sati

According to the Korea Herald, the five major virtual asset trading platforms in South Korea (Upbit, Bithumb, Coinone, Korbit, Gopax) have experienced a total of 57 hacking and system failure incidents over the past six years (from 2020 to April 2026), with a total compensation amount of approximately 7 billion Korean won (about 5.1 million USD). By exchange, the number of incidents is as follows: Upbit 26 incidents, Bithumb 14 incidents, Gopax 8 incidents, Coinone 6 incidents, Korbit 3 incidents.Among them, Bithumb compensated approximately 2.5 billion Korean won (about 1.8 million USD) for the BTC misissue incident in February this year, Upbit compensated approximately 790 million Korean won (about 570,000 USD) for a hacking incident in November 2025, and compensated approximately 3.2 billion Korean won (about 2.3 million USD) for a system incident on December 3, 2024. It is worth noting that the standards for compiling incident reports by exchanges and the scale and form of compensation vary. For example, Gopax counts errors that occur when viewing the asset list as system failures, while Bithumb only counts situations where all customers encounter difficulties using core services for more than 10 minutes as system failures.In addition, Bithumb also provided some applicants who suffered losses due to system failures with free fee vouchers instead of cash compensation. The compensation amounts for system failures are as follows: Upbit approximately 3.21 billion Korean won, Bithumb approximately 3.2 billion Korean won, Coinone approximately 49 million Korean won. Korbit and Gopax did not provide any compensation.

Drift Protocol stated that its current top priority is to restart the platform and restore revenue-generating capabilities to expedite the recovery process of user funds. After the platform restarts, it will become the largest USDT-based perpetual contract trading platform on Solana, and the related revenue will be used to support a specially established user compensation fund.Drift claims that substantial progress has been made in the restart efforts with strategic support from Tether and other partners. To enhance security, Drift announced the appointment of Noah Prince, the former head of engineering at Helium Protocol, as the protocol lead, responsible for protocol restructuring and security system upgrades.Meanwhile, former members of the Gauntlet team have also joined the restart efforts, providing risk management and treasury design support for the platform, including clearing engine reviews, funding rate optimization, market parameter adjustments, and ongoing risk monitoring. Additionally, Drift has hired the cybersecurity company Mandiant to conduct an independent forensic investigation of the attack incident.The investigation results indicate that this attack can be clearly attributed to the North Korean hacker group UNC6862, which is associated with multiple cyber attack operations. Drift stated that it will continue to prioritize security in advancing the platform restart and will announce the user compensation mechanism and specific timeline in the future.

According to The Defiant, Binance announced that it will officially stop centralized NFT market services starting from July 3, 2026, and all NFT functions will be migrated to the self-custody Binance Wallet.This move marks a near-complete retreat of NFT markets supported by centralized exchanges (CEX). Previously, platforms such as Coinbase NFT, Kraken NFT, Gemini Nifty Gateway, and X2Y2 have successively closed or transformed.Binance stated that this adjustment aims to provide users with a more seamless Web3 NFT experience. Users must withdraw transferable NFTs to Binance Wallet or other self-custody wallets by July 3 at 23:59 (UTC), and the platform will reimburse part of the withdrawal fees.

The edgeX official report on the abnormal price fluctuations of the EDGE token states that the EDGE price once dropped from approximately $1.12 to about $0.32 within about 1 hour, during a period of weak liquidity, due to concentrated sell-offs from multiple addresses combined with high-leverage long liquidations and flash crashes triggered by CEX interactions. There were no changes to the team address during this period.edgeX stated that it will strengthen market making and liquidity, and set up a reward of 200,000 USDC on-chain to trace the addresses associated with the attack. At the same time, for users who incurred actual realized losses due to long positions in EDGE being liquidated or triggering stop-losses on edgeX Perp V1/V2 within a specified time window, the platform will provide goodwill compensation based on the actual loss amount, with a limit of 100,000 USDC per person, of which 50% will be distributed in USDC within 7 days after review, and 50% will be distributed in EDGE based on the 7-day TWAP in the first week of April 2027.

According to Gate market data, influenced by reports of Iran halting communication with the United States, the US Dollar Index DXY rose to a daily high of 99.23.

The Hyperliquid ecosystem project Ventuals posted on X: "We have noticed that about an hour ago, there was an incident in our SPACEX market. One of the off-chain data providers, which is a component of the oracle price, returned erroneous data, causing severe fluctuations in the oracle price and mark price of that market, which in turn triggered the liquidation of some users' positions.We have taken immediate measures to prevent similar situations from occurring in any Pre-IPO market and are assessing the impact of this incident on affected users to formulate an appropriate compensation plan. Affected users will receive compensation within the next 48 hours.According to previous news from ChainCatcher, the SPACEX-USDH perpetual contract on Hyperliquid experienced a 45% flash crash last night."

