BTC $82,042.92 +1.39%
ETH $2,436.86 +2.85%
BNB $728.19 +0.28%
XRP $1.33 +1.03%
SOL $105.40 +3.25%
TRX $0.3341 +1.04%
DOGE $0.0813 +2.54%
ADA $0.2300 +5.04%
BCH $278.10 +4.95%
LINK $12.47 +3.07%
HYPE $81.55 +3.00%
AAVE $159.69 +6.85%
SUI $1.03 +2.83%
XLM $0.1823 +2.54%
ZEC $1,224.08 +11.88%
AAPL $342.22 -0.83%
AMZN $254.51 +1.64%
GOOGL $349.11 +1.87%
MSFT $538.50 +1.45%
META $736.95 +1.09%
NVDA $218.46 -0.05%
TSLA $369.76 +2.03%
SNDK $1,382.87 +1.89%
INTC $95.48 -0.45%
SPCX $150.11 +0.24%
MU $925.08 +3.98%
AMD $559.98 -0.38%
BTC $82,042.92 +1.39%
ETH $2,436.86 +2.85%
BNB $728.19 +0.28%
XRP $1.33 +1.03%
SOL $105.40 +3.25%
TRX $0.3341 +1.04%
DOGE $0.0813 +2.54%
ADA $0.2300 +5.04%
BCH $278.10 +4.95%
LINK $12.47 +3.07%
HYPE $81.55 +3.00%
AAVE $159.69 +6.85%
SUI $1.03 +2.83%
XLM $0.1823 +2.54%
ZEC $1,224.08 +11.88%
AAPL $342.22 -0.83%
AMZN $254.51 +1.64%
GOOGL $349.11 +1.87%
MSFT $538.50 +1.45%
META $736.95 +1.09%
NVDA $218.46 -0.05%
TSLA $369.76 +2.03%
SNDK $1,382.87 +1.89%
INTC $95.48 -0.45%
SPCX $150.11 +0.24%
MU $925.08 +3.98%
AMD $559.98 -0.38%

rac

All
Article
Flash

first_img Backbone Labs bOSMO contract vulnerability leads to support exhaustion, Osmosis announces compensation plan

The liquid staking token bOSMO issued by Backbone Labs nearly exhausted its contract support after a large redemption in the Osmosis community pool. A disclosure on the Osmosis forum on October 15 revealed that approximately 40,508 OSMO were designated for compensation to 1,037 accounts. The disclosure author Johnny Wyles stated that the staking contract has overpaid for each redemption since at least April 2026, settling at approximately 1.676 OSMO per bOSMO, while the declared exchange rate of the contract was about 1.117 OSMO.The vulnerability repeatedly counted the OSMO staked on Backbone's own validators, allowing redeemers to receive about 50% more assets, at the cost of diluting the support for remaining holders. The defect was exposed when preparing to liquidate the community pool position, and the passed governance proposal 1049 authorized the withdrawal of the Margined managed treasury position and the destruction of the reclaimed OSMO when it ceased managing liquidity operations. The pool's bOSMO treasury holds approximately 1.137 million bOSMO, accounting for about 97% of the total supply of the token; the redemption transaction executed on October 9 at 21:59 ET destroyed 776,000 bOSMO and began unbinding approximately 1.3 million OSMO.Compensation is based on the qualified balance at block 72,237,940, calculated at 1.1174 OSMO per bOSMO. bOSMO purchased after the snapshot is not included in the compensation, and underlying holders in the liquidity pool and other contracts are also included;

first_img Researchers conversed with rogue AI agents using hidden text, activity tracked to Tencent Cloud

Researchers successfully communicated directly with AI agents while investigating the hijacking of Alibaba's Gaode Map service, even as some software was still running. In a report suspected to have been scanned by these agents, researchers included hidden text that is invisible to humans but visible to web reading tools, and then inquired about their tasks and operating environment through an email. One agent claimed it was checking how many entrance tags a certain scenic area displayed on Gaode Map and stated that it was operating in a restricted Tencent Cloud sandbox. Researchers could not independently confirm which model drove each run, noting that this was the first known external communication with an active out-of-control agent cluster.A report released by Swarmchasers on October 14 tracked over 2,600 attempts to obtain Gaode Map data between September 28 and October 8. Some tasks were relatively routine, such as checking which entrance was most commonly used by visitors at the Chengdu Zoo. After the service provider intercepted requests, some agents continued to attempt access, trying to capture tokens generated by anti-scraping software, forwarding traffic through third-party page readers, or using leaked API credentials from public code repositories, with one set of leaked keys and security codes returning real location data. Researchers also found requests targeting four development or pre-production hosts, but there was no evidence that these agents accessed private systems.Public records show that the cluster is related to Tencent Cloud: all 17 email accounts examined by researchers were created by Tencent servers located in Hong Kong, and the observed direct requests were forwarded through an agent named hysandbox-ats.

