imme

The Core Lightning team, which develops the open-source Bitcoin Lightning Network node software, has issued an urgent alert stating that reports indicate attackers are targeting nodes that have not installed patches, urging operators still running old versions to upgrade immediately. The team stated: "Emergency security update: If you are using version 26.06.7 or earlier, please upgrade to the latest release as soon as possible."Prior to this, Core Lightning began investigating a potential issue that could affect its experimental features and, in turn, impact user funds on September 16, and approximately six days later, version 26.06.8 was released. This update not only fixed several defects but also provided patches for security vulnerabilities reported responsibly by multiple parties, thanking the Bitcoin Red Team and 12 other individuals and organizations in the release notes, while also acknowledging anonymous reporters.According to the changelog, this round of fixes covers a bug that could cause sender nodes to crash, requests that could exhaust REST interface memory, and a vulnerability that could result in user funds facing confiscation losses when closing payment channels. To provide operators with ample upgrade windows and prevent attackers from taking advantage of reverse engineering and exploitation, this version intentionally obscured some testing content. Additionally, in August of this year, the project initiated a collaborative fixing process after reviewing a large number of AI-generated general vulnerability disclosure reports, and two days later released version 26.06.7 to close confirmed vulnerabilities.

The core provisions of the regulatory framework for payment stablecoins in Florida, USA, will take effect on October 1, 2026.According to the state's Bill 2026 Chapter 176, engaging in the business of qualified payment stablecoin issuers in the state generally requires a license or must meet exemption conditions; qualified issuers must maintain at least a 1:1 identifiable reserve, which includes cash, funds in Federal Reserve accounts, qualified bank deposits, U.S. Treasury securities with a remaining maturity of no more than 93 days, and qualified government money market funds, among others. They must also publicly disclose redemption policies, disclose reserve composition monthly, accept monthly audits by certified public accountants, and be certified by the CEO and CFO.If the total issuance of payment stablecoins by state-level issuers reaches $10 billion, unless a federal exemption is obtained, they must transition to the corresponding federal regulatory framework within 360 days or suspend new issuances until the scale falls below the threshold.

According to Quit monitoring, the Payment Processor V2 (PPV2) vulnerability attack is still ongoing. Even if users are not affected by the incident, as long as the relevant authorization has not been revoked, assets may still be at risk, and it is recommended to revoke the authorization immediately.About 1 hour ago, a certain address lost 0.15246 WETH in the next block after accepting a quote and receiving funds. The attacker paid 99% of it as a tip to Titan Builder, keeping only about 0.0015 ETH, which is almost impossible to recover through front-running. Quit suggests that OpenSea should check whether there are still risk authorizations before users accept quotes and require users to revoke them first; when transferring NFTs, it should also check whether the receiving address has relevant authorizations left.

Kohlberg Kravis Roberts Jason Thomas stated that the Federal Reserve's implementation of a 25 basis point interest rate hike is under "great pressure."

The G7 Cybersecurity Working Group stated in its latest report that quantum computing poses security threats to both public and private institutions, as well as economic threats, and relevant organizations should begin migrating to post-quantum cryptography (PQC) immediately. The working group noted that the migration process could take several years, and attackers can currently collect and store encrypted data to decrypt it once sufficiently powerful quantum computers become available.Quantum computing may also break digital signatures, leading to identity theft and exposing businesses and their supply chains. The report did not mention cryptocurrencies, but similar public key cryptography is used for blockchain wallets and transaction authorizations. Currently, quantum computers are unable to break Bitcoin's cryptography, but developers are considering post-quantum solutions such as BIP-360. Ethereum researchers plan to replace several cryptographic components used by accounts, validators, and applications. The Solana Foundation has tested post-quantum signatures on its testnet and launched an optional hash-based vault. The G7 working group also urged governments to support relevant research, public-private collaboration, and national PQC strategies.

