developer

According to CoinDesk, Solana developers have proposed to abolish the persistent nonce transaction feature, which was used in the April attack on the trading protocol Drift, resulting in a loss of at least $270 million. The proposal still requires technical approval and is expected to take effect on the mainnet as early as May 5, 2027.Persistent nonce allows signed transactions to remain valid for a long time, enabling custodians and exchanges to perform offline signing. Relevant institutions will need to migrate to alternative solutions, and the migration requirements from the Solana Foundation may delay the final deadline.

Zcash developers proposed to shorten the blockchain target block interval from 25 seconds to 20 seconds to accelerate transaction confirmation speed. On Sunday, developers ValarDragon and Evan Forbes submitted a draft of a Zcash Improvement Proposal (ZIP) to the Zcash community forum, hoping that this change will be included in the next community vote and considered in the upcoming NU7.1 network upgrade.According to the proposal, shortening the block interval will reduce the expected waiting time for the first transaction confirmation, thereby improving the user experience for offline payments, exchange deposits, and cross-chain swaps. The developers stated that this change will not increase the overall processing capacity for daily privacy transactions on the network; at the same time, despite more frequent block generation, the proposal will maintain Zcash's existing issuance schedule.The proposal was made a few days after the NU7 upgrade went live. On Friday, the NU7 upgrade activated on the mainnet, shortening the network target block interval from 75 seconds to 25 seconds. This upgrade also introduced a network sustainability mechanism, using part of the transaction fees collected for future mining rewards while maintaining Zcash's supply cap of 21 million ZEC.

The Ethereum Foundation published a blog, reminding contract developers and auditors to check whether their projects rely on 8 Gas billing assumptions, which will no longer hold due to the adjustments in Gas charging methods in Glamsterdam with EIP-8037 and EIP-8038. The Ethereum Foundation has established a code repository that provides explanations, examples, and keywords for self-checking related to each assumption. Affected projects can contact the team via email.The team is collaborating with several auditing companies and conducting internal audits, but it cannot cover all projects on Ethereum and their on-chain and off-chain code. The Ethereum Foundation announced on October 23 that it has postponed the Glamsterdam upgrade originally scheduled to be activated on the Hoodi testnet, with a new activation time yet to be determined. Ethereum Foundation researcher Toni Wahrstätter stated on October 26 that the reason for the delay was a report from ChainSecurity that revealed issues with EIP-8037 when interacting with certain contracts, and its impact is now largely understood.

According to Web3 developer brucexu.eth, he encountered a phishing scam involving fake recruitment in January this year. After using Cursor to open the project directory provided by the other party, his device was infected with a Trojan, but ultimately there was no asset loss.He stated that the attacker provided a code repository through the recruitment process; he initially thought it was safe to just view the code without running it, but after analyzing the sample, Yu Xian, the founder of Slow Mist, warned that opening the project directory could also trigger malicious code. After confirming the infection, he transferred assets, rotated credentials, and reinstalled the system.

According to Fields' concept, an attacker stealing 1 BTC needs to provide an additional 1 BTC from a quantum-safe wallet as collateral, and both funds will be locked for a waiting period, such as 30 days.Before quantum attacks become a reality, the original owner can create a quantum-safe "mine" that contains hidden proof of ownership. If the thief later attempts to transfer the vulnerable coins, the stolen BTC and the thief's collateral will be locked. The owner can disclose the proof during the waiting period to reclaim their BTC and receive the thief's collateral as a penalty. The thief cannot determine which addresses have traps before investing funds.

According to Decrypt, Bitcoin developer Matt Corallo stated on the MARA Foundation TV program that he estimates there is an 80% chance that the next soft fork of the Bitcoin network will be the "Big Consensus Cleanup" (BIP-54).This proposal was introduced in 2019 and aims to fix four long-standing vulnerabilities in Bitcoin's consensus rules, including issues related to the difficulty adjustment mechanism and denial-of-service attack vectors among miners.

On November 4th, B.AI announced that it now supports GitHub account login. Based on the existing multiple login methods, developers can quickly access by clicking "Login with GitHub," eliminating the need to fill out cumbersome information. The convenience and security of account access have been enhanced simultaneously. For developers who frequently use code repositories, CI tools, and multi-environment collaboration, this method reduces the costs of repeated registration and information entry, making account management and team collaboration smoother, and allowing developers to seamlessly integrate into the B.AI developer ecosystem. Welcome to visit chat.b.ai/chat to experience the new login method.

On November 3, the cryptocurrency trading platform Robinhood's Robinhood Crypto announced that it is collaborating with the Ethereum scaling network Arbitrum to support projects launched on its Ethereum Layer 2 network, Robinhood Chain, through Open House. This series is aimed at developers, founders, and mentors, with a total funding amount of $1.8 million.The next phase is the second session of the Arbitrum Mentorship Program, lasting 12 weeks, where participants can connect with investors and ecosystem partners, and present at Demo Day. The individual funding amount is $100,000. Applications are open until December 6, 2026.

