TLDR:

• Kaspersky identified dozens of malicious Wallpaper Engine packages with thousands of installs on Steam.
• Lumma and Vidar infostealers were deployed to harvest crypto wallet data and browser credentials.
• Malware was hidden inside password-protected archives or bundled directly within wallpaper downloads.
• The FBI previously investigated Steam-distributed malware across titles including PirateFi and Tokenova.

Wallpaper Engine malware is spreading through Steam Workshop, one of gaming’s most trusted content platforms.

Cybersecurity firm Kaspersky has identified dozens of infected wallpaper packages distributed via the popular live-wallpaper application.

The malicious files steal Steam credentials, hijack active sessions, and deploy infostealers targeting crypto wallet data.

Many packages carried thousands of downloads before discovery, with victims reported across China, Russia, Singapore, Germany, and several other countries.

How Attackers Weaponized a Trusted Platform

Kaspersky’s report, published Monday, revealed that threat actors exploited Steam Workshop to upload malicious Wallpaper Engine packages disguised as animated desktop wallpapers.

Most used anime-style female characters as cover images, lending them a credible, appealing appearance to gamers.

The platform’s trust factor gave the malware a reliable distribution channel with minimal friction for potential victims.

The application’s core feature became the attack vector. Wallpaper Engine allows executable programs to run directly on a Windows machine, which attackers leveraged to deploy malicious payloads under the appearance of legitimate content.

Kaspersky confirmed it had identified dozens of infected wallpaper packages available through Steam Workshop, with many reaching thousands or even tens of thousands of downloads.

Some wallpapers bundled malware directly within the download package. Others concealed payloads inside password-protected archives that unpacked silently after installation.

One documented 2025 case showed a wallpaper launching what appeared to be a functional desktop game while secretly installing the DarkKomet backdoor in the background.

Kaspersky researcher Maxim Starodubov addressed the core vulnerability enabling these attacks. “Trusted platforms can be abused to distribute malware: The attacks rely on users trusting content hosted within legitimate ecosystems,” Starodubov said.

“While many of the malware families involved are well-known, the delivery mechanism enables attackers to reach large numbers of potential victims through seemingly harmless content.”

Infostealers, Crypto Theft, and a Growing Steam Problem

Among the most dangerous payloads identified were Lumma and Vidar infostealers, distributed alongside the RenEngine loader.

These malware families are well-documented tools for harvesting browser credentials, saved passwords, and cryptocurrency wallet information. Kaspersky also noted the activity appeared to involve multiple threat actors rather than a single coordinated group.

Steam credential hijacking was another confirmed outcome. Attackers captured active session tokens, allowing them to access accounts without requiring a password.

Kaspersky explained that “the application-based wallpaper feature allows executable programs to run directly on a user’s Windows computer, allowing attackers to distribute malicious software under the guise of legitimate content.”

The findings follow a documented pattern of Steam-related malware incidents. In July 2025, cybersecurity firm Prodaft reported that the Steam Early Access title Chemia had been compromised to distribute Hijack Loader, Fickle Stealer, and Vidar Stealer.

Earlier, the FBI announced investigations into malware found across several Steam titles, including PirateFi, BlockBlasters, and Tokenova.

Kaspersky advised users to treat Workshop content as potential threat vectors regardless of download counts. High install numbers do not confirm safety, as malicious packages accumulated tens of thousands of downloads before removal.

Quick Summary

• Shopify’s share price has declined approximately 30% in 2026, hovering near $108, even as the company delivers 30%+ revenue expansion for the fourth consecutive quarter
• Traffic generated through AI channels on Shopify’s platform exploded 8x compared to the previous year, with ChatGPT and Copilot pathways producing nearly double the order volume of conventional channels
• Following the Spring 2026 Editions product rollout, Citizens maintained its Market Outperform designation with a $150 target price
• Weekly active merchants using Shopify’s AI-powered assistant Sidekick quadrupled year-over-year during the first quarter
• Thrive Capital deployed $100 million into Shopify, specifically highlighting artificial intelligence’s capacity to transform digital commerce

Shopify (SHOP) shares currently trade near $108, representing a decline of roughly 30% since the beginning of the year and approximately 35% from levels seen six months ago. However, beneath this price weakness lies a company posting some of its most impressive operational results in recent memory.

