7*24

Hot topic

Market

Activities

On April 20, according to official news, Tether has resumed transfers of the cross-chain US dollar stablecoin USDT0. The infrastructure continues to operate as designed, system integrity remains unaffected, and there are no risk exposures. All pending transactions submitted before the suspension have now been safely settled.

[USDT0 Transfers Resumed, All Pending Transactions Settled]On April 20, according to official news, Tether has resumed transfers of the cross-chain US dollar stablecoin USDT0. The infrastructure continues to operate as designed, system integrity remains unaffected, and there are no risk exposures. All pending transactions submitted before the suspension have now been safely settled.

USDT0 Transfers Resumed, All Pending Transactions Settled

On April 20, news emerged that according to SlowMist founder Yu Xian (@evilcos), the core of the recent $290 million theft from KelpDAO was a targeted poisoning attack on the downstream RPC infrastructure of LayerZero DVN (Decentralized Validator Network). The specific steps of the attack were as follows: first, the attacker obtained a list of RPC nodes used by LayerZero DVN, then compromised two independent clusters and replaced the op-geth binary files; using selective deception techniques, they returned forged malicious payloads only to DVN while providing real data to other IPs; simultaneously, they launched DDoS attacks on the uncompromised RPC nodes, forcing DVN to failover to the poisoned nodes, where after completing the forged message verification, the malicious binary self-destructed and cleared logs. This ultimately led to LayerZero DVN issuing validations for transactions that 'never occurred'.

[SlowMist Analysis: KelpDAO Loses $290 Million to Targeted Poisoning Attack]On April 20, news emerged that according to SlowMist founder Yu Xian (@evilcos), the core of the recent $290 million theft from KelpDAO was a targeted poisoning attack on the downstream RPC infrastructure of LayerZero DVN (Decentralized Validator Network). The specific steps of the attack were as follows: first, the attacker obtained a list of RPC nodes used by LayerZero DVN, then compromised two independent clusters and replaced the op-geth binary files; using selective deception techniques, they returned forged malicious payloads only to DVN while providing real data to other IPs; simultaneously, they launched DDoS attacks on the uncompromised RPC nodes, forcing DVN to failover to the poisoned nodes, where after completing the forged message verification, the malicious binary self-destructed and cleared logs. This ultimately led to LayerZero DVN issuing validations for transactions that 'never occurred'.

SlowMist Analysis: KelpDAO Loses $290 Million to Targeted Poisoning Attack

According to monitoring by Beating, on April 17, Toby Neugebauer, CEO of the American AI data center company Fermi America, suddenly resigned, causing the stock price to decline again in after-hours trading, having dropped 75% over the past six months. Fermi America was co-founded by Rick Perry, the former Secretary of Energy during Trump's first term, and went public in October last year. The company is developing what is claimed to be the world's largest AI data center project in the Texas Panhandle, officially named the 'President Donald Trump Advanced Energy and Intelligence Campus.' The project covers an area roughly half the size of Manhattan, with a planned capacity of 17 gigawatts (GW), equivalent to three times the electricity consumption of New York City, primarily relying on local natural gas, nuclear power, and solar energy. The project is currently stalled at two points: there are no publicly confirmed anchor tenants (typically large-scale cloud providers known as hyperscalers), and the cooling system design, which should be led by tenants, cannot be finalized without them. Neugebauer acknowledged during a March 30 earnings call that the supply chain is a 'bigger bottleneck than anticipated,' stating to Axios, 'I may have misunderstood the supply chain; this counts as a failure.' A report from independent market intelligence firm Cleanview estimates that even if anchor tenants are signed this month, the first buildings will not be operational until May 2027, about a year later than originally planned. Fermi has recently confirmed in SEC filings that it cannot meet its original target of launching 1.1 GW by the end of 2026. After a tenant withdrew in December last year, investors have filed a class action lawsuit over this issue. Internally, there are also changes; co-founder Griffin Perry (son of Rick Perry) disclosed on April 15 that he reduced his holdings by about 11 million shares, equivalent to 15% of his stake. Politico reported in March that Neugebauer had a conflict with U.S. Commerce Secretary Howard Lutnick during a meeting.

