# Security Related Articles

HTX News Center provides the latest articles and in-depth analysis on "Security", covering market trends, project updates, tech developments, and regulatory policies in the crypto industry.

Aave Spends $1.5M on 345-Day Audit to Strengthen V4 Security

Aave Labs has invested $1.5 million in an extensive 345-day audit program for its upcoming V4 upgrade, making it one of the most comprehensive security reviews in DeFi. The audit involved multiple security firms, including ChainSecurity, Trail of Bits, Blackthorn, and Certora, as well as a public contest hosted on Sherlock. Over 900 researchers participated and submitted more than 950 findings. No critical or high-severity vulnerabilities were discovered, reinforcing confidence in Aave’s hub-and-spoke architecture. The new security framework integrates formal verification, layered manual and automated testing, continuous monitoring, bug bounties, and AI tools to detect unusual attack paths from the earliest development phase.

TheNewsCrypto3h ago

Aave Spends $1.5M on 345-Day Audit to Strengthen V4 Security

TheNewsCrypto3h ago

Cardano Founder Shares What To Expect For XRP If The Clarity ACT Is Passed

Cardano founder Charles Hoskinson states that the proposed Digital Asset Market CLARITY Act could provide established tokens like XRP with clearer regulatory treatment, effectively granting them a "grandfathered" status that spares them from being classified as securities. However, he strongly criticizes the bill for its default treatment of all new tokens as securities, which he argues gives the SEC too much power and creates significant obstacles for future crypto innovation. He also highlights that the bill offers no protections or pathways for decentralized finance (DeFi) projects and stablecoin yields. In contrast, Ripple CEO Brad Garlinghouse supports the bill as a workable starting point, creating a notable divide within the industry.

bitcoinist14h ago

Cardano Founder Shares What To Expect For XRP If The Clarity ACT Is Passed

bitcoinist14h ago

Your AI Agent is Quietly Changing the Rules of the Internet

AI Agents are rapidly transforming the internet landscape, evolving from experimental tools to essential components in daily operations—managing emails, scheduling meetings, and handling support tickets. By 2025, automated traffic is projected to surpass human activity, accounting for 51% of all web traffic, with AI-driven visits to US retail sites surging by 4,700% year-over-year. However, confidence in fully autonomous agents has declined due to security concerns, as infrastructure struggles to keep pace with their expansion. Key challenges include discoverability—agents must efficiently find machine-readable services amidst web pages designed for humans, prompting a shift from SEO to Agent-Oriented Discoverability (AEO). Identity is critical: agents require cryptographic authentication, delegated authority, and real-world accountability to transact securely, leading to emerging standards like ERC-8004 and protocols such as Visa’s Trusted Agent Protocol. Finally, reputation systems are essential to verify agent performance through methods like trusted execution environments (TEEs), zero-knowledge machine learning (ZKML), and economic security models, enabling portable, auditable records of reliability. Together, discoverability, identity, and reputation form the foundational infrastructure for an agent-driven economy, ensuring agents can operate at scale with trust and autonomy.

比推16h ago

Your AI Agent is Quietly Changing the Rules of the Internet

比推16h ago

Beyond ChatGPT: The Rise of AI Automation Tools and a Complete Analysis of Commercialization Paths

A quiet paradigm shift is occurring in AI, moving from "suggestion AI" (like ChatGPT) to "execution AI" that acts autonomously. This change is driven by the rise of autonomous AI Agent frameworks, primarily OpenClaw, which allows AI to control systems, automate workflows, and integrate across platforms. However, OpenClaw faces significant security risks, with numerous vulnerabilities and malicious plugins. Alternatives offer different advantages: NanoClaw prioritizes security through OS-level container isolation; Nanobot is minimal, transparent, and built on the standardized MCP protocol for tool interoperability; and PicoClaw is an ultra-lightweight runtime for embedded devices. The article compares their technical architectures, hardware requirements, and functional boundaries—noting that only OpenClaw supports advanced features like browser automation and multi-agent collaboration, albeit with high risk. Four commercialization paths are outlined: plugin monetization, automated service subscriptions, custom enterprise deployments, and content operations for individuals/small teams. A selection guide advises choosing based on data sensitivity, hardware constraints, need for browser automation, and long-term tool reusability. Ultimately, AI automation is presented as a viable tool for productivity and business value, emphasizing the importance of matching the right tool to specific constraints and use cases.

marsbit23h ago

Beyond ChatGPT: The Rise of AI Automation Tools and a Complete Analysis of Commercialization Paths

marsbit23h ago

Google Uncovers iPhone Exploit Kit Targeting Crypto Wallets

Google's Threat Intelligence Group (GTIG) has uncovered a sophisticated iOS exploit kit, dubbed 'Coruna,' targeting iPhone users on iOS versions 13.0 to 17.2.1. The kit, which contains five complete exploit chains and approximately 23 exploits—including previously unknown ones—aims to steal cryptocurrency wallet seed phrases and sensitive financial data. First identified in February 2025, the kit has been linked to a suspected Russian espionage group targeting Ukrainians and later to fake Chinese crypto websites impersonating platforms like WEEX. When users visit these sites on vulnerable iOS devices, the kit deploys to harvest financial information, including seed phrases and credentials from apps like MetaMask and Uniswap. GTIG advises users to update to the latest iOS version or enable Lockdown Mode to mitigate such attacks.

