BTC $75,933.00 -5.32%
ETH $2,247.77 -7.23%
BNB $690.29 -3.58%
XRP $1.23 -5.64%
SOL $89.25 -6.45%
TRX $0.3174 -0.69%
DOGE $0.0719 -6.39%
ADA $0.1831 -6.74%
BCH $274.30 -2.29%
LINK $10.75 -6.27%
HYPE $78.17 -7.51%
AAVE $129.69 -1.63%
SUI $0.8514 -8.40%
XLM $0.1537 -7.74%
ZEC $1,234.83 -4.47%
AAPL $344.76 -2.36%
AMZN $259.61 -3.22%
GOOGL $283.82 -2.66%
MSFT $538.19 -3.04%
META $604.34 -3.62%
NVDA $183.15 -10.13%
TSLA $342.00 -12.20%
SNDK $837.86 -18.82%
INTC $53.93 -7.08%
SPCX $125.30 -6.94%
MU $676.74 -15.64%
AMD $414.99 -13.79%
BTC $75,933.00 -5.32%
ETH $2,247.77 -7.23%
BNB $690.29 -3.58%
XRP $1.23 -5.64%
SOL $89.25 -6.45%
TRX $0.3174 -0.69%
DOGE $0.0719 -6.39%
ADA $0.1831 -6.74%
BCH $274.30 -2.29%
LINK $10.75 -6.27%
HYPE $78.17 -7.51%
AAVE $129.69 -1.63%
SUI $0.8514 -8.40%
XLM $0.1537 -7.74%
ZEC $1,234.83 -4.47%
AAPL $344.76 -2.36%
AMZN $259.61 -3.22%
GOOGL $283.82 -2.66%
MSFT $538.19 -3.04%
META $604.34 -3.62%
NVDA $183.15 -10.13%
TSLA $342.00 -12.20%
SNDK $837.86 -18.82%
INTC $53.93 -7.08%
SPCX $125.30 -6.94%
MU $676.74 -15.64%
AMD $414.99 -13.79%

pro

All
Article
Flash

SignalPlus: The network attack originated from a third-party Telegram account being hacked, resulting in a loss of less than $82,000, and full compensation will be provided

The cryptocurrency derivatives trading tool platform SignalPlus announced that it was attacked in the early hours of November 4, originating from a third-party Telegram account that was hacked, affecting a small number of accounts that had not enabled IP whitelisting.The team stated that they quickly identified and controlled the intrusion. As a precautionary measure, they have revoked all associated API keys with their centralized trading platform partners and temporarily suspended terminal services. The official statement indicated that the total loss was less than $82,000, and affected users will receive full compensation. They expect to fully restore services in the coming days, with subsequent updates and operational guidelines to be released through official channels.This evening, Binance also issued a statement indicating that it has taken precautionary measures regarding the potential security issues reported by the third-party platform SignalPlus, actively revoking all API keys associated with SignalPlus.Binance emphasized that its own system was not affected and that user funds are secure. Binance reminded SignalPlus users to log directly into their Binance accounts to check their positions and open orders, and not to rebind API keys until the issues with SignalPlus are completely resolved. They also advised to always enable IP whitelisting.

GCSA disclosed KuCoin phishing, Bitkub supply chain risks, and Avalanche contract vulnerabilities: attackers transferred approximately 1,013,400 USDC

According to GCSA monitoring, the Global Cybersecurity Alliance (GCSA) has released three independent technical investigation reports, disclosing several recent security risks related to digital assets. Attackers impersonated security@ku.com to lure users into downloading remote control programs. GCSA found that the relevant domain names had not previously configured DMARC; after notification, KuCoin has completed rectification and enabled DMARC isolation policies.After the original MCP toolkit referenced in Bitkub's official documentation was taken down, a third party re-registered the npm package name. The installation method without a fixed version and the risk of plaintext keys may lead to credential leakage; there is currently no actual evidence of theft, and Bitkub has not yet responded to the notification.The TranchePool treasury within the Avalanche ecosystem was attacked due to a cross-day settlement logic flaw, where attackers utilized flash loans and repeated withdrawals to transfer approximately 1.0134 million USDC within 202 seconds. This incident is categorized as a vulnerability in the upper application, and the underlying network was not affected. GCSA stated that it has reported the clues to the relevant platforms and published the original analysis and evidence for industry reference.

Bloomberg: The Binance hacking incident has prompted reflection in the cryptocurrency industry, which may reintroduce trading delays and other Wall Street risk control mechanisms

According to Bloomberg, the Binance hacking incident is prompting the cryptocurrency industry to re-examine its long-held decentralized philosophy, as well as the transaction review, settlement delays, and fund intervention mechanisms in the traditional financial system.As the cryptocurrency industry seeks to enter the mainstream financial market in the United States, some institutional investors are beginning to reconsider Wall Street's financial risk control mechanisms. In traditional finance, banks, payment networks, and clearing institutions can review suspicious transactions during the fund transfer process and can suspend fund flows under certain circumstances.Third Eye CEO Tian Zeng stated that he hopes the settlement time can be shortened from the traditional financial T+1 day to T+1 hour, by appropriately extending the settlement time and increasing review steps, thereby reducing hackers' ability to quickly transfer funds.FalconX Co-Head of Markets Joshua Lim pointed out that as more institutions enter the cryptocurrency market, the client structure is changing, and some institutions are no longer willing to fully accept the risks associated with irreversible transactions. As the cryptocurrency industry further integrates with traditional finance, how to balance transaction efficiency, decentralization, and fund security will become a problem that the industry must face.

GitBook Security Incident Review: Attack Targeting Trade.xyz, SSO Vulnerability Leads to Production Environment Breach

GitBook released a security incident review on November 2, stating that attackers exploited a vulnerability in its single sign-on process to forge employee login sessions, allowing them to query improperly configured GitHub App authentication information within the organization, access internal code repositories, and obtain Cloudflare API keys, ultimately gaining full production environment permissions through service accounts.GitBook disabled the relevant internal service accounts to cut off the attack within hours, resulting in the platform being offline for approximately 16 hours, and fully restored on November 3 at 11:56 UTC. The attackers remained in the production environment for a total of about 3 hours and 25 minutes. GitBook has rotated all infrastructure and revoked customer keys and API tokens.GitBook stated that current indications show the attack targeted a single customer rather than the platform as a whole, and no other customer content has been found to be tampered with. However, since the attackers could access customer data within the platform, they are treating it as if all customer data may have been exposed, including API tokens, integration keys, session signing keys, assistant Q&A records, and authorized repository permissions for GitHub and GitLab applications. Billing information, passwords, and IP addresses were not affected.GitBook noted that the speed and precision of the attack heavily relied on automation and AI. Slow Mist's Chief Information Security Officer 23pds forwarded the review, stating that the targeted entity was Trade.xyz. Trade.xyz previously indicated that the document anomaly stemmed from an intrusion into GitBook's infrastructure, and there were no signs of their own infrastructure being compromised, and they will migrate away from GitBook within a few days.
app_icon
ChainCatcher Building the Web3 world with innovations.