BTC $81,259.07 +0.89%
ETH $2,660.02 +2.60%
BNB $780.17 +3.52%
XRP $1.41 +2.28%
SOL $111.26 +2.77%
TRX $0.3431 +1.09%
DOGE $0.0881 +2.67%
ADA $0.2303 +3.76%
BCH $254.23 +3.27%
LINK $12.61 +4.47%
HYPE $93.32 +2.97%
AAVE $138.03 -0.35%
SUI $0.9284 +11.65%
XLM $0.1974 +3.46%
ZEC $1,515.82 +4.23%
AAPL $334.44 -0.06%
AMZN $255.39 +0.56%
GOOGL $351.28 -0.09%
MSFT $494.73 +0.04%
META $674.57 +0.76%
NVDA $223.31 +0.74%
TSLA $366.22 +0.53%
SNDK $1,801.74 +1.97%
INTC $112.94 +3.33%
SPCX $153.96 +0.96%
MU $1,026.42 +2.32%
AMD $570.91 +3.32%
BTC $81,259.07 +0.89%
ETH $2,660.02 +2.60%
BNB $780.17 +3.52%
XRP $1.41 +2.28%
SOL $111.26 +2.77%
TRX $0.3431 +1.09%
DOGE $0.0881 +2.67%
ADA $0.2303 +3.76%
BCH $254.23 +3.27%
LINK $12.61 +4.47%
HYPE $93.32 +2.97%
AAVE $138.03 -0.35%
SUI $0.9284 +11.65%
XLM $0.1974 +3.46%
ZEC $1,515.82 +4.23%
AAPL $334.44 -0.06%
AMZN $255.39 +0.56%
GOOGL $351.28 -0.09%
MSFT $494.73 +0.04%
META $674.57 +0.76%
NVDA $223.31 +0.74%
TSLA $366.22 +0.53%
SNDK $1,801.74 +1.97%
INTC $112.94 +3.33%
SPCX $153.96 +0.96%
MU $1,026.42 +2.32%
AMD $570.91 +3.32%

zhipu

All
Article
Flash

first_img ZCode is about to officially open source and conduct a security audit

The domestic large model enterprise Zhipu (2513.HK) is about to officially open source its AI programming tool ZCode. Zhipu stated that this open source initiative is the first step in response to external concerns about ZCode's data processing. In the future, it will further promote ZCode's transition to community-driven development and welcomes external parties to download, inspect the code, and participate in improvements.Zhipu has invited the China Academy of Information and Communications Technology to conduct a security audit on ZCode, focusing on verifying data retention. In the future, a regular product security vulnerability reporting mechanism will be established. According to the technical evaluation by the China Academy of Information and Communications Technology, it has been confirmed that the status of the zcode-prod Alibaba Cloud OSS storage bucket is zero data in the cloud; the ZCode v3.14.0 client has completed security rectification, removed the Repo Wiki feature, and severed the link for generating and uploading local repository snapshots. After review by Green Alliance Technology, it has been confirmed that the relevant data objects and the storage bucket itself have been deleted. Zhipu has expressed apologies once again and asks everyone to continue monitoring.Previously, social media revealed that ZCode would silently upload users' programming development data without user consent. On September 18, Zhipu issued a statement saying that the controversy was triggered by the default-enabled code repository indexing feature, and the uploaded data was destroyed immediately after generating the RepoWiki. They have apologized to affected users and will provide an additional weekly quota reset as compensation for all ZCode users. On September 20, Zhipu's MaaS platform announced that a feature to ensure no data retention will be launched soon.

Chengming Technology issued a letter holding ZCode accountable for uploading data without authorization

Taiyuan Chengming Technology Co., Ltd. sent a letter to Beijing Zhipu Huazhang Technology Co., Ltd., raising multiple demands regarding the alleged unauthorized upload of company data assets and trade secrets by its ZCode client, and reserving the right to pursue legal accountability. Chengming Technology pointed out that although Zhipu has publicly apologized for the "silent upload of user local repository data" and claimed to have fixed the issue, independent evidence collection revealed that the upload behavior was automatically triggered and occurred in bulk, including complete archived files such as project source code, system architecture, version control history, database passwords, cloud service credentials, and employee personal information, far exceeding the scope of collection stated in its Privacy Policy.Although the client was updated to version 3.12.3 on September 16, upload behavior was still detected in the early hours of the day Zhipu publicly apologized, raising doubts about the actual effectiveness of the "fix." At the same time, the ZCode client’s network requests pointed to a Singapore entity, while the service agreement was signed with Beijing Zhipu Huazhang, requesting clarification on the responsible party for this upload, as well as whether the data was transmitted abroad or stored overseas.Chengming Technology demanded that Zhipu respond in writing by October 10 and complete the immediate cessation of processing and thorough deletion of all uploaded data and related derivative data, caches, and backups, provide a complete list of processing situations, clarify the data's whereabouts, whether it was shared with third parties, whether it was used for model training, and whether cross-border transmission occurred, explain the management of encryption private keys and complete operation logs, clarify the exact scope of "destruction" mentioned in previous public responses, issue proof of deletion completion, provide a written commitment not to upload without authorization again, legally provide access, copying, and explanation of personal information, and designate formal communication channels, among other matters. Currently, Zhipu has not publicly responded to the aforementioned letter.

first_img The core ARR of China's open-source large models is approximately 6-8 billion USD

Robonomics author FD published the China Open-Source LLM Tracker on September 1, 2026, stating that the total ARR of China's open-source large models is approximately $10-15 billion, with core LLM revenue around $6-8 billion after excluding ByteDance / Seedance. Growth has not relied on price wars; after DeepSeek raised prices by about 3-12 times, usage still increased, and the average price of the Zhipu API rose by 101% while token usage exceeded 40 times within the year. The best estimate for overseas revenue is approximately $2 billion.Zhipu MaaS ARR increased from about $250 million in March to an annualized monthly rate of about $1.6 billion in August, with a weekly annualized rate of $2 billion. August revenue has already surpassed its API revenue for the first half of the year; the API gross margin is 24.6%, and inference costs per token decreased by 80%. MiniMax ARR rose from about $100 million in December 2025 to over $800 million in annualized weekly revenue by August 2026, with B2B accounting for about 80%. Kimi ARR increased from about $100 million in March to about $300 million by mid-June. DeepSeek's revenue from January to July was approximately $70 million, with the latest ARR estimated at about $1.2 billion.ByteDance's annualized AI revenue is approximately $4 billion, of which Seedance accounts for about $2 billion.
app_icon
ChainCatcher Building the Web3 world with innovations.