# Security Related Articles

HTX News Center provides the latest articles and in-depth analysis on "Security", covering market trends, project updates, tech developments, and regulatory policies in the crypto industry.

Bitcoin Rescue from Coldcard Turns into Theft Due to Hacked Google Account

The story details a crypto investor who, while attempting to save their assets by moving $750,000 in Bitcoin from a Coldcard hardware wallet to a centralized exchange, had the funds stolen within 12 hours. The theft was attributed not to a blockchain or exchange flaw, but to a compromised Google account with cloud synchronization enabled for Google Authenticator. Following a 2023 update allowing automatic backup of 2FA codes to the cloud, this feature created a critical vulnerability. Once hackers gained control of the Google account, they accessed the synced authenticator codes, bypassing the exchange's security barriers. Experts note this effectively reduces two-factor authentication to a single, vulnerable point of failure. The article explains that such account compromises often occur via sophisticated phishing attacks or malware stealing session cookies, not brute force. The key lesson is that security cannot be compromised. Recommendations include disabling cloud sync in Google Authenticator for financial accounts, using offline hardware security keys, employing unique passwords, and isolating exchange accounts from everyday email. The incident underscores that a hardware wallet's security is nullified if the keys to a connected centralized exchange are left accessible via a single compromised cloud account.

cryptonews.ru7h ago

Bitcoin Rescue from Coldcard Turns into Theft Due to Hacked Google Account

cryptonews.ru7h ago

Trump-Backed Company World Liberty Financial Partners with Chinese AI Company of Limited Access to Provide Artificial Intelligence Services

According to a Reuters report, Trump-backed cryptocurrency company World Liberty Financial is linked to WorldClaw, a Hong Kong-based platform providing access to Chinese AI models that the U.S. government has flagged as security threats. WorldClaw's platform features AI models from Chinese companies like Alibaba, Baidu, Z.ai, DeepSeek, and Moonshot, some of which are designated by U.S. entities as tied to the Chinese military or subject to export restrictions. The connection is facilitated by World Liberty's dollar-pegged stablecoin, $USD1, which is accepted for payment on WorldClaw. The Trump family benefits from interest generated by the stablecoin's reserves, and token sales have earned them over $1.4 billion. A World Liberty executive previously advised WorldClaw on integrating $USD1. Security experts warn that using these Chinese AI models could expose users to surveillance or malicious code. WorldClaw claims over 10,000 users and processes 50 million queries daily, partly due to the lower cost of Chinese models. Both companies and the White House deny any conflict of interest, stating the platform helps American AI firms access international markets and that listing models does not imply endorsement. External critics, however, argue it is hypocritical to profit from Chinese AI tools while the U.S. government aims to counter the rise of Chinese AI.

cryptonews.ru7h ago

Trump-Backed Company World Liberty Financial Partners with Chinese AI Company of Limited Access to Provide Artificial Intelligence Services

cryptonews.ru7h ago

Blockstream Swaps Moves into Beta Testing, Filling the Gap in the BTC Ecosystem Created by Boltz

Blockstream has launched the beta phase of its Blockstream Swaps service, a non-custodial platform for trustless atomic swaps between the Bitcoin main chain, the Lightning Network, and the Liquid sidechain. The service fills a gap left after competitor Boltz permanently shut down its similar exchange service, citing unsustainable waves of AI-powered attacks. While built on the same core atomic swap principle as Boltz, Blockstream emphasizes it is not a direct replacement but a necessary addition to improve ecosystem resilience. The new service completes the triangle between all three Bitcoin layers. The shutdown of Boltz, along with other Lightning infrastructure operators like ZEUS and Aqua Wallet, has raised concerns. However, network data shows public Lightning Network capacity continued to grow during this period, indicating issues were operator-specific, not protocol-wide. The incidents highlight an ongoing industry-wide arms race, with AI agents becoming significantly more effective at exploiting vulnerabilities.

cryptonews.ru8h ago

Blockstream Swaps Moves into Beta Testing, Filling the Gap in the BTC Ecosystem Created by Boltz

cryptonews.ru8h ago

NEAR AI Introduces Independent Verification

NEAR AI Cloud has integrated Intel Trust Authority to provide independent verification of confidential AI computations. Clients can now receive a signed Intel attestation token confirming their tasks run within a secure Intel TDX environment. NEAR AI Cloud utilizes Intel TDX to isolate AI workloads in protected virtual machines, where memory is encrypted and inaccessible to the host OS, hypervisor, or infrastructure operator. While NEAR AI already provides hardware attestation data, the new integration adds an independent verification layer from Intel. Intel Trust Authority validates cryptographic signatures, matches the secure environment's parameters against Intel benchmarks, and applies defined security policies, ultimately issuing a signed JWT token with the verification result. This token can be used by other systems—such as key management or security platforms—to control access to protected resources like confidential data or encryption keys. It also serves as independent security validation for compliance and audits. NEAR AI Cloud is designed for confidential AI query processing and AI agent operations. Current users include Brave, Venice AI, Abound, the Government of Bermuda, OpenMind, and Corbits.

