Search the archive

READY TO GET ON BOARD? Invest at $2.90/share

ETH/BTC RATIO HITS 2025 HIGH AS ETFS AND TREASURIES SOAK SUPPLY

Ethereum has increased 70% since June 1 versus bitcoin's 9%, lifting the ETH/BTC ratio above 0.037 to a new yearly high. The rally largely stems from ~$9.4B of U.S. spot ETH ETF inflows and digital asset treasuries now holding over 2% of ETH supply, up from 0.2% two months ago. Together, ETFs and treasuries have absorbed 3.7% of circulating ETH, while leveraged demand via VolatilityShares' 2x Ether ETF has added 456,000 ETH-equivalent exposure.

BINANCE, COINBASE JOIN TRM LABS TO COMBAT CRYPTO CRIME

Binance, Coinbase, Kraken, PayPal, Ripple, and others are among the first to join TRM Labs' Beacon Network, a real-time intelligence system built with law enforcement to fight crypto crime. The network provides suspicious address flagging, real-time alerts, and rapid response tools to freeze illicit assets before cashouts, with participation free and opt-in for verified members. TRM Labs estimates at least $47B in crypto has been sent to fraud-linked addresses since 2023, with the Beacon initiative targeting threats from ransomware, North Korean hackers, and terrorist financiers.

YE (KANYE WEST) RELEASES COIN

After months of speculation, Ye (formerly Kanye West) has released YZY coin on Solana. It is a “concept for a new financial system” that includes Ye Pay (crypto payments processor) and YZY Card (debit card for spending YZY). Ye Pay is already available on Ye's main website for use. The coin spiked to over $3 billion market cap shortly after launch before falling to $1.5 billion.

INTRODUCING ZKC COIN FROM BOUNDLESS

Boundless's ZK Coin (ZKC) is the native token of its universal ZK proving protocol. It enables any blockchain to access zero-knowledge computation through independent prover nodes without requiring infrastructure changes. The ZK proving protocol introduces Proof of Verifiable Work (PoVW), a novel consensus mechanism where provers stake ZKC as collateral (typically 10x the request fee) and earn rewards by generating unique ZK proofs, with slashing penalties for failed deliveries. ZKC has an initial supply of 1 billion tokens with 7% inflation in Year 1, tapering to 3% by Year 8, and the effective circulating supply decreases as more proofs require collateral staking. The system creates a scaling loop where increased proof demand leads to more ZKC locked as collateral, positioning ZK Coin as the foundational economic layer for ZK proving across the entire blockchain ecosystem.

COINBASE BETS ON AI PAYMENTS FUELED BY DIGITAL DOLLARS

Coinbase is positioning itself as infrastructure for the emerging AI economy with x402, an open-source payments protocol that enables apps, bots, and autonomous systems to charge and settle payments instantly using stablecoins. This strategic pivot represents a deliberate shift away from speculative trading toward building practical payment rails for AI agents that need to make micro-transactions for computing costs or services. Coinbase is betting that stablecoins will become the default payment method for AI commerce, offering advantages like instant settlement, programmability, and freedom from traditional banking restrictions.

AN INTRO TO HYPERGAMBLIFIED MARKET DESIGN

Successful crypto gaming requires "hypergamblification" – integrating speculative mechanics directly into gameplay rather than treating games as labor-based extraction systems like Play-to-Earn models did. Play-to-Earn collapsed because it removed the fun and speculation that makes games sticky, turning players into extractors rather than participants in risk-based entertainment. Onchain infrastructure makes speculation-based gaming inevitable by providing instant liquidity, composable markets, transparent odds, and programmable settlement that can turn any game into a micro-market. Platforms like Multiplier are building this vision through gamified capital markets that route attention directly into market demand, representing a shift toward "an arcade wired into a financial system" where speculation and entertainment are inseparably fused.

MOONWELL AND MAMO TACKLE BUGS WHILE PRESERVING USER FUNDS

Moonwell is making stkWELL users whole after a reward distribution bug, while Mamo redesigned its reward flow to avoid unnecessary token tax friction. Both fixes ensure users keep their expected yield, highlighting the team's commitment to security and efficiency.

WILL THE FOUR-YEAR CRYPTO CYCLE HOLD OR BREAK IN 2026?

