Connect with us

Crypto

Crypto Users Targeted in ‘Elaborate’ Scam Using Popular Notes App

Published

on

Crypto users are being warned about a sophisticated new scam that leverages a popular note-taking app to spread malware capable of taking over victims’ devices.

According to a report from Elastic Security Labs, the campaign uses advanced social engineering tactics across platforms like LinkedIn and Telegram to trick individuals working in crypto and finance into unknowingly installing malicious software.

Scam Uses Obsidian Plugins as Entry Point

The attack centers around Obsidian, a widely used note-taking app that supports community-built plugins. Threat actors exploit this feature to execute malicious code without raising suspicion.

Elastic researchers found that attackers share access to a cloud-hosted “vault” within Obsidian. Once the victim opens it, they are instructed to enable community plugin syncing. This step triggers the malware, which runs silently in the background.

The method works across both Windows and macOS devices, making it a broad threat to users regardless of operating system.

Social Engineering Tactics Build Trust

The scam begins with attackers posing as representatives of a venture capital firm on LinkedIn. After establishing initial contact, they move conversations to Telegram, where they discuss crypto-related services such as liquidity solutions to appear credible.

Victims are then invited to access what is presented as the firm’s internal dashboard using Obsidian. They are provided login credentials to a shared vault, which ultimately becomes the entry point for the attack.

Elastic described this vault as the “initial access vector,” noting that the entire process is designed to appear legitimate and business-oriented.

PHANTOMPULSE Malware Enables Full Device Control

Once activated, the attack deploys a previously undocumented remote access trojan (RAT) dubbed “PHANTOMPULSE.”

Disguised as legitimate software, the malware gives attackers extensive control over the infected device. It is built for stealth and persistence, allowing operators to monitor activity, execute commands, and maintain long-term access.

One of the more advanced aspects of the malware is its use of blockchain-based infrastructure. PHANTOMPULSE relies on onchain transaction data across multiple blockchain networks to receive instructions, avoiding dependence on traditional centralized servers.

This decentralized command-and-control system ensures the malware remains operational even if parts of its infrastructure are disrupted.

Crypto Users Remain Prime Targets

The campaign highlights the continued focus on crypto users, who remain attractive targets due to the irreversible nature of blockchain transactions.

According to Chainalysis, around $713 million was stolen from individual crypto wallets in 2025 alone.

Elastic noted that attackers are increasingly creative in how they gain initial access. By abusing legitimate tools like Obsidian, they are able to bypass traditional security defenses and execute malicious code through intended app functionality.

Security Measures and Industry Implications

The researchers said they were able to block the attack, but warned that similar tactics could be used in future campaigns.

They emphasized that both individuals and organizations, especially in the crypto and financial sectors, need to be cautious when interacting with unfamiliar tools or shared resources.

Companies are advised to implement stricter controls around third-party plugins and remain vigilant, as even trusted productivity software can be turned into a gateway for cyberattacks.

Blockchain

ChainOpera AI (COAI) Builds Product Momentum as Usage and Valuation Gap Widens

Published

on

ChainOpera AI is one of the more unusual stories in the decentralized AI space right now — a project with real, measurable traction that the market hasn’t fully priced in. COAI is currently trading around $0.36 with a 24-hour volume of $119 million, powering a decentralized AI stack that spans an agent super-app, a developer platform, a model and GPU layer, and an AI-native blockchain protocol. The numbers at the token level look modest. The numbers at the product level tell a different story.

A Platform With Genuine Adoption Behind It

At the time of its official platform launch in June 2025, ChainOpera’s AI Terminal had already surpassed one million daily active users and 150,000 paid users, with more than 1,000 AI agents submitted by community developers. Since then, the developer ecosystem has continued to expand.

The Agent Developer Platform has surpassed 100,000 developers creating and monetizing AI agents, a figure that is considerably higher than comparable projects in the same infrastructure category. That user base isn’t theoretical — it represents a functioning creator economy built around community-developed AI agents, with real revenue flowing through the BNB Chain ecosystem.

ChainOpera has also been actively expanding its AI Terminal with new agents for trading, market insight, and financial advice, and integrated Lit Protocol’s “Vincent” for non-custodial autonomous trading agents. The AI Trading Arena launched in May 2026 adds another functional layer to a platform that is clearly building toward a comprehensive AI agent marketplace rather than a single-use application.

