# Сопутствующие статьи по теме Security

Новостной центр HTX предлагает последние статьи и углубленный анализ по "Security", охватывающие рыночные тренды, новости проектов, развитие технологий и политику регулирования в криптоиндустрии.

Written at the End of 2025: Code, Power, and Stablecoins

By the end of 2025, stablecoins have firmly established themselves, with a market cap surpassing $300 billion—a growth of nearly $100 billion in under a year. This growth reflects institutional confidence, with major banks projecting multi-trillion dollar valuations in the coming years. Stablecoins are no longer just a crypto narrative but a fundamental shift in monetary infrastructure, built on code and verifiable trust rather than opaque intermediaries. The failure of Synapse highlighted the risks of traditional fintech: hidden counterparty risk and unverifiable accounting. In contrast, self-custodied stablecoins eliminate intermediary risk, though issuer risk remains—mitigated by transparent reserve proofs and on-chain monitoring. Stablecoins enable global reach from day one, bypassing the need for localized banking infrastructure. The bottleneck remains fiat on/off-ramps, but modular solutions allow for gradual integration. New purpose-built blockchains like Tempo and Arc aim to optimize payments but face trust barriers compared to battle-tested networks like Ethereum and Solana. Agentic finance presents a near-term opportunity in automating mundane financial tasks, with smart contracts enabling secure, permission-bound automation. However, security remains critical: rapid growth must not compromise operational rigor. Privacy is another key challenge, as real-world business adoption requires selective disclosure—proving compliance without exposing sensitive data. The true potential of stablecoins lies beyond replicating existing fintech—it’s in unlocking programmable money, internet-native capital markets, and reimagining financial services through verifiable, autonomous systems.

比推12/26 19:38

Written at the End of 2025: Code, Power, and Stablecoins

比推12/26 19:38

Ripple’s XRP Ledger Just Did Something Bitcoin Has Never Done

Ripple's XRP Ledger (XRPL) has achieved a significant milestone by developing a fully quantum-resistant testnet, a feat not yet accomplished by Bitcoin. Developers, including validator Vet and XRPL Labs engineer Dennis Angell, revealed that the AlphaNet testnet now features quantum-secure consensus, accounts, transactions, and Dilithium cryptography. While this advancement enhances security, it comes with trade-offs, such as larger transaction signature sizes. The move addresses growing concerns about quantum computing risks to blockchain networks relying on ECDSA cryptography, which could be vulnerable to powerful quantum computers. This proactive approach positions XRPL ahead of competitors, ensuring long-term infrastructure resilience and a smooth transition to post-quantum security.

bitcoinist12/26 17:16

Ripple’s XRP Ledger Just Did Something Bitcoin Has Never Done

bitcoinist12/26 17:16

Trust Wallet Hacked: What Crypto Users Should Do Now

Trust Wallet has confirmed a security incident specifically affecting its Chrome browser extension version 2.68, advising users to immediately disable and upgrade to version 2.69. Mobile-only users and those on other extension versions are not impacted. The breach was first flagged by on-chain investigator ZachXBT, who reported multiple users had funds drained. Cybersecurity firm PeckShield estimates losses exceeded $6 million, with a portion sent to centralized exchanges. Trust Wallet is directing affected users to contact support, and Binance founder Changpeng Zhao has stated that Trust Wallet will cover the estimated $7 million in losses. Users are urged to update their extensions and avoid using version 2.68 until upgraded.

bitcoinist12/26 15:32

Trust Wallet Hacked: What Crypto Users Should Do Now

bitcoinist12/26 15:32

Trust Wallet Hit by Malicious Update, $7M Stolen — What Happened and What Users Should Do Now

Trust Wallet's Chrome extension was compromised by a malicious update in version 2.68, leading to an estimated $7 million in stolen cryptocurrency. The breach occurred when users imported their seed phrases into the compromised extension, which secretly transmitted private keys to an attacker-controlled domain. This supply-chain attack went undetected as the malicious code was disguised as analytics software. Binance founder Changpeng Zhao confirmed that affected users would be fully reimbursed through the exchange's SAFU fund. Trust Wallet released a patched version (2.69) and advised users to disable the vulnerable extension immediately. Security experts recommend that impacted users transfer funds to new wallets, avoid reusing exposed seed phrases, and revoke existing approvals. The incident highlights the risks of browser-based wallets and underscores the importance of hardware wallets for larger holdings.