Shopify Inc., SHOP

The e-commerce platform has delivered revenue expansion exceeding 30% for four straight quarters. During Q1, the company’s gross merchandise volume (GMV) exceeded analyst projections by 2%, while earnings before interest and taxes (EBIT) surpassed consensus estimates by 14%. On a constant currency basis, GMV climbed 30% year-over-year.

This widening disconnect between share performance and operational strength has prompted certain Wall Street analysts to identify the current valuation as an attractive entry point.

Citizens reaffirmed its Market Outperform stance with a $150 price objective on June 18, immediately following Shopify’s Spring 2026 Editions announcement — the semi-annual product refresh event. This release featured upgrades to Catalog and Universal Commerce Protocol (UCP), both critical infrastructure components for autonomous shopping experiences.

The investment firm highlighted that Shopify’s development strategy centers on serving customers through any preferred interaction method — from conventional website browsing to AI agents executing purchases on behalf of users.

AI-Generated Traffic Delivers Measurable Business Impact

The company disclosed an 8x year-over-year explosion in artificially intelligent traffic during the most recent quarter. Shopify currently stands as the exclusive e-commerce platform enabling product discovery and purchasing through OpenAI’s ChatGPT, Microsoft Copilot, and Google Gemini interfaces.

These AI-powered channels demonstrate conversion rates approaching twice those of traditional traffic sources. This performance differential represents a meaningful business development rather than marketing rhetoric.

Sidekick, the company’s proprietary AI assistant built on merchant and corporate datasets, experienced a 4x expansion in weekly active merchant accounts year-over-year throughout Q1. This tool helps store owners optimize operations and accelerate business growth.

The underlying business dynamics are compelling: expanding AI traffic generates additional transaction intelligence, which enhances Sidekick’s capabilities, thereby attracting more merchants, subsequently producing more valuable data. This creates a self-reinforcing growth mechanism.

Wall Street Remains Cautiously Optimistic

Consensus opinion hasn’t completely aligned. Cantor Fitzgerald reduced its price objective to $115 while maintaining a Neutral rating, expressing concerns about margin sustainability. UBS similarly holds a Neutral position with a $130 target, identifying Shopify’s Retail POS division as a critical long-term performance driver.

Conversely, Piper Sandler preserved its Overweight recommendation with a $150 price target, emphasizing accelerating adoption of merchant tools. Citizens reinforced this perspective, stating Shopify “consistently delivers more value than it extracts in cost.”

Thrive Capital backed this investment thesis with a $100 million direct stake, specifically tied to the platform’s AI-enabled commerce trajectory.

Citizens acknowledged intensifying competitive pressures, particularly as advanced coding tools democratize merchant software development outside Shopify’s controlled environment.

A tangible risk exists: should OpenAI or Google elect to claim a more substantial portion of transaction value their AI systems facilitate, this could negatively impact Shopify’s merchant services revenue — which currently represents roughly three-quarters of total business income.

Currently, Shopify’s Spring 2026 Editions release strategically positions the platform to serve merchants across all touchpoints — brick-and-mortar, digital storefronts, and AI-mediated channels — leveraging its UCP framework and unified data architecture.

Binance’s attempt to secure a Markets in Crypto-Assets Regulation (MiCA) license in Greece has triggered fresh scrutiny about how much influence the European Central Bank (ECB) could have during the review process—even though MiCA licensing authority is held by national regulators, not EU institutions.

The situation gained momentum after reports claimed the ECB signaled that Binance would be unwelcome in Europe, following indications that Greece’s market regulator was moving toward rejection before MiCA’s July 1 transitional deadline. Legal experts responding to Cointelegraph say MiCA’s framework does not bar the ECB from sharing views with national authorities, raising questions about how political priorities and regulatory review intersect.

