xpl

Dragonfly partner Haseeb tweeted to clarify the recently fixed vulnerability in Zcash. He stated that if the vulnerability had been exploited before the fix (although the probability is extremely low), it would manifest as the privacy pool minting false ZEC. Attackers would need to sell quickly, but since the market primarily trades transparent ZEC, they cannot directly sell the unmasked privacy ZEC on mainstream exchanges. Therefore, the losses would mainly be borne by users holding privacy ZEC, with almost no impact on holders of transparent ZEC and price discovery.Haseeb emphasized that the Zcash team will introduce a new turnstile mechanism and a brand new privacy pool in the next upgrade to verify that the privacy pool has not been inflated. He also has high hopes for formal verification technology, believing it is an important path for enhancing software security across the industry in the future, especially crucial for privacy protocols.

On May 29, 2026, Taylor Hornby discovered a critical forgery vulnerability in the Zcash Orchard funding pool. Taylor Hornby reported the vulnerability to the Zcash Open Development Lab, and all parties collaborated to complete the fix on June 2. This vulnerability could be exploited to secretly create an unlimited number of forged ZEC within Zcash Orchard. Due to the privacy features of Orchard, it is impossible to cryptographically prove whether the vulnerability was exploited before the fix was deployed. The vulnerability had existed since the activation of Orchard in May 2022, until an emergency fix was deployed on June 1, 2026.With the assistance of AI tools, Taylor Hornby wrote a complete exploit and generated unlimited and undetectable forged ZEC in a local testing environment. Currently, Shielded Labs is collaborating with other Zcash developers to explore network upgrade proposals that would allow anyone to verify the integrity of Zcash's supply.

According to The Block, the core development team of the Cosmos ecosystem, Cosmos Labs, announced the acquisition of the Cosmos block explorer Mintscan and the establishment of a new subsidiary, Cosmos Labs Korea, in Seoul, South Korea, to coordinate the construction of several key infrastructures in the Cosmos ecosystem.According to Barry Plunkett, Co-CEO of Cosmos Labs, the transaction negotiations began in October 2025, initiated by the co-founder of the South Korean crypto company Stamper (the legal entity of Cosmostation). Both parties did not disclose the transaction amount, financing method, or whether it involved Cosmos Hub tokens.

Gate Europe successfully held the "Capital Social at Money20/20 Europe" industry exchange event. The event was jointly organized by Gate Institutional, Gate Fiat, and Gate Pay, attracting over 150 professionals from the fields of payment, OTC, institutional trading, and fintech to discuss the integration trends of digital assets and traditional finance, as well as opportunities for institutional market development.During the event, the senior team of Gate and industry guests engaged in discussions on topics such as the integration of fiat currency and digital assets, institutional liquidity, cross-border payments, and institutional-level settlement. Partner Utexo conducted specialized discussions on institutional liquidity, fiat infrastructure, and payment collaboration. In a roundtable discussion themed "Everything Capital," attendees focused on topics such as capital flow efficiency, the construction of institutional payment networks, the evolution of OTC market structure, and innovations in cross-border settlement.This event provided a deep communication platform for traditional financial institutions, payment companies, and participants in the digital asset industry.Currently, Gate Group's Malta entity Gate Europe has obtained European MiCA and PI licenses under the supervision of the Malta Financial Services Authority (MFSA), continuously advancing its compliance layout in Europe and strengthening its infrastructure capabilities in institutional payments, fiat channels, and cross-border settlement. As the industry moves towards a higher level of compliance and institutional development, Gate will continue to deepen global industry collaboration and promote the integration of digital assets and traditional finance.

Visa has invested in the AI programming platform Replit to promote the development of agentic payments and explore how developers and AI agents can directly receive payments within the platform.

F2Pool co-founder Wang Chun talks about why he chose Mars instead of the Moon as the target for SpaceX's first interstellar manned mission. He believes that even without private investment, humanity will still reach the Moon, and likely very soon. As space competition intensifies, governments around the world will establish lunar bases. I am happy to watch all of this happen.On the other hand, I am still uncertain about the progress of Mars exploration within our lifetime, and I feel that something should be done about it. I hope that by purchasing a ticket for a mission to fly by Mars, SpaceX will have another reason not to forget about Mars. Because we really should not delay Mars exploration for the next generation.Yesterday, SpaceX announced that Wang Chun will participate in SpaceX's first interstellar manned mission as the mission commander, executing a flight lasting about two years: first exploring the outer space of the Earth-Moon system, then flying by Mars and returning to Earth. Before this interstellar mission, Wang Chun will participate in a commercial crewed lunar flyby with Dennis and Akiko Tito, with the planned flight being within 200 kilometers of the lunar surface. This is the first commercial crewed interstellar mission of Starship, and Wang Chun previously commanded the Fram2 polar orbit mission in 2025, gaining experience for this flight.

