solidity

Theo thông tin từ ChainCatcher, theo dõi bởi GoPlus, tiện ích mở rộng Solidity Pro của VSCode đã bị tiêm nhiễm, các phiên bản lịch sử có khả năng xâm phạm dữ liệu, thực thi từ xa và các khả năng độc hại khác.Khuyến nghị các nhà phát triển ngay lập tức kiểm tra các tiện ích mở rộng liên quan mà họ đã cài đặt và nâng cao cảnh giác đối với các plugin của bên thứ ba.

ChainCatcher tin tức, theo cơ quan an ninh Slow Mist, tiện ích mở rộng độc hại TRAE IDE juannegro.solidity giả mạo thành plugin Solidity, và được sử dụng như một trình phân phối phần mềm độc hại đa nền tảng. Tiện ích mở rộng này sẽ tự động thực thi sau khi IDE khởi động và thiết lập tính năng duy trì, đồng thời sử dụng hợp đồng thông minh Ethereum để lưu trữ và lấy cấu hình C2 động, cho phép kẻ tấn công cập nhật điểm cuối C2 và tải trọng mà không cần phát hành lại tiện ích mở rộng.Mặc dù tiện ích mở rộng này đã bị gỡ bỏ khỏi Open VSX, nhưng tính đến ngày 18 tháng 7 vẫn có thể truy cập qua thị trường TRAE, người dùng đã cài đặt nên ngay lập tức xóa bỏ và kiểm tra xem hệ thống có bị xâm phạm hay không.

According to Caixin, a person familiar with the technology of digital renminbi revealed that the digital renminbi's smart contracts are based on an account system, and they are essentially "condition-triggered automatic execution code," similar to smart contracts on public chains, with the difference being whether they possess complete Turing completeness.The smart contracts of the digital renminbi, based on the account system, are considered restricted Turing complete. Their programming is strictly limited to the template scripts permitted by the central bank, supporting only preset, simple condition-triggered functions. This design is primarily for security and risk control considerations.The development of digital renminbi smart contracts supports multiple programming languages, including Ethereum's Solidity and other fully Turing complete languages, so technically there is no issue. However, the core challenge lies in how to design a standard access and auditing mechanism that can be accepted by the financial system.

Sushi CEO Jared Grey announced on social media that he will step down from his leadership positions (CEO and Managing Director of Sushi Labs) to take on an advisory role.Jared Grey added that Alex McCurry, founder of Solidity.io, has made a significant capital investment in Sushi to support its long-term development and operations. At the same time, Alex has joined Sushi as Managing Director and will lead Sushi into its next era. Alex is "ambitious" about this matter and has exciting plans for Sushi's development roadmap.

ChainCatcher news, according to Chainwire, blockchain AI solution provider ChainGPT announced a strategic partnership with Alibaba Cloud. The two parties will combine Alibaba Cloud's GPU computing resources with ChainGPT's artificial intelligence technology stack to provide scalable enterprise-level machine learning services for Web3 developers. The core outcome of this collaboration is the comprehensive open-sourcing of ChainGPT's Solidity large language model (LLM), which is specifically designed for smart contract development, auditing, and troubleshooting, now achieving global real-time access through Alibaba Cloud's GPU architecture.After the open-sourcing of the Solidity LLM, developers can use the model for free to accelerate the construction and security verification of decentralized applications. Alibaba Cloud's GPU infrastructure will provide high reliability support for the model, meeting the demands of Web3 AI solutions for computing power, security, and response speed. ChainGPT founder and CEO Ilan Rakhmanov stated that this collaboration aims to lower the threshold for Web3 developers to access high-performance AI technology, providing tool support for the next generation of decentralized applications.Alibaba Cloud stated on its official X platform account that the two parties will enhance decentralized AI infrastructure through the AIVM network, with future plans to utilize ChainGPT's AI virtual machine (AIVM) and decentralized GPU market SDK to integrate Alibaba Cloud resources, providing underlying computing power for AI tools, agents, and applications in the Web3 field. Currently, developers can deploy the Solidity LLM based on Alibaba Cloud's GPU computing power and optimize the model.As an extension of the collaboration, Alibaba Cloud officially joined ChainGPT's AIVM GPU network as a validation partner. Both parties stated that this collaboration not only provides scalability assurance for ChainGPT's AI models but also promotes the construction of a globally inclusive decentralized computing layer, eliminating geographical limitations on on-chain AI development. The next step for both parties is to deepen the integration of the AIVM network and explore ways to enhance the flexibility of AI model deployment and Web3 application development.