Key takeaways

• Under MiCA, crypto-asset service provider (CASP) licenses are issued by national competent authorities (NCAs) such as Greece’s Hellenic Capital Market Commission (HCMC), not directly by the ECB.
• MiCA’s wording permits other EU institutions to communicate with NCAs, according to lawyers speaking to Cointelegraph, even though licensing decisions remain national.
• Reports linked the ECB’s involvement to broader concerns about privately issued stablecoins—an area where the ECB has been especially outspoken.
• Binance has said it believes its application is being advanced through ESMA-level review, but Greece’s regulator has not publicly issued a decision.
• With MiCA’s transitional period ending July 1, timing is critical for firms seeking authorization to continue operating EU-wide under the new rules.

How MiCA licensing is supposed to work

MiCA establishes a licensing pathway for CASPs through national regulators, with the European Securities and Markets Authority (ESMA) playing an oversight and coordination role rather than acting as the licensing authority itself.

In the Binance case, Greece’s Hellenic Capital Market Commission (HCMC) is the body that would determine whether the exchange meets MiCA requirements for approval in Greece. Binance previously stated it had applied for a MiCA license in Greece.

MiCA’s approach is explicitly tied to the NCAs for authorization decisions, a point that matters for readers because the ECB cannot formally issue a CASP license. Still, experts argue that the regulation does not prevent an EU institution from offering input to the relevant national authority during review.

According to David Lesperance, founder at Lesperance & Associates, MiCA does not restrict a third party—such as the ECB—from providing its opinion to a national regulator assessing an application.

What reports claim—and the legal argument around “informal” influence

Cointelegraph reported that the new wave of concern followed two related developments: an earlier Reuters report indicated Greece’s market regulator was expected to reject Binance’s MiCA application, and a subsequent report from The Big Whale claimed ECB President Christine Lagarde had conveyed to Greek Prime Minister Kyriakos Mitsotakis that Binance was not welcome in Europe.

The timing is especially sensitive: the reports emerged less than two weeks before the end of MiCA’s transitional period on July 1, which affects which firms can continue operating across the EU under the licensing regime.

But the key question for market participants is not only what has been said publicly—it’s what is procedurally permissible. Lawyers told Cointelegraph that MiCA’s text does not bar other EU bodies from engaging with national regulators, even if those bodies are not the final decision-makers.

Yuriy Brisov, a lawyer at Digital & Analogue Partners, said nothing in MiCA prevents the ECB from talking to, advising, or raising concerns with an NCA. However, he noted that the ECB’s role is clearly spelled out in other parts of MiCA—particularly rules governing stablecoin issuers—rather than in the exchange licensing chapter that covers CASPs like Binance.

Binance itself, in a blog post published after the Reuters coverage, said it understood HCMC had completed its review for compliance and that the application was also subject to review at the ESMA level. The exchange later told Cointelegraph it believed ESMA intended to move the application forward and authorize it at an upcoming board meeting.

Separately, Brisov said HCMC has not published a decision on Binance’s application. Cointelegraph also noted that ESMA does not authorize CASP licenses under MiCA, reinforcing that the core licensing decision ultimately rests with the national regulator.

Why stablecoins are at the center of the dispute

The broader political context appears to be stablecoins. The ECB has repeatedly argued that privately issued stablecoins should not replace tokenized financial infrastructure anchored by central bank money. According to The Big Whale’s reporting, Lagarde’s intervention—if accurate—was linked to this stablecoin position.

Cointelegraph previously covered the ECB’s stance that Europe should prioritize regulated settlement systems over reliance on private stablecoins. The ECB has also raised concerns that stablecoins could further entrench US dollar dominance in global finance. Executives within the ECB have framed these risks in structural terms, suggesting stablecoins are not only a technical or market issue but also a strategic one.

For Binance, the stablecoin angle is particularly consequential. Market data cited in the report indicates that Binance has been a dominant liquidity hub for stablecoins on centralized exchanges.