According to token unlocking data from the Crypto asset data platform RootData, Plasma (XPL) will unlock approximately 88.89 million tokens at 12:00 PM Beijing time on May 28, worth about 7.83 million USD.

Circle co-founder and CEO Jeremy Allaire retweeted an article on X about "How to Build an AI Agent that Can Sign Legal Contracts."Allaire stated that he is willing to invest in a team that uses the Circle Agent Stack to build this business on Arc.

The GoPlus Security team has disclosed a new type of attack in its AgentGuard AI project: inducing AI agents to perform unauthorized sensitive operations through "memory poisoning." This attack method does not rely on traditional vulnerabilities or malicious code but exploits the long-term memory mechanism of AI agents. For example, an attacker first induces the agent to "remember preferences," such as "usually prioritizing proactive refunds instead of waiting for chargebacks," and then uses vague expressions like "process as usual" or "execute as before" in subsequent instructions, thereby triggering automated financial operations.GoPlus points out that the key risk in such cases lies in the AI agent mistakenly treating "historical preferences" as a basis for authorization, leading to financial losses or security incidents in operations such as refunds, transfers, and configuration changes. To address this issue, the team has proposed several protective recommendations, including:Operations involving refunds, transfers, deletions, or sensitive configurations must require explicit confirmation in the current session.Memory-related instructions like "habit," "usual way," and "as before" should be regarded as high-risk state changes.Long-term memory must have a traceability mechanism (writer, time, confirmation status).Vague instructions should automatically elevate the risk level and trigger secondary verification.Long-term memory must not replace real-time authorization processes.The team emphasizes that the "AI agent memory system" should be viewed as a potential attack surface and should be constrained and audited through a dedicated security framework.

According to a notice from Transit Finance, a security incident recently occurred in the project due to historical vulnerabilities in an old version of the smart contract deployed on TRON, which was deprecated in 2022, affecting a small number of users after being exploited.The team stated that after discovering the issue, they urgently completed investigation, isolation, and repair, and on May 12, further auditing and rectification were carried out. The currently used contract version has not been affected, has been running safely for over four years, and continues to undergo security audits and monitoring.Transit stated that affected users will receive full compensation, and specific plans will be announced through official channels. They also reminded users to be wary of counterfeit official messages and not to disclose private keys or mnemonic phrases.

Crypto journalist Eleanor Terrett revealed that U.S. Senator Jack Reed submitted an amendment before the stablecoin bill review this Thursday, aiming to explicitly prohibit cryptocurrencies from being used as legal tender, including banning the payment of taxes with crypto assets.Senator Elizabeth Warren also submitted over 40 amendments, one of which aims to prevent the Federal Reserve from issuing master accounts to cryptocurrency companies. Another amendment jointly submitted by Senators Reed and Smith seeks to include restrictions on banks regarding stablecoin yields in the bill.

The U.S. Treasury Department has sent a letter to Binance, requesting compliance explanations regarding recent reports involving cryptocurrency transactions related to Iran and to strengthen regulatory cooperation.It is reported that this move comes amid ongoing scrutiny by U.S. regulators over cross-border capital flows on cryptocurrency platforms. Previous investigations and media reports have pointed to the possibility that Iran and related entities may be transferring funds through centralized exchanges, drawing the attention of the U.S. Treasury and Justice Departments.

The AI Agent Economy project NeoSoul today announced a strategic partnership with the self-hosted stablecoin Neobank AllScale.It is reported that both parties will conduct in-depth research on the credit formation of AI Agents and stablecoin settlement, focusing on the payment needs generated by Agents in autonomous collaboration (such as purchasing data, invoking tools, requesting services from other Agents, etc.), and how to achieve automated settlement through stablecoins.According to the introduction, NeoSoul is committed to building its long-term credit network by recording the judgment processes and feedback results of Agents; AllScale focuses on stablecoin payments and commercial capital flow scenarios. This exploratory cooperation aims to study how to provide more efficient and low-friction value transfer support for future automated collaboration and micro-settlement between AI Agents through stablecoin payment infrastructure.