ChainCatcher message, regarding Xmail related features, Binance co-founder Zhao Changpeng responded to Musk on the X platform: "It would be great if native support for end-to-end encryption of self-generated PGP keys could be provided."

ChainCatcher message, SolTradingBot issued a statement regarding the rumors of an attack event, stating: "All malicious rumors are false. We have received allegations that STBOT is invading user wallets and draining their SOL. However, after a thorough investigation, we confirm that this is entirely a fabricated post aimed at damaging our reputation. The investigation results show that the so-called 'hacker wallet' is actually controlled by users holding the private keys. We are still investigating the motives behind these funds, but it is likely related to malicious actions intended to discredit and harm us. SolTradingBot remains firmly supportive of our users. We are always ready to address and clarify any issues. Please be vigilant against wrongdoers and their harmful intentions."

ChainCatcher message, regarding the recent market attention on the quantum computer chip Willow and the freezing of Satoshi Nakamoto's private key, Slow Mist founder Yu Xian quoted crypto researcher Jeffrey Scholz's tweet: "The current dozens of quantum gates are still millions of gates away from being able to crack Bitcoin private keys. Increasing this number of quantum gates is not easy, and the noise and error rates will also increase, ultimately resulting in a quickly produced waste in the real world... Let's worry about Satoshi's private key in a few decades."

ChainCatcher news, blockchain security audit company CertiK has issued a statement saying that it has recently received a large number of requests for help from users of the DEXX platform, who reported that their account assets had been emptied. After verification, CertiK confirmed that this security incident occurred on the Solana chain, which is not within CertiK's audit coverage.CertiK stated that the main reason for the incident was improper private key management on the DEXX platform, leading to the leakage of the official private key.It is reported that the large-scale theft of user assets on the DEXX trading platform has currently confirmed that the stolen funds have reached over 100 million yuan, and the hackers are still continuing their attacks. CertiK reminds all blockchain projects and users that the secure storage and management of private keys is key to ensuring asset safety.

ChainCatcher message, according to Scam Sniffer monitoring, the malware "EdtiProAI" is attempting to exploit X ads to target potential victims. If users mistakenly install this software, their wallet private keys will be at risk.

ChainCatcher message, Slow Mist founder Yu Xian posted on the X platform: "Be careful, the official X account of the hardware wallet Keystone has been hacked, be cautious of any information posted (including direct messages), don't get phished."

ChainCatcher news, according to Slow Mist founder Yu Xian, the official X account of the hardware wallet Keystone has been hacked, and users should pay attention to related security.

ChainCatcher news, recently, McAfee discovered a new type of Android malware named SpyAgent, which can steal users' private keys by taking screenshots and using optical character recognition (OCR) technology on text within images. This malware spreads through malicious links in text messages; when users click the link, they are directed to a page disguised as a legitimate website and prompted to download a seemingly trustworthy application. Once installed, the malware can access users' contacts, messages, and local storage permissions. Currently, SpyAgent primarily targets South Korean users and has been found in over 280 fraudulent applications. Additionally, malware attacks are on the rise in 2024. The Cthulhu Stealer, discovered in August, affected MacOS systems and stole users' cryptocurrency wallet information. In the same month, Microsoft patched a vulnerability in Google Chrome that had been used by the North Korean hacker group Citrine Sleet to disguise fake cryptocurrency exchanges and spread malware through fraudulent job applications. The Federal Bureau of Investigation (FBI) has issued a warning, alerting the public that the cryptocurrency industry is becoming a primary target for North Korean hackers.

ChainCatcher message, Slow Mist founder Cosine posted on social media to alert users of Seif Wallet that a small portion of private keys and passwords have been collected by the built-in third-party analytics platform in the wallet. Fortunately, this was discovered and reported by white hats. It doesn't seem like the third-party analytics platform is malicious; it feels similar to previous cases: mistakenly using Sentry to collect overly sensitive information that shouldn't have been collected.

ChainCatcher message, Sun Yuchen stated on social media: "Recently, I heard that the community has some concerns about my involvement in multiple projects including WBTC. I would like to clarify the following points:There have been no changes to WBTC compared to before. Audits are conducted in real-time and can be accessed via http://wbtc.network. The minting process is entirely managed by custodians Bitglobal and Bitgo according to the same procedures as before. Simply put, Bitglobal and Bitgo will not sign any unaudited transactions. The keys are still protected using the same Bitgo cold wallet technology and offline keys as before, with backups in multiple countries and regions.My personal involvement in WBTC is purely for strategic reasons. I do not control the private keys of the WBTC reserves, nor can I move any BTC reserves."

