7*24

Hot topic

Market

Activities

On March 31, according to Guoshi Direct, it was reported by 360 Digital Security Group that its independently developed 360 multi-agent collaborative vulnerability mining system has discovered a high-risk vulnerability in the OpenClaw platform—specifically, a local file exposure vulnerability due to MEDIA protocol prompt injection bypassing tool permissions. This vulnerability has been officially confirmed by the National Information Security Vulnerability Database (CNNVD) and affects over 50 countries and regions worldwide, with more than 170,000 publicly accessible OpenClaw instances facing security risks. The core risk of this vulnerability lies in the fact that the MEDIA protocol operates at the output post-processing layer, allowing it to completely bypass platform tool policy controls. Even if agents disable all tool calls, attackers can initiate attacks solely based on basic member permissions in group chats, directly stealing sensitive information from servers, which could easily lead to subsequent cyberattacks.

[360 Smart Agent Discovers High-Risk Vulnerability in OpenClaw, Potentially Affecting 170,000 Instances Worldwide]On March 31, according to Guoshi Direct, it was reported by 360 Digital Security Group that its independently developed 360 multi-agent collaborative vulnerability mining system has discovered a high-risk vulnerability in the OpenClaw platform—specifically, a local file exposure vulnerability due to MEDIA protocol prompt injection bypassing tool permissions. This vulnerability has been officially confirmed by the National Information Security Vulnerability Database (CNNVD) and affects over 50 countries and regions worldwide, with more than 170,000 publicly accessible OpenClaw instances facing security risks. The core risk of this vulnerability lies in the fact that the MEDIA protocol operates at the output post-processing layer, allowing it to completely bypass platform tool policy controls. Even if agents disable all tool calls, attackers can initiate attacks solely based on basic member permissions in group chats, directly stealing sensitive information from servers, which could easily lead to subsequent cyberattacks.

360 Smart Agent Discovers High-Risk Vulnerability in OpenClaw, Potentially Affecting 170,000 Instances Worldwide

According to monitoring by 1M AI News, the supply chain security company Socket's research team disclosed today that the widely used JavaScript HTTP request library Axios has suffered a supply chain attack. Two newly released versions (v1.14.1 and v0.30.4) contain malicious dependencies, and these versions do not appear in the official Axios GitHub Release history, deviating from the project's normal release process. Both versions introduced the malicious package `plain-crypto-js@4.2.1`. This malicious package was released on March 30 at 23:59:12 UTC, and Socket's automated detection flagged it approximately six minutes later. Socket noted that this timing closely aligns with the release of the new Axios versions, indicating that the malicious dependencies were coordinated with the Axios release. The npm account associated with the malicious package is `jasonsaayman`, raising concerns about 'unauthorized releases or account compromises.' Socket recommends that developers immediately check their project dependencies and lockfiles for `axios@1.14.1`, `axios@0.30.4`, or `plain-crypto-js@4.2.1`, and if found, to roll back to a known safe version. The incident is still under investigation.

[Axios Faces Supply Chain Attack: Two New Versions Introduce Malicious Dependencies, Immediate Rollback Recommended]According to monitoring by 1M AI News, the supply chain security company Socket's research team disclosed today that the widely used JavaScript HTTP request library Axios has suffered a supply chain attack. Two newly released versions (v1.14.1 and v0.30.4) contain malicious dependencies, and these versions do not appear in the official Axios GitHub Release history, deviating from the project's normal release process. Both versions introduced the malicious package `plain-crypto-js@4.2.1`. This malicious package was released on March 30 at 23:59:12 UTC, and Socket's automated detection flagged it approximately six minutes later. Socket noted that this timing closely aligns with the release of the new Axios versions, indicating that the malicious dependencies were coordinated with the Axios release. The npm account associated with the malicious package is `jasonsaayman`, raising concerns about 'unauthorized releases or account compromises.' Socket recommends that developers immediately check their project dependencies and lockfiles for `axios@1.14.1`, `axios@0.30.4`, or `plain-crypto-js@4.2.1`, and if found, to roll back to a known safe version. The incident is still under investigation.

