristics of institutional repositioning rather than retail trading alone. Unlike previous ZEC spikes (particularly the 2021 bull market), this rise occurred against the backdrop of substantial improvements to the protocol and a fundamental shift in the zero-knowledge cryptography narrative. The Electric Coin Company, which developed Zcash, has introduced several upgrades over the past few years to make shielded transactions faster, cheaper, and more compatible with the broader DeFi ecosystem. This technological maturity is being priced by the market. Zero-knowledge proof is going mainstream, and the most important background for Zcash's pioneers to understand Zcash's 2026 positioning is that zero-knowledge proof — the cryptographic primitive that supports ZEC's blocking transactions — has become the defining technology for blockchain expansion and privacy as a whole. This is not a fringe observation, but the consensus view of all major crypto research institutions today. a16z Crypto's 2025 “State of Cryptocurrency Report” indicates that zk-rollup has taken up most of Ethereum's new Layer-2 developer activity, and projects such as zkSync, StarkNet, and Polygon zkEVM have jointly processed hundreds of millions of transactions. These systems all rely on zk-SNARK and zk-Stark proof system variants developed and promoted by Zooko Wilcox and Electric Coin Company through the launch of Zcash in 2016. Zcash's 2018 Sapling upgrade will block transfers...

108d agoburnking#Zcash #Bitcoin