A significant transformation is currently underway across the established cryptocurrency market. The top crypto exchanges are morphing into multi-asset financial platforms, breaking down the traditional barriers that once kept crypto and Wall Street completely apart.

Crypto exchange OKX rolled out 13 new “X-Perp” markets for European traders on Tuesday, giving retail users direct access to “Magnificent 7” tech stock futures, alongside major commodity indices like gold, silver, and crude oil. The platform also added perpetual markets for major index funds like the SPY and QQQ, enabling users to trade exposure to the largest U.S. equities outside standard market hours.

Exchanges like OKX are deliberately expanding their services to stop cash from leaving their platforms, while catering to everyday traders who now want to bet on more than just crypto.

Kraken, for example, rolled out 24-hour perpetual futures for synthetic U.S. stock tokens, offering non-U.S. retail traders up to 20x leverage on equities outside standard Wall Street operating hours. Onchain perpetual platform Hyperliquid also moved aggressively into TradFi, putting Wall Street on alert.

Retaining trader fees

Centralized exchange trading volumes recently dropped more than 11% to $4.61 trillion, hitting their lowest performance level since late 2024, according to CoinDesk Data’s April 2026 market reviews. “Retail participation across crypto has moderated, but the demand for trading has not disappeared,” said Behrin Naidoo, founder of Neutral DeFi Protocol. Naidoo, an alumnus of London Business School who previously managed global market strategies and fintech investments at J.P. Morgan, PwC, and RMH, told CoinDesk that the problem isn’t a lack of interest, but rather an infrastructure gap.

Humanity Protocol’s latest security incident appears to be tied to North Korea-linked cyber activity, according to an investigation by Quantstamp. The blockchain security firm says a phishing email carrying a malicious attachment compromised an employee device and enabled the theft of $36 million worth of Humanity (H) tokens.

The attack chain, as described by Quantstamp, started with a message that masqueraded as a “token lockup schedule” update reportedly from South Korean exchange Bithumb. Once delivered, the malware granted full remote access to the compromised laptop and ultimately facilitated access to sensitive cryptocurrency wallet materials tied to a project executive.

Key takeaways

• Quantstamp attributes the Humanity Protocol compromise to a phishing attachment that installed remote-access malware on a staff member’s laptop.
• The incident led to theft of $36 million in Humanity (H) tokens, tied to unauthorized access of MetaMask credentials and private keys.
• Quantstamp says the malware was signed with a South Korean Hancom digital certificate, a pattern it associates with DPRK intrusion activity.
• Recent reporting and research link North Korea-linked threat actors to a large share of crypto theft losses and incidents, emphasizing “precision and scale.”
• The broader pattern reinforces that operational security—especially around email and endpoints—remains a primary weak point even for decentralized projects.

Phishing to wallet theft: how the compromise worked

Quantstamp reported that a compromised employee’s laptop was the entry point for the attackers. In its incident response, the firm said the phishing email delivered a malicious attachment that was disguised as a token-related schedule update.

Crucially, the malware did more than trigger basic compromise indicators. Quantstamp said it gave the attackers full remote access to the laptop and enabled them to copy Humanity Protocol director Chong Yee Wai’s MetaMask wallet credentials and private keys. That access, according to the firm’s account of events, was leveraged to steal $36 million in Humanity (H) tokens on Monday.

From an investor and user standpoint, the incident highlights a persistent reality in crypto security: even when projects operate on decentralized infrastructure, centralized operational practices—like handling attachments and securing staff devices—can still determine whether funds remain protected.

Why Quantstamp points to DPRK-linked activity

Quantstamp did not rely solely on the phishing technique itself. The firm also analyzed the malware’s signing and behavior, stating that the malicious software was signed with a South Korean Hancom digital certificate.

Quantstamp characterized this detail as “characteristic of DPRK intrusions,” suggesting the attackers used tooling and operational steps commonly observed in past North Korea-linked campaigns. The combination of targeted social engineering (fake Bithumb-related content), endpoint takeover (remote access), and credential harvesting (MetaMask credentials and private keys) forms a cohesive attack narrative consistent with the firm’s attribution.

