high-risk

The founder of Slow Fog, Yu Xian, retweeted a tweet on the X platform regarding the potential poisoning attack risks of Claude Code and published an analysis of the poisoning attack details targeting Grok Build CLI and Claude Code CLI.It pointed out that the security mechanisms of Grok Build CLI are not unified, with different code paths having different trust assumptions, creating gaps that serve as channels for attackers. Attackers may execute arbitrary commands through malicious project configuration files without the user's knowledge, thereby stealing API keys, cloud credentials, or controlling local devices.Researchers constructed a testing environment and found that on Mac systems, if Claude Code is affected, executing specific test commands can trigger the local calculator to launch, proving the existence of potential command execution risks.If the attack is successful, attackers may further steal API keys from AI services like Claude and OpenAI, resulting in account cost losses, gain access to servers and data by obtaining cloud service credentials from AWS, Alibaba Cloud, Tencent Cloud, modify code repositories to implant backdoors, and use local devices as jump points to attack corporate internal networks. It is reported that the related vulnerabilities have existed for a year.

The Chief Information Security Officer of Slow Fog, 23pds, stated that researchers have exposed a high-risk vulnerability in CI/CD called Cordyceps, affecting the open-source repositories of major companies such as Microsoft, Google, Apache, and Cloudflare. Attackers do not need corporate accounts or any system permissions; they can simply register a free GitHub account, submit a malicious PR, and leave a comment to forge approvals, steal server keys, and push malicious code, completely taking control of the corporate code repository.

GoPlus posted on platform X that the Meta account recovery feature has been exposed to a high-risk design flaw, which could directly leak users' phone numbers, email addresses, and PII (Personally Identifiable Information). Attackers only need to input the META username without any login or verification to directly obtain the complete PII linked to the user, such as email addresses and phone numbers. This could pose significant risks to users, including: large-scale phishing attacks, SIM card swapping attacks, account takeover and identity theft, and targeted social engineering attacks.Recommendations: Remove or change the leaked email/phone number as a recovery method; modify related account passwords and enable 2FA; do not click on any emails or messages related to "account anomalies," "verification," or "password reset"; set up multi-channel verification, which can be verified through official documents or other official social media channels.

According to Cointelegraph, the crypto analysis platform Swissblock stated that Bitcoin is sliding into a high-risk environment due to continuous selling by institutions. Its Bitcoin risk index is currently at 33 points, in the high-risk zone. Swissblock pointed out that every time the risk index signals a structural selling pressure overwhelming the market, it is backed by institutions selling off.Glassnode reported that since May 7, the U.S. Bitcoin ETF has recorded net outflows almost every trading day, with continuous institutional selling signals increasing pressure on the supply side for more than two weeks, while demand has not offset this. CoinEx chief analyst Jeff Ko stated that over the past two weeks, more than $2 billion has flowed out of spot ETFs, and institutional risk appetite remains in a marginally sensitive state. News of the U.S. launching new strikes against Iran on Tuesday morning further intensified the risk, causing Bitcoin to drop by 1%, falling from $77,000 to below $76,500.

