News Heat Trend
Project Overview
TokenPocket is a decentralized multi-chain wallet comprised of three main business segments: wallet products, on-chain products, and stablecoin payments. Its services cover over 200 countries and regions worldwide. TPT, or TokenPocket Token, is the utility token of the TokenPocket ecosystem (TP ecosystem for short). TPT can be circulated in various scenarios, serving as a means of payment and proof of membership rights. Starting July 1, 2025, the TokenPocket Foundation plans to implement a semi-annual buyback and burn program for TPT, with the goal of reducing the total supply of TPT from 3.466 billion to 1 billion.
Related news
TokenPocket × USDD Subsidy Season Kicks Off, Launching 50% Gas Subsidy and 5000 USDD Rewards
TokenPocket × USDD Gas Boost Season is now live, running from September 15 to September 28. During the event, users making USDD transfers on the TRON network via TokenPocket can pay gas fees directly with USDD and enjoy a 50% gas subsidy. Additionally, users who complete designated on-chain tasks can participate in the event leaderboard to share in a total of 5,000 USDD in rewards and have a chance to win a KeyPal hardware wallet. This campaign is co-launched by USDD, TokenPocket, and KeyPal, further expanding USDD's use cases for gas payments and stablecoin transfers on the TRON blockchain.
SlowMist: iOS Safari DarkSword Attack Can Steal Wallet Inputs, Zero-Click Trigger with Six-Vulnerability Chain
Odaily News, According to a disclosure by the SlowMist security team, they have detected an attack campaign disguised as a free VPS service, specifically targeting iPhone Safari browsers running iOS versions 18.4 to 18.6.2. The attackers exploited a chain of six vulnerabilities codenamed DarkSword to form a complete attack sequence, covering WebKit remote code execution, sandbox escape, and kernel read/write operations. This allows them to access app container files and keychain data without user awareness, and record keyboard inputs while wallets such as imToken, TokenPocket, or TronLink are in the foreground.The SlowMist team stated that all six aforementioned vulnerabilities have been patched by Apple, and the current attack constitutes reuse of an n-day vulnerability chain. Merely visiting a malicious page does not directly prove that mnemonic phrases or private keys have been stolen, and device forensics is still required for confirmation. iOS/iPadOS users are advised to upgrade their systems to version 18.7.3 or 26.3 and above as soon as possible.