Scan to download
BTC $77,217.06 -0.01%
ETH $2,120.84 +0.27%
BNB $655.90 +1.21%
XRP $1.36 +1.79%
SOL $85.67 +1.60%
TRX $0.3625 +0.15%
DOGE $0.1056 +1.29%
ADA $0.2458 +1.43%
BCH $378.64 +1.31%
LINK $9.55 +1.52%
HYPE $58.72 +7.27%
AAVE $88.23 +0.27%
SUI $1.11 +1.82%
XLM $0.1480 +3.21%
ZEC $636.91 -3.32%
BTC $77,217.06 -0.01%
ETH $2,120.84 +0.27%
BNB $655.90 +1.21%
XRP $1.36 +1.79%
SOL $85.67 +1.60%
TRX $0.3625 +0.15%
DOGE $0.1056 +1.29%
ADA $0.2458 +1.43%
BCH $378.64 +1.31%
LINK $9.55 +1.52%
HYPE $58.72 +7.27%
AAVE $88.23 +0.27%
SUI $1.11 +1.82%
XLM $0.1480 +3.21%
ZEC $636.91 -3.32%

supply

The security incidents at GitHub and Grafana are likely related to a large-scale "mini sandworm" supply chain attack

According to the threat intelligence released by Slow Fog, several high-frequency npm packages including AntV and Echarts-for-react, as well as the Python SDK durabletask, have recently been targeted by the Mini Shai-Hulud "mini sandworm" supply chain attack. The npm account atool was compromised, and the attacker automatically published 637 malicious versions within 22 minutes, affecting 317 packages. The attacker continuously uploaded durabletask versions 1.4.1, 1.4.2, and 1.4.3 within 35 minutes, bypassing normal release controls and impersonating an official Microsoft release.The large-scale leak of GitHub tokens and the ransomware attack on Grafana Labs are likely related to this supply chain attack. Affected components include high-frequency components such as AntV and Echarts-for-react in the npm ecosystem, as well as Python packages durabletask 1.4.1, 1.4.2, and 1.4.3. Attackers can steal cloud and local credentials, gain unauthorized access to internal repositories and sensitive cloud infrastructure, move laterally to developer machines and CI/CD pipelines, sell and exploit leaked GitHub tokens, and implement ransom and data leak threats.Slow Fog recommends immediately rotating all exposed credentials, replacing affected packages, isolating potentially infected systems, and implementing strict dependency review policies. Previously, it was reported that the "mini sandworm" worm had recently completed widespread infection in open-source code repositories, and developers should be vigilant in checking for issues.

Data: Four on-chain signals indicate that Bitcoin supply is tightening and selling pressure is exhausted

Binance Research released a chart analysis this week indicating that four on-chain signals point to the same conclusion: supply is tightening, and selling pressure has been exhausted.Long-term dormancy: Nearly 60% of BTC supply has not moved for over a year, significantly higher than 27% in 2012. The dormancy rate peaked at 69.5% when the spot Bitcoin ETF was approved in January 2024 and has since remained close to historical highs.SLRV indicator: The short-term to long-term holder value ratio is deeply entrenched in historical bottom territory, indicating a lack of market sentiment. Long-term holders dominate the supply, while short-term speculators have largely exited. Historically, every cycle bottom has been accompanied by this ratio entering the current region.Exchange balances: Since peaking at 17.6% during the pandemic, exchange balances have dropped to 15%, with approximately 500,000 BTC permanently leaving exchanges, and seller supply has fallen to a six-year low.STH MVRV indicator: Since November 2024, the BTC short-term holder MVRV has mostly remained below 1, gradually exhausting selling pressure. Currently, this ratio has rebounded to 1, and short-term holders are beginning to reaccumulate unrealized gains. As profit accumulation is still in its early stages, a new wave of selling pressure is unlikely to emerge immediately; historically, this pattern often appears before a sustained recovery.
app_icon
ChainCatcher Building the Web3 world with innovations.