Bitcoin News posted on the X platform that Core Lightning version 26.06.7 has been released, fixing multiple vulnerabilities disclosed responsibly over the past three weeks. The AI-generated security reports for the open-source Bitcoin project have recently increased, and specific vulnerability information will be kept confidential for two weeks to allow node operators to complete upgrades before the technical details and source code are disclosed.Developers warn that immediate disclosure of the fixes could allow attackers to reverse-engineer the vulnerabilities and subsequently attack nodes that have not yet been updated. All Core Lightning node operators should upgrade immediately. Currently, the Docker image is not available, and developers explicitly warn users not to wait for the Docker image.

According to Digital Asset, Park Soo-young, a member of the Korean National Power Party, criticized the government's plan to tax virtual asset gains, stating that it is "a threat of a tax bomb if one does not invest in the domestic stock market," and demanded an immediate withdrawal.Member Park Soo-young stated on her YouTube channel: "I hope this punitive tax plan that puts 13 million digital asset users in danger can be withdrawn immediately." She added, "This does not mean that people will invest in domestic stocks; on the contrary, it will only accelerate the outflow of national wealth." She cited that approximately 124 trillion won flowed into overseas digital asset exchanges from January to September last year.

According to monitoring by The Data Nerd, a certain whale held 40,000 ETH a week ago, and 2 hours ago withdrew 50,000 ETH from Binance and immediately staked it, increasing the holding size to 90,000 ETH, worth approximately $170 million.

Meta Platforms (META.O) launched Muse Glimmer, an open-source agent model that can run on Mac or PC.

According to CoinDesk, U.S. Senate Majority Leader John Thune officially submitted a procedural motion for the Clarity Act after an all-night voting session on Saturday morning, initiating the first procedural voting process for the bill in the Senate. This move makes it possible for the Clarity Act to enter procedural voting immediately after the September recess, but the bill has already missed the voting window before the August recess, and passing in September still faces challenges.The Clarity Act requires at least 60 votes in support, and currently needs the backing of at least 10 Democratic senators, but there are still disagreements over the ethical clause that prohibits senior government officials (including President Trump) from participating in cryptocurrency projects. Bipartisan senators have submitted a revised proposal to the White House, but it has been on hold for at least a week without a response. Additionally, controversies surrounding illegal financial protections and stablecoin earnings remain unresolved. If the procedural vote fails in September, the chances of the Clarity Act passing this year will be extremely slim, and the new Congress in 2027 will need to reintroduce the legislation.

According to Decrypt, the Bitcoin payment processing project BTCPay Server has warned users of a serious vulnerability in its servers that is currently under active attack. Attackers may exploit this vulnerability to gain unauthorized access and cause financial loss. Administrators are required to upgrade to version 2.4.2 immediately and confirm that the server footer shows the update is complete.If an upgrade cannot be performed in a timely manner, the official recommendation is for users to temporarily shut down BTCPay Server to prevent further attacks. Additionally, BTCPay Server advises users to change any potentially exposed macaroons credentials, recreate the macaroons.db file, and refresh the authentication strings for other Lightning Network backends.

According to Jinshi reports, UN Secretary-General António Guterres called for an immediate cessation of hostilities in the Gulf region at the United Nations headquarters in New York, urging the full restoration of international navigation rights and freedoms in the Strait of Hormuz, the Strait of Mandeb, and surrounding areas, and to resolve disputes through diplomatic means.Guterres pointed out that the military escalation in the Gulf region has been ongoing for six months, affecting global stability, leading to a contraction in trade and disruptions in energy markets.

According to Jinshi reports, on July 31, Foreign Ministry spokesperson Mao Ning responded at a regular press conference to reports about the possibility of the United States taking military action against Cuba. Mao Ning stated that China has repeatedly clarified its position, and the U.S. should immediately stop threatening Cuba with force and cease its unilateral blockade and sanctions against Cuba. China will continue to support Cuba in maintaining its national sovereignty and oppose foreign interference.