According to IT Home, Qualcomm has announced that its Qualcomm AI Hub is now open to developers in China. Partners and developers can use this platform to accelerate the creation of terminal-side generative AI and agent AI. The Qualcomm AI Hub integrates Models, Workbench, Apps, and the GenieX edge inference framework.Among them, AI Hub Models provides a library of over 230 pre-optimized models that continues to expand; AI Hub Workbench allows developers to fine-tune models on real cloud-hosted devices; AI Hub Apps offers sample applications and reference code to help developers integrate AI Hub Models into their applications. The Chinese version of Qualcomm AI Hub also provides resources and support through its official website, Qualcomm Terminal Cloud China Device Farm, and developer forums.

According to a report by the Korean News Agency, Palantir CEO Alex Karp stated in a letter to shareholders released with the third-quarter financial report on November 2 (local time) that alignment issues do exist, but the real problem is not aligning the goals of technological products with human interests, but rather aligning the goals of AI developers and customer interests with the public interest of humanity.The report interprets this as meaning that instead of being wary of AI entities being hostile to humans, we should be more cautious of large AI developers like Anthropic and OpenAI pursuing selfish goals. Karp has previously criticized AI developers for attempting to absorb core data and "alpha" (technological advantages) of enterprise clients into their own AI.

According to market news, voice AI company Deepgram has acquired the developer of the open-source voice AI infrastructure framework Pipecat, Daily. The parties did not disclose the transaction amount and promised to continue maintaining Pipecat as open-source and vendor-neutral.Pipecat can manage voice and video streams and integrates speech-to-text (STT), large language models (LLM), and text-to-speech (TTS) to reduce real-time interaction latency.

Smart contract developer Justin Kalland posted on X, indicating that the Binance hacker may have made a potential mistake, and MetaMask should retain any Web2 logs it can access as much as possible. He stated that the hacker sent 175 million USDT to a new wallet, and about 2.5 minutes later, that wallet received 2 ETH, likely used to pay for gas fees, which aligns with the usage pattern of other attack wallets.Kalland noted that exactly two minutes later, the wallet used MetaMask's Gas Station service, even though there were already gas fees at that time. Three consecutive transactions appeared in the same block, including an ETH deposit from the Gas Station, an unlimited USDT authorization to the Kyber Network router, and a payment of 127.67 USDT to the Gas Station. The amount of this ETH deposit perfectly matched the maximum gas budget after combining the Kyber authorization and USDT payment, down to the wei.Kalland stated that the ETH held by the wallet at that time was sufficient to cover the aforementioned fees, reasonably inferring that the user was using the MetaMask wallet and mistakenly selected USDT to pay for gas fees due to haste. Using the MetaMask Gas Station requires going through MetaMask Sentinel, and the transaction is broadcasted by it rather than through conventional RPC, meaning that related interactions likely left off-chain records that may contain IP metadata. Among the checked attacker wallets, this is the only one that showed the use of the Gas Station, with the address 0xAa246BF639586a6Ba46762D378CE50cA4fc654a0.

Regarding the incident of Binance allegedly being hacked, there are opinions suggesting that hackers may have exploited the Ethereum EIP-7702 mechanism to control wallets and transfer funds. User 0xVEER stated that developer 0xjustadev had warned about such a situation during the EIP-7702 discussion approximately two years ago. Currently, it has not been officially confirmed by Binance whether this incident is indeed related to EIP-7702; the aforementioned content is merely a community opinion.The attached screenshot shows that in October 2024, a developer pointed out in the Ethereum community forum discussion thread on EIP-7702 (Set EOA account code) that phishing techniques at that time mainly revolved around EIP-712 signatures, which were relatively readable and easier to simulate. The proposal could potentially allow attackers to transfer all valuable assets, including native tokens, through signatures that are less readable and harder to simulate. The developer also expressed concern that wallets might adopt highly centralized contract signature whitelists as a result, constituting a regression in security and decentralization.

According to informed sources, in response to market skepticism, Josh Payne, founder and CEO of Nscale, an AI data center developer transformed from a Bitcoin mining company, stated that the company will continue to advance its IPO as planned, with a target valuation of $30 billion. In a recent internal memo to employees, he mentioned that Nscale has an "insatiable" market demand and a "robust capital structure," and stated that "data speaks louder than words."Reports indicate that the AI infrastructure industry is under pressure as Nscale approaches its IPO. The company claims to have signed contracts worth $103 billion, but as of August 2026, it has only delivered 55 megawatts of computing power, while potential contract demand corresponds to a capacity of 10 gigawatts. Its data center projects are also facing delays, safety violations, and operational challenges, with Microsoft recently withdrawing from one of its data center projects in the UK.

