ChainCatcher message, according to Scam Sniffer monitoring, a user signed a Uniswap Permit2 phishing signature 34 days ago, initially suffering a small loss, but he did not realize it was a phishing signature and did not revoke it. 30 minutes ago, $162,000 worth of assets were transferred from the user's wallet.

ChainCatcher message, Vitalik responded to comments about "the level of governance in Zuzalu, Apecoin governance forum, and Arbitrum DAO" by stating: "Technically, any currency is permissioned: you need to obtain permission from an existing holder to become a holder.This indicates that there is actually a continuous trade-off between the permission levels of Apecoin and ZuVillage, and we can imagine a structure in between: becoming a member requires obtaining permission from multiple existing members, but it is still very open.For example, you can imagine a mechanism in the style of secondary financing, weighted by existing member points, to accumulate membership points. This is what I hope to see in OP Citizen House, Zuzalu community, and other DAOs that are experimenting. Formalizing and measuring membership is upstream of any formal governance, and it would be really cool if there were more ways to achieve highly decentralized and permissionless formal membership, but not just through token holding."

ChainCatcher news, Slow Mist releases an analysis of the Radiant Capital security incident (Arbitrum chain):Radiant Capital uses a multi-signature wallet (0x111ceeee040739fd91d29c34c33e6b3e112f2177) to manage key operations such as contract upgrades and fund transfers. However, the attacker illegally gained control of the owner permissions of 3 out of the 11 owners of the multi-signature wallet.Since Radiant Capital's multi-signature wallet employs a 3/11 signature verification model, the attacker first used the private keys of these 3 owners to perform off-chain signatures, and then initiated an on-chain transaction from the multi-signature wallet to transfer the ownership of the LendingPoolAddressesProvider contract to a malicious contract controlled by the attacker.Subsequently, the malicious contract called the setLendingPoolImpl function of the LendingPoolAddressesProvider contract, upgrading the underlying logic contract of the Radiant lending pool to a malicious backdoor contract (0xf0c0a1a19886791c2dd6af71307496b1e16aa232).Finally, the attacker executed the backdoor function, transferring funds from various lending markets into the attack contract.Previous news, Radiant Capital suffered a cyber attack, resulting in losses exceeding $50 million.

ChainCatcher news, according to official information, recent industry permit phishing security incidents have been frequent. The OKX Web3 wallet has now completed signature optimization for permit/permit2, aimed at further strengthening security protection, providing 24/7 safeguarding for user assets.After the upgrade, the OKX Web3 wallet will automatically pop up reminders for users who are using Permit signatures for the first time, helping them understand the risks and characteristics of Permits. In addition, when users perform Permit signatures, the signature page will clearly label "Authorize permit," helping users easily identify it. Currently, users can experience the new features by upgrading the OKX APP to version 6.80.0 or above.

ChainCatcher message, according to Scam Sniffer monitoring, MetaMask has improved the readability of Permit and Uniswap Permit2 signatures, helping users clearly identify these signing information. Please make sure to update MetaMask to the latest version.

ChainCatcher message, according to Scam Sniffer monitoring, MetaMask has improved the readability of Permit and Uniswap Permit2 signatures, helping users clearly identify these signing information. Please make sure to update MetaMask to the latest version.

ChainCatcher message, regarding offline authorization signatures like permit/permit2, Cobo co-founder and CEO Shen Yu posted on the X platform, "Under the call, at least provide a switch on dapps and plugin wallets."

ChainCatcher live report, at the Solana 2024 Breakpoint conference, Permissionless Labs founder David Rhodus stated that Pipe Network is in the private testing phase and will soon announce testnet information. Users can join by running a Pipe POP node or using Pipe CDN.

ChainCatcher message, according to Scam Sniffer monitoring, about 4 hours ago, a user lost 64 stETH, worth approximately $163,900, due to signing a "permit" phishing signature.

ChainCatcher message, according to Scam Sniffer monitoring, about 4 hours ago, a user lost 150 WETH (worth approximately $349,200) due to signing a "permit" phishing signature.Scam Sniffer reminds users that Wrapped ETH (WETH) on the Blast network supports the "permit" function, which may be exploited by criminals for scams.