According to CryptoQuant data reported in February, Binance held approximately $47.5 billion in stablecoins, representing about 65% of total stablecoin reserves across centralized exchanges. The same dataset indicated the figure was higher than roughly $35.9 billion a year earlier.

This helps explain why investors may view Binance’s licensing outcome as more than a single-company regulatory event. If the ECB’s priorities influence how NCAs approach CASP risk considerations—directly or indirectly—then large stablecoin “rails” may face heightened scrutiny, especially during fast-approaching deadlines.

Binance’s importance to stablecoin liquidity is also reflected in how regulators and analysts track market structure: when a firm serves as a major exchange venue for stablecoin trading and reserves, its compliance pathway can become a proxy battleground for Europe’s broader position on tokenized money and settlement.

What happens next before July 1

With the MiCA transitional period set to end on July 1, the immediate focus for market participants is whether HCMC issues a decision in Binance’s case and, if authorization is denied or delayed, what alternative routes remain for the exchange to operate lawfully across the EU under MiCA.

Cointelegraph also reported that ESMA and HCMC did not provide immediate comment to its inquiries. Meanwhile, the ECB and the French regulator AMF declined to comment in connection with the claims.

There were also claims about possible other regulatory pathways, including France being mentioned as a potential remaining route in coverage by The Big Whale; however, Cointelegraph’s reporting did not indicate that any formal French MiCA application had been filed at the time of publication.

For readers, the practical takeaway is that MiCA’s deadline structure can compress uncertainty into a narrow window. Even if MiCA licensing authority is formally national, the scope and timing of ESMA-level review—and any policy input from EU institutions—could shape outcomes that determine whether large trading venues can keep serving European customers.

Until HCMC publishes a decision and the regulatory process becomes clearer, investors and operators should watch for two signals: whether the Greek authorization timeline moves toward approval or rejection, and how stablecoin-focused concerns translate into CASP-level licensing expectations across EU member states as the July 1 cutoff approaches.

Global asset manager Franklin Templeton has filed for two exchange-traded funds (ETFs) designed to convert dividend income from US stocks into Bitcoin exposure, according to a June 18 filing with the US Securities and Exchange Commission (SEC).

The proposed Franklin US Equity Bitcoin DRIP Index ETF and Franklin US Innovation Bitcoin DRIP Index ETF would track indexes that systematically reinvest stock dividends into a Bitcoin allocation, creating a rules-based Bitcoin exposure alongside traditional equity holdings.

According to the filing, the funds would launch with a 5% allocation to Bitcoin exposure and a 95% allocation to US equities. Under the index methodology, regular and special dividends from the stock holdings would be reinvested into the index’s Bitcoin allocation, while quarterly rebalances would maintain the Bitcoin allocation within predefined limits.

The filing states that the funds may gain Bitcoin exposure through a range of instruments, including Bitcoin exchange-traded products, futures contracts, options and Bitcoin-backed depositary receipts. The funds may also hold certain Bitcoin-related investments through a wholly owned Cayman Islands subsidiary.

While the Equity ETF would track a broad US large-cap stock index, the Innovation ETF would track an index composed of the 100 largest non-financial companies listed on Nasdaq.

Both funds would be structured as passive index ETFs tracking proprietary VettaFi indexes. The filing states that the underlying indexes would be rebalanced quarterly and reconstituted semiannually.

Related: Bitcoin taps $63K on Juneteenth as July Fed rate-hike odds near 40%

ETF issuers experiment with new Bitcoin strategies

Franklin Templeton’s filing comes as asset managers increasingly experiment with Bitcoin investment products that extend beyond traditional spot ETFs.

Much of that innovation has focused on income generation. In January, BlackRock filed for the iShares Bitcoin Premium Income ETF, which would use an options strategy tied to Bitcoin and its spot Bitcoin ETF to generate additional returns. 