[Fermi AI Data Center Project Named After Trump Stalls, CEO Resigns, First Phase Delayed by a Year]According to monitoring by Beating, on April 17, Toby Neugebauer, CEO of the American AI data center company Fermi America, suddenly resigned, causing the stock price to decline again in after-hours trading, having dropped 75% over the past six months. Fermi America was co-founded by Rick Perry, the former Secretary of Energy during Trump's first term, and went public in October last year. The company is developing what is claimed to be the world's largest AI data center project in the Texas Panhandle, officially named the 'President Donald Trump Advanced Energy and Intelligence Campus.' The project covers an area roughly half the size of Manhattan, with a planned capacity of 17 gigawatts (GW), equivalent to three times the electricity consumption of New York City, primarily relying on local natural gas, nuclear power, and solar energy. The project is currently stalled at two points: there are no publicly confirmed anchor tenants (typically large-scale cloud providers known as hyperscalers), and the cooling system design, which should be led by tenants, cannot be finalized without them. Neugebauer acknowledged during a March 30 earnings call that the supply chain is a 'bigger bottleneck than anticipated,' stating to Axios, 'I may have misunderstood the supply chain; this counts as a failure.' A report from independent market intelligence firm Cleanview estimates that even if anchor tenants are signed this month, the first buildings will not be operational until May 2027, about a year later than originally planned. Fermi has recently confirmed in SEC filings that it cannot meet its original target of launching 1.1 GW by the end of 2026. After a tenant withdrew in December last year, investors have filed a class action lawsuit over this issue. Internally, there are also changes; co-founder Griffin Perry (son of Rick Perry) disclosed on April 15 that he reduced his holdings by about 11 million shares, equivalent to 15% of his stake. Politico reported in March that Neugebauer had a conflict with U.S. Commerce Secretary Howard Lutnick during a meeting.

Fermi AI Data Center Project Named After Trump Stalls, CEO Resigns, First Phase Delayed by a Year

On April 20, according to official news, Tether has resumed transfers of the cross-chain US dollar stablecoin USDT0. The infrastructure continues to operate as designed, and the system's integrity has not been affected, with no risk exposure. All in-transit transactions submitted before the suspension have now been safely settled.

[USDT0 Transfers Resumed, All In-Transit Transactions Settled]On April 20, according to official news, Tether has resumed transfers of the cross-chain US dollar stablecoin USDT0. The infrastructure continues to operate as designed, and the system's integrity has not been affected, with no risk exposure. All in-transit transactions submitted before the suspension have now been safely settled.

USDT0 Transfers Resumed, All In-Transit Transactions Settled

On April 20, the McKinsey Global Institute stated that artificial intelligence will not make human skills obsolete. However, as the level of automation increases, negotiation, problem-solving, and leadership will become more important than ever.

[McKinsey Global Institute: Artificial Intelligence Will Not Render Human Skills Obsolete]On April 20, the McKinsey Global Institute stated that artificial intelligence will not make human skills obsolete. However, as the level of automation increases, negotiation, problem-solving, and leadership will become more important than ever.

McKinsey Global Institute: Artificial Intelligence Will Not Render Human Skills Obsolete

According to monitoring by Dongcha Beating, last Friday a developer with the ID BugstoOai published a security report in the official OpenAI developer community, claiming to have discovered a logical vulnerability in the subscription verification of the iOS version of ChatGPT. The report states that OpenAI's backend checks the validity of Apple Pay receipt signatures and the validity of the OpenAI auth token in requests, but does not verify whether the Apple ID of the purchase receipt matches the OpenAI account receiving Plus. The current authorization logic is summarized as 'valid receipt + valid token = activate Plus', likening it to a store clerk only checking the authenticity of a receipt without verifying the identity of the holder. The affected application is the ChatGPT iOS app (the report author noted testing on version v1.2026.xx) and the backend interface '/backend-api/subscription/upgrade'. The report also provides mitigation suggestions: bind receipts to the purchaser's identity, enforce single-use for receipts, associate Apple ID with OpenAI account fingerprints, and monitor for the same transaction_id appearing across accounts. The English post only outlines high-level steps, stating that complete reproduction details are not disclosed according to the principle of 'responsible disclosure'. At the end of the post, a Chinese article is referenced as the original text (linux.do/t/topic/1981747), while the Chinese version directly states the exploitation path: using a Turkish Apple ID to purchase Plus (monthly fee of 499 lira), intercepting the receipts sent from the ChatGPT app to OpenAI using local proxies like mitmproxy, and then repeatedly using that receipt to call the subscription interface to activate Plus for different accounts; the author claims that the source of low-priced ChatGPT Plus recharges on Xianyu is this path. OpenAI has yet to respond to this report on the forum or through other channels. Some users in the discussion area also questioned the content, suggesting it may have been generated by AI and lacks reproducible evidence. The report does not provide a complete proof of concept, nor has it been independently verified by third-party security researchers, and it can currently only be considered an unverified disclosure.

