ChainCatcher message, Supremacy founder Yi stated on social media that there is a vulnerability in the frontend of the stablecoin protocol Angle Protocol, and users should be aware of the risks and avoid interacting with it.

ChainCatcher news, Morpho Labs stated on its X platform that after continuous investigation, it has confirmed that the Morpho frontend is secure. Users do not need to take any additional measures. Morpho indicated that at 4:44 AM Central European Time today, the Morpho team discovered and fixed the frontend issue. Next week, the team will share a detailed article explaining the cause, scope, and solution.Previous news, according to monitoring by Shield, a certain address may have suffered a loss of 2.6 million dollars due to an attack exploiting the Morpho Blue frontend vulnerability, with the attack transaction being front-run by the well-known on-chain arbitrageur c0ffeebabe.eth, and the funds ultimately transferred to address 0x1A5B...C742.

ChainCatcher news, Fuzzland co-founder Chaofan Shou tweeted that the vulnerability in the lending protocol Morpho's frontend (Bundler3) has been fixed.

ChainCatcher news, the Slow Mist security team recently disclosed that a logical vulnerability was found in the paid chat platform ReachMe io under the BNB Chain ecosystem, which allows bypassing the preset fee mechanism to send messages to any KOL (including Zhao Changpeng) at a very low cost.Researchers successfully sent a message to Zhao Changpeng for 0.01 BNB, bypassing the originally set message fee of 1 BNB. The vulnerability stemmed from the contract not verifying the consistency between the on-chain transfer amount and the price set on the front end. This vulnerability has now been promptly fixed.

ChainCatcher message, ChainCatcher will hold the "HyperLiquid Series Breach: Vulnerability, Arrogance, or Destiny?" X Space event tonight at 8 PM (UTC+8). After the 50x leverage whale incident, HyperLiquid has been attacked again using similar tactics, this time targeting the low liquidity meme coin $JELLYJELLY. The platform ultimately delisted the coin to stop the bleeding, but the contradiction between "one-click shutdown" and the decentralized concept has sparked heated discussions: how different are DEX and CEX?Tonight, we will review this game with IOSG Ventures researcher Danny, Matrix Partners Crypto head Zixi, Astherus BD manager Ember, Lnfi Network co-founder Darius, 8020trade founder Jason Kan, and Neutral Trade CEO Jared, discussing the choices and future of decentralized exchanges under extreme market shocks.Feel free to click link to participate in the Space discussion.

ChainCatcher message, Slow Mist posted on social media stating that a serious vulnerability in ReachMe was discovered and promptly notified the team, working together with them to fix the issue.

ChainCatcher news, MIM Spell posted on platform X stating that a vulnerability previously allowed hackers to steal 13 million dollars, and within 36 hours, Abracadabra has repurchased 6.5 million dollars of MIM and covered 50% of the hacker attack losses, with zero loss of user funds.Abracadabra will not back down and is currently expanding through platforms like Berachain to rebuild the system.

ChainCatcher message, MIM Spell has disclosed that it is aware of the vulnerability related to gmCauldrons. Core contributors and security engineers are investigating the issue in depth and will provide more information as soon as possible. After the Zeroshadow team alerted them, all cauldrons' lending has been suspended. The total losses caused by this attack are currently being assessed. Moreover, this vulnerability only affects gmCauldrons, and no user collateral assets are impacted. MIM Spell is willing to negotiate with the hacker, offering a total of 20% of the bug bounty.

ChainCatcher message, the RWA lending protocol Zoth has issued a security announcement on social media, confirming that its system has encountered a security vulnerability attack. The announcement states: "Our system has encountered a security vulnerability. We are actively investigating this incident and taking all necessary measures to resolve the issue as quickly as possible."Zoth stated that it is working closely with partners to mitigate the impact and fully resolve the issue. Once the investigation is complete, the team will share a detailed report and clarify the situation.

According to ChainCatcher news, SlowMist monitored that the Four.meme token was exploited by attackers who took advantage of a vulnerability before the token's release to steal liquidity.The attackers purchased a small amount of tokens before the release using the 0x7f79f6df function of Four.meme and utilized this feature to send the tokens to a PancakeSwap trading pair address that had not yet been created.This allowed the attackers to create a trading pair and add liquidity without needing to transfer the unreleased tokens, bypassing the transfer restrictions (MODE_TRANSFER_RESTRICTED) that were in place before the Four.meme token's release.Ultimately, the attackers added liquidity at an unexpected price, successfully stealing the liquidity from the pool.

