Month: March 2025

Ethereum-based DeFi protocol SIR.trading, also known as Synthetics Implemented Right, has been hacked, resulting in the loss of its entire total value locked (TVL) — $355,000 at the time of the attack. 

The March 30 hack was initially detected by blockchain security firms TenArmorAlert and Decurity, both of which posted warnings on X to alert users of the protocol.

The protocol’s founder, known only as Xatarrer, described the hack as “the worst news a protocol could received [sic],” but suggested the team intends to try to keep the protocol going despite the setback.

“Clever attack” targeted contract vault

Decurity described the hack as a “clever attack” that targeted a callback function used in the protocol’s “vulnerable contract Vault” which leverages Ethereum’s transient storage feature. 

According to Decurity, the attacker was able to replace the real Uniswap pool address used in this callback function with an address under the hacker’s control, allowing them to redirect the funds in the vault to their address. TenArmorAlert further explained that by repeatedly calling this callback function, the attacker was able to fully drain the protocol’s TVL.

SupLabsYi, from blockchain security firm Supremacy, went into more detail on the attack in an X post, stating it may demonstrate a security flaw in Ethereum’s transient storage. 

Transient storage was added to Ethereum with last year’s Dencun upgrade. The new feature allows for temporary storage of data leading to lower gas fees than regular storage.  

According to SupLabsYi, it’s still a “nascent feature,” and the attack may be one of the first to exploit its vulnerabilities.

“This isn’t merely a threat aimed at a single instance of uniswapV3SwapCallback,” SupLabsYi said.

TenArmorSecurity said the stolen funds have now been deposited into an address funded through the Ethereum privacy solution Railgun. Xatarrer has since reached out to Railgun for assistance. 

Related: DeFi hacks drop 40% in 2024, CeFi breaches surge to $694M — Hacken

SIR.trading’s documentation shows that it was billed as “a new DeFi protocol for safer leverage.” The stated purpose of the protocol was to address some of the challenges of leveraged trading, “such as volatility decay and liquidation risks, making it safer for long-term investing.”

While it aimed for safer leveraged trading, the protocol’s documentation did warn users that despite being audited, its smart contracts could still contain bugs that could lead to financial losses — highlighting the platform’s vaults as a particular area of vulnerability.

“Undiscovered bugs or exploits in SIR’s smart contracts could lead to fund losses. These might stem from complex logic in vault mechanics or leverage calculations that audits failed to catch, exposing users to rare but critical failures,” the project’s documentation states.

Magazine: What are native rollups? Full guide to Ethereum’s latest innovation

Bitcoin miner MARA Holdings Inc (MARA) is looking to sell up to $2 billion in stock to buy more Bitcoin as part of a plan that bears a resemblance to Michael Saylor’s Strategy.

MARA Holdings, formerly Marathon Digital, said in a March 28 Form 8-K and prospectus filed with the Securities and Exchange Commission that it entered into an at-the-market agreement with investment giants, including Cantor Fitzgerald and Barclays, for them to sell up to $2 billion worth of its stock “from time to time.”

“We currently intend to use the net proceeds from this offering for general corporate purposes, including the acquisition of bitcoin and for working capital,” MARA added.

MARA’s move copies a tactic made famous by Bitcoin (BTC) bull Saylor, the executive chair of the largest corporate Bitcoin holder Strategy, formerly MicroStrategy, which has used a variety of market offerings, including stock sales, to amass 506,137 BTC worth $42.4 billion.

MARA Holdings falls just behind Strategy with the second largest holdings by a public company, with 46,374 BTC worth around $3.9 billion in its coffers, according to Bitbo data.

In July, the company’s CEO, Fred Thiel, said it was going “full HODL” and wouldn’t sell any of the Bitcoin it mined to fund its operations, as is typical for crypto miners, and would purchase more of the cryptocurrency to keep in reserve.

