# Security Related Articles

HTX News Center provides the latest articles and in-depth analysis on "Security", covering market trends, project updates, tech developments, and regulatory policies in the crypto industry.

ZachXBT flags suspected Trust Wallet extension issue as users report drained funds

Security concerns emerged around the Trust Wallet browser extension on December 25, after blockchain investigator ZachXBT flagged suspicious activity potentially linked to a recent update. Reports suggest a supply-chain compromise may have been introduced in a December 24 update, where newly added code could silently exfiltrate sensitive wallet data—particularly during seed phrase imports—leading to immediate fund draining. Multiple users reported losses, with unverified estimates exceeding $2 million. The malicious code allegedly sent data to a recently registered external domain mimicking Trust Wallet infrastructure. The issue appears limited to the browser extension, with no evidence of mobile app compromise. Trust Wallet has not yet issued an official response or advisory. Researchers emphasize the situation remains under investigation, warning users to avoid importing seed phrases into the extension until clarified. If confirmed, this would represent a significant supply-chain attack.

ambcrypto12/25 21:57

ZachXBT flags suspected Trust Wallet extension issue as users report drained funds

ambcrypto12/25 21:57

409mln SOL staked and counting – Is market missing Solana’s signal?

Solana's fundamentals show mixed signals despite a record-high 409 million SOL staked, enhancing network security. However, decentralization concerns arise as validator numbers dropped 68% (from 2,500 to 800) due to the Solana Foundation cutting subsidies. Real-World Asset (RWA) activity is strong, with over 115K holders—close to Ethereum's count—but net flows lag significantly behind competitors. Solana attracted $216 million in Q4 2025, while Ethereum and BNB Chain each exceeded $1 billion. Despite these developments, SOL's price has fallen 58% to $121, indicating a disconnect from on-chain growth.

ambcrypto12/25 08:02

409mln SOL staked and counting – Is market missing Solana’s signal?

ambcrypto12/25 08:02

CertiK Annual Security Report: Web3 Losses Increase 37% Year-on-Year in 2025, Phishing Attacks and Supply Chain Incidents Emerge as Major Threats

CertiK's 2025 Skynet Hack3D Security Report reveals that the Web3 industry suffered approximately $3.35 billion in losses across 630 security incidents, a 37% increase from 2024. While the number of incidents decreased by 137, the average loss per attack surged by 66.6% to $5.32 million, indicating a trend toward targeting high-value assets. The most significant losses resulted from supply chain attacks, which accounted for nearly half of the total losses ($1.45 billion) despite only two recorded incidents. The largest was the February Bybit breach, where attackers compromised a third-party multi-signature wallet service to bypass security protocols. Phishing remained the most frequent threat, with 248 incidents causing $723 million in losses. The report warns that AI is amplifying these attacks by generating highly convincing fake websites and targeted scam messages, making traditional defenses less effective. Amid growing risks, regulatory clarity is improving globally, with advancements in U.S. stablecoin legislation and frameworks like MiCA in the EU. Security is shifting from a reactive cost to a core infrastructure element. The report concludes that projects embedding security into their design and development will be better positioned for the future.

marsbit12/25 07:53

CertiK Annual Security Report: Web3 Losses Increase 37% Year-on-Year in 2025, Phishing Attacks and Supply Chain Incidents Emerge as Major Threats

