# Сопутствующие статьи по теме Security

Новостной центр HTX предлагает последние статьи и углубленный анализ по "Security", охватывающие рыночные тренды, новости проектов, развитие технологий и политику регулирования в криптоиндустрии.

MoveBit Research Release | Belobog: A Move Fuzzing Framework for Real-World Attacks

MoveBit introduces Belobog, a novel fuzzing framework designed specifically for Move smart contracts to address security challenges beyond syntax and type errors. Unlike traditional fuzzing methods that struggle with Move’s strong type system and resource semantics, Belobog leverages type-guided input generation and mutation. It constructs a type graph to produce semantically valid and executable transaction calls, significantly improving the efficiency and depth of state exploration. The framework integrates concolic execution (combining concrete and symbolic execution) to penetrate complex constraints and branch conditions, enabling deeper coverage of potential vulnerabilities. Evaluated on 109 real-world Move contracts, Belobog detected 100% of Critical and 79% of Major vulnerabilities confirmed by manual audits. It also demonstrated the ability to reproduce full exploit paths without prior knowledge of vulnerabilities. Designed to be developer-friendly, Belobog will be released as open-source to encourage community adoption and extension. The work is currently under peer review for PLDI’26. Preprint: https://arxiv.org/abs/2512.02918

marsbit12/16 09:12

MoveBit Research Release | Belobog: A Move Fuzzing Framework for Real-World Attacks

marsbit12/16 09:12

Poland's Crypto Regulatory Bill 'Stalled', Pro-Crypto President and Strong-Regulation Prime Minister Engaged in Fierce 'Internal Struggle'

Poland is embroiled in a political standoff over its cryptocurrency regulatory bill, pitting pro-crypto President Karol Duda against Prime Minister Donald Tusk's pro-regulation government. The bill, intended to align with the EU's MiCA framework, mandates strict oversight by Poland's Financial Supervision Authority (KNF), requiring crypto service providers to register, comply with anti-money laundering rules, and adhere to consumer protection measures. It also introduces criminal liability for unlicensed activities. President Duda vetoed the bill, arguing it threatens economic freedom, stifles innovation with high compliance costs, and grants excessive powers to regulators. The ruling coalition, led by Tusk, resubmitted the identical bill unchanged, framing it as a national security necessity to counter Russian influence and illicit financial activities. The deadlock highlights deeper ideological divides: Duda's camp prioritizes market freedom and competitiveness, while Tusk's government emphasizes regulatory rigor and EU integration. The impasse leaves Poland as one of the few EU members yet to fully implement MiCA, with ongoing political negotiations determining the bill's fate.

marsbit12/16 08:03

Poland's Crypto Regulatory Bill 'Stalled', Pro-Crypto President and Strong-Regulation Prime Minister Engaged in Fierce 'Internal Struggle'

marsbit12/16 08:03

The U.S. SEC Teaches You How to Custody Crypto Assets Step by Step

The U.S. SEC published an investor bulletin on December 12 to educate retail investors on crypto asset custody. The bulletin explains that crypto custody refers to how and where crypto assets are stored, typically through a crypto wallet that holds private and public keys rather than the assets themselves. Wallets are categorized as either "hot" (internet-connected, convenient but more vulnerable) or "cold" (offline, more secure but less convenient). Investors must also choose between self-custody (full control and responsibility over private keys) and third-party custody (using a service like an exchange, which manages keys but introduces counterparty risk). The SEC provides key questions for both options. For self-custody, these include assessing technical ability, desired control level, wallet type, and costs. For third-party custody, investors are urged to research the provider's background, regulatory status, insurance policies, security measures, asset storage methods, use of client assets (e.g., rehypothecation), privacy practices, and fee structure. General protection tips include never sharing private keys or seed phrases, safeguarding privacy, being wary of phishing scams, and using strong passwords with multi-factor authentication.

marsbit12/16 01:05

The U.S. SEC Teaches You How to Custody Crypto Assets Step by Step

marsbit12/16 01:05

Looking Back at the Web3 Wallet Undercurrents of 2025: What Are the Major Players Really Competing On?