[Developer Claims iOS Receipts Can Be Reused to Activate ChatGPT Plus Repeatedly, Charging Method Discussed on OpenAI Forum]According to monitoring by Dongcha Beating, last Friday a developer with the ID BugstoOai published a security report in the official OpenAI developer community, claiming to have discovered a logical vulnerability in the subscription verification of the iOS version of ChatGPT. The report states that OpenAI's backend checks the validity of Apple Pay receipt signatures and the validity of the OpenAI auth token in requests, but does not verify whether the Apple ID of the purchase receipt matches the OpenAI account receiving Plus. The current authorization logic is summarized as 'valid receipt + valid token = activate Plus', likening it to a store clerk only checking the authenticity of a receipt without verifying the identity of the holder. The affected application is the ChatGPT iOS app (the report author noted testing on version v1.2026.xx) and the backend interface '/backend-api/subscription/upgrade'. The report also provides mitigation suggestions: bind receipts to the purchaser's identity, enforce single-use for receipts, associate Apple ID with OpenAI account fingerprints, and monitor for the same transaction_id appearing across accounts. The English post only outlines high-level steps, stating that complete reproduction details are not disclosed according to the principle of 'responsible disclosure'. At the end of the post, a Chinese article is referenced as the original text (linux.do/t/topic/1981747), while the Chinese version directly states the exploitation path: using a Turkish Apple ID to purchase Plus (monthly fee of 499 lira), intercepting the receipts sent from the ChatGPT app to OpenAI using local proxies like mitmproxy, and then repeatedly using that receipt to call the subscription interface to activate Plus for different accounts; the author claims that the source of low-priced ChatGPT Plus recharges on Xianyu is this path. OpenAI has yet to respond to this report on the forum or through other channels. Some users in the discussion area also questioned the content, suggesting it may have been generated by AI and lacks reproducible evidence. The report does not provide a complete proof of concept, nor has it been independently verified by third-party security researchers, and it can currently only be considered an unverified disclosure.

Developer Claims iOS Receipts Can Be Reused to Activate ChatGPT Plus Repeatedly, Charging Method Discussed on OpenAI Forum

On April 20, LayerZero Labs released a statement regarding an attack incident, stating that on April 18, KelpDAO was attacked, resulting in a loss of approximately $290 million. Preliminary assessments suggest that the attackers are linked to the North Korean group Lazarus Group, specifically the TraderTraitor faction. The attack was executed by poisoning the downstream RPC infrastructure relied upon by its decentralized validation network (DVN). The attackers controlled certain RPC nodes and conducted a DDoS attack to lure the system into switching to malicious nodes, thereby fabricating cross-chain transactions. All affected RPC nodes have been taken offline and replaced, and the DVN has resumed operations. LayerZero emphasized that this incident was limited to the rsETH application configuration of KelpDAO and did not impact other assets or applications. The reason for this is that KelpDAO was using a single DVN (1/1) architecture at the time and did not implement the multi-DVN redundancy mechanism that is recommended by the official guidelines, resulting in a lack of independent validation nodes to identify forged messages. LayerZero pointed out that there were no vulnerabilities in its protocol, and applications with multi-DVN configurations were not affected, indicating that there is no contagious risk within the system.

[LayerZero Reports KelpDAO Theft Incident: Confirms Only rsETH Configuration Affected]On April 20, LayerZero Labs released a statement regarding an attack incident, stating that on April 18, KelpDAO was attacked, resulting in a loss of approximately $290 million. Preliminary assessments suggest that the attackers are linked to the North Korean group Lazarus Group, specifically the TraderTraitor faction. The attack was executed by poisoning the downstream RPC infrastructure relied upon by its decentralized validation network (DVN). The attackers controlled certain RPC nodes and conducted a DDoS attack to lure the system into switching to malicious nodes, thereby fabricating cross-chain transactions. All affected RPC nodes have been taken offline and replaced, and the DVN has resumed operations. LayerZero emphasized that this incident was limited to the rsETH application configuration of KelpDAO and did not impact other assets or applications. The reason for this is that KelpDAO was using a single DVN (1/1) architecture at the time and did not implement the multi-DVN redundancy mechanism that is recommended by the official guidelines, resulting in a lack of independent validation nodes to identify forged messages. LayerZero pointed out that there were no vulnerabilities in its protocol, and applications with multi-DVN configurations were not affected, indicating that there is no contagious risk within the system.

