Wallet

Elastic Security Labs identified TCLBANKER, a Brazilian banking trojan that monitors 59 bank, fintech, and crypto domains and triggers remote control when targets are visited. The malware spreads by taking over victims’ WhatsApp Web sessions and Outlook accounts to message their contacts with phishing lures and the trojanized installer.

On May 8, 2026, GoMining announced GoBTC Pay, a protocol aimed at enabling native, instant Bitcoin payments directly on Bitcoin's base layer. The company said it has launched a dedicated mining pool to prioritize confirmations, with a goal of achieving a 12-hour final on-chain settlement by the end of 2026. GoMining added that the initiative extends its ecosystem of 5 million users into everyday merchant payments.

Zcash is accelerating work to withstand quantum computing threats, with "quantum-recoverable" wallets expected to roll out within the next month. The project's broader plan is to reach full post-quantum security in the next 12 to 18 months and to pursue payment speeds comparable to Visa and Mastercard. Separately, ZEC has climbed more than 73% over the past 30 days, with analysts flagging $698.78 as a key resistance level.

CoW DAO has approved a plan to reimburse users harmed by the April 2026 cow.fi domain hijack, even though CoW Protocol's smart contracts were not breached. Eligible claimants can receive up to 100% of verified losses from the DAO's Legal Defense Reserve, with claims due by 14 May. The DAO says the payments are voluntary goodwill grants and do not admit liability.

Exodus said it launched XO Cash on 8 May, introducing a Solana-based stablecoin designed for AI agents and autonomous, machine-to-machine payments. The company said developers can spin up agent wallets with spending rules while users keep custody, and agents can pay without being given private keys. XO Cash also supports payment-time conversion into USDC or USDT and can enable agent-linked debit cards usable wherever Visa is accepted.

At Consensus Miami on Thursday, OpenSea CMO Adam Hollander said the company is expanding beyond its NFT-marketplace image by building a single non-custodial app that supports NFTs, major tokens, meme coins and perpetuals across 26 chains. He said OpenSea rebuilt its stack about a year ago under OS2 and is preparing OpenSea Mobile with Apple Pay onboarding, citing over 1 million wallets in a recent rewards program and about 600 beta testers in one-on-one sessions.

Polymarket said it launched Polymarket USD on April 6, 2026, replacing bridged USDC.e as the 1:1 USDC-backed collateral used across its prediction markets. The platform is also shipping CTF Exchange V2 with a rebuilt order book, lower gas costs, faster matching, and EIP-1271 support for smart contract wallets. Polymarket added that API traders and bot operators may need SDK and integration updates during a rollout expected to take two to three weeks.

Neo co-founder Erik Zhang has finalized NEP-20, a wallet-based authentication standard that enables users to sign in to websites, games, and apps with a Neo wallet rather than usernames and passwords. First proposed in March 2021 and revisited with active review in late March 2026, the specification now carries an "Accepted" label in the Neo Enhancement Proposals repository. NEP-20 relies on an off-chain Challenge/Response signature flow and currently supports ECDSA-P256.

Drift Protocol was exploited for $280 million on April 1, 2026, in an incident initially dismissed by some due to its April Fools' timing. Investigators later attributed the breach to the UNC4736 group, saying the attackers blended long-running social engineering with device compromises that enabled multi-sig approvals.

Human.tech has announced an AI-agent wallet infrastructure called Agentic Wallet as a Protocol (WaaP) that converts wallet actions into natural-language interactions while keeping users as the final authority. The system uses cryptographic controls such as spending limits, time windows, approved addresses and step-up human approvals for higher-risk actions. The company says its Human Passport ecosystem has more than 3 million users, has secured over $500 million against Sybil attacks, and is backed by $3 billion in restaked ether.