In 2025, the Web3 wallet sector is undergoing a quiet but significant transformation, driven by major players integrating advanced technologies to enhance security, usability, and functionality. Key developments include Coinbase and Bitget adopting TEE (Trusted Execution Environment) for secure key management and transaction signing, Binance and OKX leveraging TEE with MPC (Multi-Party Computation) and smart accounts for improved security and cross-chain operations, and MetaMask and Phantom introducing social login features using encrypted key sharding for better recovery and user experience. The evolution reflects a shift from purely self-custodial models to hybrid approaches that balance security with convenience, enabling features like automated trading, gas sponsorship, and seamless multi-chain interactions. This transition is fueled by emerging trends such as Perps (perpetual contracts), RWA (real-world assets), and CeDeFi, which demand more complex transaction capabilities. While no new dominant wallets emerged, existing leaders are repositioning as comprehensive entry points for diverse on-chain activities, moving beyond basic asset storage to integrated financial services. The adoption of TEE and MPC technologies, alongside potential future integration with passkeys, indicates a maturation of wallet infrastructure, setting the stage for broader adoption and more sophisticated applications in the coming years.

marsbit12/15 04:05

Looking Back at the Web3 Wallet Undercurrents of 2025: What Are the Major Players Really Competing On?

marsbit12/15 04:05

Ethereum Is Becoming the New Global Financial Backend

Ethereum is emerging as a global financial backend, reducing the complexity and cost of building financial services while increasing speed and security. It embeds core financial operations—such as ownership recording, value transfer, and obligation enforcement—into software, executed via a distributed validator set. This shared infrastructure eliminates the need for redundant internal systems, transforming capital-intensive processes into software-driven activities. The platform addresses key economic frictions: triangulation (discovery and agreement), transfer (value movement), and trust (enforcement). By providing a transparent, programmable, and cryptographically secured environment, Ethereum enables real-time settlement, automated compliance, and global interoperability. This reduces operational risks and costs, particularly for new entrants and markets with fragile financial systems. Ethereum’s impact is most significant in emerging economies, where it offers immediate functional improvements, while in developed markets, benefits accumulate gradually as more processes become programmable. It shifts institutional focus from infrastructure maintenance to innovation and product design, promoting leaner, more efficient financial services. As a resilient, open, and verifiable system, Ethereum is positioned to serve as the foundational layer for future financial infrastructure, driven by economic incentives favoring transparency and reliability.

marsbit12/13 10:36

Ethereum Is Becoming the New Global Financial Backend

marsbit12/13 10:36

Scaramucci predicts ‘exponential opportunity’ for crypto at LONGITUDE

At the LONGITUDE event, Anthony Scaramucci and other industry leaders expressed strong optimism for cryptocurrency in 2026, citing institutional investment and clearer regulations as key drivers. Scaramucci emphasized the potential for blockchain to reduce the $4 trillion spent globally on transaction verification in TradFi, with protocols like Ethereum and Solana offering major efficiency gains. Kristin Smith highlighted regulatory progress in the U.S. and globally, though she noted that trading regulations remain a barrier. Eli Ben-Sasson discussed the rising demand for privacy protocols like Zcash, noting that enterprises seek tailored privacy solutions. Security was also a focus, with Phemex CEO Federico Variola and Ledger's Ian Rodgers addressing risks from social engineering attacks, exemplified by the $1.6B Bybit hack. The event underscored a collective push toward safer, more regulated, and efficient crypto adoption.

cointelegraph12/12 13:37

Scaramucci predicts ‘exponential opportunity’ for crypto at LONGITUDE

cointelegraph12/12 13:37

The 20% Threshold Audit: Which of the Top 20 Cryptocurrencies Will Perish Under the CLARITY Act?

**Audit of the Top 20: Which Cryptocurrencies Will the CLARITY Act Kill?** Scheduled for a final push in December 2025, the U.S. CLARITY Act introduces a critical 20% threshold. If any single entity or affiliated party controls more than 20% of a network's token supply or validation power, the asset is classified as a "digital security" under the SEC's strict jurisdiction. If it remains below, it is a "digital commodity" under the more lenient CFTC. An audit of the top 20 cryptocurrencies reveals a stark divide: **The Safe Haven (Digital Commodities):** * **Bitcoin (BTC):** 0% control. The gold standard of decentralization. * **Ethereum (ETH):** <1% control. Highly dispersed validators and foundation holdings. * **Dogecoin (DOGE) & Litecoin (LTC):** Near 0% control. Their simple, early PoW issuance is now a major compliance advantage. **The Red Zone (At High Risk):** * **XRP:** High risk. Ripple's massive escrowed holdings could be deemed "entity-controlled." * **BNB:** High risk. Strong association with Binance exchange and its controlled burn mechanism. * **TON:** High risk. Historically concentrated supply from early mining. * **Sui & Aptos:** Extreme risk. Classic "VC coins" with teams, investors, and foundations holding over 50%. * **Layer 2 Tokens (e.g., ARB, OP):** Medium-High risk. Their DAO treasuries often hold 30-40+% of supply, which could be viewed as a single entity. **The Grey Zone:** * **Solana (SOL):** Its status is unclear. FTX's collapse dispersed supply, but the foundation and VC holdings remain a focus for regulators. The 360-day grace period will trigger a market reckoning. Projects may desperately airdrop or burn tokens to dilute control, accept a security" label and face liquidity death on major exchanges, or be preemptively delisted. The outcome will be a "gentrification" of crypto, splitting the market into compliant, institutional "digital commodities" and a shadowy world of illiquid "digital securities." Investors must now scrutinize token distribution or risk being locked out of liquidity.

