24H Trending Coins & Headlines | POAP Announces Shutdown After Five Years of Operation; Coldcard Security Incident Losses Near $114 Million (August 4)
- Key Takeaways: This week's industry report focuses on market volatility, multiple security incidents (Coldcard vulnerability attacks), and industry developments (Mastercard acquisition, Bithumb IPO), with the cryptocurrency security sector facing a new threat of AI-driven low-cost attacks.
- Key Elements:
- Among the Top 10 CEX trading volumes, UNI saw the largest decline at -5.71%, while ADA led gains at +1.75%; ROBO topped the gainers list with +14.14%.
- POAP project announced its shutdown after five years of operation, having issued millions of on-chain attendance proof badges for institutions such as Coinbase and American Express.
- Cumulative losses from the Coldcard hardware wallet vulnerability attack may approach $114 million, with a suspected 4th round of organized attacks involving 462 addresses.
- A Dragonfly partner noted that the cost for AI to discover the Coldcard vulnerability is only about $2, making the race between attack costs and defense costs a key issue in the security sector.
- Mastercard completed its acquisition of stablecoin infrastructure company BVNK to enhance its stablecoin application capabilities in areas such as cross-border B2B payments.
- Korean exchange Bithumb officially announced its IPO plan, targeting a listing by 2028, progressing in three phases.
- The Hong Kong Securities and Futures Commission added BiFinance to its list of suspicious virtual asset trading platforms for allegedly conducting digital asset trading activities without a license.
1. Trending Tokens on CEXs
Top 10 CEX Tokens by Trading Volume and 24-Hour Price Change:
- BTC: +0.13%
- ETH: -1.21%
- SOL: -0.04%
- XPP: -0.90%
- BNB: +0.84%
- ADA: +1.75%
- QQQB: +0.99%
- DOGE: -0.50%
- TRX: +0.74%
- ZEC: -0.37%
- UNI: -5.71%
Top 24-Hour Gainers (Data Source: OKX):
- ROBO: +14.14%
- xPLTR: +14.04%
- MENGO: +13.70%
- TRA: +12.62%
- xONDS: +11.19%
- FLUID: +11.01%
- xHIMS: +9.88%
- DORA: +9.56%
- WIN: +8.64%
- xVRT: +7.81%
Top 24-Hour Gainer for Tokenized Stocks (Data Source: msx.com):
- AAOX.M: 40.87%
- VOYG.M: 33.67%
- COHX.M: 23.37%
- LITX.M: 21.34%
- CRWV.M: 20.52%
- AAOI.M: 20.02%
- SNXX.M: 18.74%
- DEFT.M: 18.60%
- AIXC.M: 17.56%
- PLTR.M: 17.37%
2. Trending On-Chain Memes (Data Source: GMGN):
- 币有
- CATE
Top News
Isabel Gonzalez, co-founder of the Proof of Attendance Protocol (POAP), announced that the project will shut down after more than five years of operation. POAP has issued millions of on-chain commemorative badges for crypto events, conferences, hackathons, classes, and community gatherings.
POAP is one of the representative projects in crypto culture, allowing users to claim or purchase unique badges by scanning QR codes to prove their attendance at online or offline events. Its users included Coinbase, American Express, Warner Music Group, Bayer, as well as numerous crypto industry projects and communities. POAP also issued commemorative badges for significant milestones in Ethereum's history, such as The Merge upgrade.
The cryptocurrency security incident continues to unfold. Cumulative losses from the Coldcard hardware wallet vulnerability exploit may approach $114 million. By traditional standards, this amount would rank second among US theft cases, trailing only the 1990 theft at the Isabella Stewart Gardner Museum in Boston (approximately $500 million). However, when compared to historical thefts within the crypto industry, a $100 million scale wouldn't even crack the top ten. If traditional thefts and crypto asset heists were ranked together, crypto-related cases would occupy 9 of the top 10 spots in US history.
Trump: Nothing Can Enter Iran Without US Approval
US President Trump announced: Nothing can enter Iran without US approval. The Strait of Hormuz is under the control of the US Navy. Whether Iran is willing to admit it or not, we are actually discussing a solution to a problem they created that has persisted for decades. (Jin Shi)
Haseeb Qureshi, managing partner at Dragonfly, stated on X that the key in the security domain has become a cost race—a comparison between the cost for attackers using cutting-edge AI to scan for vulnerabilities and the cost for the targeted party to invest in AI-driven security hardening. The fact that Claude could discover the vulnerability in 8 minutes and GLM reproduced it in 20 minutes suggests that Coldcard invested almost nothing in AI security hardening. Qureshi estimates that the discovery cost for GLM 5.2 to reproduce the attack was only about $2, meaning it would take just $2 to find this vulnerability using AI. He warned that small companies will find it difficult to survive in security-sensitive product domains and stated that any security-sensitive product should undergo AI security scans with every release.
