Daily Summary2026-08-06
Stories clustered across sources, with day-to-day continuity and threading.
Bitcoin Audit Finds 85 Critical Flaws
A volunteer group calling itself the Bitcoin Red Team — 16 researchers co-led by developer Calle and AnchorWatch's Rob Hamilton — filed 4,962 security findings across 390 open-source Bitcoin projects in 27.5 hours on August 4–5, including 85 critical and 635 high-severity, per its own updates. Funded by roughly $40,000 from nonprofit OpenSats, the AI-assisted sprint was a direct response to the Coldcard exploit; the team disclosed issues privately before publication and plans to open-source its tooling.
Circle Sets Arc Launch for Sept 16
Circle set September 16 for the public mainnet of Arc, its Layer-1 blockchain, naming 11 founding validators drawn almost entirely from traditional finance — including BlackRock, Visa, Mastercard, DTCC, ICE and Standard Chartered — a permissioned model where the institutions using the network also secure it. Circle reported Q2 revenue of $701.3 million (up 7% YoY, below estimates) but beat on adjusted EPS at $0.18; USDC circulation reached $73.3 billion, and CRCL rose on the results.
Visa Integrates Stablecoins Into Visa Direct Across 18 Billion Endpoints via Zero Hash Partnership
Visa began deploying stablecoin prefunding and payout capabilities across Visa Direct, its cross-border payout network, through a partnership with Zero Hash announced August 5. Eligible business clients can prefund accounts and send payouts in stablecoins, primarily USDC, with Zero Hash — MiCA-licensed and now applying for a US trust-bank charter — supplying the compliance and settlement layer. Visa Direct reaches more than 18 billion endpoints across 195 countries; the move operationalizes the Visa Stablecoin Platform launched July 16.
Boltz Bridge Halts All Swaps Indefinitely as AI-Powered Exploit Attempts Overwhelm Security Capacity
Boltz, a non-custodial bridge routing swaps between Bitcoin's mainchain, the Lightning Network and Liquid, suspended all swaps indefinitely on August 3, saying months of automated, AI-assisted probing had let attackers find and exploit bugs faster than its small team could patch. It stressed no user funds were at risk given its non-custodial design — Boltz absorbed the losses itself — and called the shift a paradigm change for Bitcoin services on open-source stacks. Wallets including Aqua and Bull Bitcoin lost Lightning/Liquid functionality.