eden

Tin tức từ ChainCatcher, cựu cố vấn pháp lý tổng thể của Magic Eden sh0edog (Joe) đã thông báo gia nhập ứng dụng tài chính tiền điện tử tiêu dùng fomo, đảm nhận vị trí cố vấn pháp lý tổng thể (General Counsel). Hồ sơ cá nhân của ông còn bao gồm tư vấn cho Day One Law, từng làm việc tại Fenwick West, và đã gia nhập ngành công nghiệp tiền điện tử từ năm 2016.sh0edog cho biết, fomo là một trong những ứng dụng tài chính tiêu dùng phát triển nhanh nhất, với khối lượng giao dịch hàng ngày đã vượt qua 100 triệu USD, số lượng người giao dịch hàng ngày vượt quá 61.000 người, đứng thứ 5 trong phân loại tài chính của App Store tại Mỹ, và đã huy động được khoảng 95 triệu USD. Ông cho biết đội ngũ này có khả năng thực thi và độ tin cậy nổi bật, và lạc quan về tiềm năng xây dựng nó thành một mạng lưới xã hội tài chính toàn cầu.Các thành viên trong nhóm, bao gồm đồng sáng lập fomo seyong, đã công khai bày tỏ sự chào đón. sh0edog cho biết sẽ hỗ trợ thúc đẩy sự phát triển của fomo trong hướng tiêu dùng tiền điện tử và ứng dụng xã hội toàn cầu.

ChainCatcher thông báo, theo dữ liệu giao dịch giao ngay của Binance, thị trường xuất hiện tình trạng nhiều đồng token tăng cao rồi giảm. DODO giảm 7.13% trong 24 giờ, MOVR giảm 8.24%, PROM giảm 8.09%, EDEN giảm 9.76%.Ngoài ra, EUL chạm mức thấp mới trong hôm nay, giảm 6.87%, MTL và KAIA lần lượt chạm mức thấp mới trong tuần, giảm 7.73% và 5.17%. LA cũng chạm mức thấp mới trong hôm nay, giảm 6.66%.EDEN tăng nhẹ 3.13% trong 5 phút, trong khi TUT giảm nhẹ 3.06%.

Tin tức từ ChainCatcher, UPBIT sẽ niêm yết CYS, ICNT, XAN, EDEN, AIOZ, ALLO vào lúc 14:00 ngày 10 tháng 8 và hỗ trợ các cặp giao dịch BTC, USDT. Người dùng cần hoàn thành việc nạp tiền trong vòng 2 giờ sau khi thông báo được phát hành.

SlowMist has issued a security alert, detecting an active npm supply chain attack targeting @redhat-cloud-services related packages. Currently, over 31 packages have been confirmed affected, with a weekly download volume of approximately 116,000 times, and stolen credentials exist in more than 300 GitHub repositories. This attack method is highly similar to the previous "Shai-Hulud" npm attack, including credential theft, creation of malicious repositories, and automated secret leakage. New suspicious repositories continue to emerge, indicating that the attack is still ongoing, and developers are still being continuously infected.Potential harms include: theft of GitHub/npm tokens, leakage of AWS/GCP/Azure cloud credentials, collection of SSH keys and Kubernetes secrets, leakage of local environment and wallet data, creation of malicious repositories and persistence operations, and even potentially destructive actions after tokens are revoked. It is recommended to immediately remove or downgrade affected @redhat-cloud-services package versions, conduct a comprehensive audit of CI/CD workflows and dependency installations, rotate all GitHub, npm, cloud service, SSH, and wallet-related keys, retain logs, and rebuild exposed developer machines or Runners from clean images while maintaining a high level of vigilance.

AI predicts the market project NeoSoul collaborates with 0G to launch the prediction credentials on-chain identity credential campaign, with the first batch of credentials opening for minting on May 27. This campaign is aimed at NeoSoul and 0G ecosystem users, focusing on early identity verification, community participation, and on-chain interactions within 0G. Eligible users can obtain credentials minted through the 0G network as their early on-chain identity credentials.According to reports, NeoSoul has previously been conducting on-chain activities within the 0G ecosystem and has created over 100,000 Agents in total. This credentials campaign will set different levels of identity, and users can unlock corresponding credentials based on their task completion status. Specific rules can be found on the official website.It is reported that credential holders will have the opportunity to receive more ecosystem rewards and qualifications for future activities.

