eden

Сообщение ChainCatcher, бывший главный юридический советник Magic Eden sh0edog (Джо) объявил о своем вступлении в потребительское криптофинансовое приложение fomo на должность главного юридического советника (General Counsel). Его личный опыт также включает работу консультантом в Day One Law и в компании Fenwick West, а в криптоиндустрию он вошел в 2016 году.sh0edog заявил, что fomo является одним из самых быстрорастущих приложений потребительского финансового сектора, ежедневный объем спотовых торгов превысил 100 миллионов долларов, количество активных трейдеров в день составляет более 61 000 человек, а в категории финансов в американском App Store приложение занимает 5-е место, общий объем финансирования составляет около 95 миллионов долларов. Он отметил, что команда выделяется своей исполнительностью и честностью, и он видит потенциал в создании глобальной финансовой социальной сети.Соучредитель fomo seyong и другие члены команды уже публично выразили приветствие. sh0edog заявил, что будет содействовать развитию fomo в направлении глобального потребительского крипто- и социального приложения.

ChainCatcher сообщает, что согласно данным по спотовым торгам на Binance, на рынке наблюдается состояние резкого роста и падения нескольких токенов. DODO упал на 7.13% за 24 часа, MOVR упал на 8.24%, PROM упал на 8.09%, EDEN упал на 9.76%.Кроме того, EUL достиг нового минимума сегодня, упав на 6.87%, MTL и KAIA достигли новых минимумов на этой неделе, упав на 7.73% и 5.17% соответственно. LA также достиг нового минимума сегодня, упав на 6.66%.EDEN немного вырос на 3.13% за 5 минут, в то время как TUT немного упал на 3.06%.

Сообщение ChainCatcher, UPBIT запустит торговлю CYS, ICNT, XAN, EDEN, AIOZ, ALLO 10 августа в 14:00 и поддержит торговые пары BTC, USDT. Пользователи должны завершить пополнение в течение 2 часов после публикации объявления.

SlowMist has issued a security alert, detecting an active npm supply chain attack targeting @redhat-cloud-services related packages. Currently, over 31 packages have been confirmed affected, with a weekly download volume of approximately 116,000 times, and stolen credentials exist in more than 300 GitHub repositories. This attack method is highly similar to the previous "Shai-Hulud" npm attack, including credential theft, creation of malicious repositories, and automated secret leakage. New suspicious repositories continue to emerge, indicating that the attack is still ongoing, and developers are still being continuously infected.Potential harms include: theft of GitHub/npm tokens, leakage of AWS/GCP/Azure cloud credentials, collection of SSH keys and Kubernetes secrets, leakage of local environment and wallet data, creation of malicious repositories and persistence operations, and even potentially destructive actions after tokens are revoked. It is recommended to immediately remove or downgrade affected @redhat-cloud-services package versions, conduct a comprehensive audit of CI/CD workflows and dependency installations, rotate all GitHub, npm, cloud service, SSH, and wallet-related keys, retain logs, and rebuild exposed developer machines or Runners from clean images while maintaining a high level of vigilance.

AI predicts the market project NeoSoul collaborates with 0G to launch the prediction credentials on-chain identity credential campaign, with the first batch of credentials opening for minting on May 27. This campaign is aimed at NeoSoul and 0G ecosystem users, focusing on early identity verification, community participation, and on-chain interactions within 0G. Eligible users can obtain credentials minted through the 0G network as their early on-chain identity credentials.According to reports, NeoSoul has previously been conducting on-chain activities within the 0G ecosystem and has created over 100,000 Agents in total. This credentials campaign will set different levels of identity, and users can unlock corresponding credentials based on their task completion status. Specific rules can be found on the official website.It is reported that credential holders will have the opportunity to receive more ecosystem rewards and qualifications for future activities.

