7*24

Hot topic

Market

Activities

On April 10, Solayer founder @Fried_rice posted on social media that large language model (LLM) agents are increasingly relying on third-party API routers to dispatch tool invocation requests to multiple upstream providers. These routers operate as application layer proxies and can access each transmitted JSON payload in plaintext, yet currently, no provider enforces encryption integrity protection between the client and upstream models. The study tested 28 paid routers purchased from Taobao, Xianyu, and independent Shopify sites, as well as 400 free routers collected from public communities. The results revealed that 1 paid router and 8 free routers were actively injecting malicious code, 2 deployed adaptive evasion triggers, 17 interacted with AWS Canary credentials owned by the researchers, and 1 stole ETH from a private key held by the researchers. Further poisoning studies indicated that seemingly harmless routers could also be exploited: a leaked OpenAI key was used to generate 100 million GPT-5.4 tokens and over 7 Codex sessions; while a poorly configured bait produced 2 billion billable tokens, 99 credentials across 440 Codex sessions, and 401 sessions already running in autonomous YOLO mode. The research team developed an experimental proxy named Mine, capable of implementing all four types of attacks on four public proxy frameworks, and validated three client-side defense mechanisms: fault isolation policy gating, response anomaly screening, and append-only transparent logging.

[Solayer Founder Reveals Major Security Risks in LLM Supply Chain: Over 20% of Free Routers Found to Inject Malicious Code]On April 10, Solayer founder @Fried_rice posted on social media that large language model (LLM) agents are increasingly relying on third-party API routers to dispatch tool invocation requests to multiple upstream providers. These routers operate as application layer proxies and can access each transmitted JSON payload in plaintext, yet currently, no provider enforces encryption integrity protection between the client and upstream models. The study tested 28 paid routers purchased from Taobao, Xianyu, and independent Shopify sites, as well as 400 free routers collected from public communities. The results revealed that 1 paid router and 8 free routers were actively injecting malicious code, 2 deployed adaptive evasion triggers, 17 interacted with AWS Canary credentials owned by the researchers, and 1 stole ETH from a private key held by the researchers. Further poisoning studies indicated that seemingly harmless routers could also be exploited: a leaked OpenAI key was used to generate 100 million GPT-5.4 tokens and over 7 Codex sessions; while a poorly configured bait produced 2 billion billable tokens, 99 credentials across 440 Codex sessions, and 401 sessions already running in autonomous YOLO mode. The research team developed an experimental proxy named Mine, capable of implementing all four types of attacks on four public proxy frameworks, and validated three client-side defense mechanisms: fault isolation policy gating, response anomaly screening, and append-only transparent logging.

Solayer Founder Reveals Major Security Risks in LLM Supply Chain: Over 20% of Free Routers Found to Inject Malicious Code

On April 10, GoPlus tweeted that the EngageLab SDK, widely used for Android push notifications, has been found to have a serious security vulnerability affecting over 50 million Android users, of which approximately 30 million are cryptocurrency wallet users. Attackers first install a malicious app disguised as a normal application on the same device, then send malicious intents to legitimate apps that integrate the EngageLab SDK, causing the latter to perform unauthorized actions, including stealing user privacy, cryptocurrency wallet private keys, and login credentials. GoPlus advises developers and app vendors to immediately upgrade the EngageLab SDK to the official patched version 4.5.5 or higher. Users of cryptocurrency wallets and financial apps should promptly update their relevant applications.

[GoPlus: Serious Security Vulnerability Found in EngageLab SDK, Users at Risk of Theft]On April 10, GoPlus tweeted that the EngageLab SDK, widely used for Android push notifications, has been found to have a serious security vulnerability affecting over 50 million Android users, of which approximately 30 million are cryptocurrency wallet users. Attackers first install a malicious app disguised as a normal application on the same device, then send malicious intents to legitimate apps that integrate the EngageLab SDK, causing the latter to perform unauthorized actions, including stealing user privacy, cryptocurrency wallet private keys, and login credentials. GoPlus advises developers and app vendors to immediately upgrade the EngageLab SDK to the official patched version 4.5.5 or higher. Users of cryptocurrency wallets and financial apps should promptly update their relevant applications.