The latest report from the blockchain analysis platform Swissblock shows that Bitcoin is gradually slipping into a high-risk environment, primarily due to continuous selling by institutional funds, especially driven by net outflows from the U.S. spot Bitcoin ETF. Historical data indicates that whenever this index signals selling pressure overwhelming the market at a structural level, it often corresponds to systematic distribution behavior by institutional funds.On-chain data analysis firm Glassnode also pointed out that since May 7, the U.S. Bitcoin spot ETF has shown net outflows almost every trading day, with institutional selling signals persisting for over two weeks. "Such continuous capital outflows are exerting pressure on the supply side of the market, while currently, there has not been sufficient buying demand to hedge against this," further exacerbating the risk of supply-demand imbalance.In the market, Bitcoin faced short-term pressure on Tuesday due to geopolitical disturbances. Reports indicated that the U.S. is implementing a new round of military strikes against Iran, despite recent progress on a peace agreement between the two sides. Bitcoin's price fell by about 1%, briefly dipping from above $77,000 to around $76,500, but overall it still maintained a range-bound pattern for nearly four months.CoinEx Chief Analyst Jeff Ko stated that although geopolitical events may trigger short-term volatility, the market focus may still lean towards potential reconciliation progress between the U.S. and Iran, with the overall cryptocurrency market "still in a wait-and-see state." In summary, the current Bitcoin market faces dual pressures: on one hand, the continuous outflow of spot ETF funds has weakened key buying support; on the other hand, geopolitical uncertainty has amplified short-term volatility risks. If institutional risk appetite does not improve marginally, the risk index may rise further, necessitating caution against the adjustment pressure brought by technical selling and emotional resonance.

According to the blockchain security organization SlowMist (@SlowMist_Team), a highly complex npm worm named "Mini Shai-Hulud" is spreading through well-known developer projects such as TanStack, UiPath, and DraftLab, as monitored by their threat monitoring system MistEye. Attackers hijack GitHub credentials to publish malicious packages disguised as legitimate updates, embedding a hidden script router_init.js that runs silently in CI/CD environments like GitHub Actions, specifically designed to steal CI/CD keys, cloud infrastructure keys, and cryptocurrency wallet information, using GitHub's own infrastructure for data exfiltration.SlowMist has synchronized relevant threat intelligence (IOC) with clients and recommends that projects using the affected packages immediately check their CI/CD pipelines for the presence of the router_init.js file, rotate all exposed GitHub, cloud service, and cryptocurrency credentials, and continuously monitor for abnormal background activities in the development environment.

According to Politico, Coinbase, Kraken, and Gemini proposed to lawmakers earlier this year to remove a provision in the digital asset bill that requires cryptocurrency trading platforms to only list "non-manipulable" digital assets. The three exchanges are concerned that this would make it more difficult to list small-cap tokens.This amendment occurred after the Senate Agriculture Committee voted to advance the bill in January. The CFTC has long required exchanges to "self-certify" that the product contracts they list are not easily manipulable, but cryptocurrency companies believe this standard does not apply to the spot crypto market. The three exchanges stated that they have been working with Congress for years to push for comprehensive federal regulation of the digital asset market. Coinbase's Federal Policy Director Robin Cook stated that they hope to ensure consumers are protected by standards suitable for spot trading.

The Chief Information Security Officer of Slow Fog, 23pds, disclosed that a privilege escalation vulnerability named Dirty Frag has been exposed in Linux systems, with complete details and exploit code now public. This vulnerability allows any local low-privilege user to directly obtain root privileges on almost all mainstream Linux distributions. It is classified as a deterministic logic flaw, and the attack does not rely on complex race conditions, resulting in a very high success rate without causing kernel crashes, posing significant danger. Linux users are advised to upgrade their systems promptly.

The Monetary Authority of Singapore has released a consultation document proposing to establish a more friendly regulatory capital guideline for the treatment of crypto assets on permissionless blockchains before implementing the Basel capital requirements for crypto assets.It is reported that the Basel capital requirements for crypto assets categorize them into two groups. The first group involves tokenized traditional assets and stablecoins, which are subject to lower capital requirements.The second group involves crypto assets that do not meet the above conditions. The Monetary Authority of Singapore intends to abandon the practice of categorizing all crypto assets on permissionless blockchains as part of the second group, allowing them to be classified as first group crypto assets with lower risk weights and more lenient prudential requirements, provided they meet a series of principled requirements. Specifically, for banks registered in Singapore, the risk exposure of permissionless blockchain crypto assets classified as first group crypto assets must not exceed 2% of the bank's Tier 1 capital, and if the issuance creates liabilities at the bank level, the issuance scale must not exceed 5% of Tier 1 capital.

