The vulnerability behind ZetaChain's $334,000 exploit had been reported through its bug bounty program before the attack but was dismissed. The vulnerability that led to ZetaChain’s recent exploit had been flagged through its bug bounty program before the attack, but was dismissed as intended behavior. In a post-mortem published Wednesday, the team said the incident has prompted a review of how it handles bug bounty submissions, particularly reports involving chained attack vectors that may appear harmless in isolation but are dangerous in combination. “This bug was reported and they simply ignored it,” one user wrote on X. “That's how bug bounty programs work with these protocols currently; they incentivize losses for the protocol, the TVL, and the user's balance instead of paying the researcher for discovering and fixing the bug,” they added. Read more
South Korea's Hana Financial, POSCO International and Upbit operator Dunamu have moved their blockchain remittance system into live trade transactions. South Korea's Hana Financial Group, POSCO International and Dunamu, the operator of the crypto exchange Upbit, have signed a trilateral memorandum of understanding (MoU) to launch their blockchain-based remittance system, with POSCO International serving as the first real-world test case. The agreement, signed Tuesday at Hana Financial Group's Seoul headquarters, follows a successful proof-of-concept (PoC) completed earlier this year by Hana and Dunamu, which showed that blockchain could reduce settlement times and costs compared to the traditional SWIFT framework. That pilot used Dunamu's proprietary GIWA Chain to replace SWIFT's messaging network for cross-border transfers. The new MoU allows the system to be tested on real trade transactions for the first time, with POSCO International handling the actual fund flows, the company said in a Wednesday announce...
Polymarket is reportedly in talks with the CFTC to restore US access after its 2022 settlement, following a limited US rollout in December 2025 focused on sports contracts. Polymarket is seeking regulatory approval to reopen its main prediction markets platform to US users, Bloomberg reported Tuesday, citing people familiar with the matter. According to Bloomberg, Polymarket has been engaging with the US Commodity Futures Trading Commission (CFTC) to lift the prohibition on US-based customers. The move would mark a broader US return for the company, which re-entered the market in a limited form last year through its regulated QCEX-based setup but still keeps Americans off its main international exchange. Read more
The FTC order ties Mashinsky’s $10 million payment to a mostly suspended $4.72 billion judgment that can be revived over asset disclosures. Celsius founder Alexander Mashinsky agreed to a US Federal Trade Commission (FTC) settlement that permanently bars him from promoting asset-related products and requires a $10 million payment tied to a broader, mostly suspended $4.72 billion judgment. The stipulated order, entered by Judge Denise Cote in the Southern District of New York on Tuesday, said Mashinsky is “permanently restrained and enjoined” from advertising, marketing, promoting, offering or distributing any product or service that can be used to “deposit, exchange, invest, or withdraw assets.” The order entered a $4.72 billion monetary judgment in favor of the FTC against Mashinsky, but most of it was suspended. Mashinsky must now pay $10 million to the FTC. However, the order said this obligation can also be satisfied if he pays at least $10 million to the US Department of Justice under the forfeiture ord...