marsbit12/25 07:53

RWA Utility Tokens, Stop Kidding Yourselves

The article, written by lawyer Shao Jiadian, critically examines the common claim by RWA (Real World Asset) token projects that their tokens are "utility tokens" rather than securities. The author argues that regulatory bodies globally do not classify assets based on their self-proclaimed labels but on their actual economic function and structure. The core argument is that most so-called "utility RWA tokens" involve users investing money into a common asset pool managed by the project, with the expectation of profits derived from the project's efforts (e.g., dividends, revenue sharing from assets like real estate or equipment). This structure meets the criteria of an "investment contract" and is therefore treated as a security in major jurisdictions like the U.S., EU, Switzerland, and Hong Kong. Two key legal cases are cited as evidence: 1. **DeFiMoney Market (DMM):** Its fixed-yield token and "governance" token were both deemed securities by the SEC because investors' profits came from a managed asset pool. 2. **Unicoin (2025):** An asset-backed token promising returns from real estate and equity was charged by the SEC as an unregistered securities offering and fraud. The author highlights an inherent conflict: utility tokens emphasize *use* and *consumption*, while RWA tokens are fundamentally linked to *assets* and *returns*. Any token offering profit-sharing, dividends, or redeemable cash flows will be viewed as a security by regulators. The conclusion is stark: projects are not avoiding securities laws out of ignorance but to circumvent the stricter requirements of a regulated securities offering. The only viable paths to avoid securities classification are: 1. Purely functional tokens with no profit expectation. 2. Private offerings strictly for accredited investors. 3. Operating under specific regimes like Dubai's VARA that regulate security-like tokens as virtual assets. Ultimately, any RWA token offered to the public that is tradable and promises returns will almost certainly be treated as a security. The choice for projects is not between utility and security labels, but between "long-term compliance" and "short-term gambling."

marsbit12/25 03:13

RWA Utility Tokens, Stop Kidding Yourselves

marsbit12/25 03:13

Skynet Hack3D Report Highlights Web3 Security in 2025

Web3 entered 2025 with strong momentum due to improved macroeconomic conditions, supportive U.S. policies, and growing institutional confidence. However, total losses from cyberattacks reached $3.35 billion, a 37% increase from 2024. Excluding the $1.45 billion Bybit exploit—attributed to the Lazarus Group via a supply-chain attack—losses actually decreased year-over-year, indicating a shift toward fewer but more sophisticated and high-value attacks. Phishing was the most common attack vector, accounting for $722.9 million across 248 incidents, followed by code-related exploits at $554.6 million. AI played a dual role: enhancing defensive tools like automated audits while also enabling highly convincing phishing campaigns, deepfake impersonations, and rapid exploit replication. Regulatory clarity improved with the U.S. GENIUS Act and E.U.’s MiCA implementation, raising security and compliance standards. CertiK expanded its security offerings, integrating risk analysis tools, publishing major reports, and advancing research in zkEVM and consensus mechanisms. As Web3 grows, integrating security at all levels remains essential to mitigate evolving AI-driven and systemic risks.

TheNewsCrypto12/24 16:17

Skynet Hack3D Report Highlights Web3 Security in 2025

TheNewsCrypto12/24 16:17

Crypto for the Holidays: Fun Ways To Get Family & Friends Into Crypto

With the holiday season approaching, introducing family and friends to cryptocurrency can be a fun and educational way to share joy. The relaxed atmosphere of the holidays makes it an ideal time to discuss crypto without pressure. Gifting options include hardware wallets preloaded with small amounts of Bitcoin or Ethereum, crypto-themed books, NFT art, or even apparel. Emphasize safety by starting with reputable platforms like Coinbase and educating recipients about risks like phishing. The goal is to make crypto accessible and engaging, turning it into a shared learning experience that combines festive giving with financial awareness.

ccn.com12/24 16:09

Crypto for the Holidays: Fun Ways To Get Family & Friends Into Crypto

ccn.com12/24 16:09

Huobi HTX Contract Head Fully Deciphers: What Huobi Contracts Did Right in 2025 and Where They Are Headed

Huobi HTX Derivatives Head Decodes 2025 Success and Future Roadmap In 2025, Huobi HTX's derivatives business achieved 2-3x user growth, driven by robust risk management and continuous product upgrades. Key initiatives included the launch of Copy Trading 4.0—a system-level redesign emphasizing user-friendliness, transparency, and safety. The update integrated copy trading with the main contract interface, introduced smart copy modes, and enhanced risk controls with isolated funds and synchronized leverage settings. The growth was attributed to long-term user trust built on Huobi HTX’s 12-year foundation in security and risk control, which withstood multiple market volatilities without major incidents. Liquidity for major and semi-major coins doubled, though improvements are planned for long-tail assets. The Unified Margin system, launched in May, boosted API trading speed by 4x and attracted high-frequency traders. Financial products like Savings (Yu Bao) improved capital efficiency, with plans to increase yields by 2-3x in 2026. AI-driven trading tools and strategy integrations are also prioritized. Looking ahead, Huobi HTX will focus on refining products, optimizing liquidity, enhancing capital efficiency, and deepening risk management. A key shift will involve empowering users with more active risk control tools, promoting transparent and manageable trading decisions. The goal is to enable sustainable participation in high-volatility crypto markets through safer, smarter, and more rational trading frameworks.

