# Сопутствующие статьи по теме Security

Новостной центр HTX предлагает последние статьи и углубленный анализ по "Security", охватывающие рыночные тренды, новости проектов, развитие технологий и политику регулирования в криптоиндустрии.

Anthropic Issues DMCA Takedown Notices, Massively Removes 8,100 Source Code Repositories

AI giant Anthropic has issued multiple DMCA takedown notices to GitHub in response to a major source code leak. The company is targeting illegally hosted repositories containing the code for Claude Code. As a result, GitHub has removed the main repository along with over 8,100 forked repositories, marking one of the largest code copyright clean-up operations in the AI industry. Contrary to initial reports of employee error, an internal investigation revealed the leak was caused by a bug in an internal packaging tool. This bug mistakenly included sensitive files and full TypeScript source code, which should have remained private, into a production build. While this finding shifts blame from employee misconduct, it highlights a critical security flaw in Anthropic's automated workflow. Despite the takedown, the code had already been downloaded by thousands of developers within 48 hours and widely shared on platforms like Telegram, cloud storage, and private Git servers, making complete eradication nearly impossible. The leaked code, which includes implementation logic and internal model fine-tuning instructions, continues to be actively analyzed by developers.

marsbit04/01 07:17

Anthropic Issues DMCA Takedown Notices, Massively Removes 8,100 Source Code Repositories

marsbit04/01 07:17

BitMart VIP Insights: March Crypto Market Review and Hotspot Analysis

BitMart VIP Insights: March 2026 Crypto Market Review and Analysis March saw a mixed macro environment with a hawkish Fed holding rates steady amid persistent inflation, rising oil prices, and weakening employment, raising stagflation concerns. Equities and risk assets weakened. Crypto trading volume showed volatile spikes but lacked sustainability, with total market cap stabilizing around $2.45–2.50T after a mid-month peak. BTC and ETH spot ETFs reversed from outflows to net inflows, with ETH showing stronger capital return and price elasticity. Stablecoin supply expanded modestly but concentrated in major tokens, indicating cautious liquidity return rather than broad risk-on sentiment. BTC traded between $62K–$74K, currently around $69K–$71K, while ETH was weaker in the $1.9K–$2.2K range. SOL was relatively resilient between $82–$97. Key developments included a landmark SEC/CFTC joint framework classifying 16 major assets (including BTC and ETH) as digital commodities, significantly improving regulatory clarity. BlackRock launched the first staking-enabled ETH ETF (ETHB), shifting crypto ETFs from pure price-trackers to yield-generating assets. However, security incidents like the Resolv Labs private key attack highlighted growing off-chain risks. April will be critical for crypto regulation, with the CLARITY法案 potentially advancing. The Ethereum Glamsterdam upgrade enters key testing, and Fed Chair Powell’s term end adds policy uncertainty. Macro data, geopolitics, and ETF flows will remain key market drivers.

marsbit04/01 03:32

BitMart VIP Insights: March Crypto Market Review and Hotspot Analysis

marsbit04/01 03:32

Claude Code Source Code Leaked, Over 500,000 Lines of Code Obtained by Developers

Anthropic faces a major security incident as the complete source code for its AI tool Claude Code, exceeding 500,000 lines of TypeScript, was leaked. The breach originated when a developer shared a compressed file on Twitter, which quickly gained over 5.3 million views. The exposure was due to Anthropic accidentally including .map files when publishing to npm, revealing core code. The leaked code unveils several advanced features, including a project codenamed BUDDY, which offers a personalized cyber pet system with traits like debugging power and even a "sarcasm value." Another feature, KAIROS, aims to create an "always-on" AI assistant capable of maintaining memory across sessions and initiating tasks. The code also includes a "Nightly Dreaming" mechanism, allowing Claude to organize information and consolidate core content while the user sleeps. Despite the breach, the incident has inadvertently showcased Anthropic's innovative capabilities, turning a PR crisis into an unexpected demonstration of their cutting-edge AI developments.