Related: Crusoe to sell Bitcoin mining business to NYDIG to focus on AI 

The Bitcoin (BTC) miner’s planned stock sale follows a similar offering it made early last year that offered up to $1.5 billion worth of its shares. It also issued $1 billion of zero-coupon convertible senior notes in November with plans to use most of the proceeds to buy Bitcoin.

Google Finance shows that MARA closed the March 28 trading day down 8.58% at $12.47, following on from crypto mining stocks being rattled a day earlier with reports that Microsoft abandoned plans to invest in new data centers in the US and Europe.

MARA shares have fallen another 4.6% to $11.89 in overnight trading on March 30, according to Robinhood.

Bitcoin is trading just above $82,000, down 1.2% over the past 24 hours after falling from a local high of around $83,500, according to CoinGecko.

Magazine: Bitcoin vs. the quantum computer threat — Timeline and solutions (2025–2035) 

Cybersecurity firm Threat Fabric says it has found a new family of mobile-device malware that can launch a fake overlay for certain apps to trick Android users into providing their crypto seed phrases as it takes over the device.

Threat Fabric analysts said in a March 28 report that the Crocodilus malware uses a screen overlay warning users to back up their crypto wallet key by a specific deadline or risk losing access.

“Once a victim provides a password from the application, the overlay will display a message: Back up your wallet key in the settings within 12 hours. Otherwise, the app will be reset, and you may lose access to your wallet,” Threat Fabric said. 

“This social engineering trick guides the victim to navigate to their seed phrase wallet key, allowing Crocodilus to harvest the text using its accessibility logger.” 

Once the threat actors have the seed phrase, they can seize complete control of the wallet and “drain it completely.” 

Threat Fabric says despite it being a new malware, Crocodilus has all the features of modern banking malware, with overlay attacks, advanced data harvesting through screen capture of sensitive information such as passwords and remote access to take control of the infected device. 

Initial infection occurs by inadvertently downloading the malware in other software that bypasses Android 13 and security protections, according to Threat Fabric. 

Once installed, Crocodilus requests accessibility service to be enabled, which enables the hackers to gain access to the device. 

“Once granted, the malware connects to the command-and-control (C2) server to receive instructions, including the list of target applications and the overlays to be used,” Threat Fabric said. 

It runs continuously, monitoring app launches and displaying overlays to intercept credentials. When a targeted banking or cryptocurrency app is opened, the fake overlay launches over the top and mutes the sound while the hackers take control of the device.  

“With stolen PII and credentials, threat actors can take full control of a victim’s device using built-in remote access, completing fraudulent transactions without detection,” Threat Fabric said. 

Threat Fabrix’s Mobile Threat Intelligence team has found the malware targets users in Turkey and Spain but said the scope of use will likely broaden over time. 

Related: Beware of ‘cracked’ TradingView — it’s a crypto-stealing trojan

They also speculate the developers could speak Turkish, based on the notes in the code, and added that a threat actor known as Sybra or another hacker testing out new software could be behind the malware. 

“The emergence of the Crocodilus mobile banking Trojan marks a significant escalation in the sophistication and threat level posed by modern malware.” 

“With its advanced Device-Takeover capabilities, remote control features, and the deployment of black overlay attacks from its earliest iterations, Crocodilus demonstrates a level of maturity uncommon in newly discovered threats,” Threat Fabric added. 

Magazine: Ridiculous ‘Chinese Mint’ crypto scam, Japan dives into stablecoins: Asia Express

When a cryptocurrency exchange lists its first altcoin, it sets itself up for an endless cycle of launching memecoins, warns a Bitcoin-only institution executive.

“The minute an exchange adds one non-Bitcoin token, they are signing up to be on the forever hamster wheel of memecoins,” River Financial CEO Alex Leishman said in a March 29 X post. “It makes no sense to list ETH if you don’t list the tokens issued on ETH, and the same goes for Solana,” Leishman said.

