CryptoPulse 安全快讯
Third X100 Exploit Transaction Pulls 550,000 X From Uniswap Pool
（TheDefiant）
A different sender routed about 549,916 X and 1,909 USDT to a new beneficiary, while the affected pool held less than 200 USDT.
Third X100 Exploit Transaction Pulls 550,000 X From Uniswap Pool
（TheDefiant）
A different sender routed about 549,916 X and 1,909 USDT to a new beneficiary, while the affected pool held less than 200 USDT.
thedefiant.io
Third X100 Exploit Transaction Pulls 550,000 X From Uniswap Pool
A third X100 exploit transaction removed roughly 550,000 X from Uniswap V3 using the project's Senate governance path.
CryptoPulse 安全快讯
Electrum Patches Wallet Flaw Exploited Through Malicious Servers
（TheDefiant）
A malicious server can substitute a fake payment, then trick the user into signing it while raising the transaction fee. Develope…
Electrum Patches Wallet Flaw Exploited Through Malicious Servers
（TheDefiant）
A malicious server can substitute a fake payment, then trick the user into signing it while raising the transaction fee. Develope…
thedefiant.io
Electrum Patches Wallet Flaw Exploited Through Malicious Servers
Electrum 4.8.3 fixes an actively exploited malicious-server flaw that can redirect payments when users raise transaction fees.
CryptoPulse 安全快讯
X100 Exploit Nets 4.85 Million USDT After Governance Takeover
（TheDefiant）
Two transactions turned treasury tokens and liquidity positions into USDT; Blockaid warned that the Ethereum attack was ongoing.
X100 Exploit Nets 4.85 Million USDT After Governance Takeover
（TheDefiant）
Two transactions turned treasury tokens and liquidity positions into USDT; Blockaid warned that the Ethereum attack was ongoing.
thedefiant.io
X100 Exploit Nets 4.85 Million USDT After Governance Takeover
X100 attackers realized about 4.85 million USDT through governance-controlled token sales and liquidity withdrawals, Ethereum records show.
CryptoPulse 安全快讯
Electrum Patches Wallet Flaw Exploited Through Malicious Servers
（TheDefiant）
A malicious server can substitute a fake payment, then trick the user into signing it while raising the transaction fee. Develope…
Electrum Patches Wallet Flaw Exploited Through Malicious Servers
（TheDefiant）
A malicious server can substitute a fake payment, then trick the user into signing it while raising the transaction fee. Develope…
thedefiant.io
Electrum Patches Wallet Flaw Exploited Through Malicious Servers
Electrum 4.8.3 fixes an actively exploited malicious-server flaw that can redirect payments when users raise transaction fees.
CryptoPulse 日报 · 10-25
安全 · 24h
· X100 Exploit Proceeds Split Into Four 400-ETH Wallets（TheDefiant）
· Agora Says Initia Exploit Hit Third-Party Product Using AUSD（TheDefiant）
· CoinDCX Absorbs Losses, Credits Users After Failed Sweep of Hacked Deposit Addresses（Unchained）
叙事与项目 · 24h
· A hash-only rollup: OP Stack L2 accounts as Lamport-style hash chains, no ECDSA inside th…（ETHResearch）
· Firedancer makes bounty hunters burn 1 SOL even for duplicate bug reports（Cryptoslate）
· Circle’s new USDC auctions let institutions collect the fees others pay to cash out（Cryptoslate）
监管与宏观 · 24h
· Crypto longs lose $404 million in four hours as bitcoin briefly slips below $80,000（TheBlock）