cryptonews.ru8h ago

NEAR AI Introduces Independent Verification

cryptonews.ru8h ago

NEAR AI has implemented independent verification

NEAR AI Cloud has integrated Intel Trust Authority to provide independent verification of confidential AI computations. Clients can now receive a signed Intel attestation token confirming their tasks are executed within a secure Intel TDX environment. The platform uses Intel TDX to isolate AI workloads in protected virtual machines, with encrypted memory inaccessible to the host OS, hypervisor, or infrastructure operator. While NEAR AI already provides hardware attestation data, the new integration adds an independent verification layer from Intel. Intel Trust Authority verifies cryptographic signatures, matches the secure environment's parameters against Intel's reference values, and applies defined security policies. Following a successful check, it issues a signed JWT token as proof of attestation. This token can be used in other systems—such as key management or security platforms—to control access to protected resources like confidential data or encryption keys. It also serves as independent security validation for audits and regulatory compliance. Notable users of NEAR AI Cloud include Brave, Venice AI, Abound, the Government of Bermuda, OpenMind, and Corbits.

cryptonews.ru11h ago

NEAR AI has implemented independent verification

cryptonews.ru11h ago

Harmony Plans to Roll Back Network After ONE Exploit and Cancel 109,000 Transactions

Harmony plans to roll back its blockchain to a state from August 11th following an exploit that created counterfeit ONE tokens, and will invalidate over 109,000 transactions confirmed after that checkpoint. The Layer 1 network Harmony 1 stated that validators will revert to blocks recorded on August 11th at 11:25 UTC. New blocks will be created from subsequent heights using backup databases. The period to be invalidated includes 109,126 regular transactions and 315 staking transactions. Harmony noted that a selective rollback is not safe, as balances, smart contract states, nonces, and other parameters would differ in the new chain. The move comes after Harmony considered a rollback last week following reports of unauthorized ONE tokens being minted and sent to exchanges. The company stated investigators have traced nearly all counterfeit ONE to specific wallets or service providers and are working with exchanges, bridges, and law enforcement. This plan aligns Harmony with Ravencoin, another network seeking to reverse confirmed blockchain transactions after an exploit. Ravencoin recently faced a potential three-day blockchain reorganization due to an exploited consensus vulnerability, with mining pools controlling most of its hashrate starting to create a competing chain.

cryptonews.ru13h ago

Harmony Plans to Roll Back Network After ONE Exploit and Cancel 109,000 Transactions

cryptonews.ru13h ago

Hegotá EIP Comprehensive Overview: Where is Ethereum's Next Hard Fork Headed?

The article outlines Ethlabs' recommended priorities for the upcoming Ethereum Hegotá hard fork, following Glamsterdam. The core focus areas are: 1. **Stronger censorship resistance** via EIP-7805 FOCIL (already in SFI stage). 2. **A faster Ethereum** by shortening the slot time via EIP-8198 Quick Slots (S-tier recommendation). This aims to reduce transaction confirmation latency and improve cross-chain interoperability. 3. **Native account abstraction** through EIP-8141 Frame Transactions (A-tier). This enables passkey wallets, gas sponsorship, and batched transactions. Its flexibility allows for custom validation logic and future post-quantum security but presents ecosystem coordination challenges. 4. **Continued L1 scaling** by optimizing resource pricing with proposals like EIP-8131 & EIP-8279 (S-tier) to prepare for future gas limit increases. The article uses a tiered system (S, A, B, D) to rank proposed EIPs based on their value and implementation feasibility. It advises strictly controlling the scope of Execution Layer (EL) changes in Hegotá to reserve developer bandwidth for future large-scale upgrades like decoupled consensus. Other notable proposals include EIP-8363 for staking issuance changes (requiring broad community consensus), various post-quantum preparation EIPs, and zkEVM optimizations. Ethlabs emphasizes that Ethereum upgrades are complex, high-risk endeavors requiring coordination across the entire ecosystem.

marsbit15h ago

Hegotá EIP Comprehensive Overview: Where is Ethereum's Next Hard Fork Headed?