On one hand, BTC's historic four-year peaks could repeat as a self-fulfilling pattern reinforced by leverage and halving psychology. On the other, today's cycle is shaped by institutions, ETFs, stablecoin growth, and Fed dynamics, which may smooth volatility and extend the rally into 2026. Missing euphoric signals and ongoing DAT leverage risks leave the timing uncertain, but stablecoin supply growth remains the key indicator of whether this market still has fuel.

DIGITAL ASSET TREASURIES FACE SHAKEOUT AHEAD

With multiple digital asset treasuries (DATs) now live, the market will favor the strongest managers as weaker firms risk trading below mNAV.

$442M IN CRYPTO LIQUIDATIONS AS ETH, BTC LEAD LOSSES

~$442M in leveraged positions were liquidated over the past 24 hours, with ETH ($189.2M) and BTC ($75.4M) seeing the largest wipeouts.

TOKENIZED TREASURIES STILL SMALL DESPITE RAPID GROWTH

Tokenized U.S. Treasuries have doubled in six months to ~$7.5B but remain tiny compared to the $260B+ stablecoin market, where multiple individual stablecoins have passed the entire category.

PREDICTION MARKET-ADJACENT PROJECTS WITH TOKENS

There are seven projects building or related to prediction markets with tokens, all of which are valued at below $20 million.

THE BEST NEW FEATURES OF THE PIXEL 10 LINEUP

Google has announced the Pixel 10 lineup, introducing four devices with notable upgrades, including built-in Pixelsnap magnets for better wireless charging alignment and support for the faster Qi2 and Qi2.2 standards. The base Pixel 10 now includes a 5x telephoto lens, bringing high-end zoom to the entry-level model. The Pixel 10 Pro Fold boasts improved durability, while new AI features like Magic Cue and Camera Coach aim to enhance user experience through proactive suggestions and photography tips.

IKEA'S MOST IKEA PRODUCT EVER

Ikea has partnered with Swedish designer Gustaf Westman to launch a 12-piece collection, headlined by a whimsical blue plate designed specifically to hold 11 meatballs in a neat row. Westman has described the design as a playful homage to Sweden's iconic holiday dish, aiming to blend function with humor by giving each meatball its own “throne.” The collection reflects both Westman's quirky style and Ikea's accessible aesthetic.

ACROBAT STUDIO IS ADOBE'S NEW AI-POWERED HUB FOR PDFS

Adobe Acrobat Studio is an AI-powered PDF management hub that features PDF Spaces where users can upload up to 100 documents for AI analysis and collaboration. The platform, which initially only supports English, includes customizable AI assistants and integration with Adobe Express for image generation. Access starts at $25 per month.

USER JOURNEYS VS. CUSTOMER JOURNEYS: WHY THE DISTINCTION MATTERS MORE THAN YOU THINK

User and customer journeys aren't interchangeable terms—users interact with products while customers pay money, and these roles often differ in SaaS and B2B models. Companies that design only for user delight without considering customer conversion risk create beloved products with no viable business model. The most successful products require mapping both journeys: user experiences that create engagement, and customer experiences that drive revenue.

THE BEST DESIGN LEADERS CO-OWN METRICS, AND IT'S NOT AS SCARY AS YOU THINK

Designers must co-own business metrics, not by abandoning user-centered principles, but by translating design impact into outcomes executives understand. Demonstrate strategic value, build trust with decision-makers, and gain greater influence within organizations by aligning projects with Key Results, validating desirability, measuring design quality, and framing results in terms of revenue or cost savings.

EASY WILL ALWAYS TRUMP SIMPLE

Complex systems in both biology and software often evolve by reusing what's already at hand, a process known in biology as exaptation and in software as choosing the “easy” solution. While simplicity is ideal, production pressures and human limits make complexity inevitable. Resilience comes from having diverse tools, partial knowledge across teams, and the ability to adapt systems collaboratively over time.

BUILD WEBSITES EASILY

Clone any website to a full-stack app with EasySite AI. Enter a URL and its AI creates pixel-perfect React/Vue.js applications with backend functionality.

UI CURATED EXPERIENCES FOR YOU INSPIRATION

Viewport UI is a curated collection that showcases diverse and inspiring user interface designs, from dashboard widgets to creative animations.

CREATE VIDEOS BY CHATTING WITH AI

Create stunning social media content, product demos, and brand videos with Reeroll's professionally designed video templates.