For readers tracking attribution in cyber incidents, the key takeaway is that this is not a generic accusation: Quantstamp’s conclusion is based on specific technical artifacts found during its incident response.

North Korea-linked theft: large numbers across recent years

The alleged DPRK connection to Humanity Protocol comes amid a broader set of statistics from blockchain security research. In a May report, CertiK linked the same category of actors to about $2 billion of the $3.4 billion lost to crypto exploits in 2025, and said they accounted for 12% of total incidents. CertiK described these losses as reflecting a focus on “precision and scale.”

Looking further back, the report cited an estimate that North Korea-linked actors stole about $6.75 billion in cryptocurrency across 263 documented incidents over the past decade. While such totals naturally depend on methodology and classification criteria, the report’s underlying message is consistent: DPRK-associated operations have repeatedly translated cyber capabilities into high-value thefts.

CertiK further argued that North Korea has “industrialized” crypto theft into a core state revenue mechanism, framing these activities as a meaningful share of the regime’s external income. That characterization matters because it suggests sustained institutional investment rather than isolated criminal hacking.

Denials and the persistence of cyber allegations

North Korea typically does not respond in a sustained way to cybercrime allegations. However, the reporting also referenced a denial carried by Korean Central News Agency coverage on May 3, in which a North Korean Foreign Ministry spokesperson rejected claims about crypto hacks.

In that statement, the spokesperson accused the United States of circulating “incorrect” narratives about a “non-existent ‘cyber threat’” from North Korea. The denial underscores a recurring tension in attribution: while investigators and researchers present technical evidence and pattern-based assessments, state actors continue to reject the framing publicly.

For users and teams building in crypto, the practical implication is to treat attributions as indicators of threat models rather than as proof of political intent. Regardless of who denies what, the operational lesson remains the same—phishing and endpoint compromise can rapidly convert into on-chain losses when wallet access is taken.

Next, readers should watch for updates from Humanity Protocol and Quantstamp on remediation steps and security controls—particularly any changes to how wallets are secured, how staff devices are hardened against social engineering, and what indicators will be shared publicly to prevent similar follow-on attacks.

A malicious attachment delivered through a phishing email points to the involvement of North Korea-linked threat actors in Humanity Protocol’s recent hack, according to blockchain security company Quantstamp.

The decentralized identity company said a compromised employee’s laptop enabled attackers to steal $36 million in Humanity (H) tokens on Monday.

The malicious attachment was disguised as a token lockup schedule update from South Korean cryptocurrency exchange Bithumb. It installed malware that gave attackers full remote access to the laptop, Quantstamp said in its incident response.

The phishing email that led to the Humanity Protocol compromise. Source: Quantstamp

Quantstamp added that the malware was signed with a South Korean Hancom digital certificate, a pattern it described as “characteristic of DPRK intrusions.” The malware enabled attackers to copy Humanity Protocol director Chong Yee Wai’s MetaMask wallet credentials and private keys.

The suspected North Korean link would add to a series of major crypto thefts attributed to the country. North Korea-linked threat actors were tied to at least $578 million of the $634 million stolen in crypto-related incidents in April.

North Korean hackers tied to some of the largest crypto hacks

According to a May report by blockchain security company CertiK, the same actors have been linked to about $2 billion of the $3.4 billion lost to crypto exploits in 2025, while accounting for 12% of total incidents. CertiK said the figures reflect a focus on “precision and scale.”

Over the past decade, North Korea-linked actors stole an estimated $6.75 billion in cryptocurrency across 263 documented incidents, the report said.

Related: CZ sounds alarm as ‘SEAL’ team uncovers 60 fake IT workers linked to North Korea 

CertiK added that North Korea has “industrialized” crypto theft into a core state revenue mechanism, making these operations a substantial share of the regime’s external income.

Total DPRK crypto theft over the years. Source: CertiK/Skynet

North Korea rarely responds to cybercrime allegations, but on May 3, a Foreign Ministry spokesperson rejected them in a statement carried by the Korean Central News Agency, the country’s state media.

