authorization

According to market news, the AI intelligence forum Moltbook experienced a database leak due to configuration issues, exposing 4.75 million records, including 1.5 million API authorization tokens, 35,000 user email addresses, 20,000 email records, and some OpenAI API keys. Users should promptly check the security of their accounts and timely change relevant keys and passwords.

On-chain information shows that the Binance SAFU fund address initiated authorization 10 minutes ago, suspected to be adding two new addresses to the "allowed recipient whitelist," or preparing to increase Bitcoin holdings.Previously, it was reported that three days have passed since the announcement of Binance's "1 billion dollar purchase of Bitcoin," and the SAFU fund address has not made any buying actions yet. This situation may be related to the weekend timing.

WORLD3 has officially submitted the ERC-8118 (Agent Authorization) proposal to the Ethereum Foundation. This standard aims to provide a secure and controllable authorization mechanism for autonomous AI Agents to perform on-chain operations. ERC-8118 introduces time-limited authorizations with automatic expiration mechanisms, usage and transaction limits, as well as fine-grained permission control at the function level, allowing users to revoke authorizations at any time, thus bridging the gap between the high risks of unlimited authorizations and the cumbersome nature of one-time signature operations.Currently, ERC-8118 has undergone production-level validation on the WORLD3 platform, covering over 1 million wallets and 5.7 million transactions, and has completed peer review at the IEEE International Blockchain Conference (BRAINS 2025). This standard is compatible with all EVM-based blockchains and has entered the community public discussion phase on the Ethereum Magicians forum.

According to CoinDesk, Bitmine Chairman Thomas "Tom" Lee stated in a statement released on Monday that whether BitMine can continue to increase its holdings of Ethereum (ETH) depends on whether shareholders approve the company's authorization to issue new shares. If not approved, the company may be forced to slow down its purchasing pace in the coming weeks.Lee stated, "We must move forward with the issuance immediately, as BitMine's current authorization of 500 million shares is about to be exhausted. Once the limit is reached, our pace of ETH accumulation will slow down." The shareholder vote will be held on Thursday. According to regulations, the issuance proposal needs to receive support from 50.1% of all outstanding shares to pass. "This is a very high threshold, making it extremely difficult to obtain authorization for the issuance," Lee emphasized in the statement.

Slow Mist posted on platform X that MistEye detected potential suspicious activities related to Fusion. The root cause is a vulnerability in the underlying contract commissioned by an EOA account controlled by the project team through EIP-7702, which allows arbitrary external calls, enabling attackers to create and configure malicious circuit breaker contracts for PlasmaVault, thereby extracting funds from the contract.

According to Scam Sniffer monitoring, someone lost aEthUSDT tokens worth $563,590 after signing a malicious "authorization" signature.

According to Cointelegraph, the U.S. House of Representatives passed the National Defense Authorization Act (NDAA) on Wednesday with a vote of 312-112, but the bill did not include the previously promised ban on central bank digital currencies (CBDCs), leading to dissatisfaction among hardline Republicans.Republican Congressman Keith Self posted on the X platform, "Conservatives were explicitly promised that strong anti-CBDC language would be included in the NDAA, but that promise was broken." Self had submitted an amendment on Tuesday to include a CBDC ban, but the amendment did not advance and was not voted on in the House. In July, House Republican leadership had reached an agreement with hardliners in the party to include a CBDC ban in the defense spending bill in exchange for their support on three cryptocurrency bills. Congresswoman Marjorie Taylor Greene also criticized House Speaker Mike Johnson for not fulfilling the promise. The bill has now been sent to the Senate, aiming for passage by the end of the year. Self stated that he would continue to push for a CBDC ban in the next must-pass legislation.

