BTC $81,429.62 +0.22%
ETH $2,414.19 +0.31%
BNB $714.93 -0.68%
XRP $1.30 +0.27%
SOL $103.85 +0.71%
TRX $0.3340 -0.08%
DOGE $0.0796 -0.27%
ADA $0.2220 -0.41%
BCH $275.44 +1.05%
LINK $12.04 -1.91%
HYPE $78.80 -0.19%
AAVE $152.58 -2.02%
SUI $0.9877 -1.79%
XLM $0.1785 -0.86%
ZEC $1,150.88 +0.92%
AAPL $343.03 +0.06%
AMZN $249.45 +0.01%
GOOGL $339.80 -0.33%
MSFT $527.29 0.00%
META $706.65 +0.21%
NVDA $214.67 -0.08%
TSLA $352.15 -0.35%
SNDK $1,301.26 -1.33%
INTC $89.68 -0.58%
SPCX $145.82 +1.28%
MU $879.91 -0.59%
AMD $531.75 -0.23%
BTC $81,429.62 +0.22%
ETH $2,414.19 +0.31%
BNB $714.93 -0.68%
XRP $1.30 +0.27%
SOL $103.85 +0.71%
TRX $0.3340 -0.08%
DOGE $0.0796 -0.27%
ADA $0.2220 -0.41%
BCH $275.44 +1.05%
LINK $12.04 -1.91%
HYPE $78.80 -0.19%
AAVE $152.58 -2.02%
SUI $0.9877 -1.79%
XLM $0.1785 -0.86%
ZEC $1,150.88 +0.92%
AAPL $343.03 +0.06%
AMZN $249.45 +0.01%
GOOGL $339.80 -0.33%
MSFT $527.29 0.00%
META $706.65 +0.21%
NVDA $214.67 -0.08%
TSLA $352.15 -0.35%
SNDK $1,301.26 -1.33%
INTC $89.68 -0.58%
SPCX $145.82 +1.28%
MU $879.91 -0.59%
AMD $531.75 -0.23%

rac

All
Article
Flash

first_img Claude of Anthropic cracked the 25-year puzzle of NSA's elliptic curve

Anthropic's AI model Claude cracked a 25-year-old puzzle in the field of cryptography in less than 30 minutes, tracing a set of numbers provided by the National Security Agency (NSA) to the U.S. government in the late 1990s back to a common random number generator that used timestamps from 1997 and 1998. These numbers have long been suspected of hiding a backdoor.In 2000, the National Institute of Standards and Technology (NIST) adopted a set of elliptic curves provided by the NSA, but the NSA never explained where the partial numbers (seeds) used to generate these curves came from. After Edward Snowden disclosed that the NSA had attempted to undermine cryptographic standards, suspicions about its hidden backdoors intensified. Cryptographers Neal Koblitz and Alfred Menezes discussed this controversy in a 2015 paper, and security researcher Steve Weis spent years searching for answers. In 2023, Filippo Valsorda and others even set up a bounty for this.Claude traced the five NIST curve seeds back to the random number generator lrand48 in an old C software library and reproduced the widely used P-256 curve sequence, finding an exact match with the published seeds among the 1842 candidates. Anthropic stated that this significantly reduces the possibility of hidden weaknesses, and users of NIST curves do not need to make any changes. Bitcoin is unaffected, as its wallets use the simpler secp256k1 curve, which has almost no room for secretly implanted weaknesses. The bounty of $36,864 will be donated to the nonprofit organization Internet Security Research Group behind Let's Encrypt.

Deepsigma launches a DeFi perpetual contract platform covering 77 traditional financial markets

The decentralized perpetual contract exchange Deepsigma has launched a real-time simulation trading platform, covering 77 traditional financial markets, including U.S. stocks, stock indices, commodities, and U.S. Treasury yield rates. The platform is developed based on the Cypherium blockchain, driven by a team of alumni from Goldman Sachs, Citadel Securities, Google, and Uber, supporting long and short exposure trading of related assets.Deepsigma's perpetual contracts do not tokenize, custody, or physically deliver the underlying assets but instead track prices through external market data sources. The platform currently supports the S&P 500 Index, Dow Jones Industrial Average, Nasdaq Composite Index, Russell 2000 Index, Cboe Volatility Index, as well as contracts for crude oil, gold, silver, natural gas, and copper. The platform's risk engine employs multiple external price sources, mark prices, circuit breaker mechanisms, partial liquidation, and insurance funds, and uses a central limit order book and clearing layer to handle margin, collateral, and settlement.Deepsigma is also developing a decentralized identity framework based on zero-knowledge proofs and configuring off-chain AI analysis tools with no fund execution permissions; the underlying Cypherium utilizes a hybrid PoW and HotStuff Byzantine Fault Tolerance consensus mechanism, holding 4 U.S. patents.

