Wallet

Google’s Threat Intelligence Group (GTIG) said on May 11, 2026 it documented what it calls the first AI-developed zero-day: a two-factor authentication bypass in a widely used open-source web administration tool. Google said it coordinated with the vendor to patch the issue before a broader exploitation campaign began. GTIG also described a wider rise in AI-assisted activity across state-linked and criminal groups, including risks to AI tooling dependencies used in crypto systems.

eToro said cryptoasset revenue fell to $2.15 billion in Q1 2026 from $3.5 billion in Q1 2025, as trading activity cooled. The brokerage also reported a 32% year-over-year drop in total trades, while its balance-sheet crypto holdings edged down to $60.5 million from $62.6 million at year-end 2025.

The NFT sector posted a sharp rebound in the last 24 hours, with market capitalization up by more than 15% to $4.312 billion. Bored Ape Yacht Club (BAYC) topped a 10.88 ETH floor price and saw trading activity increase, alongside broader gains in several collections and marketplaces. Weekly sales count jumped from 6,360 to 10,371, even as weekly sales volume slipped 11.43% to about $16.80 million.

Ledger on May 11, 2026 began a phased rollout of perpetual futures trading inside its hardware wallets through an integration with Yield.xyz, enabling access to Hyperliquid markets while users keep control of their private keys. The initial release is available to about 20% of Ledger users in selected regions, with staged expansion planned and access restricted in jurisdictions including the US and UK.

Elastic Security Labs identified TCLBANKER, a Brazilian banking trojan that monitors 59 bank, fintech, and crypto domains and triggers remote control when targets are visited. The malware spreads by taking over victims’ WhatsApp Web sessions and Outlook accounts to message their contacts with phishing lures and the trojanized installer.

On May 8, 2026, GoMining announced GoBTC Pay, a protocol aimed at enabling native, instant Bitcoin payments directly on Bitcoin's base layer. The company said it has launched a dedicated mining pool to prioritize confirmations, with a goal of achieving a 12-hour final on-chain settlement by the end of 2026. GoMining added that the initiative extends its ecosystem of 5 million users into everyday merchant payments.

Zcash is accelerating work to withstand quantum computing threats, with "quantum-recoverable" wallets expected to roll out within the next month. The project's broader plan is to reach full post-quantum security in the next 12 to 18 months and to pursue payment speeds comparable to Visa and Mastercard. Separately, ZEC has climbed more than 73% over the past 30 days, with analysts flagging $698.78 as a key resistance level.

CoW DAO has approved a plan to reimburse users harmed by the April 2026 cow.fi domain hijack, even though CoW Protocol's smart contracts were not breached. Eligible claimants can receive up to 100% of verified losses from the DAO's Legal Defense Reserve, with claims due by 14 May. The DAO says the payments are voluntary goodwill grants and do not admit liability.

Exodus said it launched XO Cash on 8 May, introducing a Solana-based stablecoin designed for AI agents and autonomous, machine-to-machine payments. The company said developers can spin up agent wallets with spending rules while users keep custody, and agents can pay without being given private keys. XO Cash also supports payment-time conversion into USDC or USDT and can enable agent-linked debit cards usable wherever Visa is accepted.

At Consensus Miami on Thursday, OpenSea CMO Adam Hollander said the company is expanding beyond its NFT-marketplace image by building a single non-custodial app that supports NFTs, major tokens, meme coins and perpetuals across 26 chains. He said OpenSea rebuilt its stack about a year ago under OS2 and is preparing OpenSea Mobile with Apple Pay onboarding, citing over 1 million wallets in a recent rewards program and about 600 beta testers in one-on-one sessions.