# Open Source Related Articles

HTX News Center provides the latest articles and in-depth analysis on "Open Source", covering market trends, project updates, tech developments, and regulatory policies in the crypto industry.

7 Key Questions Regarding 'DeepSeek Completes Over 50 Billion Yuan in Financing'

DeepSeek, the prominent Chinese AI company, has reportedly completed its first external funding round, raising over 50 billion RMB (approximately $6.9 billion USD), according to foreign media reports. This financing values the company at over $50 billion USD, a significant increase from a $10 billion valuation when the round began in April 2026. Founder Liang Wenfeng personally contributed 20 billion RMB, with other investors including Tencent, CATL (Contemporary Amperex Technology), JD.com, NetEase, and IDG Capital. Notably, the National Artificial Intelligence Industry Investment Fund also participated with a direct investment of 1 billion RMB. The funding round is distinctive for its structure. Most investors' capital is channeled into a limited partnership controlled by CEO Liang Wenfeng, rather than directly into DeepSeek. These investors face a five-year lock-up period, have no voting rights, but receive priority financial information and future investment rights. This arrangement is seen as a measure to ensure Liang's absolute control over the company's direction, aligning with its stated principles of prioritizing groundbreaking AGI (Artificial General Intelligence) research over short-term profitability. The report highlights strategic reasons for key investors. Tencent's involvement is viewed as a strategic alignment, building on existing collaborations. CATL's investment is linked to the critical energy and power infrastructure needed for AI data centers, a key growth area for the battery giant. The participation of a state-backed fund underscores the national strategic importance of AI development. Post-funding, DeepSeek is expected to accelerate infrastructure development, including building its own data centers, hire more talent, and release new model versions with enhanced capabilities like image and audio support. While this marks a major step, the company's long-term journey towards AGI remains a challenging path that will require balancing its foundational ideals with the expectations of its new investors.

marsbit06/16 10:28

7 Key Questions Regarding 'DeepSeek Completes Over 50 Billion Yuan in Financing'

marsbit06/16 10:28

After the U.S. Banned Fable 5, Zhipu's Stock Soared 47%

On June 15, Chinese AI company Zhipu's stock surged up to 47.6% in Hong Kong, closing with a 32.82% gain. This sharp rise followed two key industry events. On June 12, Anthropic was compelled by a U.S. government export control order to suspend global access to its latest flagship models, Claude Fable 5 and Claude Mythos 5, impacting developers and businesses reliant on them. The next day, Zhipu announced it was opening access to its new open-source flagship model, GLM-5.2, for all Coding Plan users, with API and model weights (under the MIT license) to follow. The Anthropic incident highlighted a critical shift in the AI industry: beyond raw capability, the stability, continuous accessibility, and control over AI models are becoming equally vital, especially as AI integrates deeper into business workflows. Zhipu's move, emphasizing that "frontier intelligence should not belong to a few nor be subject to arbitrary revocation," positioned its open, accessible model as an alternative. GLM-5.2 focuses on "Long Horizon Tasks" with a 1M context window, aiming for consistency in complex, extended projects. Market analysts suggest this event exposes the risk of dependency on closed-source models subject to single jurisdiction policies, potentially accelerating a shift toward domestic base models and localized deployments. The investment response indicates a new valuation metric is emerging—prioritizing which companies can provide AI capabilities that are not only advanced but also reliably and sustainably accessible.

marsbit06/16 06:49

After the U.S. Banned Fable 5, Zhipu's Stock Soared 47%

marsbit06/16 06:49

The Year of AI Applications: Saying 'Yes' While Ignoring Risks? A Comprehensive Open Source Log of Software Development's Journey

