According to ChainCatcher news, the official Bedrock announcement has released an analysis report on the uniBTC security vulnerability incident, which includes the following main points:The contract vulnerability has been confirmed and resolved;All assets are safe;Airdrop plan: All uniBTC holders can claim airdrop of 100 diamonds, and future TGE community airdrops will increase by 0.5%;The contract opening time will await official notification.

ChainCatcher news, Penpie has released a report on the hacking incident, with a total of approximately $27.34 million worth of 11,113.6 ETH stolen. The attacker exploited a security vulnerability on the Penpie platform by manipulating a fake Pendle market to maximize rewards. The vulnerability is located in the batchHarvestMarketRewards() function of the PendleStakingBaseUpg contract, where the attacker manipulated the reward tokens and their quantities by re-entering the depositMarket() function and repeatedly adding new deposits from flash loans. The Penpie team responded quickly, suspending deposit and withdrawal functions, and collaborating with multiple security agencies to trace the stolen funds.Currently, the Penpie frontend has been restored, and the team is working with law enforcement to identify and apprehend the attacker. Additionally, the Penpie team is developing a compensation plan to fairly address the losses of affected users.

ChainCatcher message, Prisma Finance has released a vulnerability attack analysis report, which indicates that vulnerabilities in the mkUSD and ULTRA contracts resulted in a loss of 3,257 ETH, worth approximately 11 million USD. The Prisma team is continuing to investigate and is working to communicate with the exploiters. Once we confirm that all funds are secure, we will lift the suspension of the protocol. Currently, about 20 addresses are still affected. Prisma Finance will make every effort to recover user funds and will keep you updated on the latest developments regarding the next steps.

ChainCatcher news, Wu Jihan stated on social media that Matrixport's analysts are independent and can express their opinions without any influence or interference from management. Analysts are hired for their exceptional analytical abilities compared to his personal views and other management teams. However, Wu Jihan, like other investors, simply skimmed through the report (the content includes that the Bitcoin spot ETF will not be approved, authored by Markus). Wu Jihan stated that Markus is a talented analyst. At the beginning of 2023, Matrixport was one of the few companies that accurately predicted Bitcoin's low point and maintained an extremely bullish stance. This latest report was prepared for Matrixport's clients, and its widespread dissemination in the media was not part of Matrixport's original plan and is beyond its control.As far as he knows, Matrixport has consistently advised its clients to be aware of risks and leverage, especially considering the market volatility triggered by expectations surrounding the ETF. Looking at Bitcoin's history and future prospects, the current volatility and the uncertainty of a potential approval for the Bitcoin ETF in January 2024 ultimately do not matter. In the long run, Bitcoin will always dominate. From his personal perspective, the approval of a spot ETF by the SEC is inevitable, which will attract new investment funds into Bitcoin. Bitcoin is expected to solidify its position as a store of value and a risk-hedging asset, similar to gold.Earlier, ChainCatcher reported that Matrixport released a report yesterday stating that the SEC is expected to reject all Bitcoin spot ETF applications in January due to all applications failing to meet key requirements. Currently, the SEC voting committee, led by Democrats, is unlikely to approve a Bitcoin spot ETF, as this would legitimize Bitcoin as an alternative store of value. If the SEC denies approval, there will be large-scale liquidation activities in the market, and the price of Bitcoin could quickly drop by 20%. Nevertheless, Matrix on Target still expects that even if the SEC vetoes the ETF, the price of Bitcoin will be above $42,000 by the end of 2024. (The market generally believes that this report led to a rapid decline in Bitcoin last night.)

ChainCatcher message, DeFi protocol MetronomeDAO released an analysis report on the Curve attack incident, stating that the recovered funds have been injected into a new Curve msETH-WETH pool, which will be fully allocated to the affected LPs as part of an effort to restore usage as much as possible.Metronome seeks to negotiate to recover the remaining funds, and the team also supports the repair work led by Vyper and Curve. Specific instructions on how to reallocate these funds will be announced soon.

ChainCatcher message, the Ethereum programming language Vyper released a post-mortem analysis report regarding last week's vulnerability incident. The report indicated that on July 30, multiple Curve liquidity pools were exploited due to a potential vulnerability in the Vyper compiler, which was an improperly implemented reentrancy guard. The affected Vyper versions included v0.2.15, v0.2.16, and v0.3.0.Vyper stated that the vulnerability has been fixed and tested in version v0.3.1, and that v0.3.1 and later versions are safe. However, at the time, it was not realized that protocols using the vulnerable versions of the compiler would be affected, nor were downstream protocols notified in a timely manner.

ChainCatcher news, SushiSwap released the RouteProcessor2 event analysis report. The report states that due to 18 replay transactions, the 1800 WETH initially drained from the first user wallet eventually entered multiple wallets. A total of 885 ETH has been refunded so far. Additionally, 795 ETH is currently in the execution layer reward vault.Sushi stated that the last remaining portion of the stolen funds will be borne by Sushi and refunded, and a claims process is in place for users affected by both white hat and black hat funds. The user claim form is currently under verification, and the Merkle claim contract is undergoing an audit. Sushi has proposed different compensation methods for two types of affected users: for users with recovered funds, they can request through the Merkle tree contract via the Sushi UI; for users with unrecovered funds, Sushi will set up a separate claims process. (Source link)

The Chain Catcher news, co-edited by the On-chain Industry Blockchain Research Institute and the Blockchain Application Branch of the China Federation of Logistics and Purchasing, officially released the "2022 China Metaverse Policy Analysis Report." The report shows that, according to incomplete statistics, as of the end of September 2022, there are 32 policies related to the metaverse published by government departments at various levels, from provinces to cities and districts. These include strengthening industrial integration applications, enhancing the construction of the metaverse ecosystem, strengthening core technology research and development, optimizing industrial layout, and providing financial guarantees and support.From the perspective of the issuing unit level, there are 15 municipal-level policies, 10 provincial-level policies, and 7 county-level policies; in terms of regional distribution, first-tier cities like Beijing and Shanghai, as well as new first-tier cities like Chongqing and Hangzhou, account for 35%, while non-first-tier cities account for 30%; in terms of regional distribution, the East China region has the largest proportion of blockchain-related policies published, reaching about 53%. (source link)

Chain Catcher news, the White House Office of Science and Technology Policy (OSTP) has released a report analyzing the design choices of 18 central bank digital currency (CBDC) systems for the potential launch of a CBDC in the United States. The report analyzes the technical aspects of the 18 CBDC design choices, covering six categories: participants, governance, security, transactions, data, and adjustments, to assist policymakers in ultimately determining how to design an ideal U.S. central bank digital currency system. (Source link)