ucc

Hệ thống chứng minh không kiến thức SP1 thuộc Succinct đã phát hiện lỗ hổng độ tin cậy nghiêm trọng. Lỗ hổng này được công bố qua thông báo trên GitHub GHSA-p7v2-jjv3-8p8f, ảnh hưởng đến các phiên bản Rust xác thực gốc của SP1 từ 6.0 đến 6.8.0, khiến mạng chính Prover Network có thể chấp nhận chứng minh không hợp lệ: những người chứng minh độc hại có thể gửi chứng minh thực thi không hợp lệ, trong khi các xác thực viên trên mạng vẫn sẽ chấp nhận.Nguyên nhân của lỗ hổng là do xác thực viên chỉ đọc nhãn dữ liệu (kích thước tuyên bố), không kiểm tra xem số lượng phần tử lưu trữ thực tế có bằng tích của kích thước hay không, kẻ tấn công có thể giả mạo nhãn để cho phép chứng minh không hợp lệ. Các chứng minh Groth16 và Plonk sử dụng hình dạng cố định không bị ảnh hưởng, và các trình kiểm tra Solidity trên chuỗi cũng an toàn. Succinct đã phát hành phiên bản sửa lỗi 6.8.1 vào ngày 24 tháng 9 và đã triển khai lên mạng chính; phiên bản này bổ sung kiểm tra độ dài giải mã.Lỗ hổng được Vitalis Salis phát hiện và đã được báo cáo qua chương trình thưởng lỗ hổng Immunefi. Người dùng tự chạy xác thực viên Rust gốc và chấp nhận những người chứng minh không đáng tin cậy cần nâng cấp lên phiên bản 6.8.1.

Gate Europe successfully held the "Capital Social at Money20/20 Europe" industry exchange event. The event was jointly organized by Gate Institutional, Gate Fiat, and Gate Pay, attracting over 150 professionals from the fields of payment, OTC, institutional trading, and fintech to discuss the integration trends of digital assets and traditional finance, as well as opportunities for institutional market development.During the event, the senior team of Gate and industry guests engaged in discussions on topics such as the integration of fiat currency and digital assets, institutional liquidity, cross-border payments, and institutional-level settlement. Partner Utexo conducted specialized discussions on institutional liquidity, fiat infrastructure, and payment collaboration. In a roundtable discussion themed "Everything Capital," attendees focused on topics such as capital flow efficiency, the construction of institutional payment networks, the evolution of OTC market structure, and innovations in cross-border settlement.This event provided a deep communication platform for traditional financial institutions, payment companies, and participants in the digital asset industry.Currently, Gate Group's Malta entity Gate Europe has obtained European MiCA and PI licenses under the supervision of the Malta Financial Services Authority (MFSA), continuously advancing its compliance layout in Europe and strengthening its infrastructure capabilities in institutional payments, fiat channels, and cross-border settlement. As the industry moves towards a higher level of compliance and institutional development, Gate will continue to deepen global industry collaboration and promote the integration of digital assets and traditional finance.

Galaxy Research monitored that a physical Casascius Bitcoin minted between 2011 and 2013 (denomination of 25 BTC, approximately 1.78 million USD) had its private key extracted and completed an on-chain withdrawal.It is reported that Casascius Coin is an early physical collectible of Bitcoin, which contains real BTC private keys sealed inside. Holders can extract the assets after peeling off the anti-counterfeiting hologram sticker. This series was discontinued in 2013, and there are still tens of thousands of BTC sealed in unopened Casascius physical coins.

SpaceX has successfully launched the redesigned Starship, completing an important testing mission before the company's IPO. During this test flight, Starship V3 was launched from Texas Starbase and successfully deployed 22 test satellites, marking a key advancement for SpaceX in the development of a new generation heavy-lift launch system. Although there were still some engine failures and uncontrolled landings of the first-stage booster during the flight, SpaceX believes that the overall testing objectives have been largely achieved.Reports indicate that Starship V3 will become the core launch platform for future Starlink expansion, NASA's lunar missions, and Mars plans. Previously disclosed information shows that SpaceX has invested approximately $15 billion in the Starship project, and the market generally views the testing progress of Starship as one of the important valuation support factors for SpaceX's potential IPO.

Ripple CEO Brad Garlinghouse stated that the next two weeks will be a critical window for advancing cryptocurrency legislation in the United States.He pointed out that if the Senate Banking Committee fails to complete the bill review in the near term, the probability of the bill passing will "significantly decrease," especially with the midterm elections approaching, as related issues may become further politicized. Currently, the U.S. is pushing for the first federal-level cryptocurrency regulatory framework, involving the regulatory division of responsibilities between the SEC and the CFTC. Although the House version has passed, progress in the Senate has been relatively slow, but recent compromises around stablecoin yield issues may bring a turning point for advancement this month.

According to Arkham monitoring, the Binance SAFU fund address successfully bottomed out, holding 15,000 BTC currently valued at $1.21 billion, with an unrealized profit of about 20%, worth approximately $200 million.It is reported that the Binance SAFU fund has completed a $1 billion Bitcoin purchase plan, holding 15,000 BTC valued at $1.005 billion (calculated at the price when transferred to the SAFU fund).

