BTC $76,677.07 -0.75%
ETH $2,474.92 -1.95%
BNB $716.41 -1.42%
XRP $1.34 -1.79%
SOL $99.55 -2.17%
TRX $0.3393 -0.16%
DOGE $0.0822 -2.90%
ADA $0.2030 -1.96%
BCH $220.86 -2.15%
LINK $11.18 -2.69%
HYPE $77.45 -2.79%
AAVE $124.53 -0.60%
SUI $0.7007 -3.01%
XLM $0.1769 -1.66%
ZEC $1,064.94 -5.29%
AAPL $330.94 -0.59%
AMZN $253.65 -1.23%
GOOGL $337.39 -1.20%
MSFT $491.82 -0.75%
META $642.79 -0.88%
NVDA $215.30 -1.53%
TSLA $364.13 -0.91%
SNDK $1,571.60 -3.33%
INTC $98.81 -3.07%
SPCX $148.80 -0.92%
MU $937.76 -2.99%
AMD $498.76 -3.31%
BTC $76,677.07 -0.75%
ETH $2,474.92 -1.95%
BNB $716.41 -1.42%
XRP $1.34 -1.79%
SOL $99.55 -2.17%
TRX $0.3393 -0.16%
DOGE $0.0822 -2.90%
ADA $0.2030 -1.96%
BCH $220.86 -2.15%
LINK $11.18 -2.69%
HYPE $77.45 -2.79%
AAVE $124.53 -0.60%
SUI $0.7007 -3.01%
XLM $0.1769 -1.66%
ZEC $1,064.94 -5.29%
AAPL $330.94 -0.59%
AMZN $253.65 -1.23%
GOOGL $337.39 -1.20%
MSFT $491.82 -0.75%
META $642.79 -0.88%
NVDA $215.30 -1.53%
TSLA $364.13 -0.91%
SNDK $1,571.60 -3.33%
INTC $98.81 -3.07%
SPCX $148.80 -0.92%
MU $937.76 -2.99%
AMD $498.76 -3.31%

witch

All
Article
Flash

first_img Hugging Face was invaded by AI agents and was forced to switch to open-source models for defense

According to Cointelegraph, Hugging Face disclosed that it experienced an intrusion event driven by autonomous AI agent systems in July. The attacking agent began testing in early May, leaving exploit notes using OpenAI's Artifactory instance, and subsequently launched approximately 17,600 attacks on Hugging Face, affecting its dataset processing infrastructure, production environment, internal network, and cloud credentials. Confirmed customer data access was limited to five datasets related to the ExploitGym/CyberGym benchmark.Hugging Face found during the investigation that due to security barriers imposed by top model providers like OpenAI and Anthropic, the company was unable to use these commercial models for defensive analysis and was forced to turn to running the open-source model zai-org/GLM-5.2 in China, which operates on the company's own infrastructure, ensuring that attacker data and credentials do not leave its environment. The company pointed out that attackers are not bound by any usage policies, while the defense's forensic work is hindered by the barriers of the hosted models.This incident highlights the security paradox between open-weight models and closed models. The article also discusses the ongoing debate regarding the security of open-weight AI, including OpenAI and Anthropic's push to restrict open-source models, as well as researchers' progress in detecting malicious behavior by examining changes in model weights.Hugging Face recommends that defenders prepare models that can run on their own infrastructure before an incident occurs to avoid barrier lock-in and protect attacker data.

Polymarket will upgrade the settlement rules for the cryptocurrency rise and fall market: abandoning the single price snapshot and switching to a time-weighted average price

According to official news, the prediction market Polymarket announced a significant adjustment to its settlement mechanism for cryptocurrency price fluctuation markets starting from August 7, to protect market integrity. From midnight UTC on that day, the affected markets will no longer settle based on a single price snapshot at a specific time but will instead use a time-weighted average price.Markets of different durations correspond to different TWAP windows: all cryptocurrency 5-minute markets will use a 30-second TWAP, 15-minute markets will use a 60-second TWAP, and 4-hour markets will also use a 60-second TWAP. The previous single snapshot settlement method was prone to price manipulation during periods of low liquidity, and this change is a proactive reinforcement of the market integrity system by Polymarket after facing regulatory scrutiny.To support this transition, Polymarket will inject $1 million in liquidity rewards into all affected markets throughout August. On the technical side, Chainlink TWAP testnet data streams are now available, and mainnet data streams along with Polymarket real-time data stream services will go live on August 4, at which point developers can access TWAP prices directly through Chainlink Data Streams or Polymarket's public WebSocket.

Base Build launches Verify Onchain, using on-chain identity verification to solve the airdrop witch attack problem

According to official news, Base Build announced the launch of Base Verify Onchain to address the issue of witch attacks in the blockchain ecosystem. This feature has been launched on the Base Sepolia test network, allowing developers to implement the "one real user, one claim" rule in smart contracts. Base Build stated that traditional airdrop mechanisms are easily manipulated by bulk wallets, and a large number of rewards are often obtained by professional airdrop farmers, while users who genuinely participate in product development can only receive limited benefits.Base Verify Onchain helps project teams identify multiple wallets controlled by the same user by generating a stable identity hash for each real user, without needing to obtain users' names, account information, or other private data. Users can complete verification through existing accounts such as Coinbase, Instagram, X, and TikTok. The system then returns a verified identity credential to the smart contract, which automatically enforces rules such as claim limits, voting restrictions, or quota controls. Currently, Base Verify has been used over 300,000 times and serves collaborative projects such as Base App, Cody, Scratch, and Bracket. Base Build stated that Verify Onchain will provide fairer airdrops, token distributions, governance voting, and user incentive mechanisms for decentralized applications. Developers can use this technology to limit the number of claims per real user, allocate rewards based on real identities, or convert real-world signals into on-chain credibility, thereby reducing the impact of bots and multi-wallet manipulation on the fairness of Web3 applications.
app_icon
ChainCatcher Building the Web3 world with innovations.