River has no interest in building a “successful crypto casino”

Leishman said while there are many “successful crypto casinos,” he has no interest in building one. River Financial is a Bitcoin-only financial institution focusing on buying and selling Bitcoin (BTC).  Several companies have opted for the Bitcoin-only approach, including Swan Bitcoin, Bull Bitcoin, and decentralized exchange Bisq.

Leishman claimed that multi-asset trading platforms prioritize short-term speculation over wealth accumulation:

“The casino business model is built around maximal extraction from customers, and the Bitcoin-only model is focused on helping people build long-term wealth.” 

Critics have voiced this point before, even during the memecoin uptrend in early 2024. In April 2024, A16z chief technology officer Eddy Lazzarin said that memecoins hamper the long-term vision of crypto that has kept so many of the original builders in the space.

“At best, it looks like a risky casino,” Lazzarin said.

The overall memecoin market cap has taken a significant downturn since the beginning of 2025. Since Jan. 1, the memecoin market cap has slumped almost 49% to $48.49 billion at the time of publication, according to CoinMarketCap data.

However, while altcoins have historically been more volatile than Bitcoin, offering them alongside Bitcoin has been a lucrative move for crypto exchanges and brokers. 

Related: Waiting for altcoin season? Data suggests it’s already here

On Feb. 12, Robinhood, which offers several cryptocurrencies to its customers, reported a 700% year-over-year surge in Q4 2024 cryptocurrency revenue.

Some traders seem to interpret a memecoin listing on an exchange as validation of its credibility. Among the 15 memecoins listed by crypto exchange Binance in 2024, 12 saw significant increases in value after going live on the exchange, pseudonymous onchain analyst Ai_9684xtpa said in November.

CoinGecko founder Bobby Ong recently speculated that the memecoin market might be headed toward an “extreme case of power law,” where 99.99% fail and a few rise to the top and endure.

Magazine: Arbitrum co-founder skeptical of move to based and native rollups: Steven Goldfeder

Billionaire investor Elon Musk has sold his social media platform X to his AI startup xAI, sparking controversy as it coincides with a US judge rejecting his bid to dismiss a lawsuit tied to the social media platform.

The transfer of ownership of X to xAI on March 28 means that the class-action lawsuit against Musk — accusing him of defrauding former Twitter shareholders by delaying the disclosure of his initial investment in the social media platform — has become “a whole lot spicer,” Cinneamhain Ventures partner Adam Cochran said in a March 28 X post.

Acquisition may open up xAI to more ‘exposure’

On the same day that Musk said “xAI has acquired X in an all-stock transaction,” a US judge reportedly rejected Musk’s attempt to dismiss the lawsuit. Cochran said it has “opened up his AI entity to exposure here too, and it’s a much bigger pie.”

Musk said the deal values xAI at $80 billion and X at $33 billion, factoring in $12 billion in debt from the $45 billion valuation. He originally bought X, formerly Twitter, for around $44 billion in April 2022.

“xAI and X’s futures are intertwined. Today, we officially take the step to combine the data, models, compute, distribution and talent,” Musk said.

“This combination will unlock immense potential by blending xAI’s advanced AI capability and expertise with X’s massive reach,” he said, adding:

“This will allow us to build a platform that doesn’t just reflect the world but actively accelerates human progress.”

However, Cochran claimed that “Musk used his pumped up xAI stock to pay multiple times over value for X, but still take an $11B loss on the transaction.” He said that Musk is “screwing over xAI investors, and X investors” and was executed to sell user data to xAI.

Related: Elon Musk’s ‘government efficiency’ team turns its sights to SEC — Report

xAI is best known for its AI chatbot “Grok” which is built into the X platform. When Musk released it in November 2023, he claimed it could outperform OpenAI’s first iteration of ChatGPT in several academic tests.

Musk explained at the time that the motivation behind building Grok is to create AI tools equipped to assist humanity by empowering research and innovation.

