security

Injective's official account posted on the X platform, stating that recent media reports have covered news about "potential security risks involving the Injective npm package." This issue has been promptly identified and resolved. User funds have never been at risk and have not suffered any losses.The official statement indicated that its security monitoring system detected the issue immediately and quickly marked the affected package version as deprecated, while replacing it with a new version, thus blocking the risk before the malicious package could be downloaded.As a result, the download volume of the malicious package is zero, and it has not affected users; the security of user funds has also not been threatened. Injective's npm package is one of the most widely used SDKs in the cryptocurrency field, and the official team has now implemented optimization measures to ensure that such attack attempts cannot occur again.

According to PR Newswire, QIZ Security announced the completion of a $17 million seed round financing, led by Bessemer Venture Partners and Merlin Ventures, with participation from Evolution Equity Partners, Qbeat Ventures, Singtel Innov8, Qino Cyber Capital, and others.The company positions itself as a management platform for crypto assets and post-quantum cryptography (PQC), providing continuous crypto asset discovery, risk modeling, and governance, helping large clients in finance, telecommunications, healthcare, and critical infrastructure achieve "crypto agility" to address the risk of "Q-Day," when quantum computing capable of breaking existing encryption systems may emerge as early as 2029, and collaborates with Cisco, AWS, Google, CrowdStrike, Deloitte, EY, IBM, and others to promote enterprise quantum security migration planning.

Gate recently released a detailed verification statement regarding the security item changes and fund loss incident reported by customer 9****6. After an internal review, the platform confirmed that the applicant submitted materials highly matching the customer's account, including Email, phone number, real-name information, transaction records, and Alipay screen recordings. The platform pointed out that the Alipay screen recording required access to the customer's Alipay account and successfully passed multiple identity verifications, indicating that the applicant not only possessed account information but also obtained the customer's external real-name information, Alipay account, and device permissions in advance.The platform emphasized that its security unbinding review implements a four-fold verification process of "multi-channel advance notification + system risk control preliminary screening + manual multi-layer review + time protection." After notifying the customer through dual channels, the application was processed only after waiting two days without objections, and a 24-hour withdrawal prohibition protection was imposed after modification. Upon investigation, there were no information leakage logs within the platform, and some sensitive identity information provided by the applicant was external information previously unknown to the platform.Regarding fund recovery, the platform has sorted out the flow of funds and collaborated with multiple departments to conduct on-chain analysis and asset tracking, currently coordinating with third parties like Tether to advance the freezing process, and will cooperate with judicial investigations in the future. The platform advises customers to conduct comprehensive security reinforcement on their devices and expresses regret that the customer did not contact the platform within the three-day notification period.

According to The Block, Cash App's parent company Block has agreed to pay $45 million to settle with regulatory agencies in nearly 50 states in the U.S. over allegations of misleading security promotions and insufficient anti-fraud measures. Regulators accused Block of marketing Cash App as having security protections comparable to traditional banks, but failing to establish a comprehensive fraud detection system and not providing an effective fraud reporting hotline, resulting in users suffering losses from scams.Additionally, regulators accused Block of continuing marketing activities despite being aware of the increase in scams and amplifying scam risks in promotional activities. Under the settlement agreement, Block must improve customer support services, provide 24-hour live customer service, and cease related promotions regarding Cash App's security. Block denies any wrongdoing, stating that the settlement involves previously disclosed legacy issues.

According to CoinDesk, the new version of the XRP Ledger server software v3.2.0 has been launched, aiming to reduce operational costs, enhance stability, and increase appeal to institutional users. Currently, about 43% of the approximately 833 active nodes are running the new version, while 51% are still using the old version v3.1.3. However, about 89% of the 35 validators in the default UNL have upgraded, reaching the required 80% threshold for activation.The security amendment fixCleanup3_2_0 associated with the software upgrade is still under independent voting, covering fixes and improvements for single-asset vaults, permissioned DEX, multi-purpose tokens, and lending protocols, with current support far below the software adoption rate. Ripple has voted in favor of this amendment, and validators that do not upgrade before the amendment is activated may face the risk of being cut off from the Ledger.

According to the report from the Cybersecurity Threat and Vulnerability Information Sharing Platform (NVDB) of the Ministry of Industry and Information Technology on July 8, recent monitoring has found serious security backdoor risks in the AI programming tool Claude Code developed by the American company Anthropic.The report pointed out that the affected versions of Claude Code are from 2.1.91 to 2.1.196. This tool has a built-in monitoring mechanism that can, without user consent, secretly transmit sensitive data such as users' location and identity identifiers to remote servers. The official recommendation is for relevant units and users to immediately conduct a comprehensive inspection, uninstall the affected versions of the terminal, or upgrade to the latest secure version that has removed the related backdoor code; at the same time, they should strengthen the control of external access permissions and traffic monitoring for development tools within the core business network segment to prevent the illegal transmission of sensitive data.

