nera

The on-chain security platform Blockaid discovered a vulnerability in the Bitcoin bridge of the cross-chain protocol Symbiosis, where attackers minted approximately 2^62 syBTC to a newly created externally owned account, valued at about 46.1 billion dollars when calculated to 8 decimal places, and sold about 4.39 WBTC on Uniswap V4 on Ethereum, realizing a cash-out of approximately 336,000 dollars.Symbiosis stated that the attack occurred around 4:28 AM on September 11, and the team has suspended the BTC routing, while other routings remain operational and unaffected. The team has recovered about 15 Bitcoins and deposited them into a multi-signature wallet controlled by the team, while offering a 20% white hat bounty on the funds to the attackers, with a deadline of September 13.In recent weeks, Liquid Network, Nomic, and Symbiosis have all experienced security incidents involving the expansion of supply by minting tokens without real asset backing. As of September 13, Symbiosis has not publicly disclosed a technical review of BridgeV2, the final loss amount, or confirmation on whether the attackers accepted the bounty.

Zhiyu announced the completion of approximately 5 billion USD in financing, including 2 billion USD in equity placement and 3 billion USD in zero-interest convertible bonds. The funds will primarily be used for the next-generation GLM model, self-training systems, and computing power infrastructure construction.

Tesla has announced that it will hold a launch event on October 1 to showcase its next-generation Roadster electric sports car. This event may spark speculation about a merger between Tesla and SpaceX. The phrase "Go for launch" used by Tesla officially echoes SpaceX's rocket launches.

According to a report by Decrypt, a new report released by the Bank for International Settlements shows that advanced AI technology has shortened the time window for banks to fix vulnerabilities before attackers exploit software flaws. It warns that periodic security assessments and scheduled patch updates have increasingly become insufficient to meet the challenges, with the time window from vulnerability discovery to exploitation reduced from weeks to minutes.The report focuses on the banks' response capabilities, arguing that financial institutions must accelerate the speed of software fixes and expedite the related authorization decision-making processes.

According to SlowMist's security alert, the AtomicQueue contract of ether.fi was exploited due to the lack of access control in the solve() function, resulting in approximately 15.45 ETH being stolen.The attacker created malicious requests using updateAtomicRequest(), forcing the victim's address to act as the solver. Subsequently, AtomicQueue called the victim's finishSolve and executed want.transferFrom, abusing the victim's existing ERC-20 authorization to transfer funds. SlowMist has privately disclosed the attacker’s address and the vulnerability contract address to the ether.fi team.

According to Bitcoin News monitoring, DART stated that it, along with independent white hat researchers, has recovered over 50 BTC from wallets affected by the COLDCARD entropy vulnerability, completing the transfer before malicious attackers could steal them. DART is a digital asset recovery organization that collaborates with white hat researchers to protect vulnerable funds and coordinates their legal return to the owners.The white hat researchers did not request a bounty and will return the Bitcoin to the owners. The recovered BTC has been transferred to the Crypto Recovery Trust. This trust is a dedicated statutory trust established under Wyoming state law to hold recovered digital assets and return them after confirming and verifying the legitimate owners.The trust will document the recovery process, separating the BTC from DART and the researchers' funds, conducting blockchain analysis, ownership verification, and sanctions screening, and providing a legal return process for verified owners. If there is a dispute over ownership, or if the related funds are involved in sanctions or criminal proceedings, the BTC will be handled according to applicable legal procedures. DART stated that other vulnerable assets and recovery leads are still under review.

According to Gate market data, on September 9, the German DAX30 index closed down 408.73 points, a decrease of 1.57%, at 25,584.19 points; the UK FTSE 100 index fell 142.34 points, a decrease of 1.32%, at 10,669.32 points; the French CAC40 index dropped 161.31 points, a decrease of 1.94%, at 8,156.67 points.

Liquid Network has released the latest update stating that the emergency version Elements v23.3.4 is now online. Functionary nodes have immediately begun upgrading and all Liquid node operators are advised to synchronize updates. This version addresses the previously discovered Proof verification cache vulnerability and strengthens the cache keys used for Range Proof.Regarding network recovery, Blockstream states that it is still formulating a recovery plan, which is expected to proceed in three phases: restoring block production while continuing to suspend Peg operations; replaying verified valid transactions; and restoring Peg operations after the network status is fully restored and funds are confirmed to be returned. Currently, the first two phases are being tested in parallel, and any phase will only advance once safety is confirmed. Liquid Network indicates that Elements v23.3.4 has completed multiple rounds of internal and external reviews, with participants including the Bitcoin Red Team, Alpen Labs, and other teams.At the same time, Liquid Network reminds users to be vigilant against fraudulent upgrade websites exploiting this incident. Information should only be obtained through official Liquid Network and Blockstream channels, and users should never send funds to strangers or disclose private keys or recovery phrases.