ChainCatcher news, ZKsync announced on social media that it has achieved full EVM equivalence, allowing developers to directly deploy EVM bytecode generated by Solidity on the ZKsync chain without the need for specialized tools like zkSolc or Foundry ZKsync. This feature was introduced through the protocol's version 27 upgrade and was officially approved for launch by the governance proposal ZIP-9.

ChainCatcher message, the secure blockchain application standard OpenZeppelin has released Solidity Contracts v5.3, with core highlights including: the new multi-token standard ERC-6909, featuring minimal implementation, metadata support, supply tracking, and content URI extension; a new proposal guardian role, added sequential proposal IDs, and new supermajority mechanism among other governance improvements.

ChainCatcher news, Paradigm's Chief Technology Officer Georgios Konstantopoulos posted on the X platform stating that there are issues with the current state of Solidity, questioning whether to continue improving Solidity, switch to Vyper, or develop a new language, even considering a Rust-based RISCV runtime.In response, Sui co-founder expressed curiosity about why Paradigm's CTO's perspective has changed after long-term involvement in the Solidity ecosystem and tool development, and mentioned that he has believed since 2018 that there are issues with Solidity and EVM, but has not seen any new events that would change that perspective recently.

ChainCatcher news, according to data from RootData, the Movement token (MOVE) has increased by 58.28% in the last 24 hours, currently priced at $1.05.According to the Web3 asset data platform RootData, Movement is a modular framework for building and deploying Move-based infrastructure, applications, and blockchains in any distributed environment. The team is developing a suite of products and services that enable non-Move protocols to leverage the powerful capabilities of the Move programming language without writing a single line of Move code. The team's first version, M1, redefines L1 as a vertically composable and horizontally scalable first-layer framework that is compatible with Solidity, connects EVM and Move liquidity, and allows builders to customize modular and interoperable application chains with different user bases and liquidity out of the box.

Tin tức từ ChainCatcher, tại hội nghị thường niên "DeInsight 2024" diễn ra trong khuôn khổ Devcon ở Bangkok, danh sách RootData List 2024 đã chính thức được công bố. Movement đã thành công lọt vào danh sách RootData List 2024 "Top50 dự án (chưa thực hiện TGE)". Movement là một khung mô-đun, được sử dụng để xây dựng và triển khai cơ sở hạ tầng, ứng dụng và blockchain dựa trên Move trong bất kỳ môi trường phân tán nào.Đội ngũ đang xây dựng một bộ sản phẩm và dịch vụ, cho phép các giao thức không phải Move có thể tận dụng sức mạnh của ngôn ngữ lập trình Move mà không cần viết một dòng mã Move nào. Phiên bản đầu tiên M1 của đội ngũ đã định nghĩa lại L1 như một khung lớp 1 có thể kết hợp theo chiều dọc và mở rộng theo chiều ngang, tương thích với Solidity, kết nối tính thanh khoản EVM và Move, và cho phép các nhà phát triển tùy chỉnh các chuỗi ứng dụng mô-đun và có thể tương tác với các cơ sở người dùng và tính thanh khoản khác nhau ngay khi sử dụng.Theo thông tin, danh sách này là phiên bản thứ hai trong cuộc bình chọn hàng năm do RootData phát hành sau lần đầu tiên vào năm 2023, nhằm trình bày các nhân tố chính có ảnh hưởng và đổi mới trong lĩnh vực Web3, đồng thời đánh giá các lực lượng then chốt đang thúc đẩy sự tiến bộ của ngành. RootData cam kết thông qua phân tích dữ liệu nghiêm ngặt, thể hiện sức mạnh cốt lõi và đặc điểm xu hướng của sự phát triển ngành.Thời gian thống kê danh sách là từ ngày 31 tháng 10 năm 2023 đến ngày 31 tháng 10 năm 2024, tổng cộng đã phát hành năm danh sách, cụ thể là: Top50 dự án (đã hoàn thành TGE), Top50 dự án (chưa thực hiện TGE), Crypto VC Top 50 tổ chức đầu tư, Top10 nhà đầu tư thiên thần, Top20 CEO xuất sắc nhất.

