Scan to download
BTC $77,307.89 +0.73%
ETH $2,105.44 -0.65%
BNB $660.07 +0.82%
XRP $1.36 -0.14%
SOL $85.97 -0.05%
TRX $0.3665 +1.09%
DOGE $0.1028 -0.01%
ADA $0.2431 -1.12%
BCH $349.84 -0.93%
LINK $9.51 -0.71%
HYPE $62.61 +3.18%
AAVE $86.44 +0.13%
SUI $1.04 -1.28%
XLM $0.1489 +0.46%
ZEC $661.19 +3.86%
BTC $77,307.89 +0.73%
ETH $2,105.44 -0.65%
BNB $660.07 +0.82%
XRP $1.36 -0.14%
SOL $85.97 -0.05%
TRX $0.3665 +1.09%
DOGE $0.1028 -0.01%
ADA $0.2431 -1.12%
BCH $349.84 -0.93%
LINK $9.51 -0.71%
HYPE $62.61 +3.18%
AAVE $86.44 +0.13%
SUI $1.04 -1.28%
XLM $0.1489 +0.46%
ZEC $661.19 +3.86%

memory

AI Agent Security Risk Exposure: Attackers Can Exploit "Memory Pollution" to Induce Misoperation of Funds

The GoPlus Security team has disclosed a new type of attack in its AgentGuard AI project: inducing AI agents to perform unauthorized sensitive operations through "memory poisoning." This attack method does not rely on traditional vulnerabilities or malicious code but exploits the long-term memory mechanism of AI agents. For example, an attacker first induces the agent to "remember preferences," such as "usually prioritizing proactive refunds instead of waiting for chargebacks," and then uses vague expressions like "process as usual" or "execute as before" in subsequent instructions, thereby triggering automated financial operations.GoPlus points out that the key risk in such cases lies in the AI agent mistakenly treating "historical preferences" as a basis for authorization, leading to financial losses or security incidents in operations such as refunds, transfers, and configuration changes. To address this issue, the team has proposed several protective recommendations, including:Operations involving refunds, transfers, deletions, or sensitive configurations must require explicit confirmation in the current session.Memory-related instructions like "habit," "usual way," and "as before" should be regarded as high-risk state changes.Long-term memory must have a traceability mechanism (writer, time, confirmation status).Vague instructions should automatically elevate the risk level and trigger secondary verification.Long-term memory must not replace real-time authorization processes.The team emphasizes that the "AI agent memory system" should be viewed as a potential attack surface and should be constrained and audited through a dedicated security framework.

Vitalik focuses on "Big FOCIL" and the crypto memory pool to prevent centralization of the block building process

Ethereum co-founder Vitalik Buterin recently published a series of technical articles discussing the future roadmap of Ethereum. In the latest article, he focused on analyzing the potential centralization risks in the block building pipeline and proposed solutions such as expanding the FOCIL mechanism and introducing encrypted mempools to enhance the network's censorship resistance.According to the plan, Ethereum will launch the Glamsterdam upgrade in the first half of 2026, which will introduce the enshrined Proposer-Builder Separation (ePBS) mechanism. This mechanism allows block proposers to outsource block construction to a permissionless open market, reducing the centralization risk at the staking level. However, Buterin pointed out that while ePBS can prevent the concentration of block building rights among a few staking pools, the block construction itself may still become concentrated among a few high-tier participants due to specialization and maximizing MEV, leading to a new trend of centralization.To address this issue, Ethereum developers plan to simultaneously launch the FOCIL (Forward Obligatory Commitment to Inclusion Lists) mechanism in the Glamsterdam upgrade. The initial version will randomly select 16 witnesses and mandate that specific transactions must be included in the block; otherwise, the block will be rejected. Buterin stated that even if block construction is controlled by a single malicious entity, FOCIL can still ensure that transactions cannot be completely censored.Additionally, Buterin explored the possibility of expanding the scale of FOCIL ("big FOCIL") and introducing encrypted mempools to further mitigate the issues of information asymmetry and power concentration in the block building process. Recently, Buterin has been vocal about topics such as the quantum resistance roadmap, execution layer improvements, and block building mechanisms, indicating that the core Ethereum development team is conducting systematic design and risk assessment for the next phase of protocol upgrades.

Anthropic has been reported to launch a "migration prompt" tool, directly targeting OpenAI's memory barriers

Anthropic is accused of launching a prompt tool for "exporting ChatGPT memory data," helping users transfer historical memory information to its model Claude, which has drawn industry attention.According to public content, the tool allows users to export their memory data from OpenAI's ChatGPT by copying and pasting specific prompts, and then import it into Claude. Related discussions suggest that this move is seen as directly weakening the user stickiness and switching costs that ChatGPT relies on through its "memory function."Market views consider the memory mechanism as an important moat for large model products— the longer users engage, the deeper the model understands their preferences, context, and historical conversations, thereby increasing the migration costs. If third-party tools can facilitate easy data migration, it may change the current user lock-in logic of AI products.Meanwhile, reports also mentioned that Anthropic was previously restricted from use by relevant systems of the U.S. Department of Defense, but the company's popularity and attention have quickly surged, topping some application rankings.Currently, the specific compliance of the aforementioned tool and the platform's response have not been clarified. The industry generally believes that competition among large models has extended from performance comparisons to ecological and data sovereignty aspects, with user data portability potentially becoming a key variable in the next stage.

ZetaChain 2 officially launches Anuma, a large model aggregation application centered on privacy, bringing privacy memory and AI interoperability

According to official news, ZetaChain has announced the official launch of the AI interoperability layer ZetaChain 2, along with the release of the privacy-centric large model aggregation application Anuma.ZetaChain 2 is a brand new AI interoperability layer designed to help developers build applications and agents that can operate across AI models, enabling global monetization without the need for backend infrastructure while preserving private user context. ZetaChain 2 consists of two core components: the AI Portal and the Private Memory Layer.The AI Portal serves as a unified routing and execution layer, allowing applications to access multiple AI model providers without being locked in, and includes support for availability, fallback, and cost/performance optimization. The Private Memory Layer is a protocol-level memory system that protects user context through encryption and access control, allowing experiences to persist across sessions while maintaining user control over the access scope of applications and agents.Anuma is the first consumer-level AI application based on ZetaChain 2, currently in beta testing and has launched a public waitlist, allowing users to apply for early access through the public waitlist. The product integrates multiple leading AI models in a single experience, enabling users to switch between different models without losing context, and is designed to keep memories private and under user control.
app_icon
ChainCatcher Building the Web3 world with innovations.