# Audit Articoli collegati

Il Centro Notizie HTX fornisce gli articoli più recenti e le analisi più approfondite su "Audit", coprendo tendenze di mercato, aggiornamenti sui progetti, sviluppi tecnologici e politiche normative nel settore crypto.

Ledger Warns of AI Risks Following Coldcard Hack

Ledger's CTO warned of AI-related security risks following a hack of Coldcard hardware wallets. The incident, which exploited a vulnerability in Coldcard's random number generator, highlighted that open-source code is not synonymous with audited code, as the flaw had been publicly available for over five years before being exploited. Ledger emphasized that its own devices use a hardware-based random number generator within a Secure Element, avoiding the software-based backup path that was problematic for Coldcard. The hack has been linked to the growing role of AI tools in code analysis. While such tools can accelerate vulnerability discovery for both attackers and defenders, there is no public evidence AI was used in this specific attack. However, online discussions suggest AI models like Claude Code could potentially identify such flaws in minutes. A venture capital partner noted the attack could have been prevented with a $2 AI code check. Losses from the exploit, carried out by at least 15 different attackers across multiple waves, are estimated at up to $130 million. In response to the incident, other hardware wallet manufacturers like Trezor have warned users of subsequent phishing attacks impersonating companies and offering fake "hardware audits."

cryptonews.ru7 h fa

Ledger Warns of AI Risks Following Coldcard Hack

cryptonews.ru7 h fa

Coldcard Vulnerability Becomes Worst for Canadian Card Holders

A vulnerability in the Coldcard hardware wallet has disproportionately impacted Canadian users, accounting for 25% of all Canadian losses, according to Chainalysis. The firm attributes this to the wallet's popularity in Canada, driven by influencer marketing campaigns. The US and Thailand were also significantly affected. Total losses from the ongoing exploit are estimated between $110 million and $150 million, with over 1,816 BTC stolen from 5,200 addresses. The attack involves multiple bad actors and may impact up to 15 different entities. In response, a 'Red Team' initiative is using AI analysis to scan for similar vulnerabilities in Bitcoin ecosystem code, reporting about one critical vulnerability per hour. Coldcard users are urged to update firmware, generate a new secure seed phrase, and transfer funds with a higher transaction fee. Some users successfully rescued funds by paying higher fees to outpace attacker transactions.

cryptonews.ru8 h fa

Coldcard Vulnerability Becomes Worst for Canadian Card Holders

cryptonews.ru8 h fa

CEO of AEREDIUM States that AI Enhances Stablecoin Reserve Oversight

AEREDIUM Holdings has received a U.S. patent (No. 12,694,407 B1) for a real-time AI system designed to continuously audit the reserves of stablecoins and other digital assets. Invented by founder and CEO Albert Dadon, the system aims to replace traditional periodic audits from accounting firms with automated oversight. The patented architecture uses four independent AI models for monitoring. A consensus from at least three models is required for a decision, which can be overridden by a compliance mechanism. The system issues status levels from "PASS" to "HALT." A "HALT" status automatically instructs connected smart contracts to reject pending token transactions, preventing trading if reserves fall out of compliance. Audit results are recorded on-chain within minutes and cross-referenced to a second blockchain, creating an immutable public ledger. Dadon stated the system makes trust an inherent property of the asset, with verification "traveling with the token." He emphasized the patent provides broad legal protection for this specific use case. While the AI ensemble is not intended to replace legally required audits or issuer liability, Dadon expects regulatory expectations to shift toward mandatory real-time verification as adoption grows. AEREDIUM is preparing international patent filings and is in talks with U.S. regulators.

cryptonews.ru9 h fa

CEO of AEREDIUM States that AI Enhances Stablecoin Reserve Oversight

cryptonews.ru9 h fa

Mathematicians Refute Open AI's Claim of Proving Connes Rigidity Conjecture Within 24 Hours: 'AI Proved Every Sentence Correct, but They Are No Longer About the Original Conjecture'