The spokesperson accused the US of spreading “incorrect” narratives about the “non-existent ‘cyber threat’” from North Korea.

Magazine: Coinbase hack shows the law probably won’t protect you — Here’s why

Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.

The landscape of artificial intelligence has shifted dramatically over the past two years. Generative AI platforms, automation tools and agentic AI systems have moved from experimental technology to mainstream business infrastructure at a pace that has surprised even the most optimistic observers. Enterprise adoption is accelerating, investment is flowing into the sector at record levels and the number of companies building in these categories has multiplied rapidly.

With that growth has come intense competition for media attention, investor interest and customer awareness. For companies building generative AI products, automation platforms and agentic AI systems, getting consistent press coverage in the right publications is one of the most effective ways to stand out in a crowded market. It builds the kind of credibility and visibility that drives investment conversations, enterprise sales cycles and developer adoption in ways that other marketing channels cannot replicate.

Kooc Media is a specialist PR and media distribution agency that has been operating in the technology, crypto and fintech space since 2017. The agency has launched dedicated PR services specifically for companies building in the generative AI, automation and agentic AI space, bringing its proven model of guaranteed placements, owned media and wide distribution to one of the fastest-growing sectors in technology.

---

Why Generative AI and Agentic AI Companies Need Specialist PR

Generative AI, automation platforms and agentic AI systems are not straightforward products to communicate about. They involve complex technical concepts that need to be translated into compelling stories for non-technical audiences. They are often solving problems that potential customers have not yet fully articulated. And they are operating in a sector where the media coverage landscape is still evolving — with some publications deeply engaged with AI developments and others still catching up.

Getting PR right in this environment requires more than a standard press release and a list of journalist contacts. It requires an agency that understands the technology, knows which publications are authoritative in the generative AI and automation space, and has the distribution infrastructure to reach the finance, technology and business audiences that matter most to companies in these categories.

This is precisely the gap that Kooc Media’s specialist PR service for generative AI, automation and agentic AI platforms is designed to fill. The agency understands the sector, has built its distribution network within the finance and technology media ecosystem, and has the owned media assets to guarantee results rather than simply promise them.

---

Owned Media Guarantees Coverage From Day One

The foundation of Kooc Media’s PR service for generative AI and automation companies is a portfolio of owned publications that enables guaranteed placements for every client on every campaign.

Blockonomi, CoinCentral, MoneyCheck, Parameter, Beanstalk and Computing are established Kooc Media brands with real editorial authority and genuine readerships across the finance, cryptocurrency and technology sectors. These publications are read by the investors, developers, enterprise buyers and technology decision-makers that generative AI and agentic AI companies are trying to reach.

Every client receives confirmed placements across these in-house publications as part of their campaign. There is no pitching to editors, no waiting for journalist responses and no uncertainty about whether coverage will appear. When a press release is approved by the client it goes live across the owned network the same day, providing immediate, guaranteed visibility in established finance and technology publications.

For generative AI companies announcing new model releases, automation platforms launching enterprise features, and agentic AI systems entering new markets, same-day guaranteed publication is a critical operational advantage. News in the AI space moves fast and coverage needs to move just as quickly. All of Kooc Media’s media properties are listed on the Kooc Media sites page.

---

Wide Distribution Across Partner Networks and Premium Media Channels

Guaranteed owned media placements are the foundation. Kooc Media’s PR service for generative AI and automation platforms builds on that foundation through two additional layers of distribution that dramatically expand the reach and impact of every campaign.

The partner distribution network extends coverage across hundreds of websites and thousands of syndicated outlets in the finance and technology media space, ensuring that press releases circulate across the full ecosystem of publications relevant to generative AI, automation and agentic AI audiences. This broad partner syndication gives every campaign a reach that extends well beyond the owned portfolio and ensures the story travels across all relevant industry media.

Premium distribution packages unlock access to the most authoritative and widely read business and financial media platforms in the world. Through these channels, press releases from generative AI and automation companies can appear on Business Insider, Bloomberg, Benzinga, MarketWatch, USA Today, Dow Jones feeds and a range of other globally recognised outlets. For agentic AI platforms targeting enterprise clients, automation companies seeking investment from institutional funds and generative AI businesses operating in international markets, placements on platforms of this scale deliver validation and reach that no other marketing channel can provide.