· Strategy, Strive face balancing act between bitcoin buying and preferred stock dividends（CoinDesk）
· Ether Falls Below $2,300 as 28-Day Loss Reaches 14.7%（TheDefiant）
今日日历
· ETH Hoodi Glamsterdam fork（协议升级）
28+ 源自动精选 · 不构成投资建议
安全 · 24h
· X100 Exploit Proceeds Split Into Four 400-ETH Wallets（TheDefiant）
· Agora Says Initia Exploit Hit Third-Party Product Using AUSD（TheDefiant）
· CoinDCX Absorbs Losses, Credits Users After Failed Sweep of Hacked Deposit Addresses（Unchained）
叙事与项目 · 24h
· A hash-only rollup: OP Stack L2 accounts as Lamport-style hash chains, no ECDSA inside th…（ETHResearch）
· Firedancer makes bounty hunters burn 1 SOL even for duplicate bug reports（Cryptoslate）
· Circle’s new USDC auctions let institutions collect the fees others pay to cash out（Cryptoslate）
监管与宏观 · 24h
· Crypto longs lose $404 million in four hours as bitcoin briefly slips below $80,000（TheBlock）
· Strategy, Strive face balancing act between bitcoin buying and preferred stock dividends（CoinDesk）
· Ether Falls Below $2,300 as 28-Day Loss Reaches 14.7%（TheDefiant）
今日日历
· ETH Hoodi Glamsterdam fork（协议升级）
28+ 源自动精选 · 不构成投资建议
CryptoPulse 安全快讯
Initia hack drove its USDC bridge reserve down to $63 as withdrawals failed
（Cryptoslate）
Bitquery linked failed exits to depleted backing for Initia balances as the project outlined a patch and ongoing recovery work. R…
Initia hack drove its USDC bridge reserve down to $63 as withdrawals failed
（Cryptoslate）
Bitquery linked failed exits to depleted backing for Initia balances as the project outlined a patch and ongoing recovery work. R…
CryptoSlate
Initia hack drove its USDC bridge reserve down to $63 as withdrawals failed
The Initia hack depleted bridge reserves and disrupted USDC withdrawals on October 23, as Bitquery traced losses and the project outlined repair work.
CryptoPulse 安全快讯
Initia hack drove its USDC bridge reserve down to $63 as withdrawals failed
（Cryptoslate）
Bitquery linked failed exits to depleted backing for Initia balances as the project outlined a patch and ongoing recovery work. R…
Initia hack drove its USDC bridge reserve down to $63 as withdrawals failed
（Cryptoslate）
Bitquery linked failed exits to depleted backing for Initia balances as the project outlined a patch and ongoing recovery work. R…
CryptoSlate
Initia hack drove its USDC bridge reserve down to $63 as withdrawals failed
The Initia hack depleted bridge reserves and disrupted USDC withdrawals on October 23, as Bitquery traced losses and the project outlined repair work.
CryptoPulse 安全快讯
AI agents help rescue ETH’s Glamsterdam fork, ‘Steal My Bitcoin’ site: Hodler’s Digest
（Cointelegraph）
Similar to the Hugging Face hack, Ethereum researchers have set up an AI Agent message board to help rescue the Glamsterdam fork.…
AI agents help rescue ETH’s Glamsterdam fork, ‘Steal My Bitcoin’ site: Hodler’s Digest
（Cointelegraph）
Similar to the Hugging Face hack, Ethereum researchers have set up an AI Agent message board to help rescue the Glamsterdam fork.…
Cointelegraph
AI Agents Rescue ETH’s Glamsterdam Fork, ‘Steal My Bitcoin’ Site: Hodler’s Digest
Ethereum has a message board for AI Agents to collaborate on finding vulnerabilities caused by Glamsterdam. PHP vulnerable site says Steal My Bitcoin, if you can. Someone could.
