Evening News | The cause of the theft of some Solana addresses has been basically determined; Taiyi Group announces acquisition of Huoxin

Organizer: Runsheng, Chain Catcher

"What important events have occurred in the past 24 hours"

1. Taiyi Group announces acquisition of Huobi Group's social product Huoxin, aiming to build a social platform focused on digital collectibles and the metaverse
Taiyi Group announced the official completion of its acquisition of Huobi Group's social product Huoxin and plans to develop Huoxin into the world's first social platform focused on digital collectibles and the metaverse, further promoting the construction of China's metaverse infrastructure.

Huoxin is an instant messaging social platform launched by Huobi Group in 2018, vertical to the blockchain field. As of July 2022, Huoxin has accumulated over 7 million registered users. It is reported that Huoxin will soon complete product function optimization and upgrades, build a digital collectibles and metaverse community, and will also provide users with metaverse digital identity, metaverse asset management, digital collectibles ranking and information, as well as a UGC publishing platform within its social system, providing social application scenarios for digital collectibles and access to the metaverse.

Taiyi Group is a comprehensive technology group focused on blockchain technology research and development and the implementation of the metaverse industry, and is the official partner of Unreal Engine in China. In the field of digital collectibles, Taiyi Shuyi is a well-known comprehensive service platform for digital collectibles in China. (Source link)

2. Slope Wallet: After discovering the vulnerability, server-side log records have been deleted, with 1,444 wallets potentially traced to this vulnerability
Slope Wallet stated on Twitter that according to the audit report from Solana auditing company OtterSec, the Slope mobile wallet mistakenly sent user mnemonic phrases to the Sentry server via TLS, leading to user asset theft. After discovering this vulnerability, Slope has deleted the server-side log records and stated that approximately 15% of the 9,223 affected wallets (1,444) had their assets stolen, possibly due to this vulnerability. (Source link)

3. Slow Mist: There are still doubts about the Solana theft incident, with 60% of the stolen Phantom wallets' reasons unknown
Slow Mist released an analysis of the Solana attack incident today, indicating that preliminary screening found that 30% of users' thefts were due to a private key leak from the Slope Wallet (Android, Version: 2.2.2) sentry service. The reasons for the theft of 60% of the affected users using Phantom wallets remain unknown. Slow Mist stated that if you have any thoughts, you are welcome to discuss together, hoping to contribute to the Solana ecosystem. Here are the specific questions:

1. Is the behavior of Sentry's service collecting user wallet mnemonic phrases a common security issue?

2. Since Phantom uses Sentry, will Phantom wallets be affected?

3. What is the reason for the hacking of the remaining 60% of stolen users?

4. As Sentry is a widely used service, could it have been compromised, leading to targeted attacks on the virtual currency ecosystem? (Source link)

4. Zhongbi hot wallet may have been attacked, hackers stole tokens and profited approximately $3.68 million
According to GMB Ventures researcher chuchuprotocol.eth, it appears that the hot wallet of the cryptocurrency exchange Zhongbi has been hacked, with hackers stealing a large number of tokens and transferring them to personal wallet addresses before selling them on DEX, resulting in a total profit of 2,224 ETH, approximately $3.68 million. (Source link)

5. Starbucks plans to launch Web3 loyalty program in September, including coffee-themed NFTs
Starbucks founder Howard Schultz announced during the earnings call that the company plans to launch a Web3-based loyalty program in September, which will include coffee-themed NFTs. Howard Schultz stated that the Web3 loyalty program can be seen as a way to attract young consumers to spend on the brand, building on the current rewards model and combining the digital Starbucks rewards ecosystem with digital collectibles of the Starbucks brand.

Previously, Starbucks had stated in April this year that it would "enter the NFT business" by the end of 2022. (Techcrunch)

6. BitValue Capital launches $100 million Web3 growth fund, focusing on investments in GameFi, SocialFi, and other areas
According to Yahoo Finance, global investment firm BitValue Capital announced the launch of a $100 million Web3 growth fund to encourage innovative blockchain projects. The fund will focus on investment opportunities in game studios, the metaverse, GameFi, NFTs, SocialFi, DAOs, and DeFi.

It is reported that BitValue Capital is a VC with a quantitative trading background, headquartered in Toronto, Canada, primarily investing in and incubating projects in the primary market, providing one-stop services from coding to launching trading platforms. (Source link)

"What are the exciting articles worth reading in the past 24 hours"

1. “Exclusive Interview with BAYC Founder: The Biggest Success Story in the NFT World”

Today, Bored Apes are ubiquitous in popular culture. Despite the collapse of the cryptocurrency and NFT markets this year, Bored Apes are still considered a "blue-chip" investment in the field. Behind their fame, the founders have remained mysterious until BuzzFeed News published a report revealing their identities. Subsequently, the Bored Ape founders took the initiative to post their names and photos on Twitter. This article is an in-depth interview with the Bored Ape founders, showcasing their rich character traits.

2. “Meng Yan: A Brief Overview of the Balance Sheet in the Web3 World”

Web3 involves many topics related to token economics and finance. In related discussions, the balance sheet is a very useful tool that can help clarify thoughts, see the essence of things, improve communication efficiency, and even help discover new innovation opportunities. The author feels that there are not many peers who understand this tool and can actively use it to analyze problems, which is quite regrettable, prompting him to write this article to introduce and advocate for it.

3. “a16z: Why NFT Creators Should Choose cc0?”

Public domain copyright opens up a new world for uncreative works. NFT projects can adopt many strategies when developing and establishing their IP. Like open-source software, cc0 works best for potential NFT projects that can empower the ecosystem. An ideal cc0 NFT project creates value-added opportunities for builders, reduces commercial disputes, and greatly benefits from the community's recognition of the value and contribution of core assets. In summary, cc0 provides NFT creators with a way to launch projects—allowing these projects to explore infinite possibilities for existence.