从Paradigm投资到软Rug,纪录Friend.Tech的激荡一年 | Web3尸检报告

区块律动2024-09-09 tarihinde yayınlandı2024-09-09 tarihinde güncellendi

İlgili Okumalar

Data Theft at Will! Major Vulnerability Exposed in This Popular AI Programming Tool

A critical vulnerability in Anthropic's Claude Code AI programming tool allowed attackers to bypass its network sandbox for over five months, enabling potential data exfiltration. Independent researcher Aonan Guan discovered a second complete bypass exploiting a null-byte injection in the SOCKS5 proxy. This flaw, present since the sandbox's launch in October 2025, let processes inside the sandbox access any host, contrary to user-configured domain whitelists. The attack chain involved manipulating hostnames (e.g., `attacker.com\x00.google.com`). JavaScript's `endsWith()` check would pass `.google.com`, while the underlying C `getaddrinfo()` function would only parse `attacker.com` due to the null byte, creating a parser discrepancy. Combined with a previously disclosed prompt injection method, this could leak API keys, credentials, and internal data. Anthropic silently fixed the issue in April 2026 without a security advisory, CVE, or user notification. The researcher noted that Claude Code itself confirmed the vulnerability's severity when tested. This incident highlights broader industry issues, as similar vulnerabilities found in Google's Gemini CLI and GitHub's Copilot Agent also lacked public disclosures. The report criticizes the false sense of security created by a broken sandbox and emphasizes the need for defense-in-depth and transparency in AI tool security.

marsbit2 saat önce

Data Theft at Will! Major Vulnerability Exposed in This Popular AI Programming Tool

marsbit2 saat önce

Under the squeeze between giants Tether and Circle, how can foreign exchange stablecoins break through?

In the face of dominance by Tether (USDT) and Circle (USDC), new entrants in the stablecoin space face significant challenges competing directly, especially in the foreign exchange (FX) market. A more viable and efficient path forward is the adoption of synthetic foreign exchange (Forex) built atop existing USD stablecoin rails. The rise of stablecoin neo-banks represents the next major growth area for mass crypto adoption, with FX becoming a core component. However, replicating the vast liquidity, distribution channels, and network effects of USDT/USDC is extremely difficult for new FX stablecoin issuers. The total market cap of all FX stablecoins is a fraction (roughly 1/700th) of USD stablecoins, leading to issues like poor liquidity, peg instability, limited acceptance, and complex compliance hurdles. Instead of issuing spot FX stablecoins, the article advocates for a model inspired by traditional finance's non-deliverable forwards (NDFs). Users would continue to hold underlying USDT/USDC, while their account balances are displayed and economically settled in their preferred local currency through MtM (Mark-to-Market) NDF structures. This approach leverages the deep liquidity and infrastructure of USD stablecoins while providing synthetic forex exposure. Key advantages include strong peg stability via oracles, retained access to USD stablecoin yields and liquidity, high capital efficiency, and easy scalability to new currencies. Primary use cases for this on-chain NDF forex include: 1. Neo-banks, custodians, and wallets offering multi-currency accounts to attract international users and increase deposits. 2. Forex carry trade strategies, potentially offering more stable and scalable yields compared to crypto-native products like Ethena. 3. Global corporate payments, allowing businesses to receive payments in local currencies while hedging forex risk on-chain, similar to services offered by Stripe in traditional finance. This synthetic forex model presents a pragmatic solution to overcome the network effects of incumbents and unlock the next wave of stablecoin utility for global consumers and businesses.

marsbit3 saat önce

Under the squeeze between giants Tether and Circle, how can foreign exchange stablecoins break through?

marsbit3 saat önce

İşlemler

Spot
Futures
活动图片