ChainCatcher news, Binance CEO Richard Teng stated in the Binance Square AMA titled "Celebrating One Year of Binance CEO" that Binance has a strict and comprehensive due diligence process to determine which tokens or projects can be listed on the platform, including Launchpool, Megadrop, and others.Richard Teng pointed out that there is an independent team within Binance responsible for research and evaluation, and they do not interact with the outside world to ensure their independence and that they are not improperly influenced in decision-making and evaluation.Richard Teng stated that the key criteria for evaluating projects are primarily the quality of the project and the team behind it. Secondly, innovation and the project roadmap, and thirdly, market demand and community involvement in the project's use cases, practical applications, as well as security and compliance.

ChainCatcher news, the on-chain trading terminal DEXX has released an update regarding the recent security incident: "DEXX has officially filed a lawsuit, and the SlowMist team is actively assisting law enforcement with the follow-up investigation. At the same time, DEXX is actively discussing a compensation plan. Regarding compensation, the platform makes the following solemn statement:If all assets can be recovered, DEXX will immediately provide full compensation to ensure that users' interests are not affected.If only part of the assets can be recovered, the platform will still fulfill its compensation responsibilities; the specific compensation plan will be determined based on the amount recovered. DEXX is currently mobilizing all resources and efforts to recover the stolen assets and resolve the issue as soon as possible."Previous news, according to SlowMist statistics, the DEXX incident has confirmed over 900 victims, with total losses estimated at 21 million USD.

ChainCatcher news, according to CryptoSlate, Jason Lowery, author of Softwar and a major in the U.S. Space Force, announced that he has submitted an application to serve as a military advisor to the National Security Council (NSC) and the Office of Science and Technology Policy (OSTP) at the White House. Lowery plans to advise the Department of Defense on the national strategic significance of proof-of-work (PoW) technology and propose policies related to strategic Bitcoin reserves and U.S. computational power forces. He believes that PoW technology can serve as a non-kinetic defense system, deterring cyber threats by imposing physical costs on electricity consumption.

ChainCatcher message, the DEXX official stated on social media, "Regarding the DEXX asset theft incident, the team has made some progress internally and is applying through legal channels to mark the hacker's wallet address. We are in the process of marking the hacker's address and requesting assistance from the Solana Foundation.Once marked, the hacker will not be able to deposit into any trading platform or exchange for fiat currency through any means. We are currently collaborating with multiple security agencies to trace the hacker's information and have filed cases in several locations. We will synchronize any publicly available information on X/Telegram."

ChainCatcher news, according to Fox Business reporter Eleanor Terrett's post on the X platform, some Republican members of the Financial Services Committee, led by U.S. Congressman John Rose, have sent a letter to SEC Chairman Gary Gensler and FINRA CEO Robert Cook, expressing concerns about their continued silence regarding the Ethereum custody service launched by Prometheum Inc. in May of this year, which the relevant regulatory agencies believe falls under the so-called "crypto asset securities."The letter points out that the silence of these agencies on this matter indicates that, given the SEC has already acknowledged that ETH is not a security, and the term "crypto asset securities" does not apply to the tokens themselves but rather to the manner in which the tokens are sold, it has created market confusion and uncertainty.John Rose stated in the letter: "Participants in the digital asset space deserve certainty from regulators, yet under Gary Gensler's leadership, they have only received chaos and confusion. I hope that as Chairman Gary Gensler cleans out his office, he will seriously listen to our concerns and provide some real guidance before he leaves."

ChainCatcher news, Matrixport's RWA platform Matrixdock has announced a strategic partnership with global leader in secure logistics and asset protection, Brink's, to provide efficient and secure transportation and custody services for Matrixdock's gold token (XAUm). Currently, this service primarily covers vaults in Singapore and Hong Kong.XAUm is a high-standard, innovative gold token fully backed by physical gold bars with a purity of no less than 99.99% according to LBMA (London Bullion Market Association) specifications, with each XAUm token anchored to one troy ounce of LBMA physical gold bars. Brink's, with its extensive experience in secure asset management and its outstanding global reputation, will ensure the safe transportation of the underlying LBMA gold assets of XAUm and store them in its highly secure, fully insured world-class vaults. This partnership further enhances the trust of global investors, especially those in the Asia-Pacific region, in XAUm.

ChainCatcher news, the Web3 vulnerability bounty platform Immunefi has imposed a 90-day suspension on the white hat security company Trust Security. This decision was made after the latter accused Immunefi of unfairly refusing to pay a bounty for a critical vulnerability that could lead to funds being stolen.On November 12, Trust Security revealed on X that its bounty team had discovered a significant fund theft vulnerability on the forked mainnet of an unnamed project. The proof of concept for the vulnerability has been shared with Immunefi, which acts as an intermediary between white hats and projects to ensure bounties are paid for credible vulnerability identification.However, Immunefi stated that Trust Security detected a vulnerability that was out of scope. Trust claimed that Immunefi erroneously sided with the project’s "nonsense," only offering a "meager goodwill bounty" without providing the full reward for identifying the critical vulnerability.Immunefi rebutted Trust's claims of unfair compensation and issued a 90-day suspension order on the grounds of "misrepresentation of the current issue." Immunefi stated that if Trust commits any further violations, it will impose a permanent ban.