Microsoft had evaluated the possibility of acquiring the AI programming tool company Cursor, but ultimately did not proceed with the deal. Subsequently, SpaceX quickly reached an agreement to obtain an option to acquire Cursor at a valuation of $60 billion, with a $10 billion penalty for cancellation if the acquisition is not completed.Cursor is currently an important player in the AI programming sector, benefiting from the strong demand for automated programming tools from developers. Competition in this field has become increasingly fierce, with OpenAI and Anthropic being major players. On the other hand, Microsoft is facing multiple pressures, with its stock price down 10% this year, underperforming its peers in the hyperscale data center sector.

The "Global RWA Digital Agriculture Ecological Summit" co-hosted by RWA Global Incubation Alliance and City Arrow Tower was successfully held today in Hong Kong. This summit focused on in-depth discussions on the application of RWA in the agricultural sector, as well as how agricultural infrastructure can achieve assetization and connect with global capital through digitization and financial structures.The conference emphasized the construction of agricultural RWA models, IoT data-driven asset confirmation, and pathways for SPVs and capital markets. Guests shared cutting-edge insights and practical experiences from multiple dimensions of industry, technology, and finance, further promoting the integrated development of physical agriculture and the Web3 financial system.This event received strong support from strategic partners such as GreenX, GreenPro Capital Corp, the Malaysia ESG Association, and the XGT Foundation, collectively facilitating the exchange and cooperation of the global RWA digital agriculture ecosystem.

Bloomberg's senior ETF analyst Eric Balchunas stated on the X platform that Bitcoin ETFs have once again recorded a solid week of inflows, and overall funds have officially turned positive. Although the previous outflows were not significant, against the backdrop of limited price increase momentum, funds have still successfully "filled the gap," demonstrating strong resilience.

According to CCTV news reports, Iran stated that the U.S. Navy destroyers "Frank E. Peterson" and "Michael Murphy" attempted to "infiltrate" the Strait of Hormuz the previous day, and indicated that the U.S. warships used the cover of the ceasefire conditions to create false propaganda of "successful passage" and to influence the ongoing U.S.-Iran negotiations.Iran claimed that the two warships attempted to disguise themselves as Omani merchant vessels sailing off the southern coast of Oman, choosing a dangerous route that was very close to the coast and had a shallow draft, hoping to enter the Persian Gulf through "covert" movements and the "negligence" of the Iranian military during the ceasefire. The Iranian Navy ultimately intercepted them at the entrance to the Persian Gulf. The two destroyers were forced to withdraw to the Oman Sea without being able to enter the Strait of Hormuz.

The decentralized cloud infrastructure provider Aethir tweeted that it has detected and successfully isolated a malicious attack targeting the ATH cross-chain contract (connecting Ethereum with other chains). Currently, all attacked contracts have been disconnected, and the vulnerability has been controlled; the total supply of ATH on the Ethereum mainnet has not been affected; the ETH-ARB cross-chain bridge on Squid has not been impacted; the actual amount affected for users is controlled within $90,000; the team will announce a complete compensation plan next week.Aethir is currently working with multiple law enforcement agencies and exchanges (Binance, Upbit, Bithumb, HTX, etc.) to freeze funds and track the attackers. Additionally, the team has published the addresses of the affected contracts, reminding users not to interact with them temporarily.

According to Polybeats statistics, at least 11 addresses profited from the "US-Iran Ceasefire" prediction market on Polymarket through their predictions. The address with the highest profit, 0xffa6b3...30fe, made approximately $405,000, while 0xa4eb52...d010 profited around $339,000.The total profit for all addresses reached $1,913,292.47. These trades were concentrated in several ceasefire deadline markets expiring from March to April. Some early bets on the March ceasefire positions initially incurred losses, but as the expectations for the ceasefire materialized in early April, later positions saw significant profits.

CZ recalls in his new book that around 2015, under the persuasion of friends, he gradually quit high-frequency social activities such as poker and golf, and completely withdrew from the related social circles. Subsequently, he gradually formed a work style centered on "high efficiency," which included shortening meeting durations, reducing ineffective communication, and focusing on quickly executing projects. This transformation during this phase became an important turning point in CZ's personal and career development, and it has long influenced his subsequent management and operational style.CZ repeatedly mentions in his new book that "moderately above-average success is the most dangerous," because after achieving some small successes, one can easily become complacent. On the surface, it may seem like he is doing better than many around him, but only he knows: he hasn't really given his all.

According to Cointelegraph, the Criminal Assets Bureau of the Irish National Police has announced that it has successfully cracked one of the 12 Bitcoin wallets associated with a convicted drug dealer, retrieving 500 Bitcoins worth over 35 million dollars.The wallet owner is Clifton Collins, who was sentenced to five years in prison in 2017 for cultivating and selling cannabis. Collins purchased 6,000 Bitcoins with drug trade proceeds between 2011 and 2012, storing them across 12 wallets, with the keys printed on an A4 sheet of paper and hidden in a fishing rod case, which were later lost when his landlord cleared the house.Earlier today, it was reported that the Irish drug dealer deposited 500 BTC into Coinbase after nearly 10 years, worth 35.44 million dollars.