CryptoPulse 日报 · 10-26
叙事与项目 · 24h
· Lido opens larger Ethereum validators with a 32 ETH operator bond（Cryptoslate）
· Standard Chartered-led Anchorpoint says it’s not rushing retail stablecoin（Cointelegraph）
· Paolo Ardoino wants AI to run Bitcoin mines. Who gets permission to act?（Cryptoslate）
监管与宏观 · 24h
· Crypto longs lose $404 million in four hours as bitcoin briefly slips below $80,000（TheBlock）
· Bitcoin ETFs Snap Two-Week Losing Streak Despite Late-Week Slide（Decrypt）
今日日历
· ETH Hoodi Glamsterdam fork（协议升级）
· ADA Amaru Beta 发布（版本发布）
28+ 源自动精选 · 不构成投资建议
叙事与项目 · 24h
· Lido opens larger Ethereum validators with a 32 ETH operator bond（Cryptoslate）
· Standard Chartered-led Anchorpoint says it’s not rushing retail stablecoin（Cointelegraph）
· Paolo Ardoino wants AI to run Bitcoin mines. Who gets permission to act?（Cryptoslate）
监管与宏观 · 24h
· Crypto longs lose $404 million in four hours as bitcoin briefly slips below $80,000（TheBlock）
· Bitcoin ETFs Snap Two-Week Losing Streak Despite Late-Week Slide（Decrypt）
今日日历
· ETH Hoodi Glamsterdam fork（协议升级）
· ADA Amaru Beta 发布（版本发布）
28+ 源自动精选 · 不构成投资建议
CryptoPulse 安全快讯
Foundation Links Passport Phishing Emails to Compromised Cloudflare API Keys
（TheDefiant）
Recipients reported personal and purchase details in the messages; the company said Passport hardware and funds were safe.
Foundation Links Passport Phishing Emails to Compromised Cloudflare API Keys
（TheDefiant）
Recipients reported personal and purchase details in the messages; the company said Passport hardware and funds were safe.
thedefiant.io
Foundation Links Passport Phishing Emails to Compromised Cloudflare API Keys
Foundation said it revoked API keys after Passport phishing emails, while recipients reported personal details and past purchases in the messages.
CryptoPulse 安全快讯
Foundation Links Passport Phishing Emails to Compromised Cloudflare API Keys
（TheDefiant）
Recipients reported personal and purchase details in the messages; the company said Passport hardware and funds were safe.
Foundation Links Passport Phishing Emails to Compromised Cloudflare API Keys
（TheDefiant）
Recipients reported personal and purchase details in the messages; the company said Passport hardware and funds were safe.
thedefiant.io
Foundation Links Passport Phishing Emails to Compromised Cloudflare API Keys
Foundation said it revoked API keys after Passport phishing emails, while recipients reported personal details and past purchases in the messages.
CryptoPulse 安全快讯
Passport Wallet Maker Foundation Traces Phishing Emails to Backend Breach, Promises Report
（Unchained）
Foundation first pointed to compromised Cloudflare API keys, then its CEO said attackers got in through a self-hosted app and lik…
Passport Wallet Maker Foundation Traces Phishing Emails to Backend Breach, Promises Report
（Unchained）
Foundation first pointed to compromised Cloudflare API keys, then its CEO said attackers got in through a self-hosted app and lik…
Unchained
Passport Wallet Maker Foundation Traces Phishing Emails to Backend Breach, Promises Report
Foundation first pointed to compromised Cloudflare API keys, then its CEO said attackers got in through a self-hosted app and likely reached the customer support inbox.
CryptoPulse 安全快讯
Passport Wallet Maker Foundation Traces Phishing Emails to Backend Breach, Promises Report
（Unchained）
Foundation first pointed to compromised Cloudflare API keys, then its CEO said attackers got in through a self-hosted app and lik…
Passport Wallet Maker Foundation Traces Phishing Emails to Backend Breach, Promises Report
（Unchained）
Foundation first pointed to compromised Cloudflare API keys, then its CEO said attackers got in through a self-hosted app and lik…
Unchained
Passport Wallet Maker Foundation Traces Phishing Emails to Backend Breach, Promises Report
Foundation first pointed to compromised Cloudflare API keys, then its CEO said attackers got in through a self-hosted app and likely reached the customer support inbox.
