# DeFi İlgili Makaleler

HTX Haber Merkezi, kripto endüstrisindeki piyasa trendleri, proje güncellemeleri, teknoloji gelişmeleri ve düzenleyici politikaları kapsayan "DeFi" hakkında en son makaleleri ve derinlemesine analizleri sunmaktadır.

The Danger of Old Bookmarks: How an Expired Tornado Cash Domain Cost a User 1,000 ETH

A user lost over 1,010 ETH (worth millions) due to a phishing attack via an expired official domain of the Tornado Cash protocol. As reported on August 20, 2026, the domain `tornado.cash` was not renewed by the original developers amid U.S. OFAC sanctions and was subsequently registered by malicious actors. They deployed a fake frontend mimicking the legitimate Tornado Cash interface. Through this site, the attackers gained access to the user's deposit notes—the data required to withdraw funds from the protocol's pools—and drained the ETH within 12 hours. On-chain data shows the stolen funds (e.g., wallet 0xd8B356...) were withdrawn from Tornado Cash pools. However, on-chain analyst Specter cast doubt on the victim's story. He suggested the individual might be involved in illicit activity, noting that a large sum of BTC was received from a coin-mixing service (Whirlpool) and converted to ETH before being sent to the fake Tornado Cash site. The victim's explanation of urgently moving funds due to a compromised hardware wallet was questioned, as the fund trail indicated deliberate obfuscation. Specter speculated this might be a conflict between malicious actors rather than a simple phishing case. The incident highlights the danger of expired domains for major protocols, where old bookmarks can lead to compromised sites. WHOIS records show the domain was registered in March 2025. Broader analysis notes that in 2025, over $1.8 billion was lost to scams and exploits, largely through social engineering like phishing via familiar but hijacked links. This case underscores the persistent risk when a domain's legal status changes but user trust and search engine reputation remain.

cryptonews.ru5 saat önce

The Danger of Old Bookmarks: How an Expired Tornado Cash Domain Cost a User 1,000 ETH

cryptonews.ru5 saat önce

GensynAI's Jeff Amico States That Real-World Asset (RWA) Investors May Lose Creditor Rights

Jeff Amico of GensynAI warns that investors in Real-World Asset (RWA) tokenized lending pools may lack creditor rights in case of borrower default. He notes a common structure where users receive a yield-bearing stablecoin from a platform, but the underlying loan and collateral are held by separate legal entities. This setup means investors have no enforceable claims against the borrower, the special purpose vehicles (SPVs), or the collateral itself, relying instead on the platform's promise to return funds. Amico emphasizes that investors must first identify who legally owes them money and what credit enhancement mechanisms exist, rather than focusing solely on nominal yield. Protections like collateral or first-loss capital are meaningless unless the lien is properly perfected and an agent is designated to enforce it on the investor's behalf. Investors without a formal credit agreement are particularly vulnerable. He cites Pareto/FalconX as a better model where depositors are direct contractual creditors, though this comes with higher minimum investments and KYC requirements. This highlights a trade-off: the crypto industry's permissionless ideals often conflict with the legal protections required for secure lending. Amico argues that weak legal structures could limit the RWA sector's growth. Traditional finance offers a clear template with defined creditor rights and perfected liens. Tokenized lending needs infrastructure, like oracles, to verify off-chain loan agreement status and collateral perfection, as smart contracts cannot do this autonomously. Ultimately, transparency is key. Some investors may accept weaker protections for open access, while others may prefer stronger legal rights. The legal structure of a lending pool will be as critical as its advertised yield, especially during a default, determining whether a token holder has enforceable rights or merely a platform promise.

cryptonews.ruDün 17:41

GensynAI's Jeff Amico States That Real-World Asset (RWA) Investors May Lose Creditor Rights

cryptonews.ruDün 17:41

MiCA is coming for DeFi vaults, but regulation will be difficult

The European Commission is exploring whether to extend the Markets in Crypto-Assets (MiCA) regulation to cover decentralized finance (DeFi) lending and borrowing, including lending vaults. These vaults, which channel billions into on-chain credit markets, present significant regulatory challenges because their decentralized structure doesn't map neatly onto existing financial frameworks. Their legal status is currently based on non-binding interpretations that they fall outside MiCA and EU fund rules. The article uses Morpho's decentralized lending protocol as an example, illustrating how responsibilities are divided among various participants (owner, curator, allocator, sentinel), making it difficult to identify a single "provider" to regulate. Experts warn that broadly categorizing "DeFi lending" could inadvertently capture vastly different structures. They argue that any regulatory approach should focus on the specific structure and control mechanisms of a vault, rather than using decentralization as a simple dividing line, and that DeFi lending may require a dedicated, carefully crafted framework distinct from traditional finance. The Commission's consultation closes on September 30, 2026. The core challenge for regulators is not just whether to regulate DeFi lending, but how to design rules that distinguish between different forms of on-chain lending and the entities that control them.

cointelegraphDün 13:36

MiCA is coming for DeFi vaults, but regulation will be difficult

cointelegraphDün 13:36

UK Tax Authority Sends 81,000 Letters on Cryptocurrency Taxation Amid Tightened Oversight

The UK tax authority (HMRC) has intensified oversight of crypto investors, sending 81,000 'nudge' letters over the past 12 months—a 25% increase from the previous year. These letters warn recipients to disclose unpaid crypto taxes before HMRC launches formal investigations. According to accounting firm UHY Hacker Young, non-compliance is often due to investors misunderstanding complex rules or mistakenly believing transactions are untraceable, especially on foreign exchanges. The UK's crypto tax rules generally distinguish between personal investment gains and income-generating activities. Taxable events can include selling crypto for fiat, exchanging one crypto for another, spending it on goods/services, or transferring tokens. Income from staking or lending may fall under separate income tax rules. Notably, planned changes for April 2027 will simplify accounting for certain DeFi transactions but not eliminate tax on economic gains. HMRC's enforcement capabilities are set to expand with the global Cryptoasset Reporting Framework (CARF). From 2027, UK crypto service providers must collect and report client transaction data. International information exchange will also provide HMRC with data on UK residents using overseas platforms, significantly reducing offshore opacity. This broader reporting initiative coincides with increased UK regulatory actions, including recent raids on suspected illegal peer-to-peer trading sites.

cryptonews.ruDün 10:39

UK Tax Authority Sends 81,000 Letters on Cryptocurrency Taxation Amid Tightened Oversight

cryptonews.ruDün 10:39

活动图片