Mathematician Refutes OpenAI's Claim of Disproving Connes Rigidity Conjecture in 24 Hours OpenAI claimed its next-generation AI model solved 10 world-class problems, including disproving the Connes Rigidity Conjecture. The next day, mathematician J. L. Nielsen from the University of Kansas published a paper refuting the AI's counterexample. Nielsen meticulously reviewed OpenAI's publicly released 37,000 lines of Lean 4 code, mapping each object back to its mathematical origin. He identified two independent failure paths in the AI's argument. He concluded that one of the two groups constructed by the AI does not satisfy the required conditions (specifically ICC and Kazhdan's property (T)) necessary to serve as a valid counterexample to the original conjecture. This means the AI may have successfully proven something about its constructed objects, but that statement is not equivalent to disproving the Connes Rigidity Conjecture itself. The incident highlights a crucial limitation of formal verification tools like Lean. While Lean's kernel can verify the logical correctness of a proof's steps, it cannot verify whether the formal statement being proven correctly corresponds to the intended mathematical conjecture. Human oversight remains essential to ensure the alignment between the formalized problem and the original research question. This case exemplifies what researchers call "successfully proving the wrong statement." The Connes Rigidity Conjecture, concerning the uniqueness of group von Neumann algebras under certain conditions, remains an open problem.

marsbitIeri 08:46

Mathematicians Refute Open AI's Claim of Proving Connes Rigidity Conjecture Within 24 Hours: 'AI Proved Every Sentence Correct, but They Are No Longer About the Original Conjecture'

marsbitIeri 08:46

July Security Report: Total Losses Approximately $97 Million, Cross-Chain Bridge Attacks Concentrated with Over $35 Million

In July 2026, the cryptocurrency sector suffered total losses of approximately $97 million, with hacker attacks and contract vulnerabilities accounting for about $94 million. A significant trend was the shift in attack vectors from smart contract code to off-chain infrastructure, signature key leaks, and governance manipulation. Major incidents included: * **Ostium ($23.75M loss):** An attacker gained access to its off-chain price oracle signing system, manipulated BTC prices, and drained funds. * **AFX Trade Bridge ($24.15M loss):** The private validator key for its cross-chain bridge was compromised, allowing unauthorized withdrawals. * **BonkDAO ($20M loss):** An attacker acquired enough tokens to pass a malicious governance proposal and drain the treasury, exploiting low voting thresholds. * **Bonzo Lend ($9.05M loss):** A third-party oracle provider's signature verification was exploited to inject manipulated token prices. * **Verus Bridge ($7.55M loss):** A repeat attack exploiting the same unpatched bridge vulnerability. * **B2 Network ($3.86M loss):** An attacker seized the upgrade authority for a staking contract. Cross-chain bridges remained a prime target, with concentrated attacks causing over $35 million in losses. Phishing scams resulted in roughly $3 million in losses, employing sophisticated methods like fake mobile apps and physical counterfeit letters targeting Ledger users. Key takeaways are the acceleration of attacks on off-chain infrastructure, the persistent vulnerability of cross-chain bridges, and the rising prominence of governance-layer exploits. Recommendations include enhancing off-chain key management with multi-sig security, implementing stricter governance controls, and increasing user vigilance against phishing.

marsbit2 giorni fa 02:21

July Security Report: Total Losses Approximately $97 Million, Cross-Chain Bridge Attacks Concentrated with Over $35 Million

marsbit2 giorni fa 02:21

Trade XYZ Compensated After Mass Liquidation of $60 Million Positions

Cryptocurrency platform Trade XYZ has compensated traders following a technical failure on July 27, 2026, that triggered the mass liquidation of long positions valued between $57 million and $80 million. The incident, affecting approximately 960 accounts, was caused by an abnormal order on the Korean pre-market platform NXT, which disrupted the oracle system used to calculate mark prices. This led to unwarranted liquidations despite no corresponding market conditions. In response to community outcry, Trade XYZ's team conducted an internal investigation, confirmed the technical error, and announced full compensation for all affected traders. The reimbursements were issued in tokens of equivalent value. The platform also committed to auditing its systems to prevent future occurrences, emphasizing client trust as a top priority. These actions were seen by the market as a transparent and responsible step to address the infrastructure failure and partially restore the platform's reputation.

cryptonews.ru08/01 19:19

Trade XYZ Compensated After Mass Liquidation of $60 Million Positions

cryptonews.ru08/01 19:19

Coldcard Hardware Wallet Hacked: 594 Bitcoin Withdrawn in 25 Minutes

The Coldcard hardware wallet has been compromised, with hackers stealing approximately 594.5 Bitcoin (~$40 million) from 500 addresses in just 25 minutes. The root cause was a critical software bug, undetected for five years, which disabled the device's secure chip for generating true random numbers. This led to the creation of private keys based on predictable data like the processor's serial number, drastically reducing cryptographic security. The attackers exploited this offline by brute-forcing possible seed phrases, finding active addresses on the public ledger, and signing transactions. Initially, Coinkite (Coldcard's maker) claimed only older models were at risk but later admitted all devices running the compromised firmware were vulnerable. CEO Rodolphe Novak (NVK) apologized but ruled out financial compensation for affected users. To secure funds, owners must urgently update their firmware to specific safe versions, generate a completely new seed phrase on the updated device, and transfer all assets to new addresses created with that new seed. While a BIP-39 passphrase can help, it does not replace this migration process. Other Coinkite products like TAPSIGNER were not affected. This incident underscores that even specialized hardware requires rigorous, independent code audits, especially for cryptographic functions. It parallels past failures, like a 2006 OpenSSL bug in Debian, and raises questions about whether automated code analysis can ever fully replace human scrutiny in critical security areas.