Binance has announced that it has obtained a full regulatory license from the Financial Services Regulatory Authority (FSRA) of the Abu Dhabi Global Market (ADGM), and its global platform will officially operate under the international regulatory framework of ADGM.In accordance with regulatory requirements, the platform's operations will migrate to a new three-entity structure to enhance transparency, oversight mechanisms, and risk management. Starting from January 6, 2026, Binance services will be provided by three ADGM-licensed entities: Nest Exchange Services Limited: responsible for platform operations such as spot and derivatives trading; Nest Clearing and Custody Limited: responsible for clearing and custody, acting as the central counterparty for derivatives trading; Nest Trading Limited: providing over-the-counter trading, instant exchange, and some wealth management services.This structure aligns with traditional financial regulatory models, reinforcing platform risk isolation and user asset protection through layered functions of matching, clearing, and custody. Along with the structural adjustment, Binance will update its user agreement. Starting from January 5, 2026, the rights and obligations of users under the original "Terms of Use" will automatically be assumed by the corresponding ADGM entities, and the relevant product terms will also be adjusted accordingly.The official statement indicates that the migration will not affect users' daily usage: UID, balances, order records, and available products will remain unchanged, and any open derivative positions will be transferred to Nest Clearing and Custody Limited for clearing and custody.

According to GoPlus monitoring, the DMT (@dexmaxai) airdrop poses security risks. Users may be tricked into authorizing other tokens during the airdrop process, resulting in the theft of assets from thousands of users, with cross-chain asset transfers exceeding $130,000. It is recommended that users who have received the $DMT airdrop revoke related authorizations or transfer their assets to a secure wallet. Currently, both the official DexMax AI Twitter and website have been taken offline.

The well-known NFT project Moonbirds has announced its entry into Camp Network, officially launching its official IP commercialization authorization through collaboration with Camp Network and Remaster.According to the cooperation plan, Moonbirds holders can participate in brand collaborations and commercial applications through Camp Network's source tracing protocol, covering cross-channel development of physical goods, digital derivatives, and more. This protocol will provide a verifiable authorization path and an automated royalty distribution mechanism.Camp Network stated that this move marks a key step in the NFT field's transformation towards real-world asset IP, showcasing a new model for on-chain IP expansion into physical retail and gaming entertainment sectors.

According to official news, GoPlus Security Research Institute conducted a detailed security risk scan on more than 30 x402 projects and community-reported risk projects in Binance Wallet and OKX Wallet, discovering that the following projects have issues such as excessive authorization, signature replay, HonyPot (PiXiu token), and unlimited issuance risks.FLOCK (0x5ab3): The transfer ERC20 function allows the owner to withdraw any amount of any token from the contract. x420 (0x68e2): The cross chain Mint function can mint tokens without restriction. U402 (0xd2b3): The mint By Bond function allows unlimited minting of coins. MRDN (0xe57e): The withdraw Token function allows the owner to withdraw any amount of any token from the contract. PENG (0x4444ee, 0x444450, 0x444428): The manual Swap function allows the owner to withdraw ETH from the contract, and the transfer From function bypasses the allowance check for special accounts. x402 Token (0x40ff): The transfer From function bypasses the allowance check for special accounts. x402b (0xd8af5f): The manual Swap function allows the owner to withdraw ETH from the contract, and the transfer From function bypasses the allowance check for special accounts. x402MO (0x3c47df): The manual Swap function allows the owner to withdraw ETH from the contract, and the transfer From function bypasses the allowance check for special accounts.

ChainCatcher message, GoPlus Chinese community issued a security alert, the x402 cross-chain protocol @402bridge is suspected to be stolen. The Creator of the contract starting with 0xed1A transferred the Owner to the address 0x2b8F, and then the new Owner called the transferUserToken method in the contract to transfer all remaining USDC from authorized user wallets.Before minting, USDC must be authorized to the @402bridge contract, which caused more than two hundred users to have their remaining USDC transferred away due to excessive authorization. The address 0x2b8F transferred a total of 17,693 USDC from users, and then exchanged the USDC for ETH, which was subsequently transferred to Arbitrum through multiple cross-chain transactions. It is recommended that users who have participated in this project cancel the relevant authorizations as soon as possible; remind users to check whether the authorized address is the official address of the interactive project before authorizing, only authorize the necessary amount, and avoid unlimited authorization; and regularly check authorizations to cancel unnecessary ones.

ChainCatcher message, according to Scam Sniffer monitoring, a user lost $209,816 worth of WBTC and tBTC tokens due to signing malicious "permit" and "increaseApproval" authorization signatures.