According to CCTV News, the State Council Information Office held a series of themed press conferences on "Starting the 14th Five-Year Plan," introducing the situation regarding "Promoting Comprehensive Rule of Law." At the press conference, Liu Guixiang, a deputy-level full-time member of the Supreme People's Court Judicial Committee and a second-level chief judge, stated that in-depth research on new case adjudication rules for virtual currencies, cross-border finance, and other new types of cases should be conducted. Judicial interpretations regarding civil compensation related to insider trading and market manipulation should be formulated as soon as possible to ensure the stable operation of the capital market and effectively safeguard the legitimate rights and interests of small and medium-sized investors.In response to the new business formats of the digital economy, normative documents regarding judicial protection of artificial intelligence cases and data ownership should be researched and developed. The adjudication rules concerning data ownership, data transactions, AI generation, and other aspects should be improved to promote the deep integration of digital technology with the real economy, assist in perfecting the foundational institutional system for data elements, and promote the construction of an integrated data market that is open, shared, and secure.

According to Decrypt, the Digital Chamber has written to OCC Director Jonathan Gould, urging him to stick to the decision to grant national trust bank charters to crypto companies like Coinbase, Ripple, and Circle.Previously, Senator Elizabeth Warren accused the approval of these charters of violating the National Bank Act and posing a threat to the safety of the U.S. banking system. The Digital Chamber countered that Congress has effectively authorized the OCC to extend bank charters to stablecoin businesses through the GENIUS Act, and that the approved companies do not accept FDIC-insured deposits, thus not constituting traditional banking operations.

According to Decrypt, MoonPay has launched a dedicated app within the ChatGPT application, allowing users to purchase cryptocurrencies such as Bitcoin, XRP, Solana, and USDC directly within the OpenAI chatbot. Users can ask ChatGPT for cryptocurrency information and then request to purchase a specified amount, after which ChatGPT will generate a MoonPay checkout link. Users must complete the standard KYC process and connect their wallets.MoonPay's blockchain engineer stated that ChatGPT is becoming an entry point for financial research, and the cryptocurrency purchasing feature has been previously missing. This app is part of MoonPay's expansion into AI-driven cryptocurrency tools. Earlier this month, MoonPay also acquired the AI trading startup Dawn Labs and launched the trading assistant Dawn CLI. Arifin mentioned that chatbots like ChatGPT are becoming the new entry points to the internet.

The Hong Kong Securities and Futures Commission issued a notice reminding the public to remain highly vigilant against scams that impersonate the Investor Compensation Fund. These scams often cause victims to suffer secondary losses. Scammers contact individuals who have previously suffered investment losses and falsely claim that the victims are eligible to recover losses from the compensation fund, demanding that they only need to pay an additional "deposit" or "fee" to arrange for the compensation fund to provide "compensation," resulting in many victims being defrauded a second time.The Hong Kong Securities and Futures Commission reminds the public that the Commission will not contact investors through social media or instant messaging platforms to request payments related to compensation claims.

According to Bits.media, the U.S. Department of Justice has announced the initiation of a compensation program for victims of the cryptocurrency mining scam AirBit Club. Founded in 2015, AirBit Club operated a financial pyramid scheme under the guise of cryptocurrency mining and virtual currency trading platforms. U.S. authorities have seized over $400 million in assets for compensation. Victims who previously provided information to the FBI or prosecutors will be contacted by RCB Fund Services. Prosecutors stated that there are no fees for the compensation process.The founder of AirBit Club was charged with money laundering and fraud by the Southern District of New York in August 2020, and the trial concluded in September 2023, with the court ordering the forfeiture of all fraud proceeds, including over 16,000 bitcoins.

According to Axios, American Republicans are increasingly dissatisfied with the flow of political donations in the cryptocurrency industry, demanding that the pro-crypto super PAC Fairshake, which holds about $165 million in funds, clarify its stance and focus on supporting Republican candidates in the 2026 midterm elections.Republicans pointed out that, against the backdrop of significant progress in promoting pro-crypto legislation such as the CLARITY Act, Fairshake has yet to announce specific election investment plans, which is disappointing. The points of contention include:Ohio Democratic Senate candidate Sherrod Brown: Fairshake spent over $40 million in 2024 to defeat incumbent Senator Brown, but Brown's attitude towards the cryptocurrency industry has noticeably softened in recent years.New Hampshire Congressman Chris Pappas: His Stand With Crypto rating rose from "F" to "A" within 8 months, and Republicans initially expected Fairshake to focus on his campaign.In response, Fairshake supporters stated that it is still too early to speak out and emphasized that the PAC is bipartisan in nature, aiming to "reward supporters and punish critics," rather than unconditionally supporting a particular party. Some pro-crypto Republicans (such as the Winklevoss brothers) have established separate independent groups specifically to support Republican candidates.

THORChain officials stated that a large number of fake accounts and false information have appeared in the market, involving activities such as "refunds," "airdrops," and "compensations"; preliminary investigations show that user funds were not harmed in the previous security incidents, and no refund, airdrop, or compensation plans are currently underway. Any accounts claiming otherwise are impersonating or spreading false information. Progress on the investigation and more information will be announced later.

