thor

According to the THORChain blog, ZEC has been added to the THORChain launch queue, but due to a recently disclosed vulnerability in Zcash that affects the normal use of integrators, THORChain needs to complete a code modification in the Bifrost module before proceeding.The development team stated that the modification is very minor but must be completed before the launch of ZEC. Currently, Monero (XMR) is expected to launch at the end of this month, with ZEC following afterward.

According to the official announcement, the Hong Kong Securities and Futures Commission and the Hong Kong Monetary Authority have published a joint consultation summary regarding the amendments to the over-the-counter derivatives trading regulations under the Clearing Rules. In light of the broad market support, the Hong Kong Securities and Futures Commission and the Hong Kong Monetary Authority will proceed with the legislative process to introduce the proposed amendments to the Clearing Rules, with plans to implement the relevant amendments starting from March 1, 2027 (the proposed start date for the new calculation period).

The Hong Kong Monetary Authority announced today the establishment of a Tokenized Bond Expert Group, bringing together industry representatives with relevant experience and a focus on the development of the tokenized bond market in Hong Kong, to further promote the application and expansion potential of tokenized bonds in Hong Kong.The members of the expert group include representatives from industry associations, financial institutions, legal advisory firms, as well as financial infrastructure and technology providers. Building on the progress made by the Monetary Authority in various tokenized bond-related initiatives to date, the expert group will jointly explore policy measures, market practices, and innovative solutions.

According to Reuters, the UK's Financial Conduct Authority (FCA) has warned football clubs, including Premier League clubs, that entering into sponsorship agreements with unauthorized cryptocurrency companies and trading platforms may expose clubs to legal liabilities, money laundering risks, and reputational damage.The FCA stated that some unlicensed cryptocurrency businesses operating in the UK are reaching large fan bases through football sponsorships, potentially violating UK financial promotion rules. The regulatory body has contacted some clubs regarding these partnerships and urged them to strengthen due diligence on their partners.Lucy Castledine, the FCA's Director of Consumer Investments, stated that millions of fans trust club brands, and clubs should not allow unauthorized financial institutions to exploit this trust to promote potentially risky products to fans. UK Sports Minister Stephanie Peacock also stated that while sponsorship revenue is crucial for the football industry, fans have the right to know whether the companies partnering with clubs are safe, responsible, and compliant.

According to BBX data, yesterday, publicly listed companies in multiple countries globally intensively disclosed their latest strategies regarding the expansion of Bitcoin treasury, stock buybacks, and the authorization of super debt financing tools. The core dynamics are as follows:Strive, Inc. (NASDAQ: $STRE) CEO Matt Cole officially disclosed yesterday that the company has invested approximately $185.2 million to increase its holdings by 2,500 BTC (average purchase price of about $74,092). As a result, Strive's total Bitcoin holdings have reached 19,000 BTC, with a year-to-date (YTD) return of 36.7% and an expansion rate of 57.0%. At the same time, the company has proactively increased its cash reserves to ensure the stable distribution of dividends over the next 18 months.European Bitcoin treasury company Capital B (Euronext Growth Paris: $ALCPB) officially announced that it has opened online voting for the shareholders' meeting until June 17. The board is seeking shareholder authorization to establish a capital increase limit of up to €5 billion and a debt instrument issuance limit of up to €100 billion, aiming to accelerate its Bitcoin treasury strategy and enhance the Bitcoin value per share.Hyperscale Data, Inc. (NYSE: $GPUS) officially announced that as of May 31, 2026, the company holds a total of 704.3405 BTC (with a total value of approximately $51.8 million based on the price of $73,579 on that day). The company also confirmed that it did not execute any Bitcoin purchases in the open market last week, with the increase in holdings mainly coming from the regular mining output of its AI data center.Brazilian listed Bitcoin treasury company OranjeBTC (B3: $OBTC3) announced an increase of 20 BTC in the secondary market (average price of about $75,346), raising its total holdings to 3,762 BTC. Meanwhile, the company repurchased 289,100 shares of OBTC3 during the period, further enhancing the Bitcoin exposure per share through a dual reduction of circulating shares.