GoPlus: Serious Security Vulnerability Found in EngageLab SDK, Users at Risk of Theft

On April 10, the Hong Kong Monetary Authority (HKMA) will announce the first batch of stablecoin licenses at 5 PM. Following this, licensed stablecoin issuers will meet with the media. Previously, the HKMA completed the final review of the first batch of applications in mid-March 2026, and is now in the official public announcement preparation stage. The HKMA received a total of 36 applications and plans to issue 2 to 3 licenses in the first batch, with strict regulatory standards. In early February this year, HKMA Chief Executive Eddie Yue stated that they aimed to issue the first stablecoin issuer licenses in Hong Kong by March, while emphasizing, 'The number of licenses issued in the first batch will definitely be limited, with a focus on prudence.' (Daily Economic News)

[Hong Kong's First Batch of Stablecoin Licenses to Be Announced This Afternoon]On April 10, the Hong Kong Monetary Authority (HKMA) will announce the first batch of stablecoin licenses at 5 PM. Following this, licensed stablecoin issuers will meet with the media. Previously, the HKMA completed the final review of the first batch of applications in mid-March 2026, and is now in the official public announcement preparation stage. The HKMA received a total of 36 applications and plans to issue 2 to 3 licenses in the first batch, with strict regulatory standards. In early February this year, HKMA Chief Executive Eddie Yue stated that they aimed to issue the first stablecoin issuer licenses in Hong Kong by March, while emphasizing, 'The number of licenses issued in the first batch will definitely be limited, with a focus on prudence.' (Daily Economic News)

Hong Kong's First Batch of Stablecoin Licenses to Be Announced This Afternoon

Bitcoin Fear and Greed Index is 16. Extreme Fear.
Current Price: $72121.25.

[Bitcoin Fear and Greed Index is 16]Bitcoin Fear and Greed Index is 16. Extreme Fear.
Current Price: $72121.25.

Bitcoin Fear and Greed Index is 16

On April 10, Reuters reported that sources indicated Middle Eastern crude oil producers have requested Asian refiners to submit shipping plans for April and May in preparation for the eventual resumption of navigation through the Strait of Hormuz. However, there are currently no signs that Tehran is lifting its near-total blockade of this critical waterway, which has previously led to a sharp rise in energy prices. Two sources stated that Saudi Aramco, the world's largest exporter, has asked customers to submit shipping requests for May shipments from the ports of Yanbu and Ras Tanura. One of the sources mentioned that this will depend on the restoration of exports from the eastern Ras Tanura port, which requires vessels to pass through the Strait of Hormuz.

[Middle Eastern Oil Traders Begin Restoring Shipping Plans for the Strait of Hormuz, Ceasefire Agreement Remains Crucial]On April 10, Reuters reported that sources indicated Middle Eastern crude oil producers have requested Asian refiners to submit shipping plans for April and May in preparation for the eventual resumption of navigation through the Strait of Hormuz. However, there are currently no signs that Tehran is lifting its near-total blockade of this critical waterway, which has previously led to a sharp rise in energy prices. Two sources stated that Saudi Aramco, the world's largest exporter, has asked customers to submit shipping requests for May shipments from the ports of Yanbu and Ras Tanura. One of the sources mentioned that this will depend on the restoration of exports from the eastern Ras Tanura port, which requires vessels to pass through the Strait of Hormuz.

Middle Eastern Oil Traders Begin Restoring Shipping Plans for the Strait of Hormuz, Ceasefire Agreement Remains Crucial

On April 10, 2026, BlockBeats announced the March trading platform rankings. The statistics show that in March 2026, the spot trading volume of mainstream centralized exchanges (CEX) decreased by 21.35% compared to February 2026, while perpetual contract trading volume fell by 6.14%. During the same period, the perpetual contract trading volume of mainstream perpetual decentralized exchanges (Perp DEX) decreased by 9.35%, although website traffic increased by 26.58%. For more details, please refer to the report titled 'March Trading Platform Rankings: Overall Market Shrinks, Spot Trading Volume Rarely Drops Over 20%.'