cryptonews.ru07/31 21:41

Coldcard Hardware Wallet Hacked: 594 Bitcoin Withdrawn in 25 Minutes

cryptonews.ru07/31 21:41

Tether (USDT) Publishes Anticipated Financial Results for the Second Quarter! Here's Its Current Status and Assets

Tether, the world's largest stablecoin issuer, has published its Q2 2026 financial results. According to an independent audit by BDO, the company reported a net operating profit of approximately $1.5 billion and an excess of assets over liabilities totaling $4.11 billion. As of June 30, 2026, the circulating supply of USDT was roughly $184.6 billion, marking an increase of about $446 million from the prior quarter. Tether now holds over 60% of the global stablecoin market share. The $1.5 billion profit was primarily generated from U.S. Treasury bills and repurchase agreements. Total assets stood at approximately $187.75 billion against liabilities of $183.64 billion, with $183.62 billion of liabilities tied to issued digital tokens. Key actions during the quarter included a reduction of secured loans by $2.38 billion (down 15%) and an addition of 14 tons to its physical gold holdings, bringing the total to over 146 tons. CEO Paolo Ardoino reaffirmed that USDT remains fully backed by reserves despite market volatility. He also noted that the company is undergoing a comprehensive independent audit with one of the "Big Four" accounting firms.

cryptonews.ru07/31 21:00

Tether (USDT) Publishes Anticipated Financial Results for the Second Quarter! Here's Its Current Status and Assets

cryptonews.ru07/31 21:00

Tether, the Issuer of USDT, Reports $1.5 Billion Profit for the Quarter

Stablecoin issuer Tether reported a net operating profit of $1.5 billion for Q2 2026, according to an audit by BDO. The company's assets exceeded liabilities by $4.11 billion. The supply of its USDT token grew to $184.6 billion by the end of June, maintaining over 60% market share in the shrinking stablecoin sector, primarily on Tron and Ethereum. Tether's reserves remain heavily concentrated in U.S. Treasury bills, a primary profit driver, making it one of the world's largest holders of U.S. debt. The company also increased its physical gold holdings by 14 tons to over 146 tons, used partly to back its gold-pegged XAUT token. Additionally, Tether holds Bitcoin reserves valued at $8.93 billion. As of June 30, Tether's total assets were $187.75 billion against liabilities of $183.64 billion, with $183.62 billion attributed to issued tokens.

cryptonews.ru07/31 16:53

Tether, the Issuer of USDT, Reports $1.5 Billion Profit for the Quarter

cryptonews.ru07/31 16:53

Casper Prepares Launch of Updated csprUSD

The Casper blockchain platform, in collaboration with investment firm Sarson Funds, is preparing to launch an upgraded version of its csprUSD stablecoin. Upon release, it will become the primary dollar-pegged stablecoin within the Casper ecosystem. A key use case will be facilitating automated payments between AI agents via the x402 protocol. This development follows the recent establishment of the x402 Foundation under the Linux Foundation, which includes members like Visa, Mastercard, Google, Coinbase, Circle, Stripe, AWS, and Cloudflare. The x402 protocol enables AI agents to autonomously pay for goods and services online using standard HTTP requests, bypassing traditional payment systems. The new csprUSD will be compatible with Casper 2.0 and support the CEP-3009 standard. It will allow users and AI agents to confirm payments off-chain, with final settlement occurring on the blockchain. The ecosystem will also integrate Casper's ProofLayer technology, which provides cryptographic verification for off-chain data. This will be used to verify the dollar reserves backing csprUSD and to monitor token issuance and redemption. Prior to the mainnet launch, the stablecoin's smart contract will undergo an independent security audit. Casper has also recently reduced its minimum transaction fee from 2.5 CSPR to 0.1 CSPR following the approval of proposal CEP-97.

cryptonews.ru07/30 14:00

Casper Prepares Launch of Updated csprUSD

cryptonews.ru07/30 14:00