深潮12/24 07:57

Huobi HTX Contract Head Fully Deciphers: What Huobi Contracts Did Right in 2025 and Where They Are Headed

深潮12/24 07:57

Ethereum staking sees heavy withdrawal waves — But long-term growth remains firm

Ethereum staking is experiencing significant weekly withdrawal spikes from major entities like Lido, Binance, and Frax Finance, with peaks reaching 800,000 to 1.5 million ETH. However, these withdrawals represent operational rotations—such as validator rebalancing and client migrations—rather than a loss of confidence. The total staked ETH continues to grow steadily, surpassing 33 million, supported by new validators and the rise of restaking services like ether.fi and Renzo. This shift indicates a move toward multi-layer yield structures and restaking ecosystems, underscoring sustained long-term growth and a structurally bullish trend for Ethereum’s staking economy.

ambcrypto12/23 18:45

Ethereum staking sees heavy withdrawal waves — But long-term growth remains firm

ambcrypto12/23 18:45

2025 Crypto Market Background: Why 'Choosing the Right Exchange' Is More Important Than Choosing the Right Coin

The crypto market in 2025 has matured significantly, shifting focus from pure asset speculation to the importance of choosing the right exchange. New users increasingly prioritize trading experience, security, and platform stability over short-term price movements. For beginners, selecting a suitable exchange is often more critical than selecting individual cryptocurrencies, as a poor platform choice can lead to higher operational costs and psychological stress. Key evaluation criteria for new users include the platform’s operational history, system stability during high volatility, transparent fee structures, and user support mechanisms. Community reputation and public discussion also serve as important references. Based on user feedback and industry data, several exchanges are frequently highlighted for newcomers: - Binance leads in liquidity and asset variety but has a steeper learning curve. - Coinbase is recognized for compliance and user-friendly design, suited for long-term holders. - OKX offers advanced derivatives and tools but may overwhelm absolute beginners. - Bybit is popular among active traders, particularly in futures. - WEEX is noted for its beginner-friendly interface, clear risk reminders, and execution-focused experience. The article emphasizes that rankings are referential, not absolute. The "right" exchange depends on the user’s experience level and trading style. As the market matures, exchanges play an increasingly important role in user education and protection. Choosing a platform that matches one’s needs is more valuable long-term than chasing volatile assets.

marsbit12/23 14:33

2025 Crypto Market Background: Why 'Choosing the Right Exchange' Is More Important Than Choosing the Right Coin

marsbit12/23 14:33

Bitcoin’s Post-Quantum Shift Could Take A Decade, Crypto Exec Says

A debate is emerging regarding the quantum computing threat to Bitcoin and its potential market impact. While some investors, like Capriole's Charles Edwards, warn it could push Bitcoin below $50,000 by 2028 if unaddressed, developers urge caution. Bitcoin Core developer Jameson Lopp and Blockstream CEO Adam Back agree the threat is not immediate, but a migration to post-quantum cryptography could take 5-10 years due to the protocol's complexity and need for widespread coordination. The community is split; some VCs see imminent risk, while long-time advocates like Pierre Rochard question the urgency. Upgrading Bitcoin's cryptography is a massive undertaking, involving proposals like BIP 360, but enforcement and coordination remain significant challenges. The call is for funding research and building migration tools, as price concerns turn the issue from academic to practical.

bitcoinist12/23 03:01

Bitcoin’s Post-Quantum Shift Could Take A Decade, Crypto Exec Says