hodler

7 May 2026, 09:09

The metaverse isn't a place: Why Animoca’s Yat Siu says the future is 100 billion AI agents

Yat Siu said the metaverse is evolving beyond immersive digital worlds, with AI agents increasingly handling commerce, payments and coordination through blockchain infrastructure in the background.

7 May 2026, 08:49

TrustedVolumes Hack Drains $6.7M, Team Opens Bounty Talks

TrustedVolumes was exploited today, May 7, 2026 and has lost almost $6.7 million. The attackers discovered a flaw in the proxy contract and by exploiting the flaw, the attackers managed to drain funds. The breach highlights rising security threats across DeFi infrastructure. Today, on May 7, 2026, alerts from blockchain security firm Blockaid signaled that TrustedVolumes, a major liquidity provider and market maker for the 1inch ecosystem, had been exploited on the Ethereum network. The attacker extracted approximately $6.7 million in assets (according to TrustedVolumes), including 1,291.16 WETH, 206,282 USDT, 16.939 WBTC, and 1,268,771 USDC, according to Blockaid and Web3 security firms. The incident is being investigated as a sophisticated smart-contract exploit rather than a traditional phishing smart-contract exploit or social engineering attack, underlining persistent vulnerabilities in decentralized finance (DeFi) protocols. What Went Wrong in the TrustedVolume Exploit? At the centre of all this chaos was a custom RFQ (Request for Quote) swap proxy contract , 0xeeee….1756, controlled by TrustedVolumes. The attacker, operating from the address 0xc3eb….9100, deployed a malicious contract that first called ‘registerAllowedOrderSigner(signer=0xc3eb…9100, allowed=true)’ on the settlement contract, effectively granting itself authorization to execute trades. Leveraging the TrustedVolumes Market Maker’s unlimited approval to the settlement contract, the attacker initiated multiple settlement transaction, using selector 0x4112e1c2 to withdraw large amounts of WETH, USDT, WBTC and USDC units to the market maker. This allowed the attacker to drain the liquidity pool before the funds were transferred back to the exploit address. Security analyses indicate that the vulnerability stemmed from insufficient access controls and lack of strict validation checks in the RFQ swap proxy. A core admin function was left publicly accessible and it did not have any restrictions. This allowed the attacker to bypass security checks and exploit the contract. This mirrors earlier incidents, such as the March 2025 1inch Fusion v1 exploit, where similar oversights in legacy smart contracts allowed attackers to drain liquidity, though the current exploit targets different contract component. The attack indicates the risks of custom, high risk pathways in DeFi systems that interact directly with large liquidity pools. TrustedVolumes Opens Bug Bounty Talks After $6.7 Million Exploit TrustedVolumes publicly acknowledged the recent exploit and confirmed through an X (formerly known as Twitter) post that several wallet addresses are currently holding the stolen funds. The team in the post also talks about the estimated loss which was around $6.7 million across multiple Ethereum addresses. In its statement, TrustedVolumes said that the platform is open to discuss with the attacker over a possible bug bounty agreement and a workable resolution. The protocol also shared direct contact details, including ProtonMail and Telegram, so anyone with useful information can reach out and potentially help recover stolen assets. The incident once again highlights rising security risks for DeFi protocols and liquidity providers. Is This Exploit Similar to Recent DeFi Attacks? The TrustedVolumes exploit shares parallels with several high-profile DeFi breaches in 2026, particularly those involving cross-chain and restaking protocols. Moreover, the Drift Protocol exploit on Solana, which resulted in a $285 million loss, utilized social engineering to compromise the protocol’s multisig governance and durable nonces, allowing pre-signed transactions to be executed. In the same way, KelpDAO exploit , linked to approximately $292-294 million in losses, exploited vulnerabilities in its LayerZero-based rsETH bridge, where manipulated cross-chain messaging led to the issuance of unsupported rsETH tokens. These incidents collectively highlight a trend: custom, high-complexity components in DeFi, such as RFQ proxies, cross-chain bridges, and governance mechanisms, are prime targets for sophisticated actors. The TrustedVolumes exploit, like the Drift and KelpDAO cases, demonstrates how single points of failure in smart contracts or infrastructure can trigger cascading effects across the ecosystem. Additionally, the Lazarus Group, a North Korea-linked hacking collective, has been associated with such large-scale DeFi heist, leveraging their expertise in cross-chain attacks and operational flaws. The Role of AI in Exploits: The Lazarus Theory There are speculations going around that the Lazarus group may be leveraging artificial intelligence (AI) to accelerate and automate exploit discovery. AI tools can analyze vast amounts of on-chain data, identifying patterns in contact interactions, gas usage, and user behaviour to pinpoint vulnerabilities faster than traditional methods. For example, machine learning models can simulate attack scenarios, optimizing for maximum yield in minimal time, as seen in cross-chain exploits targeting protocols like KelpDAO. Impact on DeFi and the Broader Ecosystem The TrustedVolumes exploit adds to a wave of high-value DeFi hacks in 2026, contributing to more than $13-15 billion in TVL (Total Value Locked) outflows across major protocol like Aave and Compound. These incidents have eroded user confidence, with many platforms halting operations or implementing emergency pauses to mitigate further losses. The repeated targeting of market makers and liquidity providers highlight systemic risks, as disruptions in these roles can cascade into broader liquidity crunches and price volatility. For protocols like KelpDAO and Drift, the impact includes not only direct financial losses but also reputational damage and regulatory scrutiny. The KelpDAO rsETH bridge exploit, for example led to questions about the security of cross-chain infrastructure, prompting calls for enhanced audits and isolations of critical components. Similarly, the Drift exploit emphasized the need for robust governance and multi-signature safeguards. The TrustedVolumes incident serves as a reminder that even well-audited projects with established security measures remain vulnerable to evolving attack vectors. Recommendations for the DeFi Community To avoid such exploits in the future, DeFi protocols should adopt strict allowlists and invariant checks for all swaps and proxy pathways, treating resolver/operator flows as high-risk surfaces. There should be continuous on-chain monitoring, emergency kill-switch mechanisms, and regular audits are essential to detect and respond to anomalies promptly. Additionally, isolating custom components behind robust access controls can prevent unauthorized interactions, as highlighted by the TrustedVolumes vulnerabilities. As AI-driven attacks become more sophisticated, collaboration between security firms and AI developers is crucial to develop proactive defenses. The DeFi ecosystem must prioritize transparency, resilience, and rapid response to maintain trust and make sure there is sustainable growth. With the KelpDAO and Drift Protocols under increased scrutiny, the lessons from incidents like TrustedVolumes could shape a more secure future for decentralized finance. Also Read: Bitcoin Surges Past $81K While Altcoins Hint at a Comeback