While Cochran said that Grok being valued at $80 billion is an “insanely dumb valuation,” crypto developer “Keef” disagrees. Keef said, “This is shady all around, but given the day, Grok is genuinely probably the top model for various tasks.”

Magazine: Arbitrum co-founder skeptical of move to based and native rollups: Steven Goldfeder

Binance co-founder Changpeng “CZ” Zhao is donating 500 BNB (BNB) each to Thailand and Myanmar following a 7.7 magnitude earthquake that caused severe damage to buildings and widespread flooding.

Zhao plans to distribute the funds through Binance and Binance Thailand if a third-party onchain donation platform cannot be found to distribute the disaster relief funds.

“I hope everyone is safe in Thailand,” the Binance founder wrote in a March 28 X post before announcing the contributions to both countries affected by the earthquake.

According to The Guardian, at least 144 people are confirmed to have died as a result of the catastrophic earthquake as first responders in both countries continue rescue efforts to free people trapped under rubble.

Related: Thailand regulator approves USDT, USDC stablecoins

Disaster strikes Myanmar and Thailand

The earthquake struck on March 28 at approximately 1:20 PM local time. The epicenter of the earthquake was approximately 10 miles from Mandalay — the second-largest city in Myanmar.

The death toll in both countries is expected to rise as relief efforts continue, with 732 individuals reportedly injured as a result of the earthquake.

Myanmar’s junta chief Min Aung Hlaing has called upon any country willing to help with the disaster relief efforts to provide any aid it can.

Crypto donations amplify aid during times of crisis

The cross-border efficiencies, low transaction costs, and near-instant settlement times of cryptocurrencies make digital assets an ideal medium for disaster relief funds.

Following a 7.8 magnitude earthquake that impacted Turkey and Syria in February 2023, philanthropist Haluk Levent began collecting crypto disaster relief donations.

The Giving Block, a company that works with nonprofit organizations to facilitate crypto donations, also used crypto to raise funds for the victims of the Maui wildfires in 2023 and managed to give over $1 million to the relief effort.

More recently, in January, The Giving Block started an emergency relief fundraiser for those impacted by the California wildfires in Los Angeles and the surrounding areas.

At the time of this writing, the organization has raised over $1 million for the California wildfire relief fund.

Magazine: Crypto is changing how humanitarian agencies deliver aid and services

Five Democratic lawmakers in the US Senate have called on leadership at regulatory agencies to consider the potential conflicts of interest from a stablecoin launched by World Liberty Financial (WLFI), the crypto firm backed by US President Donald Trump’s family.

In a March 28 letter from the US Senate Banking Committee, Massachusetts Senator Elizabeth Warren and four other Democrats asked the Federal Reserve’s committee chair on supervision and regulation, Michelle Bowman, and acting comptroller of the currency, Rodney Hood, how they intended to regulate WLFI and its stablecoin, USD1.

The letter came as members of Congress are considering legislation to regulate stablecoins through the Guiding and Establishing National Innovation for US Stablecoins, or GENIUS Act. The bill, if signed into law, would essentially allow the Office of the Comptroller of the Currency (OCC) and Federal Reserve to oversee stablecoin regulation, including for issuers like WLFI and its USD1 coin. 

Trump also signed an executive order in February attempting to have all federal agencies — purportedly including the OCC — “regularly consult with and coordinate policies and priorities” with White House officials, giving the US president unprecedented control. 

“President Trump’s involvement in this venture, as he strips financial regulators of their independence and Congress simultaneously considers stablecoin legislation, presents an extraordinary conflict of interest that could create unprecedented risks to our financial system and to the integrity of decisions made by the [Fed and OCC],” said the letter, adding: 

“The launch of a stablecoin directly tied to a sitting President who stands to benefit financially from the stablecoin’s success presents unprecedented risks to our financial system.”

Related: Trump’s USD1 stablecoin deepens concerns over conflicts of interest

Since World Liberty launched in September 2024 — months before the US election and Trump’s inauguration — many of the firm’s goals have been shrouded in secrecy. The project’s website notes that Trump and some of his family members control 60% of the company’s equity interests. 