The Chief Information Security Officer of Slow Fog, 23pds, disclosed on platform X that node-ipc has been compromised again. The released three malicious versions of node-ipc (9.1.6, 9.2.3, 12.1) carry the same credential-stealing payload, with the package being downloaded over 10 million times per week.

According to CoinDesk, Bitcoin treasury company Strive announced that its perpetual preferred stock SATA will pay cash dividends on each trading day starting from June 16, becoming the first listed security in the history of the U.S. capital markets to achieve daily dividend payments.Strive CEO Matthew Cole described this move as "an innovation from zero to one." The annualized dividend yield of SATA is 13%, and after converting to daily payments, the effective annualized yield increases to approximately 13.88%. Currently, Strive has zero debt and holds 15,009 bitcoins, ranking ninth in global listed companies' bitcoin reserves.

According to analyst Alicharts, the estimated leverage ratio of Bitcoin on major futures exchanges has risen to about 0.26, the highest level in nearly a year, surpassing the peak in October 2025, reflecting a significant increase in traders' risk appetite.Alicharts stated that this data indicates investors are using leverage extensively and are optimistic about the continuation of Bitcoin's upward trend, showing the market's optimistic expectations for the next wave of market movements.

According to Bloomberg, Dutch market maker Optiver Holding BV has made an equity investment in the venture capital firm Eden Block, which focuses on cryptocurrency and artificial intelligence.Michael Lepa, Head of Technology Ecosystem and Innovation at Optiver, stated that this investment aims to gain exposure to early-stage AI and digital asset companies, believing that both technologies are expected to reshape the underlying infrastructure of trading and capital markets.

Orca posted on the X platform that its frontend is hosted on the cloud hosting platform Vercel. In response to the Vercel security incident, all potentially leaked keys and deployment credentials have been rotated out of caution. Orca's on-chain protocol and user funds were not affected. The official team will continue to monitor the situation and will provide updates as more information becomes available.

The NFT market Magic Eden announced that its native wallet will enter export-only mode on April 1 and will completely cease operations on May 1. Users must export their private keys or mnemonic phrases before this date, or they will not be able to recover their assets. The wallet has been removed from major app stores, and new wallets cannot be downloaded or restored.Magic Eden had previously closed its Ethereum and Bitcoin markets, shifting its business focus to entertainment and the Dicey app. The ME token will still serve as the core of ecological incentives, with stakers able to earn USDC rewards, and the project team has established a ME buyback plan.

The RWA tokenization platform OpenEden announced on platform X that all team and advisor tokens will continue to be locked for 9 months, and the overall unlocking period will also be extended by the same duration. Therefore, the unlocking period for all team and advisor tokens will be postponed to January 2027.

According to Slow Fog monitoring, the Apifox desktop client has encountered a supply chain attack, with front-end script files hosted on its official CDN being injected with highly obfuscated malicious JavaScript code.Affected users may face risks such as credential theft, sensitive data leakage, and remote command execution, with the malicious code executing automatically and being highly concealed. Slow Fog recommends that users immediately revoke all Tokens, reset passwords, log out and log back in to invalidate sessions, block the *.apifox.it.com domain, clear local storage, and review API logs and abnormal activities.

The Chief Information Security Officer of Slow Fog, 23pds (Shan Ge), posted on the X platform stating that there are reports that the LiteLLM vulnerability attackers have stolen approximately 300GB of data and compromised about 500,000 credentials. He advises all cryptocurrency developers to immediately verify and quickly rotate relevant keys and credentials, check logs, access records, and the exposure of sensitive data to avoid losses similar to the Trust Wallet incident.Previously, it was reported that LiteLLM, which has a monthly download volume of 97 million, suffered a supply chain attack, allowing the simple installation to steal all sensitive credentials, including SSH keys.