Security expert Michael Coates announced on the X platform that he has taken on the role of Chief Information Security Officer (CISO) at the Solana Foundation, marking a new chapter in his career. Coates previously served as the security chief at Mozilla, CISO at Twitter, and founded a startup focused on enterprise SaaS data security, Altitude Networks, which was later acquired by CoinList, thus entering the cryptocurrency industry.Coates stated that he chose to join Solana because the chain currently has a daily stablecoin trading volume of several billion dollars, with daily transactions exceeding the total of most cryptocurrencies. He mentioned that his future work will focus on integrating security capabilities into industry operations and application security foundations, addressing the unique security challenges of cryptocurrencies, and collaborating with policymakers and standards organizations to promote the improvement of cybersecurity regulations.

According to Jinshi reports, the Joint Maritime Information Center (JMIC) has raised the maritime security threat level in the Strait of Hormuz to "severe."

The European Central Bank has requested banks to develop plans to address the growing cybersecurity threats posed by cutting-edge AI models such as Anthropic's Claude Mythos. In a letter to the chief executives of banks, the ECB's chief supervisory officer, Claudia Buch, asked lending institutions to submit action plans by the end of October.She urged banks to accelerate software patch updates, strengthen AI-driven cyber defenses, and enhance oversight of third-party vendors, while emphasizing that banks need to modernize their infrastructure in the long term. Buch stated, "The ECB calls on all significant institutions to immediately assess the impact of the evolving threat landscape and develop comprehensive action plans outlining specific measures to strengthen relevant controls." ECB President Christine Lagarde warned last month that artificial intelligence could lead to a financial crisis and stated that bank CEOs need to ensure they are prepared and recognize that countermeasures require substantial investment. The ECB has conducted cyber attack tests under severe scenarios on 109 banks, and most of the vulnerabilities identified have been addressed.

Michael Saylor stated on the X platform that Strategy has sold 3,588 bitcoins, cashing out $216 million to pay dividends on its digital credit securities. As of July 5, the company's bitcoin reserves have decreased to 843,775 coins, while holding a dollar reserve of $2.55 billion.This is the second public disclosure of a reduction operation by Strategy this year, following the sale of 32 BTC to cover preferred stock dividends from May 26 to 31, and the scale has significantly expanded, reflecting the company's increased reliance on selling part of its bitcoin reserves to maintain its dividend obligations amid pressure on bitcoin prices and growing unrealized losses.

The security company Coinspect Security posted on platform X that by analyzing cryptocurrency wallet seeds generated with insecure code since 2018, they discovered that thousands of seeds had been actually used. Just last month, it was found that the amount stolen from these wallets reached up to 3.14 million dollars, most of which went unreported.Some funds were concentrated into a single address and exhibited money laundering patterns. One affected address transferred out 2 million dollars just hours after the alert was issued, and it is uncertain whether this was theft. Coinspect warns that users who believe many assets are still at risk may be located in China.

According to The Defiant, ENS community member Christoph Jentzsch proposed on the X platform that the ENS DAO dissolve itself, stating that "the ENS DAO has collapsed," and suggested destroying the ENSv2 Universal Router keys and reallocating the remaining funds, officially transforming ENS into a public infrastructure. Jentzsch, who wrote code for "The DAO" in 2016 and currently operates Tokenize.it, stated that he does not hold any formal position in ENS governance.Previously, ENS co-founder Nick Johnson unilaterally vetoed the security council renewal vote using about half of the active voting power of the protocol, while about two weeks ago he supported another proposal to expand the ENS Foundation's control over the treasury by delegating nearly half of the active voting power to himself.

SlowMist issued a security alert, detecting a coordinated malicious npm supply chain attack. The attackers utilized fake trading bot repositories and DeFi-themed npm packages to deploy JavaScript information stealers, targeting npm users, DeFi developers, and trading bot users.This attack involved 30 malicious npm packages, among which stake-math@3.5.4 appeared as a locked dependency in the donoaccestag/forex-mt5-trading-bot repository. This repository presented approximately 2300 highly homogeneous bulk-generated forks, mostly concentrated under the poly-stocks account, with signals being exceptionally clear. The sensitive data that attackers could steal is extensive, including cryptocurrency wallet libraries, browser cookies and saved passwords, browsing history, developer credentials, shell history, password manager libraries, private keys, mnemonic phrases, and API tokens exposed in source code.SlowMist recommends that developers immediately remove the affected npm packages, audit package.json and package-lock.json, and check CI logs for any of the 30 malicious packages; consider any system that has executed npm install as potentially compromised, rotate all exposed wallets, private keys, npm tokens, cloud credentials, SSH keys, and API tokens, and rebuild the affected environment from a clean image.