[BlockBeats Releases March Trading Platform Rankings: Overall Market Shrinks, Spot Trading Volume Rarely Drops Over 20%]On April 10, 2026, BlockBeats announced the March trading platform rankings. The statistics show that in March 2026, the spot trading volume of mainstream centralized exchanges (CEX) decreased by 21.35% compared to February 2026, while perpetual contract trading volume fell by 6.14%. During the same period, the perpetual contract trading volume of mainstream perpetual decentralized exchanges (Perp DEX) decreased by 9.35%, although website traffic increased by 26.58%. For more details, please refer to the report titled 'March Trading Platform Rankings: Overall Market Shrinks, Spot Trading Volume Rarely Drops Over 20%.'

BlockBeats Releases March Trading Platform Rankings: Overall Market Shrinks, Spot Trading Volume Rarely Drops Over 20%

On April 10, Hong Kong stocks related to stablecoins continued to strengthen in the afternoon, with Guotai Junan International (01788.HK) rising over 40%, Lion Rock Holdings (02562.HK) increasing over 17%, and Yunfeng Financial (00376.HK) climbing nearly 12%. Both China Everbright Holdings (00165.HK) and Huaxing Capital Holdings (01911.HK) saw increases of over 8%. (Jinshi)

[Hong Kong Stocks Related to Stablecoins Continue to Strengthen, Guotai Junan International (01788.HK) Rises Over 40%]On April 10, Hong Kong stocks related to stablecoins continued to strengthen in the afternoon, with Guotai Junan International (01788.HK) rising over 40%, Lion Rock Holdings (02562.HK) increasing over 17%, and Yunfeng Financial (00376.HK) climbing nearly 12%. Both China Everbright Holdings (00165.HK) and Huaxing Capital Holdings (01911.HK) saw increases of over 8%. (Jinshi)

Hong Kong Stocks Related to Stablecoins Continue to Strengthen, Guotai Junan International (01788.HK) Rises Over 40%

On April 10, Alibaba officially confirmed that the video generation model HappyHorse-1.0 is its self-developed product. This model was created by the original Future Life Lab team from Taotian Group, which has been incorporated into the newly established Alibaba Token Hub (ATH) business group under the 'AI Innovation Division' following Alibaba's latest organizational restructuring. In an anonymous vote on the third-party evaluation platform Artificial Analysis, HappyHorse-1.0 significantly outperformed ByteDance's Seedance 2.0 and Kuaishou's Kling 3.0 in pure video generation tasks, while its performance in audio-visual generation was comparable to that of Seedance 2.0. According to sources close to Alibaba, HappyHorse-1.0 is just one of the multimodal models developed by this team, and another distinct multimodal model will be launched by Alibaba soon. Currently, HappyHorse-1.0 is not open-sourced, aligning with Alibaba's recent shift towards a closed-source model strategy—since the end of March, several new models released by Alibaba have not been open-sourced. The intensive push for multimodal models comes in the wake of the unexpected strong performance of ByteDance's Seedance 2.0 during the 2026 Spring Festival, which has raised concerns within Alibaba. Additionally, multimodal generation is expected to significantly increase token consumption, thereby impacting the market share of MaaS (Model as a Service)—according to IDC data, in the first half of 2025, Volcano Engine held a 49.2% market share, while Alibaba Cloud accounted for only 27%.