According to a report by the Financial Associated Press, in response to the issue of "some banks in the Hong Kong region requiring a declaration to open investment accounts," the Hong Kong Monetary Authority (HKMA) responded today that the relevant regulatory requirements were issued to all recognized institutions on May 22.Materials provided by the HKMA indicate that registered institutions must take three additional measures when opening and managing investment accounts for mainland investors, including:Closing investment accounts opened using suspicious or forged documents, identifying customer investment accounts that have used suspicious or forged documents since January 2023 or during any other period specified by the HKMA; relevant documents include identification documents.Closing investment accounts with zero balance that have been inactive, specifically referring to investment accounts held by mainland investors that have had no asset balance as of May 22, 2026 (reference date), and have had no activity initiated by the customer in the 12 months prior to the reference date.When opening new investment accounts, obtaining a written declaration from the mainland investor confirming that all funds used to support investment activities and related settlements come from legal sources outside mainland China.Relevant documents show that the newly added additional regulatory measures apply only to investment accounts, including investment accounts within comprehensive bank accounts; non-investment functions (such as regular savings, time deposits, payments, loans, and credit cards) are not within the scope of these measures. Additionally, the applicable subjects of these additional measures are individual customers and do not apply to corporate or institutional clients.

The Monetary Authority of Singapore is collaborating with private banks to adopt a "risk-based" approach to shorten the account opening time. The head of the Monetary Authority of Singapore stated that the authority aims to reduce the account opening time to within one month, while the current median account opening time for complex cases is about six weeks or longer.He stated that this move is intended to ensure that banks maintain high standards while avoiding unnecessary and excessive scrutiny of the sources of clients' wealth.

According to Decrypt, publicly traded video game and collectibles retailer GameStop (GME) submitted documents to the SEC requesting shareholder approval to increase the number of authorized common shares from the current 1 billion to 2.5 billion, in order to enhance financial flexibility.This proposal is one of five proposals that will be voted on at the annual shareholder meeting in July. This move could provide the company with more leverage for acquiring eBay, which it was previously denied.

According to a report by Cai Lian She, Tiger International issued a statement clarifying that recent remarks about its "refusal to cooperate with regulators" or "confronting regulators" are completely inconsistent with the facts.The company stated that compliance is the lifeline of its operations. In response to the latest regulatory requirements put forward by regulatory agencies, the company will strictly rectify in accordance with the guidance of the China Securities Regulatory Commission and relevant regulatory departments. Starting in 2023, the company has fully stopped opening accounts and marketing to mainland users, and by the end of the first quarter of 2026, the proportion of assets from mainland clients is expected to be about 10%. The client and asset scale in overseas markets is steadily growing, and the company will steadily advance compliance work to ensure the safety of client assets.

THORChain has released its fourth update regarding the attack incident on May 15, and the proposal ADR028 has been announced, with voting for node operators now open.According to the recovery plan, the protocol will first absorb losses through its own liquidity, with the remaining portion to be shared by synthetic asset holders; the specific distribution ratio of the two is still under evaluation. The protocol's own liquidity will be reduced to zero, and will be gradually replenished through system revenue. This plan will not issue or sell RUNE, nor will it dilute any holders.On the technical side, GG20 will be temporarily retained and has completed patch upgrades. Trading will resume after the vulnerabilities are fixed and node rotation is successfully conducted, with a future release pace that is slower and more security-conscious. Innocent nodes located in the same vault as the attacker will be protected, while the attacker nodes will be fully confiscated. The recovered RUNE will be paired with the recovered assets, and any excess will be destroyed.The protocol also offers a white hat bounty to the attacker to recover funds; if some are returned, the recovery plan will be adjusted proportionally. THORChain remains neutral and permissionless, and there will be no review of the attacker's Swap transactions after trading resumes. Node operators are currently voting on the proposal direction, and the numbers in the ADR are only indicative, with adjustments to be made through Mimir later.

According to Bloomberg, the Monetary Authority of Singapore has announced the revocation of the major payment institution (MPI) license of the cryptocurrency payment company Bsquared Technology. The reasons include flaws in risk management and conflict of interest policies, violations of outsourcing management regulations, and providing false or misleading information to regulators multiple times during the license application and on-site inspection processes.Bsquared obtained a digital payment token service license 16 months ago and is now required to submit a closure certificate issued by an auditing firm to confirm that all customer funds have been returned. The MAS stated that it is further reviewing the responsibilities of the company's key management personnel. Currently, only 37 institutions in Singapore are approved to provide digital payment token services, and license revocations are relatively rare.

According to Slow Fog's Yu Xian monitoring, multiple user wallets of Bankr have been stolen. @bankrbot replied that the incident was a social engineering attack targeting the trust layer between automated agents, specifically involving the interaction between Grok and Bankrbot, which led to unauthorized transaction signatures.

