BTC $79,383.92 -0.17%
ETH $2,495.50 -0.42%
BNB $706.32 -0.03%
XRP $1.42 -0.41%
SOL $105.82 +1.77%
TRX $0.3404 +1.43%
DOGE $0.0866 -1.63%
ADA $0.2084 -1.70%
BCH $263.45 -1.71%
LINK $11.71 +0.04%
HYPE $83.11 +1.24%
AAVE $125.23 -0.42%
SUI $0.7584 -0.28%
XLM $0.1831 -0.92%
ZEC $795.53 +2.12%
BTC $79,383.92 -0.17%
ETH $2,495.50 -0.42%
BNB $706.32 -0.03%
XRP $1.42 -0.41%
SOL $105.82 +1.77%
TRX $0.3404 +1.43%
DOGE $0.0866 -1.63%
ADA $0.2084 -1.70%
BCH $263.45 -1.71%
LINK $11.71 +0.04%
HYPE $83.11 +1.24%
AAVE $125.23 -0.42%
SUI $0.7584 -0.28%
XLM $0.1831 -0.92%
ZEC $795.53 +2.12%

act

All
Article
Flash

first_img OneKey reproduces the transaction replacement attack targeting the old version of the Ledger Ethereum application

The security team of the open-source wallet provider OneKey successfully replicated the exploitation of a vulnerability in the old version of the Ledger Ethereum application in a laboratory environment. OneKey's founder and CEO Wang Yishi stated that they executed a "transaction replacement attack" on Ledger Ethereum application version 1.22.1 by exploiting a previously patched vulnerability, allowing attackers to overwrite pending transactions while users review legitimate transactions.Ledger responded that exploiting this vulnerability requires controlling the communication between the device and the host, such as through malware, compromised wallet software, or malicious web pages. Ledger has added application layer protections in the Ethereum application version 1.22.2 released on August 13 and fixed the underlying issue in Secure SDK 26.6.1 on August 21. Ledger emphasized that no users were hacked as a result; this was merely a replication of the vulnerability in a laboratory environment.This security test occurred after the Coldcard vulnerability incident. Previously, the Coldcard wallet had a firmware vulnerability that posed security risks to some mnemonic phrase generation, but Ledger stated that its devices were not affected by this vulnerability because recovery phrases are generated by a certified random source built into the device's secure chip. The vulnerability replicated by OneKey is unrelated to mnemonic phrase generation but affects the way transactions are processed during the signing process.

first_img Tencent Hunyuan releases and open-sources Hy4 preview, with a total of 770B parameters and 49B activated

Tencent Hunyuan has released and open-sourced the next-generation large language model Hy4 preview. This model has a total of 770B parameters and 49B active parameters, with a context length exceeding 1M. It demonstrates strong capabilities in real productivity tasks such as coding, office work, and science, firmly placing it in the top tier of open-source models. Hy4 preview significantly expands in model size, context length, and data scale, and enhances real-world performance through high-quality data co-built with Tencent experts in software engineering, gaming, finance, security, and deep collaboration with products like WorkBuddy.In software engineering, the model enhances understanding, planning, debugging, and verification capabilities for long-range development tasks, enabling the construction of complex front-end projects like a Three.js miniature town from scratch. In game development, it supports generating playable prototypes from a single sentence and can complete a full demo in Unity. In smart office applications, it can handle complex financial audits, filtering, analyzing, and delivering from multiple documents. In scientific research, it achieves acceleration in tasks such as molecular dynamics simulations and has initially formed a recursive self-improvement feedback loop.Hy4 preview can be experienced in Tencent products such as WorkBuddy/CodeBuddy domestic and international versions, Yuanbao, ima, and can also be accessed via API calls through Tencent Cloud Tokenhub and OpenRouter. WorkBuddy/CodeBuddy will launch a limited-time free activity for two weeks. Since the reconstruction of the infrastructure, the Hunyuan large model has iterated a major version approximately every two months, continuously optimizing through a preview-first and formal version-following approach.

