BTC $79,384.59 -0.55%
ETH $2,498.46 +0.17%
BNB $745.57 -0.62%
XRP $1.40 -1.00%
SOL $104.99 -1.76%
TRX $0.3352 +0.07%
DOGE $0.0909 +1.41%
ADA $0.2226 +1.48%
BCH $260.89 +0.88%
LINK $13.15 +6.22%
HYPE $87.54 -2.11%
AAVE $133.33 -1.21%
SUI $0.8321 +4.33%
XLM $0.1926 +3.61%
ZEC $1,178.24 -0.10%
BTC $79,384.59 -0.55%
ETH $2,498.46 +0.17%
BNB $745.57 -0.62%
XRP $1.40 -1.00%
SOL $104.99 -1.76%
TRX $0.3352 +0.07%
DOGE $0.0909 +1.41%
ADA $0.2226 +1.48%
BCH $260.89 +0.88%
LINK $13.15 +6.22%
HYPE $87.54 -2.11%
AAVE $133.33 -1.21%
SUI $0.8321 +4.33%
XLM $0.1926 +3.61%
ZEC $1,178.24 -0.10%

banks

All
Article
Flash

SemiAnalysis releases Neocloud security deep report: Infrastructure configuration errors are shocking, and cross-tenant RCE could affect banks, telecommunications, and even a country's intelligence agency

The semiconductor and AI independent research organization SemiAnalysis released a deep security report on Neocloud (new cloud), revealing various cross-tenant security vulnerabilities discovered during the ClusterMAX 3 testing period. In a four-month test covering 25 vendors and 32 clusters, the team achieved multiple instances of cross-tenant remote code execution (RCE) solely by exploiting publicly known vulnerabilities and basic configuration checks. Affected entities included banks, telecommunications companies, universities, research institutions, AI laboratories, and even a national intelligence agency.Typical issues included: shared Kubernetes control plane leading to tenant metadata visibility, container escape, exposure of BMC/IPMI management networks, incorrect configuration of InfiniBand security keys (P_Key, SA_Key, M_Key), unfortified default trust mode of BlueField DPU, Grafana monitoring dashboards using god-level API keys, and lack of VXLAN isolation in front-end networks. The report specifically pointed out a cascading vulnerability case: a misconfiguration of shared vCluster combined with software versions being two years out of date ultimately completed the POC verification of cross-tenant RCE within an afternoon.Notably, the report questioned the mainstream narrative that "AI has fundamentally changed the pace of cybersecurity": statistics on CVEs for NVIDIA GPU drivers, CUDA, PyTorch, Kubernetes, Docker, and the Linux kernel showed that there was no significant increase in vulnerabilities after the popularization of AI coding models, with most data supporting the "no change hypothesis." The report also detailed the incident where an OpenAI-trained agent attacked Hugging Face, where the AI agent achieved cluster-level privilege escalation through a message board established via Artifactory, which went undetected from May to July. While building POC verification for existing vulnerabilities, the team found that Claude Fable and GPT-5.6 Sol frequently rejected security-related requests, ultimately relying on open-source models such as DeepSeek V4, Kimi K3, and GLM-5.2 to complete the task.SemiAnalysis stated that the core issue in the Neocloud (new cloud) industry is not the new risks brought by AI, but rather the long-term absence of basic patch management, tenant isolation, and security design. They recommended that vendors establish automated security announcement monitoring systems and rectify single points of failure that could expose all users' architectural patterns.

first_img The Clarity Act has been postponed to September, and banks are still accelerating their layout of tokenized deposits

Vassilis Tziokas from Matter Labs pointed out in a CoinDesk article that the U.S. Senate has postponed the Clarity Act until September. This market structure bill failed to complete the final vote before the August recess, meaning that regulatory rules for the digital asset market will take weeks to be implemented. Meanwhile, banks are not waiting for regulation; JPMorgan has processed over $30 trillion in transactions through the Kinexys platform and launched the deposit token JPMD, while Citigroup operates cross-border Treasury token services. A clearinghouse, in collaboration with 17 major financial institutions, plans to achieve on-chain tokenized deposit clearing by 2027.The article argues that the interoperability of interbank tokenized deposits does not come from messaging standards or token bridges, but is realized through clearing mechanisms: the sending bank redeems tokens, the receiving bank issues its own tokens, inter-institutional obligations are recorded and netted, and ultimately settled in central bank currency. The engineering challenge lies in simultaneously satisfying privacy, neutrality, and verifiability; each institution must operate its own ledger, prove transfers through cryptography without exposing underlying data, and anchor to a neutral settlement facility owned by no participants.The author notes that the Clarity Act will not directly regulate tokenized deposits, but it can clarify the boundaries of the digital asset market and improve the stablecoin framework established by the GENIUS Act. The Global Financial Markets Association's report in April 2026 lists unresolved gaps such as unified processing of cross-border tokenized deposits and guidelines for off-network transfers, which are regulatory unlocking points for interbank tokenized fund interoperability. In the face of regulatory uncertainty, banks rationally choose to isolate, and each month of delay rewards closed gardens.