AND THE OSCARS BROADCAST GOES TO…YOUTUBE?

YouTube is reportedly in talks with the Academy of Motion Picture Arts and Sciences to broadcast the Oscars, potentially replacing Disney/ABC when their current deal expires in 2028. The move would align with YouTube's strategy of acquiring live event broadcasting rights, similar to its NFL Sunday Ticket package, though Oscar viewership has declined from 46 million in 2000 to 19.69 million in 2025. YouTube could leverage the opportunity to promote its creator talent, as several YouTubers have already transitioned into feature filmmaking with major distributors.

HOW CREATIVES CAN DOUBLE DOWN ON THE SKILLS AI WILL NEVER REPLACE

Creatives can remain irreplaceable by mastering uniquely human skills that AI cannot replicate. These include reading people beyond data analysis, leveraging diverse life experiences for cultural understanding, and embracing messy and imperfect creative processes that break patterns. Building genuine relationships with clients and learning to partner with AI while maintaining human decision-making authority strategically is also essential.

LISTEN UP FINANCE BROS, THIS IS HOW YOU NAIL A CRYPTO REBRAND

Crypto wallet Solflare has rebranded with Ragged Edge to position itself as the "Stronghold of the Free," combining security with bold, future-focused design. The identity uses gothic-inspired typography, vibrant colors, and modernized money-themed illustrations to welcome newcomers while resonating with seasoned crypto users, reframing crypto as both safe and innovative.

THE ANATOMY OF A LIKEABLE POST: THE ART OF VISUALS AND CAPTIONS

A likeable social media post combines strategic visual elements and compelling captions that work together to capture attention and encourage engagement.

HOW LEAH HAN'S ILLUSTRATIONS CELEBRATE MODERN FEMININITY

Illustrator Leah Han blends Eastern and Western influences to create tranquil yet powerful depictions of modern femininity, often showing women in moments of introspection and solitude.

HOW VISION BECAME THE MOST OVERLOOKED DESIGN PROBLEM

Many companies confuse clarity with vision, resulting in polished execution but no shared sense of direction.

See how Fastly supports detection-as-code

APACHE ACTIVEMQ FLAW EXPLOITED TO DEPLOY DRIPDROPPER MALWARE ON CLOUD LINUX SYSTEMS

Threat actors are exploiting a two-year-old critical Apache ActiveMQ vulnerability (CVE-2023-46604, CVSS 10.0) to deploy DripDropper malware on cloud Linux systems, then patching the flaw post-compromise to block other attackers and evade detection. The attackers use the PyInstaller-based DripDropper to establish persistence through modified SSH configurations and cron jobs, while leveraging legitimate services like Dropbox and Cloudflare Tunnels for command-and-control communications.

DON'T WANT DRIVE-BY OLLAMA ATTACKERS SNOOPING ON YOUR LOCAL CHATS? PATCH NOW

A vulnerability in Ollama Desktop v0.10.0 allowed drive-by attacks where malicious websites could bypass CORS controls to reconfigure victims' local AI settings remotely, intercept all chat messages, and even serve poisoned models. GitLab's Chris Moberly discovered the flaw by exploiting incomplete cross-origin controls—removing the Content-Type header to trick the app into treating malicious requests as "simple" and bypassing preflight checks. The vulnerability was patched within hours in v0.10.1 after Moberly disclosed it on July 31. Users are urged to update immediately as exploitation would be "trivial," according to the researcher.

HACKERS STEAL MICROSOFT LOGINS USING LEGITIMATE ADFS REDIRECTS

Push Security researchers found a new phishing attack using legit office.com links combined with ADFS to redirect users to a phishing page that steals Microsoft 365 logins. The attack starts when users click on malicious sponsored links in Google search results for Office 265 (likely typosquatting), which leads to Microsoft's office.com, then to a harmless-looking page that redirects to the phishing site. The attackers are using a custom Microsoft tenant with ADFS to receive authorization requests for the fake domain.

CRYPTOAGILITY: THE STRATEGIC PILLAR FOR DIGITAL RESILIENCE

Cryptoagility, defined as the ability to replace cryptographic algorithms, keys, and certificates quickly, has become vital for organizations managing critical infrastructure, as shown by Google's Chromecast failure that affected millions when a certificate expired. Organizations must shift from reactive to proactive certificate management, using modular infrastructure, centralized PKI/HSM, and automated rotation aligned with PCI DSS v4.0 and DORA. This forward-looking approach makes cryptographic flexibility a strategic advantage, ensuring operational continuity and compliance before vulnerabilities or expirations cause system failures.

