att

Despite the recent continuous decline of Bitcoin and Ethereum, the ETF product tracking the Hyperliquid ecosystem token HYPE has seen a surge in funding. The HYPE spot ETFs launched by Bitwise and 21Shares in May of this year (with codes BHYP and THYP respectively) attracted nearly $150 million in asset inflows within a few days of listing, achieving net inflows on most trading days. Grayscale's Hyperliquid Staking ETF (HYPG), launched this week, currently has assets totaling $4.5 million.Bitwise Chief Investment Officer Matt Hougan stated that Hyperliquid's market penetration is currently only about 1%, and most investors are still unfamiliar with the project. Hyperliquid is a decentralized perpetual contract trading platform built on an independent blockchain, which rapidly rose to prominence during the U.S.-Iran conflict last year by providing weekend crude oil trading channels, with trading volumes reaching about $1 billion per day at one point.Grayscale Research Director Zach Pandl noted that the HYPE ETF attracts more new investors who have not previously participated in the crypto market, rather than capital rotation from Bitcoin. Analysts believe that Hyperliquid's biggest appeal lies in its unique value capture mechanism—99% of the platform's generated fee revenue will be used to repurchase HYPE tokens, similar to stock buybacks by listed companies, creating a direct link between platform activity and token value, making it easier for traditional equity investors to understand.As of now, the 21Shares Hyperliquid ETF has assets under management of $75.8 million, while the Bitwise Hyperliquid ETF has $71.14 million. Industry insiders believe that spot ETFs are becoming an important bridge connecting traditional finance and DeFi, helping to enhance the visibility of the Hyperliquid platform and promote mainstream adoption. However, analysts also remind that Hyperliquid cannot be used directly in the U.S. yet, and regulatory approval may not come until 2027, while competition from traditional finance and DeFi platforms may continue to intensify.

According to market data, this morning the market capitalization of USDT briefly surpassed that of ETH. The market capitalization of ETH fell below 190 billion USD, reported at 186.66 billion USD, with a 24-hour decline of over 13%; the market capitalization of USDT is reported at 187.4 billion USD.

According to monitoring by Catcher Predict, in the predicted market Polymarket for the event "Roland Garros ATP: Matteo Arnaldi vs Flavio Cobolli," the "Matteo Arnaldi" option in the sub-market "Roland Garros ATP: Matteo Arnaldi vs Flavio Cobolli" has experienced significant fluctuations in winning probability, soaring from 32.5% an hour ago to the current 49.5% (a fluctuation of 17%). Please note the impact of related breaking news.

According to Slow Fog monitoring, the DTXT/USDT trading pair on the BNB Chain was attacked, resulting in a loss of approximately 35,041 USDT.The root cause of the attack lies in the DTXT contract, which determines the type of operation by comparing the USDT balance with the trading pair's reserve amount. The attacker directly transferred a small amount of USDT to the trading pair address, causing a large DTXT sell-off to be misjudged as adding liquidity, thus bypassing the sell transaction fee logic.The attacker borrowed 1,077,400 USDT through a flash loan from Moolah, making a profit of approximately 35,000 USDT.

According to CertiK Alert monitoring, the Gravity Bridge attacker has deposited 1,180 ETH into Tornado Cash again, worth approximately $2.06 million. The attack incident has stolen a total of 2,600 ETH (worth about $5.4 million at the time of the attack), of which 2,020 ETH has been deposited into Tornado Cash through two EOA addresses, and the remaining portion has been dispersed and transferred to centralized exchanges.

According to TenArmorAlert monitoring, the BY token on the BSC chain was attacked, resulting in a loss of approximately $88,400.

According to The Block, the latest "2026 Ecosystem Vulnerability Audit Report" released by Web3 security company Immunefi shows that losses from DeFi protocols due to hacker attacks have decreased by 74% from the peak of $2.62 billion in 2022 to approximately $680.3 million in 2025.The report points out that the median loss per attack has also significantly decreased, from $6 million in 2022 to $1.5 million in 2025, reflecting an overall improvement in security levels.At the same time, the proportion of losses from bridge exploits has dramatically decreased from 73% in 2022 to 3% in 2025, and the share of flash loan attacks has dropped from 54% to less than 1%. Risks at the infrastructure level (such as private key leaks and database attacks) have also decreased from 30.7% in 2022 to 10.3% in 2025. Immunefi stated that this reflects the ongoing optimization of oracle design, reentrancy attack protection, and access control standards, indicating that the overall DeFi ecosystem "is becoming safer."However, the report also notes that losses slightly rebounded to $680.3 million in 2025, mainly due to the increasing complexity of multi-chain systems and a few high-severity incidents. Meanwhile, the number of independent security incidents continues to rise, reflecting an expanding attack surface.