The Chief Information Security Officer of Slow Fog, 23pds, disclosed on platform X that node-ipc has been compromised again. The released three malicious versions of node-ipc (9.1.6, 9.2.3, 12.1) carry the same credential-stealing payload, with the package being downloaded over 10 million times per week.

According to CoinDesk, Bitcoin treasury company Strive announced that its perpetual preferred stock SATA will pay cash dividends on each trading day starting from June 16, becoming the first listed security in the history of the U.S. capital markets to achieve daily dividend payments.Strive CEO Matthew Cole described this move as "an innovation from zero to one." The annualized dividend yield of SATA is 13%, and after converting to daily payments, the effective annualized yield increases to approximately 13.88%. Currently, Strive has zero debt and holds 15,009 bitcoins, ranking ninth in global listed companies' bitcoin reserves.

According to analyst Alicharts, the estimated leverage ratio of Bitcoin on major futures exchanges has risen to about 0.26, the highest level in nearly a year, surpassing the peak in October 2025, reflecting a significant increase in traders' risk appetite.Alicharts stated that this data indicates investors are using leverage extensively and are optimistic about the continuation of Bitcoin's upward trend, showing the market's optimistic expectations for the next wave of market movements.

According to Bloomberg, Dutch market maker Optiver Holding BV has made an equity investment in the venture capital firm Eden Block, which focuses on cryptocurrency and artificial intelligence.Michael Lepa, Head of Technology Ecosystem and Innovation at Optiver, stated that this investment aims to gain exposure to early-stage AI and digital asset companies, believing that both technologies are expected to reshape the underlying infrastructure of trading and capital markets.

Orca posted on the X platform that its frontend is hosted on the cloud hosting platform Vercel. In response to the Vercel security incident, all potentially leaked keys and deployment credentials have been rotated out of caution. Orca's on-chain protocol and user funds were not affected. The official team will continue to monitor the situation and will provide updates as more information becomes available.

The NFT market Magic Eden announced that its native wallet will enter export-only mode on April 1 and will completely cease operations on May 1. Users must export their private keys or mnemonic phrases before this date, or they will not be able to recover their assets. The wallet has been removed from major app stores, and new wallets cannot be downloaded or restored.Magic Eden had previously closed its Ethereum and Bitcoin markets, shifting its business focus to entertainment and the Dicey app. The ME token will still serve as the core of ecological incentives, with stakers able to earn USDC rewards, and the project team has established a ME buyback plan.

The RWA tokenization platform OpenEden announced on platform X that all team and advisor tokens will continue to be locked for 9 months, and the overall unlocking period will also be extended by the same duration. Therefore, the unlocking period for all team and advisor tokens will be postponed to January 2027.

According to Slow Fog monitoring, the Apifox desktop client has encountered a supply chain attack, with front-end script files hosted on its official CDN being injected with highly obfuscated malicious JavaScript code.Affected users may face risks such as credential theft, sensitive data leakage, and remote command execution, with the malicious code executing automatically and being highly concealed. Slow Fog recommends that users immediately revoke all Tokens, reset passwords, log out and log back in to invalidate sessions, block the *.apifox.it.com domain, clear local storage, and review API logs and abnormal activities.

The Chief Information Security Officer of Slow Fog, 23pds (Shan Ge), posted on the X platform stating that there are reports that the LiteLLM vulnerability attackers have stolen approximately 300GB of data and compromised about 500,000 credentials. He advises all cryptocurrency developers to immediately verify and quickly rotate relevant keys and credentials, check logs, access records, and the exposure of sensitive data to avoid losses similar to the Trust Wallet incident.Previously, it was reported that LiteLLM, which has a monthly download volume of 97 million, suffered a supply chain attack, allowing the simple installation to steal all sensitive credentials, including SSH keys.