7 May 2026, 08:30

Using XRP Ledger, Mastercard, Ripple, JPMorgan, Ondo Finance Just Tested a Landmark Transaction

Mastercard confirmed a new institutional milestone through a post on its official X account. The company revealed a coordinated transaction involving Ondo Finance, JPMorgan’s Kinexys platform, and Ripple. The event links a public blockchain with traditional interbank settlement systems in a single integrated workflow. The transaction used tokenized U.S. Treasury assets and moved them through both blockchain infrastructure and established banking rails. It brought together digital asset and fiat settlement in a synchronized structure designed for institutional use. Ripple also responded to the development. The company described the event as a step toward continuous financial operations and highlighted XRP Ledger’s role in supporting institutional cross-border settlement. This is a meaningful step toward 24/7 global financial markets. By combining the XRP Ledger with global banking infrastructure, this pilot shows how institutions can execute cross-border transactions in a single integrated flow. https://t.co/H2mjgDSzvY — Ripple (@Ripple) May 6, 2026 How the Transaction Worked The transaction connected tokenized real-world assets with banking settlement systems. Ondo Finance provided tokenized U.S. Treasury exposure. Ripple facilitated the movement of value on the XRP Ledger . JPMorgan’s Kinexys platform handled institutional settlement components, while Mastercard supported payment network coordination through its Multi-Token Network. This structure allowed asset movement on a public blockchain while banking systems processed fiat settlement in parallel. The design created a unified settlement flow across different financial infrastructures rather than separate, isolated processes. Significance of XRP Ledger Usage XRP played a crucial role here, as the ledger functioned as part of a broader institutional settlement process that includes regulated financial institutions and traditional payment networks. The pilot demonstrates how blockchain infrastructure can operate alongside banking systems in real-time settlement conditions. The XRP Ledger powered the execution layer for digital asset transfer while banking systems processed fiat settlement. This structure increases visibility of blockchain-based settlement in institutional finance. Mastercard, JPMorgan, Ripple, and Ondo Finance continue to build shared infrastructure pathways that connect blockchain systems with global banking rails. This collaboration shows ongoing efforts to unify digital asset settlement and traditional financial settlement and build the foundation for a 24/7 global market. We are on X, follow us to connect with us :- @TimesTabloid1 — TimesTabloid (@TimesTabloid1) June 15, 2025 Next Phase of Institutional Testing This transaction represents an early-stage institutional pilot rather than a fully scaled deployment. The participating organizations continue to test how blockchain systems integrate with banking infrastructure at higher levels of complexity. Future development will likely focus on increasing transaction volume, expanding asset classes beyond U.S. Treasuries, and improving the underlying link between traditional systems and the blockchain network with XRP as the bridge . Disclaimer : This content is meant to inform and should not be considered financial advice. The views expressed in this article may include the author’s personal opinions and do not represent Times Tabloid’s opinion. Readers are advised to conduct thorough research before making any investment decisions. Any action taken by the reader is strictly at their own risk. Times Tabloid is not responsible for any financial losses. Follow us on X , Facebook , Telegram , and Google News The post Using XRP Ledger, Mastercard, Ripple, JPMorgan, Ondo Finance Just Tested a Landmark Transaction appeared first on Times Tabloid .

