server

The crypto wallet Phantom announced the launch of the MCP server on platform X, supporting AI Agent exchange, signing, and management of all on-chain addresses supported by Phantom, and can also be used with Claude, OpenClaw, or any MCP-compatible client.

According to The Hacker News, Cyata researchers have disclosed three critical security vulnerabilities (CVE-2025-68143/44/45) in the mcp-server-git maintained by Anthropic, which can be exploited for path traversal and parameter injection, potentially leading to remote code execution.These vulnerabilities can be weaponized through prompt injection, allowing attackers to trigger the attack simply by controlling the AI assistant to read malicious content. The vulnerabilities have been patched in the versions released in September and December 2025, and the official has removed the git_init tool and enhanced path validation, recommending users to update to the latest version as soon as possible.

Three security vulnerabilities have been discovered in the official mcp-server-git maintained by Anthropic. These vulnerabilities can be exploited through prompt injection attacks, allowing attackers to trigger the vulnerabilities via malicious README files or compromised web pages without direct access to the victim's system. The vulnerabilities include: CVE-2025-68143 (unrestricted git_init), CVE-2025-68145 (path validation bypass), and CVE-2025-68144 (parameter injection in git_diff).When these vulnerabilities are combined with the file system MCP server, attackers can execute arbitrary code, delete system files, or read arbitrary file contents into the large language model context. Cyata points out that since mcp-server-git does not perform path validation on the repo_path parameter, attackers can create Git repositories in any directory on the system. Additionally, by configuring a cleanup filter in .git/config, attackers can run shell commands without execution permissions. Anthropic assigned CVE identifiers and submitted a patch on December 17, 2025. Users are advised to update mcp-server-git to version 2025.12.18 or higher.

The cryptocurrency exchange Upbit has announced that it will conduct a digital asset/deposit audit and server maintenance, and will suspend services on January 1, 2026:Server maintenance time: January 1, 2026 (Thursday) 02:00 - 08:00Korean won deposit and withdrawal suspension time: January 1, 2026 (Thursday) 02:00 - 08:00Digital asset deposit and withdrawal service suspension time: December 31, 2025 (Wednesday) 20:00 to January 1, 2026 (Thursday) 08:00

The Bitcoin mining infrastructure company Luxor announced the expansion of its hardware business from ASICs to GPUs and AI server fields, further extending its procurement, logistics, and financing capabilities to the high-growth artificial intelligence and high-performance computing (HPC) markets.Luxor stated that the core bottleneck currently faced by the industry is the actual shortage of deployable computing power, while mining companies have unique advantages in transitioning to AI data centers, including power contracts, sites, and advanced cooling systems. Since its establishment, Luxor has procured over $750 million in ASICs for Bitcoin miners, and this experience will now be extended to GPU and server procurement, providing end-to-end solutions that include new, refurbished, and used equipment.Its channels cover major manufacturers such as Dell, HPE, Lenovo, and PNY, and are supported by U.S. warehousing, international logistics, equipment installation, and hosting construction capabilities. Luxor pointed out that the global Bitcoin mining network currently has data center capacity close to 20GW, with an additional 10GW of potential expansion space, of which 35%-40% is located in the United States.As mining companies gradually shift some capacity towards AI and HPC hosting, Luxor will also adjust its service structure accordingly. As the only mining pool with comprehensive financing and hedging capabilities, Luxor can assist miners in obtaining GPU procurement funds through computing power and can provide structured financing such as sale-leaseback through partners. Additionally, its Tenki cloud computing marketplace can help operators immediately monetize computing resources once the hardware is online.Luxor stated that the company has built a full-process infrastructure network covering tax-advantaged warehousing in Montana and Delaware, OEM installation, warranty management, export control compliance, and old equipment disposal, aiming to meet the multi-billion dollar capital investment needs of customers in the AI and HPC era.

