Coldcard Wallet Vulnerability, CoinList Pushes Tokenized Assets, Pumpfun Volume Nears Highs

TL;DR

• A significant vulnerability in Coldcard wallets has reportedly led to over $38 million in stolen funds, affecting around 500 wallets.
• CoinList is pushing for wider adoption of tokenized assets, aiming to simplify integration for various platforms.
• Pumpfun reported strong performance, with DEX volume nearing March highs and substantial revenue generation.
• Discussions around the US CLARITY Act highlight the perceived need to protect America's financial system and maintain leadership in digital technology.
• Bmic AI detailed its integration of post-quantum cryptography, specifically CRYSTALS-Kyber, into its security design.

The past 24 hours saw a mix of security concerns and continued development in the crypto space. Reports of a major wallet vulnerability underscore ongoing risks, even with hardware solutions. Meanwhile, platforms like CoinList are working to broaden the accessibility of tokenized financial products.

Project performance metrics from entities like Pumpfun indicate areas of sustained activity and revenue within the decentralized exchange landscape. Regulatory discussions, exemplified by calls for the CLARITY Act, reflect a growing focus on the intersection of digital assets and national financial security.

---

Influencer voices

PayPal acquisition speculation

CoinDesk highlighted analyst Owen Lau's perspective on a potential acquisition of PayPal by Stripe and Advent. Lau suggests such a deal could materialize if the offer price is increased to approximately $70 per share.

This commentary places traditional financial tech giants within the broader M&A landscape. While not directly crypto-native, PayPal's existing integrations with digital assets make its corporate movements relevant to the industry's periphery.

Pumpfun's sustained performance

Emperor Osmo drew attention to the continued strong performance of Pumpfun. The platform reportedly saw its DEX volume rebound to $20 billion, approaching its March peak.

Pumpfun also generated $32 million in revenue, marking its highest point since March. This performance resulted in $15.75 million being distributed to token holders, with the $PUMP token trading at a 2.32x Price-to-Sales ratio.

Call for the CLARITY Act

The Wolf Of All Streets amplified comments from former Secretary of Defense Dr. Mark T. Esper. Esper emphasized the necessity for the US to pass the CLARITY Act.

The proposed legislation is framed as crucial for safeguarding America’s financial system. It also aims to ensure the US maintains its leadership position over China in digital technology development.

Bitcoin's market crossroads

Benjamin Cowen presented an analysis suggesting that Bitcoin is approaching a critical juncture. His video implies that market forces are converging to necessitate a clear directional decision for the asset.

This perspective often involves examining various technical and on-chain indicators. Such analyses attempt to forecast potential shifts in market sentiment and price action.

---

Project moves

Nexchain's price progression

Nexchain announced its current price point of $0.12, framing it as a one-directional upward movement. The project suggests its current stage mirrors previous ones, characterized by tightening supply and shrinking allocations.

This strategy aims to create a perception of scarcity and consistent value appreciation. Such models are common in early-stage token sales and pre-market offerings.

BMIC AI integrates post-quantum security

Bmic AI highlighted its use of CRYSTALS-Kyber, a NIST-selected post-quantum key-encapsulation mechanism. This technology is foundational to Bmic AI's security design.

The project emphasizes that its security relies on lattice problems, which are not currently known to be efficiently solvable by quantum algorithms. This proactive approach addresses potential future threats from quantum computing.

NOCtura's development update

NOCtura provided an update, acknowledging a period of silence and apologizing for it. The team explained that a short summer break followed their July 21 release.

The project confirmed that development has resumed and indicated that the next wallet update is expected soon. This communication aims to reassure their community about ongoing progress.

---

Launchpads & infra

CoinList pushes tokenized assets

CoinList is actively promoting its platform as a solution for integrating tokenized assets. The firm suggests that users desire access to a wide array of tokenized products, including equities, Treasury funds, and index products.

CoinList highlights the benefit of a single integration, allowing platforms to access new assets without requiring individual builds for each. This approach aims to streamline the adoption of tokenized financial instruments.

---

Exchanges

BYBIT's ongoing campaign

BYBIT issued a reminder for users to claim rewards as part of its #BybitGalaxy campaign. The exchange branded itself as a "New Financial Platform" in its announcement.

Such campaigns are typical strategies for exchanges to engage their user base. They often aim to incentivize activity and maintain platform stickiness.

OKX's EARNFEST VIP Lounge

OKX launched its "EARNFEST VIP Lounge," inviting users to showcase their yield-stacking efforts. Participants sharing screenshots of their earnings stand a chance to win $100 USDG.

This promotional activity is designed to encourage participation in OKX's earning products. It also serves to foster community engagement through social media interaction.

BingX analyzes ADA's volume

BingX provided an analysis of Cardano ($ADA)'s recent price movement. The exchange noted that a single green candle holds little significance unless supported by corresponding volume.

BingX observed that $ADA's recent rise is indeed backed by stronger activity. This suggests that the next breakout attempt for the asset could be more substantial, according to their analysis.

Crypto.com's ETH campaign nears end

Crypto.com issued a final call for its ETH App Campaign, which is set to conclude shortly. Users who buy or deposit at least US$50 in $ETH have a chance to win US$10 in ETH.

The top 3,000 eligible users are slated to receive the reward. Such time-sensitive campaigns are a common method for exchanges to drive trading and deposit activity for specific assets.

---

Auditors & security

Coldcard wallet vulnerability reported

SolidProof reported a significant vulnerability affecting Coldcard wallets, leading to over $38 million in stolen funds. Approximately 500 wallets were reportedly impacted, with funds transferred to a specific address.

The total amount moved to the address bc1qnk was cited as 594.48 BTC. This incident underscores the persistent security risks even with hardware wallet solutions and highlights the need for user vigilance.

Certik launches CoinDepo bug bounty

Certik announced the launch of a bug bounty program for CoinDepo on its CertiK Hunt platform. CoinDepo is described as a digital asset platform offering interest-bearing accounts and crypto-backed loans.

Invited researchers can now submit reports, with rewards reaching up to $20,000 USD. Bug bounty programs are a proactive security measure, incentivizing ethical hackers to identify and report vulnerabilities before malicious actors exploit them.

Halborn's AI security guide

Halborn released a new guide focused on securing AI agents for finance professionals. The report is tailored for CISOs, CTOs, and other security and risk leaders.

It identifies nine finance-specific threat models and outlines corresponding controls to mitigate them. The guide also provides a framework for governing agent autonomy while maintaining business efficiency.