Q: What is the only known exploit that successfully manipulated Bitcoin's total supply, even briefly?

JPMorgan Chase, Citigroup, Bank of America, Wells Fargo, and other major U.S. banks confirmed plans to build a shared tokenized deposit network through The Clearing House, targeting launch in the first half of 2027. The system will convert traditional bank deposits into blockchain-based tokens that can move quickly around the clock, while keeping funds inside the regulated banking system. Stablecoins, by contrast, threaten to relocate customer balances and their corresponding lifetime value relationships outside the regulated banking perimeter altogether.

Strategy sold 32 Bitcoin between May 26 and May 31 at an average of $77,135 per coin, raising about $2.5 million, accounting for roughly 0.0038% of its 843,706 BTC treasury, with proceeds earmarked to fund distributions on preferred stock. Despite accounting for less than a tenth of a percent of the company’s BTC reserve, the sale marks a dramatic shift in tone for Strategy after Saylor spent years encouraging investors to "never sell" their BTC. In the resulting market action following widespread news of the sale, BTC fell below $62,000.

Security engineer Taylor Hornby, hired by Shielded Labs for a protocol review, discovered the bug on May 29 using a custom AI auditing framework paired with Claude Opus 4.8. The flaw resided in two lines of code within the Orchard circuit and allowed a malicious actor to create counterfeit ZEC inside the shielded pool with no onchain signature. Because Orchard is a privacy pool, there is no way to cryptographically determine whether the vulnerability was exploited between May 2022 and June 2026. The privacy properties that make Orchard valuable are the same properties that make exploitation undetectable. ZEC crashed somewhere between 38–45% on the disclosure.

Hemi's migration from op-geth to op-reth is progressing, with the team conducting final integration testing and fuzzing. The incident last week reinforced the importance of confirming functional equivalence between the two clients before fully cutting over — and that work is ongoing.

Work on the ZK Proving Marketplace is progressing alongside the op-reth migration, with a community testnet beta planned for the near future. More details to follow as testing matures.

The veHEMI contract upgrade completed roughly a week and a half ago, unblocking the next distribution cycle. A new rewards contract is being deployed, and the next batch of rewards should go out within approximately two weeks.

A brief liveness issue hit mainnet after a bug in an hVM precompile was exploited via an L1-to-L2 force inclusion vector that wasn't caught in the initial risk assessment. The patch is live, the network is fully recovered, and no funds were at risk.

Read full report.

While serving as a vibrant hub for the community, Hemi’s Discord is also where you can earn from a $HEMI prize pool by competing in onchain games.

The second Hemi x Hair Tournament has wrapped, with the top three players claiming their share of 7,500 HEMI in prizes:

3,500 for first place

2,500 for second place

1,500 for third place

An additional 7,500 HEMI will be distributed equally among all participants, with rewards going out within ten days.

And it's not over! A new round is launching soon, giving everyone, including first-timer, another shot at the leaderboard.

Join Hemi’s Discord to see if you can win a share of the prize pool.

This week's Midweek with Max addressed a resolved mainnet liveness incident before covering ongoing progress on the op-reth migration, MinerFi, and the ZK Proving Marketplace.

Catch the full recap.

Join Hemi’s Discord to send questions for Max ahead of next week’s AMA.

This episode of Built on Hemi features Hemi Marketing Director, Jeremy Nation, joined by Head of Business Development at DIA, Dillon Hanson, as the two discuss how the decentralized oracle protocol interfaces with Hemi and what that means for the data infrastructure powering the ecosystem.

See the full show.

Are you making the next killer app on Hemi? Got a burning question? Join Hemi’s Engineering Team’s in Discord for Office Hours. These Q&A sessions shift to accommodate those in other timezones. The next one is set for next week on Wednesday at 4PM PDT, 7 PM EDT, 23:00 UTC.

A: In August 2010, an anonymous hacker exploited an integer overflow bug to conjure 184 billion BTC out of thin air, an amount of nearly 9,000 times the entire intended supply. Satoshi Nakamoto personally patched the client and forked the network within five hours, erasing the transaction entirely. The attacker was never identified.