ChainCatcher news, Slow Mist founder Yu Xian tweeted that the main role of AI Agents in the cryptocurrency industry seems to focus on providing incentive mechanisms through token issuance, while major players outside the cryptocurrency industry are concentrating on defining interoperability protocols and developing more practical AI applications. Compared to technological advancements in non-cryptocurrency industries, the cryptocurrency industry's focus remains more on the token level, showing a clear sense of disconnection.

ChainCatcher message, regarding the recent market attention on the quantum computer chip Willow and the freezing of Satoshi Nakamoto's private key, Slow Mist founder Yu Xian quoted crypto researcher Jeffrey Scholz's tweet: "The current dozens of quantum gates are still millions of gates away from being able to crack Bitcoin private keys. Increasing this number of quantum gates is not easy, and the noise and error rates will also increase, ultimately resulting in a quickly produced waste in the real world... Let's worry about Satoshi's private key in a few decades."

ChainCatcher message, Slow Mist founder Yu Xian posted on the X platform to remind that many people have recently fallen victim to the Telegram Safeguard scam.This scam mainly consists of two types: account theft and Trojan implantation. The former involves hackers stealing Telegram accounts, while the latter involves implanting Trojans onto computers. Users must remember to never provide their phone numbers, login codes, or two-factor authentication passwords, and should be cautious of unfamiliar links and codes to avoid significant losses.

ChainCatcher message, Slow Mist's Yuxian posted on X: "This morning, the DEXX hacker transferred another 300 ETH into the Tornado Cash mixing protocol."

ChainCatcher message, Slow Mist's Yuxian posted on platform X stating that a well-known bot platform was discovered to have a related vulnerability by a white hat, which could lead to private key leakage. The white hat provided feedback, but it seems there was some controversy regarding the bounty for the vulnerability. The white hat is concerned that this bot platform may face risks similar to DEXX being hacked in the future, and if that happens, the investigation may trace back to the evidence he left at that time, so he seeks to clear his name.Yuxian stated that to avoid being non-neutral, it is specifically noted: the term "white hat" mentioned here does not necessarily mean a white hat, and it is not possible to verify who is right or wrong, or who is more right or less right. If this bot platform is hacked in the future, there will be some information shared by this white hat that can be used for verification.

ChainCatcher news, Slow Mist's Yu Xian posted on platform X: "Some ETH started to flow into Tornado Cash for mixing early in the morning, which can almost be considered a final signal (the DEXX malicious actors have no intention of turning back, choosing to walk a cruel black path to the end)."Previous news, the EVM (ETH/BSC/BASE) address of the DEXX hacker has continued to show unusual activity, with a significant amount of funds (including many MEME) continuously accumulating into 0xffb9926310b291e17d7df846cded66cda2c68228 since around 7 AM.

ChainCatcher message, according to cosine detection, the EVM (ETH/BSC/BASE) address of the DEXX hacker has started to show unusual activity, with a significant amount of funds (including many MEME) continuously being aggregated into 0xffb9926310b291e17d7df846cded66cda2c68228 since around 7 AM.

ChainCatcher message, Slow Mist confirmed on X that the DEXX attackers are consolidating the stolen funds from the decentralized platform on Solana, and are splitting them out from the consolidation address for laundering. Some of these have started using the Wormhole cross-chain service to transfer assets to Ethereum addresses starting with 0xffe224e.

ChainCatcher message, Slow Mist Yu X stated: "Attention @solana/web3.js supply chain poisoning, known versions 1.95.6 and 1.95.7 contain backdoor code that can steal user private keys. The new version no longer has this risk. Well-known wallets have not found this risk, but real attacks have occurred.It is speculated that perhaps third-party private key-related tools (including bots) that update dependency packages in a timely manner were affected, as the poisoned versions only lasted a few hours before being discovered and removed. If you are using this package, please be cautious and check."

ChainCatcher message, a community user posted on platform X stating: "I believe that the DEXX victims need to go through 4 key steps to receive compensation: SlowMist's statistical results; providing a compensation plan (different plans based on financing results); developing a compensation entry; executing the compensation plan."In response, SlowMist founder Yu Xian stated: "To clarify, the 'SlowMist statistics' matter is not in a serial relationship with several others, because the overall losses were basically disclosed within two or three days after the incident (at that time, the stolen market value was over 21 million USD). The subsequent increases are almost all small amount losses; if there were still large amounts, we should have known by now. Since we disclose the attacker's address, handling false reports and omissions will continue to consume a lot of time. The entire process needs to be rigorously compared and judged back and forth. If we rely solely on our so-called final statistics, it is hard to say how long that will take. Therefore, we believe this is not a serial relationship; many tasks are essentially parallel."