Goldman Sachs followed in April with plans for a Bitcoin income ETF that would invest in spot Bitcoin exchange-traded products and sell call options against those holdings to generate yield while reducing sensitivity to Bitcoin’s price swings.

The following month, Hamilton ETFs entered the market with a proposed leveraged Bitcoin income fund in Canada built around covered-call strategies and short-term options contracts.

Franklin Templeton’s filings come amid weaker demand for US spot Bitcoin ETFs, which recorded six consecutive weeks of net outflows between May 15 and June 18, according to SoSoValue data. 

US spot Bitcoin ETF weekly net flows. Source: SoSoValue

Magazine: Bitcoin, the ‘canary in the coal mine,’ XRP transaction demand falls 91.5%: Market Moves

Cardone Capital has purchased another 282 Bitcoin worth about $18 million as the cryptocurrency market has retreated toward recent lows amid rising geopolitical tensions.

In a June 19 X post, Grant Cardone announced that his real estate investment firm added 282 BTC to its treasury. Based on current market prices, the purchase is valued at roughly $18 million and comes as Bitcoin (BTC) trades near the $63,000 level following a broader crypto market decline linked to tensions surrounding the Israel-Lebanon conflict.

The latest purchase follows another acquisition made during a recent market downturn, when Cardone Capital bought 130 BTC valued at approximately $9.7 million. The transaction adds to a growing Bitcoin position that Cardone has continued to expand through a strategy tied directly to income-producing real estate assets.

Cardone continues building Bitcoin position through rental income

Earlier this year, Cardone Capital disclosed that it had accumulated about 1,000 BTC after purchasing $10 million worth of Bitcoin in January. According to the company, those purchases are funded through a dollar-cost-averaging strategy that directs rental income from selected multifamily properties into Bitcoin acquisitions.

Among those assets is a 366-unit apartment complex in Boca Raton. Rather than distributing excess cash flow to investors or using it to acquire additional real estate, the firm channels part of that income toward Bitcoin purchases.

According to comments previously made by Cardone, the company intends to hold 3,000 BTC by the end of 2026 and ultimately accumulate 10,000 BTC across multiple investment vehicles.

Speaking at the Consensus 2026 conference in Miami, Cardone revealed that the company had recently increased its Bitcoin allocation by another $100 million. He said the purchase formed part of a broader transaction that also included roughly $235 million worth of real estate acquisitions.

During the event, Cardone described the firm’s structure as a combination of Bitcoin and real estate held within the same limited liability company. He argued that the model differs from traditional real estate investment trusts, which generally do not hold Bitcoin directly on their balance sheets.

Real estate and Bitcoin strategy expands beyond treasury purchases

Cardone has repeatedly linked the company’s Bitcoin strategy to its real estate portfolio. In earlier remarks, he estimated that combining the two asset classes could generate annual returns ranging between 22% and 32%, while noting that many investors in the firm’s products had no previous Bitcoin exposure.

According to Cardone, roughly 80% of investors in one of the firm’s Bitcoin-linked real estate funds did not own Bitcoin before participating.

The company has also introduced investment products built around the same concept. As reported earlier by crypto.news, Cardone Capital launched the 10X Miami River Bitcoin Fund in May 2025, pairing a 346-unit apartment complex on the Miami River with $15 million in Bitcoin. The fund also directs a portion of rental income toward additional Bitcoin purchases.

Cardone’s involvement with blockchain-based assets extends beyond treasury accumulation. In early 2024, he listed his $42 million Golden Beach property on Propy, a blockchain-powered real estate marketplace that supports transactions in both Bitcoin and U.S. dollars through a decentralized title registry and escrow system.

WhiteBIT has secured authorization under the EU’s Markets in Crypto-Assets Regulation (MiCA) from Austria’s Financial Market Authority, enabling the exchange to provide regulated crypto services across the European Economic Area using a single passported regime. The authorization positions WhiteBIT to operate within the harmonized EU framework as transitional national arrangements near their end.

