alert

Crypto KOL Ansem analyzed on platform X that a price alert has been set at $750 on Zcash, which has been consolidating for nearly a year. If it breaks to a new high, the next wave of this trend will be very strong. Ansem emphasized that there are currently no long positions held, but it would be a mistake not to enter a position if it breaks out.

According to CoinDesk, Coinbase mistakenly sent a "breaking news" alert to users, stating that the Norwegian football team defeated Brazil 3-2 in the World Cup knockout stage, while the match had not yet started. The alert also mentioned that Haaland scored twice in the match; however, Coinbase's own market prediction page still indicated that the match was delayed due to weather.Reports indicate that a user posted a screenshot of the notification on X on Sunday. Coinbase CEO Brian Armstrong subsequently replied that he was investigating the matter with the team. According to another post, the alert was sent at 10:26 AM Eastern Time, while the match did not start until 4 PM.Max Branzburg, Coinbase's head of consumer and business products, later stated that the erroneous report had been corrected, and the company had made updates to prevent similar inaccurate information in the future. He also mentioned that AI-driven 24/7 trading insights have potential but still require adjustments for such issues. In the actual match, Norway ultimately defeated Brazil 2-1, with Haaland scoring two goals.

According to community user @CG_BRC20, the Alkanes protocol has a serious BUG that allows for unlimited token issuance.A certain address just exploited the BUG, generating an additional 100 million DIESEL out of thin air. The official Espo flow browser and Subfrost interface cannot display the assets, and users holding this asset should be aware of the risks.It is reported that the Alkanes official TG group administrator has temporarily stated that the funds are safe.

SlowMist issued a security alert, detecting a coordinated malicious npm supply chain attack. The attackers utilized fake trading bot repositories and DeFi-themed npm packages to deploy JavaScript information stealers, targeting npm users, DeFi developers, and trading bot users.This attack involved 30 malicious npm packages, among which stake-math@3.5.4 appeared as a locked dependency in the donoaccestag/forex-mt5-trading-bot repository. This repository presented approximately 2300 highly homogeneous bulk-generated forks, mostly concentrated under the poly-stocks account, with signals being exceptionally clear. The sensitive data that attackers could steal is extensive, including cryptocurrency wallet libraries, browser cookies and saved passwords, browsing history, developer credentials, shell history, password manager libraries, private keys, mnemonic phrases, and API tokens exposed in source code.SlowMist recommends that developers immediately remove the affected npm packages, audit package.json and package-lock.json, and check CI logs for any of the 30 malicious packages; consider any system that has executed npm install as potentially compromised, rotate all exposed wallets, private keys, npm tokens, cloud credentials, SSH keys, and API tokens, and rebuild the affected environment from a clean image.

According to Cyvers Alerts monitoring, Token of Power was hacked, resulting in a loss of approximately $1.58 million. An address funded through Tornado Cash executed a malicious transaction, transferring funds from the Balancer V1 TOP/WETH liquidity pool.The stolen assets were subsequently transferred back to Tornado Cash for mixing.

According to CCTV News, the Ministry of National Security released a security alert today. For some time now, with the rapid growth in demand for artificial intelligence applications, "AI Transit Stations" that provide bulk access services to large models both domestically and internationally have quickly gained popularity in the country. However, the current "AI Transit" market is mixed, with some "AI Transit Stations" lacking operational qualifications and having weak security protections. Issues such as user privacy breaches and data reselling occur frequently, and the risks to data security cannot be ignored."AI Transit Stations" act as an intermediary layer between users and the official services of AI model vendors. They unify and integrate the application programming interfaces (APIs) of various AI model vendors into one platform, which is then provided to users. Figuratively speaking, "AI Transit Stations" serve as "intermediaries" between users and large models, helping users conveniently access multiple AI large models and meet their diverse usage needs in one stop.