7 May 2026, 08:25

Aptos Invests $50 Million to Build AI-Powered Financial Infrastructure

BitcoinWorld Aptos Invests $50 Million to Build AI-Powered Financial Infrastructure Aptos, the blockchain platform known for its high-speed and scalable network, is committing $50 million to expand its artificial intelligence-based financial infrastructure. The investment, reported by Yonhap News, will be led jointly by the Aptos Foundation and Aptos Labs, signaling a strategic push to bridge decentralized technology with traditional finance. A Strategic Move Toward Financial Integration The Aptos Foundation and Aptos Labs plan to develop a proprietary financial platform designed for enhanced compatibility with existing financial systems. This initiative goes beyond mere blockchain development; it aims to create a seamless interface where AI-driven tools can manage, analyze, and optimize financial operations within a regulated environment. The investment also covers ongoing technology research and potential stakes in AI and financial technology companies. Why This Matters for the Broader Market This move positions Aptos as a serious contender in the race to modernize financial infrastructure. By combining AI with blockchain, the project could address long-standing issues in traditional finance, such as settlement times, fraud detection, and operational efficiency. The $50 million commitment reflects a growing trend where blockchain firms are not just competing with traditional finance but actively seeking to integrate with it. Potential Impact on Investors and Developers For developers, this investment signals a clear direction for building on Aptos: expect more AI-powered tools and APIs. For investors, it suggests a long-term roadmap focused on real-world utility rather than speculative growth. The emphasis on compatibility with existing systems may also reduce friction for institutional adoption. Conclusion Aptos’ $50 million investment in AI-based financial infrastructure is a calculated step toward merging decentralized technology with mainstream finance. By prioritizing compatibility and AI integration, the Aptos Foundation and Aptos Labs are betting on a future where blockchain and traditional systems operate in concert. The coming months will reveal which companies and technologies become part of this ambitious expansion. FAQs Q1: What is the primary goal of Aptos’ $50 million investment? The primary goal is to develop an AI-driven financial platform that is compatible with existing financial systems, while also investing in related technology research and AI/fintech companies. Q2: Which organizations are leading this initiative? The initiative is led by the Aptos Foundation and Aptos Labs, the two main entities behind the Aptos blockchain ecosystem. Q3: How does this investment affect the broader blockchain and AI sectors? It signals a convergence of AI and blockchain technology aimed at practical financial applications, potentially accelerating institutional adoption and setting a precedent for similar integrations by other blockchain platforms. This post Aptos Invests $50 Million to Build AI-Powered Financial Infrastructure first appeared on BitcoinWorld .

