BTC $79,881.69 -2.06%
ETH $2,312.26 -2.73%
BNB $752.10 +0.24%
XRP $1.29 -3.32%
SOL $99.88 -2.90%
TRX $0.3310 -0.11%
DOGE $0.0777 -3.09%
ADA $0.1980 -4.65%
BCH $279.08 -6.27%
LINK $11.42 -3.35%
HYPE $78.95 -3.11%
AAVE $130.16 -4.16%
SUI $0.9089 -3.45%
XLM $0.1676 -2.63%
ZEC $1,240.69 -5.74%
AAPL $347.73 +0.24%
AMZN $252.48 -0.66%
GOOGL $291.98 -10.06%
MSFT $549.25 +3.60%
META $620.46 -0.55%
NVDA $213.61 -2.65%
TSLA $400.61 -2.15%
SNDK $1,351.48 -0.63%
INTC $91.70 -3.78%
SPCX $143.50 -4.23%
MU $947.94 -1.69%
AMD $559.52 -1.43%
BTC $79,881.69 -2.06%
ETH $2,312.26 -2.73%
BNB $752.10 +0.24%
XRP $1.29 -3.32%
SOL $99.88 -2.90%
TRX $0.3310 -0.11%
DOGE $0.0777 -3.09%
ADA $0.1980 -4.65%
BCH $279.08 -6.27%
LINK $11.42 -3.35%
HYPE $78.95 -3.11%
AAVE $130.16 -4.16%
SUI $0.9089 -3.45%
XLM $0.1676 -2.63%
ZEC $1,240.69 -5.74%
AAPL $347.73 +0.24%
AMZN $252.48 -0.66%
GOOGL $291.98 -10.06%
MSFT $549.25 +3.60%
META $620.46 -0.55%
NVDA $213.61 -2.65%
TSLA $400.61 -2.15%
SNDK $1,351.48 -0.63%
INTC $91.70 -3.78%
SPCX $143.50 -4.23%
MU $947.94 -1.69%
AMD $559.52 -1.43%

policy

All
Article
Flash

first_img Bitcoin Core adjusts vulnerability disclosure policy to address AI vulnerability exploitation

Bitcoin core developer Antoine Poinsot announced an adjustment to the security vulnerability disclosure policy in the Bitcoin development mailing list. He stated that in the past, vulnerabilities were often kept secret for a long time to allow users to complete upgrades before details were made public, but this also led to fixes not being backported to older versions, requiring users to wait for the next major release. Poinsot pointed out that large language models make some vulnerabilities very easy to rediscover, and the protection that continued delays in fixing can provide is now quite limited.According to the new policy, vulnerabilities deemed "easy to discover" will be fixed as soon as possible in all maintained major versions, with security announcements released simultaneously. This classification applies to vulnerabilities that can be discovered with minimal effort, such as through simple LLM prompts. Other vulnerabilities will still follow the disclosure timeline based on severity: low-severity vulnerabilities will be disclosed two weeks after the major release containing the fix; medium to high-severity vulnerabilities will be disclosed two weeks after the last affected version reaches its end of life (usually one year after the fix is released in a new major version). Critical vulnerabilities are not covered by the standard policy and may require ad hoc procedures.Bitcoin ecosystem security researcher Luke de Wolf stated that he previously disagreed with Poinsot's security strategy but believes this update is a good adjustment. In August of this year, the volunteer-based Bitcoin Red Team reported nearly 5,000 potential issues across 390 projects, with only about one-fifth being reproducible at that time. In the same month, Core Lightning developers urged operators to upgrade or take nodes offline after receiving multiple AI-generated vulnerability reports, while keeping technical details confidential for two weeks.

The CFTC of the United States rebuts the lawsuit qualification of CME: stating that it has not reasonably explained how the perpetual contract policy caused financial harm

The U.S. Commodity Futures Trading Commission (CFTC) stated in its latest court filing that CME only claims increased competition without reasonably explaining the existence of imminent financial harm, which is insufficient to qualify for a lawsuit challenging its perpetual contract policy. The CFTC pointed out that after the policy adjustment, CME's cryptocurrency futures trading volume has actually increased.In May of this year, the CFTC approved Kalshi's first Bitcoin perpetual contract and stated that it would regulate such products on a case-by-case basis under futures regulations. CME, on the other hand, believes that perpetual contracts do not have an expiration date and should be classified as swaps rather than futures, subject to a different regulatory framework. Last month, the CFTC requested a federal judge to dismiss the case, and this filing further elaborated on its rebuttal to CME's standing in the lawsuit.The CFTC also noted that CME had previously informed investors that it had not heard customer demand for perpetual contracts, and that such products could not replace its existing futures, and that it should not take different positions in court and during earnings calls. TD Cowen policy analyst Jaret Seiberg believes that CME may still have the upper hand regarding its standing in the lawsuit and the argument that the products should be classified as swaps. However, he is concerned that if the perpetual contract market continues to grow during the litigation, it may become more complicated to dismantle this market if CME wins.

Bank of Japan Governor Kazuo Ueda: Monetary policy has entered a new phase and will continue to raise interest rates

According to Jinshi Data, Bank of Japan Governor Kazuo Ueda stated that Japan's core inflation is close to 2%, marking a policy shift, and the central bank's policy has entered a new phase where inflation cannot be allowed to rise further. Due to core inflation being close to 2% and the financial environment remaining accommodative, the Bank of Japan will continue to raise interest rates and adjust its monetary easing policy. The central bank will discuss whether to adjust the assessment of "core inflation close to 2%" at the upcoming meeting.Kazuo Ueda mentioned that the situation in the Middle East, demand for artificial intelligence, and exchange rates will influence the timing of interest rate hikes. The central bank has been monitoring the impact of the weakening yen and the Middle East situation on inflation. He also stated that it is difficult to make a clear statement about Japan's neutral interest rate, and the stability of 2% inflation is becoming increasingly important. The central bank will focus on consolidating the 2% inflation target. Additionally, Ueda noted that the main takeaway from this week's meeting (including the G20) was the communication with other policymakers regarding the impact of the Middle East conflict and demand for artificial intelligence on the global and Japanese economy, and there was nothing heard that deviated from the Bank of Japan's fundamental views. He exchanged opinions with Federal Reserve Chairman Waller but will not disclose specific details; since the meeting in Asheville, he has not contacted U.S. Treasury Secretary Yellen.
app_icon
ChainCatcher Building the Web3 world with innovations.