# Сопутствующие статьи по теме Security

Новостной центр HTX предлагает последние статьи и углубленный анализ по "Security", охватывающие рыночные тренды, новости проектов, развитие технологий и политику регулирования в криптоиндустрии.

Crypto E-Commerce Platform Bitrefill’s Funds Drained In North Korean Cyberattack

Bitrefill, a Swedish crypto e-commerce platform, disclosed a cyberattack on March 1, 2026, attributed to North Korean hackers linked to the Lazarus group. The breach began with a compromised employee laptop, allowing attackers to access sensitive data, including production secrets. Suspicious purchasing patterns led to the discovery that hot wallets were drained, with funds redirected to attacker-controlled addresses. Approximately 18,500 purchase records were exposed, containing limited user data such as email addresses, crypto payment addresses, and IPs. For about 1,000 purchases, encrypted names may have been accessed. Bitrefill is enhancing cybersecurity through external reviews, tighter access controls, and improved monitoring. The company stated it remains well-funded and will cover losses from operational capital.

bitcoinist03/18 05:02

Crypto E-Commerce Platform Bitrefill’s Funds Drained In North Korean Cyberattack

bitcoinist03/18 05:02

A Quick Fix: Ripple Patches Major Issue That Could Threaten XRP Users On The Ledger

Ripple has released Rippled version 3.1.2 to patch a critical vulnerability in the XRP Ledger's Batch amendment feature. The flaw, discovered shortly after the feature's introduction, could have allowed attackers to execute unauthorized transactions and caused servers to crash or restart under certain conditions. Developers from RippleX collaborated on the urgent fix. This is the third rapid update addressing issues originating from Rippled 3.1.0. Separately, Ripple CTO David Schwartz responded to criticism about the company's practice of selling XRP to fund operations, arguing that such sales do not necessarily harm retail investors.

bitcoinist03/18 03:32

A Quick Fix: Ripple Patches Major Issue That Could Threaten XRP Users On The Ledger

bitcoinist03/18 03:32

U.S. Establishes 'Five-Category Law' for Crypto Assets: A Guide to the New Regulatory Framework (Essential Edition)

The U.S. SEC and CFTC jointly issued a landmark 68-page regulatory framework on March 17, 2026, establishing a clear classification system for crypto assets. The new rules categorize assets into five types: Digital Commodities (e.g., BTC, ETH), Digital Securities, Regulated Payment Stablecoins, Digital Tools, and Digital Collectibles. A key innovation is the "separation" mechanism, allowing assets to transition from securities to commodities once they become sufficiently decentralized and no longer rely on managerial efforts. The framework also clarifies that activities like mining, staking, wrapping, and airdrops (under certain conditions) are not securities transactions. This guidance aims to reduce regulatory uncertainty, lower compliance costs, and reinforce U.S. leadership in crypto innovation by providing legal clarity and encouraging market transparency.

marsbit03/18 01:17

U.S. Establishes 'Five-Category Law' for Crypto Assets: A Guide to the New Regulatory Framework (Essential Edition)

marsbit03/18 01:17

From FOMO to Implementation: A Review of the Current State of AI Services in Crypto Companies

From FOMO to Implementation: A Look at Crypto Companies' AI Services Cryptocurrency companies, from exchanges to security firms, are rapidly integrating AI-driven services, driven by FOMO (fear of missing out) rather than just hype. Unlike previous cycles, established players like Coinbase and Binance are leading the charge, treating AI as a business necessity rather than a narrative. Key sectors adopting AI include: - **Research**: Projects like Surf AI address crypto's fragmented data problem by offering specialized tools that aggregate on-chain data, social sentiment, and metrics, providing accurate, crypto-specific insights. - **Trading**: Exchanges are leveraging AI to allow natural language commands for analysis and execution, lowering the barrier for non-developers to create automated strategies via AI agents. - **Security/Audit**: Firms like CertiK use AI to enhance smart contract audits by combining automated code scanning with human review, and adding post-audit monitoring to cover previous blind spots. - **Payment Infrastructure**: Companies are developing protocols for AI agents to make on-chain payments, using stablecoins for API fees or services, with Circle’s proposal for AI-agent payments gaining attention. The push is fueled by AI advancements like MCP and OpenClaw, which make agent-based automation accessible. However, the adoption gap between "having functionality" and "actual usage" remains, with questions about user trust in AI for real trading or payments. Ultimately, crypto firms are acting to avoid obsolescence in the AI era, though real-world utility is still evolving.

比推03/17 18:08

From FOMO to Implementation: A Review of the Current State of AI Services in Crypto Companies

比推03/17 18:08

Is Your "OpenClaw" Running Naked? CertiK Test: How Vulnerable OpenClaw Skill Bypasses Audits, Takes Over Computers Without Authorization

OpenClaw, a popular open-source, self-hosted AI agent platform, has experienced rapid growth due to its flexibility and extensibility. Its ecosystem relies heavily on third-party “Skills” from the Clawhub marketplace, which can perform high-risk operations like system automation and crypto wallet transactions. However, security firm CertiK has identified critical vulnerabilities in the platform’s security model. CertiK’s research reveals that OpenClaw’s current security—primarily dependent on pre-publishing scans like VirusTotal, static code analysis, and AI logic checks—is fundamentally flawed. These measures can be easily bypassed through simple code obfuscation, and malicious Skills can be published even before scanning is complete. In a proof-of-concept, CertiK developed a seemingly benign Skill that contained a hidden remote code execution vulnerability. It passed all checks without warnings and, once installed, allowed full system control via a remote command. The core issue is not a specific bug but a industry-wide misconception: over-reliance on scanning instead of runtime isolation. Unlike systems like iOS, which enforce strict sandboxing, OpenClaw’s sandbox is optional and often disabled for functionality, leaving systems exposed. CertiK recommends that OpenClaw enforce mandatory sandboxing and granular permission controls for Skills. Users are advised to deploy OpenClaw on isolated devices and avoid exposing sensitive data or assets until stronger isolation is implemented. The report stresses that security must evolve from detection-based approaches to default containment of risks at runtime.

