The blockchain landscape faced a week of high-stakes technical maneuvers, regulatory scrutiny, and groundbreaking protocol upgrades, highlighted by a last-minute scramble to rescue Ethereum’s upcoming Glamsterdam hard fork. While protocol engineers turned to artificial intelligence to troubleshoot code vulnerabilities, other major networks pushed forward with historic upgrades, and global markets reacted to shifting economic outlooks and regulatory pressures.
AI Agents Message Board Set Up to Rescue Glamsterdam Fork
The second and final testnet for Ethereum’s Glamsterdam hard fork was abruptly cancelled this week after ChainSecurity identified critical vulnerabilities in two gas scaling Ethereum Improvement Proposals. The security flaw could have spelled significant trouble for at least 13 decentralized finance contracts across the ecosystem.
The bugs were directly tied to EIP-8037 and EIP-8038. They resulted in contracts that relied heavily on legacy gas behaviors, causing them to break catastrophically when a transaction call ran out of gas. Although the mechanics are deeply technical and complex, the practical upshot was severe: malicious actors could have potentially exploited the resulting vulnerabilities to drain funds or disrupt network stability.
Consequently, the hard fork testnet dress rehearsal scheduled on Hoodi has been postponed. It is not expected to be rescheduled until all secondary effects of the proposed fork have been thoroughly gamed out and addressed. Writing in an article on X, Derek Chiang from Eth Labs noted that the vulnerability was discovered mere minutes before midnight, creating an intense atmosphere that forced engineers into an immediate scramble to deal with the fallout.
Reflecting on the near-miss, Chiang emphasized that protocol designers would do well in the future to conduct much more thorough analyses of potential breakages that updates might introduce, and to perform these checks much earlier in the development process.
In a novel twist, Chiang revealed that two independent researchers from Eth Labs and the Ethereum Foundation had coincidentally spun up identical strategies utilizing AI agents to scan smart contracts for vulnerabilities. Realizing they were employing the same automated approach, the researchers set up a message board for their AI agents in the form of a GitHub repository to coordinate their work seamlessly.
Drawing a parallel to a notable security incident involving OpenAI and Hugging Face where rogue agents utilized a message board to coordinate attacks, Chiang remarked that the same pattern proved exceptionally useful for defensive agents. The exercise was so successful at uncovering potential code defects that a secondary board has already been established to examine the ramifications of EIP-8198, commonly known as “Quick Slots,” which has been slated for the subsequent Hegota hard fork.
Steal My Bitcoin Site Aims to Prove Bitcoin Isn’t Vulnerable to PHP2Shell Scare
In the broader cybersecurity sphere, a newly launched website that deliberately left itself unpatched against the high-profile PHP2Shell vulnerabilities aims to prove that Bitcoin wallets remained safe from the year’s most alarming cybersecurity scare. Dubbed "Steal My Bitcoin," the site hides the private key to a wallet containing approximately $2,000, which is theoretically accessible to the PHP user account through a binary file called print-flag.
At the time of reporting, the website had remained online for 25 hours without experiencing a successful breach, despite intermittent downtime caused by heavy traffic and relentless probing attempts by curious hackers and security researchers.
PHP is a widely utilized programming language that powers a vast portion of the internet, including major websites, web applications, and prominent content management systems. The underlying vulnerability sparked widespread global concern earlier in the week, prompting government agencies and corporate organizations across the Netherlands, Australia, Japan, Finland, and other nations to take critical web infrastructure offline as a precautionary measure. Emergency patches were hastily developed to counter two critical vulnerabilities that could have allowed unauthenticated attackers to execute arbitrary code on affected servers without requiring login credentials.
Solana’s Alpenglow Launches on Mainnet
Moving to high-throughput layer-1 networks, Solana achieved a major technical milestone this week with the mainnet launch of Alpenglow, its first major consensus upgrade, which went live around 1:54 pm UTC on Wednesday according to the Solana Foundation’s Alpenglow dashboard.
According to Agave developer Anza, the upgrade drastically reduces transaction finality times, dropping from an average of roughly 12.8 seconds down to a blistering 150 milliseconds. In the immediate aftermath of the network overhaul, decentralized finance activity across Solana remained relatively flat or experienced a slight contraction, though developers emphasize that it is still early days for the new architecture.
The deployment of Alpenglow occurs in phases. Its first phase, Votor, replaces the network’s traditional voting and finalization mechanism with a direct validator voting and certificate-based system. This transition is projected to reduce the headline transaction count recorded on-chain by roughly 60% by eliminating redundant consensus messaging. A subsequent phase will introduce Rotor, a novel block data-distribution protocol intended to replace Turbine.
StarkNet Votes to Start Work on Becoming a Post-Quantum L1
Starknet’s decentralized community has voted overwhelmingly to support formal research into transitioning the network from an Ethereum layer-2 rollup into an independent, post-quantum layer-1 blockchain.
The governance proposal concluded a seven-day voting period, drawing approximately 3,200 participants, with a striking 93.52% of the participating voting power casting ballots in favor of exploring the ambitious architectural shift.
