BTC $78,340.12 -1.25%
ETH $2,479.85 -0.64%
BNB $748.36 +0.89%
XRP $1.42 +1.31%
SOL $103.06 -1.21%
TRX $0.3384 +1.17%
DOGE $0.0896 -0.83%
ADA $0.2201 -0.33%
BCH $256.83 -2.00%
LINK $12.57 -1.94%
HYPE $84.26 -1.41%
AAVE $128.90 -2.63%
SUI $0.8118 -2.11%
XLM $0.1882 -2.29%
ZEC $1,152.45 -0.95%
BTC $78,340.12 -1.25%
ETH $2,479.85 -0.64%
BNB $748.36 +0.89%
XRP $1.42 +1.31%
SOL $103.06 -1.21%
TRX $0.3384 +1.17%
DOGE $0.0896 -0.83%
ADA $0.2201 -0.33%
BCH $256.83 -2.00%
LINK $12.57 -1.94%
HYPE $84.26 -1.41%
AAVE $128.90 -2.63%
SUI $0.8118 -2.11%
XLM $0.1882 -2.29%
ZEC $1,152.45 -0.95%

lace

All
Article
Flash

first_img OneKey reproduces the transaction replacement attack targeting the old version of the Ledger Ethereum application

The security team of the open-source wallet provider OneKey successfully replicated the exploitation of a vulnerability in the old version of the Ledger Ethereum application in a laboratory environment. OneKey's founder and CEO Wang Yishi stated that they executed a "transaction replacement attack" on Ledger Ethereum application version 1.22.1 by exploiting a previously patched vulnerability, allowing attackers to overwrite pending transactions while users review legitimate transactions.Ledger responded that exploiting this vulnerability requires controlling the communication between the device and the host, such as through malware, compromised wallet software, or malicious web pages. Ledger has added application layer protections in the Ethereum application version 1.22.2 released on August 13 and fixed the underlying issue in Secure SDK 26.6.1 on August 21. Ledger emphasized that no users were hacked as a result; this was merely a replication of the vulnerability in a laboratory environment.This security test occurred after the Coldcard vulnerability incident. Previously, the Coldcard wallet had a firmware vulnerability that posed security risks to some mnemonic phrase generation, but Ledger stated that its devices were not affected by this vulnerability because recovery phrases are generated by a certified random source built into the device's secure chip. The vulnerability replicated by OneKey is unrelated to mnemonic phrase generation but affects the way transactions are processed during the signing process.

Data: A 40x leveraged whale has placed a BTC sell order, totaling 91 million USD

According to TradingBeats (formerly Hyperinsight), a whale starting with 0xf517 currently has 190 BTC sell orders in the range of $79,654 to $108,888, planning to sell 951.3 BTC, with a nominal amount of approximately $91.787 million and a weighted average sell price of about $96,488. BTC is currently reported at $77,351, with the sell order range being about 3% to 40.8% higher than the current price. Since the above orders are not "only for reducing positions," if the transaction volume exceeds its existing long position, it will directly lead to a short position.This whale currently holds 94.1 BTC long positions with a 40x leverage, valued at approximately $7.277 million, with an average entry price of $77,330.3; it has reduced its previous holding of 109.4 BTC by about 15.3 BTC. About 10% of the 951.3 BTC sell orders are used to close long positions, while the remaining approximately 857.2 BTC will be converted into new short positions. If all are executed, the theoretical size of the short position would be about $82.7 million. Meanwhile, this address still has a buy order for 133.7 BTC at $74,088, valued at approximately $99.08 million.It also has 108 open orders in other cryptocurrencies, with a total nominal amount of about $89.32 million, mainly including: HYPE replenishment orders: it currently holds 197,800 HYPE long positions, valued at approximately $15.44 million, with an average entry price of $62.52, and has placed a buy order for $5 million at $62.2, which is about 20.2% lower than the current price. LIT has 71 sell orders in the range of $3.8081 to $6, planning to add short positions of 362,200, amounting to about $1.84 million; ZEC has 29 sell orders in the range of $890.71 to $999, planning to open about 1,560 short positions, amounting to about $1.484 million. It is reported that this whale's layout spans both the US stock and cryptocurrency markets, often participating in the hottest targets, and has repeatedly become a major whale in S&P 500, AMZN, SPCX, etc., with a historical total profit of nearly $30 million.

first_img HPC Report: Perpetual contracts are a supplement to futures contracts rather than a replacement, achieving risk transfer at a lower cost

The latest research report from the Hyperliquid Policy Center (HPC) states that perpetual contracts expand hedging options and improve price discovery, with no evidence found of statistically significant harm to the benchmark futures market. The report argues that perpetual contracts are complementary to traditional futures with expiration dates, rather than zero-sum substitutes.The study utilizes the natural experiment of traditional markets being closed on weekends while perpetual markets continue trading, comparing 205 weekends of Bitcoin trading and 19 weekends of on-chain crude oil perpetual (xyz:CL) samples. The report states that expiring futures require calendar-based forced rollovers, with the cost of rolling a $10 million exposure on the Monday of April 2026 being about $950,000, while on Friday it is about $110,000; perpetual positions do not have this forced cost. The median transaction price for on-chain crude oil perpetual during non-trading hours is about $1,300, approximately one percent of the benchmark WTI median transaction price.HPC also provides an example where the crude oil weekend repricing on the week of March 6, 2026, was 15.8%, with the benchmark market completely closed; if hedged through on-chain crude oil perpetual, a $10 million position loss could be reduced from about $1.58 million to approximately $62,000 (after accounting for all costs).
app_icon
ChainCatcher Building the Web3 world with innovations.