ChainCatcher news, Circle founder and CEO Jeremy Allaire recently responded to a user on X, stating: "Many people do not realize that cryptocurrencies actually represent infrastructure improvements in security, user control, and accountability. Discussions often focus on 'better, faster, cheaper,' but the underlying technological breakthroughs are related to security and robustness in many ways. Most regulators have also failed to understand this."

ChainCatcher news, the re-staking protocol Swell announced on X that the SWELL token will be re-staked through Symbiotic to provide security for Swell L2 infrastructure services, such as Rollup ordering, oracles, and cross-chain bridging. In return, re-staking participants will receive rSWELL, thereby accumulating Symbiotic points and future staking rewards.Previous news, the re-staking protocol Swell Network announced that SWELL claims will open on November 7 at 17:00, and revealed the SWELL token economic model.

ChainCatcher news, identity and access management software provider Okta officially stated that on October 30, 2024, an internal vulnerability was discovered in the AD/LDAP DelAuth when generating cached keys. The Bcrypt algorithm is used to generate cached keys, where we hash the combination string of userId + username + password. Under specific conditions, this can allow users to authenticate simply by providing a previously successfully authenticated stored cached key to the username.The prerequisite for this vulnerability is that the username must be equal to or exceed 52 characters each time a cached key is generated for the user. The affected products and versions are Okta AD/LDAP DelAuth as of July 23, 2024, and this vulnerability has been resolved in Okta's production environment on October 30, 2024.

ChainCatcher news, OKLink released the October 2024 security monthly report, stating that the cumulative losses from on-chain security incidents across the network amount to approximately $181 million. Losses from phishing scams account for 23.94% of the total losses, totaling about $43.53 million. REKT incidents account for 35.92% of the losses, totaling about $65.32 million.On October 11, a user on Blast lost 15,079 fwDETH after signing a phishing "permit" signature, worth approximately $35 million. On October 16, multiple multi-signature wallets of Radiant Capital were attacked, with the attacker injecting malware into hardware wallets, compromising several developers' hardware wallets. The attack process was so covert that the front end of the Gnosis Safe multi-signature wallet displayed legitimate transaction data, while the back end was simultaneously signing and executing tampered transactions, ultimately leading to losses of about $58 million.In this month's security incidents, the methods of attack are constantly evolving. OKLink reminds users to be particularly vigilant against phishing attacks involving "permit" and "approve" authorizations on social platforms, as these types of attacks have occurred frequently this month. When performing on-chain operations, it is essential to carefully verify the receiving address and not to easily trust the addresses in transaction records, as they may have been replaced by hackers. For multi-signature wallets, it is crucial to strictly protect the security of private keys, and when handling emails related to crypto assets, carefully verify the sender's identity and the authenticity of the content, and learn to use Web3 on-chain tools to mitigate risks.

ChainCatcher news, the innovative Web3 social trading platform SOEX will officially launch its Beta Testnet at 8 PM Singapore time on November 1st, and will continuously roll out a security bounty program worth over $200,000 on the leading bug bounty platform BugRap.SOEX has undergone dual security audits by renowned auditing firms 0xCommit and ExVul, demonstrating the platform's high standards and emphasis on security. As a cryptocurrency trading aggregation tool that combines social features with professional trading, SOEX provides users with a seamless trading experience through Nostr+, TradeDivi, and Sketch protocols, integrated into the Solana application scenario. This event marks an important step for SOEX in terms of security and innovation in the Web3 social trading space.

ChainCatcher message, Binance's former CEO Zhao Changpeng responded to users receiving emails about "the file download link included in the Giggle Academy email" by saying, "Tell the team this is the wrong way to invite. Cryptocurrency professionals should never download files from emails. This is a huge security risk and will be fixed."

ChainCatcher news, Slow Mist founder Cosine stated that Lottie Player was attacked by supply chain poisoning, with Ace Drainer related to phishing gangs poisoning the front-end script module Lottie Player relied on by well-known Web3 projects. Fortunately, it was discovered in time, and the impact should be minimal.If your project uses the Lottie Player module, please check whether there is any malicious code introduced (currently known versions 2.0.4 and the latest 2.0.8 do not contain malicious code).

ChainCatcher news, the privacy-preserving computing network Nillion has completed a $25 million financing round, led by Hack VC. This financing brings Nillion's total funding to over $50 million, with investors including Hack VC, Distributed Global, and HashKey. Nillion has already established partnerships with NEAR, Aptos, Arbitrum, Mantle, IO.net, Ritual, and others, and its ecosystem currently has over 40 builders.

ChainCatcher news, according to CoinDesk, the privacy-preserving computing network Nillion has completed a $25 million funding round, led by Hack VC. This funding brings Nillion's total financing to over $50 million, with investors including Hack VC, Distributed Global, and HashKey.According to RootData, Nillion is a decentralized public network based on a new cryptographic primitive called Nil Message Compute (NMC), which allows nodes in a decentralized network to operate in a unique, non-blockchain manner. Nillion unlocks important new utilities in Web3 by enabling use cases such as decentralized credit scoring, decentralized trusted execution environments, private NFTs, and decentralized secure storage services.Previously reported, in December 2022, Nillion completed a $20 million funding round, led by Distributed Global, with participation from AU21, Big Brain Holdings, Chapter One, GSR, HashKey, OP Crypto, and SALT Fund.

ChainCatcher news, according to Slow Mist founder Yu Xian, the official X account of the hardware wallet Keystone has been hacked, and users should pay attention to related security.