BTC $83,097.39 +2.22%
ETH $2,452.78 +2.98%
BNB $746.16 +2.57%
XRP $1.34 +3.84%
SOL $106.60 +2.52%
TRX $0.3306 -0.32%
DOGE $0.0818 +3.71%
ADA $0.2248 +4.31%
BCH $287.22 +4.94%
LINK $12.38 +3.97%
HYPE $81.51 +3.93%
AAVE $156.16 +5.44%
SUI $1.02 +4.50%
XLM $0.1832 +3.87%
ZEC $1,269.27 +12.41%
AAPL $337.78 -1.29%
AMZN $263.43 +0.11%
GOOGL $340.74 -1.17%
MSFT $528.38 -1.36%
META $693.86 -1.62%
NVDA $220.59 +1.92%
TSLA $382.59 +4.41%
SNDK $1,406.63 +4.79%
INTC $94.41 +3.90%
SPCX $161.19 +9.56%
MU $922.64 +4.08%
AMD $548.04 +3.27%
BTC $83,097.39 +2.22%
ETH $2,452.78 +2.98%
BNB $746.16 +2.57%
XRP $1.34 +3.84%
SOL $106.60 +2.52%
TRX $0.3306 -0.32%
DOGE $0.0818 +3.71%
ADA $0.2248 +4.31%
BCH $287.22 +4.94%
LINK $12.38 +3.97%
HYPE $81.51 +3.93%
AAVE $156.16 +5.44%
SUI $1.02 +4.50%
XLM $0.1832 +3.87%
ZEC $1,269.27 +12.41%
AAPL $337.78 -1.29%
AMZN $263.43 +0.11%
GOOGL $340.74 -1.17%
MSFT $528.38 -1.36%
META $693.86 -1.62%
NVDA $220.59 +1.92%
TSLA $382.59 +4.41%
SNDK $1,406.63 +4.79%
INTC $94.41 +3.90%
SPCX $161.19 +9.56%
MU $922.64 +4.08%
AMD $548.04 +3.27%

users

All
Article
Flash

first_img Open-source AI programming tool OpenCode was hacked, affecting approximately 1.4% of users

According to NetEase's report on "DeepTech," the open-source AI programming tool OpenCode has officially confirmed it was breached, affecting approximately 1.4% of OpenCode Console users, with some API keys for models stored on the platform potentially leaked. Multiple developers reported unusual charges on accounts used to call models from OpenAI, Anthropic, and others, with some claiming losses of hundreds of dollars and others stating amounts exceeding $1,700. The officials stated that the incident is related to a large-scale distillation attack and are currently working with OpenAI, Anthropic, and Google to address the issue.OpenCode was developed by members of the Anomaly team, with one of the main creators being Dax Raad. The team has previously worked on projects like SST and OpenNext. In addition to local programs, its cloud service Console can centralize API keys from providers like OpenAI, Anthropic, and Google in a workspace and call them on behalf of users; the incident occurred on this cloud service. A notification email stated that the attacker gained unauthorized access to a set of decommissioned old systems, and some third-party model API keys in the Console workspaces may have been exposed. Developer Colin Parsons reported unusual charges of about $281 on his OpenAI account and about $168 on his Anthropic account, while Preston Zeller reported losses of around $1,700. Other users reported unusual charges of about $400 on Anthropic and account restrictions triggered by unusual usage on Google services.OpenCode has notified affected users to revoke and replace their keys and check recent call records. Lydia Hallie, a member of the Anthropic Claude Code team, stated that Anthropic has collaborated with OpenCode and revoked the Claude API keys believed to be affected. Tibo, a member of the OpenAI team, stated that they are working with OpenCode to help affected API users restore access and refund the amounts that were unusually consumed during the attack. Dax Raad clarified that the affected service is OpenCode Console, not the locally running OpenCode, and that keys configured directly in the local tool will not be sent to OpenCode servers. On October 18, he stated on social media that the attacker had been continuously attempting to breach the system for the past 48 hours, and the team is strengthening defenses.

first_img Anthropic is researching how to enable AI agents to negotiate on behalf of users