marsbit04/01 00:57

Claude Code Source Code Leaked, Over 500,000 Lines of Code Obtained by Developers

marsbit04/01 00:57

Bitcoin Bombshell: Google’s 2029 Quantum Warning Sparks New Fear

Google's updated quantum threat model, moving its post-quantum cryptography migration deadline to 2029, has significant implications for Bitcoin and cryptocurrencies. A new whitepaper from Google Quantum AI, alongside researchers including Justin Drake and Dan Boneh, suggests breaking the secp256k1 elliptic curve cryptography (used in Bitcoin) may require far fewer quantum resources than previously believed. The paper estimates Shor’s algorithm could break ECDSA keys in minutes using under 500,000 physical qubits. This has shifted the narrative, with experts now urging immediate transition plans. The paper highlights the risk of "on-spend" attacks against live transactions due to Bitcoin's 10-minute block time, while downplaying quantum risks to proof-of-work mining. Google chose to validate its findings via a zero-knowledge proof instead of full circuit disclosure, citing responsible disclosure concerns. The broader call is for vulnerable cryptocurrency communities to begin migrating to post-quantum cryptography without delay.

bitcoinist03/31 18:31

Bitcoin Bombshell: Google’s 2029 Quantum Warning Sparks New Fear

bitcoinist03/31 18:31

Is crypto security at risk? Google warns of 20x faster quantum threat

Google's research indicates quantum computing advances could threaten cryptocurrency security by breaking widely used encryption standards. The report warns cryptographically relevant quantum computers (CRQCs) with approximately 1,200-1,450 logical qubits could potentially break 256-bit elliptic curve encryption in minutes. This capability might compromise Bitcoin private keys in under nine minutes and expose up to 1,000 Ethereum wallets in roughly nine days, with an estimated 6.7 million Bitcoin addresses currently vulnerable. Google emphasizes a 20-fold reduction in required physical qubits, accelerating the quantum threat timeline. In response, Google advocates transitioning to post-quantum cryptographic standards by 2029, though implementation requires coordinated upgrades and policy changes. Failure to adapt may lead to exploitation risks and market instability. Asian countries show the highest search interest in post-quantum cryptography solutions.

ambcrypto03/31 16:03

Is crypto security at risk? Google warns of 20x faster quantum threat

ambcrypto03/31 16:03

Google research flags quantum attack risk as Ethereum advances post-quantum roadmap

New research involving Google warns that quantum computers with approximately 1,200–1,450 logical qubits could break elliptic curve cryptography—including the secp256k1 standard used in Bitcoin and Ethereum—within minutes. The study highlights two primary risks: “on-spend” attacks, where a quantum system could derive a private key during the 9–12 minute transaction confirmation window, and “at-rest” attacks on dormant wallets with exposed public keys. In response, Ethereum has launched a multi-year post-quantum roadmap aimed at transitioning to quantum-resistant cryptographic system across its protocol layers. However, the shift introduces challenges such as larger signatures, higher computational demands, and the need for coordinated upgrades. User migration to new wallet standards and the vulnerability of older assets also remain significant hurdles. While quantum threats are not immediate, the research underscores the importance of proactive preparation to mitigate long-term risks. Industry leaders like Changpeng Zhao acknowledge that, although transition is feasible, decentralized coordination and potential forks could complicate the process.

ambcrypto03/31 15:05

Google research flags quantum attack risk as Ethereum advances post-quantum roadmap

ambcrypto03/31 15:05

CertiK Releases Skynet Report: 'Wrench Attacks' Surge 75% in 2025, Physical Violence Becomes Major Threat in Crypto Space

CertiK's Skynet Report reveals a 75% surge in "wrench attacks" in 2025, where physical violence, kidnapping, or intimidation is used to force cryptocurrency holders to surrender private keys or passwords. These attacks, which bypass technical defenses to target individuals directly, resulted in over $40.9 million in confirmed losses—a 44% year-on-year increase. Europe emerged as the highest-risk region, accounting for over 40% of incidents, with France recording the most cases. The report highlights a trend toward increased violence, with physical assaults rising by 250%, and notes that attacks are becoming more organized, often executed by transnational criminal groups using OSINT, signal jammers, and Faraday bags. Targets have broadened from high-value individuals like executives to ordinary holders and their families. CertiK warns that the actual scale of such attacks is likely underestimated due to low reporting rates. Recommendations include using decoy wallets, geographic separation of seed phrases, multisig mechanisms, and comprehensive security training for individuals and organizations. The study underscores that protecting people, not just assets, is critical as wrench attacks become a structured threat in the crypto ecosystem.

marsbit03/31 10:19

CertiK Releases Skynet Report: 'Wrench Attacks' Surge 75% in 2025, Physical Violence Becomes Major Threat in Crypto Space

marsbit03/31 10:19

The Unchanging Foundation Through Bull and Bear Markets: On the Occasion of BitMart's 8th Anniversary