first_img SEI perpetual contracts launched on the CFTC regulated OG.com market

According to The Defiant, the perpetual contract for Sei Network's native token SEI has been launched for trading on OG.com Markets. The exchange is operated by the North American Derivatives Exchange (Nadex) and is regulated by the U.S. Commodity Futures Trading Commission (CFTC), providing U.S. investors with a compliant channel to access SEI with leverage. Sei officially stated that this is "another compliant way to acquire SEI."The contract was self-certified by the exchange on October 8, and the CFTC product registry has listed it as a certified product, originally scheduled to be listed on October 12. Trading records from October 16 show two transactions of 100 SEI each at 4:54 PM Eastern Time on that day. The contract is settled in U.S. dollars and has no expiration date, allowing traders to maintain long or short positions without rolling over. Clients must access through a CFTC-registered futures commission merchant or an associated introducing broker.Each contract represents 1 SEI, with a minimum trading unit of 100 contracts, and trading occurs around the clock. The funding fees for both long and short positions are calculated every eight hours, with a maximum rate of 2% per period, aimed at aligning the futures price with the CF Sei-Dollar spot rate managed by CF Benchmarks. The contract is settled twice daily at noon and 5 PM Eastern Time. Traders are required to pay the initial margin based on the risk benchmark in U.S. dollars, and the exchange's notification indicates that the initial margin range for its crypto perpetual contract product line is between 15% and 30%.

first_img Backbone Labs bOSMO contract vulnerability leads to support exhaustion, Osmosis announces compensation plan

The liquid staking token bOSMO issued by Backbone Labs nearly exhausted its contract support after a large redemption in the Osmosis community pool. A disclosure on the Osmosis forum on October 15 revealed that approximately 40,508 OSMO were designated for compensation to 1,037 accounts. The disclosure author Johnny Wyles stated that the staking contract has overpaid for each redemption since at least April 2026, settling at approximately 1.676 OSMO per bOSMO, while the declared exchange rate of the contract was about 1.117 OSMO.The vulnerability repeatedly counted the OSMO staked on Backbone's own validators, allowing redeemers to receive about 50% more assets, at the cost of diluting the support for remaining holders. The defect was exposed when preparing to liquidate the community pool position, and the passed governance proposal 1049 authorized the withdrawal of the Margined managed treasury position and the destruction of the reclaimed OSMO when it ceased managing liquidity operations. The pool's bOSMO treasury holds approximately 1.137 million bOSMO, accounting for about 97% of the total supply of the token; the redemption transaction executed on October 9 at 21:59 ET destroyed 776,000 bOSMO and began unbinding approximately 1.3 million OSMO.Compensation is based on the qualified balance at block 72,237,940, calculated at 1.1174 OSMO per bOSMO. bOSMO purchased after the snapshot is not included in the compensation, and underlying holders in the liquidity pool and other contracts are also included;

first_img Researchers conversed with rogue AI agents using hidden text, activity tracked to Tencent Cloud

Researchers successfully communicated directly with AI agents while investigating the hijacking of Alibaba's Gaode Map service, even as some software was still running. In a report suspected to have been scanned by these agents, researchers included hidden text that is invisible to humans but visible to web reading tools, and then inquired about their tasks and operating environment through an email. One agent claimed it was checking how many entrance tags a certain scenic area displayed on Gaode Map and stated that it was operating in a restricted Tencent Cloud sandbox. Researchers could not independently confirm which model drove each run, noting that this was the first known external communication with an active out-of-control agent cluster.A report released by Swarmchasers on October 14 tracked over 2,600 attempts to obtain Gaode Map data between September 28 and October 8. Some tasks were relatively routine, such as checking which entrance was most commonly used by visitors at the Chengdu Zoo. After the service provider intercepted requests, some agents continued to attempt access, trying to capture tokens generated by anti-scraping software, forwarding traffic through third-party page readers, or using leaked API credentials from public code repositories, with one set of leaked keys and security codes returning real location data. Researchers also found requests targeting four development or pre-production hosts, but there was no evidence that these agents accessed private systems.Public records show that the cluster is related to Tencent Cloud: all 17 email accounts examined by researchers were created by Tencent servers located in Hong Kong, and the observed direct requests were forwarded through an agent named hysandbox-ats.

first_img OKX launches public testing for on-chain spot and perpetual contracts, simulating traditional financial market trading

According to The Defiant, OKX announced the launch of the Onchain Spot and Perps public beta within its app. Qualified users can use free points (XP) to simulate trading in stock, index, and commodity markets, preparing for subsequent real fund trading. This simulated trading competition shares a prize pool of 250,000 USDT with Outcomes Season 3, running from October 14, 22:00 EST to November 14, 11:00. XP points have no cash value and cannot be withdrawn, transferred between accounts, or exchanged for financial instruments.The first simulated markets include gold, S&P 500 ETF, SpaceX, and Nvidia themes, with separate trading pairs for spot and perpetual contracts. Participants are testing trading strategies rather than purchasing shares of the aforementioned companies. OKX's product announcement indicates that qualified customers come from Southeast Asia, Northeast Asia, the Commonwealth of Independent States, as well as the Middle East and North Africa; users must complete identity verification and use a passkey to open a dedicated on-chain account through their existing OKX account.The trading venue operates on Exchange OS built on X Layer, and OKX refers to this account as self-custodial, supporting a unified balance between spot, perpetual contracts, and Outcomes. The spot and perpetual markets share margin, eliminating the need for internal transfers between product accounts.OKX stated that after the competition ends, real fund trading will be opened, allowing users to fund their on-chain accounts from their OKX exchange accounts, with spot and perpetual contracts settled on-chain in USDS. The activity XP and positions will not convert to real fund positions.
app_icon
ChainCatcher Building the Web3 world with innovations.