According to the official announcement, the decentralized security project Hats Finance has announced on the X platform that Hats.finance will be permanently shutting down its hosted operations, as it believes that continuing to operate a centralized user interface (UI) and servers is no longer sustainable, and there are currently no plans to adopt a new legal or operational framework to continue this hosted structure.The current arrangements are as follows: The user front-end and back-end (UI and servers) hosted by Hats.finance are expected to go offline on December 31, 2025, and most functionalities relying on this hosted structure will be gradually phased out; the Hats protocol is still deployed on-chain and managed by the DAO, with core contracts designed to run continuously as per the code.Currently, the user front-end has provided an IPFS-based version, and as long as this version is still providing services, users may access it through public gateways. However, since payments to the current fixed service providers (such as Pinata) will cease, its continued availability and performance cannot be guaranteed. Users can submit withdrawal requests through the hosted UI until December 17, after which they will need to interact directly with the contract to complete withdrawals.

ChainCatcher news, according to the official x402Scan real-time data disclosure, AIsa has continuously driven the growth of real trading volume to a high level during the testing phase (during which some Facilitators experienced downtime due to high-frequency calls).Currently, AIsa's production environment serves various AI Agents clients, including News Agents, Interview Agents, and voice education AI applications, and is achieving real-time settlement and microtransaction closed loops based on the x402 protocol by calling APIs in real-time, consuming LLM Tokens, and accessing Twitter APIs and other AI resources.Recently, AIsa launched the world's first AI resource market based on the HTTP 402 native protocol, AI Marketplace-402. AIsa is supported by Silicon Valley's renowned venture capitalist Tim Draper's Draper Associates, BoostVC, and the founder of Distributed Capital, Shen Bo.

ChainCatcher message, BscScan posted on platform X that server maintenance will be conducted on October 14, 2025, at 7:00 AM UTC, expected to last for 3 hours.During the maintenance, the website and API services may be unavailable.

ChainCatcher news, the Hong Kong listed company International Commercial Settlement Holdings Limited (00147.HK) has signed an agreement through its joint venture Keen Golden Limited with Bitmain Technologies Georgia Limited and Tecnoenergia Capital Paraguay S.A. to purchase a total of 1,863 HASH supercomputing servers, with a total price of approximately 10.87 million USD. The buyer can choose to pay in cash or with Bitcoin collateral, and the expected delivery time is by the end of September, with a one-year warranty for the servers.

ChainCatcher message, the multi-agent scheduling platform Questflow successfully unlocks the autonomous agent economy with the help of Coinbase's CDP Server Wallets and x402.As user demand for multi-agent orchestration and real-time coordination continues to grow, Questflow needs to provide secure wallets for each agent and enable on-chain payment capabilities without manual signatures, gas payments, or key management.To achieve this, Questflow introduced CDP Server Wallets to enable secure, scalable wallet creation and integrated x402 to drive on-chain autonomous payments between agents. The combination of the two brings a fast, secure wallet system and native seamless payment capabilities.Since integrating CDP Wallets v2 and x402, Questflow has processed over 130,000 autonomous microtransactions, integrated with more than 30 third-party agents (including CoinGecko, RootData, DexScreener, Notion, and X), and achieved on-chain native interactions; wallet creation and agent coordination efficiency improved by 95%; supporting real-time multi-agent workflows from DeFi strategies to social automation.With CDP Wallets and x402, Questflow has achieved a core breakthrough in the autonomous agent economy: building a scalable, secure on-chain autonomous coordination infrastructure.

ChainCatcher news reports that U.S. and international law enforcement agencies have seized 4 servers, 9 domain names, and approximately $1 million in Bitcoin, which are linked to a notorious Russian ransomware gang accused of attacking hundreds of institutions across critical sectors.The U.S. Department of Justice stated that the operation began on July 24, executed jointly by U.S. agencies along with those from Canada, Germany, Ireland, France, the UK, Ukraine, and Lithuania, targeting infrastructure associated with BlackSuit and Royal ransomware. Investigators believe that these two ransomware variants were developed by the same cybercrime group.Authorities claim that since 2022, the gang has extorted over $500 million in ransom, with a single ransom demand reaching as high as $60 million. It is alleged that they attacked more than 450 victims in the U.S. during this period, including hospitals, schools, police departments, energy companies, and government agencies, illegally profiting at least $370 million.The seized cryptocurrency was valued at $1,091,453 at the time of the seizure, originating from a digital wallet frozen by a trading platform in January 2024. According to court documents, these funds include a portion of Bitcoin ransom paid by a victim in April 2023, totaling $1.45 million.Victims of BlackSuit and Royal are typically required to pay ransoms in Bitcoin through dark web sites. Cybersecurity officials warn that operators of such malware often combine intimidation tactics with sophisticated data theft techniques, making it difficult to recover data without paying the ransom.