ChainCatcher news, according to monitoring by Yu Xian, the founder of Slow Mist Technology, starting at 2:48 AM, DEXX attackers have been gradually exchanging tokens from a batch of EVM (ETH/BASE/BSC) addresses related to the attackers for corresponding ETH/BNB.The exchange is still ongoing, and these ETH/BNB have not been withdrawn yet (although related tests have been discovered).

ChainCatcher news, Slow Mist founder Yu Xian posted on X that early this morning, various valuable tokens on the Solana address related to the DEXX attacker were exchanged for SOL. Currently, these SOL have not been transferred out yet. Additionally, the attacker's EVM (ETH/BSC/BASE) addresses have begun to show signs of unusual activity, but there has not been a large-scale movement yet.

ChainCatcher news, Slow Mist founder Yu Xian posted on X that early this morning, various valuable tokens related to the DEXX attacker’s Solana address were exchanged for SOL, and currently, these SOL have not been transferred out yet.In addition, the attacker’s EVM (ETH/BSC/BASE) addresses have begun to show signs of activity testing, but there has not been large-scale movement yet.

ChainCatcher message, Slow Mist disclosed on platform X that the DEXX attacker started testing the token exchange for ETH on the EVM chain half an hour ago.

ChainCatcher message, Slow Mist Yu X posted: "Early this morning, the DEXX attacker continued to exchange various value tokens on another batch of Solana addresses for SOL, and has not transferred them out yet. In addition, the attacker's EVM address has not shown any movement for the time being."

ChainCatcher news, Slow Fog founder Yu Xian stated, "The Sui ecosystem project OceansGallerie (@OceansGallerie) is indeed quite strange. The token pool is too centralized, with a total supply of 10 billion OCEANS. The holders are overly concentrated, and the token has dropped by dozens of times in less than a week. Now the pool has less than $20,000. The addresses involved in abnormal operations have a strong correlation with the OCEANS token issuance address."Additionally, X user @tongyiju reported that Cetus Protocol tweeted on November 20 about creating an Oceans pool, promising daily incentives. On November 23, Oceans announced a partnership with an investment fund under ADA. @tongyiju invested tens of thousands of Sui as liquidity, but at 3 AM yesterday, the project team withdrew the liquidity, causing the pool to crash.

ChainCatcher message, Slow Mist founder Yu Xian tweeted a reminder that a certain hacker organization has recently been found targeting the Crypto industry with directed poisoning attacks. The method involves impersonating VCs to send fake meeting links, guiding victims to download malicious scripts (such as "IP_Request.scpt"), with the main attack targets being Mac computer users.If you encounter this, it is recommended to take the following measures immediately:Asset Transfer: If your computer has wallets (private keys/seed phrases), promptly transfer the assets to a safe location;Account Inspection: Change passwords and 2FA for important accounts (such as Telegram, X, email, trading platforms, etc.) and check for any unusual login devices;Virus Cleanup: Use well-known antivirus software (such as AVG, Bitdefender, Kaspersky, etc.) for a comprehensive scan, and if necessary, use multiple software alternately for scanning;System Reset: If you are still not at ease, back up important files and then reset your computer, scanning each backup file for viruses.

ChainCatcher message, Slow Mist founder Yu Xian posted on X, "This morning through monitoring, it was found that starting around 3 AM, various tokens related to the DEXX attacker on the Solana address were exchanged in large quantities for SOL, and currently these SOL have not been transferred out."

ChainCatcher message, Slow Mist founder Yu Xian stated on social media: "Directly submitting the DEXX theft form information to our victims exceeds 1,000, and there are many more victims contacted through various channels along with our security team. The losses vary in size, and the general statistics have been disclosed before. However, there are still many that have not been submitted. We are continuously conducting various complex cross-analyses with DEXX officials and partners to avoid false reports while hoping to collect as comprehensively as possible. This is a complex task.We know everyone is anxious. In addition to the DEXX officials filing a police report, several victims have also reported to the police. As a security company, Slow Mist has an obligation to cooperate with law enforcement, and the content of law enforcement actions will not be disclosed without authorization."

ChainCatcher message, Slow Mist's Yu Xian posted on platform X stating that, under the premise of phishing without taking private keys, a mechanism that changes the owner with a single signature exists in mainstream chains besides Solana, including Tron. Once changed, your private key is rendered useless, unless the phisher is willing to return the owner to you. Otherwise, do not believe any claims of recovery; any such claims can be considered a scam.