ChainCatcher news, according to Cointelegraph, the latest report shows that security researchers have discovered a new attack mechanism called "Dark Skippy," which hackers can use to extract private keys from Bitcoin hardware wallets that only have two-signature transactions. This vulnerability could affect all hardware wallet models, but it only activates when victims are tricked into downloading malicious firmware.The previous version of "Dark Skippy" required dozens of transactions to be effective, while the new version of "Dark Skippy" can execute with just a few transactions. Additionally, the attack can be carried out even if users rely on separate devices to generate their mnemonic phrases.The disclosure report was published by Lloyd Fournier, Nick Farrow, and Robin Linus. Fournier and Farrow are co-founders of the hardware wallet manufacturer Frostsnap, while Linus is a co-developer of the Bitcoin protocols ZeroSync and BitVM.

ChainCatcher news, according to the official WeChat account of Ping An Xuhui, employees of Company A, Zhang, Dong, and Liu, decided in early March 2023 to add a backdoor program to a certain virtual currency wallet software to obtain user private keys. By the end of May 2023, after saving the stolen private keys and the corresponding digital wallet addresses, the three destroyed the servers and databases, agreeing that these private keys could only be used to illegally obtain users' virtual currency two years later. The three illegally obtained more than 27,000 mnemonic phrases and over 10,000 private keys, successfully converting more than 19,000 digital wallet addresses. In April 2024, the Xuhui District People's Court sentenced defendants Liu, Zhang A, and Dong to three years in prison for illegally obtaining data from computer information systems, and fined them 30,000 yuan.However, strangely, the reporter Ou was not stolen from by the aforementioned three (not yet at the agreed time). Upon investigation, it was found that in another virtual wallet software platform used by Ou, a backdoor program was also implanted by Zhang B, who had previously worked at Company A. In July 2021, he wrote a piece of code in the client code to collect user private keys and mnemonic phrases. When users traded virtual currency, the code would automatically obtain the mnemonic phrases or private keys used by the user for signing operations and send them to Zhang B's email.In April 2023, due to personal financial pressure, Zhang B learned Ou's virtual wallet address through the illegally obtained mnemonic phrases and private keys, transferring all the virtual currency to his own wallet address. Zhang B illegally obtained more than 6,400 user private keys and mnemonic phrases, and was sentenced to three years in prison for illegally obtaining data from computer information systems, and fined 50,000 yuan.It is worth noting that Company A is suspected to be the original Huobi company. In 2023, due to former employees setting up Trojans, some users' mnemonic phrases or private keys of iToken (original Huobi wallet) have been leaked. HTX responded that the Trojan was set up by former Huobi employees before the acquisition, stealing others' mnemonic phrases and private keys. HTX stated that it is cooperating with the Shanghai Public Security Bureau to conduct investigations and evidence collection.

ChainCatcher news, the real-world asset (RWA) credit protocol Zivoe has announced the completion of a $8.35 million funding round, with investors including Andrew Keys, Iceberg Capital, and Concave. The funds will be used to expand credit channels, and Zivoe plans to launch its credit protocol on July 31, along with the Initial Tranche Offering (ITO), where liquidity providers can deposit stablecoins into Zivoe's senior or junior pools and receive tokens in return.Additionally, the Web3 asset data platform RootData shows that Zivoe is a real-world asset credit protocol that disrupts predatory high-interest consumer lending while bringing consumer loan proceeds on-chain. It acts as a bridge between traditional finance and on-chain finance, facilitating the connection between on-chain liquidity and real-world borrowers.

ChainCatcher message, regarding the wallet attack incident on the Bittensor chain, on-chain detective ZachXBT monitored and discovered that an address starting with 5FbWTr had 32,000 TAO (worth 8 million USD) stolen.ZachXBT stated that the attack incident faced by Bittensor originated from a stolen private key.

ChainCatcher message, Consensys has released an update to the MetaMask privacy statement, which mainly includes:A clearer explanation of which specific elements in the privacy statement are related to MetaMask and what each element means for MetaMask users. This includes increasing transparency on how IP addresses are handled when using MetaMask;Additional background information related to Consensys's overall personal information processing activities;A clear definition of the products and services covered by the privacy statement, removing Codefi and Quorum, and adding MetaMask Institutional, MetaMask Developer, Linea, Teku, Besu, and Phosphor.For MetaMask users, Consensys will:Not collect private keys;Not sell personal information;Not collect or retain personal information unless necessary to provide services and a good user experience;Not collect financial payment or banking information; however, when users utilize deposit and withdrawal functions, these services may require submitting this information to third-party providers.

ChainCatcher message, friend.tech posted on the X platform stating that users can now mint NFTs using Bunnilio. The general process is as follows: send a key and exchange it for your own rabbit-themed PFP.