lip

According to Bitcoin.com, Microsoft's official X account was hacked and used to promote a meme coin themed around its classic Clippy assistant character, CLIPPY. The related violating content has been removed, and Microsoft has confirmed to the media that the account was subject to unauthorized access and stated that it is continuing to investigate the incident.

Bitcoin Core contributor Peter Todd has joined the MARA Foundation as the chief maintainer of Slipstream. Slipstream is MARA's private Bitcoin mempool service, and the foundation announced this appointment on Thursday. Todd will be responsible for the development and operation of this service.Slipstream allows users to send Bitcoin transactions directly to the MARA Pool without going through the public Bitcoin peer-to-peer network. Since transactions sent via Slipstream remain private before block confirmation, this service helps to conceal key information before confirmation, avoiding the exposure of public keys. The service played a role after hackers exploited a vulnerability in the Coldcard hardware wallet to steal over $115 million in user funds in July this year.MARA's Slipstream first gained attention in 2024 for releasing large Ordinals inscriptions and has recently been used in research projects such as Quantum Safe Bitcoin and Binohash. Todd is a long-time Bitcoin Core contributor, co-author of BIP 125 (replace-by-fee), creator of OpenTimestamps, and launched Libre Relay in 2024. He believes that mempool policies should follow what the market wants miners to package, rather than restricting how people use Bitcoin.

The Central Bank of the Philippines has implemented partial suspension measures on DCPay Philippines, the electronic money operating entity behind Coins.ph, prohibiting it from receiving external transfers through InstaPay and PESONet. This restriction targets DCPay's peso payment and settlement operations.The cryptocurrency trading business of Coins.ph is operated by another licensed entity, Betur Inc., which has not been directly suspended, but user deposits through local banks will be affected.The regulatory directive still allows DCPay to conduct outward transfers and QRPh merchant payments. The status page of Coins.ph shows that the related deposit services are under maintenance, while withdrawals are functioning normally.

According to Insurance Journal, blockchain analysis company Elliptic disclosed that it has tracked over 50 security incidents related to North Korea, with a total of approximately $1.2 billion stolen this year.Some of the stolen funds from Bitget overlap with the associated addresses from last year's $1.5 billion theft incident at Bybit exchange. Initial on-chain money laundering patterns indicate that the Bitget incident was carried out by the hacker organization TraderTraitor.

Satellite communication infrastructure company Space Network has signed a binding pre-purchase agreement worth $50 million with Philippine infrastructure company HQ Company International Holdings to provide satellite connectivity to the Philippines through the low Earth orbit satellite network Freeport. The signing ceremony was held at SKY 31 in Seoul, attended by Space Network CEO Tae Lim Oh and HQ Company CEO Yongsoo Samuel Cho.According to the agreement, Space Network will provide access to the Freeport network, technical hardware, software, and ongoing engineering support, while HQ Company will be responsible for local sales, customer acquisition, spectrum authorization, and regional service implementation. Cho is the son-in-law of former Philippine President Fidel V. Ramos and has long been engaged in cross-border investment and infrastructure business in the Philippines. This agreement adds to the $100 million agreement signed by Space Network with Vietnam's DETI Technology in June 2026, bringing the total commercial pre-purchase amount to $150 million.Freeport is built and operated by Space Network, currently featuring 4 low Earth orbit satellites, with plans to expand to approximately 230 satellites by the time commercial services launch in 2029. Operators can purchase regional capacity and build their own services on the open network, with nodes settling through on-chain contracts. The related project Spacecoin combines blockchain protocols with low Earth orbit satellites for service pricing and payments within the network.

The on-chain tracking platform MistTrack under Slow Mist has monitored that the attacker of the security incident on the cryptocurrency exchange Bitget previously attempted to transfer the stolen funds to the cross-chain DEX protocol Chainflip for relocation, but was directly refused deposit by the relevant brokers.On-chain processing results show that the funds were not frozen by the protocol party, but were directly returned along the original route, and the attacker failed to successfully utilize this channel to complete the transfer. MistTrack stated that it will continue to track the subsequent on-chain movements of this batch of stolen funds.