marsbit12/12 09:40

The 20% Threshold Audit: Which of the Top 20 Cryptocurrencies Will Perish Under the CLARITY Act?

marsbit12/12 09:40

Decade-Long Tug-of-War Concludes: "Crypto Market Structure Bill" Races Toward Senate

After a decade of regulatory uncertainty, the U.S. is advancing the "Cryptocurrency Market Structure Act" (CLARITY Act), which is expected to move into the Senate for revision and voting next week. The bill, which passed the House with overwhelming support in July, aims to end the long-standing debate over whether digital assets are securities or commodities by introducing a clear classification framework. The core of the legislation distinguishes between "digital commodities" and "digital securities." Most tokens issued on decentralized blockchains will be classified as digital commodities under CFTC jurisdiction, while only those meeting the Howey test will remain regulated as securities by the SEC. The bill also establishes a "mature blockchain" exemption, allowing highly decentralized networks like Bitcoin and Ethereum to avoid SEC registration. Additionally, digital commodity trading platforms must register with the CFTC, with a 360-day interim registration period to ensure a smooth transition. The act mandates coordination between the CFTC and SEC through a joint advisory committee to prevent regulatory gaps. It also protects decentralized finance (DeFi) participants by exempting non-custodial, non-profit roles from broker-dealer regulations. This legislative push aligns with broader regulatory shifts under the Trump administration, which has appointed crypto-friendly leaders to key agencies like the SEC, CFTC, and FDIC. These changes, along with recent CFTC initiatives to allow spot crypto trading on regulated platforms, signal a structural shift toward embracing digital assets. The bill is poised to complement earlier stablecoin legislation, positioning the U.S. as a potential global leader in crypto regulation and attracting institutional investment, though challenges in DeFi oversight and international coordination remain.

marsbit12/12 09:14

Decade-Long Tug-of-War Concludes: "Crypto Market Structure Bill" Races Toward Senate

marsbit12/12 09:14

a16z's 10,000-Word Essay (Part 1): The Misunderstood 'Quantum Supremacy', You Don't Need to Panic Until 2030

The article clarifies misconceptions about "quantum supremacy" and argues that cryptographically relevant quantum computers (CRQC) capable of breaking classical encryption (e.g., via Shor's algorithm) are unlikely to emerge before 2030. It distinguishes between post-quantum encryption and signatures, emphasizing that encryption requires immediate migration due to "Harvest Now, Decrypt Later" (HNDL) attacks, where adversaries store encrypted data for future decryption. In contrast, post-quantum signatures are less urgency, as they are not vulnerable to HNDL—past signatures remain secure even after CRQC emergence. The article critiques exaggerated claims about quantum progress, noting that current hardware lacks the scale, fidelity, and error correction needed for CRQC. It also highlights that zkSNARKs, like signatures, are not susceptible to HNDL attacks. Migration strategies should prioritize encryption while adopting a measured approach for signatures to avoid unnecessary costs and risks.

marsbit12/12 06:20

a16z's 10,000-Word Essay (Part 1): The Misunderstood 'Quantum Supremacy', You Don't Need to Panic Until 2030

marsbit12/12 06:20

Save These 17 Predictions! a16z's Latest Report Reveals the 2026 Crypto Wealth Code

a16z's latest crypto report outlines 17 key predictions for 2026, focusing on major trends across stablecoins, AI, privacy, and industry infrastructure. Key insights include: stablecoin on/off ramps will mature, enabling seamless integration with traditional finance and daily payments; RWA tokenization will shift towards crypto-native models like perpetual futures rather than simple asset replication; and legacy banking systems will increasingly adopt stablecoins for innovation without core overhauls. AI agents will require new identity frameworks (KYA - Know Your Agent) and will transform research through nested, multi-agent workflows. Privacy will become a critical competitive moat for blockchains, creating strong network effects. The report also highlights the rise of prediction markets, staked media (where credibility is backed by on-chain commitments), and SNARKs becoming efficient enough for broad use beyond blockchain. Finally, it calls for clearer crypto regulations to unlock blockchain's full potential by aligning legal and technical structures.

marsbit12/12 03:21

Save These 17 Predictions! a16z's Latest Report Reveals the 2026 Crypto Wealth Code