marsbit03/17 14:39

Is Your "OpenClaw" Running Naked? CertiK Test: How Vulnerable OpenClaw Skill Bypasses Audits, Takes Over Computers Without Authorization

marsbit03/17 14:39

Wisdom Tree + Glassnode: Reframing Blockchains as Economic Systems

The digital asset ecosystem is increasingly viewed as an emerging financial system with its own infrastructure and economic structure. This report, a collaboration between Wisdom Tree and Glassnode, reframes blockchain networks as multi-layered economic systems that mirror traditional markets in function and incentives. Key insights include the use of transaction fees as a direct measure of blockchain health, the economic models of security (energy-backed for Bitcoin, capital-backed for Ethereum), and the industrialization of mining. Systemically important crypto exchanges and custodians now link on-chain activity to traditional capital markets, facilitating institutional adoption. Stablecoins serve as the core settlement and liquidity layer, while DeFi and tokenization extend financial functions on-chain with growing integration into traditional finance. The full analysis provides a data-driven framework for evaluating digital assets beyond price, using observable on-chain metrics and macroeconomic benchmarks.

insights.glassnode03/17 14:29

Wisdom Tree + Glassnode: Reframing Blockchains as Economic Systems

insights.glassnode03/17 14:29

South Korea Tightens Crypto Seizure Rules After Major Security Failures

Following major security failures, South Korea National Police Agency has introduced new, stricter rules for handling seized cryptocurrencies. The updated guidelines mandate that law enforcement must maintain full control of private keys and use secure storage methods, addressing vulnerabilities exposed by past incidents. These include a 2021 case where seized Bitcoin was lost due to reliance on a third-party custodian and another where police arrested suspects linked to stolen assets from seized wallets. The new framework establishes clear procedures for seizure, storage, and the management of privacy-focused coins. This is part of a broader government effort, involving financial regulators, to strengthen oversight and prevent future mismanagement of digital assets by public institutions.

TheNewsCrypto03/17 13:57

South Korea Tightens Crypto Seizure Rules After Major Security Failures

TheNewsCrypto03/17 13:57

CoinSwitch Launches Digivault to Address Growing Demand for Crypto Custody

CoinSwitch has launched Digivault, a new custody solution designed to meet the growing global demand for secure cryptocurrency storage for both retail and institutional investors. The platform focuses on safeguarding digital assets by reducing the risk of loss and providing secure access. This initiative is part of CoinSwitch’s broader strategy to enhance digital asset management infrastructure amid increasing crypto adoption. The company emphasizes that reliable custody services are essential as more institutions seek exposure to digital assets, requiring protection for private keys and compliance with evolving regulations. Digivault aims to build investor trust and support broader market adoption by offering a secure, regulation-compliant storage system that ensures both security and operational efficiency.

TheNewsCrypto03/17 13:04

CoinSwitch Launches Digivault to Address Growing Demand for Crypto Custody

TheNewsCrypto03/17 13:04

x402 Wish List

"x402 Wish List" explores the potential of x402 as a micro-payment and data aggregation protocol, based on a Galaxy Research report. It highlights a use case where an AI agent uses x402 to query weather data, book trips, and manage payments to various data sources. The author envisions x402 enabling new business models, such as pay-per-use "Skills Endpoints" for AI agents, replacing fixed fees with usage-based pricing. Other proposed applications include curated data streams for niche crypto news, aggregated ecosystem metrics, a tracker for media prediction performance, and a security/audit incident aggregator. The summary concludes by questioning the economic viability of micro-payments at scale and the legal challenges of data sourcing, noting that x402 V2's revenue-sharing features could help align incentives between data aggregators and original providers.

marsbit03/17 12:24

Vitalik Re-examines Ethereum Beacon Chain Architecture, Claude Doubles Off-Peak Quotas: What's the English-Speaking Community Discussing Today?

Over the past 24 hours, key discussions in the English-speaking crypto community revolved around DeFi security incidents, AI platform policies, and infrastructure developments. Aave and CoW Swap released conflicting reports on a $44M MEV loss from a large USDT swap, sparking debate over user vs. protocol responsibility. Venus Protocol suspected a market manipulation attack on its vTHE lending pool, resulting in ~$1.7M in bad debt. Meanwhile, Hyperliquid’s vHYPE faced depegging risks due to concentrated redemptions, highlighting vulnerabilities in DeFi staking mechanisms. Anthropic doubled Claude’s usage quotas during off-peak hours, raising questions about AI pricing sustainability and resource management. In ecosystem updates, Vitalik Buterin proposed reevaluating Ethereum’s beacon/execution client separation to simplify node operation and improve self-custody. Solana completed a trade finance tokenization PoC with Citi and PwC, while Helium reached record highs in daily users and hotspots. Hyperliquid gained attention for its RWA perpetual contracts and portfolio margin system, detailed in a comprehensive 140-page report. Prediction markets also saw increased mainstream visibility, with Polymarket integrating with Perplexity and Kalshi being mentioned during Oscar coverage.

marsbit03/16 19:07

Vitalik Re-examines Ethereum Beacon Chain Architecture, Claude Doubles Off-Peak Quotas: What's the English-Speaking Community Discussing Today?