Hackers tampered with an Adform third-party script and inserted malicious logic across multiple customer-run websites, silently replacing wallet addresses when users copy them. The incident was not aimed at any specific blockchain and could affect web-based address entry for transfers of crypto assets including Bitcoin (BTC), Ethereum (ETH) and TRON (TRX). It underscores the severity of front-end supply-chain attacks and is a cross-site wallet hijacking case, with no disclosed loss amount or count of affected sites.

Uniswap said on 2026年8月1日 that it has launched Earn in its web app and wallet, allowing users to earn yield on USDC, USDT and ETH without lockups. The feature is provided through Uniswap’s native protocol layer and does not require third-party integrations. Users can deposit and withdraw principal at any time while receiving yield in real time. The launch underscores Uniswap’s push beyond a trading-only protocol toward a broader DeFi yield platform, strengthening its protocol revenue model and token-economy loop.

Bitcoin Core developer Peter Todd issued a security warning following the theft of a Coldcard hardware wallet, arguing that any bitcoin stored under a single-signature (singlesig) setup faces a fundamental security weakness. He said the incident was not a software exploit but a physical theft, highlighting how fragile private-key custody can be in singlesig arrangements. While no stolen amount or addresses were disclosed, the warning targets the most common form of personal self-custody and could prompt users to consider multisig or threshold-signature alternatives.

About 4,000 bitcoins—worth roughly $40 million at the time—were stolen after 500 Coldcard hardware wallets were compromised, according to a news alert. Coldcard, an open-source Bitcoin cold-storage device widely considered trusted, was hit by a flaw that unexpectedly exposed users’ offline private keys. The stolen funds have been moved to an unknown address, and on-chain tracking is ongoing. The incident did not involve an exchange or custodial platform, prompting renewed scrutiny of hardware wallet firmware updates, physical side-channel protections, and seed-phrase backup procedures.

Canadian crypto wallet provider Coinkite said it has identified a critical security vulnerability in its wallet and urged all users to immediately transfer their assets. The company did not disclose technical details, the scope of impact, or whether the flaw has been exploited, but it highlighted risks at the core custody layer. Coinkite has long supported Bitcoin (BTC) storage and transactions, and the vulnerability could directly threaten private-key security and on-chain asset integrity. There is currently no evidence that other tokens or protocols are affected, and the incident is described as a single-provider security issue rather than a regulatory or market-structure development.

A Solana on-chain propAMM market launched by Backpack and Sunrise reported lower execution costs than the open market for $5k–$20k spot trades in SPCX, MU, SNDK and DRAM from Jun 12 to Jul 20. The market showed 24/5 two-sided costs of 0.5 bps for $5k–$10k orders and 1.3 bps for $10k–$20k orders, versus about +1 bp in the open market. The venue accounts for roughly 0.015% of U.S. trading volume in the four stocks while offering continuous pricing and tighter execution.

Baillie Gifford, which manages £197bn in assets, has launched what it described as the first ‘fully native’ UK-regulated tokenised fund, $BAGEY. The fund is issued on the Solana blockchain. It is using BNY’s newly launched digital transfer agent service to support the structure. The move marks Solana’s first use as the underlying chain for a fund recognised within the UK Financial Conduct Authority (FCA) framework.

Roughly 600 BTC moved in an unusually concentrated burst over a 15-minute period. A total of 1,324 UTXOs (594.48 BTC) were swept via 500 transactions within a three-block window. Of that, 562 BTC was then consolidated into a new address—bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r—which has not moved since. The swept UTXOs date from 2021 to 2026, and all originated from single-signature, non-Taproot addresses.