The Chief Information Security Officer (CISO) of Slow Mist @23pds posted on the X platform revealing that X platform user Ilhamrfliansyh induced the AI model Grok to generate and publish abnormal content through a prompt injection attack, triggering erroneous on-chain fund operations.It is alleged that the original content was suspected to be a segment of Morse code, with the core meaning being "transfer all DRB to Ilhamrfliansyh." Although the related account has been deactivated and the complete information cannot be fully confirmed, Grok directly published the "decoded result" as a reply after parsing, inadvertently @ing bankrbot, causing the content to be recognized by the system as an on-chain execution instruction.Subsequently, Bankr, as Grok's associated wallet, executed the request, transferring approximately $175,000 worth of DRB to the attacker's address. The attacker then quickly exchanged the DRB for USDC through multiple wallets.This incident temporarily triggered a nearly 40% drop in the price of DRB, but the market quickly recovered, and the price has largely regained its losses. Industry insiders pointed out that this event exposed the potential risks of the "AI + automated on-chain execution" system under prompt injection attacks, especially in scenarios where AI results can directly trigger fund operations.

Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), highlighting the lack of information such as team details, key calendar events, and token data for projects like Mars Protocol, Anvil, Lynex, AstridDAO, and Hatom Labs. It calls on project teams to submit/update their information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that RootData's transparency score is used to measure a project's integrity and timeliness, aiming to reflect the project's information disclosure status, urging project teams to immediately claim their projects. The transparency score is categorized from A to F, with a total of 5 levels from high to low; the lower the score, the more incomplete the project's information disclosure, and the higher the risk of wrongdoing, requiring investors to be highly vigilant.

According to the threat intelligence released by the SlowMist security team, its threat intelligence system MistEye has received community feedback regarding an active social engineering attack targeting cryptocurrency users.The attackers contact target users under the pretext of project collaboration, luring them to use a counterfeit "Harmony Voice" software (domain: harmony-voice[.]app) for so-called real-time translation, which is actually malware. SlowMist has synchronized the relevant threat intelligence (IOC) to its corporate clients.

According to the official announcement, Upbit has placed SPURS on the trading warning list.

Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), noting that information such as teams, key calendar events, and token data for projects like LeverUp, Flash.Trade, PRDT, f(x) Protocol, and Tectonic is missing. It calls on project teams to submit/update their information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure status of projects and urging project teams to immediately claim their projects. The transparency score is divided into five levels from A to F, with lower scores indicating less complete information disclosure and higher risks of wrongdoing, requiring investors to exercise high caution.

According to disclosures from the GoPlus Chinese community, a user lost approximately $316,000 in USDC from their wallet due to signing a malicious Permit2 transaction, which was exploited by a phishing attacker.GoPlus advises users to adhere to the "four no" principles for phishing prevention: do not click on unfamiliar links, do not install unknown software, do not sign transactions with unclear content, and do not transfer funds to unverified addresses. They also recommend installing the GoPlus security plugin to intercept phishing risks in real-time.

The Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), noting the absence of information such as team details, key calendar events, and token data for projects like Sentism.AI, Fortune, Ultima, Etherex, and Solomon Labs. It calls on project teams to submit/update information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure a project's integrity and timeliness, aiming to reflect the project's information disclosure status, urging project teams to immediately claim their projects. The transparency score is categorized into five levels from A to F, with lower scores indicating more incomplete information disclosure and higher risks of malfeasance, requiring investors to exercise heightened caution.

The Cybersecurity Threat and Vulnerability Information Sharing Platform (NVDB) of the Ministry of Industry and Information Technology of China has monitored and found that attackers are using exploit tools targeting Apple Inc.'s terminal products to carry out cyber attack activities, which can lead to serious harms such as information theft and system control. The affected range includes Apple terminal products such as iPhone and iPad running iOS 13 to 17.2.1.Attackers induce users to use the Safari browser to visit web pages containing malicious code through methods such as SMS, email, or web poisoning, comprehensively utilizing security vulnerabilities present in the terminal devices to implant remote control Trojans into the victim's terminal products, stealing sensitive user information, gaining maximum privileges, and taking control.It is recommended that users of Apple terminal products conduct risk assessments, and promptly fix vulnerabilities through version upgrades and patch installations (refer to the Apple Security Updates). Pay attention to system update notifications and the latest security update announcements released by Apple, upgrade to the latest secure version in a timely manner, strengthen security awareness, avoid clicking on unknown links, and prevent the risk of cyber attacks.

The Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), noting the lack of information regarding teams, key calendar events, token data, and other details for projects such as Fluid, SideShift.ai, Blackhole, Pharaoh, and Koi Finance. It calls on project teams to submit/update their information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure situation of projects and urging project teams to immediately claim their projects. The transparency score is divided into 5 levels from A to F, with lower scores indicating more incomplete information disclosure and higher risks of wrongdoing, requiring investors to be highly vigilant.

According to monitoring by Lookonchain, the Solana ecosystem DeFi protocol Drift Protocol has suffered a significant attack, with approximately $220 million to $270 million in assets suspiciously transferred to the address "HkGz4K." Subsequently, some of these assets were bridged to the Ethereum chain to purchase ETH, with a total of 19,913 ETH bought so far, valued at $42.6 million.The attacker also transferred some of the stolen SOL to Hyperliquid to exchange for ETH, as well as transferring some stolen SOL to Binance. Additionally, according to monitoring by onchainschool.pro, the details of the stolen assets are as follows: USDC valued at $103 million; SOL valued at $54 million; WBTC valued at $19 million; WETH valued at $12 million; cbBTC valued at $11 million; USDT valued at $6 million; USDS valued at $5 million; SYRUPUSDC valued at $3 million; JLP valued at $2 million.Drift Protocol's official statement indicated that they have noticed unusual activity and are currently investigating. Please do not deposit funds into Drift during the investigation period. This is not an April Fool's joke. Please act cautiously until further notice. Drift Protocol will release the latest news through official channels.

Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), noting the lack of information on decentralized exchanges such as Hydration, Hyperbot, SideShift.ai, Lynex, and Beets regarding team details, key calendar events, token data, etc. It calls on project teams to submit/update information on RootData to enhance their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure situation of the projects. The transparency score is divided into 5 levels from A to F, with lower scores indicating more incomplete information disclosure and higher risks of misconduct, requiring investors to be highly vigilant.

Web3 asset data platform RootData issued a daily transparency alert on Twitter (X), noting the lack of information on teams, key calendar events, token data, and more for centralized exchanges such as Korbit, Bitkub, Luno, VALR, and bitFlyer. It calls on project parties to submit/update information on RootData to enhance their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure situation of the projects. The transparency score is divided into 5 levels from A to F, with lower scores indicating less complete information disclosure and higher risks of wrongdoing, requiring investors to be highly vigilant.

The monitoring data from the China National Cybersecurity and Information Security Information Notification Center shows that there are currently over 200,000 active OpenClaw internet assets worldwide, with approximately 23,000 active OpenClaw internet assets within the country, exhibiting explosive growth, mainly concentrated in internet resource-intensive areas such as Beijing, Shanghai, Guangdong, Zhejiang, Sichuan, and Jiangsu.A large number of OpenClaw assets exposed to the internet pose significant security risks and are likely to become prime targets for cyberattacks. Among them, the behavior of the agents is uncontrollable, making management difficult. During the execution of commands, OpenClaw agents are prone to privilege escalation, leading to unauthorized task execution and disregard for user instructions, which may result in the deletion of user data, theft of user information, and takeover of user terminal devices, causing significant economic losses.

Web3 asset data platform RootData published a daily transparency alert on Twitter (X), noting the absence of information such as teams, key calendar events, and token data for exchanges like CEX.IO, BloFin Exchange, Phemex, Tokocrypto, and Coins.ph. It calls on project teams to submit/update their information on RootData to improve their transparency scores. Additionally, RootData stated that it will continue to monitor and expose "black box" projects that lack core information.It is reported that the RootData transparency score is used to measure the integrity and timeliness of projects, aiming to reflect the information disclosure status of the projects. The transparency score is divided into five levels from A to F, with lower scores indicating less complete information disclosure and higher risks of wrongdoing, requiring investors to exercise heightened caution.