HOW I HACKED MCDONALD'S (THEIR SECURITY CONTACT WAS HARDER TO FIND THAN THEIR SECRET SAUCE RECIPE)

The author of this post uncovered several vulnerabilities at McDonald's, like weak app and portal security, exposed API keys, and user data leaks. Despite attempts to report the issues, finding someone to listen was nearly impossible—the process required calling HQ and guessing employee names. Most bugs were fixed once reported, but communication and security practices at McDonald's were deeply flawed.

HIGH-PROFILE CLOUD PRIVESC

This post details an attack path from an Entra service principal with `Files.ReadWrite.All` permissions to admin. The attacker exploited OneDrive for Business's Known File Move feature to load a PowerShell profile with a beacon from OneDrive into admins' filesystems. It concludes with defender tips on detection and credential protection.

MICROSOFT ENTRA PRIVATE ACCESS BRINGS CONDITIONAL ACCESS TO ON-PREM ACTIVE DIRECTORY

Microsoft's Entra Private Access now allows organizations to apply cloud-based conditional access and MFA to on-premises Active Directory domain controllers, replacing legacy VPNs with Zero Trust Network Access. It requires networks to be NTLM-free and Kerberos-only, Windows 10+ devices that are Entra or hybrid joined, opening TCP port 1337 on domain controllers, and extensive NTLM auditing and removal. Organizations must audit NTLM usage via Group Policy, transition to NTLMv2 or Kerberos, and possibly retire legacy apps before implementing this security framework.

TURNT

TURN tunneler (TURNt) is a red-team tool designed to tunnel interactive C2 traffic, such as hidden VNC and SOCKS traffic, over legitimate meeting protocols used by Zoom and Teams.

YARA ABSTRACT SYNTAX TREE

YARAAST (YARA Abstract Syntax Tree) is a Python library and CLI tool for parsing, manipulating, and analyzing YARA rules through AST representation.

SINGAPORE ISSUES CRITICAL ALERT ON DIRE WOLF RANSOMWARE TARGETING GLOBAL TECH AND MANUFACTURING FIRMS

The Dire Wolf ransomware has affected 16 organizations across 11 countries since it emerged in May, using double-extortion tactics, such as encrypting data while threatening leaks. The Golang-based ransomware uses anti-forensics techniques and multi-stage attack chains to evade detection, mainly targeting manufacturing and technology sectors through phishing and credential stuffing attacks.

PYPI NOW BLOCKS DOMAIN RESURRECTION ATTACKS USED FOR HIJACKING ACCOUNTS

Accounts of project maintainers publishing software on PyPI are linked to email addresses, which in some cases may be tied to a custom domain name. Historically, attackers have been able to take over some projects by resurrecting an expired domain that was attached to a maintainer's email and resetting the account. PyPI has added new checks that will mark an email as unverified if a domain is expired or is about to expire.

NEW ZERO-DAY STARTUP OFFERS $20 MILLION FOR TOOLS THAT CAN HACK ANY SMARTPHONE

A UAE-based startup is offering huge bounties—up to $20 million—for hacking tools that exploit zero-day flaws in all major smartphone systems. The firm, which serves governments and intelligence agencies, is secretive about its clients. The offer reflects rising demand and prices for cyber-espionage tools.

👉Register now

ALLIANZ LIFE DATA BREACH AFFECTS 1.1 MILLION CUSTOMERS

A cyberattack at Allianz Life in July compromised the personal details of 1.1 million customers, including Social Security numbers, after hackers accessed a Salesforce database.

OREGON MAN CHARGED IN ‘RAPPER BOT' DDOS SERVICE

A 22-year-old Oregon man was arrested for operating the “Rapper Bot” botnet, which was used to launch massive DDoS attacks on global targets.

INTEL EMPLOYEE DATA EXPOSED BY VULNERABILITIES

Vulnerabilities in Intel's internal websites exposed personal details of 270,000 employees worldwide, but no sensitive data, such as Social Security numbers or salaries, was leaked.

Read the Delve case study.