As of March 14, World Liberty had completed two public token sales, netting the company a combined $550 million. On March 24, the project confirmed launching its first stablecoin on the BNB Chain and Ethereum. The president’s son, Donald Trump Jr., also pitched USD1 from the DC Blockchain Summit on March 26 with three of WLFI’s co-founders.

Magazine: Trump’s crypto ventures raise conflict of interest, insider trading questions

The European Union’s insurance authority has proposed a blanket rule that would mandate insurance firms to maintain capital equal to the value of their crypto holdings as part of a measure to mitigate risks for policyholders.

The new proposal — made by the European Insurance and Occupational Pensions Authority in a Technical Advice report to the European Commission on March 27 — would set a far stricter standard than other asset classes, such as stocks and real estate, which don’t even need to be half-backed.

“EIOPA considers a 100% haircut in the standard formula prudent and appropriate for these assets in view of their inherent risks and high volatility,” it said in a separate statement.

Such a measure would fill a regulatory gap between the Capital Requirements Regulation and Markets in Crypto-Assets Regulation (MiCA), EIOPA said, noting that the European Union’s regulatory framework for insurers currently lacks specific provisions on crypto assets.

EIOPA outlined four options for the European Commission to consider — one: make no changes; two: mandate an 80% “stress level” to crypto assets; and three: mandate a 100% stress level to crypto asset.

The stress level percentages determine how much capital firms need to hold to stay solvent.

The fourth option called on the European Commission to consider the risks of tokenized assets more broadly.

EIOPA said option three would be the most appropriate option.

“An 80% stress to the value of crypto-asset exposures does not appear sufficiently prudent,” whereas “a 100% stress is more appropriate and aligns with one of the approaches to the transitional treatment of crypto-assets under CRR,” EIOPA said.

The 100% stress refers to the assumption that the crypto asset prices could fall by 100% and that diversification — spreading the risk across different assets — wouldn’t not reduce this stress. EIOPA pointed out that Bitcoin (BTC) and Ether (ETH) have fallen 82% and 91%, respectively, in the past.

A 100% capital charge for crypto assets would reflect a far stricter approach compared to stocks, which range between 39% and 49%, and real estate, which incurs a 25% capital charge, according to solvency capital requirements laid out in the Commission Delegated Regulation 2015/35.

EIOPA said a 100% capital charge for crypto asset-related (re)insurance undertakings shouldn’t be “overly burdensome” and that there would be no material costs for policyholders.

“The capital requirements would fully capture the risk of crypto-asset with a positive impact on policyholder protection in case there are material exposures in the future.”

Related: Tabit offers USD insurance policies backed by Bitcoin regulatory capital

EIOPA acknowledged that the share of crypto-asset (re)insurance undertakings accounts for just 655 million euros or 0.0068% of all undertakings in Europe — even referring to it as “immaterial.”

“At the same time crypto assets are high risk investments which may result in total loss of value,” EIOPA said, explaining why it recommends option three.

Luxembourg and Sweden could be hit hardest by the proposed rule

Insurers in Luxembourg and Sweden are likely to be the most affected, according to a Q4 2023 report cited by EIOPA, which found that these two countries accounted for 69% and 21% of all crypto asset-related exposures among (re)insurance undertakings.

Ireland, Denmark and Liechtenstein also accounted for 3.4%, 1.4% and 1.2% of the undertakings. 

Most of these undertakings are structured within funds, such as exchange-traded funds, and held on behalf of unit-linked policyholders, EIOPA noted.

EIOPA, however, acknowledged that a broader adoption of crypto assets in the future may require a more “differentiated approach.”

Magazine: Crypto fans are obsessed with longevity and biohacking: Here’s why

France’s state-owned bank says it will spend 25 million euros ($27 million) buying cryptocurrencies that support local crypto and blockchain projects.