Andrej Karpathy posted on the X platform that litellm has encountered a PyPI supply chain attack, where executing pip install litellm can steal SSH keys, AWS/GCP/Azure credentials, Kubernetes configurations, git credentials, environment variables, encrypted wallets, SSL private keys, CI/CD keys, and database passwords.litellm has a monthly download volume of 97 million, and the risk can spread to all projects that depend on litellm, such as dspy. The version with the malicious code was online for less than about 1 hour, and it was discovered due to a flaw in the attack code that caused Callum McMahon's machine to run out of memory and crash. Andrej Karpathy stated that supply chain attacks are the most threatening issue in modern software, as each installation of dependencies can introduce tampered packages deep within the dependency tree, leading him to increasingly prefer reducing dependencies and using LLM to directly implement simple functions.

The multi-chain trading platform Magic Eden announced that it will increase the core revenue ratio used for ME token buybacks and staker dividends from the previous 15% to 30% in the third quarter.

According to The Block, the publicly listed Bitcoin mining company HIVE Digital Technologies is undergoing a major strategic adjustment due to tax disputes and operational uncertainties. The company plans to gradually reduce its Bitcoin mining operations in Sweden while significantly expanding its artificial intelligence (AI) data center capabilities in Canada.HIVE stated that its ASIC Bitcoin mining operations in Boden, Sweden, are facing challenges such as the "misuse of existing tax rules" by local authorities, including mandatory margin requirements, which have created operational uncertainties. As a result, the company is gradually scaling down this business and reallocating resources to its AI and high-performance computing strategy in Europe, with a potential complete exit from Bitcoin production in Sweden in the future.Meanwhile, HIVE, through its subsidiary BUZZ High Performance Computing, plans to quadruple the capacity of its liquid-cooled AI data center in Canada, increasing from 4 megawatts (MW) in Manitoba to 16.6 MW across two provinces. The new capacity includes a 5 MW hosting facility in British Columbia, which can be expanded to 12.6 MW.

The Chief Information Security Officer of Slow Fog Technology, 23pds, issued a reminder stating that ClawHub developers should be aware of phishing and credential leakage risks. Currently, ClawHub relies on developers' GitHub one-click login. Previously, the Sha1-Hulud worm stole a large number of developers' GitHub credentials, and attackers may take the opportunity to attack Skills.The attack path is: credential theft → attacker gains GitHub permissions → logs into ClawHub as a developer → publishes malicious Skills to implant backdoors → users download and install, executing malicious code leading to system intrusion.

The Chief Judge of the U.S. District Court for the Southern District of Ohio, Sarah D. Morrison, ruled that there is no historical evidence indicating that Congress intended for federal law to take precedence over state regulation of sports gambling, and thus denied the preliminary injunction request filed by the prediction market platform Kalshi.Kalshi had previously sued the Ohio Casino Control Commission in an attempt to prevent it from taking enforcement action against the platform's event contracts under state gambling laws. Last year, the regulatory agency accused Kalshi of operating illegal sports gambling in Ohio.Kalshi argued that the event contracts it offers are derivatives regulated under the Commodity Exchange Act and should fall under the jurisdiction of the CFTC, thereby asserting that federal regulation should take precedence over state gambling laws.However, the judge stated that there is no evidence from historical and legislative context to suggest that Congress intended for the law to supersede state sports gambling regulations, noting that when the Dodd-Frank Act amended relevant laws in 2010, sports gambling was still widely restricted in the U.S.Kalshi announced that it would appeal the ruling. The case is seen as an important test of the legal status of prediction markets, and its outcome could affect the future compliance prospects of other prediction platforms in the U.S., including Polymarket.

According to 23pds, the Chief Information Security Officer of Slow Fog Technology, an intelligence system has discovered a malicious npm package named "@openclaw-ai/openclawai" that is implementing a multi-layer attack.This malicious package disguises itself as a legitimate command-line tool called OpenClaw Installer, aimed at stealing sensitive user information, including system credentials, cryptocurrency wallet private keys, browser data, SSH keys, and Apple Keychain database, among others.