ChainCatcher message reports that, according to Scam Sniffer monitoring, a user lost Neiro tokens worth $127,141 by signing a phishing signature for "Uniswap permit2".

ChainCatcher news, BounceBit announced that a governance proposal will be released tomorrow, transitioning from a whitelist system to an open permissionless blockchain for all developers and users.During the whitelist phase, BounceBit focused on developing CeDeFi and BounceClub. In the new phase, the BounceBit team will continue to develop new DApps and infrastructure while providing abundant developer resources, including private RPC, documentation, and technical support.

ChainCatcher news, according to Unisat Explorer data, the current total hash rate of Fractal mainnet merged mining and permissionless mining has reached 47 EH/s.In Unisat Merged Mining, 4 miners have collectively mined 327 blocks in 24 hours, with AntPool ranking first and a hash rate of 5.431 EH/s; in Permissionless Mining, 8 miners have collectively mined 1266 blocks in 24 hours, with SpiderPool ranking first and a hash rate of 437.2 PH/s.

ChainCatcher news, Yixing has cracked a case of theft of virtual currency, where the perpetrator illegally obtained access to another person's virtual currency wallet with the intent to possess it unlawfully. The prosecuting attorney discovered that in order to secretly gain access to others' virtual wallets, the defendant Wang conspired with others to create a website that appeared to be a blockchain project to obtain the management rights of the victim Ms. Pan's wallet. According to statistics, Wang transferred 130,000 virtual currencies from Ms. Pan's account to cash out into his own bank card, causing Ms. Pan an economic loss of over 900,000 yuan. Recently, the Yixing City Prosecutor's Office filed a public prosecution, and the court sentenced the defendant Wang to eleven years in prison for theft and imposed a corresponding fine.

ChainCatcher message, Solayer announced the launch of the Restaking endogenous application validation system (endogenous AVS) standard on the Solana mainnet.Participants can stake SOL to receive sSOL, which can then be delegated to selected e-AVS to earn native staking rewards (8.12%), MEV boosts, and AVS rewards. Solayer also released the v1 development toolkit, allowing developers to interact directly with core functionalities. The project has been audited by Halborn Security and plans to introduce more features, including an in-protocol fee module and permissionless AVS management.

ChainCatcher news, according to The Block, Eigen Labs is launching permissionless token support on the EigenLayer protocol, which will allow ERC-20 tokens to be added as restorable assets.Eigen Labs stated that after completing the initial "testing phase" on the testnet, the mainnet deployment is expected to start next week.

ChainCatcher news, the decentralized derivatives exchange dYdX announced that it will launch the dYdX Unlimited upgrade for dYdX Chain this fall, including features such as permissionless market launch, MegaVault (which sources liquidity from dYdX users and acts as a market maker for all dYdX Chain markets), the Affiliates Program, and permissioned keys (providing a more secure and customizable environment for institutions and high-value traders).

ChainCatcher message, the snapshot shows that Arbitrum has initiated a proposal to open up the permission for deploying the Orbit chain on networks outside of Ethereum, such as the Bitcoin network, Cosmos, etc. In return, the newly established Orbit chain is required to return 10% of its on-chain profits to the Arbitrum ecosystem, with 8% allocated to ArbitrumDAO and 2% to the Developer Association.It is reported that the "Arbitrum Expansion Plan" is a set of tools and services maintained and provided by the Arbitrum Foundation, aimed at enabling developers to deploy and operate a trust-minimized network whose security relies on the security of the Ethereum blockchain.

ChainCatcher message, according to the official Twitter of the LI.FI protocol, is investigating a potential vulnerability issue. Users are advised to temporarily refrain from using any applications powered by LI.FI and revoke all authorizations for the following addresses:0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae,0x341e94069f53234fE6DabeF707aD424830525715,0xDE1E598b81620773454588B85D6b5D4eEC32573e,0x24ca98fB6972F5eE05f0dB00595c7f68D9FaFd68.Only users who manually set unlimited authorization are affected.