The Year of AI Applications: Blindly Saying "Yes" While Ignoring Risks? A Software Development Log Goes Fully Open Source. AI-generated code harbors risks hidden within seemingly correct programs, potentially leading to data leaks or asset loss. The open-source project "Narwhal AI Code Risks," from Peking University's Narwhal-Lab, compiles real-world cases, early warning signs, and typical risk pathways. Its goal is to help developers identify potential hazards early and avoid repeating past mistakes. In 2026, code is generated faster than ever but deployed with less scrutiny. The danger often lies not in glaring errors, but in code that appears normal—syntactically correct, passing all checks—yet introduces subtle but critical flaws like non-existent dependencies, excessive permissions, or exposed databases. A stark example is the Moonwell cbETH oracle incident. A configuration file error, where a cryptocurrency price was set to ~$1.12 instead of ~$2,200, slipped through 28 checks and a pull request signed by both AI (Claude, Copilot) and human developers. This "semantic deviation" resulted in a loss of $1.78 million. The risk is that AI can produce functionally valid code that is semantically wrong for the business context. As AI moves beyond simple code completion to modifying configurations, installing dependencies, and operating via autonomous agents, it traverses longer, less traceable paths within software engineering, blurring traditional boundaries and oversight points. The Narwhal AI Code Risks project structures information into three layers: `/cases` for documented real-world incidents, `/inferred` for early warning signals, and `/scenarios` for clear, generalized risk patterns not yet tied to specific events. This aims to create a lasting, public record to prevent collective amnesia about past AI-coding pitfalls. Risks are categorized into seven areas: Software Supply Chain (e.g., recommending fake packages), Code-Level Vulnerabilities (e.g., reintroducing path traversal bugs), Cloud & Infrastructure Misconfiguration (e.g., overly permissive settings), Agent Risks (from autonomous tool execution), Vertical Domain Risks (e.g., in finance, healthcare), Intellectual Property & Compliance issues, and Human Factors (like over-reliance on AI output). The project's core value is transforming isolated incidents into reusable knowledge—a foundational resource for developers to spot similar issues, for security researchers to build upon, for toolmakers to create detection rules, and for the community to contribute new findings. As AI integration accelerates, this open-source "logbook" serves as a crucial navigational aid, charting past errors to help future projects steer clear of the same traps.

marsbit06/16 04:52

The Year of AI Applications: Saying 'Yes' While Ignoring Risks? A Comprehensive Open Source Log of Software Development's Journey

marsbit06/16 04:52

Following US Ban on Fable 5, Zhipu AI's Stock Soars 47%

On June 15th, shares of Zhipu AI surged dramatically on the Hong Kong stock market, peaking at a 47.6% gain before closing 32.82% higher. This sharp increase was directly triggered by two recent industry events. On June 12th, Anthropic announced it was suspending global access to its latest flagship models, Claude Fable 5 and Claude Mythos 5, to comply with a U.S. government export control order. The next day, Zhipu AI announced it would open access to its latest open-source flagship model, GLM-5.2, under the permissive MIT license. The Anthropic incident highlighted a critical issue beyond raw model capability: the risk of sudden, unpredictable loss of access to advanced AI models, especially for developers and enterprises deeply integrated with them. This has shifted industry and market focus toward factors like stability, sustainable access, and controllability. Zhipu's move, promoting "frontier intelligence for all," positions its openly available model as a reliable and accessible alternative. The GLM-5.2 model emphasizes "Long Horizon Task" capabilities with a 1M context window, targeting complex, multi-step coding and engineering workflows where maintaining context is crucial. Analysts note this event exposes the risk of dependency on closed-source models subject to single jurisdictional controls, potentially accelerating a shift toward domestic base models and localized deployments. The market's reaction signals a new valuation dimension in AI: providers who can offer stable, long-term, and sustainably accessible AI capabilities are gaining strategic importance.

marsbit06/15 12:01

Following US Ban on Fable 5, Zhipu AI's Stock Soars 47%

marsbit06/15 12:01

The Most Advanced Large Models Are Now Subject to Export Controls Like Enriched Uranium

In an unprecedented move mirroring the control of enriched uranium, the US Commerce Department has imposed an export control ban on Anthropic's advanced AI models, Fable 5 and Mythos 5, forcing their global shutdown. This marks the first time a purely digital entity—a set of neural network weights—has been subjected to such hardware-like strategic export restrictions, based not on physical scarcity but on its concentrated "capability density." The article draws a direct parallel to the historical control of nuclear technology, arguing that just as uranium ore becomes a controlled substance only when enriched to a critical threshold, AI capabilities become subject to regulation when compressed into a single, potent, and easily accessible interface. This "enriched AI" is seen as crossing a threshold where its aggregated power poses a potential threat. The author predicts three major consequences over the next decade. First, capability auditing will become institutionalized, with governments setting compliance checklists and thresholds for model power, triggering automatic export controls. Second, jurisdictional boundaries will blur as US export controls extend their reach globally, governing any user of American AI services regardless of location, forcing non-US entities to reconsider their AI supply chain dependencies. Third, a technological bifurcation will occur, splitting the AI landscape into a restricted, high-risk track of advanced US proprietary models and a more reliable track of open-source or locally developed alternatives, where guaranteed access may outweigh raw performance. The core crisis exposed is the lack of a legal property rights framework for AI "intelligence." While companies invest heavily in integrating these models into their production systems, legally they only purchase a service that can be revoked at any time, leaving them with no recourse for their sunk investments. The conclusion warns of a permanently fractured digital world where the most capable models may not be the most usable, and clear, unassailable ownership of technology will become paramount.