Coinbase launches AiFi financial system: x402 has processed over 205 million transactions

Coinbase stated on the X platform that the financial layer surrounding AI agents is referred to as agent finance, or AiFi, which encompasses agent trading and agent commerce. AI agents can research information, make decisions, and execute operations on behalf of individuals and businesses, and they need to perform basic financial activities such as payments, receipts, value storage, and fund transfers. Coinbase claims that it is building tools for AI agents to continuously execute financial operations within predefined goals, permissions, limitations, and security boundaries.Coinbase indicated that Coinbase Advisor, Coinbase for Agents, x402, and Coinbase Business have formed the AiFi infrastructure. Coinbase Advisor is an SEC-registered investment advisor integrated into the app for Coinbase One users, providing portfolio analysis and guidance through a chat interface; Coinbase for Agents connects tools like Claude, ChatGPT, and Cursor to Coinbase accounts via MCP, allowing users to set operational conditions and security boundaries for agents, as well as create independent sandbox accounts for agent use.Coinbase stated that x402 is an open payment standard initiated by Coinbase and currently managed by an independent foundation, which supports AI agents in paying fees to other agents, applications, and services. As of now, x402 has processed over 205 million transactions, with a transaction volume of $53 million, covering 200,000 sellers, with Coinbase facilitating 67% of the activities. Single payments can be used for API calls, datasets, research materials, or computing resources.Coinbase indicated that Coinbase Business supports enterprises in natively receiving AI agent payments in USDC, and Coinbiz can help merchants sell services and content to software without relying on credit card credentials, manual invoicing, or payment processes designed with human customers in mind. Eligible businesses can earn a floating reward of 3.35% from idle USDC balances. USDC currently accounts for 99% of on-chain agent commerce transactions, while x402 represents 97% of agent finance protocol usage, with related activities operating on Base.

Hyperliquid Policy Center writes to the CFTC: Promoting perpetual contracts as a key focus of derivatives innovation in the United States

The Hyperliquid Policy Center stated on platform X that perpetual contracts should be at the core of the U.S. Commodity Futures Trading Commission (CFTC) innovation agenda. The agency submitted a statement regarding the first meeting of the CFTC Innovation Advisory Committee on August 20, pointing out that perpetual contracts are gradually expanding beyond the digital asset market to traditional asset classes such as stocks and commodities, and that demand for this product among U.S. market participants is rising.Perpetual contracts can meet the risk management needs of different market participants, making them particularly suitable for airlines hedging fuel costs, investment funds managing portfolio exposure, and AI developers addressing ongoing risks related to computing costs that do not have a clear expiration date. Compared to futures with fixed expiration dates, perpetual contracts do not require rolling over, and there are no expiration and delivery issues; they anchor contract prices to the underlying assets through periodic funding rates. Currently, on Hyperliquid, perpetual contracts deployed by third-party developers cover over 80 traditional commodity and stock markets, with a cumulative notional trading volume exceeding $500 billion.This year, the CFTC has taken several measures to promote the establishment of the perpetual contract market in the U.S. In May, the CFTC approved the first perpetual futures contract listed in the U.S. and issued a policy statement and continuous trading guidance regarding the listing of perpetual contracts; in June, the CFTC sought public opinion on extending perpetual contracts to energy commodities and further consulted on computing power derivatives.In addition, the Hyperliquid Policy Center believes that on-chain infrastructure can also promote the modernization of the U.S. derivatives market within the existing regulatory framework. Public blockchains can openly record markets, orders, and positions, continuously conduct margin assessments programmatically, and enable real-time collateral transfers, thereby reducing counterparty credit risk and settlement risk. The agency will continue to provide relevant research and technical documents to the CFTC Innovation Advisory Committee and committee staff, and promote the establishment of a pathway for U.S. market participants to compliantly access on-chain markets. The agency believes that perpetual contracts are one of the most representative financial innovations of the past decade and should be further developed in the U.S. market.
app_icon
ChainCatcher Building the Web3 world with innovations.