News Heat Trend
Project Overview
GoPlus Security is building Web3's first decentralized security layer, providing comprehensive protection across all blockchain networks. Through its open, permissionless, and user-driven architecture, GoPlus can be seamlessly integrated by any blockchain or project to protect their users throughout their entire transaction lifecycle. By leveraging AVS and cutting-edge AI powered security solutions, it conducts thorough risk analysis and delivers smart, efficient and decentralized security services for users. GoPlus aims to create a more secure and user-friendly Web3 on-chain interaction environment by filling the gap of security layer in the current blockchain's architecture, providing users with more effective and better-experienced on-chain security protection.
A user lost approximately 75,800 USDC in another phishing attack due to failure to revoke a malicious Permit approval in time.
GoPlus Security issued a security alert stating that a user signed a malicious Permit transaction 183 days ago, resulting in approximately $1,625 worth of USDC being transferred by phishing attackers. Since the user did not revoke the relevant authorization thereafter, attackers exploited this authorization again to transfer approximately $75,780 worth of USDC.
GoPlus Security: A user mistakenly transferred 100,000 DAI due to an address poisoning attack.
GoPlus Security reported that a user fell victim to a typical address poisoning attack: the user mistakenly sent 100,000 DAI to a spoofed address after copying a visually similar address from their transaction history. In this incident, the user had previously sent 300,000 DAI to the legitimate target address; the attacker then sent 0.0003 DAI to the user from a malicious address with characters nearly identical to the legitimate one—before and after the address—thereby tricking the user into selecting the wrong address during their subsequent transfer. GoPlus Security advises users not to copy wallet addresses from transaction history, always verify the full address before sending funds, and conduct a small test transaction prior to any large transfer.
A user lost approximately 75,800 USDC in another phishing attack due to failure to revoke a malicious Permit approval in time.
GoPlus Security issued a security alert stating that a user signed a malicious Permit transaction 183 days ago, resulting in approximately $1,625 worth of USDC being transferred by phishing attackers. Since the user did not revoke the relevant authorization thereafter, attackers exploited this authorization again to transfer approximately $75,780 worth of USDC.
Ethereum Foundation Releases Institutional Guide: Emphasizes Network "Credible Neutrality", Resilience, and Governance Advantages
The Ethereum Foundation's Global Policy Strategy (GPS) team has released the guide "Ethereum Basics for Governments and Institutions," aiming to help policymakers and institutional decision-makers understand Ethereum's operating mechanisms, governance models, and differences from other blockchain solutions. The guide emphasizes that relying on centralized systems brings systemic risks, while decentralized blockchains have the potential to mitigate such risks. Not all blockchains possess the attribute of "credible neutrality," and differences in technical architecture and governance models among blockchains will directly affect whether they can serve as public infrastructure in the long term. Ethereum holds advantages in areas such as resilience, economic security, client diversity, and ecosystem. It has operated continuously without interruption since launching in 2015, with economic security provided by approximately $76 billion in staked ETH, whereas most other Layer 1 networks rely on a single client, presenting higher systemic risks. The Ethereum Foundation stated that building applications on Ethereum does not introduce new centralized counterparty risks, as no single institution can modify rules, restrict access, or halt network operations. In comparison, control over some other Layer 1 networks is concentrated in foundations or corporate entities, which may bring governance and dependency risks.
Related news
A user lost approximately 75,800 USDC in another phishing attack due to failure to revoke a malicious Permit approval in time.
GoPlus Security issued a security alert stating that a user signed a malicious Permit transaction 183 days ago, resulting in approximately $1,625 worth of USDC being transferred by phishing attackers. Since the user did not revoke the relevant authorization thereafter, attackers exploited this authorization again to transfer approximately $75,780 worth of USDC.
Ethereum Foundation Releases Institutional Guide: Emphasizes Network "Credible Neutrality", Resilience, and Governance Advantages
The Ethereum Foundation's Global Policy Strategy (GPS) team has released the guide "Ethereum Basics for Governments and Institutions," aiming to help policymakers and institutional decision-makers understand Ethereum's operating mechanisms, governance models, and differences from other blockchain solutions. The guide emphasizes that relying on centralized systems brings systemic risks, while decentralized blockchains have the potential to mitigate such risks. Not all blockchains possess the attribute of "credible neutrality," and differences in technical architecture and governance models among blockchains will directly affect whether they can serve as public infrastructure in the long term. Ethereum holds advantages in areas such as resilience, economic security, client diversity, and ecosystem. It has operated continuously without interruption since launching in 2015, with economic security provided by approximately $76 billion in staked ETH, whereas most other Layer 1 networks rely on a single client, presenting higher systemic risks. The Ethereum Foundation stated that building applications on Ethereum does not introduce new centralized counterparty risks, as no single institution can modify rules, restrict access, or halt network operations. In comparison, control over some other Layer 1 networks is concentrated in foundations or corporate entities, which may bring governance and dependency risks.
This week, tokens including SUI, FF, and CARDS will undergo large-scale unlocks.
This week, tokens including SUI, FF, and CARDS will undergo large-scale token unlocks: FF will unlock on June 29, with a value of approximately $6.76 million, representing 3.66% of its circulating supply; CARDS will unlock on June 29, with a value of approximately $7.27 million, representing 6.11% of its circulating supply; ZORA will unlock on June 29, with a value of approximately $1.21 million, representing 3.33% of its circulating supply; OP will unlock on June 29, with a value of approximately $3.12 million, representing 1.48% of its circulating supply; KMNO will unlock on June 30, with a value of approximately $4.57 million, representing 3.06% of its circulating supply; GUN will unlock on June 30, with a value of approximately $1.54 million, representing 12.69% of its circulating supply; GPS will unlock on July 1, with a value of approximately $6.40 million, representing 15.90% of its circulating supply; SUI will unlock on July 1, with a value of approximately $9.30 million, representing 0.34% of its circulating supply; EIGEN will unlock on July 1, with a value of approximately $8.61 million, representing 6.15% of its circulating supply; ENA will unlock on July 3, with a value of approximately $3.12 million, representing 0.48% of its circulating supply.
GoPlus Security: A user mistakenly transferred 100,000 DAI due to an address poisoning attack.
GoPlus Security reported that a user fell victim to a typical address poisoning attack: the user mistakenly sent 100,000 DAI to a spoofed address after copying a visually similar address from their transaction history. In this incident, the user had previously sent 300,000 DAI to the legitimate target address; the attacker then sent 0.0003 DAI to the user from a malicious address with characters nearly identical to the legitimate one—before and after the address—thereby tricking the user into selecting the wrong address during their subsequent transfer. GoPlus Security advises users not to copy wallet addresses from transaction history, always verify the full address before sending funds, and conduct a small test transaction prior to any large transfer.
GoPlus Security Alert: Users Lost Approximately $316,000 in USDC Due to Signing Malicious Permit2 Transactions
According to disclosures from the GoPlus Chinese community, a user lost approximately $316,000 worth of USDC after signing a malicious Permit2 transaction, which allowed attackers to drain funds from their wallet. GoPlus recommends users follow the “Four Don’ts” anti-phishing principles: don’t click on suspicious links; don’t install software from untrusted sources; don’t sign transactions with unclear or unverified content; and don’t send funds to unverified addresses. GoPlus also recommends installing the GoPlus security plugin to intercept phishing risks in real time.