BitMart Celebrates 8 Years: A Journey of Compliance, Security, and Ecosystem Growth As the cryptocurrency industry matures, centralized exchanges (CEXs) face two major challenges: regulatory compliance and ecosystem development. BitMart, now celebrating its 8th anniversary, has established itself through a strong commitment to both. Founded in 2017 in the U.S., BitMart prioritized regulatory compliance from the start. By early 2026, it achieved full compliance across all 50 U.S. states and territories, becoming one of the few crypto exchanges operating legally nationwide. Security is another cornerstone. BitMart employs a multi-layered defense system: 99% of user assets are stored in cold wallets, MPC technology secures key management, and advanced protocols like WAF and XDR protect the platform. It also collaborates with institutional custodians and maintains a large blacklist database for AML monitoring. Ecosystem growth has been central to BitMart’s strategy. In 2025, it upgraded its trading systems, achieving ultra-low latency and high throughput. The platform listed 1,193 assets, nearly 50% of which were first listings, with 93 assets surging over 1,000%. BitMart expanded into PayFi with BitMart Card, travel bookings, P2P trading, and RWA-linked products. It also introduced AI tools like X Insight and Beacon Trading Assistant, and launched a Web3 wallet in 2026 to streamline on-chain transactions. By the end of 2025, BitMart had over 13 million users, 1,700+ trading pairs, and saw its native token BMX grow 445% in market cap. Rather than seeking shortcuts, BitMart has consistently chosen the path of long-term, sustainable growth—building trust through compliance, security, and innovation.

Odaily星球日报03/31 06:24

The Unchanging Foundation Through Bull and Bear Markets: On the Occasion of BitMart's 8th Anniversary

Odaily星球日报03/31 06:24

Chain Reaction After Credential Theft Case: AI Gateway Giant LiteLLM Cuts Ties with Delve, Mired in Compliance Fraud Scandal

A major security and compliance crisis has unfolded in the AI infrastructure sector. Popular AI gateway developer LiteLLM has officially announced the termination of all cooperation with compliance startup Delve and plans to redo its security certification through a competitor, Vanta. The rupture was triggered by a recent severe credential-stealing malware attack on LiteLLM's open-source version. Prior to the attack, LiteLLM had relied on Delve's services to obtain two key security certifications. However, Delve is now facing serious integrity allegations, accused of misleading clients by fabricating data and employing auditors who provided rushed certifications, creating a false sense of compliance. Despite public denials from Delve's founder, the release of evidence by an anonymous whistleblower has intensified scrutiny. In response, LiteLLM's CTO, Ishaan Jaffer, outlined the company's stance: immediately cutting ties with Delve, recommencing certification with Vanta, and engaging an independent third-party auditor for a thorough review of its compliance controls. As a leading AI gateway with millions of developers, LiteLLM's decisive action highlights the industry's heightened sensitivity to authentic compliance. In the wake of the attack, companies are shifting focus from mere paper-based compliance to seeking genuine technical security verification.

marsbit03/31 01:18

Chain Reaction After Credential Theft Case: AI Gateway Giant LiteLLM Cuts Ties with Delve, Mired in Compliance Fraud Scandal

marsbit03/31 01:18

Tiger Research: What AI Services Do Crypto Companies Offer?

This Tiger Research report examines the growing trend of cryptocurrency companies integrating AI services, driven by a fear of missing out (FOMO). Unlike previous cycles, established and profitable firms like Coinbase and Binance are leading this charge, moving AI from theory to practical necessity. Key areas of AI adoption include: - **Research:** Projects like Surf are building crypto-native AI tools that aggregate fragmented on-chain and social data, providing more accurate answers than general AI models. - **Trading:** Exchanges are deploying AI to let users execute trades via natural language commands, lowering the barrier for non-developers and automating strategies. The goal is user retention in an increasingly competitive landscape. - **Security/Audit:** Firms like CertiK use AI to enhance smart contract audits by automating initial code scans and enabling post-audit, real-time monitoring, thus addressing previous security blind spots. - **Payment Infrastructure:** Protocols are emerging to enable AI agents to make autonomous payments (e.g., for APIs or services) using on-chain wallets and stablecoins. Circle’s proposed Gateway-x402 integration is a notable example, though this field is still nascent. The push is fueled by rapid AI advancements (e.g., MCP, OpenClaw) and competitive anxiety. However, the report cautions that while adoption is accelerating, the gap between offering a feature and its actual, trusted use remains significant. The motivation is strategic positioning for an AI-driven future, not just marketing.

marsbit03/30 06:41

Tiger Research: What AI Services Do Crypto Companies Offer?

marsbit03/30 06:41

活动图片

Популярные категорииright-arrow

Популярные тегиright-arrow