ccn.com12/26 08:47

Trust Wallet Hit by Malicious Update, $7M Stolen — What Happened and What Users Should Do Now

ccn.com12/26 08:47

Crypto Morning Brief: Offshore RMB Breaks Through 7.0 Against USD Again, Trust Wallet Users' Funds Stolen

China's offshore yuan strengthened past 7.0 against the U.S. dollar, reaching its highest level since September 2024. Bitcoin mining difficulty saw a slight increase to 148.26 T. In regulatory developments, Hong Kong is advancing legislation for OTC digital asset trading and custody services to enhance compliance and combat fraud. A significant security breach affected Trust Wallet users, with at least $6 million stolen due to a vulnerability in its browser extension. Meanwhile, an analyst confirmed that Trend Research’s Ethereum holdings are facing approximately $143 million in unrealized losses. In political news, the Wall Street Journal reported that Changpeng Zhao benefited from an emerging "informal pardon" system during Trump’s presidency, where lobbying for clemency reportedly involved multi-million dollar fees. The AI-related cryptocurrency sector experienced a sharp decline, losing 75% of its market value—approximately $53 billion—in 2025, with several major tokens dropping over 70%. Infinex reduced the valuation for its INX token sale to $99.99 million following market feedback. Pantera Capital’s Jay Yu shared 12 predictions for 2026, including the rise of tokenized gold, AI-integrated crypto interfaces, and consolidation among digital asset trading platforms. An annual CoinGlass report highlighted Binance, OKX, and Bitget as leaders in BTC and ETH liquidity and derivatives trading volume. Finally, Caixin warned about legal risks associated with the use of "U Cards" in China—offshore bank cards that facilitate payments using USDT.

marsbit12/26 01:45

Crypto Morning Brief: Offshore RMB Breaks Through 7.0 Against USD Again, Trust Wallet Users' Funds Stolen

marsbit12/26 01:45

ZachXBT flags suspected Trust Wallet extension issue as users report drained funds

Security concerns emerged around the Trust Wallet browser extension on December 25, after blockchain investigator ZachXBT flagged suspicious activity potentially linked to a recent update. Reports suggest a supply-chain compromise may have been introduced in a December 24 update, where newly added code could silently exfiltrate sensitive wallet data—particularly during seed phrase imports—leading to immediate fund draining. Multiple users reported losses, with unverified estimates exceeding $2 million. The malicious code allegedly sent data to a recently registered external domain mimicking Trust Wallet infrastructure. The issue appears limited to the browser extension, with no evidence of mobile app compromise. Trust Wallet has not yet issued an official response or advisory. Researchers emphasize the situation remains under investigation, warning users to avoid importing seed phrases into the extension until clarified. If confirmed, this would represent a significant supply-chain attack.

ambcrypto12/25 21:57

ZachXBT flags suspected Trust Wallet extension issue as users report drained funds

ambcrypto12/25 21:57

409mln SOL staked and counting – Is market missing Solana’s signal?

Solana's fundamentals show mixed signals despite a record-high 409 million SOL staked, enhancing network security. However, decentralization concerns arise as validator numbers dropped 68% (from 2,500 to 800) due to the Solana Foundation cutting subsidies. Real-World Asset (RWA) activity is strong, with over 115K holders—close to Ethereum's count—but net flows lag significantly behind competitors. Solana attracted $216 million in Q4 2025, while Ethereum and BNB Chain each exceeded $1 billion. Despite these developments, SOL's price has fallen 58% to $121, indicating a disconnect from on-chain growth.

ambcrypto12/25 08:02

409mln SOL staked and counting – Is market missing Solana’s signal?

ambcrypto12/25 08:02

CertiK Annual Security Report: Web3 Losses Increase 37% Year-on-Year in 2025, Phishing Attacks and Supply Chain Incidents Emerge as Major Threats

