Security firm Novee identified “Cordyceps,” a class of exploitable CI/CD weaknesses in open-source repositories that could let attackers steal credentials, inject malicious code, and disrupt operations at major software organizations. The issues were found in repositories tied to Microsoft, Google, Apache, Cloudflare, and the Python Software Foundation, according to Novee. The companies said the vulnerabilities have been fixed.

Gnosis’ official X account has been compromised, and users are being urged to avoid interacting with it. The warning covers posts, links, reward campaigns, voting announcements and wallet-connection prompts. Users are advised not to click links or sign transactions until the issue is resolved.

Real-world asset tokenization reached $31 billion on-chain by mid-2026, with BlackRock, JPMorgan and Franklin Templeton among the most active participants. The trend has been driven largely by major traditional finance firms rather than retail traders. Here’s what RWA tokenization is and why it is drawing institutional interest.

Atlas plans to launch USAFi in Q3 2026 under Dubai’s VARA framework, positioning it as a regulated permissionless digital security backed by a Nasdaq-listed ETF. The initiative marks economist Nouriel Roubini’s first step into digital assets after years as one of crypto’s most vocal critics. Atlas says the token will be supported by Nasdaq-listed USAF reserves and is intended to offer DeFi access while helping preserve value.

Kalshi launched as a CFTC-regulated derivatives exchange, while Polymarket began as a crypto-native platform operating offshore. The two now compete across similar yes-or-no contracts but differ in how they handle rules, settlement currency, and user access. A side-by-side look highlights contrasts in listed markets, trading activity, and key risks.

The Curaçao Gaming Authority has published its first detailed crypto compliance rulebook for licensed online operators, requiring blockchain analytics, segregated wallets and an immediate ban on mixers, with deadlines running to mid-2027. The framework sets out how casinos and sportsbooks must handle digital-asset deposits, wagering, withdrawals and treasury management under anti-money-laundering standards. It also bars transactions tied to sanctioned wallets and prohibits operators from acting as crypto exchanges.

Russia plans to pay commercial banks for processing payroll via the Bank of Russia’s digital ruble platform, aiming to boost usage of the CBDC among consumers. The central bank said banks will receive 67 kopecks ($0.67) per payroll instruction starting January 1, 2027. The move is part of a multi-year rollout that has already included an initial government salary payment in digital rubles. Officials expect incentives and new bulk-payment tools to drive banks to market digital-ruble payroll services to corporate clients.

DeFi’s total value locked (TVL) has steadily declined throughout 2026. It has fallen every month this year, dropping from around $115 billion in January to nearly $70 billion in June. The year-to-date decline stands at about 39%.