Aerodrome's Slipstream V3 has been launched, introducing protocol-level internal MEV auctions in concentrated liquidity AMMs, distributing the value captured by sandwich bots and arbitrageurs to active liquidity providers and sAERO token holders. The protocol expects related revenue to reach tens of millions of dollars.This version also introduces dynamic fees, automatically increasing fees during market volatility, and continues the concentrated liquidity design of Uniswap V3, achieving capital efficiency up to 4000 times that of traditional AMMs.Aero plans to integrate Aerodrome on Base with Velodrome on Optimism into a single AERO token, set to launch on the Ethereum mainnet in the second quarter of 2026; Aero Lite has launched the Slipstream pool on Circle's Arc, and Dromos Labs is developing pool-level fee rebates and KYC options for institutional clients.

According to Bitcoin News, Flipper's upcoming LoRa module can send messages through a radio relay network without relying on the internet. In tests conducted in London, messages were transmitted over 150 kilometers via the MeshCore network.This technology can be used to send Bitcoin transactions: signed Bitcoin transaction data can be transmitted via LoRa radio and relayed to a gateway connected to Bitcoin nodes, which then broadcasts it to the network. When local internet connections are interrupted, users can send transactions in this way.

The cross-chain protocol Chainflip disclosed that an attack incident targeting Tron USDT occurred yesterday. It has been confirmed that 736,442.17 USDT was stolen through 6 unauthorized payments, and an additional 115,654.41 USDT from user exchanges remains in the vault due to payment failures, while other funds were unaffected.Chainflip stated that the attacker exploited a vulnerability in the Tron transaction memo mechanism, attaching a custom memo to transactions that had already been signed by validators, causing the system to recognize the same deposit as a separate exchange and refund it again, ultimately leading to funds being paid out multiple times. The attacker executed 8 operations within approximately 90 minutes, gradually increasing the amounts. Chainflip claims to have completed a repair plan and has flagged the stolen funds to relevant authorities in an attempt to recover them, with operations expected to resume as early as Monday, and they will be responsible for compensating affected users for their losses.

The Bangko Sentral ng Pilipinas (BSP) has released a proposed announcement to suspend the acceptance of new applications for registration of payment system operators (OPS) for 12 months and to implement stricter controls on payment arrangements involving virtual asset service providers (VASP). The BSP stated that this move aims to conduct a comprehensive review of its classification and licensing framework.According to the draft, during the suspension period, the BSP will stop accepting and processing OPS applications. Applications submitted prior to the suspension can continue to be evaluated, but will not be approved or rejected until the suspension ends. Relevant entities are prohibited from conducting business activities that require OPS registration unless they obtain special authorization from the regulatory agency. In addition, BSP-regulated entities providing merchant acquiring services must connect licensed VASPs through direct merchant arrangements, and such relationships will be subject to enhanced due diligence, transaction and settlement limits, and other risk control measures.This requirement applies to virtual asset enterprises licensed, registered, or authorized by the BSP, the Securities and Exchange Commission of the Philippines, or other regulatory agencies, with VASPs being categorized alongside betting, gaming, adult industry, and money service businesses. If the draft is ultimately approved, it will take effect 15 days after publication, and the BSP is currently seeking public comments.

Coinflip and its CEO Benjamin Weiss have been accused by the Washington State Department of Financial Institutions (DFI) of violating the Uniform Money Services Act. The DFI seeks to revoke Coinflip's money transmission license, prohibit the company and its related personnel from continuing to operate, and impose a fine of $1,029,600.The DFI stated that an inspection in 2025 found that Coinflip had insufficient anti-money laundering controls, inadequate transaction monitoring, failure to enforce transaction limits, inaccurate regulatory reporting, and unclear fee disclosures. The agency also accused Coinflip of failing to timely refund at least 15 customers as required. The proposed order requires Coinflip to refund eligible customers in Washington State, with customers aged 60 and above eligible for refunds of transaction fees and markup fees. Coinflip and Benjamin Weiss may request an administrative hearing to contest the allegations, refund requirements, license revocation, fines, and industry bans.

