律动早报|8月22日昨夜今晨重要资讯一览

长文源:区块律动Pubblicato 2022-08-24Pubblicato ultima volta 2024-08-22

Crypto di tendenza

Letture associate

RWA Tokenization Enters the Next Phase: What is the Truly Time-Consuming Advantage to Build?

The article argues that as tokenization frameworks for Real-World Assets (RWA) mature, the ability to issue assets is becoming less of a competitive advantage. The focus is shifting to what happens *after* issuance: which RWA operations can build enduring trust, maintain stable operations, and remain integrated into the financial ecosystem over the long term. The piece introduces the concept of a **Reserve Layer**—infrastructure that connects tokenized assets to the necessary verification, liquidity, and operational systems for on-chain finance. For an asset to serve as a reliable reserve (e.g., short-term U.S. Treasuries, gold), it needs predictable value, standardized features, deep markets, and observable pricing. However, the true, hard-to-replicate advantage lies not just in the underlying asset but in the **operational track record** built over time. This includes consistent reserve management, independent audits, successful redemptions, maintained liquidity, and protocol integrations. Each successful operation adds evidence, creating a reinforcing cycle: more evidence builds stronger institutional confidence, leading to wider distribution, deeper liquidity, and more use cases as collateral. The article presents a framework combining two dimensions: an asset's suitability as a reserve and the issuer's operational capability. The most sustainable model combines **high-quality reserve assets with strong, long-term operational discipline**. A critical blind spot is an asset with high reserve suitability (like gold) issued by an entity with a limited operational track record; the quality of the infrastructure is separate from the quality of the asset itself. In conclusion, the next phase of RWA will be defined by participants who can pair appropriate reserve assets with the operational rigor to support them through market cycles, thereby transforming tokenized RWAs into durable financial infrastructure.

marsbit17 min fa

RWA Tokenization Enters the Next Phase: What is the Truly Time-Consuming Advantage to Build?

marsbit17 min fa

Claude Code Easily Compromised with Just a Fake Tool

Researchers have demonstrated a novel attack, dubbed ToolLeak, that can easily compromise AI coding assistants like Claude Code. The method exploits a "mode gap" by stealing the system prompts (instructions) not through direct chat queries, but by tricking the model into leaking them as parameters during tool calls. This extracted information is then used to craft a "two-channel prompt injection" attack. Attackers register a malicious tool with a description formatted to mimic legitimate instructions, prompting the AI agent to call it. The tool's return value then instructs the agent to execute a malicious command (e.g., `curl | bash`), achieving Remote Code Execution (RCE). In tests against six major AI programming tools (Cursor, Claude Code, Copilot, Windsurf, Cline, Trae) using older versions, all were fully compromised, with attack success rates reaching up to 1.0. Notably, Claude Code's secondary guard model (Haiku) was overridden by the main model (Sonnet), which had been manipulated by the injected instructions. Newer versions show improved defenses. Claude Code and Cursor implemented mitigations like "progressive tool description exposure," reducing RCE success to 0 and 0.3 respectively in some configurations. However, tools like Cline, Windsurf, and Trae paired with certain models remained fully vulnerable. The research underscores that architectural isolation is crucial for defense, as long as tool return values can ambiguously function as both data and executable instructions, the threat of tool hijacking persists. The paper "TIPExploit: Tool-Invocation Prompt Extraction and Exploitation in AI Coding Agents" has been accepted at ISSTA 2026.

marsbit21 min fa

Claude Code Easily Compromised with Just a Fake Tool

marsbit21 min fa

Trading

Spot

Articoli Popolari

Come comprare AAVE

Benvenuto in HTX.com! Abbiamo reso l'acquisto di Aave Protocol (AAVE) semplice e conveniente. Segui la nostra guida passo passo per intraprendere il tuo viaggio nel mondo delle criptovalute.Step 1: Crea il tuo Account HTXUsa la tua email o numero di telefono per registrarti il tuo account gratuito su HTX. Vivi un'esperienza facile e sblocca tutte le funzionalità,Crea il mio accountStep 2: Vai in Acquista crypto e seleziona il tuo metodo di pagamentoCarta di credito/debito: utilizza la tua Visa o Mastercard per acquistare immediatamente Aave ProtocolAAVE.Bilancio: Usa i fondi dal bilancio del tuo account HTX per fare trading senza problemi.Terze parti: abbiamo aggiunto metodi di pagamento molto utilizzati come Google Pay e Apple Pay per maggiore comodità.P2P: Fai trading direttamente con altri utenti HTX.Over-the-Counter (OTC): Offriamo servizi su misura e tassi di cambio competitivi per i trader.Step 3: Conserva Aave Protocol (AAVE)Dopo aver acquistato Aave Protocol (AAVE), conserva nel tuo account HTX. In alternativa, puoi inviare tramite trasferimento blockchain o scambiare per altre criptovalute.Step 4: Scambia Aave Protocol (AAVE)Scambia facilmente Aave Protocol (AAVE) nel mercato spot di HTX. Accedi al tuo account, seleziona la tua coppia di trading, esegui le tue operazioni e monitora in tempo reale. Offriamo un'esperienza user-friendly sia per chi ha appena iniziato che per i trader più esperti.

388 Totale visualizzazioniPubblicato il 2024.12.11Aggiornato il 2026.06.02

Come comprare AAVE

Discussioni

Benvenuto nella Community HTX. Qui puoi rimanere informato sugli ultimi sviluppi della piattaforma e accedere ad approfondimenti esperti sul mercato. Le opinioni degli utenti sul prezzo di AAVE AAVE sono presentate come di seguito.

活动图片