模因币市场价值飙升至415亿美元 Crypto All-Stars融资140万美元

cryptonewsPubblicato 2024-09-08Pubblicato ultima volta 2024-09-20

Last updated:

Letture associate

Data Theft at Will! Major Vulnerability Exposed in This Popular AI Programming Tool

A critical vulnerability in Anthropic's Claude Code AI programming tool allowed attackers to bypass its network sandbox for over five months, enabling potential data exfiltration. Independent researcher Aonan Guan discovered a second complete bypass exploiting a null-byte injection in the SOCKS5 proxy. This flaw, present since the sandbox's launch in October 2025, let processes inside the sandbox access any host, contrary to user-configured domain whitelists. The attack chain involved manipulating hostnames (e.g., `attacker.com\x00.google.com`). JavaScript's `endsWith()` check would pass `.google.com`, while the underlying C `getaddrinfo()` function would only parse `attacker.com` due to the null byte, creating a parser discrepancy. Combined with a previously disclosed prompt injection method, this could leak API keys, credentials, and internal data. Anthropic silently fixed the issue in April 2026 without a security advisory, CVE, or user notification. The researcher noted that Claude Code itself confirmed the vulnerability's severity when tested. This incident highlights broader industry issues, as similar vulnerabilities found in Google's Gemini CLI and GitHub's Copilot Agent also lacked public disclosures. The report criticizes the false sense of security created by a broken sandbox and emphasizes the need for defense-in-depth and transparency in AI tool security.

marsbit33 min fa

Data Theft at Will! Major Vulnerability Exposed in This Popular AI Programming Tool

marsbit33 min fa

Under the squeeze between giants Tether and Circle, how can foreign exchange stablecoins break through?

In the face of dominance by Tether (USDT) and Circle (USDC), new entrants in the stablecoin space face significant challenges competing directly, especially in the foreign exchange (FX) market. A more viable and efficient path forward is the adoption of synthetic foreign exchange (Forex) built atop existing USD stablecoin rails. The rise of stablecoin neo-banks represents the next major growth area for mass crypto adoption, with FX becoming a core component. However, replicating the vast liquidity, distribution channels, and network effects of USDT/USDC is extremely difficult for new FX stablecoin issuers. The total market cap of all FX stablecoins is a fraction (roughly 1/700th) of USD stablecoins, leading to issues like poor liquidity, peg instability, limited acceptance, and complex compliance hurdles. Instead of issuing spot FX stablecoins, the article advocates for a model inspired by traditional finance's non-deliverable forwards (NDFs). Users would continue to hold underlying USDT/USDC, while their account balances are displayed and economically settled in their preferred local currency through MtM (Mark-to-Market) NDF structures. This approach leverages the deep liquidity and infrastructure of USD stablecoins while providing synthetic forex exposure. Key advantages include strong peg stability via oracles, retained access to USD stablecoin yields and liquidity, high capital efficiency, and easy scalability to new currencies. Primary use cases for this on-chain NDF forex include: 1. Neo-banks, custodians, and wallets offering multi-currency accounts to attract international users and increase deposits. 2. Forex carry trade strategies, potentially offering more stable and scalable yields compared to crypto-native products like Ethena. 3. Global corporate payments, allowing businesses to receive payments in local currencies while hedging forex risk on-chain, similar to services offered by Stripe in traditional finance. This synthetic forex model presents a pragmatic solution to overcome the network effects of incumbents and unlock the next wave of stablecoin utility for global consumers and businesses.

marsbit1 h fa

Under the squeeze between giants Tether and Circle, how can foreign exchange stablecoins break through?

marsbit1 h fa

Trading

Spot
Futures

Articoli Popolari

Come comprare GMT

Benvenuto in HTX.com! Abbiamo reso l'acquisto di Green Metaverse Token (GMT) semplice e conveniente. Segui la nostra guida passo passo per intraprendere il tuo viaggio nel mondo delle criptovalute.Step 1: Crea il tuo Account HTXUsa la tua email o numero di telefono per registrarti il tuo account gratuito su HTX. Vivi un'esperienza facile e sblocca tutte le funzionalità,Crea il mio accountStep 2: Vai in Acquista crypto e seleziona il tuo metodo di pagamentoCarta di credito/debito: utilizza la tua Visa o Mastercard per acquistare immediatamente Green Metaverse TokenGMT.Bilancio: Usa i fondi dal bilancio del tuo account HTX per fare trading senza problemi.Terze parti: abbiamo aggiunto metodi di pagamento molto utilizzati come Google Pay e Apple Pay per maggiore comodità.P2P: Fai trading direttamente con altri utenti HTX.Over-the-Counter (OTC): Offriamo servizi su misura e tassi di cambio competitivi per i trader.Step 3: Conserva Green Metaverse Token (GMT)Dopo aver acquistato Green Metaverse Token (GMT), conserva nel tuo account HTX. In alternativa, puoi inviare tramite trasferimento blockchain o scambiare per altre criptovalute.Step 4: Scambia Green Metaverse Token (GMT)Scambia facilmente Green Metaverse Token (GMT) nel mercato spot di HTX. Accedi al tuo account, seleziona la tua coppia di trading, esegui le tue operazioni e monitora in tempo reale. Offriamo un'esperienza user-friendly sia per chi ha appena iniziato che per i trader più esperti.

62 Totale visualizzazioniPubblicato il 2024.12.10Aggiornato il 2025.03.21

Come comprare GMT

Discussioni

Benvenuto nella Community HTX. Qui puoi rimanere informato sugli ultimi sviluppi della piattaforma e accedere ad approfondimenti esperti sul mercato. Le opinioni degli utenti sul prezzo di GMT GMT sono presentate come di seguito.

活动图片