Michelle De Gouveia, spokesperson for Kooc Media, said: “Generative AI, automation and agentic AI are three of the most exciting and most competitive categories in technology right now. The companies that will define these categories over the next five years are the ones building the strongest media presence today. Our PR service gives them the infrastructure to do that — guaranteed placements in owned finance and tech publications, broad partner distribution across hundreds of relevant outlets, and premium global channel access for the companies that need the widest possible reach. We handle everything from writing to distribution to reporting, so the team can stay focused on building the product while we handle the story.”

---

PR Coverage Across All Generative AI and Agentic AI Subcategories

Kooc Media’s PR service is designed to serve the full breadth of the generative AI, automation and agentic AI space. The categories within these broader verticals are diverse, and the agency’s distribution network is suited to reaching the relevant audiences across all of them.

Generative AI companies building large language model applications, image and video generation platforms, AI writing tools, code generation software and multimodal AI products all have distinct audiences and distinct stories to tell. Automation platform companies working on workflow automation, robotic process automation, intelligent document processing and business process AI need to reach enterprise buyers and technology decision-makers who follow specific business and technology publications. Agentic AI platform developers building autonomous AI systems, multi-agent frameworks, AI workflow orchestration tools and AI agent infrastructure are operating in one of the newest and most rapidly evolving subcategories in the entire tech sector.

Kooc Media’s PR service is positioned to serve all of these subcategories effectively, with distribution that reaches the finance, technology and business media that the relevant audiences for each are following.

---

AgentLocker.ai — Free Directory Listing for Every Client

Alongside its PR distribution service, Kooc Media operates AgentLocker.ai, a dedicated directory for AI tools and agents that has been built specifically for the generative AI, automation and agentic AI ecosystem.

AgentLocker.ai provides a structured, searchable resource where businesses, developers and individuals can discover, compare and evaluate AI-powered products across a comprehensive range of categories. For the generative AI, automation and agentic AI space specifically, the directory covers AI writing and content tools, coding assistants, automation platforms, AI agents and agent frameworks, workflow orchestration tools, productivity applications, data analysis tools, marketing AI and much more.

The audience that visits AgentLocker.ai is one of the most valuable that any generative AI or automation company can reach. These are people who have come to the directory specifically because they are looking for AI tools. They are in active discovery or evaluation mode, searching for a product that meets a defined need. Being listed in this directory puts a company directly in front of potential customers at the exact moment they are most receptive to finding a new tool.

Every Kooc Media AI PR client is included in AgentLocker.ai automatically as part of their campaign at absolutely no additional cost. The listing is created during the campaign process and remains permanently active, providing ongoing discoverability that continues to generate value long after the initial press distribution has concluded. For generative AI and agentic AI companies that are building for the long term, this sustained directory presence complements the immediate impact of press coverage to create a more complete and durable approach to building market visibility.

The combination of a press release that generates immediate coverage across established publications and a permanent directory listing that keeps the company discoverable on an ongoing basis is a genuinely powerful combination for companies in fast-moving AI categories.

---

Complete Campaign Management From Brief to Report

Kooc Media handles every element of the PR campaign internally, from initial content creation through to final reporting. Companies building generative AI products, automation platforms and agentic AI systems do not need to arrive with finished press releases or any prior understanding of how media distribution works.

The agency’s editorial team works with each client to understand the announcement, the product and the key messages that need to be communicated. A professionally written press release is produced and shared with the client for review and approval before anything is distributed. Once approved, the press release goes live across the owned network the same day and distribution through partner and premium channels follows according to the selected package.

Every campaign concludes with a detailed report listing every placement with a live link to each published article. These links serve as investor-facing evidence of media traction, website press mentions, backlinks that build search engine authority and credibility signals that support enterprise sales conversations and funding applications.

