South Korea's Bithumb, one of the country's largest crypto exchanges, is aiming to go public on Korea's KOSDAQ market around 2028, with a possible follow-on Nasdaq listing later.

The 2028 date is a stated target, not a fixed schedule, and an earlier 2025 IPO attempt was postponed. No valuation has been disclosed. Bithumb is a centralized exchange and this is an equity IPO, so there is no Bithumb token or airdrop involved.

The exchange split into two entities in July 2025, Bithumb Korea (the exchange, which pursues the listing) and Bithumb A (asset management), to simplify its structure ahead of a float. It has tapped Samsung Securities as underwriter and is upgrading internal controls while moving to K-IFRS accounting standards.

One of South Korea's biggest crypto exchanges is swapping the memecoin fast lane for something far more buttoned-up: a listing on the stock market.

Bithumb is targeting a 2028 IPO on Korea's KOSDAQ, with a possible Nasdaq encore later to court international investors. It's a slow burn, and the groundwork is already well underway.

Back in July 2025, Bithumb split itself in two: Bithumb Korea (the exchange that will actually list) and Bithumb A (its asset-management arm), to keep the corporate story clean for future shareholders. Since then it has been grinding through the unglamorous but necessary prep: upgrading internal controls, moving to K-IFRS accounting, and lining up Samsung Securities as underwriter.

A few asterisks, though. The 2028 date is a target, not a promise, and Bithumb already shelved an earlier 2025 attempt when markets turned choppy. No valuation has been floated yet. And to be clear, this is an equity IPO, not a token launch, so there is no "Bithumb airdrop" to hunt for.

If it lands, Bithumb would be among the first Korean crypto exchanges to ring the opening bell, a notable moment for one of the world's most active crypto markets. Watch this space.

Not financial advice. Based on reporting (The Block) and Bithumb's stated plans; the timeline is a target and may change.

Former Pump.fun employees say they were laid off just before their PUMP token grants vested, forfeiting allocations reportedly worth over $1M for at least one of them.

Staff were promised PUMP tokens that become theirs only after a set time on the job. Ex-employees claim the company let them go right before those tokens unlocked, leaving them with nothing, even as founders and investors released tens of millions in PUMP to themselves around the same time.

There were two layoff rounds, in April and mid-July, the second reportedly hitting about 40 people. The grants were agreed in mid-2025 with a one-year cliff, so the first tranche was due to vest around June 2026. These are unverified allegations from former staff, Pump.fun (run by Baton Corporation) has not publicly responded, and the $1M figure is one ex-employee's own estimate. PUMP is a live token, so treat this as a labor and optics story, not investment advice.

The firmware flaw in Coldcard hardware wallets has now drained about 1,367 BTC, worth roughly $89M, from 4,585 wallets across three waves, per Galaxy Research.

A Coldcard is a physical device for holding bitcoin. A 2021 coding mistake quietly weakened the randomness of the seeds it created, so keys for thousands of wallets became guessable. Attackers computed those keys and swept the coins remotely, with the physical devices never touched at all.

The bug dropped seed entropy to about 72 bits instead of 128, making keys enumerable offline. It affects seeds generated on Mk3 (firmware 4.0.1+), and Mk4, Q and Mk5 before their fixes, not every Coldcard. Coinkite urges owners to move funds to a fresh seed on patched firmware. The total is a Galaxy Research estimate, cumulative and still climbing as of August 2, and there is no token involved.

Across Protocol (ACX), Hashflow (HFT), PIVX (PIVX), Vulcan Forged (PYR), Vanar (VANRY) and Viction (VIC) spot trading will cease at 03:00 UTC. Users can withdraw these assets until October 17th.

Prices of respective tokens were hit significantly

– PIVX (PIVX): -22.8%

– Vulcan Forged (PYR): -20.8%

– Viction (VIC): -19.4%

– Hashflow (HFT): -16.5%

– Vanar (VANRY): -7.6%

– Across (ACX): -6.6%

A full list of Major Upcoming Events, to be updated

Shyft has partnered with Accountable to integrate real-time cryptographic verification across its onchain wealth management platform, giving users transparent visibility into portfolio performance and asset health.

Through Accountable's Data Verification Network (DVN), every Shyft vault will feature continuously verified data, including asset value, NAV, returns, yield, market exposure, and portfolio positioning. The system already supports verification of more than $2.2 billion in assets while preserving institutional privacy through zero-knowledge proofs and confidential computing.

The integration replaces delayed audits and self-reported balance sheets with continuously verifiable proof of assets and liabilities across onchain and offchain infrastructure, without exposing sensitive information such as wallet addresses, API keys, or trading strategies.

The partnership reinforces the shift toward institutional-grade, self-custodial wealth management, where transparency is powered by cryptographic proof rather than trust.

July 2026 had 31 calendar days. Crypto got hacked on 17 of them, totaling $172.7M lost across 25 incidents. A late $38M Coldcard exploit on the 31st capped a top-heavy month, together with AFX Bridge ($24.15M), Ostium ($23.75M) and BonkDAO ($21.3M), the four biggest hits made up over 60% of the damage.

About 500 people who kept bitcoin on older Coldcard Mk3 hardware wallets were robbed. Around 594 BTC, roughly $38M, was swept out of their wallets in just 25 minutes.

Some Mk3 devices on older firmware skipped the chip's true random generator, so their secret keys came from predictable data instead. That let an attacker recreate the keys and drain the coins. Newer models like Mk4, Q and Mk5 are reported unaffected.

The flaw affects seeds made on Mk3 firmware 4.0.1 to 5.0.3. Maker Coinkite says there is no public proof yet directly tying the bug to this sweep, so treat the link as suspected, not confirmed. The BTC looks unrecoverable, passphrase-protected wallets are considered low risk, and Coinkite advises moving funds to a new seed on unaffected hardware. No token is involved.

New York has sued prediction-market platform Kalshi, calling it an unlicensed illegal gambling operation and seeking at least $36B in damages.

Kalshi runs markets where people trade yes/no contracts on real-world events like elections and sports. New York argues those are bets that need a state gambling license Kalshi never got, and wants it shut down in the state with its profits clawed back.

The suit, filed by Governor Hochul and AG Letitia James, also seeks triple civil penalties and $100K per offering, and says Kalshi exposed residents including minors. These are unproven allegations in a complaint, not a ruling, and at least four other states have already moved against Kalshi while the CFTC pushes back on state enforcement. There is no Kalshi token.