7 May 2026, 08:15

Durov Claims TON Network Processes Transactions 6,000 Times Faster Than Bitcoin

BitcoinWorld Durov Claims TON Network Processes Transactions 6,000 Times Faster Than Bitcoin Telegram founder Pavel Durov has made a bold claim regarding the TON (Telegram Open Network) blockchain, stating that its transaction processing speed is approximately 6,000 times faster than Bitcoin’s. The statement, reported by BeInCrypto, is based on performance metrics following the network’s recent Catchain 2.0 upgrade. Speed Comparison: TON vs. Bitcoin and Ethereum According to Durov, the TON network achieves transaction finality in approximately 0.6 seconds. In comparison, Bitcoin transactions can take roughly one hour to finalize, while Ethereum requires about 13 minutes. These figures highlight a significant disparity in network efficiency, particularly for use cases requiring rapid settlement. The performance improvement is attributed to the Catchain 2.0 upgrade, which reportedly reduced block creation time on the TON network to around 400 milliseconds. This upgrade is part of ongoing efforts to enhance the network’s scalability and throughput, positioning TON as a high-speed alternative to older blockchain protocols. Context and Implications While Durov’s claims are attention-grabbing, it is important to contextualize them. Bitcoin’s slower transaction finality is a trade-off for its high level of security and decentralization. Similarly, Ethereum’s 13-minute finality window is a design choice that prioritizes network security. TON’s architecture, which uses a sharded multi-blockchain design, is optimized for speed and scalability, but it operates under a different set of trade-offs. These speed comparisons are not purely theoretical. For decentralized applications (dApps) and payment systems, faster finality can enable real-time transactions and improve user experience. However, the broader adoption of TON will depend on factors beyond raw speed, including network security, decentralization, and developer ecosystem maturity. What This Means for the Crypto Market The claim adds to the ongoing narrative around blockchain scalability. As layer-1 networks compete for dominance, speed has become a key differentiator. TON’s performance metrics, if independently verified, could make it a more attractive platform for high-frequency applications such as micropayments, gaming, and decentralized finance (DeFi). It is worth noting that Durov’s statements have not been independently audited, and the reported figures may reflect ideal network conditions rather than real-world performance under load. Readers should approach such claims with measured skepticism until third-party benchmarks are available. Conclusion Pavel Durov’s assertion that TON is 6,000 times faster than Bitcoin underscores the rapid evolution of blockchain technology. While the numbers are striking, they highlight the different design philosophies between older, more established networks and newer, performance-focused protocols. For now, the claim serves as a reminder that the race for blockchain scalability is far from over, and that speed alone does not determine a network’s long-term viability. FAQs Q1: How did TON achieve such high transaction speeds? The TON network uses a sharded multi-blockchain architecture combined with the Catchain 2.0 consensus upgrade, which reduces block creation time to approximately 400 milliseconds. Q2: Is TON’s speed claim independently verified? As of now, the claim is based on statements from Telegram founder Pavel Durov and has not been independently audited by third-party researchers. Q3: Does faster transaction speed mean TON is better than Bitcoin? Not necessarily. Speed is one of many factors in blockchain design. Bitcoin prioritizes security and decentralization, which inherently slows down transaction finality. TON’s architecture optimizes for speed, but it involves different trade-offs in security and network structure. This post Durov Claims TON Network Processes Transactions 6,000 Times Faster Than Bitcoin first appeared on BitcoinWorld .

7 May 2026, 08:10

SlowMist Reports $174K AI Agent Exploit on Base Chain Highlights Trust Model Flaws

BitcoinWorld SlowMist Reports $174K AI Agent Exploit on Base Chain Highlights Trust Model Flaws Blockchain security firm SlowMist has uncovered an on-chain asset theft on the Base network, resulting in the loss of three billion DRB tokens valued at approximately $174,570. The incident, detailed in a recent Medium blog post, exposes critical vulnerabilities in the trust model between artificial intelligence agents and automated trading systems. How the Exploit Unfolded According to SlowMist’s investigation, the attacker manipulated the AI model Grok on X (formerly Twitter) by inputting a command encoded in Morse code. An automated trading agent named Bankr, designed to execute Grok’s natural language outputs, interpreted the prompt as a legitimate transfer instruction and withdrew the DRB tokens from the Base chain. The so-called ‘Grok Wallet’ used in the exploit was not owned by xAI but was a custodial wallet automatically generated by Bankr for trading operations. Core Vulnerability: Direct Mapping of AI Outputs SlowMist pinpointed the root cause: Bankr directly mapped Grok’s natural language output into an executable transfer command without sufficient verification of the user’s identity or intent. Additionally, high-risk permissions were granted simply by activating a membership feature. The firm emphasized that Grok itself does not hold private keys and was not the direct executor of the on-chain transaction; rather, it was exploited as a tool to trigger the transfer. Implications for AI and Blockchain Integration This incident underscores the growing risks as AI agents increasingly interact with blockchain protocols. The lack of robust verification layers between AI outputs and financial actions creates a new attack surface. Security experts warn that similar exploits could become more common unless platforms implement stricter permission controls, multi-factor authentication, and intent verification mechanisms. Funds Recovery and Bug Bounty Following negotiations between the hacker and the victim, approximately 80–88% of the stolen funds were returned in USDC and ETH. The remaining portion was treated as an unofficial bug bounty, a common practice in the crypto space to encourage responsible disclosure. SlowMist did not disclose the identity of the victim or the hacker. Conclusion The SlowMist report serves as a critical case study for the cryptocurrency and AI industries. As automated trading agents become more sophisticated, the trust model between AI outputs and financial execution must be redesigned with security as a foundational principle. Without such safeguards, the convergence of AI and blockchain could lead to further costly exploits. FAQs Q1: What was the total value stolen in the Base chain exploit? The attacker stole three billion DRB tokens, valued at approximately $174,570 at the time of the incident. Q2: How did the hacker manipulate the AI agent? The hacker input a command in Morse code to Grok on X, which the Bankr trading agent misinterpreted as a legitimate transfer instruction, leading to the unauthorized withdrawal. Q3: Was the Grok wallet owned by xAI? No. The wallet was a custodial wallet automatically generated by Bankr for trading, not owned or controlled by xAI. This post SlowMist Reports $174K AI Agent Exploit on Base Chain Highlights Trust Model Flaws first appeared on BitcoinWorld .