marsbit06/15 05:41

The Most Advanced Large Models Are Now Subject to Export Controls Like Enriched Uranium

marsbit06/15 05:41

Claude Opus 4.8 Finds a $4.5 Billion Bug: The AI Era is Mass-Producing Hackers

A researcher discovered a critical "infinite mint" vulnerability in the Zcash cryptocurrency's Orchard protocol using Claude Opus 4.8, leading to a swift fix but also a 50% market drop, erasing billions in value. This incident highlights a new era where powerful, accessible AI models are dramatically lowering the barrier to finding software vulnerabilities. Previously, the security community feared specialized models like Claude Mythos Preview, capable of finding decades-old zero-day exploits. The Zcash case, however, involved a publicly available, general-purpose model. This shift makes advanced security auditing—and attack capabilities—accessible to far more people, not just experts. The mass democratization of vulnerability discovery brings a dual challenge: a flood of low-quality, AI-generated false reports that overwhelm maintainers, and the real, rapid uncovering of deep, dangerous bugs. Open-source projects, often understaffed and unfunded, are particularly vulnerable to this "attention DDoS." The article cites examples like curl shutting down its bug bounty program due to the unsustainable workload. Our perceived digital safety has often been luck, relying on the high cost and effort required to find deeply hidden flaws in complex systems, as seen with historical vulnerabilities like Heartbleed or Baron Samedit. AI changes this cost structure, effectively "mass-producing flashlights" to illuminate every corner of our codebase. While large companies operate extensive security chains involving external white-hat hackers and massive defensive operations, the global cybersecurity workforce faces a severe shortage, especially of experienced personnel capable of analyzing complex threats and coordinating fixes. The core dilemma emerges: AI makes *finding* bugs cheap and scalable, but *fixing* them remains a slow, expensive, and human-intensive process. The article concludes that AI won't destroy the internet but acts as a bright light, revealing that our digital existence is not inherently secure but is precariously maintained by ongoing human effort. The true cost in the AI era may not be discovery, but whether there will be enough people left willing and able to do the hard work of repair.

marsbit06/06 09:22

Claude Opus 4.8 Finds a $4.5 Billion Bug: The AI Era is Mass-Producing Hackers

marsbit06/06 09:22

From Ethereum to AI's 'CROPS': What Exactly is This Set of 'Slow Variables' That Vitalik Repeatedly Emphasizes?

In recent discussions, Vitalik Buterin has frequently emphasized the concept of "CROPS," a framework defining core values for Ethereum's development. CROPS stands for Censorship Resistance, Capture Resistance, Open Source, Privacy, and Security. Initially outlined in the Ethereum Foundation's "EF Mandate," it represents a commitment to user sovereignty, ensuring that the network resists external control, remains open, protects privacy, and prioritizes security. The relevance of CROPS extends beyond Ethereum's foundational principles, becoming crucial in the context of AI integration. As AI agents begin handling wallet operations and automated transactions, the risk increases that users may cede control over their digital assets, privacy, and intentions to centralized AI service providers. A "CROPS AI" would therefore emphasize local execution where possible, privacy-preserving remote model calls (e.g., using zero-knowledge proofs), and transparent, verifiable processes to maintain user agency. Vitalik highlights a significant convergence between "CROPS Ethereum access layer" and "CROPS AI." Both address the same fundamental challenge: how users can access powerful services—be it blockchain data via RPCs or AI models—without exposing sensitive information or relinquishing ultimate control. This intersection points toward a future digital entry point that is more private, secure, and user-controlled. Ultimately, CROPS is not merely an abstract ideal but a practical guidepost. It steers development—from protocol resilience and wallet design to AI agent safety—towards a future where users retain self-sovereignty even as digital systems grow more complex and powerful. In an era of accelerating AI adoption, these "slow variables" of censorship resistance, openness, privacy, and security may define Ethereum's enduring value.

marsbit06/05 12:40

From Ethereum to AI's 'CROPS': What Exactly is This Set of 'Slow Variables' That Vitalik Repeatedly Emphasizes?

marsbit06/05 12:40

活动图片