Axios Faces Supply Chain Attack: Two New Versions Introduce Malicious Dependencies, Immediate Rollback Recommended

On March 31, according to Nikkei Asia, Mitsubishi Corporation plans to connect to JPMorgan's blockchain payment platform soon, becoming the first Japanese company to use this service. The service supports instant international fund transfers, and JPMorgan is leveraging this opportunity to promote its blockchain payment products to more Japanese companies. In this context, Japanese financial institutions are accelerating their strategies regarding blockchain and stablecoins, with major banks like MUFG and Mizuho testing yen-backed stablecoins. Additionally, Japanese regulators are considering approving cryptocurrency ETFs as early as 2028.

[Mitsubishi Corporation to Use JPMorgan's Blockchain Service for Instant Cross-Border Remittances]On March 31, according to Nikkei Asia, Mitsubishi Corporation plans to connect to JPMorgan's blockchain payment platform soon, becoming the first Japanese company to use this service. The service supports instant international fund transfers, and JPMorgan is leveraging this opportunity to promote its blockchain payment products to more Japanese companies. In this context, Japanese financial institutions are accelerating their strategies regarding blockchain and stablecoins, with major banks like MUFG and Mizuho testing yen-backed stablecoins. Additionally, Japanese regulators are considering approving cryptocurrency ETFs as early as 2028.

Mitsubishi Corporation to Use JPMorgan's Blockchain Service for Instant Cross-Border Remittances

On March 31, Reuters reported that Nasdaq announced a series of new regulations, including steps to expedite the entry of newly listed large companies into its Nasdaq 100 Index. This move aims to reduce the time delay for companies to be included in this core stock benchmark index. As high-valued tech companies like SpaceX and OpenAI prepare to go public, the trading platform operator is attempting to accelerate the IPO process in response to concerns over the rapid decline in the number of publicly listed companies in the U.S. Meanwhile, heavy disclosure requirements and listing costs have also diminished the attractiveness of entering the public market for businesses. As a result, some large startups, such as Stripe and Databricks, are choosing to remain private for longer than before.

[Nasdaq Introduces 'Fast Track' Mechanism for Newly Listed Companies to Accelerate Entry into Benchmark Index]On March 31, Reuters reported that Nasdaq announced a series of new regulations, including steps to expedite the entry of newly listed large companies into its Nasdaq 100 Index. This move aims to reduce the time delay for companies to be included in this core stock benchmark index. As high-valued tech companies like SpaceX and OpenAI prepare to go public, the trading platform operator is attempting to accelerate the IPO process in response to concerns over the rapid decline in the number of publicly listed companies in the U.S. Meanwhile, heavy disclosure requirements and listing costs have also diminished the attractiveness of entering the public market for businesses. As a result, some large startups, such as Stripe and Databricks, are choosing to remain private for longer than before.

Nasdaq Introduces 'Fast Track' Mechanism for Newly Listed Companies to Accelerate Entry into Benchmark Index

According to monitoring by 1M AI News, Musk stated on X that the future of AI primarily lies in video understanding and generation, "because photons are the highest bandwidth communication form to date, these are key tools on the path to AGI," and mentioned that Grok Imagine, the image generation tool under xAI, "is profitable, not a money-losing project." This statement comes in the context of OpenAI's announcement last week to shut down its AI video platform Sora. According to reports from The Wall Street Journal and several media outlets, Sora has generated approximately $2.1 million in revenue since its launch in September last year, with daily operating losses reported to be around $1 million. OpenAI also terminated its $1 billion partnership with Disney. Musk did not disclose specific revenue figures for Grok Imagine. Previously, on March 25, he stated, "The next version of Grok Imagine will be outstanding, and we are doubling our investment," and called it "a tool more important than people realize."

[Musk Claims Grok Imagine is Profitable for xAI, Video is Key Tool for AGI]According to monitoring by 1M AI News, Musk stated on X that the future of AI primarily lies in video understanding and generation, "because photons are the highest bandwidth communication form to date, these are key tools on the path to AGI," and mentioned that Grok Imagine, the image generation tool under xAI, "is profitable, not a money-losing project." This statement comes in the context of OpenAI's announcement last week to shut down its AI video platform Sora. According to reports from The Wall Street Journal and several media outlets, Sora has generated approximately $2.1 million in revenue since its launch in September last year, with daily operating losses reported to be around $1 million. OpenAI also terminated its $1 billion partnership with Disney. Musk did not disclose specific revenue figures for Grok Imagine. Previously, on March 25, he stated, "The next version of Grok Imagine will be outstanding, and we are doubling our investment," and called it "a tool more important than people realize."