According to The Block, the Commodity Futures Trading Commission (CFTC) and the Department of Justice jointly filed a lawsuit against Minnesota Governor Tim Walz and related officials on Tuesday local time, because the state signed the SF 4760 bill, becoming the first in the nation to explicitly and comprehensively ban prediction markets, which will take effect on August 1, 2026.The CFTC argues that prediction markets fall under federally regulated derivatives and "swap" products, and that state governments do not have the authority to criminalize or prohibit them, requesting the court to issue a permanent injunction against the law.

GitHub has officially stated that it is investigating an unauthorized access incident involving its internal code repository. GitHub claims that there is currently no evidence to suggest that customer data stored in enterprise, organization, or code repositories outside the GitHub platform has been affected, but the company is continuously monitoring its infrastructure to prevent further abnormal activities.GitHub stated that if it is later confirmed that user data or services are affected, it will notify customers through existing incident response and notification channels.

According to Khaosod English, Thai authorities raided a location suspected of illegal Bitcoin mining. Due to abnormally high electricity consumption causing the surrounding building's cables to overheat and melt, law enforcement conducted a surprise search of a four-story commercial building. The investigation revealed that the location was suspected of illegally connecting to the main power grid to supply electricity to multiple Bitcoin mining machines on the fourth floor, resulting in an estimated power loss of over $80,000, while its registered monthly electricity bill was only about $11. Currently, the police have seized relevant mining equipment and are conducting further investigations into the individuals involved.

THORChain officials stated that a large number of fake accounts and false information have appeared in the market, involving activities such as "refunds," "airdrops," and "compensations"; preliminary investigations show that user funds were not harmed in the previous security incidents, and no refund, airdrop, or compensation plans are currently underway. Any accounts claiming otherwise are impersonating or spreading false information. Progress on the investigation and more information will be announced later.

THORChain released an update on the hacking incident on platform X. Preliminary evidence suggests that a node that recently joined the network may have been controlled by a malicious operator, who exploited the GG20 TSS vulnerability to obtain key information from vault participants, ultimately reconstructing the vault private key and executing unauthorized withdrawal transactions. Currently, multiple THORChain nodes have been shut down, resulting in the network being in a paused state. RUNE transfers are expected to resume in about 12 hours, but the specific situation will depend on node decisions. Functions such as trading, liquidity provider operations, and signing are still unavailable, and a full restoration of network functionality is expected to take several days. Recovery plans are under discussion and may include reducing the staking of affected nodes, as well as other remedial measures proposed by the community.

Chainalysis posted on the X platform that before the theft of THORChain, wallets suspected to be associated with the attacker had been transferring funds through Monero, Hyperliquid, and THORChain for several weeks. The attacker-associated wallets had already deposited into Hyperliquid positions via the Hyperliquid and Monero privacy bridge as early as the end of April. The funds were then exchanged for USDC and transferred to Arbitrum, and later bridged to Ethereum, with some ETH subsequently transferred to THORChain to become staked RUNE for newly added nodes, which are believed to be the source of the attack.Afterward, the attacker bridged some RUNE back to Ethereum and split it into four pathways, one of which went directly to the attacker. After being transferred through intermediate wallets, 8 ETH was sent to the final wallet receiving the stolen funds 43 minutes before the attack. The funds from the other three pathways flowed in the opposite direction. These wallets bridged ETH back to Arbitrum, deposited it into Hyperliquid, and transferred it into Monero through the same privacy bridge, with the last transaction occurring less than 5 hours before the attack began.As of Friday afternoon, the stolen funds have not yet been used, but the attacker has demonstrated their skilled cross-chain money laundering capabilities, and the Hyperliquid to Monero path may become the next move.

THORChain has announced that one Asgard vault has been attacked, and trading has been suspended. Initial signs indicate that user funds are safe, and only the protocol's own funds are affected. THORChain stated that the network automatically detected abnormal behavior and suspended signing activities to prevent further fund transfers. The estimated loss is currently around $10.7 million.The announcement mentioned that one of the six Asgard vaults is suspected to have been breached, and related nodes have triggered the RUNE staking penalty mechanism due to unauthorized transfers. The current network has suspended Churn activities, and new connections and related operations will also be postponed until the investigation and repairs are completed.THORChain stated that preliminary investigations show that users' personal exchange transactions have not been affected, and all node operators have been asked to immediately check their infrastructure, key management systems, and operating environments for any anomalies.

According to on-chain analyst PeckShield (@PeckShieldAlert), THORChain was hacked, resulting in a loss of approximately $10 million in crypto assets, including 36.75 BTC (about $3 million) and assets worth about $7 million from BNBChain, Ethereum, and Base chains.