According to Caixin, Ant Group CEO and Alipay Chairman Han Xinyi elaborated on systematic insights regarding the global exploration path of AI payments at the China Payment and Clearing Forum. He stated that AI payments have essentially formed four exploration paths:The first category is represented by payment technology and infrastructure platforms like Stripe. The second category is represented by cryptocurrency companies such as Circle and Coinbase, which mainly rely on stablecoins and their wallet systems, using cryptocurrencies as a payment medium to directly support automated payment scenarios between machines. The third category is represented by traditional payment networks like the two major card organizations (Visa, Mastercard). The fourth category consists of AI platform companies such as Google and OpenAI.

Phillip Securities maintains a "Sell" rating on SpaceX (SPCX.O), with a target price of $75. The agency remains cautious about high capital expenditures, the concentration of AI clients, and temporary cloud service contracts, believing that clients need to make longer-term business commitments to drive a revaluation.

Bitcoin News posted on the X platform that Prince Filip learned during his vacation that COLDCARD was hacked. As a Mk3 user, he was at risk of having all his Bitcoin stolen at any moment.

According to Jinshi reports, the Philippines has designated a so-called "baseline of territorial sea" in Huangyan Island, which is Chinese territory, seriously infringing on China's territorial sovereignty and violating international law. China firmly opposes this and demands that the Philippines respect China's territorial sovereignty and maritime rights and interests, and refrain from taking any infringing provocative actions; otherwise, China will respond resolutely.

According to The Defiant, Paris-based startup Kulipa suddenly ceased operations due to debt issues, leading to the simultaneous interruption of card projects for about 20 crypto wallets and fintech companies it served. Both the self-custody wallet Ready (formerly Argent) and the Solana wallet Solflare were affected, with user card services being immediately disabled.Since both wallets use a self-custody structure, funds are only deducted from the user’s wallet at the time of purchase, and user assets were not harmed. Notably, Kulipa had completed a $6.2 million seed round financing co-led by Flourish Ventures and 1kx in April of this year, just about 4 months before its collapse.

Co-founder of the crypto wallet Solflare, Vidor, posted on the X platform that operations have been halted due to the solvency issues of the card issuer partner Kulipa, and the Solflare Card has suspended services. Vidor emphasized the safety of user funds, as the Solflare Card uses an end-to-end self-custody model—funds are deducted directly from the user's wallet without the need for deposits or top-ups, and no user funds are held by the card issuer.The team had made efforts to help Kulipa find a buyer and explore continuity solutions, but to no avail. A new version of the Solflare Card is in development, which will include features such as Apple Pay and Google Pay, higher limits, and cashback, while still maintaining self-custody, and is expected to launch in a few weeks.

According to market data, the current on-chain total value of the tokenized stock market has approached 2 billion dollars, with over 471,000 on-chain holders. The report selected four assets—NVIDIA, Microsoft, Meta, and Tesla—that have effective two-way order books across various testing platforms for horizontal comparison.The research results show that Bitget rToken achieved optimal execution performance in both the $10,000 and $50,000 order tests, presenting the most balanced order book liquidity within a price range of ±50 basis points. Among them, the slippage for the $50,000 order was 58% lower than that of other tokenized stock products. This is mainly attributed to Bitget rToken's 1:1 alignment with the liquidity of traditional markets such as the NYSE and NASDAQ, providing more efficient execution for large transactions.

According to official news, OKX, in collaboration with Elliptic, SlowMist, and OttoSec, has released the "Web3 Security and Risk Control Report for the First Half of 2026." The report points out that the focus of Web3 attacks is gradually shifting from smart contract code to more complex scenarios such as signature processes, user devices, operational infrastructure, and AI Agents.Data shows that in the first half of 2026, the OKX risk control system intercepted over 5.7 million high-risk transactions, including approximately 2.41 million transactions related to hacking and theft, about 1.48 million transactions related to phishing, and around 990,000 transactions related to fraud. The OKX Web3 on-chain intelligence label library currently has over 1 billion labels, covering more than 420 chains, and has integrated capabilities such as address screening, transaction monitoring, and sanction address control into infrastructures like DEX and Exchange OS.In addition, in terms of user protection, OKX has intercepted over 7 million visits to risky websites, completed over 200,000 device risk assessments, identified over 60,000 high-risk apps, and intercepted or alerted on over 4 million high-risk signature operations. The report also introduces the "risk control pre-positioning" design in scenarios such as Exchange OS, Outcomes, RWA, and Agentic Wallet.