BTC $75,818.45 +0.02%
ETH $2,235.08 +0.22%
BNB $692.65 +0.64%
XRP $1.18 -2.70%
SOL $90.04 +0.94%
TRX $0.3182 +0.18%
DOGE $0.0722 +1.97%
ADA $0.1845 +2.46%
BCH $263.77 -2.15%
LINK $10.86 +2.02%
HYPE $78.53 +1.93%
AAVE $130.80 +2.26%
SUI $0.8695 +3.62%
XLM $0.1535 +0.04%
ZEC $1,320.59 +4.23%
AAPL $343.19 -0.13%
AMZN $260.58 +2.02%
GOOGL $285.82 +2.06%
MSFT $533.41 +0.76%
META $612.21 +2.21%
NVDA $188.24 +4.05%
TSLA $358.72 +6.03%
SNDK $835.35 +2.85%
INTC $56.57 +9.95%
SPCX $135.30 +10.55%
MU $690.71 +4.58%
AMD $446.46 +10.47%
BTC $75,818.45 +0.02%
ETH $2,235.08 +0.22%
BNB $692.65 +0.64%
XRP $1.18 -2.70%
SOL $90.04 +0.94%
TRX $0.3182 +0.18%
DOGE $0.0722 +1.97%
ADA $0.1845 +2.46%
BCH $263.77 -2.15%
LINK $10.86 +2.02%
HYPE $78.53 +1.93%
AAVE $130.80 +2.26%
SUI $0.8695 +3.62%
XLM $0.1535 +0.04%
ZEC $1,320.59 +4.23%
AAPL $343.19 -0.13%
AMZN $260.58 +2.02%
GOOGL $285.82 +2.06%
MSFT $533.41 +0.76%
META $612.21 +2.21%
NVDA $188.24 +4.05%
TSLA $358.72 +6.03%
SNDK $835.35 +2.85%
INTC $56.57 +9.95%
SPCX $135.30 +10.55%
MU $690.71 +4.58%
AMD $446.46 +10.47%

rac

All
Article
Flash

GCSA disclosed KuCoin phishing, Bitkub supply chain risks, and Avalanche contract vulnerabilities: attackers transferred approximately 1,013,400 USDC

According to GCSA monitoring, the Global Cybersecurity Alliance (GCSA) has released three independent technical investigation reports, disclosing several recent security risks related to digital assets. Attackers impersonated security@ku.com to lure users into downloading remote control programs. GCSA found that the relevant domain names had not previously configured DMARC; after notification, KuCoin has completed rectification and enabled DMARC isolation policies.After the original MCP toolkit referenced in Bitkub's official documentation was taken down, a third party re-registered the npm package name. The installation method without a fixed version and the risk of plaintext keys may lead to credential leakage; there is currently no actual evidence of theft, and Bitkub has not yet responded to the notification.The TranchePool treasury within the Avalanche ecosystem was attacked due to a cross-day settlement logic flaw, where attackers utilized flash loans and repeated withdrawals to transfer approximately 1.0134 million USDC within 202 seconds. This incident is categorized as a vulnerability in the upper application, and the underlying network was not affected. GCSA stated that it has reported the clues to the relevant platforms and published the original analysis and evidence for industry reference.

Vitalik: Ethereum will embrace cutting-edge technologies such as AI

Ethereum co-founder Vitalik Buterin stated in an interview that Ethereum will undergo a series of changes in the coming years, aiming to fully leverage the latest technologies, especially various cutting-edge technologies including graphics processing capabilities, and push these technologies to a new stage of development, enabling Ethereum to handle multiple tasks in parallel while maintaining decentralization. He mentioned that Ethereum is changing its past development model, as previous goals were difficult to achieve due to technical complexity, high risks, and implementation challenges. With significant advancements in technology, these obstacles are no longer as hard to overcome.Vitalik stated that Ethereum itself adopts very conservative, hash-based cryptographic technologies, while the idea for applications built on top of it is to innovate starting this year based on maintaining the underlying security, trying different technological routes rather than simply replicating Ethereum and smart contracts. He noted that performance protocols and various privacy protocols have emerged with different exploratory directions. Taking enterprise applications as an example, companies can record and manage supply chain data on their own servers and then submit relevant data and its proofs via blockchain to demonstrate that all parties involved comply with established rules. This approach neither compromises privacy nor affects efficiency.Vitalik also mentioned that other developers can build more applications on this foundation, such as splitting related assets or launching loan products supported by asset collateral. Some clear and noteworthy categories of applications have already emerged. He is concerned about the extent to which these applications can provide security guarantees when facing various potential threats and stated that the final choice lies with the application side, which can opt for a conservative technological route or try more radical solutions. He believes that the strategy of the Ethereum Foundation is to focus on what it is currently doing, leaving areas beyond its professional capabilities for users and the community to explore independently, and when able to provide support, to help developers improve their technical levels, enhance security, privacy protection, and openness from a technical perspective, without attempting to control all areas.
app_icon
ChainCatcher Building the Web3 world with innovations.