Industry News
The Thai Immigration Bureau recently issued a warning, noting that while the cross-border trade in Buddhist amulets is booming, it is being exploited by Chinese gray capital networks as a money laundering channel. From online gambling, telecom fraud, to drug trafficking, some illegal proceeds are being disguised as legitimate business income through means such as amulet trading, fake auctions, temple rentals, and peer-to-peer cryptocurrency transfers.
Mastercard Completes Acquisition of Stablecoin Infrastructure Company BVNK
Mastercard announced the completion of its acquisition of stablecoin infrastructure company BVNK to enhance its global stablecoin service capabilities. Mastercard's Chief Product Officer stated that in a multi-currency world where fiat currencies, stablecoins, tokenized deposits, and other forms of value coexist, the next generation of payment models will be determined by the efficiency of connectivity between various rails. BVNK's on-chain infrastructure and stablecoin-native technology will help financial institutions, fintech companies, and enterprises expand stablecoin use cases such as cross-border B2B payments, remittances, settlement, and fund flows. Previous reports indicated that Mastercard planned to acquire BVNK for up to $1.8 billion.
Bithumb Announces IPO Plans, Targeting Listing by 2028
According to an official announcement from Bithumb, the South Korean cryptocurrency exchange has officially announced its IPO plans and disclosed a three-phase timeline: completing internal control optimization and K-IFRS (Korean International Financial Reporting Standards) conversion preparations in 2026; submitting a preliminary listing review application in 2027; and completing the official listing in 2028.
Hong Kong SFC Adds BiFinance to List of Suspicious Virtual Asset Trading Platforms
The Hong Kong Securities and Futures Commission (SFC) has announced that BiFinance has been added to its list of suspicious virtual asset trading platforms. The company claims to be licensed in Hong Kong and states that it offers spot, futures, wealth management, and other digital asset trading services on its website, along with other digital asset-related services. However, the company is not licensed by the SFC and is suspected of conducting unlicensed activities.
Project News
Robinhood Chain DEX Trading Volume Last Week Down 44% from Peak Week
Adam stated on X that decentralized exchange (DEX) trading volume on Robinhood Chain cooled off last week, declining 44% from the previous peak week.
TokenWorks Opens External FWA Purchases; 50% of Future Protocol Fees Will Be Used for Buybacks
TokenWorks announced on X that the initial distribution phase for Fake World Assets has been completed, and external purchases will officially open on August 4th at 3:00 PM ET.
Previously, to prevent external capital from influencing the protocol's early development, Fake World Assets only distributed tokens to participants. TokenWorks stated that going forward, the 50% portion of protocol fees originally allocated to TokenWorks will instead be redirected to a buyback mechanism.
People & Voices
Uniswap Founder: pools.trade Will Open to Users Soon
Uniswap founder Hayden Adams responded on X to a user's question about when "pools.trade" (presumably Uniswap's upcoming launchpad platform) will open to users, saying: "Very soon!"
Arthur Hayes stated on X that attention should be paid to this week's Federal Reserve H.4.1 report to confirm whether the Japanese Ministry of Finance used its US Treasury holdings in repurchase agreements to obtain US dollars, subsequently selling dollars to buy yen. If Bessent can raise counterparty limits, the Fed could create money using Japanese MoF-held US Treasuries as collateral.
According to monitoring by Galaxy's Head of Research, a suspected organized Coldcard attack is underway, with similar transactions still pending in the mempool. Previously confirmed transactions show RBF enabled. Between blocks 960,778 and 960,792, approximately 218 transactions occurred within about 2.5 hours, involving 462 victim addresses, 216 new destination addresses, and 388.92748828 BTC. None of the transactions had inputs predating the Coldcard firmware boundary. The sweep rate during this period was 13.8 per block, compared to a control window of 0.3 per block before the incident—approximately 45 times higher. The transaction topology was 1:1, with each victim address corresponding to a new destination address. Only one destination address received two sweeps, and no consolidation addresses were observed. Some funds have already been swept to second-hop addresses.
