BTC $81,104.06 -0.35%
ETH $2,366.58 -1.92%
BNB $711.95 -0.41%
XRP $1.27 -1.60%
SOL $102.25 -1.19%
TRX $0.3323 -0.67%
DOGE $0.0777 -2.10%
ADA $0.2155 -2.40%
BCH $269.13 -1.67%
LINK $11.76 -1.74%
HYPE $77.34 -1.89%
AAVE $149.13 -1.88%
SUI $0.9601 -1.97%
XLM $0.1741 -2.15%
ZEC $1,085.83 -4.05%
AAPL $343.13 -0.04%
AMZN $249.00 -0.09%
GOOGL $339.49 +0.05%
MSFT $527.91 +0.15%
META $702.38 -0.81%
NVDA $212.25 -1.00%
TSLA $349.14 -0.76%
SNDK $1,252.75 -3.39%
INTC $87.28 -2.34%
SPCX $142.88 -1.79%
MU $858.24 -1.98%
AMD $518.08 -2.28%
BTC $81,104.06 -0.35%
ETH $2,366.58 -1.92%
BNB $711.95 -0.41%
XRP $1.27 -1.60%
SOL $102.25 -1.19%
TRX $0.3323 -0.67%
DOGE $0.0777 -2.10%
ADA $0.2155 -2.40%
BCH $269.13 -1.67%
LINK $11.76 -1.74%
HYPE $77.34 -1.89%
AAVE $149.13 -1.88%
SUI $0.9601 -1.97%
XLM $0.1741 -2.15%
ZEC $1,085.83 -4.05%
AAPL $343.13 -0.04%
AMZN $249.00 -0.09%
GOOGL $339.49 +0.05%
MSFT $527.91 +0.15%
META $702.38 -0.81%
NVDA $212.25 -1.00%
TSLA $349.14 -0.76%
SNDK $1,252.75 -3.39%
INTC $87.28 -2.34%
SPCX $142.88 -1.79%
MU $858.24 -1.98%
AMD $518.08 -2.28%

aw

All
Article
Flash

first_img NEAR Intents released a post-mortem report, revealing that the $3.8 million vulnerability originated from a deposit notification flaw

The cross-chain exchange protocol NEAR Intents released a post-mortem report attributing a $3.8 million vulnerability to a flaw in the deposit notification feature. The protocol deploys a public settlement contract on NEAR that maintains an internal ledger of deposited tokens, while withdrawals transfer tokens out via a cross-chain bridge. The report was published by NEAR Intents General Manager Alex Shevchenko on October 16, stating that the attacker withdrew $3.8 million before the protocol was shut down on October 1 and returned all funds within 36 hours of detection, with all affected users fully compensated.The report indicates that the feature notifies third-party contracts when tokens are deposited. The attacker created a contract that intentionally caused the notification to fail, allowing the token contract to refund the deposit while NEAR Intents retained the corresponding ledger credit. Through 23 failed deposit transactions, the attacker accumulated $3.8 million in unsupported balance, referred to in the report as ghost funds, and subsequently withdrew real tokens based on this and transferred them to other chains via the Omni infrastructure. Shevchenko stated that this was a vulnerability in the NEAR Intents contract, not in the Omni infrastructure.Withdrawals occurred between September 29 and October 1. The settlement contract was paused and reopened on October 1, with affected routes gradually restored, and contract-side deposits resumed on October 2. The report noted that the vulnerability went undetected because monitoring only compared the original chain assets with the total balance of NEAR side tokens, without comparing the total internal user balances with the actual tokens held by the contract; the team has since added this check and will automatically pause the contract when there is a balance inconsistency. The fix for the October vulnerability was deployed on October 2, but another serious vulnerability report regarding the same feature prompted its complete removal on October 7, with the relevant researcher receiving a $300,000 reward.

CoinShares: Digital asset investment products saw an outflow of 434 million dollars this week

According to the CoinShares market report, the U.S. September CPI rose by 0.6% month-on-month and 3.7% year-on-year, exceeding the market expectation of 3.6%. Gasoline prices increased by 9.1% for the month, accounting for about half of the overall increase. The core CPI rose by 0.3% month-on-month and 2.6% year-on-year. During the same period, U.S. September retail sales grew by 0.8% month-on-month, higher than the expected approximately 0.3%, with August data revised up to 1.3%. However, retail sales excluding gasoline only grew by 0.2%, lower than August's 1%.The report pointed out that inflation remains high, and economic demand also remains resilient, leading the market to reprice the Federal Reserve's policy in a hawkish manner, causing Bitcoin and the overall digital asset market to decline. Data shows that since the CPI was released, market sentiment has significantly weakened, with global digital asset investment products seeing an outflow of $434 million so far this week. Regarding interest rate expectations, as of October 15, Polymarket data shows that the probability of the Federal Reserve maintaining interest rates at the October meeting is about 75%, while the probability of a 25 basis point rate hike is about 25%. After the CPI release, the futures market clearly shifted to a hawkish stance, with expectations for another rate hike within the year rising significantly.

first_img Samsung Electronics lowers the production of mid-range and low-end smartphones in the fourth quarter, as the supply of PCB raw materials is hindered

According to a report by ZDNet Korea on October 15, Samsung Electronics has lowered its production plan for mid-range and low-end smartphones in the fourth quarter. The reasons include rising prices of memory chips and disruptions in the supply of glass fiber used in PCB raw materials CCL. Japan's Nitto Denko is shifting more production capacity towards T-glass for AI semiconductors, reducing the output of E-glass for smartphone PCBs, leading to supply shortages and price increases. E-glass is used in semi-cured sheets for smartphone motherboards HDI and RFPCB.The report states that after the rise in storage prices increased manufacturing costs, Samsung reduced orders for related components. Models like the Galaxy A have lower profitability, making it difficult to significantly increase production. This year, the prices of basic mid-range models have risen by more than 100,000 Korean Won compared to the previous generation. The outlook for component orders communicated to partners for the fourth quarter corresponds to an annual smartphone shipment volume of just over 230 million units, which is below the component industry's expectation of 240 million units and represents a decrease of 20% to 30% compared to before the Mid-Autumn Festival holiday. Plans for the mobile business next year have not been shared with partners as in previous years.The monthly production outlook for the fourth quarter in mid-September was 14.3 million units in October, 9.5 million units in November, and 7.6 million units in December, totaling 31.4 million units. This was adjusted at the beginning of this month to 9.9 million units in October, 7.6 million units in November, and 6.7 million units in December, totaling 24.2 million units, a reduction of 23%. While the production of mid-range and low-end models has been lowered, the shipment plans for flagship models like the Galaxy S27 at the beginning of next year remain at a high level, and the shipment volume for foldable phones is also planned to increase. The MX and Network divisions reported a loss of 735 billion Korean Won in the second quarter, with the securities industry projecting an annual loss of 400 billion Korean Won.
app_icon
ChainCatcher Building the Web3 world with innovations.