ChainCatcher news, the Base ecological game project Henlo Kart stated, "A snapshot has been taken for all HENLO holders and LP positions. A vulnerability was found in the HENLO contract. The team is looking for a solution. Henlo has withdrawn all team token LP. All liquidity removed from the current LP positions will be re-deposited into new LP positions."The Henlo Kart token HENLO has dropped over 96% in the past 24 hours, with a current market cap of $106,000. The market cap of HENLO reached $92 million on January 14.

ChainCatcher news, blockchain security company CertiK issued a warning, as its security team detected multiple suspicious transactions on the Arbitrum network. An attacker with the address 0x97d8170e04771826a31c4c9b81e9f9191a1c8613 may have exploited a vulnerability in arbitrary calls to bypass signature verification, stealing approximately $140,000 from multiple unverified exchange adapter contracts.

ChainCatcher news, according to CrowdFund Insider, Ernst & Young (EY) has announced new artificial intelligence features for its blockchain analyzer: Smart Contract and Token Review (SC&TR) tool, aimed at enhancing smart contract vulnerability detection through broader code coverage and simplifying the contract simulation process for faster and more robust smart contract reviews.This AI feature allows users to automate and simulate the entire contract review process through natural language prompts and the tool's testing engine, significantly improving efficiency. This functionality is trained on a large number of existing testing and simulation libraries, supporting reviewers and enhancing vulnerability detection capabilities. Automation enables clients to achieve higher testing coverage while maintaining the same resources, while reducing the EY team's review time by 50%.Paul Brody, EY's Global Blockchain Leader, stated, "To fully realize the true value of smart contracts, businesses first need to eliminate the time-consuming and easily overlooked manual processes in testing. Our blockchain analyzer demonstrates how blockchain and AI can complement each other to achieve process automation and improvement."

ChainCatcher news, the 1inch team has discovered a vulnerability in its old Fusion v1 parser smart contract. According to the analysis by the SlowMist security team, this incident resulted in a loss of approximately 2.4 million USDC and 1276 WETH, totaling over 5 million dollars.The official confirmation states that this vulnerability does not affect end-user funds, and the impacted parties are only the parser contracts using Fusion v1. 1inch has taken measures and is continuously monitoring the security situation.

ChainCatcher news, Slow Mist issued a security alert stating that it detected suspicious transactions related to 1inch on March 5, resulting in a loss of approximately $1 million.Previous news, 1inch disclosed that its team discovered a vulnerability in the parser smart contract implemented with the outdated Fusion v1 on March 5.

ChainCatcher message, 1inch disclosed that its team discovered a vulnerability in the parser smart contract implemented with the outdated Fusion v1 on March 5. This vulnerability does not affect the security of end users' funds but may impact those who use the parser in their own contracts with Fusion v1.Although user funds are secure, 1inch is actively collaborating with the affected parsers to ensure their systems are secure. The 1inch team urges all parsers to immediately audit and update their contracts.

ChainCatcher message, the Slow Mist security team published a disclosure revealing a critical vulnerability (GHSA-vjh7-7g9h-fjfh) found in the widely used elliptic cryptography library.Attackers can extract private keys with just one signature by constructing specific inputs, which may lead to the theft of digital assets or identity credentials. This vulnerability could affect blockchain applications and digital identity systems that rely on this cryptography library.

ChainCatcher news, as Trump's latest tariffs approach, the U.S. stock market faces a potentially vulnerable moment. The S&P 500 index has fallen about 5% from its historic closing high on February 19, and a series of weak economic reports in the U.S. have raised concerns about economic growth, while the tariffs have compounded the market outlook.Analysts generally believe that imposing tariffs on foreign imports could exacerbate inflation and cut into corporate profits. Chuck Carlson, CEO of Horizon Investment Services, stated, "Currently, the market still views tariffs more as a negotiating tool rather than a long-term strategy, and if that begins to change, I think it will have a negative impact on the stock market." (Jin Shi)

ChainCatcher message, Infini has updated the progress of the hacking incident on platform X, disclosing that key information regarding the vulnerability has been identified and that the involved addresses are being monitored.

ChainCatcher news, according to Protos, developer "Calle" warned of vulnerabilities in the Lightning Network, indicating that nodes running versions lower than LND 0.18.5 or LITD 0.14.1 have security risks. This vulnerability allows hackers to remotely manipulate the payment status of Lightning invoices, thereby stealing funds.Pavol Rusnak, co-founder of Satoshi Labs, also issued a similar warning, urging Lightning Network users to update their node software as soon as possible. The vulnerabilities have been fixed in LND 0.18.5 and LITD 0.14.1, but since LND 0.18.5 was only released last week, many nodes have yet to update and remain at risk.