ChainCatcher news, according to GlobeNewswire, LiveOne, a Nasdaq-listed company, CEO Robert Ellin released a shareholder letter disclosing that its board has approved a $500 million funding authorization to expand its cryptocurrency asset treasury reserves.The company had previously invested over $5 million in purchasing Bitcoin and also completed a $6.5 million stock buyback.

ChainCatcher news, according to CoinDesk, claims that the Baby Shark token, which represents the most viewed video on YouTube, plummeted 90% after the company that minted this Meme coin realized it had no issuance rights from the issuing platform. The token's price on Story Protocol fell from a high of 35 cents on Tuesday to less than 0.064 cents.Previously, the brand owner Pinkfong Co., based in Seoul, released an official statement on the X platform on Friday, stating that the token "is in no way associated with the company." "Baby Shark" is a two-minute animated music short aimed at young children, which has garnered over 16 billion views since its release in 2016. The token was issued through IP.World, which at one point had a market cap of up to $200 million. IP.World stated that the rights provided by its licensing partner Pinkfong were flawed, and its verification process hindered the distribution of creator fees.Pinkfong Co. stated in the announcement that only the Meme coin Baby Shark on Solana and the Baby Shark Universe token on BNB Chain are officially recognized assets. However, this statement failed to calm traders' emotions, as they previously mistakenly believed that the token was an official collaboration project of Pinkfong Co., and this misunderstanding was further exacerbated by influencer endorsements and the promotional efforts of Story Protocol itself.

ChainCatcher news, according to Protos, Wintermute research shows that nearly half of the Ethereum Improvement Proposal 7702 (EIP-7702) user authorizations are associated with criminal activities such as phishing and fund theft.The report states that since May 7 of this year, users have activated this feature 1,580,930 times, with the Wintermute team marking 768,275 instances (48%) as crime-related. This sharply contrasts with Vitalik Buterin's earlier claim that this temporary smart contract feature would provide users with "superpowers" and "guardrails."EIP-7702 allows users to temporarily convert their signed accounts into smart contract wallets during transactions, aimed at enhancing user experience and security.

ChainCatcher news, Nasdaq-listed company Upexi (Nasdaq: UPXI) has signed an equity financing facility agreement with A.G.P./Alliance Global Partners. Under this agreement, subject to certain restrictions and conditions, Upexi can decide to sell up to $500 million of common stock. The company stated that it will use the proceeds from the equity financing facility for general corporate purposes and to advance its Solana asset reserve strategy.The equity financing facility structure allows Upexi to choose the timing of its entry into the capital markets without the need for immediate financing. Such agreements typically allow companies to sell shares over a period of time based on market conditions and funding needs.

ChainCatcher news, according to market news, GameSquare (stock code: GAME) recently purchased approximately 8,351 Ethereum (ETH) at a weighted average price of about $3,592, with a total value of approximately $30 million.The media and entertainment company listed on NASDAQ announced on Monday that its board has increased the management authorization for its digital asset treasury from the original $100 million to $250 million. As part of this plan, the board also approved a brand new NFT revenue strategy, with an initial allocation of $10 million. The company has also established strategic partnerships with Ryan Zurrer of Dialectic and Rhydon of Goff Capital to jointly manage and optimize its crypto asset treasury project.This updated treasury framework will enable GameSquare to actively deploy capital into high-quality Ethereum ecosystem assets and achieve sustainable returns of 6% to 10% annually through stablecoin revenue strategies. To date, GameSquare has purchased $35 million worth of ETH within its $250 million authorization limit. As of July 21, the company holds approximately 10,170.74 ETH.

ChainCatcher news, Mogo Inc. (NASDAQ: MOGO; TSX: MOGO) announced that its board has authorized the allocation of up to $50 million to Bitcoin as part of the company's long-term capital preservation and product innovation strategy. This move marks an important step for Mogo in strategically aligning with Bitcoin, integrating it into its financial policies and core operating platform. Mogo plans to use Bitcoin as a threshold rate for capital allocation, with all capital deployment decisions being assessed based on Bitcoin's long-term return profile.In addition, Mogo also plans to integrate Bitcoin into its wealth management, lending, and payment businesses to create value for shareholders and nearly 2 million Canadian members of the company.