MiCA’s cross-border “passporting” mechanism is designed to reduce the need for repeated licensing across member states. For institutions and market participants, the development is consequential: it affects how exchanges structure compliance programs, customer communications, and operational continuity in jurisdictions where legacy registrations may no longer be sufficient.

Key takeaways

• WhiteBIT received MiCA authorization from Austria’s Financial Market Authority, supporting regulated service delivery across the EEA.
• MiCA allows authorized firms in one member state to passport services across the EEA, reducing duplicative licensing.
• Austria has not extended grandfathering for virtual asset service providers beyond Dec. 31, 2025, accelerating migration to MiCA.
• EU deadlines are tightening: after July 1, legacy operators may need to hold MiCA authorization or cease EEA client services.
• Regulators and oversight bodies are emphasizing wind-down and client migration planning for firms that remain unauthorized.

Austria authorization and the MiCA passporting framework

WhiteBIT’s authorization under MiCA was granted by Austria’s Financial Market Authority. Under MiCA, a crypto-asset service provider licensed in one EU member state can provide services throughout the EEA without securing separate authorizations in each jurisdiction.

The exchange indicated that the authorization will support the rollout of a dedicated European platform at whitebit.eu. In practice, passporting can streamline geographic expansion while also increasing the importance of centralized compliance controls—such as transaction monitoring, risk management, and supervisory reporting—aligned to MiCA requirements.

WhiteBIT is part of W Group, which the company says serves more than 35 million customers globally. The exchange was founded in 2018.

Why Austria’s MiCA transition matters: grandfathering and regulatory timing

Austria’s approach underscores the timetable confronting many European crypto businesses. Austria did not extend “grandfathering” provisions for virtual asset service providers beyond Dec. 31, 2025, according to information referenced in comments provided to Cointelegraph by the Financial Market Authority. As a result, Austria has become one of the earlier EU jurisdictions to fully shift operating models to MiCA.

MiCA’s transition rules are pivotal for compliance departments because they determine which firms can lawfully continue serving customers and under what conditions. For exchanges and other regulated service providers, the end of grandfathering increases the operational consequences of delayed approvals—especially where customer onboarding, marketing claims, and service delivery are tied to licensing status.

According to the Financial Market Authority’s previously provided comments cited in the coverage, the regulator has licensed nine crypto-asset service providers under MiCA and characterized application volume as “significant.” This suggests a relatively active supervisory pipeline, but it also signals that authorization throughput may vary across regulators and categories of services.

Approaching July 1 deadline and enforcement posture

WhiteBIT’s approval arrives less than two weeks before the EU’s MiCA transition period expires on July 1. After that date, firms operating on legacy national registrations must either obtain MiCA authorization or stop serving clients within the EU/EEA.

The proximity of the deadline has intensified scrutiny on exchanges that have not yet secured authorization. Reuters has reported that Greece’s market regulator was preparing to reject Binance’s MiCA application. Separately, reporting referenced that France may represent a remaining route for certain exchanges seeking authorization before the deadline.

The compliance significance of these developments is not limited to licensing outcomes. Where authorizations are rejected or delayed, firms may face operational constraints affecting custody arrangements, marketing and advertising practices, and customer support processes. For institutional stakeholders, this increases the need to validate counterparties’ regulatory status and to assess the continuity of access to services during wind-down scenarios.

In its reporting shared with Cointelegraph, OKX Europe suggested the transition could affect a meaningful portion of European activity. The company pointed to data indicating that approximately 7.6 million of 18.5 million crypto app downloads in Europe between May 2025 and May 2026 were linked to exchanges not listed on public MiCA authorization registers. While download data is not a direct proxy for user balances or revenue, it can provide a directional sense of where operational risk may concentrate as firms transition away from legacy permissions.

ESMA guidance: wind-down and client migration plans

Beyond national regulators, EU-level oversight has been explicit about what unauthorized firms should do once transitional periods end. The European Securities and Markets Authority (ESMA) has stated that companies remaining unauthorized after July 1 should implement wind-down and client migration plans rather than continue operating while applications are under review.