CryptoPulse 安全快讯
Bitcoin hacking challenge finally falls as researcher proves critical PHP flaw is exploitable
（Cryptoslate）
The operator accepted the PHP challenge solve despite a wallet mistake, while the harder question remains who turns discoveries i…
Bitcoin hacking challenge finally falls as researcher proves critical PHP flaw is exploitable
（Cryptoslate）
The operator accepted the PHP challenge solve despite a wallet mistake, while the harder question remains who turns discoveries i…
CryptoSlate
Bitcoin hacking challenge finally falls as researcher proves critical PHP flaw is exploitable
A Bitcoin hacking challenge ended in a successful PHP exploit after researchers criticized its initial configuration.
CryptoPulse 安全快讯
PHP Hack: How Bitcoin Will Respond to the “Cyber Pandemic”
（BitcoinMagazine）
Bitcoin Magazine PHP Hack: How Bitcoin Will Respond to the “Cyber Pandemic” As global sites go offline over PHP flaws, Bitcoin Ma…
PHP Hack: How Bitcoin Will Respond to the “Cyber Pandemic”
（BitcoinMagazine）
Bitcoin Magazine PHP Hack: How Bitcoin Will Respond to the “Cyber Pandemic” As global sites go offline over PHP flaws, Bitcoin Ma…
Bitcoin Magazine
PHP Hack: How Bitcoin Will Respond To The “Cyber Pandemic”
As global sites go offline over PHP flaws, Bitcoin Magazine's Shinobi explains memory bugs, AI-driven hacking speeds, and whether Bitcoin faces any exposure.
CryptoPulse 安全快讯
Researcher Cracks Steal My Bitcoin Challenge With PHP Exploit
（TheDefiant）
A 0.02511679 BTC prize was at stake, but the operator had to transfer it after discovering the server held the wrong wallet key.
Researcher Cracks Steal My Bitcoin Challenge With PHP Exploit
（TheDefiant）
A 0.02511679 BTC prize was at stake, but the operator had to transfer it after discovering the server held the wrong wallet key.
thedefiant.io
Researcher Cracks 'Steal My Bitcoin' Challenge With PHP Exploit
Researcher Killa solved the Steal My Bitcoin PHP challenge. The exploit demonstrates server-side risks addressed by PHP's critical security patches.
CryptoPulse 安全快讯
Hackers found a way to steal Bitcoin without private keys
（Cryptoslate）
Version 4.8.3 fixes a malicious-server attack that can turn a manual fee increase into approval of an attacker-directed payment. …
Hackers found a way to steal Bitcoin without private keys
（Cryptoslate）
Version 4.8.3 fixes a malicious-server attack that can turn a manual fee increase into approval of an attacker-directed payment. …
CryptoSlate
Hackers found a way to steal Bitcoin without private keys
Bitcoin wallet Electrum patched a high-severity flaw after hackers exploited transaction fee increases to redirect payments and steal funds.
CryptoPulse 安全快讯
X100 Exploiter Sends 420.8 ETH to Tornado Cash
（TheDefiant）
Four holding wallets still contain about 1,602 ETH, while the distributor that sent the mixer deposits has been nearly emptied.
X100 Exploiter Sends 420.8 ETH to Tornado Cash
（TheDefiant）
Four holding wallets still contain about 1,602 ETH, while the distributor that sent the mixer deposits has been nearly emptied.
thedefiant.io
X100 Exploiter Sends 420.8 ETH to Tornado Cash
An X100 exploit-linked wallet deposited 420.8 ETH into Tornado Cash on Oct. 26. Four recipient wallets still hold about 1,602 ETH.