Musk Claims Grok Imagine is Profitable for xAI, Video is Key Tool for AGI

On March 31, ByteDance's AI programming product TRAE launched the 'SOLO Independent Version', which includes both desktop and web versions, offering two functional modes: Code and MTC. Currently, it is in the beta testing phase, and users with an invitation code can use it for free for a limited time. (Dongxin News Agency)

[ByteDance AI Programming Product TRAE SOLO Launches Independent Version]On March 31, ByteDance's AI programming product TRAE launched the 'SOLO Independent Version', which includes both desktop and web versions, offering two functional modes: Code and MTC. Currently, it is in the beta testing phase, and users with an invitation code can use it for free for a limited time. (Dongxin News Agency)

ByteDance AI Programming Product TRAE SOLO Launches Independent Version

On March 31, SBF, the founder of FTX, stated that the Chief Judge of Delaware had recused himself from three cases due to alleged bias, while Judge Kaplan, the federal prosecutor in the Southern District of New York, continues to preside over his case. SBF accused Judge Kaplan of showing contempt to the jury, providing pizza and transportation to facilitate a quick verdict, and making comments about fraud evidence prior to the ruling. SBF is calling for Judge Kaplan to recuse himself from the case.

[SBF Questions the Impartiality of Southern District of New York Judge, Calls for Recusal]On March 31, SBF, the founder of FTX, stated that the Chief Judge of Delaware had recused himself from three cases due to alleged bias, while Judge Kaplan, the federal prosecutor in the Southern District of New York, continues to preside over his case. SBF accused Judge Kaplan of showing contempt to the jury, providing pizza and transportation to facilitate a quick verdict, and making comments about fraud evidence prior to the ruling. SBF is calling for Judge Kaplan to recuse himself from the case.

SBF Questions the Impartiality of Southern District of New York Judge, Calls for Recusal

According to SoSoValue data, on March 30 (Eastern Time), the total net inflow for Ethereum spot ETFs was $4.9583 million. The Ethereum spot ETF with the highest single-day net inflow yesterday was Fidelity's ETF FETH, which saw a net inflow of $10.5609 million, bringing its historical total net inflow to $2.309 billion. The second highest was Blackrock's Staked ETH ETF ETHB, with a single-day net inflow of $4.1547 million, currently totaling $305 million in historical net inflow. The Ethereum spot ETF with the highest single-day net outflow yesterday was Blackrock's ETF ETHA, which experienced a net outflow of $9.7573 million, with a historical total net inflow of $11.617 billion. As of the time of this report, the total net asset value of Ethereum spot ETFs is $11.508 billion, with an ETF net asset ratio (market value compared to total Ethereum market value) of 4.71%, and a historical cumulative net inflow of $11.528 billion.

[Ethereum Spot ETF Sees $4.9583 Million Net Inflow Yesterday]According to SoSoValue data, on March 30 (Eastern Time), the total net inflow for Ethereum spot ETFs was $4.9583 million. The Ethereum spot ETF with the highest single-day net inflow yesterday was Fidelity's ETF FETH, which saw a net inflow of $10.5609 million, bringing its historical total net inflow to $2.309 billion. The second highest was Blackrock's Staked ETH ETF ETHB, with a single-day net inflow of $4.1547 million, currently totaling $305 million in historical net inflow. The Ethereum spot ETF with the highest single-day net outflow yesterday was Blackrock's ETF ETHA, which experienced a net outflow of $9.7573 million, with a historical total net inflow of $11.617 billion. As of the time of this report, the total net asset value of Ethereum spot ETFs is $11.508 billion, with an ETF net asset ratio (market value compared to total Ethereum market value) of 4.71%, and a historical cumulative net inflow of $11.528 billion.