According to SlowMist monitoring, a new type of Rust supply chain malware activity named IronWorm is attacking developer environments and the Web3 ecosystem through malicious npm packages. Potential attack behaviors include credential theft, wallet mnemonic and password theft, GitHub repository tampering, malicious package publishing, CI/CD secret leakage, Tor-based command control, and eBPF rootkit stealth.Security teams should audit the repository for backtracked commits, suspicious branches, unexpected build hooks, and commits from automated identities such as claude, dependabot, renovate, or github-actions. It is recommended to remove or deprecate affected package versions, publish clean versions, rotate all leaked keys and tokens, review GitHub Actions artifacts, and rebuild potentially compromised development or CI systems from clean images.

According to TenArmorAlert monitoring, the ATM tokens on the BSC chain were attacked, resulting in a loss of approximately $243,500.

According to monitoring by Catcher Predict, in the market prediction event "New York Mets vs. Seattle Mariners" on Polymarket, the win probability for the "Seattle Mariners" option in the sub-market "Spread -1.5" has experienced significant fluctuations, rising from 42.5% an hour ago to the current 94.5% (a fluctuation of 52%). Please note the impact of related breaking news.

According to Jinshi reports, Federal Reserve official Hamak stated that they are currently focusing on multiple inflation indicators to assess the economic situation and the direction of monetary policy adjustments.

According to on-chain analyst PeckShield (@PeckShieldAlert), approximately 19 hours ago, TesseraDao (@TesseraDao) on the BNB Chain was attacked, with hackers maliciously minting 99 million TSR and immediately selling it off, causing the TSR price to plummet by 99%.The attackers then exchanged the obtained TSR for approximately 2.5 million USDT and transferred the funds across chains to Ethereum, where they have completed money laundering operations of 1,285.5 ETH through TornadoCash.

SlowMist has issued a security alert, detecting an active npm supply chain attack targeting @redhat-cloud-services related packages. Currently, over 31 packages have been confirmed affected, with a weekly download volume of approximately 116,000 times, and stolen credentials exist in more than 300 GitHub repositories. This attack method is highly similar to the previous "Shai-Hulud" npm attack, including credential theft, creation of malicious repositories, and automated secret leakage. New suspicious repositories continue to emerge, indicating that the attack is still ongoing, and developers are still being continuously infected.Potential harms include: theft of GitHub/npm tokens, leakage of AWS/GCP/Azure cloud credentials, collection of SSH keys and Kubernetes secrets, leakage of local environment and wallet data, creation of malicious repositories and persistence operations, and even potentially destructive actions after tokens are revoked. It is recommended to immediately remove or downgrade affected @redhat-cloud-services package versions, conduct a comprehensive audit of CI/CD workflows and dependency installations, rotate all GitHub, npm, cloud service, SSH, and wallet-related keys, retain logs, and rebuild exposed developer machines or Runners from clean images while maintaining a high level of vigilance.

According to monitoring by Shield, the UXLink attackers are exchanging WBTC for ETH, having exchanged 92 WBTC (6.4 million USD) for approximately 3248 ETH, and deposited 1500 ETH into Tornado Cash.UXLink was attacked on September 22, 2025, due to the compromise of its multi-signature wallet, resulting in losses exceeding 44 million USD.

According to GoPlus warning, a user lost approximately $316,000 worth of USDC to a phishing attack due to signing a malicious Permit2 transaction.

According to Catcher Predict monitoring, in the predicted market Polymarket for the event "Roland Garros ATP: Frances Tiafoe vs Matteo Arnaldi," the "Over" option in the sub-market "Roland Garros ATP: Frances Tiafoe vs Matteo Arnaldi Set 1 O/U 8.5" experienced a dramatic fluctuation in winning probability, dropping from 81% an hour ago to the current 50% (a fluctuation of 31%). Please note the impact of related breaking news.

According to The Wall Street Journal, Florida has launched a fierce attack in an increasingly intense protest against the so-called safety flaws of artificial intelligence chatbots, becoming the first state to sue OpenAI and its CEO Sam Altman.The lawsuit filed by Florida Attorney General James Uthmeier on Monday claims that OpenAI and Altman were aware of the safety risks associated with their products but ignored warnings that could harm users.

The DeFi protocol Radiant announced that after experiencing a hacker attack in October 2024, and after 18 months of continuous efforts, the DAO no longer has a viable path to continue operations and will gradually enter the "sunsetting" phase.Currently, the project has no progress in recovering funds, no new capital injection, and lacks the funds and development space to maintain normal operations, thus it cannot continue responsible long-term operations.

The blockchain security agency PeckShield has issued an alert stating that Gnosis Pay is currently undergoing a security attack. Meanwhile, Gnosis co-founder Martin Köppelmann has publicly urged users to immediately withdraw their GNO and EURe assets to mitigate potential risks.Market analysis indicates that Gnosis Pay, as an important infrastructure connecting payment scenarios with on-chain assets, may face short-term selling pressure on Gnosis GNO and the euro stablecoin EURe if it is confirmed that funds have been stolen or protocol vulnerabilities exploited, further affecting market sentiment for Gnosis ecosystem-related projects.Currently, the official has not disclosed the scale of the attack, the amount of losses, or specific technical details, and the situation is still developing. Users holding related assets or using Gnosis Pay services should closely monitor official follow-up announcements and assess their risk exposure in a timely manner.