The April 18, 2026 exploit of KelpDAO’s rsETH bridge exposed a familiar weakness in crypto systems: the failure point was not core cryptography, but the chain of authority around who could sign, what data they relied on, and how those checks were configured. According to LayerZero’s incident report, attackers used social engineering to obtain a developer session key, poisoned an internal RPC used by LayerZero Labs’ DVN, and suppressed external RPC endpoints with a denial-of-service attack, leading the signing service to certify forged messages. KelpDAO had also shifted its validation path from 2-of-2 to 1-of-1 DVN, removing an independent cross-check. CrowdStrike and Mandiant attributed the attack with high confidence to the North Korea-linked TraderTraitor group, also tracked as UNC4899. The article argues that this matters even more as AI agents gain onchain execution power through smart accounts, strategy wallets, and limited signing services. A valid signature can show that an authorized path was invoked, but not that the input data was sound, the decision matched policy, or the trade should have happened at that moment. It reviews the limits of oracles, dispute resolution, multisig bridges, MPC custody, and TEE-based systems, then examines DeepSafe’s CRVA design, which combines hidden committee selection, Ring-VRF, threshold MPC, and TEE. The model aims to reduce validator exposure and signing concentration, but it does not automatically determine whether the result being verified is actually correct.

ChainFeeds Research’s PRO issue #153 pulls together a broad set of Bitcoin and Ethereum research updates, led by three themes: a more granular circuit breaker design for Gloas builder markets, a discussion of proprietary AMMs on Ethereum, and a proposal to eliminate part of oracle extractable value through synchronized state transitions. Ethereum researcher Potuz argues that failures in payload delivery should not automatically force validators into self-building, and instead proposes a layered fallback system based on builder trust. Ethereum Foundation researchers Mike Neuder and Maryam Bahrani describe PropAMM as a middle ground between traditional AMMs and RFQ systems, preserving onchain execution while letting professional market makers update pricing parameters more actively. Oraclizer CPTO Jay Kim, meanwhile, frames OEV as a structural timing problem and outlines a model where updates and downstream consequences are bound into a single cross-domain atomic transition. The report also covers a Coldcard hardware signer warning tied to weak seed entropy, two denial-of-service bugs in Core Lightning, a zkPoH concept for proving ownership of at least 1 BTC without exposing specific UTXOs, native randomness sourcing for onchain games, selected items from The MEV Letter #148, and a phishing paper that says transaction simulation itself can become an attack surface.

Fake World Assets, or FWA, is a new Ethereum mainnet project built by TokenWorks that packages NFTs, ETH backing, random draws and token incentives into a single on-chain system. Instead of listing an idle NFT on a marketplace and waiting, users can deposit a whitelisted NFT together with ETH to form a position inside a pool. Buyers then pay one dynamically calculated acquisition price for a random draw. The design hinges on a few moving parts. A depositor’s ETH backing acts as principal, determines how likely that NFT is to be drawn, and also serves as a standing buyback quote if the purchaser decides not to keep the NFT. If the buyer rejects the item, they can return it and receive 85% of the backing in ETH or in FWA tokens. Chainlink VRF is used for randomness, while the position with the highest backing receives a “Crown” and an extra share of fees. PANews’ breakdown also highlights the token model behind FWA. Half of the FWA supply is allocated to a Uniswap v4 FWA/ETH pool, 30% is emitted over 15 days to depositors and purchasers, and 20% is reserved for a v1 snapshot airdrop. The project also restricts early access to token acquisition through protocol participation, while keeping selling open. In practice, the system is trying to test whether NFT liquidity, game mechanics and token demand can be tied together inside one market structure.

Ethereum NFT gacha protocol Fake World Assets briefly moved ahead of Solana-based Collector Crypt in daily revenue after its July 20 relaunch, according to DefiLlama data cited by The Defiant. The protocol, built by the two-person team Token Works, posted $447,604 in revenue on July 25, its highest day so far, while total fees reached $1.6 million that day. Over the first four days after relaunch, it processed roughly 2,000 ETH in volume across about 90,000 transactions, including around 35,000 individual pulls. The lead did not last. In the most recent 24-hour window referenced in the report, Collector Crypt returned to the top with $270,186 in revenue, versus $167,869 for Fake World Assets. Even so, Fake World Assets remained the second-highest revenue-generating protocol on Ethereum, behind Sky at $464,303 and ahead of Aave, Uniswap, Lido, and even the amount of ETH burned by the network over the same period. The report also outlined the protocol’s mechanics, including ETH-backed NFT deposits, randomized pulls using Chainlink VRF, an 85% buyback option, and a 15-day token emission schedule for purchasers and depositors. It contrasted that early traction with Collector Crypt’s much larger June figures, including more than $209 million spent on packs and over $50 million in cumulative revenue by mid-June.

Beldex says BDX can now be spent across more than 50 million merchants through AEON Pay, while Alchemy Pay opens fiat purchase access in over 170 countries.

Chainlink is a decentralized oracle network linking smart contracts to off-chain data. It solves the oracle problem through multiple independent nodes, supporting DeFi, NFTs, and enterprise applications with services like Data Feeds, VRF, CCIP, and Proof-of-Reserve.

CityCoins runs on Stacks and lets communities launch tokens tied to cities. Miners spend STX, with 30% routed to city wallets and 70% going to stackers. MiamiCoin and NYCCoin are the best-known examples.

TRON’s weekly crypto market report for July 6 to July 12, 2026, said the market spent the week in a repair phase after an early sell-off tied to Strategy’s disclosure that it had sold about 3,588 BTC, worth roughly $216 million. Bitcoin briefly fell to around $61,300, then recovered as spot ETF inflows returned, reaching $63,163 on July 7 before settling near $63,600 by July 12. Ether held a comparatively narrow $1,760-$1,800 range and was last cited near $1,790. The report said macro pricing remained centered on U.S. Federal Reserve expectations and the pace of Europe’s economic recovery. It highlighted the coming U.S. CPI, PPI, retail sales, Beige Book and Federal Reserve Chair Kevin Warsh’s first congressional testimony as the next major drivers for global risk assets. TRON also pointed to sector activity in institutional infrastructure, AI, real-world assets and stablecoin yield. It reviewed funding rounds including Elliptic’s $125 million strategic raise, KOR Protocol’s $7.5 million Series A, and Mercado Bitcoin’s $20 million strategic investment. In project coverage, the report broke down Jia, a decentralized lending network focused on emerging-market MSMEs, and Manadia, a Web3 infrastructure platform combining AI collaboration, privacy computing, verifiable data settlement and long-term state-based eligibility proofs.