Analysis: The era of BTC against banks is coming to an end, and trillion-dollar financial institutions are accelerating their embrace of crypto assets

According to CoinDesk, as Wall Street and global financial institutions accelerate their entry into the digital asset space, the boundaries between traditional finance (TradFi) and decentralized finance (DeFi) are gradually blurring. Bitwise CEO Hunter Horsley stated, "The era of 'going long on Bitcoin and shorting bankers' is over," as financial institutions are turning to the other side of the crypto industry, promoting the adoption of digital assets.Hunter Horsley mentioned that this summer, two financial institutions managing over $1 trillion in assets approved the launch of crypto products in a bear market environment, indicating that large institutions are expanding channels for clients to access digital assets. "This year, everyone is wearing the crypto industry's jersey. Now, everyone is working for the crypto industry," Horsley said. He pointed out that these financial institutions, which manage over a trillion dollars in client assets, previously would not have opened related services during the downturn of the crypto market in 2022, but now they are actively embracing this field.Sygnum Chief Investment Officer Fabian Dori also believes that the relationship between banks and the crypto industry has undergone a structural change. "The past trades of 'going long on Bitcoin and shorting bankers' are over; banks have shifted from resisting digital assets to building, supporting, and distributing digital assets through custody, tokenization, and compliant trading." This change is primarily driven by growing customer demand and gradually clarified regulatory rules, rather than short-term market cycle changes.Anchorage Digital CEO Nathan McCauley stated that over the past two years, its client structure increasingly reflects the trend of integration between traditional finance and crypto finance. Large financial institutions typically choose to collaborate with specialized crypto infrastructure companies rather than building their own technology systems.In recent years, more and more financial institutions have entered the crypto space, including Swissquote, DBS, BBVA, BNY Mellon, Credit Suisse-related institutions, as well as Morgan Stanley and Charles Schwab.

The UK Parliament's All-Party Group on Crypto Assets has written to major banks requesting clarification on account and payment restrictions for crypto businesses

The UK Parliament's Crypto and Digital Assets APPG co-chair Gurinder Singh Josan and Lord Vaizey of Didcot have written to the CEOs of all major UK banks, requesting clarification on how they treat cryptocurrency and digital asset businesses. The letter raises six questions regarding the banks' current policies, whether they provide services to crypto businesses, related transaction restrictions and their determining factors, and whether they have adjusted their practices since the UK Financial Conduct Authority (FCA) regulatory regime came into effect.The group stated that many crypto businesses find it difficult to open bank accounts in the UK, and some banks restrict related payments. This letter stems from the parliamentary inquiry into access to banking services launched on July 21, with written submissions due by August 31. A January survey by the UK Crypto Asset Business Council indicated that the proportion of transactions blocked or delayed by banks when transferring to crypto exchanges is estimated to be as high as 40%. HSBC, NatWest, Monzo, and Nationwide limit the amount transferred to crypto exchanges each month to between £5,000 and £10,000, while Starling and Chase UK prohibit such transfers altogether. Lucy Rigby, the Economic Secretary to the Treasury, stated that the government does not want FCA-licensed businesses to be restricted by banks solely because of their industry; the FCA completed the relevant rules in June, and the regime will be enforced from October 2027.

The fluctuations in the South Korean stock market have triggered a "reverse capital migration": over 24 trillion won has flowed into the fixed deposits of the five major banks

According to Daum, the South Korean stock market has recently experienced increased volatility, with investors' risk appetite significantly cooling, and funds are flowing back from the stock market to safer assets such as banks. Due to adjustments in the semiconductor sector and stricter regulations on leveraged investments, the funds waiting to be invested in the South Korean stock market are rapidly withdrawing, leading to a phenomenon of "reverse capital migration."Data shows that by the end of July, the balance of time deposits at the five major banks in South Korea (KB Kookmin, Shinhan, Hana, Woori, NH Nonghyup) reached 973.49 trillion won, an increase of 24.09 trillion won compared to the end of the previous month, marking the largest monthly increase this year.There has also been a noticeable contraction in funds around the stock market. Data from the Korea Financial Investment Association shows that the deposits in investors' securities accounts (funds waiting to be invested in stock trading) reached a historical high of 139.69 trillion won on June 4, but had fallen to 107.20 trillion won by July 28, a decrease of over 32 trillion won in less than two months. The balance of credit trading financing, which represents the scale of market financing transactions, also dropped to 33.19 trillion won during the same period, down approximately 4.5 trillion won from the peak of 37.72 trillion won recorded on July 2, a decrease of about 12%.
app_icon
ChainCatcher Building the Web3 world with innovations.