BTC $81,178.96 -0.35%
ETH $2,402.39 -1.40%
BNB $714.01 -1.43%
XRP $1.29 -1.70%
SOL $103.38 -0.89%
TRX $0.3348 +0.15%
DOGE $0.0792 -1.89%
ADA $0.2197 -2.60%
BCH $272.44 -1.57%
LINK $11.94 -3.52%
HYPE $78.62 -0.62%
AAVE $152.11 -3.19%
SUI $0.9777 -4.56%
XLM $0.1766 -2.44%
ZEC $1,139.03 -3.46%
AAPL $343.34 -0.25%
AMZN $249.16 -0.99%
GOOGL $338.70 -1.16%
MSFT $527.32 -0.36%
META $707.85 -1.35%
NVDA $214.29 -1.30%
TSLA $351.97 -1.46%
SNDK $1,298.10 -2.94%
INTC $89.33 -2.84%
SPCX $145.52 -0.45%
MU $876.03 -2.52%
AMD $530.00 -2.53%
BTC $81,178.96 -0.35%
ETH $2,402.39 -1.40%
BNB $714.01 -1.43%
XRP $1.29 -1.70%
SOL $103.38 -0.89%
TRX $0.3348 +0.15%
DOGE $0.0792 -1.89%
ADA $0.2197 -2.60%
BCH $272.44 -1.57%
LINK $11.94 -3.52%
HYPE $78.62 -0.62%
AAVE $152.11 -3.19%
SUI $0.9777 -4.56%
XLM $0.1766 -2.44%
ZEC $1,139.03 -3.46%
AAPL $343.34 -0.25%
AMZN $249.16 -0.99%
GOOGL $338.70 -1.16%
MSFT $527.32 -0.36%
META $707.85 -1.35%
NVDA $214.29 -1.30%
TSLA $351.97 -1.46%
SNDK $1,298.10 -2.94%
INTC $89.33 -2.84%
SPCX $145.52 -0.45%
MU $876.03 -2.52%
AMD $530.00 -2.53%

not

All
Article
Flash

first_img NEAR Intents released a post-mortem report, revealing that the $3.8 million vulnerability originated from a deposit notification flaw

The cross-chain exchange protocol NEAR Intents released a post-mortem report attributing a $3.8 million vulnerability to a flaw in the deposit notification feature. The protocol deploys a public settlement contract on NEAR that maintains an internal ledger of deposited tokens, while withdrawals transfer tokens out via a cross-chain bridge. The report was published by NEAR Intents General Manager Alex Shevchenko on October 16, stating that the attacker withdrew $3.8 million before the protocol was shut down on October 1 and returned all funds within 36 hours of detection, with all affected users fully compensated.The report indicates that the feature notifies third-party contracts when tokens are deposited. The attacker created a contract that intentionally caused the notification to fail, allowing the token contract to refund the deposit while NEAR Intents retained the corresponding ledger credit. Through 23 failed deposit transactions, the attacker accumulated $3.8 million in unsupported balance, referred to in the report as ghost funds, and subsequently withdrew real tokens based on this and transferred them to other chains via the Omni infrastructure. Shevchenko stated that this was a vulnerability in the NEAR Intents contract, not in the Omni infrastructure.Withdrawals occurred between September 29 and October 1. The settlement contract was paused and reopened on October 1, with affected routes gradually restored, and contract-side deposits resumed on October 2. The report noted that the vulnerability went undetected because monitoring only compared the original chain assets with the total balance of NEAR side tokens, without comparing the total internal user balances with the actual tokens held by the contract; the team has since added this check and will automatically pause the contract when there is a balance inconsistency. The fix for the October vulnerability was deployed on October 2, but another serious vulnerability report regarding the same feature prompted its complete removal on October 7, with the relevant researcher receiving a $300,000 reward.

first_img Google DeepMind's First Audit: AI Did Not Accelerate Its Own Development, 75% of Code Written by AI

Google DeepMind released the first comprehensive empirical assessment of automation in machine learning research and development in the Gemini 4 Argon security report. The conclusion is that AI has not accelerated the R&D of AI itself, despite the fact that AI has written most of the code delivered by the lab's engineers. Researcher Haydn Belfield, who participated in the assessment, stated on X that there is currently no significant end-to-end ML R&D acceleration, so the risks of AI-driven ML R&D are currently low.The team built an internal index, GCI v1, which synthesizes the scores of 123 AI models across 92 benchmarks into a single value. The cutting-edge Gemini capabilities are improving at a stable rate of about 0.1 GCI points per month, with Gemini 1.5 Pro approaching 0.5 points by the end of 2024, Gemini 3.8 Flash slightly above 2.9 points by September 2026, and Argon about 3.3 points above the trend line. However, Belfield noted that this is due to increased computing power and organizational investment, rather than AI-driven acceleration.Over 75% of the code produced by DeepMind is written by AI, and the proportion of fully delegated code merge requests increased from 7.5% to 11.9% between April and September, but about 88% of requests still require multiple rounds of human guidance or manual writing. A survey of 12 senior researchers showed that automation is highest in clearly defined, verifiable execution tasks and lowest in areas such as open science concepts, new experimental designs, and unstable diagnostic training.

Analysis: It is not common for the Federal Reserve to raise interest rates in October or November before the midterm elections, and the market is paying attention to the remarks by Waller

In September, the U.S. CPI rose 3.7% year-on-year and 0.6% month-on-month, while the core CPI increased 2.6% year-on-year and 0.3% month-on-month, all exceeding market expectations. Following the data release, market bets on a 25 basis point rate hike by the Federal Reserve in October rose to about 40%, up from around 20% the previous day.The Federal Reserve just raised rates by 25 basis points last month, marking its first rate hike of 2023. The next rate decision will be announced on October 28, just 6 days before the U.S. midterm elections on November 3. Inflation continues to remain above the Federal Reserve's 2% target, and economic activity remains resilient, providing grounds for further rate hikes.Economists from institutions such as Jefferies and Nationwide believe that there is data support for rate hikes in both October and December. Some analysts also expect that the Federal Reserve may consider the timing of the elections and potential economic vulnerabilities, choosing to delay until December. Historical data shows that the Federal Reserve rarely raises rates in October or November before midterm elections, and the market will be paying attention to Federal Reserve Chairman Kevin Walsh's remarks before entering the pre-meeting blackout period.
app_icon
ChainCatcher Building the Web3 world with innovations.