News linked to both this project and an event.
21Shares has released an analysis report on the Binance hack, stating that on October 29, Binance suffered an attack of approximately $6.3 billion, of which about $3 billion in stolen assets have now been frozen, and Binance has committed to bearing all losses. Within 24 hours after the incident, Bitcoin fell slightly more than 2%, significantly lower than the roughly 26% decline Bitcoin experienced after the FTX incident in November 2022. 221Shares emphasized that this incident was a security breach affecting Binance as a single company, and that the Bitcoin network itself was not attacked. Binance stated that it will cover all losses through the SAFU fund and corporate funds. Calculated at a Bitcoin price of approximately $78,509, the 15,000 BTC held by the SAFU fund is worth about $1.18 billion, which can cover about 36% of the losses on unfrozen assets, with the remaining portion to be borne by corporate funds. The report also mentioned that Chainalysis has high confidence that the attack is linked to North Korea, but Binance and government agencies have not yet officially confirmed the attribution.In addition, 21Shares stated that the assets of its physically backed ETPs and ETFs are held in cold storage by third-party custodians such as BitGo, Coinbase Custody, Anchorage Digital, and Zodia Custody, and are not kept in exchange accounts. Therefore, they were not affected by this incident, and all of the company's products are trading normally.
According to Cointelegraph, the PHP Foundation admitted that a critical security vulnerability discovered as early as 2024 has yet to be patched due to flawed decision-making processes and understaffing within the security team, calling the delay a structural failure. The vulnerability could allow unauthenticated attackers to remotely execute code on affected servers. On August 11, security firm Calif and OpenAI independently reported the same issue, with Calif also demonstrating unconditional remote code execution, prompting the matter to be elevated to the highest security priority. PHP released emergency patches for two related critical vulnerabilities on Wednesday. Around the time of the patch release, government websites or services in the Netherlands, Finland, France, Germany, and Australia were temporarily taken offline, with the Netherlands shutting down its digital identity service. The Wikimedia Foundation also took some supporting services offline, causing disruptions to certain Wikipedia features. Japanese Prime Minister Sanae Takaichi called on website operators to install the patches as soon as possible. In the crypto sector, monitoring by SlowMist's MistEye service found that out of 1,488 evaluated domains, 793 showed direct PHP fingerprints. Cardano governance organization Intersect temporarily took its member portal offline. Both Coinbase and BitGo stated that their platforms were unaffected. Binance co-founder Changpeng Zhao advised users to exercise extreme caution when visiting websites over the next few days. PHP security team
Odaily reports: The PHP Foundation has stated that due to hesitant decision-making and insufficient resources, remediation work for a critical security vulnerability first discovered in 2024 stalled and restarted multiple times, and it characterized the delay as a "structural failure." PHP is a programming language widely used for websites and web applications.PHP has released emergency patches for two related critical vulnerabilities. Unauthenticated attackers could exploit the flaws to execute code on affected servers without logging in. Some government websites or online services in the Netherlands, Finland, France, Germany, and Australia were temporarily taken offline to prepare for patch installation.Security firm Calif and OpenAI separately reported the same underlying issue on August 11, and Calif also demonstrated unconditional remote code execution. Blockchain security firm SlowMist investigated PHP usage in the crypto industry and found direct PHP fingerprints on 793 of the 1,488 domains it assessed.Intersect has temporarily closed its Members Area, Coinbase said it has not found any affected PHP instances, and digital asset infrastructure company BitGo said its platform was not affected. Binance co-founder Changpeng Zhao reminded users to exercise heightened caution when visiting websites recently, and OpenAI has released a Codex skill for checking for vulnerable PHP versions. (Cointelegraph)
据 Cointelegraph 报道，比特币政策研究所（BPI）联合 Anchorage Digital、BitGo、Bitwise、Blockstream、Kraken、Ledger、MARA、Trezor 等多家加密机构，发布公开信敦促各大前沿 AI 实验室为比特币及开源软件开发者建立或扩展可信访问计划。 信中指出，Bitcoin Core 等开源维护者目前缺乏对 AI 实验室网络安全程序的访问渠道，被迫依赖能力较弱的开源模型，而比特币网络当前保护着逾 1 万亿美元资产，任何开源基础设施漏洞均可能危及用户毕生积蓄。BPI 同时披露，已收到多份报告显示包括潜在境外势力在内的复杂攻击者正借助先进 AI 能力持续发动攻击。
: Crypto infrastructure company BitGo will switch its exclusive cross-chain service provider for $7.3 billion worth of WBTC from LayerZero to Chainlink CCIP. Following the $292 million cross-chain bridge exploit at Kelp, multiple projects have announced migrations from LayerZero to Chainlink, with disclosed migration volumes totaling $14.5 billion. BitGo will use CCIP for future assets while retaining control over token contracts, rate limits, and transfer settings.
BitGo CEO Mike Belshe posted on social media stating that rather than hyping the narrative of "creating a hacker monster," it is better to conduct real verification. He stated that he has deposited 100 Bitcoins into a BitGo wallet, made the wallet address public, and issued a public challenge to Anthropic.
: Bitgo CEO Mike Belshe deposited 100 BTC into a public Bitcoin address on August 1, worth approximately $6.3 million at the time, and invited Anthropic's Claude model to attempt to move the funds out of the address. On-chain records show the wallet received the funds on July 31, and the balance had not been transferred out as of August 2. Anthropic previously disclosed that during 141,006 cybersecurity assessment runs, 3 incidents were found, with 6 evaluation sessions involving 3 models inadvertently interacting with real organizational systems. The models involved include Claude Opus 4.7, Claude Mythos 5, and an unreleased internal research model. The cause was a configuration error by third-party testing partner Irregular, which led to the test environment being connected to the internet. Anthropic stated that Claude Opus 4.7, during one evaluation, located a real website with the same name as a simulated company, exploited weak passwords and exposed services to recover infrastructure credentials, and accessed a production database containing hundreds of records. The company said the model was attempting to complete assigned tasks, not actively breaking constraints or pursuing independent goals. Belshe's challenge involves Bitgo's institutional custody platform, which uses multi-signature or multi-party computation technology to distribute signing authority across multiple independent keys. As of August 2, Anthropic had not publicly responded to the challenge.
according to monitoring by Onchain Lens, despite the hack of Humanity Protocol, a newly created wallet has received 62.68 million H tokens from BitGo, worth $7.65 million. The wallet is suspected to belong to VC Framework Ventures, though this has not yet been confirmed.