TheNewsCryptoYesterday 11:35

Google Uncovers iPhone Exploit Kit Targeting Crypto Wallets

TheNewsCryptoYesterday 11:35

Anthropic Open Letter: The Hypocritical Sam Altman, Master of PUA

Anthropic CEO Dario Amodei accuses OpenAI and Sam Altman of hypocrisy and "safety theater" in a leaked internal memo. The email follows the Pentagon’s termination of its contract with Anthropic over safety terms, while OpenAI secured a deal with the Defense Department hours later. Amodei claims OpenAI’s model has "no legal use restrictions" and relies on a superficial "safety layer"—such as refusal mechanisms or third-party classifiers—which he deems 80% performative and only 20% effective. He argues these measures fail to prevent misuse in mass surveillance or autonomous weapons, as models lack contextual awareness and are vulnerable to jailbreaks. He reveals the Pentagon rejected similar safety clauses proposed by Anthropic, particularly one targeting "analysis of bulk acquired data." Amodei alleges the Pentagon and OpenAI coordinated narratives to downplay risks, claiming existing laws already prohibit misuse—a stance he disputes. Amodei accuses Altman of gaslighting, political maneuvering, and undermining Anthropic’s stance while appealing to OpenAI employees with performative safety pledges. He links OpenAI’s favorable treatment to its political donations and alignment with the Trump administration’s agenda, contrasting it with Anthropic’s refusal to compromise on ethical red lines.

marsbitYesterday 05:50

Anthropic Open Letter: The Hypocritical Sam Altman, Master of PUA

marsbitYesterday 05:50

Blockstream Unveils Quantum-Resistant Bitcoin Signing Demo On Liquid

Blockstream Research has successfully deployed and tested a post-quantum signature verification system on the Liquid Bitcoin sidechain, marking the first use of such a scheme for real transactions on a production sidechain. The implementation uses Blockstream’s smart contract language Simplicity to create custom spending conditions, allowing users to opt into quantum-resistant protections for LBTC and other assets without altering Liquid’s base consensus rules. The system employs SHRINCS, a compact hash-based signature design developed specifically for blockchain use, featuring both a stateful mode for regular transactions and a stateless fallback for recovery. Two live transactions were executed on Liquid mainnet to demonstrate functionality. Blockstream clarified that this does not make Liquid fully quantum-resistant, as critical components like the Bitcoin peg and consensus protocol remain classically secured. The development is positioned as a proactive step toward future-proofing Bitcoin infrastructure, emphasizing that quantum computers are not yet an imminent threat but require early preparation. The team also included the Bitcoin whitepaper in transaction data as a symbolic nod to Bitcoin's cypherpunk origins.

bitcoinistYesterday 04:01

Blockstream Unveils Quantum-Resistant Bitcoin Signing Demo On Liquid

bitcoinistYesterday 04:01

KuCoin Tops CryptoQuant 2025 Exchange Transparency Rankings

CryptoQuant's 2025 Annual Exchange Leader Report has ranked KuCoin as the most transparent exchange, awarding it a score of 96.7 (A+) in its proof-of-reserves (PoR) evaluation. The report assessed structural transparency across areas such as public wallet disclosure, user-level balance verification, reporting frequency, and third-party attestations. KuCoin publishes monthly Merkle-tree-based PoR reports verified by Hacken, with over 39 consecutive reports showing reserve ratios consistently above 100%. The exchange’s transparency efforts are part of its broader $2 billion Trust Project, focusing on security, compliance, and user asset protection. CEO BC Wong emphasized that verifiable reserves and third-party validation are essential for building trust. The report also noted KuCoin’s strong growth in spot and derivatives markets in 2025.

TheNewsCryptoYesterday 01:58

KuCoin Tops CryptoQuant 2025 Exchange Transparency Rankings

TheNewsCryptoYesterday 01:58

Ripple Outlines Next Steps After Critical XRP Ledger Batch Amendment Bug

Ripple is implementing stricter security measures for the XRP Ledger amendment process after a critical bug was discovered in the proposed Batch amendment (XLS-56). The flaw, identified by Cantina AI, was caught before activation, preventing any mainnet impact. RippleX Head of Engineering J. Ayo Akinyele acknowledged the amendment "progressed further than it should have" and emphasized the need for higher review standards. While the network's safeguards worked as a final defense, Ripple is taking steps to make them a primary one. Proposed changes include mandatory multiple independent audits for high-risk features, an expanded bug bounty program, and formal adversarial testing. The company is also incorporating AI-assisted code review and aims to make formal verification standard for critical ledger components.

bitcoinistYesterday 17:32

Ripple Outlines Next Steps After Critical XRP Ledger Batch Amendment Bug

bitcoinistYesterday 17:32

Binance Aims for Five Regulatory Licenses Across Asia Markets in 2026

Binance is shifting its growth strategy toward regulated expansion in the Asia-Pacific region, aiming to secure five additional regulatory licenses in 2026. This move would bring its global total to over 20 jurisdictions. The exchange already holds licenses in countries including Australia, India, Indonesia, Japan, New Zealand, and Thailand. With over 300 million accounts globally, Binance views APAC as a key growth market and is reinforcing this effort by strengthening its internal compliance systems. Concurrently, BNB's price is approximately $650, up over 3% in 24 hours, though it remains significantly below its all-time high.

TheNewsCryptoYesterday 13:31

Binance Aims for Five Regulatory Licenses Across Asia Markets in 2026

TheNewsCryptoYesterday 13:31

活动图片

Regulatory Policy

Indepth Research