Binance's co-CEO Richard Teng issued a statement regarding the MiCA regulatory transition, stating that user asset security is a priority, and affected users can continue to use the notified options, including withdrawal functions. Binance is directly communicating with affected users about the next steps and available options, and advises users to contact customer service through official channels. Teng stated that the team's focus is on providing clear guidance, service continuity, and confidence for users during the transition period.

The recent voting results of the ENS DAO, which governs the Ethereum Name Service, have sparked controversy within the community, as some members pointed out.In the latest on-chain vote, ENS founder Nick Johnson cast approximately 3.26 million votes against the proposal to extend the security committee's term for two years. This proposal had previously passed a Snapshot community vote, but the on-chain execution proposal did not receive support.As the controversy escalated, some community members expressed concerns about the degree of decentralization in the ENS DAO governance mechanism. However, there are also viewpoints suggesting that this incident reflects more on the distribution structure of governance tokens rather than a failure of the protocol itself.

According to the latest data from CertiK Skynet, Websea has maintained a security rating of over 80 in the A-grade high score range after completing its third round of professional penetration testing, with its overall ranking showing a steady upward trend, continuing to rank among the top in the global exchange security list.This assessment covers core dimensions such as smart contract security, system architecture stability, risk control mechanisms, and asset protection capabilities. The comprehensive assessment results further confirm that Websea has a highly mature and robust security system, with overall security performance at a high level within the industry. As a mainstream third-party security organization in the industry, CertiK's continuous audit and penetration testing results further strengthen Websea's long-term industry endorsement in terms of security transparency and credibility among global exchanges, and also enhance market recognition of Websea's security and credibility.

The Chief Information Security Officer of Slow Fog, 23pds, posted on the X platform that curl recently fixed 18 security vulnerabilities, involving issues such as authentication bypass, memory safety, and host verification, among which one libcurl vulnerability has existed for about 25 years. The risks are not limited to the curl command line but also widely affect applications, SDKs, containers, firmware, gateways, and CI/CD environments that rely on libcurl. It is recommended to upgrade curl/libcurl as soon as possible and check for the use of old versions of libcurl, especially paying attention to mTLS, proxy authentication, and connection reuse scenarios.

Etherlink posted on platform X that the Etherlink EVM Bridge has become a target of a security attack. As a precaution, all transfers have been suspended to protect user funds while the issue is being investigated. No funds have been lost.The team is working closely with LayerZero, Asymmetric Research, and Zeeve to investigate the issue and ensure that the attack attempts are fully mitigated. A timeline for restoring services has not yet been determined.

Fidelity Digital Assets recently released a research report that positively addresses concerns about the long-term impact of Bitcoin halving on network security. The report's author, Fidelity research analyst Daniel Gray, pointed out that Bitcoin network security relies not only on block rewards but also on transaction fees, market incentives, and other economic forces that continuously motivate miners to maintain network security, making the cost of sustained attacks prohibitively high.On the data front, Gray noted that despite the ongoing reduction in block subsidies, the rise in Bitcoin prices has significantly offset this impact. The average daily income of miners has increased from about $26,300 during the first halving cycle to over $40,200 today. He wrote, "Despite the decrease in issuance, miner incentives and the resulting network security have historically strengthened alongside the rise in Bitcoin prices."Since the fourth halving in April 2024, the block subsidy for miners has decreased from 6.25 to 3.125 Bitcoins per block. However, the optimistic conclusions of the report starkly contrast with the current realities faced by publicly traded mining companies. Several industry analysts describe the current environment as one of the most challenging for mining on record, due to the simultaneous decline in block rewards, rising operational costs, and increased competition.In response, several mining companies have begun to transition to the AI and high-performance computing sectors, leveraging existing power infrastructure to meet AI computing demands. VanEck estimates that publicly listed mining companies may need to raise up to $50 billion in additional funds to fully transition to AI infrastructure, but the requirements for AI data centers regarding facility standards, cooling, power redundancy, and networking are far higher than those of traditional Bitcoin mining operations, making the transition challenges significant.