LayerZero Reports KelpDAO Theft Incident: Confirms Only rsETH Configuration Affected

On April 20, Lu Liping, a professor and doctoral supervisor at the School of Finance and Economics of Renmin University of China, stated that the long-term hedging function of gold has not been lost. However, there are some short-term fluctuations. For instance, following the US-Iran conflict, oil prices surged, leading to an increase in inflation expectations. This rise in inflation expectations has resulted in the Federal Reserve not lowering interest rates, or potentially raising them, which in turn increases the holding costs of gold. Nevertheless, in the long term, the demand for gold as a hedge remains very strong. (China Business Journal)

[Lu Liping: The Long-term Hedging Function of Gold Remains Intact, Short-term Volatility Due to Various Factors]On April 20, Lu Liping, a professor and doctoral supervisor at the School of Finance and Economics of Renmin University of China, stated that the long-term hedging function of gold has not been lost. However, there are some short-term fluctuations. For instance, following the US-Iran conflict, oil prices surged, leading to an increase in inflation expectations. This rise in inflation expectations has resulted in the Federal Reserve not lowering interest rates, or potentially raising them, which in turn increases the holding costs of gold. Nevertheless, in the long term, the demand for gold as a hedge remains very strong. (China Business Journal)

Lu Liping: The Long-term Hedging Function of Gold Remains Intact, Short-term Volatility Due to Various Factors

On April 20, analysts stated that the shipping through the Strait of Hormuz has been intermittent, highlighting the uncertain status of this globally significant oil and gas chokepoint. However, one thing is clear: even if the fighting ceases, it may take months—possibly even years—for oil flow through this narrow waterway to return to pre-war levels. Analysts believe that the pace of recovery depends not only on diplomatic progress between Washington and Tehran but also on logistics conditions, the availability of tanker insurance, freight rates, and whether shipowners are willing to take the risk of passage. It is expected that the complete rebalancing of the global tanker fleet and the restoration of Gulf loading operations to pre-war rhythms will be uneven, potentially requiring at least eight to twelve weeks even under favorable conditions.

[Analysts: Reopening the Strait of Hormuz is Feasible, but Full Restoration of Oil Flow May Take Years]On April 20, analysts stated that the shipping through the Strait of Hormuz has been intermittent, highlighting the uncertain status of this globally significant oil and gas chokepoint. However, one thing is clear: even if the fighting ceases, it may take months—possibly even years—for oil flow through this narrow waterway to return to pre-war levels. Analysts believe that the pace of recovery depends not only on diplomatic progress between Washington and Tehran but also on logistics conditions, the availability of tanker insurance, freight rates, and whether shipowners are willing to take the risk of passage. It is expected that the complete rebalancing of the global tanker fleet and the restoration of Gulf loading operations to pre-war rhythms will be uneven, potentially requiring at least eight to twelve weeks even under favorable conditions.

Analysts: Reopening the Strait of Hormuz is Feasible, but Full Restoration of Oil Flow May Take Years

The number of active addresses on the XRP blockchain has recently reached historical levels, according to on-chain data from Santiment. The "active addresses" metric tracks the number of unique addresses participating in transaction activity on the network, indicating the degree of traffic the network is experiencing. High values suggest a large number of addresses are involved in transfers, indicating market activity, while low values suggest low interest in the cryptocurrency. The recent surge in active addresses may be a bullish sign for XRP, as a similar spike in March preceded a 45% rally in the coin's price.

[XRP Daily Active Addresses Has Observed An Uplift Recently]The number of active addresses on the XRP blockchain has recently reached historical levels, according to on-chain data from Santiment. The "active addresses" metric tracks the number of unique addresses participating in transaction activity on the network, indicating the degree of traffic the network is experiencing. High values suggest a large number of addresses are involved in transfers, indicating market activity, while low values suggest low interest in the cryptocurrency. The recent surge in active addresses may be a bullish sign for XRP, as a similar spike in March preceded a 45% rally in the coin's price.

XRP Daily Active Addresses Has Observed An Uplift Recently

Bitcoin Created By The CIA? Chinese Professor Jiang Xueqin Makes Bold Claim

BIT Research: Five Signals Flash Simultaneously, Has the Bitcoin Bear Market Ended?

Bitcoin Recovery Fails To Lift Market Sentiment From Extreme Fear

Crypto And Financial Industry Giants Reveal What X Money Launch Means

Analyst Exposes Bitcoin Market Maker Buy Strategy, Shows What Happens When Accumulation Ends

Bitcoin Mining Network Collapsing Into AI At Record Pace, Analyst Warns

Conversation with Bitwise Advisor: From K-Shaped Economy to AI Taking Jobs, How Can Bitcoin Save the Younger Generation?

Analyst Reveals The Chances Of Bitcoin Price Crashing Again

$20M Crypto Scam Lands Texas Man 23-Year Prison Sentence

Bitcoin Miners Selling Nears Exhaustion – What Comes Next

Article

Analysis: Divergence Between Bitcoin's Price Action and Realized Profit Indicates Possible Peak in Rebound

XRP Daily Active Addresses Has Observed An Uplift Recently

Descargo de responsabilidad：El contenido anterior no representa las posiciones de HTX.，HTX no ofrece ninguna recomendación de trading.。

Todos los comentarios0Lo más recientePopular

Temas populares