The Foundation Has Been Buying

One signal that stands out from the noise is the behavior of the ChainOpera AI Foundation itself. The Foundation repurchased over 15 million COAI tokens for its strategic reserve — a move that drew attention from market observers as a signal of internal confidence in the ecosystem’s direction. Foundations that buy their own tokens in the open market are putting their treasury behind the thesis that the token is undervalued relative to what the platform is building.

On the derivatives side, futures open interest surged 77% in April 2026, signaling intense speculative interest and elevated leverage in the market. That kind of derivatives activity cuts both ways — it reflects genuine trader conviction but also raises the risk of a sharp deleveraging event if sentiment shifts.

The Valuation-to-Usage Disconnect

Trading at current levels, COAI carries a market cap of around $50 million with a fully diluted valuation near $264 million — a relatively modest figure for a project with user metrics that comparable AI-crypto projects with smaller adoption bases have been valued far higher for. That gap is either an opportunity or a warning sign, depending on what you believe comes next.

The supply structure is the variable most worth watching. Only around 18.8% of tokens were circulating at launch, and major unlocks for core team, advisors, and early backers are set to begin linearly after a one-year lockup — starting around late 2026. If platform adoption continues growing at its current pace and demand absorbs that incoming supply, the valuation gap could narrow considerably. If it doesn’t, the unlock pressure could weigh on price through the remainder of the year.

The system’s Proof-of-Intelligence mechanism verifies and accounts for contributions across compute, models, data, and agents — with COAI used for service access, resource coordination, contribution accounting, and governance, all sitting within a roadmap toward a fully AI-focused Layer-1 chain. The infrastructure is there. What ChainOpera needs now is for the market to catch up to what the platform has already built.

Continue Reading

Crypto

Hyperliquid (HYPE) Spot ETFs Surpass $161M in Net Inflows During First Month of Trading

Published

on

Hyperliquid’s native token has found a way into U.S. institutional portfolios — just not through the front door. With Hyperliquid blocking direct platform access from U.S. IP addresses, a trio of newly launched spot ETFs has become the only compliant route for American investors to gain exposure to HYPE. In their first month of trading, those products pulled in $161 million in net inflows. That’s a meaningful number for any ETF debut, let alone one tracking a DeFi-native token that most traditional investors had never heard of twelve months ago.

Three Products, One Consistent Trend

Bitwise, Volatility Shares, and Canary Capital each brought a HYPE spot ETF to market, and all three recorded net inflows on nearly every trading day since launch. The one notable exception was a $29 million single-day outflow from Bitwise’s BHYP fund — an event that briefly drew attention but was quickly assessed by analysts as an isolated event rather than a signal of shifting sentiment. The broader trend of steady accumulation continued without interruption on either side of it.

The regulatory gap that makes these products necessary is also what makes them commercially attractive. Institutional and accredited investors who want HYPE exposure have exactly one compliant option. That captive demand dynamic has likely contributed to the consistency of inflows.

Why HYPE Behaves More Like Exchange Equity Than a Typical Token

The structural logic behind HYPE is what separates it from most crypto assets. Hyperliquid’s futures platform processed $240.5 billion in trading volume over the past 30 days, generating annualized fee revenue exceeding $1 billion. The platform directs 99% of that fee revenue toward HYPE buybacks — a mechanism that creates persistent buy pressure tied directly to platform activity.

For yield-seeking investors, that structure is legible in a way most crypto tokens aren’t. Holding HYPE is functionally similar to holding an equity stake in a high-volume exchange, where trading activity flows directly back to token holders through price appreciation rather than dividends. That framing resonates with institutional allocators who need a coherent investment thesis, not just a price chart.

The Concentration Risk That Can’t Be Ignored

The same mechanism that makes HYPE attractive also embeds a specific vulnerability. If Hyperliquid’s monthly futures volume were to fall below $150 billion — a roughly 38% decline from current levels — the reduction in buyback activity could trigger a meaningful price correction. A single revenue source driving the entire valuation model means any sustained drop in trading volume, whether from competition, regulation, or a broader crypto downturn, would hit HYPE disproportionately hard compared to tokens with more diversified income streams.