ChainCatcher news, cryptography researcher @LehmannLorenz stated on the X platform that his computer was nearly compromised, and just one click could install a malicious extension. The developers behind the extension were unverified, yet it garnered 1.7 million downloads within a day of release (more than any other extension) and a perfect 5/5 star rating. After downloading the malicious extension and extracting its contents, everything appeared normal - except for the obfuscated "extension.js" file that ran during installation. Log files indicated that the script ultimately encountered an error, relying on PowerShell execution, running entirely in memory without leaving any traces on the disk.In response, Slow Mist's Yu Xian stated that this is a supply chain net attack targeting Solidity smart contract developers. The editor environment is a high-risk area for supply chain attacks. They have always tried to isolate what they can, avoid installations whenever possible, and ensure the "just enough" principle. Anything flashy is thrown onto a separate computer or virtual machine.

ChainCatcher news, Arbitrum officials posted on the X platform stating that Stylus contracts are fully interoperable with Solidity contracts, which means developers can mix and match contracts within the protocol. This means more options, more optimizations, and stronger development capabilities.

ChainCatcher news, Bankless posted on X that Ethereum and Solidity have been incorporated into the high school education program in Buenos Aires, Argentina, with the first course starting on August 27.Additionally, these teams are implementing an online course aimed at training 500 students aged 18 and above. This course will provide young people with the skills needed to develop DApps, further integrating blockchain into the local economy. To ensure the success of this initiative, a blended training program will also be introduced to prepare 30 educators to teach Ethereum and blockchain-related subjects.The program is organized by the ETH Kipu Foundation in collaboration with the Buenos Aires City Department of Education, aiming to cultivate tech-savvy talent for the next generation.

ChainCatcher news, Aleph Zero announced on social media that Aleph Zero EVM now supports application development using Solidity and will soon support building with Rust.ChainCatcher previously reported that Aleph Zero launched an Ethereum Layer 2 mainnet based on zkOS, which integrates Arbitrum Orbit technology and zkOS tools.It is reported that the new mainnet aims to accommodate Ethereum-compatible application development and will provide users with a "fast and efficient blockchain."

ChainCatcher news, Solidity announced on platform X that Solidity v0.8.25 has been released. This is a minor version following the Ethereum mainnet Dencun hard fork upgrade that occurred on March 13, 2024, at 13:55 (UTC).Solidity stated that the Dencun upgrade combines changes to the Ethereum consensus layer and execution layer, and with the launch of Dencun on the mainnet, v0.8.25 accordingly makes Cancun the default EVM version for the compiler to emit code.

ChainCatcher news, a16z crypto announced that applications for the Crypto Startup School (CSS) Spring 2024 are now open, with a deadline of October 20, 2023. a16z crypto plans to hold CSS Spring 2024 in London. a16z crypto will invest in each participating company, with standard terms of $500,000 in exchange for 7% equity and other standard rights.Applicants need to be builders developing crypto products or interested in learning programming languages like Solidity to develop products.

ChainCatcher message, Polygon officially announced that on September 20 at 15:30, the Polygon zkEVM mainnet Beta version will undergo the Dragonfruit upgrade, which will take approximately 2 hours.After the implementation of Dragonfruit, the Polygon zkEVM mainnet Beta version will stay in sync with the latest version of Solidity, maintaining the equivalence of Rollup and EVM by incorporating support for the latest EVM opcode PUSH0. The Polygon zkEVM cross-chain bridge will be temporarily unavailable between September 20 at 15:30 and 19:00.PUSH0 is an EVM opcode included in the Shanghai hard fork.