BTC $78,445.28 -0.92%
ETH $2,485.21 -0.26%
BNB $752.50 +1.70%
XRP $1.42 +1.46%
SOL $103.37 -0.46%
TRX $0.3388 +1.42%
DOGE $0.0900 -0.63%
ADA $0.2195 -0.57%
BCH $258.62 +0.01%
LINK $12.53 -1.70%
HYPE $84.98 -0.18%
AAVE $128.83 -2.47%
SUI $0.8111 -0.84%
XLM $0.1879 -3.06%
ZEC $1,178.83 +3.38%
BTC $78,445.28 -0.92%
ETH $2,485.21 -0.26%
BNB $752.50 +1.70%
XRP $1.42 +1.46%
SOL $103.37 -0.46%
TRX $0.3388 +1.42%
DOGE $0.0900 -0.63%
ADA $0.2195 -0.57%
BCH $258.62 +0.01%
LINK $12.53 -1.70%
HYPE $84.98 -0.18%
AAVE $128.83 -2.47%
SUI $0.8111 -0.84%
XLM $0.1879 -3.06%
ZEC $1,178.83 +3.38%

extension

All
Article
Flash

first_img Socket exposes 77 malicious wallet extensions for Firefox, 40 confirmed to steal mnemonic phrases

According to a report by Decrypt, security company Socket released research results linking 77 Firefox extensions to what it calls a "wallet theft factory," with 40 confirmed to have malicious behavior.These extensions disguise themselves as Web3 products like OKX, Rabby Wallet, and TronLink, tricking users into importing wallets through fake wallet interfaces or using modified real wallet code to steal mnemonic phrases and private keys as users input them. Mozilla's signature records show that this activity lasted from March 9 to August 3, and multiple extensions were still online at the time of Socket's report.About half of the extensions displayed realistic wallet interfaces and prompted users to import existing wallets, thereby intercepting the inputted mnemonic phrases or private keys; another 13 were modified versions of Rabby that sent account data stored in wallets to external servers while functioning normally; and 5 specifically collected saved credentials and clipboard content.Additionally, 37 extensions disguised themselves as password generators, dark mode toggles, VPNs, currency converters, and note-taking tools, but actually ran sports score applications sharing the same hardcoded credentials. Nine confirmed malicious extensions were initially released as score applications for sports like football and basketball, with subsequent updates replacing them with wallet theft code.Socket named this activity the "wallet theft factory," but cautioned that it has not confirmed whether all extensions are controlled by the same operator. The Socket team stated that any user who has entered mnemonic phrases or private keys into these extensions should consider it a "permanent leak" and immediately transfer funds to a new wallet, as uninstalling the extensions cannot undo the mnemonic phrases sent elsewhere.

first_img OpenAI resets all ChatGPT Work and Codex user usage, with an expected extension of about 18% after optimization

On July 29, Tibo, the product lead for OpenAI Codex, announced on X that all usage limits for ChatGPT Work and Codex users have been reset, and released a statement regarding the issue of rapid consumption of GPT-5.6 Sol usage.In the previous weeks, a large number of users reported that the consumption speed of Codex limits exceeded expectations. OpenAI emphasized that it has not reduced the usage quotas of any subscription plans. After investigation, several reasons were found: Sol is more inclined to work for longer periods, execute more tool calls, and coordinate complex workflows than previous models; it consumes more tokens at the same reasoning level; programmatic tool calls (code mode) allow Sol to execute tool calls in parallel, resulting in more responses and higher usage per round; the distribution of impact is extremely uneven, with median user efficiency being acceptable, but heavy users handling complex tasks consuming far more than expected.OpenAI stated that multiple improvements have been completed, and it is expected that usage endurance will be extended by about 18% in typical usage scenarios. Tomorrow, the five-hour limit that was paused during the investigation will be restored. OpenAI acknowledged that "capabilities and efficiency do not always improve synchronously, and some issues only become apparent after large-scale real-world use; we should have realized this earlier."
app_icon
ChainCatcher Building the Web3 world with innovations.