CertiK's 2025 Skynet Hack3D Security Report reveals that the Web3 industry suffered approximately $3.35 billion in losses across 630 security incidents, a 37% increase from 2024. While the number of incidents decreased by 137, the average loss per attack surged by 66.6% to $5.32 million, indicating a trend toward targeting high-value assets. The most significant losses resulted from supply chain attacks, which accounted for nearly half of the total losses ($1.45 billion) despite only two recorded incidents. The largest was the February Bybit breach, where attackers compromised a third-party multi-signature wallet service to bypass security protocols. Phishing remained the most frequent threat, with 248 incidents causing $723 million in losses. The report warns that AI is amplifying these attacks by generating highly convincing fake websites and targeted scam messages, making traditional defenses less effective. Amid growing risks, regulatory clarity is improving globally, with advancements in U.S. stablecoin legislation and frameworks like MiCA in the EU. Security is shifting from a reactive cost to a core infrastructure element. The report concludes that projects embedding security into their design and development will be better positioned for the future.

marsbit12/25 07:53

CertiK Annual Security Report: Web3 Losses Increase 37% Year-on-Year in 2025, Phishing Attacks and Supply Chain Incidents Emerge as Major Threats

marsbit12/25 07:53

RWA Utility Tokens, Stop Kidding Yourselves

The article, written by lawyer Shao Jiadian, critically examines the common claim by RWA (Real World Asset) token projects that their tokens are "utility tokens" rather than securities. The author argues that regulatory bodies globally do not classify assets based on their self-proclaimed labels but on their actual economic function and structure. The core argument is that most so-called "utility RWA tokens" involve users investing money into a common asset pool managed by the project, with the expectation of profits derived from the project's efforts (e.g., dividends, revenue sharing from assets like real estate or equipment). This structure meets the criteria of an "investment contract" and is therefore treated as a security in major jurisdictions like the U.S., EU, Switzerland, and Hong Kong. Two key legal cases are cited as evidence: 1. **DeFiMoney Market (DMM):** Its fixed-yield token and "governance" token were both deemed securities by the SEC because investors' profits came from a managed asset pool. 2. **Unicoin (2025):** An asset-backed token promising returns from real estate and equity was charged by the SEC as an unregistered securities offering and fraud. The author highlights an inherent conflict: utility tokens emphasize *use* and *consumption*, while RWA tokens are fundamentally linked to *assets* and *returns*. Any token offering profit-sharing, dividends, or redeemable cash flows will be viewed as a security by regulators. The conclusion is stark: projects are not avoiding securities laws out of ignorance but to circumvent the stricter requirements of a regulated securities offering. The only viable paths to avoid securities classification are: 1. Purely functional tokens with no profit expectation. 2. Private offerings strictly for accredited investors. 3. Operating under specific regimes like Dubai's VARA that regulate security-like tokens as virtual assets. Ultimately, any RWA token offered to the public that is tradable and promises returns will almost certainly be treated as a security. The choice for projects is not between utility and security labels, but between "long-term compliance" and "short-term gambling."

marsbit12/25 03:13

RWA Utility Tokens, Stop Kidding Yourselves

marsbit12/25 03:13

Skynet Hack3D Report Highlights Web3 Security in 2025

Web3 entered 2025 with strong momentum due to improved macroeconomic conditions, supportive U.S. policies, and growing institutional confidence. However, total losses from cyberattacks reached $3.35 billion, a 37% increase from 2024. Excluding the $1.45 billion Bybit exploit—attributed to the Lazarus Group via a supply-chain attack—losses actually decreased year-over-year, indicating a shift toward fewer but more sophisticated and high-value attacks. Phishing was the most common attack vector, accounting for $722.9 million across 248 incidents, followed by code-related exploits at $554.6 million. AI played a dual role: enhancing defensive tools like automated audits while also enabling highly convincing phishing campaigns, deepfake impersonations, and rapid exploit replication. Regulatory clarity improved with the U.S. GENIUS Act and E.U.’s MiCA implementation, raising security and compliance standards. CertiK expanded its security offerings, integrating risk analysis tools, publishing major reports, and advancing research in zkEVM and consensus mechanisms. As Web3 grows, integrating security at all levels remains essential to mitigate evolving AI-driven and systemic risks.

TheNewsCrypto12/24 16:17

Skynet Hack3D Report Highlights Web3 Security in 2025