Andrej Karpathy posted on the X platform that litellm has encountered a PyPI supply chain attack, where executing pip install litellm can steal SSH keys, AWS/GCP/Azure credentials, Kubernetes configurations, git credentials, environment variables, encrypted wallets, SSL private keys, CI/CD keys, and database passwords.litellm has a monthly download volume of 97 million, and the risk can spread to all projects that depend on litellm, such as dspy. The version with the malicious code was online for less than about 1 hour, and it was discovered due to a flaw in the attack code that caused Callum McMahon's machine to run out of memory and crash. Andrej Karpathy stated that supply chain attacks are the most threatening issue in modern software, as each installation of dependencies can introduce tampered packages deep within the dependency tree, leading him to increasingly prefer reducing dependencies and using LLM to directly implement simple functions.

The multi-chain trading platform Magic Eden announced that it will increase the core revenue ratio used for ME token buybacks and staker dividends from the previous 15% to 30% in the third quarter.

According to The Block, the publicly listed Bitcoin mining company HIVE Digital Technologies is undergoing a major strategic adjustment due to tax disputes and operational uncertainties. The company plans to gradually reduce its Bitcoin mining operations in Sweden while significantly expanding its artificial intelligence (AI) data center capabilities in Canada.HIVE stated that its ASIC Bitcoin mining operations in Boden, Sweden, are facing challenges such as the "misuse of existing tax rules" by local authorities, including mandatory margin requirements, which have created operational uncertainties. As a result, the company is gradually scaling down this business and reallocating resources to its AI and high-performance computing strategy in Europe, with a potential complete exit from Bitcoin production in Sweden in the future.Meanwhile, HIVE, through its subsidiary BUZZ High Performance Computing, plans to quadruple the capacity of its liquid-cooled AI data center in Canada, increasing from 4 megawatts (MW) in Manitoba to 16.6 MW across two provinces. The new capacity includes a 5 MW hosting facility in British Columbia, which can be expanded to 12.6 MW.

The Chief Information Security Officer of Slow Fog Technology, 23pds, issued a reminder stating that ClawHub developers should be aware of phishing and credential leakage risks. Currently, ClawHub relies on developers' GitHub one-click login. Previously, the Sha1-Hulud worm stole a large number of developers' GitHub credentials, and attackers may take the opportunity to attack Skills.The attack path is: credential theft → attacker gains GitHub permissions → logs into ClawHub as a developer → publishes malicious Skills to implant backdoors → users download and install, executing malicious code leading to system intrusion.

The Chief Judge of the U.S. District Court for the Southern District of Ohio, Sarah D. Morrison, ruled that there is no historical evidence indicating that Congress intended for federal law to take precedence over state regulation of sports gambling, and thus denied the preliminary injunction request filed by the prediction market platform Kalshi.Kalshi had previously sued the Ohio Casino Control Commission in an attempt to prevent it from taking enforcement action against the platform's event contracts under state gambling laws. Last year, the regulatory agency accused Kalshi of operating illegal sports gambling in Ohio.Kalshi argued that the event contracts it offers are derivatives regulated under the Commodity Exchange Act and should fall under the jurisdiction of the CFTC, thereby asserting that federal regulation should take precedence over state gambling laws.However, the judge stated that there is no evidence from historical and legislative context to suggest that Congress intended for the law to supersede state sports gambling regulations, noting that when the Dodd-Frank Act amended relevant laws in 2010, sports gambling was still widely restricted in the U.S.Kalshi announced that it would appeal the ruling. The case is seen as an important test of the legal status of prediction markets, and its outcome could affect the future compliance prospects of other prediction platforms in the U.S., including Polymarket.

According to 23pds, the Chief Information Security Officer of Slow Fog Technology, an intelligence system has discovered a malicious npm package named "@openclaw-ai/openclawai" that is implementing a multi-layer attack.This malicious package disguises itself as a legitimate command-line tool called OpenClaw Installer, aimed at stealing sensitive user information, including system credentials, cryptocurrency wallet private keys, browser data, SSH keys, and Apple Keychain database, among others.