That’s not an imminent scenario given current volume trends, but it’s a structural risk that investors in these ETFs should hold clearly in mind.

What This Means for the Broader ETF Landscape

The performance of HYPE ETFs in their first month carries implications beyond Hyperliquid itself. Bitcoin and Ethereum ETFs track established layer-1 assets. These products do something different — they package exposure to a specific exchange’s fee-sharing mechanism inside a regulated wrapper. The SEC hasn’t issued formal guidance on how to classify such products, leaving issuers operating under existing commodity-based ETF frameworks for now.

If the HYPE ETFs continue to accumulate assets, they provide a proof of concept that DeFi-linked tokens with clear revenue mechanics can attract institutional capital at scale. That outcome would almost certainly encourage similar filings for tokens from other high-volume DeFi platforms — a development that could meaningfully expand the crypto ETF landscape well beyond its current boundaries.

The first month is one data point. The next few quarters will tell the more interesting story.

Continue Reading

Crypto

Zcash: Anthropic’s Claude Mythos Detects No Major Flaw After Requested Audit

Published

on

For a few tense days, Zcash faced the kind of uncertainty that rattles even seasoned crypto holders. A serious vulnerability had been uncovered in its privacy infrastructure, triggering an emergency response from developers and raising uncomfortable questions about the protocol’s integrity. The mood has since shifted considerably — and for good reason.

An audit requested by Shielded Labs and conducted by Claude Mythos, Anthropic’s AI model specialized in identifying complex software vulnerabilities, found no additional major flaws in the Zcash protocol. For a privacy-focused network where trust is the entire value proposition, that outcome matters enormously.

How the Vulnerability Was Found

The story starts with independent researcher Taylor Hornby, who — with the assistance of Claude Opus 4.8 — identified a critical flaw in Zcash’s Orchard private pool. The vulnerability had been sitting dormant for roughly four years before being discovered. Its potential consequences were severe: if exploited, it could have allowed an attacker to mint an unlimited quantity of counterfeit ZEC within the Orchard pool, entirely undetected.

Zcash founder Zooko Wilcox didn’t downplay the severity. He confirmed publicly that the flaw represented a genuine threat to the protocol’s monetary integrity, while also noting — critically — that no exploitation had been detected on the main network. No ZEC was illegally created, and user privacy remained intact throughout. Developers moved quickly, temporarily suspending Orchard transactions before deploying a corrective patch.

The AI Audit That Followed

Once the patch was applied, Shielded Labs commissioned a comprehensive follow-up audit — less emergency surgery, more thorough post-operative review. Claude Mythos was the tool of choice. The result: no other serious vulnerabilities identified in the Zcash protocol.

Wilcox acknowledged Anthropic’s contribution publicly, thanking the team for its role in protecting network security. He also confirmed that security reinforcement work was continuing methodically, without any rushed decisions that might introduce new risks.

The scope of what Mythos is capable of is itself worth noting. Anthropic has indicated the model has identified more than 10,000 critical vulnerabilities across software considered strategically important to global digital infrastructure — a number that speaks to both the power of AI-assisted code review and the sheer scale of vulnerabilities quietly embedded in widely used systems.

The Double-Edged Sword AI Represents for Crypto Security

The Zcash episode arrives in the middle of a much larger conversation about what AI means for cybersecurity in crypto. The same capabilities that allowed Claude Opus 4.8 to help discover this flaw — and Claude Mythos to verify the protocol afterward — are equally available to malicious actors looking to find exploitable weaknesses before defenders do.

Mitchell Amador, CEO of Immunefi, has described the proliferation of advanced AI models as shifting the cybersecurity playing field toward attackers, warning of a “vulnerability apocalypse” that is driving a resurgence of DeFi hacks. The data gives that warning real weight. According to DefiLlama, crypto hacks reached $634 million in April alone — the worst single month recorded since the Bybit attack in February 2025.

For Zcash specifically, the outcome of this audit is a meaningful positive. The vulnerability was found, patched, and independently verified before any damage occurred. That’s the best-case scenario for a privacy protocol facing this kind of discovery. Whether the broader industry can keep pace with AI-assisted attackers using the same tools in the opposite direction is a question that has no clean answer yet.

Continue Reading

Trending