ChainCatcher news, Economic Observer published an article titled "Annual Returns as High as 540%? Investigation into the Chaos of Virtual Asset Investment," which points out that reporters have found that there are currently some virtual asset investment platforms active in the market that are associated with keywords such as decentralization, blockchain, and virtual assets. They package their projects using terms like blockchain technology, smart contracts, DeFi, and Defai (DeFi + AI). Many illegal projects are wrapped in concepts such as "DeFi decentralized finance," "DApp wealth management," and "stablecoin mining," but in essence, they are still fundraising and rebate activities, merely using a technological shell to disguise risks.From a legal perspective, investors need to take responsibility for their own civil legal actions, carefully identify and participate in virtual asset investment projects, and be wary of illegal activities disguised as virtual assets, without harboring any illusions.

ChainCatcher news, according to official information, Binance will upgrade its wallet network server on July 31, 2025, at 16:00 (UTC+8). To support this upgrade, Binance will suspend all deposit and withdrawal services across the network on July 31, 2025, at 16:00 (UTC+8). This upgrade is expected to take 15 minutes.During the wallet upgrade, users can trade tokens normally. The deposit and withdrawal services for related tokens will be reopened after the wallet upgrade, once the network is running stably, without further announcement.

ChainCatcher message, according to official news, Binance will upgrade its wallet network servers on July 31, 2025, at 16:00 (UTC+8). To support this upgrade, Binance will suspend all deposit and withdrawal services across all networks on July 31, 2025, at 16:00 (UTC+8). This upgrade is expected to take 15 minutes.

ChainCatcher news, Economic Observer article "How the Offshore Renminbi Stablecoin Experiment in Hong Kong Breaks the Deadlock," points out that the proposed Hong Kong stablecoin regulations set to be implemented in August may signal the imminent trial of offshore renminbi (CNH) stablecoins. Referring to the experience of the renminbi business pilot in 2003, the implementation of CNH stablecoins can be advanced in three phases:First, sandbox trial (2025---2026): Pilot issuance of CNH stablecoins by licensed Chinese institutions for trade scenarios in the Greater Bay Area;Second, regional expansion (2026---2027): Connecting to cross-border projects such as mBridge (Multilateral Central Bank Digital Currency Bridge), while piloting applications like bond tokenization and other RWA (real-world assets);Third, global promotion (starting in 2028): Collaborating with international organizations such as the IMF (International Monetary Fund) to establish technical and regulatory standards, promoting CNH stablecoins as a regional commodity pricing tool. (Economic Observer)

ChainCatcher news, according to CoinDesk, UK-based startup Optalysys, focused on secure computing, announced the launch of what is claimed to be the world's first server designed specifically for blockchain, capable of large-scale data processing without the need for decryption.The company's LightLocker node is a server that utilizes fully homomorphic encryption (FHE) technology. This is a mathematical method that allows computations to be performed directly on encrypted data without compromising the encryption itself.Over the past year, several companies have raised funds in the cryptocurrency space and explored the applications of fully homomorphic encryption (FHE). Optalysys stated that its server hardware is specifically designed for blockchain encryption, providing a more cost-effective alternative to expensive and inefficient GPU systems, with a 40% reduction in energy consumption.Optalysys is headquartered in Leeds, England, and was founded in 2013 by CEO Nick New and CTO Robert Todd. The company completed a £21 million (approximately $28 million) Series A funding round in July 2023.

ChainCatcher news, according to Eleanor Terrett, Caroline D. Pham, acting chair of the Commodity Futures Trading Commission (CFTC), stated at the Medici Network conference that the CFTC plans to participate as an observer in several industry tokenization pilot projects to gain firsthand experience of how tokenized assets operate in the real world and to accumulate relevant technical expertise.

ChainCatcher message, Slow Mist Technology's Chief Information Security Officer 23pds posted on the X platform stating that MCP may have vulnerabilities, and the artificial intelligence system can be manipulated to quietly leak your entire conversation history to malicious servers.