This guidance is particularly relevant for compliance monitoring because it frames expected conduct after the regulatory line is crossed. Wind-down planning typically requires firms to consider customer asset handling, disclosure obligations, operational timelines, and coordination with service providers responsible for order handling, custody, and payment-related workflows.

For institutions assessing risk exposure to crypto service providers, ESMA’s posture supports a practical checklist: confirm whether the counterparty is on public MiCA authorization registers, understand the scope of authorized activities, and evaluate whether the firm has contingency plans that align with EU expectations for client migration rather than ongoing service delivery.

Closing perspective

WhiteBIT’s MiCA authorization illustrates how passporting under the EU framework is beginning to reshape the competitive and compliance landscape for European exchanges. As July 1 approaches, the key question for market participants is whether remaining applicants can obtain authorization or will shift toward ESMA-aligned wind-down and client migration. The next phase will likely hinge on supervisory capacity across member states and the clarity of operational requirements for firms transitioning under the end-of-transitional timeline.

TLDR

• BlackBerry shares declined after reaching a 52-week peak of $10.93, with the retreat viewed as profit-taking following overbought conditions
• First quarter fiscal 2027 results scheduled for pre-market release on June 25, with Wall Street forecasting $0.03 earnings per share on $137.7M revenue
• Previous quarter exceeded projections with $0.06 EPS compared to $0.04 estimate and $157.96M revenue, marking 10.1% annual growth
• Street consensus stands at Hold with $5.73 average target; CIBC upgraded to Outperform with $10.00 price objective
• Chief executive and senior vice president liquidated shares in early April at $3.56; insider transactions totaled 73,171 shares valued at approximately $260K over three months

Shares of BlackBerry (BB) began Thursday’s session at $8.84, declining approximately 3.6% as investors took profits following an aggressive advance that carried the stock to its 52-week peak of $10.93. The security has surged 133% since the beginning of the year.

BlackBerry Limited, BB

The decline doesn’t seem connected to unfavorable corporate developments. Market observers attribute the move to a classic technical pullback after an extended rally drove BB into overbought conditions.

Attention is shifting toward the upcoming quarterly report. BlackBerry plans to release first quarter fiscal 2027 financial results before Thursday’s opening bell on June 25. The earnings conference call is slated for 8:00 AM Eastern Time.

Analysts project earnings of $0.03 per share on sales of $137.65 million for the period. This represents a decline from the previous quarter’s impressive performance.

The company’s latest quarterly results, disclosed on April 9, significantly exceeded forecasts. BlackBerry delivered $0.06 per share versus the Street’s $0.04 projection and revenue totaling $157.96 million compared to anticipated $144.27 million — representing a 10.1% increase from the prior year period.

For the complete fiscal year 2027, executives have provided earnings guidance ranging from $0.15 to $0.19 per share. The first quarter outlook calls for $0.02 to $0.03 EPS.

Analyst Targets Show Wide Dispersion

The research community remains fragmented on BB. Canadian Imperial Bank of Commerce has emerged as the most bullish, elevating its price objective from $8.50 to $10.00 recently while assigning an Outperform rating.

This stance contrasts sharply with other coverage. Canaccord Genuity reduced its target from $4.60 to $4.40 in April while maintaining a Hold recommendation. Royal Bank of Canada kept a Sector Perform rating with a $4.50 objective. Weiss Ratings lowered BB marginally to Hold (C-) on June 4.

The Street consensus reflects a Hold rating with a mean price target of $5.73 — significantly beneath current trading levels.

Insider Transactions Show April Sales Activity

Chief Executive John Giamatteo divested 27,066 shares on April 2 at a price of $3.56 each, trimming his holdings by 2.92%. Senior Vice President Jennifer Armstrong-Owen sold 29,908 shares on April 4 at the identical price point, decreasing her stake by 23.96%.

Total insider dispositions during the trailing 90-day period reached 73,171 shares with an aggregate value near $260,000. Company insiders currently maintain just 0.51% ownership.

