ESP

Safe responds to the blind signature security incident and recommends multi-device signing

ChainCatcher message, the Safe team reviewed the security incident mentioned in the post-mortem report of Radiant Capital, noting that the Safe {Wallet} front-end functioned normally, but external devices were compromised during the signing process, allowing hackers to replace transaction data and trick signers into signing malicious transactions.The Safe team believes this incident highlights the risks of blind signing, where users approve transactions without fully viewing the transaction details, especially when using hardware wallets. To address this issue, Safe recommends using multiple signing devices from different vendors (for example, a combination of Ledger and Trezor) and connecting these devices through trusted interfaces to enhance transaction visibility and security.Additionally, Safe is exploring technologies like conditional signing to provide more contextual information without sacrificing security. The Safe team is considering directly calculating the Ledger hash in its interface so that users can verify the hash displayed on the hardware wallet and the interface. The Safe team emphasizes that all parties in the ecosystem need to collaborate to address the blind signing issue and is committed to working with hardware wallet providers and the community to improve transaction and message signing processes.

Kaiko: Wash trading by DeFi issuers is still "widespread"

ChainCatcher news, according to Bloomberg, research firm Kaiko stated that the wash trading strategy used to enhance the value of the FBI-created token NexFundAI remains a common practice on decentralized exchanges (DEX) and can also be encountered on certain centralized exchanges.In a report on Thursday, Kaiko analysts indicated that their data shows that among over 200,000 assets on Ethereum DEX, many lack utility and are controlled by individuals; some token issuers are establishing short-term liquidity pools on the exchange Uniswap, controlling the liquidity in the pools and engaging in wash trading to attract other investors; once others enter, the issuers sell off the tokens, achieving returns of up to 22 times their initial Ethereum investment within about 10 days; this analysis reveals widespread fraudulent behavior among token issuers, extending beyond the scope of the FBI's NexFundAI investigation.Kaiko noted that certain centralized exchanges, such as HTX and Poloniex, also appear to have wash trading. According to Kaiko, these exchanges have the highest number of assets, with trading volume to liquidity ratios exceeding 100 times, which may be an indication of wash trading.Kaiko also stated, "We can also see that tokens such as meme coins, privacy coins, and low market cap altcoins often exhibit abnormally high trading volume to depth ratios." Taking the meme coin Pepe as an example, Kaiko found that "in 2024, there is a significant divergence in trading volume trends between HTX and other platforms. The PEPE trading volume on HTX remains high, even increasing in July, while the trading volume on most other exchanges has declined."

Neiro CTO responds to doubts: Choosing Gotbit as a market maker was a stopgap measure driven by the urgency to go public, and he is willing to take responsibility for this judgment error

ChainCatcher news, in response to crypto detective ZachXBT questioning why Neiro initially chose the notoriously poor-reputed Gotbit as a market maker, Neiro's CTO co-leader "S" stated that when Sun Yuchen's tweet announced its listing on HTX, there was actually only a few hours to find one, making time tight. The choice of Gotbit was partly because at that time the market maker offered a retention agreement, which was the most affordable option so far, and partly because the project viewed it as a quick solution for the HTX listing (the agreement with Gotbit was for 3 months), with plans to explore other options when the budget allowed. Additionally, there was a lack of judgment experience in the industry; although they had heard various bad things about Gotbit, they had also heard bad things about almost everyone in the industry, making it difficult to make a judgment."S" also stated: "I had not had direct contact with Gotbit before, so I chose to trust them and gave them a chance. Gotbit also marketed itself as a 'meme coin friendly' market maker, which seemed like an attractive proposition.""S" concluded: "But ultimately, I take full responsibility for this; I should have been more careful. I am deeply pained by this outcome and have paid a huge price for it. At the same time, it has given us a tremendous learning opportunity, forcing us to fundamentally improve the project by collaborating with better and more market makers to reduce counterparty risk and upgrade the market for Neiro trading."Previous news, on-chain detective ZachXBT stated that Neiro should perhaps explain to the community why they initially chose Gotbit, as their reputation has always been poor, and before the U.S. government accused them of fraud and market manipulation this week, there was substantial evidence indicating Gotbit's involvement in price manipulation.
ChainCatcher Building the Web3 world with innovators