Bpifrance said in a March 27 press release that it would back newly formed projects “with a strong French footprint” where it will receive tokens in return for its investment and will look to fund decentralized finance (DeFi), staking, tokenization and artificial intelligence.

It added that the plan, supported by the French Ministry of Economy and Finance, was to “promote emerging technologies and strengthen the French blockchain ecosystem.”

The global blockchain ecosystem is “currently booming” but the number of French funds taking part is still very limited, it said.

French digital and AI minister Clara Chappaz said public and private financing was “one of the keys to the sustainable positioning of our ecosystem on the international stage.”

Bpifrance deputy CEO Arnaud Caudoux said that it was convinced of the growing importance that blockchain companies “will take on in the years to come and want to increase French competitiveness and presence in the digital assets field.”

“The US is really accelerating its own crypto strategy, so this is all the more important,” Caudoux said at a press conference, as reported by Reuters. He added that Bpifrance had started to support crypto before the US started its own pro-crypto moves.

The bank said it had backed the blockchain sector for a decade and had invested over 150 million euros ($162 million), notably helping to finance the crypto hardware wallet company Ledger in 2014.

Bpifrance said it began testing limited investments through tokens in 2022, including a deal with the DeFi lending platform Morpho to buy its token — which has grown to be the 12th largest protocol by value at $3.24 billion, according to DefiLlama.

Related: Bybit removed from French regulator’s blacklist, eyes MiCA license

Venture capitalists often take part in investments paid in tokens. PitchBook expects crypto VC deals to top $18 billion this year, a marked increase from the $13.6 billion raised in 2024.

Typically, a crypto platform that launches a token will allocate a portion of its supply to financiers subject to varying lockup periods where the tokens can’t be sold.

A portion of the token supply is usually immediately given to select public users in order to drum up liquidity, which can cause token values to slide if they cash out.

Magazine: How crypto laws are changing across the world in 2025 

ChatGPT creators OpenAI have introduced rate limits after a viral social media trend that saw nearly everything “Ghiblifyied” — turned into AI art in the style of the famous Japanese animation studio. 

OpenAI CEO Sam Altman was one of the first to take part in the trend, posting a portrait of himself generated by the model on March 25 but said in a subsequent post two days later that all image requests have started to tax the firm’s infrastructure.

“It’s super fun seeing people love images in ChatGPT but our GPUs are melting. We are going to temporarily introduce some rate limits while we work on making it more efficient,” he said.

“Also, we are refusing some generations that should be allowed; we are fixing these as fast we can,” he added.

OpenAI launched the upgraded image generation offering in ChatGPT-4o on March 25, resulting in users splashing images across social media in the art style of Studio Ghibli — known for its anime films Spirited Away and My Neighbor Totoro.

Altman didn’t give a definitive timeline on how long the rate limits would last but said, “Hopefully, it won’t be long! ChatGPT free tier will get three generations per day soon.”

Rate limits are generally applied to help OpenAI manage the aggregate load on its infrastructure, according to OpenAI. 

Related: Ghibli memecoins surge as internet flooded with Studio Ghibli-style AI images

“If requests to the API increase dramatically, it could tax the servers and cause performance issues. By setting rate limits, OpenAI can help maintain a smooth and consistent experience for all users,” OpenAI says on its rate limit explanation page.

Along with the legions of others getting in on the trend, X and Tesla CEO Elon Musk shared an image mimicking King Mufasa from Disney’s The Lion King holding up a Shiba Inu. 

White House AI and crypto czar David Sacks also joined in, using the Studio Ghibli-art style on an image of himself at an event.

Meanwhile, Bloomberg reported on March 26 that OpenAI expects to more than triple its revenue this year to $12.7 billion, citing a person familiar with the matter.

Altman said on Feb. 12 his firm wants to ship GPT-4.5 and GPT-5 in the coming weeks or months.

Magazine: ‘Chernobyl’ needed to wake people to AI risks, Studio Ghibli memes: AI Eye