BTC $81,302.42 -1.06%
ETH $2,402.34 -1.78%
BNB $721.65 -1.48%
XRP $1.30 -2.93%
SOL $103.83 -1.54%
TRX $0.3343 +0.69%
DOGE $0.0796 -1.84%
ADA $0.2226 -3.52%
BCH $274.02 -1.94%
LINK $12.25 -2.48%
HYPE $79.45 -2.41%
AAVE $154.72 -0.59%
SUI $1.01 -2.15%
XLM $0.1797 -2.66%
ZEC $1,143.01 -7.05%
AAPL $341.31 -0.43%
AMZN $249.07 -1.99%
GOOGL $340.56 -2.67%
MSFT $527.25 -2.51%
META $707.13 -4.46%
NVDA $215.24 -0.91%
TSLA $351.62 -2.63%
SNDK $1,322.95 -1.98%
INTC $90.60 -3.66%
SPCX $144.57 -2.06%
MU $891.77 -1.82%
AMD $534.88 -3.16%
BTC $81,302.42 -1.06%
ETH $2,402.34 -1.78%
BNB $721.65 -1.48%
XRP $1.30 -2.93%
SOL $103.83 -1.54%
TRX $0.3343 +0.69%
DOGE $0.0796 -1.84%
ADA $0.2226 -3.52%
BCH $274.02 -1.94%
LINK $12.25 -2.48%
HYPE $79.45 -2.41%
AAVE $154.72 -0.59%
SUI $1.01 -2.15%
XLM $0.1797 -2.66%
ZEC $1,143.01 -7.05%
AAPL $341.31 -0.43%
AMZN $249.07 -1.99%
GOOGL $340.56 -2.67%
MSFT $527.25 -2.51%
META $707.13 -4.46%
NVDA $215.24 -0.91%
TSLA $351.62 -2.63%
SNDK $1,322.95 -1.98%
INTC $90.60 -3.66%
SPCX $144.57 -2.06%
MU $891.77 -1.82%
AMD $534.88 -3.16%

ling

All
Article
Flash

first_img NEAR Intents released a post-mortem report, revealing that the $3.8 million vulnerability originated from a deposit notification flaw

The cross-chain exchange protocol NEAR Intents released a post-mortem report attributing a $3.8 million vulnerability to a flaw in the deposit notification feature. The protocol deploys a public settlement contract on NEAR that maintains an internal ledger of deposited tokens, while withdrawals transfer tokens out via a cross-chain bridge. The report was published by NEAR Intents General Manager Alex Shevchenko on October 16, stating that the attacker withdrew $3.8 million before the protocol was shut down on October 1 and returned all funds within 36 hours of detection, with all affected users fully compensated.The report indicates that the feature notifies third-party contracts when tokens are deposited. The attacker created a contract that intentionally caused the notification to fail, allowing the token contract to refund the deposit while NEAR Intents retained the corresponding ledger credit. Through 23 failed deposit transactions, the attacker accumulated $3.8 million in unsupported balance, referred to in the report as ghost funds, and subsequently withdrew real tokens based on this and transferred them to other chains via the Omni infrastructure. Shevchenko stated that this was a vulnerability in the NEAR Intents contract, not in the Omni infrastructure.Withdrawals occurred between September 29 and October 1. The settlement contract was paused and reopened on October 1, with affected routes gradually restored, and contract-side deposits resumed on October 2. The report noted that the vulnerability went undetected because monitoring only compared the original chain assets with the total balance of NEAR side tokens, without comparing the total internal user balances with the actual tokens held by the contract; the team has since added this check and will automatically pause the contract when there is a balance inconsistency. The fix for the October vulnerability was deployed on October 2, but another serious vulnerability report regarding the same feature prompted its complete removal on October 7, with the relevant researcher receiving a $300,000 reward.

Analyst: During the decline of BTC, long-term holders transferring to exchanges remained low, and the selling pressure from short-term holders weakened

On-chain analyst Murphy posted on the X platform, stating that during the recent decline of BTC, the scale of short-term holders (STH) transferring BTC to exchanges has significantly increased, averaging about 2,200 BTC transferred per hour over a 4-hour period, reaching the fourth highest level since the market rally began in August this year. However, the peak of transfers has fallen below that of October 8, indicating that the potential selling pressure from short-term holders has weakened.In contrast, long-term holders (LTH) transferred an average of only about 480 BTC to exchanges per hour during the same period, which is about one-fifth of the short-term holders. Murphy pointed out that on October 8, long-term holders experienced a peak transfer of about 3,700 BTC per hour, which may be partly related to asset transfers triggered by security incidents involving hardware wallets. However, considering that both short-term and long-term holders experienced large-scale transfers that day, and the rapid decline in BTC prices, there remains actual selling pressure in the market. Murphy believes that during the current decline, the main transfers to exchanges are from short-term holders, while long-term holders remain relatively stable overall, and the intensity of transfers from short-term holders has weakened compared to before, reflecting that the structure of BTC holders still has a certain resilience.