marsbit15h ago

In the AI Code Review Niche, a Unicorn Worth 108 Billion Yuan Emerges

AI-powered code review startup CodeRabbit has become a unicorn with a valuation exceeding $1.5 billion following a $143 million Series C funding round. Founded in 2023 and based in San Francisco, the company specializes in automating code reviews for platforms like GitHub and GitLab. Its core platform analyzes pull requests (PRs) using repository context to detect logic, quality, and security issues, providing actionable suggestions to reduce manual review burdens. Responding to the surge in AI-generated code, CodeRabbit launched "Agentic Change Management," a new platform designed to handle the increased volume and complexity of changes. This system integrates four key functions: AI Code Review for pre-merge validation; CodeRabbit Triage, which acts as an intelligent dispatcher to prioritize and route PRs based on risk; CodeRabbit Change Stack for organizing and explaining changes; and CodeRabbit Security for continuous vulnerability monitoring throughout the code lifecycle. The company, led by serial entrepreneur and CEO Harjot Gill, reports a fivefold increase in annual revenue. Its platform now conducts over 2 million code reviews weekly, serving more than 17,000 enterprise customers and 150,000 open-source projects. CodeRabbit plans to invest over $10 million in the next year to continue offering free AI code review services to the open-source community.

marsbit15h ago

In the AI Code Review Niche, a Unicorn Worth 108 Billion Yuan Emerges

marsbit15h ago

Data of Almost 40,000 SafePal Hardware Wallet Users Exposed to Third Parties

Hardware crypto wallet manufacturer SafePal has disclosed a data breach affecting approximately 39,798 users. On August 16, the company announced that leaked information includes customer names, delivery addresses, phone numbers, email addresses, and order details. However, sensitive data such as seed phrases, private keys, passwords, bank details, and card numbers were not compromised, as SafePal states it does not collect or store this information. An internal investigation found no evidence that attackers accessed user wallets or funds. The primary risk for affected customers is targeted social engineering attacks. Scammers may use the leaked order details to pose as customer support, offering fake refunds, urging firmware updates, or sending phishing links. SafePal is monitoring and taking down such fraudulent sites and warns users to be cautious of any communication referencing their order information. The breach originated from an authorization vulnerability in a third-party order-tracking plugin, which allowed unauthorized access to other customers' order data. The issue affected orders placed between March 2, 2025, and April 11, 2026. The company has since patched the vulnerability and strengthened its system protections. In response, SafePal is conducting a joint investigation with an independent security firm and auditing its entire order processing system. Additional measures include reducing data retention in the affected system to 90 days and notifying logistics partners. While user crypto assets remain secure, the incident highlights a recurring pattern in the industry where breaches of customer data from hardware wallet companies lead to sophisticated phishing campaigns, similar to past incidents involving Ledger and Trezor. The vulnerability underscores that security risks often lie not in the wallet's cryptography but in auxiliary web services and third-party integrations.

cryptonews.ru17h ago

Data of Almost 40,000 SafePal Hardware Wallet Users Exposed to Third Parties

cryptonews.ru17h ago

Data Leak of 50k Crypto Investors. Key Crypto News for the Morning

Data breach hits 50,000 crypto investors. Key cryptocurrency updates as of the morning of August 17. Bitcoin ($BTC) is trading near $63.5K, remaining in a tight $62-65K range since early July. Ethereum ($ETH) fluctuates above $1.9K, staying within $1.83-1.95K for two weeks. Both saw weekly losses of 3% and 2%, respectively. The total crypto market cap is around $2.17 trillion, with the Fear and Greed Index at 31 ("Fear"), indicating continued investor selling pressure. In major news, personal data breaches have impacted approximately 54,000 hardware wallet users across two incidents. Trezor reported a breach affecting 14,000 users via a delivery partner, while SafePal disclosed unauthorized access to order information for nearly 40,000 customers. Regulatory discussions continue in the US, with President Donald Trump scheduled to meet crypto industry leaders and market regulators on August 19. Meanwhile, Bitcoin ETFs saw nearly $390 million in outflows for the week ending August 14. Other notable developments include a 10% surge for Ether.fi (ETHFI) and a 13% drop for Quant (QNT) among top 100 cryptos. The Ethereum community is anticipating the "Hegotá" upgrade slated for early 2027, seen as crucial for the network's future direction amid ongoing developmental debates and weak price performance.

cryptonews.ru18h ago

Data Leak of 50k Crypto Investors. Key Crypto News for the Morning

cryptonews.ru18h ago

活动图片

Regulatory Policyright-arrow

Trading Strategiesright-arrow