BTC $80,086.75 -0.31%
ETH $2,314.87 -0.78%
BNB $739.96 +0.26%
XRP $1.29 -0.11%
SOL $101.31 +0.36%
TRX $0.3306 +0.60%
DOGE $0.0770 +0.53%
ADA $0.2044 +0.08%
BCH $277.39 +1.85%
LINK $11.42 +0.48%
HYPE $77.51 +1.19%
AAVE $135.36 -0.26%
SUI $0.9136 -0.19%
XLM $0.1690 +0.11%
ZEC $1,226.08 +1.26%
AAPL $344.03 -0.76%
AMZN $250.88 +0.81%
GOOGL $322.70 +0.40%
MSFT $527.99 +0.79%
META $636.79 -0.78%
NVDA $213.53 +0.56%
TSLA $382.17 +2.85%
SNDK $1,261.07 +1.48%
INTC $88.56 +1.99%
SPCX $148.04 -0.20%
MU $897.59 +0.84%
AMD $523.13 +0.63%
BTC $80,086.75 -0.31%
ETH $2,314.87 -0.78%
BNB $739.96 +0.26%
XRP $1.29 -0.11%
SOL $101.31 +0.36%
TRX $0.3306 +0.60%
DOGE $0.0770 +0.53%
ADA $0.2044 +0.08%
BCH $277.39 +1.85%
LINK $11.42 +0.48%
HYPE $77.51 +1.19%
AAVE $135.36 -0.26%
SUI $0.9136 -0.19%
XLM $0.1690 +0.11%
ZEC $1,226.08 +1.26%
AAPL $344.03 -0.76%
AMZN $250.88 +0.81%
GOOGL $322.70 +0.40%
MSFT $527.99 +0.79%
META $636.79 -0.78%
NVDA $213.53 +0.56%
TSLA $382.17 +2.85%
SNDK $1,261.07 +1.48%
INTC $88.56 +1.99%
SPCX $148.04 -0.20%
MU $897.59 +0.84%
AMD $523.13 +0.63%

intent

All
Article
Flash

first_img Cardano founder is developing a new programming language that integrates transaction intentions with Groth16 proofs

According to CoinDesk, Cardano founder Charles Hoskinson stated that he is personally developing a new programming language for the Cardano network and collaborating with Input Output Global engineer Lucas Rosa. Lucas Rosa is a co-creator of Aiken, one of Cardano's main smart contract languages. Hoskinson posted on the X platform that this will be the first programming language to combine user transaction completion intentions with cryptographic proofs.It is reported that the language will support three tools: transaction intent, data with carry proofs, and Groth16 proofs. Transaction intent allows users to specify the goals they want to achieve, while leaving the specific steps to the application, for example, traders can request that a token be exchanged for another only when the final price meets certain conditions, without specifying the exact path.Data with carry proofs can attach cryptographic evidence to information, proving that it complies with specific rules, allowing other applications to verify without recalculating. Groth16 is a widely used proof system that can generate small-sized, fast-verifying proofs, demonstrating that conditions have been met without exposing private data.With the combination of the three, developers can build applications that coordinate transactions, check complex conditions, and pass verified information between services, ultimately verified by Cardano with a small proof. Currently, Cardano developers mainly use Haskell-based Plutus and Aiken to write smart contracts, while Input Output Global, founded by Hoskinson, has its own privacy blockchain Midnight with its language Compact. The name, public code, and release date of this new language have not yet been announced.

first_img NEAR Intents released a post-mortem report, revealing that the $3.8 million vulnerability originated from a deposit notification flaw

The cross-chain exchange protocol NEAR Intents released a post-mortem report attributing a $3.8 million vulnerability to a flaw in the deposit notification feature. The protocol deploys a public settlement contract on NEAR that maintains an internal ledger of deposited tokens, while withdrawals transfer tokens out via a cross-chain bridge. The report was published by NEAR Intents General Manager Alex Shevchenko on October 16, stating that the attacker withdrew $3.8 million before the protocol was shut down on October 1 and returned all funds within 36 hours of detection, with all affected users fully compensated.The report indicates that the feature notifies third-party contracts when tokens are deposited. The attacker created a contract that intentionally caused the notification to fail, allowing the token contract to refund the deposit while NEAR Intents retained the corresponding ledger credit. Through 23 failed deposit transactions, the attacker accumulated $3.8 million in unsupported balance, referred to in the report as ghost funds, and subsequently withdrew real tokens based on this and transferred them to other chains via the Omni infrastructure. Shevchenko stated that this was a vulnerability in the NEAR Intents contract, not in the Omni infrastructure.Withdrawals occurred between September 29 and October 1. The settlement contract was paused and reopened on October 1, with affected routes gradually restored, and contract-side deposits resumed on October 2. The report noted that the vulnerability went undetected because monitoring only compared the original chain assets with the total balance of NEAR side tokens, without comparing the total internal user balances with the actual tokens held by the contract; the team has since added this check and will automatically pause the contract when there is a balance inconsistency. The fix for the October vulnerability was deployed on October 2, but another serious vulnerability report regarding the same feature prompted its complete removal on October 7, with the relevant researcher receiving a $300,000 reward.

first_img NEAR Intents: Frozen $503,000 of stolen funds from Bitget

Cross-chain trading protocol NEAR Intents stated in a post on X that on September 24, Bitget was attacked, resulting in approximately $387.5 million in funds being stolen, most of which were aggregated into Ethereum and converted to ETH. The hacker attempted to transfer over $50 million through NEAR Intents, but ultimately only $166,000 was successfully transferred, while $503,000 was intercepted during the execution process.NEAR Intents indicated that the relevant data comes from on-chain tracking tools, Arkham, internal logs, and risk control layer SHIELD, among other sources. The figures listed are rounded estimates, with an assessment deviation of no more than 10%. SHIELD identified over $50 million in money laundering attempts and has filtered out duplicate flows, of which $166,000 has been successfully transferred, while another $503,000 was frozen midway through execution and remains restricted, pending legal and recovery procedures.NEAR Intents stated: permissionless does not equal neutral, the team refuses to assist in cashing out stolen assets and will forgo the bounty from this incident to allow Bitget to recover funds as much as possible. Bitget previously established a 5% + 5% bounty arrangement. NEAR Intents also mentioned that the protocol will remain permissionless but set boundaries, and will combat money laundering of stolen funds, while suggesting Bitget contact legal and law enforcement channels to handle the frozen funds.
app_icon
ChainCatcher Building the Web3 world with innovations.