Layer1 blockchain Linera posted on X that the LNRA community round commitment period has ended, failing to reach the minimum target of 1.5 million USDC. A total of 617 participants from 69 countries committed a total of 848,271 USDC.The related website will be updated soon to begin processing refunds, which will be returned to the same wallet used at the time of commitment. An announcement will be made once the refund process is live, and further updates will be released after the refund period ends.

Bitcoin News posted on the X platform that Alby confirmed a critical vulnerability exists in Alby Hub v1.7.0 to v1.18.5. If the management API is exposed to the public network, attackers may gain unauthorized access and transfer funds. Currently, it is known that 1 user has been affected, and Alby Hub v1.19.0 and higher versions are not affected.Alby recommends that affected users restrict public access to the management interface, immediately update to v1.24.0, and change the unlock password after the update. Multiple issues reported by Bitcoin Team Red, Project Loupe, and other researchers have also been fixed in the latest version.

OpenAI's General Manager for South Korea, Harrison Kim, stated at a press conference in Seoul on Wednesday: "One of the areas where we have made the most significant progress and received the most recognition in our collaboration with Samsung Electronics is the joint production and research for the next-generation chips we are developing."Kim also mentioned that Samsung Electronics is "one of the largest enterprises globally applying ChatGPT at scale," and pointed out that employees in the company, both in Korea and overseas, are using ChatGPT in research and development, marketing, and sales. Kim stated that as the chip technology required for faster and more complex computations continues to upgrade, the demand for memory chips will also keep growing, making collaboration with Korean semiconductor suppliers a priority for OpenAI's local office.

Minara officially released the next-generation universal financial intelligence tool Minara Harness, which is now available for download by users worldwide. Minara Harness covers multiple asset markets, allowing for investment research 24/7 and operating automated trading within the scope authorized by users. Users can query financial markets using natural language, generate research reports, develop quantitative strategies, and handle daily tasks such as programming, web searching, and document processing. The platform supports users in selecting their own underlying large models.On the investment research side, Minara Harness can simultaneously call multiple professional AI Agents to analyze the same investment opportunity from perspectives such as fundamentals, valuation, market trends, and potential risks. Users can view the information sources and different judgments of each Agent and decide whether to execute trades based on the research results. Minara Harness also supports writing trading strategies in natural language, automatically generating code, and completing backtesting. Users can also subscribe to other traders' strategies, view strategy codes, historical performance, and real-time operating metrics. Minara also offers an optional decision review mechanism, which can verify past judgments against subsequent market results and assess which experiences can be applied to future research. At the same time, Minara announced the benchmark test results of Harness, which outperformed OpenClaw, Hermes, and Claude Code in multiple tests and demonstrated leading performance in tasks such as financial reporting, web research, and spreadsheets.

According to Bitcoin News monitoring, Liquid Federation released an incident report stating that attackers exploited a cache vulnerability in the Elements range proof verification to mint approximately 4,000 unbacked L-BTC, which were then exchanged for real BTC through the authorized exit anchoring path via SideSwap. The Liquid authority considered the related transactions valid and released approximately 4,000 BTC from the federal reserve.Before the incident, Liquid held about 4,205 BTC, and the minimum reserve dropped to 197 BTC before operations were suspended. The self-identified white-hat attackers have since returned 3,400 BTC, with about 598.5 BTC still unreturned. No private keys were leaked, and the exit anchoring mechanism itself operated as designed. Liquid is currently still offline, and Blockstream is preparing to release an emergency version of Elements v23.3.4 and is working to restore the network with 1:1 Bitcoin reserve support.

According to official news, The Sandbox announced the official opening of SAND compensation claims. Users affected by the cross-chain contract vulnerability incident involving Base and BNB Smart Chain (BSC) networks on August 22, who held bridged SAND on the affected networks before the incident, can receive full compensation in SAND on the Ethereum network at a 1:1 ratio. Eligibility for compensation is based on the on-chain balance snapshot before the incident and is unrelated to any transactions, transfers, or holdings by users after the incident.The Sandbox stated that eligibility for compensation is determined based on the on-chain balance recorded before the contract was compromised. The snapshot for the Base network corresponds to block 50283188 at 23:42:03 UTC on August 21, 2026, and the BSC snapshot corresponds to block 117322025 at 11:42:44 UTC on August 21, 2026.Users holding Base or BSC network SAND through centralized exchanges do not need to take any action, as The Sandbox is coordinating with the relevant exchanges to handle compensation; however, users holding SAND in personal wallets will need to claim it themselves. The claim period is from September 8 to September 22, 24:00 (UTC+8). Claims only require a transaction initiated from the original wallet that held SAND at the time of the snapshot, without the need for token authorization, signing off-chain messages, or transferring to any address.