The 360 vulnerability mining agent recently discovered and reported 1 high-risk and 2 medium-risk high-value vulnerabilities related to OpenClaw, totaling 3 vulnerabilities. Currently, all newly discovered vulnerabilities have been officially patched and publicly disclosed.It is understood that the three newly discovered vulnerabilities directly target the core operating mechanism of AI agents, directly affecting the core security of user devices, data, and accounts.

According to GoPlus citing a Koi report, the Claude Chrome extension under Anthropic has a high-risk prompt injection vulnerability, affecting all versions of the extension below 1.41.Attackers can construct malicious web pages that silently load an iframe containing a cross-site scripting (XSS) vulnerability in the background, executing malicious payloads within the a-cdn.claude.ai subdomain. Since this subdomain is on the extension's trust whitelist, attackers can directly send malicious prompts to the Claude extension and execute them automatically, without requiring user authorization or any clicks, leaving the victim unaware.This vulnerability can allow attackers to manipulate the Claude extension to read users' Google Drive documents, steal business access tokens, or export chat logs, and can take over the current browser session to perform sensitive operations like sending emails as the victim. GoPlus recommends that users immediately update the Claude extension to version 1.41 or above and remain vigilant against phishing links.

According to CoinDesk analysis, as the pressures from scalability challenges, quantum technology, and artificial intelligence continue to grow, Ethereum is at a critical juncture in high-risk balancing strategies. In the first three months of 2026, the Ethereum ecosystem faces multiple structural pressures. Vitalik Buterin sharply criticized the Layer2 scaling path at the beginning of the year, pointing out that many Rollup designs rely on centralized components and isolated environments, failing to truly inherit the security guarantees of the mainnet, leading to ecosystem fragmentation and inconsistent security assumptions.Meanwhile, the Ethereum Foundation has incorporated the threat of quantum computing into its recent planning, advancing research on LeanVM and post-quantum signature schemes. Internally, Tomasz Stańczak, the co-executive director of the Ethereum Foundation, has left after about a year in office, a change seen as a signal of the foundation's internal realignment of priorities. Additionally, the foundation is accelerating its layout for decentralized AI research, attempting to position Ethereum as the "trust layer" for AI systems, used for verifying outputs, coordinating agents, and supporting machine-to-machine economic activities.Overall, Ethereum can no longer handle these issues in isolation; they are interwoven. The network is being pulled in multiple directions simultaneously, making it increasingly difficult to maintain balance. Unlike previous cycles, the current predicament is more about structure than short-term momentum. The short-term focus remains on mainnet scaling, with the planned Glamsterdam upgrade set to be a litmus test to determine whether the Ethereum network can successfully transform into a robust, quantum-resistant "trust layer" supporting the global AI economy.

The China Academy of Information and Communications Technology, in collaboration with Shanghai Jiao Tong University and Nanjing University, discovered a high-risk vulnerability driven by LLM command injection in the bash-tools module of the open-source autonomous intelligent agent framework OpenClaw during a security audit.This vulnerability arises from the system's failure to strictly escape command line parameters generated by LLM, allowing attackers to bypass regex defenses through inducive prompts, achieving remote code execution on the host machine and stealing sensitive data.The research team has completed attack verification in various mainstream model environments, initiated a responsible vulnerability disclosure process, and submitted repair suggestions to the NVDB Artificial Intelligence Product Security Vulnerability Professional Database (CAIVD) and the GitHub community.

According to Lookonchain monitoring, a "high-risk" trader who opened a long position in crude oil has been liquidated. This trader previously entered at a price of $101.79 with a "high-risk" strategy, opening a long position in crude oil with 20x leverage, with a position value of $3.2 million.