Robinhood CEO Vlad Tenev stated during the third quarter earnings call held this morning that the future plan is to build Robinhood Chain into the best place to hold and trade all tokenized assets, starting with stock tokens and perpetual contracts, and then expanding significantly.Regarding support for builders, Vlad said, "We are currently putting a lot of effort into researching how to further scale and how to better support community development. Many developers have provided feedback that we can do more in supporting the community. I believe everyone will see us increasing our investment because we want to make it the best developer ecosystem and the best on-chain community in the world. So, you will see us increasing investment because the development of emerging ecosystems like this is rare."He also confirmed, "Robinhood is working hard to do more for the community. We had to form a team, and I think in the near future, you will see us providing more support for developers."

According to CoinDesk, XRP Ledger developers are testing a new feature that aims to allow the creation of blockchain accounts with an initial balance of zero, with existing accounts bearing the reserve required for new accounts, thereby lowering the financial threshold for payment applications and automated software to create wallets on a large scale. This proposal was submitted on October 15 in the form of a SponsoredAccountCreate transaction proposal.According to current XRP Ledger rules, each account must reserve at least 1 XRP as a reserve, meaning that creating 100,000 independent accounts would require locking up 100,000 XRP. The new proposal intends for sponsored accounts to bear this reserve requirement, and a broader fee sponsorship mechanism in the future could also allow applications to pay transaction fees on behalf of users, but the overall reserve requirement for the network will not be eliminated. This feature is expected to lower the usage threshold for scenarios such as embedded wallets, RLUSD stablecoin payments, and AI agent automated payments.However, the related code is still under review, and the sponsorship mechanism it relies on has not yet gone live on the mainnet. As of October 19, the mechanism has only received 11 votes out of the 35 required validator votes, still falling short of the 29 votes needed for approval.

The developer tools AI visibility and usability platform AgentRel announced on X the completion of a $1.3 million financing round, with investors Y Combinator and Broom Ventures. The funds will be used to build AgentRel.The announcement stated that AgentRel helps developer tool companies see whether ChatGPT, Claude, or Gemini would recommend their products or competitors' products, and identifies the difficult points users encounter when using Claude Code. The announcement also mentioned that Profound, Peec, and most other AI visibility tools primarily measure volume, while AgentRel provides accurate data and helps users take action based on that.

According to "Du Jia," Tencent is currently beta testing "HermitKit," an AI capability plugin for WeChat Mini Programs, providing three levels of access: API, UI components, and Demo. This plugin supports streaming calls to large models through ChatApi, creates and manages Agents using AgentBuilder, and enables multi-turn conversations, with built-in session storage and long-term memory capabilities. Additionally, it can bind remote Agents via QR code scanning through AgentChannel to complete message sending and receiving.Currently, HermitKit showcases 7 types of functional demonstrations, including AI SDK, Agent Channel, Agent Management, Pet Agent, Chatbot, Travel Planning, and Plugin Market. Among them, the AI SDK aligns with cloud development APIs such as createModel, generateText, and streamText; the Pet Agent allows developers to read pet status through interfaces and trigger status changes using props; the Plugin Market enables searching, publishing, and downloading MCP, Skill, and Expert resource packages. This plugin has not officially launched yet, and related capabilities may still be subject to adjustments, with specifics to be confirmed by official statements.

Paranoid developer Ignotus Nemo proposed a recursive aggregation scheme for EIP-8288 on the Ethereum research forum, suggesting support for various approved proof sizes to allow smaller proofs for small-scale aggregation. He implemented heterogeneous recursion in the Paranoid system, which has been running both large and small state transition proofs on the public mainnet.The scheme uses a limited set of authenticated validator libraries, processing cross-class delayed validation through independent accumulator channels for each class to ensure the correctness of matrix claims in the recursive steps. When applying this mechanism to EIP-8288, discussions are needed on how to merge subclass libraries, handle dependencies, and address semantic compatibility issues between program identities and validator classes. EIP-8288 was proposed by Vitalik Buterin and Thomas Coratger in June 2026, primarily addressing the issues of large post-quantum signatures and STARK proof sizes, as well as high on-chain verification costs.

Web3 game developer Unagi announced on the X platform that the company has entered a court-ordered judicial liquidation process in France, and all assets will be publicly sold under the supervision of a court-appointed liquidator.Unagi's products include Persona Journey, Ultimate Champions, and Records. The assets for sale include: the intellectual property of Persona Journey, NFT contracts and creator royalty rights, 957 Persona NFTs in the treasury, community accounts, and related AI products; the token UNA and its contracts; the fantasy football and basketball game Ultimate Champions and its NFT card economy; a white-label fantasy sports platform; the completed but unreleased prediction game Fantasy Brainz; and the AI user-generated content platform Records launched in March this year.Each asset can be acquired separately, with the bid deadline set for November 2.