Phoenix Technology cites a report from the Financial Times that on October 19, Beijing time, the AI company Anthropic is discussing with legal professionals how to enable AI agents to negotiate on behalf of users while adhering to reasonable negotiation rules to secure better deal terms. Two individuals familiar with Anthropic's thoughts stated that the company is seeking advice from law firms to understand how lawyers can balance client interests with fair negotiation outcomes. Anthropic declined to comment.The report mentions that as personal AI agent applications advance, related companies are beginning to consider allowing agents to communicate with each other to negotiate product prices, resolve customer service disputes, and even strive for better salary conditions on behalf of users. One person familiar with the related work stated that Anthropic is researching the negotiation norms that should be followed when models negotiate with each other, weighing factors such as how often to consult users during negotiations and how vigilant to remain against AI negotiation counterparts. Another individual close to the company mentioned that the company has also explored having users sign documents to confirm the tasks accepted by the agents and the rules they must adhere to.The Financial Times cites research released by Anthropic in April this year, stating that the policy and legal framework for AI models to conduct transactions on behalf of humans has yet to be established. This year, the company had the Claude agent negotiate around real goods and funds, and in a September experiment, employees bought and sold books through the agent, with agents employing tough strategies having a slight advantage in securing better outcomes. Harvard Business School Assistant Professor Michelle Vacharo conducted over 180,000 agent negotiations, covering scenarios such as employment contracts and lease agreements, and the research found that some agents attempted to induce the other party to disclose confidential information through prompt injections.

first_img StarkWare launched OffMarket, allowing Polymarket users to trade privately

According to The Block, Starknet developer StarkWare has officially opened its privacy trading service OffMarket to the public, allowing users to trade on Polymarket without publicly associating their positions with their accounts.The service has been undergoing limited testing since August, operating based on Starknet's zero-knowledge technology and shared privacy pool. Currently, the USDC deposit limit for each account is set at $1,000, and StarkWare has stated that it will adjust this limit based on demand and usage. Orders are still executed on Polymarket, facing the same buyers and sellers and market prices.OffMarket is completely non-custodial, with users' private keys stored in the browser, and funds held in Starknet's open-source privacy pool. Polymarket positions are held in contracts by wallets derived from user signatures. OpenZeppelin completed an audit of the privacy pool contract in June, finding no serious or high-risk issues, and StarkWare completed formal verification the following month. StarkWare co-founder and CEO Eli Ben-Sasson stated that the project stems from his long-term investment in the field of financial privacy and mentioned that OffMarket is bringing zero-knowledge technology to Polymarket.A spokesperson for StarkWare stated that OffMarket still cannot prevent others from identifying traders through transaction size or timing, and the market, prices, and transactions themselves remain public. Transfers of USDC from the shared pool to new wallets can also be seen.

Ledger users encounter physical letter scams, with forged notifications requesting registration for a Bitcoin wallet through ZenLedger

According to Bitcoin News monitoring, a German Ledger user @jayr_crypto reported receiving a forged letter again this week. The letter impersonates Ledger, claiming that new regulations require users to register their Bitcoin wallets through a service called ZenLedger by October 31. The letter uses Ledger's official branding elements and mentions German financial regulators, while also including a QR code that directs users to a so-called mandatory registration process.The user believes that addresses exposed in a previous data breach are being used for targeted attacks on Ledger users. In the same week, Ledger coordinated with MediaMarktSaturn to suspend the sale of its hardware wallets in a European retail network covering 11 countries and over 1,000 stores.Earlier reports indicated that malicious spy implants were found inside Ledger devices purchased from European retailers. Ledger confirmed separately that compromised devices sold by a Southeast Asian distributor contained implants capable of stealing recovery phrases and transmitting them over cellular networks. Ledger has not confirmed any breaches of devices in Europe. Ledger users are currently facing physical supply chain tampering and targeted phishing attacks initiated using home addresses. Do not scan suspicious QR codes or enter recovery phrases.

first_img Robinhood's social trading feature is open to qualified users in the United States and will be available on the Legend desktop platform

Robinhood announced that its social trading network is now open to all eligible users in the United States. CEO Vlad Tenev stated on October 13 that this feature is built into the app's information feed, centered around users' trades and performance. Users can follow other traders, view shared account activities, and initiate eligible trades directly from posts through the Quick trade feature. Tenev mentioned that Robinhood Social is now available to everyone, allowing users to share charts, profits and losses, and portfolio allocations, as well as receive news and company updates.This feature was previously tested starting on March 18, initially for 1,000 customers who attended the HOOD Summit, followed by an additional 10,000 in the subsequent weeks. The early version provided verified trading posts, daily and yearly profit and loss statistics, and the ability to place orders manually from the information feed; news feeds are part of future planning. Sharing is selective: trades will not be automatically published, and customers can choose which eligible trades to publish, as well as disable trading statistics in their profiles.Access and publishable content are restricted. Social is only available in the United States, and Robinhood excludes licensed securities professionals, individuals associated with regulated financial institutions, and the company's own employees. Its help page indicates that futures and multi-leg options trades currently do not meet publishing criteria. Tenev stated that Social will be coming to Robinhood's desktop trading platform Legend in the coming weeks.
app_icon
ChainCatcher Building the Web3 world with innovations.