According to a notice from Transit Finance, a security incident recently occurred in the project due to historical vulnerabilities in an old version of the smart contract deployed on TRON, which was deprecated in 2022, affecting a small number of users after being exploited.The team stated that after discovering the issue, they urgently completed investigation, isolation, and repair, and on May 12, further auditing and rectification were carried out. The currently used contract version has not been affected, has been running safely for over four years, and continues to undergo security audits and monitoring.Transit stated that affected users will receive full compensation, and specific plans will be announced through official channels. They also reminded users to be wary of counterfeit official messages and not to disclose private keys or mnemonic phrases.

CoW DAO announced that its domain registrar was subjected to a social engineering attack on April 14, during which the attacker briefly controlled the official domain for about 4.5 hours and directed users to a phishing website, thereby inducing them to sign malicious transactions. The project team emphasized that the CoW Protocol itself was not compromised, but some user assets were affected during that time window.In response to this incident, the CoW DAO community governance proposal CIP-86 has been approved, establishing a discretionary compensation fund to reimburse affected users for their losses. The official reminder states that eligible users must submit their claims by May 14, including affected wallet addresses, asset information, transaction hashes, and names, and apply via email at [email protected], with the email subject clearly stating "Discretionary Grant Claim for".

The AI infrastructure platform B.AI has released a history of Credits consumption record optimization and compensation explanation. With the continuous upgrade of the Credits billing system and display dimensions, the platform has recently conducted a comprehensive review of historical consumption records. During this process, it was found that for certain requests made between May 1, 2026, 00:00 and May 3, 2026, 03:00 (SGT), the consumption details displayed on the front end did not fully present all cost components. This was mainly due to the underlying cache-related fees not being displayed on the page, causing users to typically only see input/output token consumption, leading to a misunderstanding of the overall Credits consumption.To address the above issues, the platform has now completed data corrections and realigned with historical records. Additionally, based on more cautious and user-friendly rules, Credits compensation will be automatically issued to affected accounts (valid for 30 days from the date of receipt) without any action required from users. Please pay attention to account balance updates. In the future, B.AI will continue to upgrade the Credits display system to further enhance long-term transparency and user experience.

Syndicate stated on platform X that regarding the latest developments of the Syndicate bridge security incident, all affected SYND holders on the Commons Chain have received full compensation, along with an additional 15% of the total losses as compensation.The relevant amounts have been directly sent to the affected users' Base chain wallets, with the Gas fees covered by Syndicate Labs. The total compensation amounts to 12.901 million SYND, and no action is required through any claim page.

Wasabi Protocol released a security incident update, stating that attackers exploited a configuration vulnerability in the Spring Boot Actuator within its AWS infrastructure to steal the private keys controlling EVM smart contracts, resulting in the theft of approximately $4.8 million in user funds and $900,000 in protocol treasury funds, with total losses amounting to about $5.7 million.The attack chain began with a public server used for analysis, whose Actuator heap dump was not properly password protected, allowing attackers to obtain credentials for another server and ultimately gain control of the smart contract private keys. This incident only affected EVM deployments, including certain treasuries on Ethereum, Base, Blast, and Berachain, while Solana deployments and Prop AMM were not affected.There has not yet been a final update on the user compensation plan, but "ensuring all affected users are compensated" remains the team's top priority, and updates on the investigation progress will be released in the Discord community in the future.

Kelp DAO announced that it will migrate its re-staked token rsETH to Chainlink CCIP, stating that this move is to enhance security.Previously, the cross-chain bridge built by Kelp DAO based on LayerZero was attacked on April 18, resulting in hackers stealing approximately 116,500 rsETH, involving an amount of about $292 million, and using the related assets as collateral to borrow WETH on Aave v3. Regarding the cause of the vulnerability, LayerZero previously stated that the issue stemmed from Kelp DAO using a single DVN verification path configuration instead of multiple independent verifications. Kelp DAO responded that this configuration was the default setting and that LayerZero had confirmed its security without indicating any related risks. LayerZero CEO Bryan Pellegrino subsequently denied this claim, stating that Kelp DAO had actively modified the default multi-DVN configuration. Both parties are currently still in ongoing disputes over the attribution of responsibility.

According to Cointelegraph, the U.S. law firm Gerstein Harrow LLP has applied to the court for an injunction to prevent Arbitrum DAO from transferring frozen Ethereum assets related to the Kelp attack.The law firm claims that its clients have obtained default judgments in three cases against North Korea, totaling approximately $877 million (including punitive damages and interest), and assert a right to claim the related assets.Previously, Kelp DAO was attacked on April 18, resulting in losses of about $292 million, which is believed to be related to the North Korean hacker group Lazarus Group. Subsequently, the Arbitrum security committee urgently froze approximately 30,766 Ether (about $73 million).The incident has sparked controversy. Some community members believe that if the injunction takes effect, it will delay the return of funds to the victimized users and shift the North Korean-related debts onto secondary victims. Previously, Aave Labs had proposed to unfreeze the funds and inject them into a compensation fund to restore the damaged assets.It is worth noting that Gerstein Harrow has previously filed claims regarding assets stolen by North Korean-related hackers and frozen by cryptocurrency platforms, including the 2023 Heco Bridge incident. Industry analysts believe that this case may have a demonstrative impact on the disposal of DAO assets and the definition of cross-jurisdictional claims.