---

The Right Time to Build Media Presence in Generative AI and Agentic AI

The generative AI, automation and agentic AI categories are being defined right now. The companies that establish strong media profiles in these categories early will find it significantly easier to attract investment, win enterprise customers and build the kind of industry recognition that compounds over time. Waiting until the market matures to start investing in PR means entering a much more competitive media landscape with less to show for it.

Kooc Media’s PR service gives companies in these categories a fast, reliable and guaranteed route to the coverage that builds that kind of presence — starting with the very first campaign.

Kooc Media’s AI packages are available now through the company’s website at https://kooc.co.uk/ai-pr/.

---

Disclaimer: This is a Press Release provided by a third party who is responsible for the content. Please conduct your own research before taking any action based on the content.

Bitcoin edged around the $64,000 mark as markets closed out the week, with momentum supported by a developing US–Iran diplomatic signal. Traders pointed to expectations that a peace deal would be signed on Sunday, alongside technical stability after a brief push to around $64,750 on Bitstamp.

While the move looks more like consolidation than a breakout, the narrative matters: in the short term, easing geopolitical risk can improve risk appetite for liquid assets such as crypto, especially when traders believe the downside case is losing traction on key chart and derivatives metrics.

Key takeaways

• Bitcoin held above $64,000 near Sunday’s weekly close after trading briefly around $64,750 on Bitstamp.
• US President Donald Trump said the Strait of Hormuz would be “open to all” immediately after a scheduled peace deal signing on Sunday.
• Traders cited the 200-week simple moving average (SMA) as a still-functioning support level, despite historical skepticism around its reliability.
• Derivatives conditions—rising open interest alongside falling funding rates, per trader analysis—were framed as a setup associated with more durable bottoms.

Geopolitics supports the tone as Bitcoin stabilizes

According to price action reviewed on TradingView, BTC settled after local highs of about $64,750 on Bitstamp. That intraday strength followed a message from US President Donald Trump, who wrote on Truth Social that the “Deal is scheduled to get signed tomorrow” and that, “immediately after it is signed,” the Hormuz Strait would be “OPEN TO ALL.”

The potential implication for markets is straightforward: the Strait of Hormuz is a critical global shipping corridor, and any sign—credible or not—of reduced disruption risk can ripple through expectations for energy prices and broader economic volatility. In crypto, that kind of macro relief often shows up first in liquid trading conditions before it reflects in longer-term positioning.

Traders watch the 65,000–67,000 zone closely

On the charts, some traders interpreted the rebound as technically constructive. In a post on X, trader SuperBro said the 200-week SMA was holding as support and described low-timeframe BTC price behavior as “constructive.”

SuperBro also argued against immediate bearish breakdown risks, pointing instead to a level linked to the point of control (nPOC) on exchange order books sitting above current spot prices. Their view framed $65,000 to $67,000 as a major “test,” anchored to the area of the last swing low and volume point of control. They added that if BTC can decisively break through that supply zone, the bearish case would weaken significantly.

Notably, earlier Cointelegraph coverage had discussed skepticism about the 200-week SMA as a “safety net,” saying its historical track record can be “unreliable” in bear markets. That creates a clear tension for investors: the same indicator that looks supportive in the present can fail to protect during prior downturn regimes. Traders appear to be treating the current holding as a useful signal—but not a guarantee.

Open interest and funding rates hint at a “bottom-style” setup

Beyond spot price levels, attention has shifted to derivatives behavior. Trader Cryptic Trades highlighted a combination of rising open interest and falling funding rates on exchanges, arguing that it may reduce the likelihood of longs getting trapped into a new downturn.

In a post on X, Cryptic Trades said, “It’s finally happening,” describing current conditions as signaling a lack of aggressive bullish chasing. Their interpretation was that the market was not behaving as if bulls were confidently adding risk at higher prices; instead, they suggested bears were “doubling down,” increasing short exposure while betting the downtrend wasn’t over.

That distinction is important because it changes how traders read the risk of a reversal. Cryptic Trades argued that when sentiment remains heavily bearish while leverage dynamics improve—specifically with falling funding rates alongside open interest rising—markets can transition from persistent downside pressure into short-squeeze territory. They described the pattern as one that “generally marks durable bottoms,” where price begins moving higher even as most participants keep leaning bearish.