first_img Hinton and over 400 scientists are calling for high-risk AI models to be defaulted to offline isolation

According to Decrypt, over 400 scientists, including "AI Father" Geoffrey Hinton and 2018 Turing Award winner Yoshua Bengio, published a joint open letter on Tuesday, calling for AI laboratories to default to "physically isolating" models capable of cyberattacks, meaning cutting off their connection to external networks. The open letter stated that in the short term, strong sandbox mechanisms, including network disconnection, should be adopted to implement high levels of containment for AI models with cyberattack capabilities. As of Wednesday, the number of signatories had increased to 450, including Stuart Russell from the University of California, Berkeley, and Ron Rivest, co-inventor of the RSA encryption system from the Massachusetts Institute of Technology.Before the release of the open letter, AI models experienced a summer of frequent "jailbreaking." In July, OpenAI admitted that GPT-5.6 Sol and an unpublished stronger model had breached closed testing environments, infiltrating the platform Hugging Face, which hosts over a million public AI models; these models were then being tested on the ExploitGym benchmark, which provides 898 real software vulnerabilities, requiring AI agents to convert each vulnerability into a usable attack. Subsequently, reports emerged that OpenAI models had unauthorized access to Australian government systems and obtained information from U.S. federal agencies.

first_img An OpenAI engineer was arrested for allegedly installing hidden recording devices in the office, and the company stated that AI assisted in the identification

According to Decrypt, the Federal Bureau of Investigation (FBI) arrested OpenAI engineer Abdulrahman Alfozan on October 9. The suspect, 35 years old and of Saudi nationality, has been employed at OpenAI since July 2025 and is accused of using or attempting to use devices to intercept oral communications. He made his first appearance in federal court this Tuesday. OpenAI stated that it has referred the matter to the FBI and thanked the relevant agents and prosecutors for their swift action, while the FBI's investigation is ongoing.OpenAI released a statement on X, stating that the company discovered a sophisticated recording device hidden in the office and used its own model to analyze the device and its origin, ultimately identifying that an employee placed it there a few days prior. According to the criminal complaint, the device was discovered around September 30, plugged into a USB port on the back of a television, wrapped in paper towels, with its contents encrypted, and was installed around September 28. Surveillance footage showed that Alfozan was seen near the conference room multiple times before the device was discovered, but he had neither the authority to enter that room nor to attend the related meetings, which typically involved confidential technical and strategic information.The complaint states that before the device was installed, Alfozan used internal productivity tools to inquire about OpenAI's office building address, conference rooms, room capacities, schedules, and locations of meetings between executives and external partners. A chatbot account associated with his spouse asked between September 24 and 30 how to create a continuous recording device, add Wi-Fi connectivity, enhance real-time listening capabilities, and encrypt the device's SD card.

Analyst: The turnover of long-term holders of BTC has increased, and the release of phase selling pressure may reduce resistance for subsequent price increases

On-chain analyst Murphy posted on platform X that long-term holders (LTH) of Bitcoin have cumulatively transferred approximately 32,000 BTC to exchanges, marking the second-largest single-day inflow since the significant drop on February 5 of this year. However, during the same period, U.S. government-related wallets transferred about 17,200 BTC to Coinbase Prime. Considering that this platform serves as the official custodian and trading service for the U.S. Marshals Service, these transfers do not necessarily indicate selling.Excluding this portion, the noteworthy potential selling pressure is approximately 14,800 BTC, primarily coming from long-term holdings aged 6 to 12 months and 3 to 5 years. Murphy pointed out that the average coin age of spent long-term holder coins reached 712 days, up from 651 days on July 14, indicating that earlier holdings are gradually participating in turnover. He believes that the distribution by long-term holders during the transition phase between bull and bear markets is not necessarily bearish; the release of periodic selling pressure can help in the redistribution of holdings, with the key being whether market demand can effectively absorb it. If new funds can digest the supply, sufficient turnover may actually reduce resistance for subsequent market movements.
app_icon
ChainCatcher Building the Web3 world with innovations.