Among institutional investors, Creative Planning boosted its holdings by 87.5% during Q2, while multiple funds including Scientech Research and Man Group established fresh positions.

The equity’s 50-day moving average stands at $6.76 with its 200-day average at $4.77 — both substantially beneath the present price, highlighting the velocity of BB’s year-to-date appreciation.

BB trades at a price-to-earnings multiple of 110.50, exhibits a beta of 2.29, and maintains a debt-to-equity ratio of 0.26. The trailing 12-month low registered at $3.12.

The upcoming June 25 earnings announcement represents the next significant event, where management’s Q1 projection of $0.02–$0.03 EPS will face comparison against reported outcomes.

A security incident led to the loss of about $4.7 million worth of assets on the Axelar cross-chain interoperability protocol, which has since shut down its bridge functionality with the Secret Network.

Exploit Traced to Secret Network’s ICS-20 Smart Contract

The hacker exploited assets being moved from the Axelar network to the Secret network via the Cosmos IBC (Inter-Blockchain Communication) protocol, according to Axelar. Initial findings indicate that the vulnerability was not in Axelar’s core infrastructure, but instead in the Secret-side ICS-20 smart contract that is managing IBC transfers between the two networks.

For the incident, Axelar’s emergency committee closed down the connections of the Secret and Secret-SNIP bridge to prevent further losses and contain the attack. The protocol also confirmed that it has engaged relevant cryptocurrency exchanges and relevant authorities in its investigation.

The Secret Network is a blockchain that supports privacy and allows data associated with transactions to be encrypted, but not lose the ability to verify on-chain execution of smart contracts. The network has been used to create private cross-chain applications, such as confidential decentralized finance (DeFi) services, privacy-preserving NFT transactions, and anonymous governance mechanisms, among other applications.

Axelar Says Exploit Was Limited to Bridged Assets

According to Axelar, the attack seems to be confined to funds that were transferred to the Secret Network from the Axelar network. There is no evidence so far that any Secret-native assets have been compromised, nor any other IBC connections, nor any additional Axelar integrations, the company said.

The protocol stressed that its wide network was not compromised during the event. The issue is thought to be limited to the Secret-side contract that handles inbound transfers to the Secret ecosystem from Axelar.

Bridge routes in the affected area will continue to be closed until the attack vector has been investigated in detail and the extent of the damage assessed. Once it has finished its investigation, Axelar will be publishing a detailed post-mortem report, the company said.

The attack is part of a number of recent security incidents targeting cryptocurrency infrastructure projects in the past few weeks.

Earlier this month, Humanity Protocol announced its recovery efforts after it suffered an exploit on June 8, which prompted the project to withdraw its original H token from Ethereum, BNB Chain, and Humanity Mainnet. Those affected will be able to receive a replacement token in the form of an “airdrop” based on a new and audited ERC-20 contract deployed on the Ethereum network, the company stated.

Humanity Protocol said the attack occurred due to stolen credentials and noted that there was no breach to the token contracts, bridge infrastructure, or Safe wallet setup.

Binance Research Highlights Growing Security Pressures

Other operational implications have resulted from security incidents. This week, crypto payments platform Pyra announced that it would end its operations after it decided that it could not recover from the losses it suffered due to the Drift exploit.

In this context, Axelar’s attention is now on finding out how the attack was carried out and how to limit the spread of the Secret Network exploit. As of now, the company said, there is no evidence that other parts of the Axelar ecosystem were affected.

The latest hack follows a series of other attacks on DeFi that have been driven by increasing security concerns. Binance Research recently estimated that the amount of funds stolen through DeFi exploits across the sector during April resulted in nearly $13 billion of total value locked (TVL) outflows in the sector.

The on-chain leverage ratio also increased to approximately 38%, which is around the same time since the 2021 downturn, when TVL started to contract more than borrowing.

Market participants will be keenly observing Axelar as investigations proceed to see if the company will provide a final verdict and take any action to enhance the security of cross-chain infrastructure.