Wallet

CoW DAO has approved a plan to reimburse users harmed by the April 2026 cow.fi domain hijack, even though CoW Protocol's smart contracts were not breached. Eligible claimants can receive up to 100% of verified losses from the DAO's Legal Defense Reserve, with claims due by 14 May. The DAO says the payments are voluntary goodwill grants and do not admit liability.

Exodus said it launched XO Cash on 8 May, introducing a Solana-based stablecoin designed for AI agents and autonomous, machine-to-machine payments. The company said developers can spin up agent wallets with spending rules while users keep custody, and agents can pay without being given private keys. XO Cash also supports payment-time conversion into USDC or USDT and can enable agent-linked debit cards usable wherever Visa is accepted.

At Consensus Miami on Thursday, OpenSea CMO Adam Hollander said the company is expanding beyond its NFT-marketplace image by building a single non-custodial app that supports NFTs, major tokens, meme coins and perpetuals across 26 chains. He said OpenSea rebuilt its stack about a year ago under OS2 and is preparing OpenSea Mobile with Apple Pay onboarding, citing over 1 million wallets in a recent rewards program and about 600 beta testers in one-on-one sessions.

Polymarket said it launched Polymarket USD on April 6, 2026, replacing bridged USDC.e as the 1:1 USDC-backed collateral used across its prediction markets. The platform is also shipping CTF Exchange V2 with a rebuilt order book, lower gas costs, faster matching, and EIP-1271 support for smart contract wallets. Polymarket added that API traders and bot operators may need SDK and integration updates during a rollout expected to take two to three weeks.

Neo co-founder Erik Zhang has finalized NEP-20, a wallet-based authentication standard that enables users to sign in to websites, games, and apps with a Neo wallet rather than usernames and passwords. First proposed in March 2021 and revisited with active review in late March 2026, the specification now carries an "Accepted" label in the Neo Enhancement Proposals repository. NEP-20 relies on an off-chain Challenge/Response signature flow and currently supports ECDSA-P256.

Drift Protocol was exploited for $280 million on April 1, 2026, in an incident initially dismissed by some due to its April Fools' timing. Investigators later attributed the breach to the UNC4736 group, saying the attackers blended long-running social engineering with device compromises that enabled multi-sig approvals.

Human.tech has announced an AI-agent wallet infrastructure called Agentic Wallet as a Protocol (WaaP) that converts wallet actions into natural-language interactions while keeping users as the final authority. The system uses cryptographic controls such as spending limits, time windows, approved addresses and step-up human approvals for higher-risk actions. The company says its Human Passport ecosystem has more than 3 million users, has secured over $500 million against Sybil attacks, and is backed by $3 billion in restaked ether.

Ethereum co-founder Vitalik Buterin wrote this week that he has fully moved away from cloud AI and now runs a sandboxed, local LLM workflow. He said he switched off cloud services in April 2026 and runs Qwen3.5:35B on an Nvidia 5090 laptop at 90 tokens per second, while warning that AI agents and plugins can embed malicious instructions.

An Oobit study of 1,000 U.S. crypto holders found that 35% have lost access to a wallet or account, most often due to human error rather than hacking. The leading causes were forgotten passwords or login failures (33%), lost seed phrases (21%), and losing 2FA access (20%), while platform bankruptcies accounted for 16%. Among those locked out, more than 1 in 10 said a single incident cost them over $5,000, and the median reported loss was 30% of total crypto holdings.

LastPass US is moving forward with a proposed class action settlement tied to a data breach that occurred between August 2022 and November 2022. The deal includes an $8.2 million fund that may reimburse up to $10,000 per person for documented extraordinary losses, plus smaller amounts for other eligible losses and added monitoring services. Claims must be filed by July 2, 2026, ahead of a July 14, 2026 final approval hearing.