[Alibaba Claims HappyHorse-1.0, Set to Release Another Multimodal Model]On April 10, Alibaba officially confirmed that the video generation model HappyHorse-1.0 is its self-developed product. This model was created by the original Future Life Lab team from Taotian Group, which has been incorporated into the newly established Alibaba Token Hub (ATH) business group under the 'AI Innovation Division' following Alibaba's latest organizational restructuring. In an anonymous vote on the third-party evaluation platform Artificial Analysis, HappyHorse-1.0 significantly outperformed ByteDance's Seedance 2.0 and Kuaishou's Kling 3.0 in pure video generation tasks, while its performance in audio-visual generation was comparable to that of Seedance 2.0. According to sources close to Alibaba, HappyHorse-1.0 is just one of the multimodal models developed by this team, and another distinct multimodal model will be launched by Alibaba soon. Currently, HappyHorse-1.0 is not open-sourced, aligning with Alibaba's recent shift towards a closed-source model strategy—since the end of March, several new models released by Alibaba have not been open-sourced. The intensive push for multimodal models comes in the wake of the unexpected strong performance of ByteDance's Seedance 2.0 during the 2026 Spring Festival, which has raised concerns within Alibaba. Additionally, multimodal generation is expected to significantly increase token consumption, thereby impacting the market share of MaaS (Model as a Service)—according to IDC data, in the first half of 2025, Volcano Engine held a 49.2% market share, while Alibaba Cloud accounted for only 27%.

Alibaba Claims HappyHorse-1.0, Set to Release Another Multimodal Model

On April 10, the Hong Kong Monetary Authority (HKMA) will announce the first batch of stablecoin licenses at 5 PM. Following this, licensed stablecoin issuers will meet with the media. Previously, the HKMA completed the final review of the first batch of applications in mid-March 2026 and is now in the official public announcement preparation stage. The HKMA received a total of 36 applications and plans to issue 2 to 3 licenses in this first batch, with strict regulatory standards. In early February this year, HKMA Chief Executive Eddie Yue stated that they aimed to issue the first stablecoin issuer licenses in Hong Kong in March, emphasizing that 'the number of licenses issued in the first batch will definitely be limited, with a focus on prudence.' (Daily Economic News)

[Hong Kong's First Batch of Stablecoin Licenses to be Announced Today Afternoon]On April 10, the Hong Kong Monetary Authority (HKMA) will announce the first batch of stablecoin licenses at 5 PM. Following this, licensed stablecoin issuers will meet with the media. Previously, the HKMA completed the final review of the first batch of applications in mid-March 2026 and is now in the official public announcement preparation stage. The HKMA received a total of 36 applications and plans to issue 2 to 3 licenses in this first batch, with strict regulatory standards. In early February this year, HKMA Chief Executive Eddie Yue stated that they aimed to issue the first stablecoin issuer licenses in Hong Kong in March, emphasizing that 'the number of licenses issued in the first batch will definitely be limited, with a focus on prudence.' (Daily Economic News)

Hong Kong's First Batch of Stablecoin Licenses to be Announced Today Afternoon

According to the official Twitter message of CertiK, @DojocoinX is promoting a false airdrop. Please do not interact with hxxps://dojomatrix.top/. The website is currently linked to a known wallet consumer.

[Security Team: DojocoinX is promoting fake airdrops]According to the official Twitter message of CertiK, @DojocoinX is promoting a false airdrop. Please do not interact with hxxps://dojomatrix.top/. The website is currently linked to a known wallet consumer.

Security Team: DojocoinX is promoting fake airdrops

Why Robert Kiyosaki’s bullish Bitcoin thesis faces a crucial test this week

Bitcoin Whales Go Shopping: 10,000 BTC Accumulated In 3 Days

Michael Saylor Signals Return to Weekly Bitcoin Buying Strategy

Bitcoin Signals Potential Bullish Reversal as Macro Tensions and Technical Indicators Align

Why Are GPU Prices Spiraling Out of Control?

70-Page Confidential Document's First Allegation: 'Lying', Altman Told the Board 'I Can't Change My Character'

Solana RWA holders jump 440% YoY – Can it bridge gap to Ethereum’s XAUT?

U.S. court backs Kalshi, reinforcing CFTC’s push for federal control over prediction markets

Chainlink sees 480M social engagements: What it means for LINK price next

Bitcoin Hashrate Remains Concentrated As US, Russia, And China Hold 65% Share

Article

AI-Native Protocol PINDex (PIN) Launches on Ju.com with a Total Market Cap Exceeding $6.5 Billion

Security Team: DojocoinX is promoting fake airdrops

Descargo de responsabilidad：El contenido anterior no representa las posiciones de HTX.，HTX no ofrece ninguna recomendación de trading.。

Todos los comentarios0Lo más recientePopular

Temas populares