CryptoPulse 日报 · 10-27
安全 · 24h
· South Korea Arrests Seven in First Big AI-Assisted Hacking Case（Decrypt）
· Researcher Cracks 'Steal My Bitcoin' Challenge With PHP Exploit（TheDefiant）
· X100 Exploiter Sends 420.8 ETH to Tornado Cash（TheDefiant）
融资 · 24h
· Strategy s Weekly STRC Buyback Climbs to $205 Million While Its Bitcoin Stack Stays Put（Unchained）
· HOOD’s prediction markets to add $1.7B to revenue, exceed crypto by 2028: Bernstein（Cointelegraph）
· Elon Musk confirms $40 billion SpaceX debt deal for AI chips, warns of neocloud shakeout（CoinDesk）
叙事与项目 · 24h
· Canada opens consultation on stablecoins, citing US GENIUS Act（Cointelegraph）
· South Korean Officials Lean Toward Delaying Crypto Tax Until 2029: Report（Unchained）
· BlackRock joins SBI and Startale to link tokenized MMFs with Japanese yen stablecoins（TheBlock）
监管与宏观 · 24h
· Brazil’s Stock Market Crashes After Lula’s Upset Victory（Decrypt）
· Bitcoin Dips Below $80,000 Ahead of Fed Decision, Midterms（Decrypt）
· Bitcoin ETFs break 2-week outflow streak with $301M comeback（Cointelegraph）
今日日历
· ADA Amaru Beta 发布（版本发布）
· MNT Sequencer moves to Reth（协议升级）
28+ 源自动精选 · 不构成投资建议
安全 · 24h
· South Korea Arrests Seven in First Big AI-Assisted Hacking Case（Decrypt）
· Researcher Cracks 'Steal My Bitcoin' Challenge With PHP Exploit（TheDefiant）
· X100 Exploiter Sends 420.8 ETH to Tornado Cash（TheDefiant）
融资 · 24h
· Strategy s Weekly STRC Buyback Climbs to $205 Million While Its Bitcoin Stack Stays Put（Unchained）
· HOOD’s prediction markets to add $1.7B to revenue, exceed crypto by 2028: Bernstein（Cointelegraph）
· Elon Musk confirms $40 billion SpaceX debt deal for AI chips, warns of neocloud shakeout（CoinDesk）
叙事与项目 · 24h
· Canada opens consultation on stablecoins, citing US GENIUS Act（Cointelegraph）
· South Korean Officials Lean Toward Delaying Crypto Tax Until 2029: Report（Unchained）
· BlackRock joins SBI and Startale to link tokenized MMFs with Japanese yen stablecoins（TheBlock）
监管与宏观 · 24h
· Brazil’s Stock Market Crashes After Lula’s Upset Victory（Decrypt）
· Bitcoin Dips Below $80,000 Ahead of Fed Decision, Midterms（Decrypt）
· Bitcoin ETFs break 2-week outflow streak with $301M comeback（Cointelegraph）
今日日历
· ADA Amaru Beta 发布（版本发布）
· MNT Sequencer moves to Reth（协议升级）
28+ 源自动精选 · 不构成投资建议
CryptoPulse 安全快讯
SlowMist Finds Data-Stealing and Address-Swapping Code in Udesk Scripts
（TheDefiant）
The payload can alter both displayed and copied crypto deposit addresses, while its data collection extends beyond three site-spe…
SlowMist Finds Data-Stealing and Address-Swapping Code in Udesk Scripts
（TheDefiant）
The payload can alter both displayed and copied crypto deposit addresses, while its data collection extends beyond three site-spe…
thedefiant.io
SlowMist Finds Data-Stealing and Address-Swapping Code in Udesk Scripts
SlowMist found malicious code in Udesk-related customer-service scripts that harvests browser data and substitutes crypto deposit addresses.
CryptoPulse 安全快讯
SlowMist Finds Data-Stealing and Address-Swapping Code in Udesk Scripts
（TheDefiant）
The payload can alter both displayed and copied crypto deposit addresses, while its data collection extends beyond three site-spe…
SlowMist Finds Data-Stealing and Address-Swapping Code in Udesk Scripts
（TheDefiant）
The payload can alter both displayed and copied crypto deposit addresses, while its data collection extends beyond three site-spe…
thedefiant.io
SlowMist Finds Data-Stealing and Address-Swapping Code in Udesk Scripts
SlowMist found malicious code in Udesk-related customer-service scripts that harvests browser data and substitutes crypto deposit addresses.