“This is exactly the kind of setup that generally marks durable bottoms. The market starts moving higher, sentiment remains overwhelmingly bearish, and the most keep leaning the bearish. This is how aggressive short squeezes are born.”

Liquidation maps align with the rebound’s timing

CoinGlass liquidation heatmap data, referenced in the article, showed that the local highs coincided with a thick band of potential short liquidations. In practical terms, that means some of the price strength may have been amplified by forced exits: when price rises into areas with crowded short positions, liquidations can accelerate the move.

Even so, liquidation-driven strength can be fragile if it doesn’t transition into sustained demand. That is why traders are focusing on both nearby resistance—such as the $65,000–$67,000 test highlighted by SuperBro—and broader derivatives conditions that would signal whether the market is merely bouncing or genuinely shifting structure.

For now, investors should watch whether Bitcoin can hold gains above the key $65,000–$67,000 zone and whether funding rates continue trending lower while open interest stays elevated, as those together would support the “bottom-style” interpretation. If those conditions reverse—or if the market fails to clear the order-book and volume concentrations—then the rebound may remain constrained rather than marking a durable change.

Ripple CEO Brad Garlinghouse has put a clear number on the company’s 2026 business goal. 

According to posts shared by CoinMarketCap and crypto-focused accounts on X, Ripple expects to end 2026 with a $1 billion revenue run rate. The figure does not include XRP held on Ripple’s balance sheet.

That detail matters because Ripple has long faced public debate over the link between its business and XRP. Garlinghouse’s target frames the company as a fintech infrastructure provider that aims to earn money from products, clients, and services, not from token holdings or sales.

LATEST: 📈 Ripple CEO Brad Garlinghouse says the company expects to end 2026 with a $1B revenue run rate, not including the XRP on its balance sheet. pic.twitter.com/hNF20FBGUw

— CoinMarketCap (@CoinMarketCap) June 14, 2026

Hidden Road, RLUSD and AI payments drive business push

Ripple has expanded beyond cross-border payments during the past year. The company agreed to buy prime broker Hidden Road for $1.25 billion in 2025, a deal that added credit, clearing, and prime brokerage services for large clients. Ripple said Hidden Road clears about $3 trillion a year across markets.

The deal also supports Ripple USD, known as RLUSD. Ripple has promoted the stablecoin for enterprise settlement and collateral use. Recently, crypto.news reported that Ripple is also adding RLUSD to new payment tools, including services tied to AI agents and machine payments on the XRP Ledger.

Company materials point to custody, treasury management, and liquidity services as core offerings. These products target banks and firms that need faster settlement, account control, and access to digital assets through regulated processes, rather than retail trading.

XRP demand stays separate from company revenue

Crypto.news data showed XRP trading near $1.15 on June 14, while XRP-linked ETF products recorded inflows for a fifth straight week. As reported earlier today, XRP products added about $10.68 million in the week ended June 12, even as Bitcoin and Ethereum funds saw outflows during the same period.

Those figures show that investor demand for XRP can move on a different track from Ripple’s operating business. Garlinghouse’s “not including XRP” point places the revenue target outside daily price action. It also gives banks, payment firms, and corporate treasurers a clearer way to judge Ripple’s core business.

Regulation remains part of Ripple’s 2026 plan

Ripple’s growth plan also sits next to a busy U.S. policy calendar. As previously reported, the CLARITY Act cleared the Senate Banking Committee by a 15-9 vote on May 14, 2026. The bill still needs more work before a full Senate vote, including a merger with text from the Agriculture Committee.

Garlinghouse has backed clearer rules for digital assets, saying banks need more legal certainty before they move deeper into crypto services. For Ripple, a rulebook could support payments, custody, liquidity, treasury tools, stablecoins, and token settlement in the United States.

Ripple has also moved into automated payments. As rypto.news reported on June 13, the company released the XRPL AI Starter Kit, which lets AI agents use XRP and RLUSD for payments through the x402 protocol with limited human involvement. The tool allows software agents to create wallets, check balances, track transactions, and send payments.