U.S. Treasury Secretary Scott Bessent urged the Senate on Thursday to pass the Clarity Act, stating that the House of Representatives passed the bill over a year ago, and staff from the Senate Banking and Agriculture Committees have since engaged in thousands of hours of bipartisan negotiations on the revisions. Bessent stated that the bill will strengthen consumer protections and anti-money laundering requirements, and provide regulatory certainty for digital assets. He also mentioned that the Blockchain Regulatory Certainty Act provisions in the Clarity Act will protect decentralized software developers, clarifying that they are not subject to the registration requirements of the Bank Secrecy Act.Bessent criticized Senate Democrats for delaying the vote for political reasons, stating that the relevant vote will determine whether the U.S. continues to maintain its global leadership in digital assets. At the end of his post, he quoted Bitcoin creator Satoshi Nakamoto: "If you don't believe me or don't understand, I don't have time to try to convince you, sorry." The Clarity Act aims to establish a federal framework for the U.S. digital asset market and allocate regulatory responsibilities for digital assets to the SEC and CFTC, with most crypto assets typically falling under CFTC jurisdiction. Senate Majority Leader John Thune recently stated that the bill is not expected to pass the Senate before the August recess.

According to a report by The Information citing informed sources, a Shanghai state-owned company whose name has not been disclosed has begun producing domestically-made immersion DUV lithography machines, planning to manufacture about 5 units this year and increase to about 20 units by 2027. The first batch of equipment will be delivered to major foundries such as SMIC, Hua Hong Semiconductor, and ChangXin Technology, but the equipment still needs to undergo verification for accuracy, stability, and production line compatibility, a process that may take several months or even longer.Currently, most components of the equipment come from domestic sources, but some key parts still rely on Japan, and the performance and manufacturing quality lag behind ASML. In comparison, ASML is set to deliver about 131 immersion DUV lithography machines as early as 2025. Although domestic equipment has made the leap from prototype testing to small-scale production, there is still a significant gap before it can replace ASML on a large scale. Previously, Reuters reported that the U.S. is considering tightening restrictions on the export of lithography equipment to China and on maintenance services in China, and the delivery of domestic equipment coincides with this backdrop.

The cross-chain interoperability platform Relay Protocol has issued a warning, stating that since the launch of the Ethereum Layer 2 network Robinhood Chain based on Arbitrum on July 1, a large number of honeypot scam tokens have emerged. After users purchase these tokens, they automatically disappear from their wallets, and the funds cannot be recovered. Relay Protocol clarified that this is not due to a breach of wallet infrastructure; users' private keys and other assets remain secure, and the malicious logic exists only within the scam token contracts themselves.The typical operation of honeypot tokens allows users to buy in but prevents selling through hard-coded rules, or automatically transfers funds to the attacker's wallet. Some users have reported that a certain token contract uses hidden storage mappings to bypass standard ERC-20 security checks to steal assets.Relay Protocol stated that it is blocking discovered scam tokens and verifying safe tokens, advising users to only trade tokens verified by trusted sources, to verify contract addresses before trading, and to test with small amounts of funds first. The platform pointed out that attracting scammers in the early stages of a new chain launch is not an issue unique to Robinhood Chain; similar situations have occurred with other L1 and L2 chains upon their launch.

According to Jinshi, U.S. President Trump stated that the Supreme Court remanded the case regarding the qualifications of Federal Reserve Board member Cook to a lower court solely on procedural grounds. He emphasized that appropriate action would be taken immediately to ensure that those who have committed misconduct do not continue to make decisions on significant matters concerning the welfare of the United States.

Taiko posted on platform X that it has confirmed the chain state verification mechanism of Taiko has been compromised, and the security assumptions of all cross-chain bridges deployed on Taiko are no longer reliable.Taiko is coordinating with the security committee and ecosystem partners to control the situation, suspend affected systems, and take technical and legal action. Taiko strongly advises all users to immediately withdraw funds from all cross-chain bridges deployed on Taiko.Taiko urgently requests all centralized exchanges to suspend TAIKO token deposits until further notice. The attacker's address has been disclosed. Previously, it was reported that the Taiko ERC20 Vault was attacked, resulting in losses exceeding $1 million.

According to Jinshi reports, the United States and Iran announced an immediate and permanent end to military operations on all fronts, including Lebanon. The United States will fully end its maritime blockade against Iran within 30 days.