BTC $75,697.36 +0.07%
ETH $2,223.06 -0.29%
BNB $696.74 +0.19%
XRP $1.13 -0.81%
SOL $89.17 -0.27%
TRX $0.3202 +0.06%
DOGE $0.0709 -0.88%
ADA $0.1797 -0.72%
BCH $245.74 -4.20%
LINK $10.63 -1.63%
HYPE $76.34 -1.14%
AAVE $128.96 -1.25%
SUI $0.8443 -1.60%
XLM $0.1500 -0.52%
ZEC $1,253.27 -0.58%
AAPL $342.98 +0.14%
AMZN $259.35 -0.01%
GOOGL $285.32 +0.19%
MSFT $530.98 +0.07%
META $611.16 -0.16%
NVDA $182.62 -2.75%
TSLA $357.74 -0.14%
SNDK $833.20 -0.07%
INTC $55.99 -0.57%
SPCX $135.26 +0.31%
MU $689.86 -0.19%
AMD $445.06 -0.63%
BTC $75,697.36 +0.07%
ETH $2,223.06 -0.29%
BNB $696.74 +0.19%
XRP $1.13 -0.81%
SOL $89.17 -0.27%
TRX $0.3202 +0.06%
DOGE $0.0709 -0.88%
ADA $0.1797 -0.72%
BCH $245.74 -4.20%
LINK $10.63 -1.63%
HYPE $76.34 -1.14%
AAVE $128.96 -1.25%
SUI $0.8443 -1.60%
XLM $0.1500 -0.52%
ZEC $1,253.27 -0.58%
AAPL $342.98 +0.14%
AMZN $259.35 -0.01%
GOOGL $285.32 +0.19%
MSFT $530.98 +0.07%
META $611.16 -0.16%
NVDA $182.62 -2.75%
TSLA $357.74 -0.14%
SNDK $833.20 -0.07%
INTC $55.99 -0.57%
SPCX $135.26 +0.31%
MU $689.86 -0.19%
AMD $445.06 -0.63%

mou

All
Article
Flash

OpenAI reveals autonomous vulnerability pipeline: a run that produced 948 local privilege escalation vulnerabilities in Linux

According to disclosures from OpenAI's official website, the company has established an autonomous security research pipeline covering vulnerability discovery, dynamic verification, exploitability assessment, and patch generation. In a run centered on an upcoming network model, the pipeline completed scanning and verification of targets related to the Linux kernel, generating 948 exploits that can achieve local privilege escalation (LPE) on commonly used Linux distributions, with an API cost of approximately $1.213 million, or about $1,279 per LPE exploit.It was reported that the pipeline identified and analyzed a total of 2,308 candidate discoveries, dynamically reproducing 1,724 vulnerabilities, and producing 291 information leakage proofs of concept (PoC); the target virtual machine ran a standard desktop system with complete protection. The Scout agent initially identified about 5,034 audit targets (approximately 2.8 million lines of code, accounting for about 7% of the kernel), and the Analyst agent produced candidate discoveries in about 12 hours. OpenAI stated that it has prioritized reporting critical vulnerability patches as recommended by the Linux community and continues to advance the remaining reports in collaboration with Patch the Planet partners.OpenAI also mentioned that in the adapted kernelCTF environment, an additional 25 information leakage PoCs and 21 LPEs were obtained; among 166 sampled exploits, the agent reportedly used at least 10 newer Linux exploitation techniques that it deemed more recent. The company emphasized that maintainers are quick to fix: over 100 LPEs have been patched or entered temporary patches within about 10 days of scanning, and approximately 300 others have entered public discussion.

The amount of Ethereum staked has reached 43.8 million coins, setting a new historical high, while the annualized yield for Q3 has dropped to 2.63%

According to CoinDesk, Bitwise's fourth-quarter staking report shows that the amount of staked Ethereum has reached 43.8 million ETH, accounting for 35.9% of the total supply, setting a new historical high; the net staking inflow in the third quarter was 1.99 million ETH, maintaining net inflows for six consecutive quarters. The active staking amount for Solana has increased to 440.5 million SOL.However, the staking yields for both networks have declined. The average annualized staking yield for Ethereum in the third quarter dropped from 2.81% in the second quarter to 2.63%, with 96.3% coming from ETH issuance. The gross staking yield for Solana fell from 6.38% to about 6%, with nearly 90% still coming from token issuance.The above data has not deducted service provider fees and does not equate to the actual yield received by clients. Coinbase stated that staking ETFs and digital asset treasury are broadening participation channels. Kean Gilbert, head of institutional relations at the Lido Foundation, pointed out that after custodial institutions support staking, institutions can participate through existing custodial relationships, and the current discussion has shifted to implementation issues such as validator decentralization, code audits, and fund staking ratios. Liquidity remains a constraint faced by institutions.Gilbert stated that funds typically need to meet redemption requests within one or two days, but ETH unstaking may take weeks, so they will retain some un-staked assets. He estimates that the average staking ratio for related products in Europe is only 50% to 60%. Liquid staking tokens can provide alternative exit channels, but actual sales still depend on market liquidity and prices.
app_icon
ChainCatcher Building the Web3 world with innovations.