Ethereum Spot ETF Sees $4.9583 Million Net Inflow Yesterday

According to monitoring by 1M AI News, Bilibili is currently beta testing an AI video creation tool named Updream, designed specifically for video content creation. It is currently in an invitation code phase, where content creators (UP owners) must complete an official questionnaire and pass a review to obtain an invitation code and points; the product is not yet publicly available. The tool has a web version, and upon logging in, the core interface prompts 'Inspiration starts here,' allowing users to input creative ideas and call upon Skills, as well as featuring a skills community and project management functions. As it is still in beta testing, specific details about the product will be based on official announcements. The emergence of Updream is the latest development in fulfilling the promise made by Bilibili's Chairman and CEO Chen Rui. During the Q3 2025 earnings call, Chen Rui stated that the company will focus on video AI solutions, using AI to assist creators in producing more and better content, and noted that 'the best AI-focused UP owners and the most interested users in AI are gathered on Bilibili.' Each month, nearly 100,000 AI-related UP owners are active on the platform, with the daily submission of AI content increasing by 83% year-on-year.

[Bilibili Beta Tests AI Video Creation Tool Updream, Requires Invitation Code for Registration]According to monitoring by 1M AI News, Bilibili is currently beta testing an AI video creation tool named Updream, designed specifically for video content creation. It is currently in an invitation code phase, where content creators (UP owners) must complete an official questionnaire and pass a review to obtain an invitation code and points; the product is not yet publicly available. The tool has a web version, and upon logging in, the core interface prompts 'Inspiration starts here,' allowing users to input creative ideas and call upon Skills, as well as featuring a skills community and project management functions. As it is still in beta testing, specific details about the product will be based on official announcements. The emergence of Updream is the latest development in fulfilling the promise made by Bilibili's Chairman and CEO Chen Rui. During the Q3 2025 earnings call, Chen Rui stated that the company will focus on video AI solutions, using AI to assist creators in producing more and better content, and noted that 'the best AI-focused UP owners and the most interested users in AI are gathered on Bilibili.' Each month, nearly 100,000 AI-related UP owners are active on the platform, with the daily submission of AI content increasing by 83% year-on-year.

Bilibili Beta Tests AI Video Creation Tool Updream, Requires Invitation Code for Registration

According to The Block, documents filed with Companies House, the UK's private company information registry, show that DeFi investment app Boku has closed a £5.8 million ($6.5 million) funding round with venture capital firms Lakestar and Connect Ventures as the largest investors in the round, with participants including Augmentum Fintech, Eagle Investments and Nordstar Ventures, among others. Boku is an upcoming mobile app that aims to connect its users to DeFi earnings through a mobile app. According to people familiar with the matter, Boku claims to offer a yield of up to 7% on customer deposits. Two people familiar with the matter confirmed several details of the fundraising. However, Phuc To, one of the co-founders of Boku and former head of product at Revolut, told The Block, "Your source is incorrect, we haven't raised any money recently." The other two co-founders did not respond to requests for comment.

Detail

【DeFi app Boku co-founder denies raising $6.5m】According to The Block, documents filed with Companies House, the UK's private company information registry, show that DeFi investment app Boku has closed a £5.8 million ($6.5 million) funding round with venture capital firms Lakestar and Connect Ventures as the largest investors in the round, with participants including Augmentum Fintech, Eagle Investments and Nordstar Ventures, among others. Boku is an upcoming mobile app that aims to connect its users to DeFi earnings through a mobile app. According to people familiar with the matter, Boku claims to offer a yield of up to 7% on customer deposits. Two people familiar with the matter confirmed several details of the fundraising. However, Phuc To, one of the co-founders of Boku and former head of product at Revolut, told The Block, "Your source is incorrect, we haven't raised any money recently." The other two co-founders did not respond to requests for comment.

DeFi app Boku co-founder denies raising $6.5m

Article

Predicted Market Transactions Reach 191 Million in March

Trump's Influence Fades: Market Immune to Verbal Assurances as U.S. Stocks Drop for Five Consecutive Weeks

Dollar Strengthens Again Amid Concerns Over Escalating War

Digital Asset Investment Products Experience $414 Million Net Outflow Last Week, First Outflow in Five Weeks

BTC broke through 68000  USDT

DeFi app Boku co-founder denies raising $6.5m

Penafian：Konten diatas tidak merepresentasikan posisi HTX.，HTX tidak memberikan rekomendasi perdagangan apa pun.。

Artikel Terkait

Semua Komentar0TerkiniHangat

Topik Trending

Artikel Terkait