ALERT: Security researchers say they have identified 26 third-party AI LLM routers that may be covertly injecting malicious tool calls to exfiltrate credentials. Developers relying on AI coding agents such as Claude Code for smart-contract or wallet development could face exposure of private keys and seed phrases.

Polkadot was hit by a major exploit after 1 billion DOT tokens were unexpectedly minted. Blockchain security firm PeckShield flagged the abnormal issuance. The attacker then offloaded the full amount in one transaction. Lookonchain estimates the sale brought in about 108 ETH, valued at roughly $237K.

U.S. President Donald Trump said a blockade in the Strait of Hormuz will take effect at 10:00 tomorrow. He said other nations are coordinating measures aimed at preventing Iran from selling oil, describing the effort as highly effective.

Arkham data show that FTX/Alameda Research on Tuesday unstaked and moved about $16 million worth of SOL to an address used for creditor distributions.

The Bank of Korea has called for the introduction of a "circuit breaker" mechanism in South Korea's cryptocurrency market, pointing to the recent incident involving Bithumb as evidence of the need for stronger safeguards.

Michael Saylor said Strategy is gearing up for another round of Bitcoin purchases, pairing the update with a cryptic post urging investors to "think bigger." Strategy now holds 766,970 Bitcoin. With an average cost basis of $75,644 per coin, the position is sitting on an unrealized loss of about $14.5 billion. The company has been funding its accumulation with STRC preferred shares. The structure implies an annualized return requirement of roughly 2.05% to cover dividend payments. The approach could come under pressure if Bitcoin trades sideways or declines over an extended period.

BlockSec's Phalcon team reported that a Merkle Mountain Range (MMR) proof replay weakness in Hyperbridge-managed HandlerV1 contracts on Ethereum led to losses of roughly $242,000. The issue stemmed from proofs not being tied to specific requests, enabling an attacker to reuse previously valid proofs alongside newly crafted requests to trigger sensitive operations, including administrator changes. In one instance, the attacker took over the administrator role for the Polkadot (DOT) token, then used the elevated privileges to mint additional DOT for profit. Transactions observed include administrator changes followed by minting DOT (about $237,400 lost) and ARGN (about $3,800 lost), as well as withdrawals from the host. BlockSec said the flaw was identified by PhalconSecurity and examined using PhalconExplorer. The disclosure follows earlier reports that a Hyperbridge gateway contract had been compromised, resulting in 1 billion DOT minted on Ethereum and later sold.

Uniswap's daily trading volume has climbed above $2 billion, marking its strongest showing in almost a year, The Block reported. The jump was largely fueled by renewed expectations that U.S. spot Ethereum ETFs could win approval, boosting overall trading activity. As one of the крупнейших decentralized exchanges in the Ethereum ecosystem, Uniswap's volume is widely watched as a barometer of market sentiment. Analysts say the platform's most active pairs remain ETH/USDC and ETH/USDT, as demand for stablecoin-based swaps continues to build.

Polkadot's $DOT briefly fell about 5% as traders reacted to an exploit involving Hyperbridge, a gateway used for bridged assets. The attacker allegedly forged cross-chain messages, seized an Ethereum-based $DOT admin role, minted 1 billion counterfeit $DOT, then sold the entire amount for roughly 108 ETH, netting an estimated $237,000. Polkadot's native chain was not compromised. The incident is reported to be confined to bridged tokens issued on Ethereum.