first_img OKX launches public testing for on-chain spot and perpetual contracts, simulating traditional financial market trading

According to The Defiant, OKX announced the launch of the Onchain Spot and Perps public beta within its app. Qualified users can use free points (XP) to simulate trading in stock, index, and commodity markets, preparing for subsequent real fund trading. This simulated trading competition shares a prize pool of 250,000 USDT with Outcomes Season 3, running from October 14, 22:00 EST to November 14, 11:00. XP points have no cash value and cannot be withdrawn, transferred between accounts, or exchanged for financial instruments.The first simulated markets include gold, S&P 500 ETF, SpaceX, and Nvidia themes, with separate trading pairs for spot and perpetual contracts. Participants are testing trading strategies rather than purchasing shares of the aforementioned companies. OKX's product announcement indicates that qualified customers come from Southeast Asia, Northeast Asia, the Commonwealth of Independent States, as well as the Middle East and North Africa; users must complete identity verification and use a passkey to open a dedicated on-chain account through their existing OKX account.The trading venue operates on Exchange OS built on X Layer, and OKX refers to this account as self-custodial, supporting a unified balance between spot, perpetual contracts, and Outcomes. The spot and perpetual markets share margin, eliminating the need for internal transfers between product accounts.OKX stated that after the competition ends, real fund trading will be opened, allowing users to fund their on-chain accounts from their OKX exchange accounts, with spot and perpetual contracts settled on-chain in USDS. The activity XP and positions will not convert to real fund positions.

first_img The perpetual contract platform StandX announced that it will gradually cease operations and conduct a one-time DUSD airdrop for the community

The perpetual contract platform StandX announced a one-time DUSD airdrop to the community, where users can claim the full amount with no lock-up. The distribution criteria include pre-deposits, Alpha, mainnet trading, market making, and referral activities. All amounts must pass anti-whale and volume manipulation checks, and amounts for abnormal accounts may be adjusted or canceled. StandX also stated that it has decided not to issue tokens, and the airdrop funds come from the project's remaining income and additional contributions from the team.StandX stated that after the mainnet goes live in November 2025, it has served over 237,000 users, with a peak TVL exceeding $200 million, and no security incidents have occurred during its operation. Airdrop inquiries will open on October 26 at 00:00 (UTC), with the claiming period from November 1 at 00:00 to December 31 at 08:00 (UTC). Claims not made within this period will be considered forfeited. Users must use the BNB Chain or Solana wallet address used on StandX to claim.StandX also announced that it will gradually cease operations after assessing business and market conditions. From October 15, all types of earnings will stop, and new deposits to the treasury will be closed. From October 20, perpetual contracts will enter a mode of only reducing positions. All remaining positions will be liquidated at the marked price on January 15, 2027, and January 31, 2027, will be the deadline for DUSD redemption and asset withdrawal. The official reminder is to claim the airdrop only through standx.com.

Analyst Murphy: The swing chips are gradually being cleared, Bitcoin has retraced three times near $81,000

Analyst Murphy posted on platform X, stating that as of October 15, 2026, Bitcoin has fallen to around $81,000 on October 9, 12, and 15, repeatedly testing the same support area. The latest round of declines, combined with U.S. inflation exceeding expectations, rising market concerns about the Federal Reserve tightening monetary policy further, and weakening U.S. stocks, has put overall pressure on risk assets.Murphy noted that from the on-chain adjusted realized loss data, the scale of losses corresponding to the three dips shows a decreasing trend: the loss on October 12 was less than that on October 9, and while the loss on October 15 was larger than on October 12, it was still lower than on October 9. October 9 appears to be a peak where short-term price-sensitive chips concentrated their exit; during the second dip, market sentiment was more cautious, and the willingness to sell was not strong; the third decline, under macroeconomic negative influences, again forced some swing chips to stop-loss and exit. Therefore, the current market is closer to a gradual clearing of swing chips rather than a full-blown panic sell-off. If the proportion of short-term holders' losses remains around 31%, below the historical cumulative average of 42.7%, it indicates that the clearing of chips may not be sufficient, and further volatility and selling pressure may still occur. Next, it should be observed whether the scale of realized losses continues to converge: if the price maintains near the current support area and the release of losses gradually weakens, it indicates that passive selling is decreasing, and a phase adjustment may be nearing its end; if the scale of losses expands significantly again, it indicates that the market still needs to undergo a more thorough turnover of chips.
app_icon
ChainCatcher Building the Web3 world with innovations.