GoPlus Chinese Community has issued a warning that the OpenClaw Gateway has a high-risk vulnerability. Please upgrade to version 2026.2.25 or higher immediately, and audit and revoke unnecessary credentials, API keys, and node permissions granted to Agent instances.The analysis states that OpenClaw operates through a WebSocket Gateway bound to the localhost, which serves as the core coordination layer for the Agent and is an important component of OpenClaw. This attack targets the vulnerabilities in the Gateway layer, requiring only one condition: the user visits a malicious website controlled by hackers in their browser.The complete attack chain is as follows: 1. The victim visits a malicious website controlled by the attacker in their browser; 2. JavaScript on the page initiates a WebSocket connection to the OpenClaw gateway on the localhost; 3. Subsequently, the attack script attempts to brute-force the gateway password hundreds of times per second; 4. Upon successful cracking, the attack script silently registers as a trusted device; 5. The attacker gains administrator-level control over the Agent.

Market analyst "COINDREAM" posted on the CryptoQuant platform, stating that the percentage of Bitcoin UTXOs in loss has re-entered the 27-30% range, highly similar to the downward pattern of 2022. This indicator shows that a large number of market participants have shifted from profit to an unrealized loss state.The analysis points out that this range is not simply a bear market signal, but a key decision zone for market pressure: if it breaks above 30% and maintains, it could trigger further declines; if it stagnates and falls within the 27-30% range, it indicates that selling pressure may have been exhausted, potentially leading to a trend recovery. The current stage is seen as a test of how much panic the market has absorbed, rather than the beginning of panic.

Binance Alpha officially removed 12 tokens from its listing on January 29, including WIZARD, SHOGGOTH, FWOG, UFD, and others. Binance stated that these tokens were found to be non-compliant with the platform's transparency and user protection standards during the regular review process.Although the tokens have been delisted, users can still sell them through the market or asset section of the Binance Wallet, but they cannot make new purchases. This move has sparked strong dissatisfaction within the community, with critics pointing out the lack of clear reasons for the delisting of individual tokens, creating a regulatory vacuum.Several affected memecoin projects have called on the community to shift to decentralized exchanges on Solana and BNB Chain. Binance will also delist 20 spot trading pairs this week.

According to Cointelegraph, cryptocurrency lending company Nexo Capital will pay a $500,000 fine to the California Department of Financial Protection and Innovation. The regulator accused the company of issuing thousands of loans to California residents without holding a valid license and failing to properly assess borrowers' ability to repay.The regulator stated that from July 2018 to November 2022, Nexo issued at least 5,456 consumer and business loans to California residents without a valid loan license, and typically did not assess borrowers' repayment ability, existing debts, or credit history before lending. Nexo must transfer all funds of California customers to its U.S. affiliate Nexo Financial LLC, which holds a California loan license, within 150 days.

The Slow Fog team security researcher 23pds forwarded a report from researcher Adam Chester, revealing a privilege escalation and command execution vulnerability found in Anthropic's Claude Code. Attackers can execute commands without user authorization. The vulnerability ID is CVE-2025-64755, and a related PoC has been made public.This issue has been noted to be similar to a previously disclosed vulnerability in the Cursor tool. 23pds stated that phishing hackers have already exploited the related vulnerability to attack cryptocurrency users.

Matrixport released a summary of its overall forecast for 2026 on platform X, believing that 2026 will be a pivotal year characterized by a change in Federal Reserve leadership, a weak labor market, heightened policy risks in an election year, and the most densely packed series of upcoming events in the crypto space in years. This includes a series of recurring macro catalysts (such as monthly CPI and employment data), multiple FOMC meetings with new forecasts, and a potential government shutdown window, all of which lay the groundwork for volatility across major asset classes.At the same time, the crypto sector also faces its own high-impact triggers: the final implementation of the EU's MiCA, significant protocol upgrades, the Mt. Gox repayment deadline, and a critical turning point window just 15 months away from the halving in December this year.Matrixport states that 2026 will not present a smooth trend, but rather a series of closely clustered risk events that require investors to remain flexible, actively manage their positions, and precisely time their exposures around policy windows.