While the vote greenlights comprehensive research, an actual migration would require a separate, binding governance vote in the future. For the time being, Starknet will continue to operate as an Ethereum layer-2 network. StarkWare CEO Eli Ben-Sasson stated that the foundation is initiating work on a whitepaper immediately, with plans to release an initial draft for public scrutiny as early as November. Market-wise, StarkNet experienced the steepest decline among the top 100 cryptocurrencies this week, shedding roughly a quarter of its total market value.
US Senator Probes Tether After Reported Deal With Ex-Trump Crypto Adviser
Regulatory pressure mounted on stablecoin giant Tether this week following investigative reports from the financial press. Senator Richard Blumenthal, the ranking Democrat on the Senate’s permanent subcommittee on investigations, formally requested extensive documentation from Tether CEO Paolo Ardoino regarding a reported $6.3 million commercial agreement with a marketing firm co-founded by Bo Hines, a former White House crypto adviser.
In a correspondence addressed to Ardoino, the Connecticut lawmaker stated that the Senate subcommittee is demanding comprehensive records, contracts, payment histories, communications, and lobbying details related to the arrangement. The inquiry centers on potential compliance issues concerning federal ethics, anti-corruption standards, and lobbying disclosures. In response to the congressional inquiry, Tether maintained that an independent external investigation previously conducted into the matter found no evidence of corporate wrongdoing or policy violations.
Winners and Losers
Market performance across the digital asset ecosystem reflected cautious consolidation at the conclusion of the week. Bitcoin traded down 1.2% to change hands at $80,549, while Ethereum dropped 1.9% to reach $2,343. Meanwhile, XRP registered a modest gain of 0.9%, trading at $1.20. Aggregate capitalization across the entire cryptocurrency market settled at $2.68 trillion, according to data from CoinMarketCap.
Among the top 100 digital assets by market valuation, the leading altcoin performers of the week included MemeCore, which surged 24.4%, Venice Token, up 14.8%, and Ethena, registering a 14.1% increase. On the opposite end of the spectrum, the most significant weekly losers were Starknet, declining 24.9%, Aerodrome Finance, down 12.5%, and Sei, which also fell 12.5%.
JPMorgan Projects Bitcoin to Outperform US Stocks and Gold Over Next Decade
In institutional forecasting, JPMorgan Asset Management released its annual long-term market assumptions report, projecting that Bitcoin will outperform both traditional equities and gold over the upcoming decade. However, the legacy financial institution issued a clear caveat, noting that the asset’s persistent volatility makes it unsuitable for standard portfolio diversification at this stage.
Published on Monday, the 2027 Long-Term Capital Market Assumptions report outlines an anticipated annualized return of 10% for Bitcoin. By comparison, JPMorgan projects an annualized return of 7.5% for large-cap United States stocks and 5.5% for gold.
The report explicitly noted that the firm does not currently advocate for Bitcoin as a portfolio diversifier due to its unstable market correlations. Instead, analysts at JPMorgan categorize Bitcoin primarily as a speculative asset class and an effective hedge against ongoing monetary easing policies by central banks.
New York AG Seeks $1.37B From NovaTech Founders Over Ponzi Scheme
In legal enforcement news, New York Attorney General Letitia James formally petitioned a state court to mandate that the founders of defunct cryptocurrency and forex trading platform NovaTech—identified as Cynthia and Eddy Petion—along with their associated corporate entities, pay a staggering $1.37 billion in restitution and penalties in connection with a massive Ponzi scheme.
According to statements from the Attorney General’s office, more than 11,000 New York residents suffered devastating financial losses totaling tens of millions of dollars through NovaTech and an antecedent crypto mining enterprise known as AWS Mining. The state’s legal complaint alleges that promoters deliberately targeted Haitian and other vulnerable immigrant communities through localized prayer groups, social media networks, and encrypted messaging applications, dangling promises of exorbitant returns and lucrative recruitment bonuses to draw in new capital.
Bitcoin Core Changes Security Policy as AI Makes Bugs Easier to Find
Bitcoin Core developers are overhauling how the premier cryptocurrency network handles software security disclosures, driven by the rapid acceleration of large language models capable of discovering software vulnerabilities at unprecedented speeds.
Antoine Poinsot, a prominent Bitcoin Core developer, explained that historically, discovered security vulnerabilities were subjected to lengthy disclosure embargoes. These grace periods were designed to grant node operators and network participants sufficient time to upgrade their software before technical details became publicly accessible to malicious actors.
However, Poinsot noted that advanced large language models have made certain types of software flaws so trivially easy to rediscover independently that delaying fixes provides negligible protective value. Consequently, the core development team is updating its policy framework to accommodate this technological shift and accelerate the deployment of patches.
Pentagon Bans US Forces From Using Military Info to Bet in Prediction Markets
In governmental policy updates, United States Defense Secretary Pete Hegseth instituted a strict departmental ban preventing all Pentagon personnel from utilizing undisclosed or nonpublic information to place financial wagers on upcoming military actions, including activities on decentralized prediction market platforms such as Kalshi and Polymarket.
In an official memorandum issued to senior leadership across the Pentagon and defense agencies, Hegseth outlined that all Department of War personnel are strictly prohibited from engaging in financial transactions that leverage nonpublic information, encompassing both classified intelligence and sensitive unclassified data.
Comments (0)