Hardware wallet manufacturers Ledger and Trezor are calling on security researchers to adopt a more responsible approach to vulnerability disclosure. Ledger's Chief Technology Officer Charles Guillemet stated on the X platform that artificial intelligence has made vulnerabilities easier to discover and exploit, but some researchers disclose details before a fix is released, which he termed "exploiting others' risks for attention."Guillemet urged researchers to report vulnerabilities privately first and to agree on a timeline for fixes before disclosing details publicly, suggesting 90 days as a common default period, while also indicating that this could be adjusted flexibly based on the severity of the vulnerability and the amount of work required for the fix. Trezor's Security Chief Jan Komárek told Cointelegraph that 90 days is a commitment to vendors, not just an obligation for researchers. He suggested that researchers first contact vendors to agree on a timeline, and if the vendor fails to complete the fix within that period, they may choose to disclose publicly.The context of this statement is the recent close attention to hardware wallet security: the Coldcard theft incident involved over $100 million, and a data breach at Trezor's logistics provider also affected the personal information of tens of thousands of customers.

ASML stated that it plans to collaborate with its major customers to develop new solutions capable of producing advanced chip manufacturing equipment to meet the demand for large data center chips designed by companies like NVIDIA.Currently, the extreme ultraviolet (EUV) lithography machines produced by ASML, which are widely used, can manufacture chips with a maximum area of about 800 square millimeters. The next-generation "high numerical aperture" EUV lithography machine that ASML is about to launch will be able to produce finer chips. However, due to its use of smaller mask sizes, it is currently limited in the area of chips it can manufacture.ASML plans to showcase a pilot production line using larger mask sizes by 2031 and aims to enable this new technology for mass production by 2033.

According to Bloomberg, ByteDance is preparing to launch an artificial intelligence model for real-time spatial video generation, with applications covering fields such as robotics and autonomous systems, and will compete with companies like Meta and Alphabet.Insiders say that ByteDance founder Zhang Yiming is personally overseeing the development of the model, coordinating multiple business departments within the company, and investing in artificial intelligence resources and computing power support. The model may be released as early as next month, but the specific timing is still subject to change.

According to Bitcoin News, Blockstream has notified "white hat" hackers that the vulnerability has been fixed, and 4,000 BTC can be safely returned. The hacker, who previously extracted about 4,000 BTC from the Liquid network, expressed willingness to return the funds but needed to wait for the vulnerability to be fixed. The entire negotiation process was conducted publicly through Bitcoin OP_RETURN messages.The hacker initially proposed to return "most" of the BTC but later changed their stance, requesting that the vulnerability be fixed first: "Please fix the vulnerability first. The latest submitted code puts the chain at risk. Ensure that every node has been patched, and then we will confirm the fix and safely return the funds."The hacker also sent encrypted details of the vulnerability to Blockstream. About two hours ago, Blockstream responded with a PGP-signed OP_RETURN message: "The cross-chain bridge nodes have been patched and can safely return the funds." Currently, 3,998.5 BTC remains under the hacker's control.

During the weekend market closure of traditional markets, perpetual contract types of stocks may have already priced in the stock market trends. According to RootData, most popular stocks are above the last after-hours levels:Semiconductor Triple Long ETF (SOXL) is currently at $125.65, up 7.59% from the last trading day's after-hours reference price of $116.79;SanDisk (SNDK) is currently at $1,785.09, up 3.07% from the last trading day's after-hours reference price of $1,731.88;Micron Technology (MU) is currently at $1,043.54, up 2.84% from the last trading day's after-hours reference price of $1,014.74;iShares Semiconductor ETF (SOXX) is currently at $532.09, up 2.62% from the last trading day's after-hours reference price of $518.48;Intel (INTC) is currently at $98.16, up 2.46% from the last trading day's after-hours reference price of $95.80;SK Hynix (SKHY) is currently at $179.44, up 2.08% from the last trading day's closing reference price of $175.78;VanEck Semiconductor ETF (SMH) is currently at $578.73, up 2.06% from the last trading day's after-hours reference price of $567.05;SpaceX (SPCX) is currently at $150.54, up 1.87% from the last trading day's after-hours reference price of $147.78;IREN (IREN) is currently at $43.96, down 1.59% from the last trading day's after-hours reference price of $44.67;AMD (AMD) is currently at $483.59, up 1.58% from the last trading day's after-hours reference price of $476.08;